AZ-800 Dumps Help You Study Objectives

1. You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server.

You build an app named App1.

You need to configure continuous integration and continuous deployment (CI/CD) of App1 to VM1.

What should you create first?

2. HOTSPOT

Your on-premises network contains an Active Directory domain named contoso.com and 500 servers that run Windows Server. All the servers are Azure Arc-enabled and joined to contoso.com.

You need to implement PowerShell Desired State Configuration (DSC) on all the servers. The solution must minimize administrative effort.

Where should you store the DSC scripts, and what should you use to apply DSC to the servers? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

3. You need to implement a name resolution solution that meets the networking requirements.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point

4. HOTSPOT

You need to ensure that data availability on SSPace1 meets the technical requirements.

What is the maximum number of physical disks that can fail on each disk? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

5. You have a server that runs Windows Server and has the DHCP Server role installed.

The server has a scope named Scope! that has the following configurations:

• Address range: 192.168.0.2 to 192.16B.1.2M . Mask 255.255.254.0

• Router: 192.168.0.1

• Lease duration: 3 days

• DNS server 172.16.0.254

You have 50 Microsoft Teams Phone devices from the same vendor. All the devices have MAC addresses within the same range.

You need to ensure that all the Teams Phone devices that receive a lease from Scope1 have IP addresses in the range of 192.168.1.100 to 192.168.1.200. The solution must NOT affect other DHCP clients that receive IP configurations from Scope1.

What should you create?

6. You have an Active Directory Domain Services (AD DS) domain that contains the domain controllers shown in the following table.





The domain contains an app named App1 that uses a custom application partition to store configuration data.

You decommission App1.

When you attempt to remove the custom application partition, the process fails.

Which domain controller is unavailable?

7. You need to configure remote administration to meet the security requirements.

What should you use?

8. DRAG DROP

Your network contains an Active Directory domain named contoso.com. The domain contains group managed service accounts (gMSAs). You have a server named Server1 that runs Windows Server and is in a workgroup. Server! hosts Windows containers.

You need to ensure that the Windows containers can authenticate to contoso.com.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

9. You have an Azure virtual machine named VM1 that runs Windows Server and has the following configurations:

✑ Size: D2s_v4

✑ Operating system disk: 127-GiB standard SSD

✑ Data disk 128-GiB standard SSD

✑ Virtual machine generation: Gen 2

You plan to perform the following changes to VM1:

✑ Change the virtual machine size to D4s_v4.

✑ Detach the data disk.

✑ Add a new standard SSD.

Which changes require downtime for VM1?

10. HOTSPOT

You have an Active Directory Domain Services (AD DS) domain that contains the member servers shown in the following table.





Server3 contains a data disk named Disk1 that has Data Deduplication installed.

Disk1 contains the files shown in the following table.





Server3 fails.

You need to recover the files on Disk1.

Which files can you recover if you attach Disk1 to Server 1, and which files can you recover if you attach Disk1 to Server2? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

11. You have an Azure Active Directory Domain Services (Azure AD DS) domain named contoso.com.

You need to provide an administrator with the ability to manage Group Policy Objects (GPOs). The solution must use the principle of least privilege.

To which group should you add the administrator?

12. DRAG DROP

You deploy a single-domain Active Directory Domain Services (AD DS) forest named contoso.com.

You deploy a server to the domain and configure the server to run a service.

You need to ensure that the service can use a group managed service account (gMSA) to authenticate.

Which three PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.

13. Task 1

You need to create a group-managed service account (gMSA) named gMSA1 and make gMSA1 available on SRV1.

14. HOTSPOT

You need to configure network communication between the Seattle and New York offices. The solution must meet the networking requirements.

What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

15. HOTSPOT

Which groups can you add to Group3 and Group5? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

16. HOTSPOT

You have a Windows Server container host named Server1 and an Azure subscription.

You deploy an Azure container registry named Registry1 to the subscription.

On Server1, you create a container image named image1.

You need to store imager in Registry1.

Which command should you run on Server1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

17. HOTSPOT

You have an Azure subscription that contains the virtual machines shown in the following table.





You plan to implement Azure Automanage for Windows Server.

You need to identify the operating system prerequisites.

Which virtual machines support Hotpatch, and which virtual machines support SMB over QUIC? To answer select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

18. DRAG DROP

You create a new Azure subscription.

You plan to deploy Azure Active Directory Domain Services (Azure AD DS) and Azure virtual machines. The virtual machines will be joined to Azure AD DS.

You need to deploy Active Directory Domain Services (AD DS) to ensure that the virtual machines can be deployed and joined to Azure AD DS.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

19. HOTSPOT

You need to sync files from an on premises server named Server1 to Azure by using Azure File Sync.

You have a cloud tiering policy that is configured for 30 percent free space and 70 days.

Volume E on Server1 is 500 GB.

A year ago, you configured E:Data on Server1 to sync by using Azure File Sync.

The files that are visible in E:Data are shown in the following table.





Volume E does NOT contain any other files.

Where are File1 and File3 located? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

20. You have a server named Server1 that runs Windows Server.

The disks on Server1 are configured as shown in the following exhibit.





You need to convert volume E to ReFS.

The solution must meet the following requirements:

• Preserve the existing data on volume E.

• Minimize administrative effort.

What should you do first?

21. Task 6

You need to use Azure File Sync 10 replicate the contents of C:app on SRV1 to an Azure file share named sharel1.

The required source files are located in a folder named \dc1.contoso.cominstall.

22. Task 12

You need to create a Group Policy Object (GPO) named GPO1 that only applies to a group named Member Servers.

23. You have an on-premises server named Server1 that runs Windows Server. You have an Azure virtual network that contains an Azure virtual network gateway. You need to connect only Server1 to the Azure virtual network.

What should you use?

24. Topic 2, Fabrikam inc.



Overview

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.



To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more Information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.



At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.



To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements, if the case study has an All Information tab. note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.



Overview

Fabrikam, Inc. Is a manufacturing company that has a main office In New York and a branch office in Seattle.



On-premises Servers

The on-premises network contains servers that run Windows Server as shown in the following table.





DC1 hosts all the operation master roles.

WEB1 and WEB2 run an Internet Information Services (IIS) web app named Webapp1.



On-premises Network

The New York and Seattle offices are connected by using redundant WAN links.

The client computers in each office get IP addresses from their local DHCP server.

DHCP! contains a scope named Scope1 that has addresses for the New York office.

DHCP2 contains a scope named Scope2 that has addresses for the Seattle office.



Group Policy Object (GPOs)

The cwp.fabrikam.com domain contains the organizational units (OUs) and custom Group Policy Objects (GPOs) shown in the following table.







Requirements:

Fabrikam Identifies the following planned changes:

• Create a single Azure subscription named Sub1 that will contain a single Azure virtual network named Vnet1.

• Replace the WAN links between the Seattle and New York offices by using Azure Virtual

WAN and ExpressRoute. Both on-premises offices will be connected to Vnet1 by using ExpressRoute.

• Create three Azure file shares named newyorkfiles, seattfefiles, and companyfiles.

• Create a domain controller named dc3.corp.fabrikam,com in Vnet1.

• Deploy an Azure Virtual Desktop host pool lo Vnet1. The Azure Virtual Desktop session hosts will be hybrid Azure AD joined.

• License all servers for Microsoft Defender for servers.

• Use Azure Policy to enforce configuration management policies on the servers in Azure and on-premises.



Networking Requirements

Fabrikam identifies the following security requirements:

• Apply GP04 to the Azure Virtual Desktop session hosts. Ensure that Azure Virtual Desktop user sessions lock after being idle for 10 minutes. Users must be able to control the lockout lime manually from their client computer.

• Ensure that server administrators request approval before they can establish a Remote Desktop connection to an Azure virtual machine. If the request is approved, the connection must be established within two hours.

• Prevent user passwords from containing all or part of words that are based on the company name, such as Fab. fabrikam or fsbr! |.

• Ensure that all instances of Webapp1 use the same service account. The password of the service account must change automatically every 30 days.

• Prevent domain controllers from directly contacting hosts on the internet.



File Sharing Requirements

You need to configure the synchronization of Azure files to meet the following requirements:

• Ensure that seattlefiles syncs to FS2.

• Ensure that newyorkfiles syncs to FS1.

• Ensure that companyfiles syncs to both FS1 and FS2.



DRAG DROP

You need to meet the security requirements for passwords.

Where should you configure the components for Azure AD Password Protection? lo answer, drag the appropriate components to the correct locations. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE Each correct selection is worth one point.

25. Your network contains an Active Directory Domain Services (AD DS) domain- The domain contains 10 servers that run Windows Server. The servers have static IP addresses. You plan to use DHCP to assign IP addresses to the servers.

You need to ensure that each server always receives the same IP address.

Which type of identifier should you use to create a DHCP reservation for each server?

26. DRAG DROP

You have a server named Server1.

You plan to use Storage Spaces to expand the storage available to Server1. You attach eight physical disks to Server1. Four disks are HDDs and four are SSDs.

You need to create a volume on Server1 that will use the storage on all the new disks. The solution must provide the fastest read performance for frequently used files.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

27. You need to implement an availability solution for DHCP that meets the networking requirements.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

28. HOTSPOT

You have an Azure Active Directory Domain Services (Azure AD DS) domain.

You create a new user named Admin1.

You need Admin1 to deploy custom Group Policy settings to all the computers in the domain. The solution must use the principle of least privilege.

What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point

29. You need to implement the planned changes for the Azure DNS Private Resolver.

Which private DNS zones can you use for name resolution?

30. HOTSPOT

You have an on-premises server named Server1 that runs Windows Server and has internet connectivity.

You have an Azure subscription.

You need to monitor Server1 by using Azure Monitor.

Which resources should you create in the subscription, and what should you install on Server1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

31. Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1.

On Server 1, you install Windows Admin Center and use Windows Admin Center to remove BUILTlNUsers from the allowed groups.

Vou discover that all users can still sign in to Windows Admin Center.

Vou need to prevent unauthorized users from signing in to Windows Admin Center.

What should you do in Windows Admin Center?

32. You have on-premises servers that run Windows Server as shown in the following table.





You have an Azure subscription that contains a virtual machine named VMV

You need to ensure that you can manage all the servers by using Azure Arc. The solution must minimize administrative effort.

On which servers should you install the Azure Connected Machine agent?

33. You need to meet the technical requirements for the site links.

Which users can perform the required tasks?

34. DRAG DROP

You have a server named Server1 that runs Windows Server and has the Hyper V server role installed. Server1 hosts a virtual machine named VM1.

Server1 has an NVMe storage device. The device is currently assigned to VM1 by using Discrete Device Assignment.

You need to make the device available to Server1.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

35. HOTSPOT

You need to meet the technical requirements for VM1.

Which cmdlet should you run first? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

36. HOTSPOT

You have a server named Server1 that runs Windows Server.

Server1 has a single network interface and the Hyper-V virtual switches shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

37. Your network contains an Active Directory Domain Services (AD DS) domain.

The domain contains the domain controllers shown in the following table.





You need to ensure that if an attacker compromises the computer account of RODC1, the attacker cannot view the Employee-Number AD DS attribute.

Which partition should you modify?

38. You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. You plan deploy 100 new Azure virtual machines that will run Windows Server. You need to ensure that each new virtual machine is joined to the AD DS domain.

What should you use?

39. HOTSPOT

You have an Azure subscription that contains the storage accounts shown in the following table.





In the East US Azure region, you create a storage sync service named Synd.

You need to create a sync group in Synd.

Which storage accounts can you use, and what can you specify as the cloud endpoints? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

40. HOTSPOT

Your network contains an Azure AD Domain Services domain named contoso.com.

You need to configure a password policy for the local user accounts on the Azure virtual machines joined to contoso.com.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

41. Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com The domain contains three servers that run Windows Server and have the Hyper-V server rote installed. Each server has a Switch Embedded Teaming (SET) team

You need to verity that Remote Direct Memory Access (RDMA) and all the required Windows Server settings are configured properly on each server.

What should you use?

42. HOTSPOT

Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com.

The forest contains a child domain named east.contoso.com and the servers shown in the following table.





You need to create a folder for the Central Store to manage Group Policy template files for the entire forest.

What should you name the folder, and on which server should you create the folder? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

43. HOTSPOT

You have a server named Server1 that has the Hyper-V server role installed.

Server1 hosts the virtual machines shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

44. You have servers that have the DNS Server role installed.

The servers are configured as shown in the following table.





All the client computers in the New York office use Server2 as the DNS server.

You need to configure name resolution in the New York office to meet the following requirements:

✑ Ensure that the client computers in New York can resolve names from contoso.com.

✑ Ensure that Server2 forwards all DNS queries for internet hosts to 131. 107.100.200.

The solution mustNOTrequire modifications to Server1.

Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

45. HOTSPOT

Your network contains two Active Directory Domain Services (AD DS) forests named contoso.com and fabrikam.com. A two-way forest trust exists between the forests. Each forest contains a single domain.

The domains contain the servers shown in the following table.





You need to configure resources based constrained delegation so that the users. In contoso.com can use Windows Admin Center on Server) to connect to Server? How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

46. You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with a Microsoft Entra tenant.

You deploy an app that adds custom attributes to the domain.

From Azure Cloud Shell, you discover that you cannot query the custom attributes of users.

You need to ensure that the custom attributes are available in Microsoft Entra ID.

Which task should you perform from Microsoft Entra Connect first?

47. DRAG DROP

You deploy a single-domain Active Directory Domain Services (AD DS) forest named contoso.com.

You deploy five servers to the domain. You add the servers to a group named iTFarmHosts.

You plan to configure a Network Load Balancing (NIB) cluster named NLBCluster.contoso.com that will contain the five servers.

You need to ensure that the NLB service on the nodes of the cluster can use a group managed service account (gMSA) to authenticate.

Which three PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdiets from the list of cmdlets to the answer area and arrange them in the correct order.

48. HOTSPOT

You need to sync files from an on-premises server named Server1 to Azure by using Azure File Sync You have a cloud tiering policy that is configured for 30 percent free space and 70 days. Volume f on Server1 is 500 GB.

A year ago. you configured E:Oata on Server1 to sync by using Azure File Sync.

The files that are visible in E:Data are shown in the following table.





Volume E does NOT contain any other files.

Where are File1 and flle3 located? To answer, select the appropriate options In the answer area.

49. You have a Windows Server container host named Server 1 and a container image named Image1. You need to start a container from image1. The solution must run the container on a Hyper-V virtual machine.

Which parameter should you specify when you run the docker run command?

50. You need to meet the technical requirements for VM2.

What should you do?

51. Your network contains an Active Directory forest.

The forest contains two domains named contoso.com and east.contoso.com and the servers shown in the following table.





Contoso.com contains a user named User1.

You add User1 to the built-in Backup Operators group in contoso.com.

Which servers can User1 back up?

52. HOTSPOT

Your network contains an Active Directory Domain Services (AD DS) domain named adatum.com. The domain contains a file server named Server1 and three users named User1, User2, and User3.

Server1 contains a shared folder named Share1 that has the following configurations:





The share permissions for Share1 are configured as shown in the Share Permissions exhibit.





Share1 contains a file named File1.bxt. The share settings for File1.txt are configured as shown in the File Permissions exhibit.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

53. You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant

You have several Windows 10 devices that are Azure AD hybrid-joined.

You need to ensure that when users sign in to the devices, they can use Windows Hello for Business.

Which optional feature should you select in Azure AD Connect?

54. Your network contains an on -premises Active Directory Domain Services (AD DS) domain named contoso.com.

The domain contains the objects shown in the following table.





You plan to sync contoso.com with an Azure Active Directory (Azure AD) tenant by using Azure AD Connect You need to ensure that all the objects can be used in Conditional Access policies.

What should you do?

55. You have a server named Server1 that runs Windows Server.

Server1 has the storage pools shown in the following table.





You plan to create a virtual disk named VDisk1 that will use storage tiers.

Which pools can you use to create VDisk1?

56. You haw? a server named Host! that has the Hyper-V server role installed. Host! hosts a virtual machine named VM1.

You have a management server named Server! that runs Windows Server. You remotely manage Host1 from Server1 by using Hyper-V Manager.

You need to ensure that you can access a USB hard drive connected to Server1 when you connect to VM1 by using Virtual Machine Connection.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

57. You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant.

You plan to implement self-service password reset (SSPR) in Azure AD.

You need to ensure that users that reset their passwords by using SSPR can use the new password resources in the AD DS domain.

What should you do?

58. HOTSPOT

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

The network contains the servers shown in the following table.





You plan to implement IP Address Management (IPAM).

You need to use the Group Policy based provisioning method for managed servers. The solution must support server discovery.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

59. Task 6

You need to ensure that you can manage DC1 by using Windows Admin Center on SRV1.

The required source files are located in a folder named \dc1.contoso.cominstall.

60. You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant The on-premises network is connected to Azure by using a Site-to-Site VPN.

You have the DNS zones shown in the following table.





You need to ensure that names from (aDiifcam.com can be resolved from the on-premises network Which two actions should you perform? Each correct answer presents part of the solution, NOTE: Each correct selection Is worth one point

61. Task 8

You need to create an Active Directory Domain Services (AD DS) site named Site2 that is associated to an IP address range of 192.168.2.0 to 192.168.2.255.

62. You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. You plan to manage VM1 by using a PowerShell runbook.

You need to create the runbook.

What should you create first?

63. Which two languages can you use for Task1? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

64. Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three

domains. Each domain contains 10 domain controllers.

You plan to store a DNS zone in a custom Active Directory partition.

You need to create the Active Directory partition for the zone. The partition must replicate to only four of the domain controllers.

What should you use?

65. Your network contains an Active Directory Domain Services (AD DS) domain.

The domain contains the offices shown in the following table.





You need to deploy a Network Policy Server (NPS) named NPS1 to enforce network access policies for all remote connections.

What is the minimum number of RADIUS clients that you should add to NPS1?

66. HOTSPOT

You have a server named Server1 that runs Windows Server Server1 has a just-a-bunch-of-disks (JBOD) enclosure attached.

You plan to create a storage pool on Server1 and a virtual disk that will use a mirror layout.

You are considering whether to use a two-way or a three-way mirror layout.

What is the minimum number of disks required for each type of minor layout? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.