AZ-800: Administering Windows Server Hybrid Core Infrastructure

Question #: 11

Topic #: 4

HOTSPOT –

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the VPN servers shown in the following table.

You have a server named NPS1 that has Network Policy Server (NPS) installed. NPS1 has the following RADIUS clients:

VPN1, VPN2, and VPN3 use NPS1 for RADIUS authentication. All the users in contoso.com are allowed to establish VPN connections.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

N Y N

Question #: 10

Topic #: 5

HOTSPOT –

Your network contains an Active Directory Domain Services (AD DS) domain named adatum.com. The domain contains a server named Server1 and the users shown in the following table.

Server1 contains a folder named D:\Folder1. The advanced security settings for Folder1 are configured as shown in the Permissions exhibit. (Click the

Permissions tab.)

Folder1 is shared by using the following configurations:

The share permissions for Share1 are shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

Y N N

Question #: 9

Topic #: 1

DRAG DROP –

You deploy a new Active Directory Domain Services (AD DS) forest named contoso.com. The domain contains three domain controllers named DC1, DC2, and

DC3.

You rename Default-First-Site-Name as Site1.

You plan to ship DC1, DC2, and DC3 to datacenters in different locations.

You need to configure replication between DC1, DC2, and DC3 to meet the following requirements:

✑ Each domain controller must reside in its own Active Directory site.

✑ The replication schedule between each site must be controlled independently.

✑ Interruptions to replication must be minimized.

Which three actions should you perform in sequence in the Active Directory Sites and Services console? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

Question #: 9

Topic #: 5

DRAG DROP –

You have a server named Server1.

You plan to use Storage Spaces to expand the storage available to Server1. You attach eight physical disks to Server1. Four disks are HDDs and four are SSDs.

You need to create a volume on Server1 that will use the storage on all the new disks. The solution must provide the fastest read performance for frequently used files.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

Question #: 8

Topic #: 2

HOTSPOT –

You have an Azure subscription named sub1 and 500 on-premises virtual machines that run Windows Server.

You plan to onboard the on-premises virtual machines to Azure Arc by running the Azure Arc deployment script.

You need to create an identity that will be used by the script to authenticate access to sub1. The solution must use the principle of least privilege.

How should you complete the command? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Question #: 8

Topic #: 5

HOTSPOT –

Your network contains an Active Directory Domain Services (AD DS) domain named adatum.com. The domain contains a file server named Server1 and three users named User1, User2, and User3.

Server1 contains a shared folder named Share1 that has the following configurations:

The share permissions for Share1 are configured as shown in the Share Permissions exhibit.

Share1 contains a file named File1.bxt. The advanced security settings for File1.txt are configured as shown in the File Permissions exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

N Y Y

Question #: 7

Topic #: 3

DRAG DROP –
You have a server named Server1 that runs Windows Server and has the Hyper V server role installed. Server1 hosts a virtual machine named VM1.
Server1 has an NVMe storage device. The device is currently assigned to VM1 by using Discrete Device Assignment.
You need to make the device available to Server1.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

Question #: 14

Topic #: 3

DRAG DROP –

You create an Azure virtual machine named Server1 that runs Windows Server.

Server1 has the disk configurations shown in the following exhibit.

You need to create a new 100-GB volume on Server1.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

Question #: 14

Topic #: 2

HOTSPOT

–

Your on-premises network contains an Active Directory domain named contoso.com and 500 servers that run Windows Server. All the servers are Azure Arc-enabled and joined to contoso.com.

You need to implement PowerShell Desired State Configuration (DSC) on all the servers. The solution must minimize administrative effort.

Where should you store the DSC scripts, and what should you use to apply DSC to the servers? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

B C

Question #: 13

Topic #: 3

HOTSPOT –

You plan to deploy an Azure virtual machine that will run Windows Server. The virtual machine will host an Active Directory Domain Services (AD DS) domain controller and a drive named F: on a new virtual disk.

You need to configure storage for the virtual machine. The solution must meet the following requirements:

* Maximize resiliency for AD DS.

* Prevent accidental data loss.

How should you configure the storage? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

C A

Question #: 13

Topic #: 2

SIMULATION

–

You need to collect errors from the System event log of SRV1 to a Log Analytics workspace.

The required source files are located in a folder named \\dc1.contoso.com\install.

To complete this task, sign in the required computer or computers.

Question #: 13

Topic #: 1

DRAG DROP –

You deploy a single-domain Active Directory Domain Services (AD DS) forest named contoso.com.

You deploy five servers to the domain. You add the servers to a group named ITFarmHosts.

You plan to configure a Network Load Balancing (NLB) cluster named NLBCluster.contoso.com that will contain the five servers.

You need to ensure that the NLB service on the nodes of the cluster can use a group managed service account (gMSA) to authenticate.

Which three PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.

Select and Place:

Question #: 12

Topic #: 5

DRAG DROP –

You have two on-premises servers named Server1 and Server2 that run Windows Server.

You have an Azure Storage account named storage1 that contains a file share named share1. Server1 syncs with share1 by using Azure File Sync.

You need to configure Server2 to sync with share1.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

Question #: 12

Topic #: 2

HOTSPOT –

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant.

You have an on-premises web app named WebApp1 that only supports Kerberos authentication.

You need to ensure that users can access WebApp1 by using their Azure AD account. The solution must minimize administrative effort.

What should you configure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

B A

Question #: 11

Topic #: 3

HOTSPOT –

You plan to deploy an Azure virtual machine that will run Windows Server.

You need to ensure that an Azure Active Directory (Azure AD) user named user1@contoso.com can connect to the virtual machine by using the Azure Serial

Console.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

A A

Question #: 18

Topic #: 5

HOTSPOT –

Your company has offices in Boston and Montreal. The offices are connected by using a 10-Mbps WAN link that is often saturated.

The office in Boston contains the following:

✑ An Active Directory Domain Services (AD DS) domain controller named DC1

✑ A server named Server1 that runs Windows Server and has the File Server role installed

The office in Montreal contains 20 client computers that run Windows 10. Montreal does NOT have any servers.

The company plans to deploy a new line-of-business (LOB) application to all the client computers. The installation source files for the application are in \\Server1

\Apps.

You need to make the installation source files available to the client computers in the Montreal office by using the minimum amount of WAN bandwidth possible.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

C B

Question #: 18

Topic #: 3

SIMULATION

–

SRV1 contains a virtual machine named VM1.

You need attach c:\vhds\Disk1.vhdx to VM1. The solution must ensure that Disk1 can be expanded dynamically when VM1 runs.

To complete this task, sign in the required computer or computers.

Question #: 17

Topic #: 3

SIMULATION

–

You need to enable nested virtualization for a virtual machine named VM1 on SRV1.

To complete this task, sign in the required computer or computers.

Question #: 17

Topic #: 4

SIMULATION

–

You plan to delegate the management of a DNS zone named fabrikam.com located on DC1 to the BranchAdmins group.

You need to ensure that you can grant permissions to the fabikam.com zone.

To complete this task, sign in the required computer or computers.

Question #: 17

Topic #: 5

HOTSPOT –

You have a server named Server1 that runs Windows Server. Server1 has a just-a-bunch-of-disks (JBOD) enclosure attached.

You plan to create a storage pool on Server1 and a virtual disk that will use a mirror layout.

You are considering whether to use a two-way or a three-way mirror layout.

What is the minimum number of disks required for each type of mirror layout? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Box 1: 2

Box 2: 5

Question #: 16

Topic #: 4

SIMULATION

–

You need to replicate a read-only copy of a DNS zone named contoso.com D to SRV2.

To complete this task, sign in the required computer or computers.

Question #: 15

Topic #: 1

HOTSPOT –

Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a child domain named east.contoso.com.

In the contoso.com domain, you create two users named Admin1 and Admin2.

You need to ensure that the users can perform the following tasks:

✑ Admin1 can create and manage Active Directory sites.

✑ Admin2 can deploy domain controllers to the east.contoso.com domain.

The solution must use the principle of least privilege.

To which group should you add each user? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Question #: 22

Topic #: 4

 DRAG DROP

–

Your network contains an Active Directory domain, a web app named App1, and a perimeter network. The perimeter network contains a server named Server1 that runs Windows Server.

You plan to provide external access to App1.

You need to implement the Web Application Proxy role service on Server1.

Which role should you add to Server1, and which role should you add to the network? To answer, drag the appropriate roles to the correct targets. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Question #: 22

Topic #: 3

HOTSPOT

–

Your on-premises network contains a server named Server1 and uses an IP address space of 192.168.10.0/24.

You have an Azure virtual network that contains a subnet named Subnet1. Subnet1 uses an IP address space of 192.168.10.0/24.

You need to migrate Server1 to Subnet1. You must use Azure Extended Network to maintain the existing IP address of Server1.

What is the minimum number of virtual machines that you should deploy? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

B B

Question #: 21

Topic #: 1

HOTSPOT –

Your network contains three Active Directory Domain Services (AD DS) forests as shown in the following exhibit.

The network contains the users shown in the following table.

The network contains the security groups shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise. select No.

NOTE: Each correct selection is worth one point.

Hot Area:

Y N N

Question #: 21

Topic #: 5

HOTSPOT –

Your network contains a two-domain on-premises Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains the domain controllers shown in the following table.

All domain controllers are backed up by using Azure Backup.

You create an Active Directory site named Site3. Site1, Site2, and Site3 each has a dedicated site link to the Hub site.

In Site3, you install a new server named Server1.

You need to promote Server1 to an RODC in child.contoso.com by using the Install from Media (IFM) option. The solution must minimize network traffic.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

B C

Question #: 20

Topic #: 3

DRAG DROP

–

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. VM1 contains a 128-GB operating system disk.

You need to increase the size of volume C on VM1 to 250 GB.

Which four actions should you perform in sequence.

To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

1) Stop VM1

2) Resize the operating system disk

3) Start VM1

4) Resize volume C:

Question #: 20

Topic #: 5

HOTSPOT –

You have a Group Policy Object (GPO) named GPO1 that contains user settings only.

You plan to apply GPO1 to a global security group named Group1.

You link GPO1 to the domain, and you remove all the permissions granted to the Authenticated Users group.

You need to configure permissions for GPOI to meet the following requirements:

✑ GPO1 must apply only to the users in Group1.

✑ The solution must use the principle of least privilege.

Which permissions should you grant to Group1 and the Domain Computers group? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Question #: 25

Topic #: 3

HOTSPOT

–

You have a Windows Server container host named Server1.

You start the containers on Server1 as shown in the following table.

You need to validate the status of ProcessA and ProcessC.

Where can you verify that ProcessA and ProcessC are in a running state? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Container1 and Server1 only

Container3 only

Question #: 25

Topic #: 1

SIMULATION

–

You need to create a user named Admin1 in contoso.com. Admin1 must be able to back up and restore files on SRV1. The solution must use the principle of the least privilege.

To complete this task, sign in the required computer or computers.

Question #: 24

Topic #: 1

HOTSPOT

–

Your network contains an Azure Active Directory Domain Services (Azure AD DS) domain named contoso.com.

You need to configure a password policy for the local user accounts on the Azure virtual machines joined to contoso.com.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

1. AAD DC Administrators group
2. AADDC Computers organizational unit (OU)

Question #: 24

Topic #: 2

SIMULATION

–

You need to ensure that you can manage DC1 by using Windows Admin Center on SRV1.

The required source files are located in a folder named \\dc1.contoso.com\install.

To complete this task, sign in the required computer or computers.

Question #: 23

Topic #: 3

HOTSPOT

–

You have a server named Server1 that has the Hyper-V server role installed. Server1 hosts the virtual machines shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

NOTE: Each correct selection is worth one point.

C B