What is this exam about?

Windows Server hybrid core administration.

You need to configure the Group Policy settings to ensure that the Azure Virtual Desktop session hosts meet the security requirements. What should you configure?

Correct Answer: loopback processing in GPO4

You need to meet the technical requirements for Server1. Which users can currently perform the required tasks?

Correct Answer: Admin1 and Admin3 only

You are planning the implementation Azure Arc to support the planned changes. You need to configure the environment to support configuration management policies. What should you do?

Correct Answer: Deploy the Azure Connected Machine agent to all the servers.

What should you implement for the deployment of DC3?

Correct Answer: an Azure virtual machine

You need to meet the technical requirements for the site links. Which users can perform the required tasks?

Correct Answer: Admin1 and Admin2 only

You need to meet the technical requirements for VM2. What should you do?

Correct Answer: Enable enhanced session mode.

You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. You plan to implement self-service password reset (SSPR) in Azure AD. You need to ensure that users that reset their passwords by using SSPR can use the new password resources in the AD DS domain. What should you do?

Correct Answer: Run the Microsoft Azure Active Directory Connect wizard and select Password writeback.

You need to meet the technical requirements for User1. The solution must use the principle of least privilege. What should you do?

Correct Answer: Create a delegation on OU3.

You need to configure remote administration to meet the security requirements. What should you use?

Correct Answer: just in time (JIT) VM access

You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. The domain contains two servers named Server1 and Server2. A user named Admin1 is a member of the local Administrators group on Server1 and Server2. You plan to manage Server1 and Server2 by using Azure Arc. Azure Arc objects will be added to a resource group named RG1. You need to ensure that Admin1 can configure Server1 and Server2 to be managed by using Azure Arc. What should you do first?

Correct Answer: From the Azure portal, generate a new onboarding script.

You have an Azure virtual machine named VM1 that runs Windows Server. You perform the following actions on VM1: ✑ Create a folder named Folder1 on volume C. ✑ Create a folder named Folder2 on volume D. ✑ Add a new data disk to VM1 and create a new volume that is assigned drive letter E. ✑ Install an app named App1 on volume E. You plan to resize VM1. Which objects will present after you resize VM1?

Correct Answer: Folder1, volume E, and App1 only

You have an on-premises network that is connected to an Azure virtual network by using a Site-to-Site VPN. Each network contains a subnet that has the same IP address space. The on-premises subnet contains a virtual machine. You plan to migrate the virtual machine to the Azure subnet. You need to migrate the on premises virtual machine to Azure without modifying the IP address. The solution must minim administrative effort. What should you implement before you perform the migration?

Correct Answer: Azure Extended Network

You have an Azure virtual machine named VM1 that runs Windows Server and has the following configurations: ✑ Size: D2s_v4 ✑ Operating system disk: 127-GiB standard SSD ✑ Data disk 128-GiB standard SSD ✑ Virtual machine generation: Gen 2 You plan to perform the following changes to VM1: ✑ Change the virtual machine size to D4s_v4. ✑ Detach the data disk. ✑ Add a new standard SSD. Which changes require downtime for VM1?

Correct Answer: Changing the virtual machine size only.

You have a server that runs Windows Server and contains a shared folder named UserData. You need to limit the amount of storage space that each user can consume in UserData. What should you use?

Correct Answer: File Server Resource Manager (FSRM)

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains two servers named Server1 and Server2. Server1 contains a disk named Disk2. Disk2 contains a folder named UserData. UserData is shared to the Domain Users group. Disk2 is configured for deduplication. Server1 is protected by using Azure Backup. Server1 fails. You connect Disk2 to Server2. You need to ensure that you can access all the files on Disk2 as quickly as possible. What should you do?

Correct Answer: Install the Data Deduplication server role.

You have an Azure virtual machine named VM1 that runs Windows Server. You have an Azure subscription that has Microsoft Defender for Cloud enabled. You need to ensure that you can use the Azure Policy guest configuration feature to manage VM1. What should you do?

Correct Answer: Configure VM1 to use a system-assigned managed identity.

You have an Azure virtual machine named VM1 that runs Windows Server. You need to configure the management of VM1 to meet the following requirements: ✑ Require administrators to request access to VM1 before establishing a Remote Desktop connection. ✑ Limit access to VM1 from specific source IP addresses. ✑ Limit access to VM1 to a specific management port. What should you configure?

Correct Answer: Microsoft Defender for Cloud

Your network contains an Active Directory Domain Services (AD DS) domain. The network also contains 20 domain controllers, 100 member servers, and 100 client computers. You have a Group Policy Object (GPO) named GPO1 that contains Group Policy preferences. You plan to link GPO1 to the domain. You need to ensure that the preference in GPO1 apply only to domain member servers and NOT to domain controllers or client computers. All the other Group Policy settings in GPO1 must apply to all the computers. The solution must minimize administrative effort. Which type of item level targeting should you use?

Correct Answer: Operating System

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a DNS server named Server1. Server1 hosts a DNS zone named fabrikam.com that was signed by DNSSEC. You need to ensure that all the member servers in the domain perform DNSSEC validation for the fabrikam.com namespace. What should you do?

Correct Answer: From a Group Policy Object (GPO), add a rule to the Name Resolution Policy Table (NRPT).

You have an Azure virtual machine named VM1 that has a private IP address only. You configure the Windows Admin Center extension on VM1. You have an on-premises computer that runs Windows 11. You use the computer for server management. You need to ensure that you can use Windows Admin Center from the Azure portal to manage VM1. What should you configure?

Correct Answer: an Azure Bastion host on the virtual network that contains VM1.

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. You plan deploy 100 new Azure virtual machines that will run Windows Server. You need to ensure that each new virtual machine is joined to the AD DS domain. What should you use?

Correct Answer: an Azure Resource Manager (ARM) template

Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains three servers that run Windows Server and have the Hyper-V server role installed. Each server has a Switch Embedded Teaming (SET) team. You need to verify that Remote Direct Memory Access (RDMA) and all the required Windows Server settings are configured properly on each server to support an Azure Stack HCI cluster. What should you use?

Correct Answer: the Validate-DCB cmdlet

Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the objects shown in the following table. You plan to sync contoso.com with an Azure Active Directory (Azure AD) tenant by using Azure AD Connect. You need to ensure that all the objects can be used in Conditional Access policies. What should you do?

Correct Answer: Select the Configure Hybrid Azure AD join option.

Your network contains a multi-site Active Directory Domain Services (AD DS) forest. Each Active Directory site is connected by using manually configured site links and automatically generated connections. You need to minimize the convergence time for changes to Active Directory. What should you do?

Correct Answer: For each site link, modify the replication schedule.

You have an on-premises server named Server1 that runs Windows Server. You have an Azure virtual network that contains an Azure virtual network gateway. You need to connect only Server1 to the Azure virtual network. What should you use?

Correct Answer: Azure Network Adapter

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. You have several Windows 10 devices that are Azure AD hybrid-joined. You need to ensure that when users sign in to the devices, they can use Windows Hello for Business. Which optional feature should you select in Azure AD Connect?

Correct Answer: Device writeback

Welcome to awslagi.com – Sharing AWS, Google Cloud, Microsoft Azure IT Exams. It's free for all!

Administering Windows Server Hybrid Core Infrastructure

Administer Windows Server hybrid core infrastructure confidently.

4.8★★★★★(164 ratings)

16,140 studentsIntermediate

Learn to manage Windows Server in hybrid environments that connect on-premises and cloud services. The exam covers administration, identity, storage, and operational tasks needed for hybrid infrastructure success. This certification is ideal for administrators modernizing server operations. It helps you support organizations transitioning to hybrid cloud without losing control of core services.

What you'll learn

Manage hybrid servers- Support identity integration- Configure storage and compute- Operate core infrastructure- Align on-prem and cloud services

AZ-800

Lectures2

Quizzes0

Duration30 week

Students16,140

$20.00

📢 Unlock Full Access to Success!

"The content displayed here is a promotional preview and contains only 50% of the actual exam database. To access the complete set of updated questions, please upgrade to the Full Version."

👉 Click the button and follow the instructions to secure your full access immediately!