Windows Server Real Exam Questions and Answers FREE AZ-800 Updated on Jul 12, 2022 [Q51-Q68]

July 12, 2022 AZ-800, Microsoft 0 Comments

Windows Server Real Exam Questions and Answers FREE AZ-800 Updated on Jul 12, 2022 [Q51-Q68]

Rate this post

Windows Server AZ-800 Real Exam Questions and Answers FREE Updated on Jul 12, 2022

AZ-800 Ultimate Study Guide – ExamsLabs

Microsoft AZ-800 Exam Syllabus Topics:

Topic	Details
Topic 1	Manage users and groups in multi-domain and multi-forest scenarios Manage Windows Servers and workloads in a hybrid environment
Topic 2	Manage Windows Servers in a hybrid environment Integrate Windows Servers with Azure Security Center
Topic 3	Manage Windows Servers and workloads by using Azure services Implement DSC to prevent configuration drift in IaaS machines
Topic 4	Manage authentication in on-premises and hybrid environments Implement and configure Distributed File System (DFS)
Topic 5	Create and manage AD DS security principals Configure CredSSP or Kerberos delegation for second hop remoting
Topic 6	Configure and manage Windows Server file shares Implement high availability for virtual machines
Topic 7	Implement and manage an on-premises and hybrid networking infrastructure Implement on-premises and hybrid network connectivity
Topic 8	Manage VM using PowerShell Remoting, PowerShell Direct, and HVC.exe Deploy Azure services using Azure Virtual Machine extensions on non-Azure machines
Topic 9	Configure File Server Resource Manager (FSRM) quotas Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments
Topic 10	Implement site-to-site virtual private network (VPN) Integrate Windows Server DNS with Azure DNS private zones

NO.51 Your network contains an Active Directory Domain Services (AD DS) domain named adatum.com The domain contains a server named Server1 and the users shown In the following table.

Server1 contains a folder named D:Folder1. The advanced security settings for Folder 1 are configured as shown in the Permissions exhibit. (Click the Permissions lab.)

Folder1 is shared by using the following configurations

NO.52 You have an Azure Active Directory Domain Services (Azure AD DS) domain named contoso.com.
You need to provide an administrator with the ability to manage Group Policy Objects (GPOs). The solution must use the principle of least privilege.
To which group should you add the administrator?

AAD DC Administrators

Domain Admins

Schema Admins

Enterprise Admins

Group Policy Creator Owners

Reference:
https://social.technet.microsoft.com/wiki/contents/articles/20579.delegation-of-group-policy-full-administration.aspx

NO.53 You have two on-premises servers named Server1 and Servet2 that run Windows Server.
You have an Azure Storage account named storage1 that contains a file share named share’. Server1 syncs with share1 by using Azure File Sync You need to configure Server2 to sync with share1.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

1 – Add a Storage Sync Service to the Azure subscription.
2 – On Server2, install the Azure File Sunc agent.
3 – Register Server2 with the Storage Sync Service.

NO.54 You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant
You have several Windows 10 devices that are Azure AD hybrid-joined.
You need to ensure that when users sign in to the devices, they can use Windows Hello for Business.
Which optional feature should you select in Azure AD Connect?

Device writeback

Group writeback

Password writeback

Directory extension attribute sync

Azure AD app and attribute filtering

Reference:
https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-prereqs

NO.55 You have a file server named Server1 that runs Windows Server and contains the volumes shown in the following table.

On which volumes can you use BitLocker Drive Encryption (BitLocker) and disk quotas? To answer select the appropriate options in the answer are a. NOTE Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/windows-server/storage/refs/refs-overview

NO.56 You need to meet the technical requirements for VM2.
What should you do?

Implement shielded virtual machines.

Enable the Guest services integration service.

Implement Credential Guard.

Enable enhanced session mode.

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more Information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements, if the case study has an All Information tab. note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Overview
Fabrikam, Inc. Is a manufacturing company that has a main office In New York and a branch office in Seattle.
On-premises Servers
The on-premises network contains servers that run Windows Server as shown in the following table.

DC1 hosts all the operation master roles.
WEB1 and WEB2 run an Internet Information Services (IIS) web app named Webapp1.

NO.57 You have five tile servers that run Windows Server.
You need to block users from uploading video files that have the .mov extension to shared folders on the file servers. All other types of files must be allowed. The solution must minimize administrative effort.
What should you create?

a Dynamic Access Control central access policy

a file screen

a Dynamic Access Control central access rule

a data loss prevention (DLP) policy

NO.58 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are planning the deployment of DNS to a new network.
You have three internal DNS servers as shown in the following table.

The contoso.local zone contains zone delegations for east.contoso.local and west.contoso.local. All the DNS servers use root hints.
You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts.
Solution: You configure Server2 and Server3 to forward DNS requests to 10.0.1.10.
Does this meet the goal?

Yes

NO.59 You create a new Azure subscription.
You plan to deploy Azure Active Directory Domain Services (Azure AD DS) and Azure virtual machines. The virtual machines will be joined to Azure AD DS.
You need to deploy Active Directory Domain Services (AD DS) to ensure that the virtual machines can be deployed and joined to Azure AD DS.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

1 – Create an Azure ADDS intance.
2 – Create an Azure virual network.
3 – Run the Active Directory Domain Service installation Wizard.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory-domain-services/tutorial-create-instance

NO.60 You have a Windows Server container host named Server 1 and a container image named Image1.
You need to start a container from image1. The solution must run the container on a Hyper-V virtual machine.
Which parameter should you specify when you run the docker run command?

–expose

–privileged

–runtime

–entrypoint

–isolation

Reference:
https://docs.docker.com/language/nodejs/run-containers/

NO.61 You haw? a server named Host! that has the Hyper-V server role installed. Host! hosts a virtual machine named VM1.
You have a management server named Server! that runs Windows Server. You remotely manage Host1 from Server1 by using Hyper-V Manager.
You need to ensure that you can access a USB hard drive connected to Server1 when you connect to VM1 by using Virtual Machine Connection.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

From the Hyper-V Settings of Host1, select Allow enhanced session mode

From Disk Management on Host1. attach a virtual hard disk.

From Virtual Machine Connection, switch to a basic session.

From Virtual Machine Connection select Show Options and then select the USB hard drive.

From Disk Management on Host1, select Rescan Disks

Reference:
https://docs.microsoft.com/en-us/windows-server/virtualization/hyper-v/learn-more/use-local-resources-on-hyper-v-virtual-machine-with-vmconnect

NO.62 Which three actions should you perform in sequence to meet the security requirements for Webapp1? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

1 – Configure the IS application pool to run as Network Service.
2 – Create a group managed service account (gMSA) in Active Directory.
3 – Create the Key Distribution Services (KDS)root key in AD DS.

NO.63 Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a server named Server1 that has the DFS Namespaces role service installed. Server! hosts a domain-based Distributed File System (DFS) Namespace named Files.
The domain contains a tile server named Server2. Seiver2 contains a shared folder named Share1. Share1 contains a subfolder named Folder 1.
In the Files namespace, you create a folder named Folder! that has a target of \Server2.contoso.comShare1Folder1.
You need to configure a logon script that will map drive letter M to Folder1. The solution must use the path of the DFS Namespace.
How should you complete the command to map the drive letter? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.64 You have a server named Server1 that runs Windows Server. Server1 has the storage pools shown in the following table.

You plan to create a virtual disk named VDisk1 that will use storage tiers. Which pools can you use to create VDisk1 ?

Pool2 and Pool3 only

Pool 2only

Pool only

Pool, Pool2, and Pool3

Pool1 and Pool2 only

Pool1 and Pool3 only

Pool3 only

NO.65 You have a server named Server1 that runs Windows Server. Server1 has the storage pools shown in the following table.

You plan to create a virtual disk named VDisk1 that will use storage tiers. Which pools can you use to create VDisk1 ?

Pool2 and Pool3 only

Pool 2only

Pool only

Pool, Pool2, and Pool3

Pool1 and Pool2 only

Pool1 and Pool3 only

Pool3 only

Storage tiering requires both standard HDDs and SSDs. We cannot use Pool1 because it does not have any SSDs.

NO.66 Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a server named Server1 that has the DFS Namespaces role service installed. Server! hosts a domain-based Distributed File System (DFS) Namespace named Files.
The domain contains a tile server named Server2. Seiver2 contains a shared folder named Share1. Share1 contains a subfolder named Folder 1.
In the Files namespace, you create a folder named Folder! that has a target of \Server2.contoso.comShare1Folder1.
You need to configure a logon script that will map drive letter M to Folder1. The solution must use the path of the DFS Namespace.
How should you complete the command to map the drive letter? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.67 Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using DEFAULTIPSITELINK.
You open a new branch office that contains only client computers.
You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1.
Solution: You configure the Try Next Closest Site Group Policy Object (GPO) setting in a GPO that is linked to Site1.
Does this meet the goal?

Yes

NO.68 You have on-premises file servers that run Windows Server as shown in the following table.

You have the Azure file shares shown in the following table.

You add a Storage Sync Service named Sync1 and an Azure File Sync sync group named Group1. Group1 uses share1 as a cloud endpoint.
You register Server1 and Server2 with Sync1. You add D:Folder1 from Server1 as a server endpoint in Group1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.