Updated Aug-2025 Test Engine to Practice AZ-800 Test Questions [Q83-Q101]

August 20, 2025 AZ-800, Microsoft 0 Comments

Updated Aug-2025 Test Engine to Practice AZ-800 Test Questions [Q83-Q101]

4.7/5 - (3 votes)

Updated Aug-2025 Test Engine to Practice AZ-800 Test Questions

AZ-800 Real Exam Questions Test Engine Dumps Training With 251 Questions

NO.83 You need to implement the planned changes for the Azure DNS Private Resolver.
Which private DNS zones can you use for name resolution?

Zone1.com only

Zone2.com only

Zone1.com and Zone2.com only

Zone2.com and Zone3.com only

Zone1.com, Zone2.com, and Zone3.com

NO.84 Your network contains an Active Domain Services (AD DS) forest. The forest contains three domains. Each domain contains 10 domain controllers.
You plan to store a DNS zone in a custom active Directory partition.
You need to create the Active Directory partition for the zone. The partition replicate to only four of the domain controllers.
What should you use?

Active Directory Sites and Services

Active Directory Administrator Center

dnscmd.exe

DNS Manager

NO.85 You have a server named Server1 that runs Windows Server and contains three volumes named C, D, and E.
Files are stored on Server1 as shown in the following table.

For volume D, Data Deduplication is enabled and set to General purpose file server.
You perform the following actions:
* Move File1 to volume D.
* Copy File2 to volume D and name the copy File4.
* Move File3 to volume E
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

NO.86 Task 1
You need to prevent domain users from saving executable files in a share named \SRVlData. The users must be able to save other files to the share.

See the solution of this Task below.
Explanation:
One possible solution to prevent domain users from saving executable files in a share named \SRVl\Data is to use file screening on the file server. File screening allows you to block certain files from being saved based on their file name extension. Here are the steps to configure file screening:
* On the file server, open File Server Resource Manager from the Administrative Tools menu.
* In the left pane, expand File Screening Management and click on File Groups.
* Right-click on File Groups and select Create File Group.
* In the File Group Properties dialog box, enter a name for the file group, such as Executable Files.
* In the Files to include box, enter the file name extensions that you want to block, such as .exe, .bat,
.cmd, .com, .msi, .scr. You can use wildcards to specify multiple extensions, such as *.exe.
* Click OK to create the file group.
* In the left pane, click on File Screen Templates.
* Right-click on File Screen Templates and select Create File Screen Template.
* In the File Screen Template Properties dialog box, enter a name for the template, such as Block Executable Files.
* On the Settings tab, select the option Active screening: Do not allow users to save unauthorized files.
* On the File Groups tab, check the box next to the file group that you created, such as Executable Files.
* On the Notification tab, you can configure how to notify users and administrators when a file screening event occurs, such as sending an email, logging an event, or running a command or script. You can also customize the message that users see when they try to save a blocked file.
* Click OK to create the file screen template.
* In the left pane, click on File Screens.
* Right-click on File Screens and select Create File Screen.
* In the Create File Screen dialog box, enter the path of the folder that you want to apply the file screening to, such as \SRVl\Data.
* Select the option Derive properties from this file screen template (recommended) and choose the template that you created, such as Block Executable Files.
* Click Create to create the file screen.
Now, domain users will not be able to save executable files in the share named \SRVl\Data. They will be able to save other files to the share.

NO.87 You have an Azure virtual machine named VM1 that contains the drives shown in the following table.

On VM1, you plan to install an app named App1. The data for App1 must be stored on a persistent data disk assigned to drive D.
You need assign the data disk to drive D.
What should you do on VM1 first?

Change the drive letter of the Temporary Storage drive to F.

Move pagefile.sys to the Operating System drive.

Stop (deallocate) VM1.

Expand the Temporary Storage drive.

NO.88 You have a server named Served that runs Windows Server and has the Hyper-V server role installed.
You build Just Enough Administration (JEA) role capabilities and session configuration files.
You need to limit which Hyper-V module cmdlets helpdesk users can use when administering Server1 remotely.
How should you complete the PowerShell command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.89 You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. VM1 contains a 128-GB operating system disk.
You need to increase the size of volume C on VM1 to 250 GB.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

NO.90 You need to meet the technical requirements for VM3
On which volumes can you enable Data Deduplication?

D and E only

C, D, E, and F

D only

C and D only

D, E, and F only

NO.91 Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a DNS server named Server1. Server1 hosts a DNS zone named fabrikam.com that was signed by DNSSEC.
You need to ensure that all the member servers in the domain perform DNSSEC validation for the fabrikam.
com namespace.
What should you do?

On Served, run the Add-DnsServerTrustAnchor cmdlet.

On each member server, run the Add-DnsServerTrustAnchor cmdlet.

From a Group Policy Object (GPO). add a rule to the Name Resolution Policy Table (NRPT).

From a Group Policy Object (GPO). modify the Network List Manager policies.

NO.92 You have four testing devices that are configured with static IP addresses as shown in the following table.

The test devices are turned on once a month.
You need to prevent Server1 from assigning the IP addresses allocated to the test devices to other devices when the test devices are offline. The solution must minimize administrative effort.
What should you do?

Create an exclusion range.

Create reservations.

Configure the Scope options.

Create a policy.

NO.93 Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.
The network contains the servers shown in the following table.

You plan to implement IP Address Management (IPAM).
You need to use the Group Policy based provisioning method for managed servers. The solution must support server discovery.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.94 You have an Azure virtual machine named VM1 that contains the drives shown in the following table.

On VM1, you plan to install an app named App1. The data for App1 must be stored on a persistent data disk assigned to drive D.
You need assign the data disk to drive D.
What should you do on VM1 first?

Change the drive letter of the Temporary Storage drive to F.

Move pagefile.sys to the Operating System drive.

Stop (deallocate) VM1.

Expand the Temporary Storage drive.

NO.95 Task 3
You need to configure SRV1 as a DNS server. SRV1 must be able resolve names from the contoso.com domain by using DC1. All other names must be resolved by using the root hint servers.

NO.96 Task 2
You plan to promote a domain controller named DC3 in a site in Seattle.
You need to ensure that DC3 only replicates with DC1 and DC2 between 8 pm and 6 AM.

NO.97 You have an Azure subscription that contains the storage accounts shown in the following table.

In the West US Azure region, you create a storage sync service named SyncA.
You plan to create a sync group named GroupA.
What is the maximum number of cloud endpoints you can use with GroupA?

NO.98 You have 10 on-premises servers that run Windows Server.
You plan to use Azure Network Adapter to connect the servers to the resources in Azure.
Which prerequisites do you require on-premises and in Azure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.99 Task 2
You need to ensure that you can manage SRV1 remotely by using PowerShell

NO.100 Hotspot Question
You have a Windows Server 2022 container host named Host1 and a container registry that contains the container images shown in the following table.

You need to run the containers on Host1.
Which isolation mode can you use for each image? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.101 Which three actions should you perform in sequence to meet the security requirements for Webapp1? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.