Free AZ-800 Sample Questions — Administering Windows Server Hybrid Core Infrastructure

You have two severs that have the Hyper-V server role installed. The servers are joined to a failover cluster. Both servers can connect to the same disk on an iSCSI storage device. You plan to use the iSCSI storage to store highly available Hyper-V virtual machines that will. support live migration functionally. You need to configure a storage resource in the failover cluster to store the virtual machines. What should you configure?

• A. Cluster Shared Volumes (CSV)
• B. Distributed File System (DFS) Replication
• C. a storage pool
• D. a mirrored volume

You need to meet the technical requirements for Server1. Which users can currently perform the required tasks?

• A. Admin3 only
• B. Admin1 and Admin3 only
• C. Admin1 only
• D. Admin1, Admin2, and Admin3

You need to meet the technical requirements for the site links. Which users can perform the required tasks?

• A. Admin1, Admin2, and Admin3
• B. Admin1 and Admin3 only
• C. Admin1 only
• D. Admin1 and Admin2 only
• E. Admin3 only

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a DNS server named Server1. Server1 hosts a DNS zone named fabrikam.com that was signed by DNSSEC. You need to ensure that all the member servers in the domain perform DNSSEC validation for the fabrikam.com namespace. What should you do?

• A. On Server1, run the Add-DnsServerTrustAnchor cmdlet
• B. On each member server, run the Add-DnsServerTrustAnchor cmdlet
• C. From a Group Policy Object (GPO), add a rule to the Name Resolution Policy Table (NRPT)
• D. From a Group Policy Object (GPO), modify the Network List Manager policies

You have a server that runs Windows Server and contains a shared folder named UserData. You need to limit the amount of storage space that each user can consume in UserData. What should you use?

• A. Storage Spaces
• B. Work Folders
• C. Distributed File System (DFS) Namespaces
• D. File Server Resource Manager (FSRM)

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1. You implement Just Enough Administration (JEA) on Server1. You need to perform remote administration tasks on Server by using only JEA. What should you use?

• A. PowerShell only
• B. Remote Server Administration Tools (RSAT) only
• C. PowerShell or Remote Desktop only
• D. PowerShell or Remote Server Administration Tools (RSAT) only
• E. Remote Server Administration Tools (RSAT) or Remote Desktop only
• F. PowerShell, Remote Server Administration Tools (RSAT), or Remote Desktop

You need to implement a name resolution solution that meets the networking requirements. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

• A. Configure the DNS Servers settings for Vnet1
• B. On DC3, install the DNS Server role
• C. Create a virtual network link in the corp.fabrikam.com Azure private DNS zone
• D. Configure a conditional forwarder on DC3
• E. Enable autoregistration in the corp.fabrikam.com Azure private DNS zone
• F. Create an Azure private DNZ zone named corp.fabrikam.com.
• G. Create an Azure DNZ zone named corp.fabrikam.com.

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server 2022. You need to manage Storage Quality of Service (QoS) from Server1. Which Remote Server Administration Tools (RSAT) feature should you install?

• A. RSAT: Failover Clustering Tools
• B. RSAT: File Services Tools
• C. RSAT: Storage Replica Module for Windows PowerShell
• D. RSAT: Data Center Bridging LLDP Tools

You have an on-premises server named Server1 that runs Windows Server. You have an Azure virtual network that contains an Azure virtual network gateway. You need to connect only Server1 to the Azure virtual network. What should you use?

• A. a Site-to-Site VPN
• B. Azure Network Adapter
• C. an ExpressRoute circuit
• D. Azure Extended Network

You have a server named Host1 that has the Hyper-V server role installed. Host1 hosts a virtual machine named VM1. You have a management server named Server1 that runs Windows Server. You remotely manage Host1 from Server1 by using Hyper-V Manager. You need to ensure that you can access a USB hard drive connected to Server1 when you connect to VM1 by using Virtual Machine Connection. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

• A. From the Hyper-V Settings of Host1, select Allow enhanced session mode
• B. From Virtual Machine Connection, select Show Options, and then select the USB hard drive
• C. From Virtual Machine Connection, switch to a basic session
• D. From Disk Management on Host1, select Rescan Disks
• E. From Disk Management on Host1, attach a virtual hard disk

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1. On Server1, you install Windows Admin Center and use Windows Admin Center to remove BUILTIN\Users from the allowed groups. You discover that all users can still sign in to Windows Admin Center. You need to prevent unauthorized users from signing in to Windows Admin Center. What should you do in Windows Admin Center?

• A. Set Performance Profile to On
• B. Set Require manage-as sessions to re-authenticate to On
• C. From the Proxy settings, configure a bypass list
• D. Add a security group to the allowed groups

Your network contains a DHCP server. You plan to add a new subnet and deploy Windows Server to the subnet. You need to use the server as a DHCP relay agent. Which role should you install on the server?

• A. Network Policy and Access Services
• B. Remote Access
• C. Network Controller
• D. DHCP Server

Your network contains a multi-site Active Directory Domain Services (AD DS) forest. Each Active Directory site is connected by using manually configured site links and automatically generated connections. You need to minimize the convergence time for changes to Active Directory. What should you do?

• A. For each site link, modify the replication schedule
• B. For each site links, modify the site link costs
• C. Create a site link bridge that contains all the site links
• D. For each site link, modify the options attribute

You have an Azure virtual machine named VM1 that runs Windows Server. You have an Azure subscription that has Microsoft Defender for Cloud enabled. You need to ensure that you can use the Azure Policy guest configuration feature to manage VM1. What should you do?

• A. Add the PowerShell Desired State Configuration (DSC) extension to VM1
• B. Configure VM1 to use a user-assigned managed identity
• C. Configure VM1 to use a system-assigned managed identity
• D. Add the Custom Script Extension to VM1

You need to meet the technical requirements for User1. The solution must use the principle of least privilege. What should you do?

• A. Add Users1 to the Server Operators group in contoso.com.
• B. Create a delegation on contoso.com.
• C. Add Users1 to the Account Operators group in contoso.com.
• D. Create a delegation on OU3

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three domains. Each domain contains 10 domain controllers. You plan to store a DNS zone in a custom Active Directory partition. You need to create the Active Directory partition for the zone. The partition must replicate to only four of the domain controllers. What should you use?

• A. Active Directory Administrative Center
• B. Set-DnsServer
• C. New-ADObject
• D. ntdsutil.exe

You have an on-premises Active Directory Domain Services (AD DS) domain named contoso.com that syncs with Azure AD by using Azure AD Connect. You enable password protection for contoso.com. You need to prevent users from including the word contoso as part of their password. What should you use?

• A. the Azure Active Directory admin center
• B. Active Directory Users and Computers
• C. Synchronization Service Manager
• D. Windows Admin Center

You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. The domain contains two servers named Server1 and Server2. A user named Admin1 is a member of the local Administrators group on Server1 and Server2. You plan to manage Server1 and Server2 by using Azure Arc. Azure Arc objects will be added to a resource group named RG1. You need to ensure that Admin1 can configure Server1 and Server2 to be managed by using Azure Arc. What should you do first?

• A. From the Azure portal, generate a new onboarding script
• B. Assign Admin1 the Azure Connected Machine Onboarding role for RG1
• C. Hybrid Azure AD join Server1 and Server2
• D. Create an Azure cloud-only account for Admin1

You have a server named Server1 that runs Windows Server and contains two drives named C and D. Server1 hosts multiple file shares. You enable Data Deduplication on drive D and select the General purpose file server workload. You need to minimize the space consumed by files that were recently modified or deleted. What should you do?

• A. Run the Set-DedupVolume cmdlet and configure the Scrubbing job
• B. Run the Set-DedupSchedule cmdlet and configure a GarbageCollection job
• C. Run the Set-DedupVolume cmdlet and configure the InputOutputScale settings
• D. Run the Set-DedupSchedule cmdlet and configure the Optimization job

Your network contains an Active Directory Domain Services (AD DS) domain. The network also contains 20 domain controllers, 100 member servers, and 100 client computers. You have a Group Policy Object (GPO) named GPO1 that contains Group Policy preferences. You plan to link GPO1 to the domain. You need to ensure that the preference in GPO1 apply only to domain member servers and NOT to domain controllers or client computers. All the other Group Policy settings in GPO1 must apply to all the computers. The solution must minimize administrative effort. Which type of item level targeting should you use?

• A. Domain
• B. Operating System
• C. Security Group
• D. Environment Variable