AZ-800 Online Practice Questions and Answers

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a DNS server named Server1. Server1 hosts a DNS zone named fabrikam.com that was signed by DNSSEC.

You need to ensure that all the member servers in the domain perform DNSSEC validation for the fabrikam.com namespace.

What should you do?

A. On Server1, run the Add-DnsServerTrustAnchorcmdlet.

B. On each member server, run the Add-DnsServerTrustAnchorcmdlet.

C. From a Group Policy Object (GPO), add a rule to the Name Resolution Policy Table (NRPT).

D. From a Group Policy Object (GPO), modify the Network List Manager policies.

You have an Azure subscription that contains the following resources.

1.

An Azure Log Analytics workspace

2.

An Azure Automation account

3.

Azure Arc

You have an on-premises server named Server1 that is onboarded to Azure Arc.

You need to manage Microsoft updates on Server1 by using Azure Arc.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. Add Microsoft Sentinel to the Log Analytics workspace.

B. On Server1, install the Azure Monitor agent.

C. From the Automation account, enable Update Management for Server1.

D. From the Virtual machines data source of the Log Analytics workspace, connect Server1.

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant.

You plan deploy 100 new Azure virtual machines that will run Windows Server.

You need to ensure that each new virtual machine is joined to the AD DS domain.

What should you use?

A. an Azure Resource Manager (ARM) template

B. a Group Policy Object (GPO)

C. Azure AD Connect

D. an Azure management group

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using

DEFAULTIPSITELINK.

You open a new branch office that contains only client computers.

You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1.

Solution: You create a new subnet object that is associated to Site1.

Does this meet the goal?

A. Yes

B. No

You have an Azure subscription that contains the virtual networks shown in the following table.

You deploy a virtual machine named VM1 that runs Windows Server. VM1 is connected to Subnet11.

You plan to add an additional network interface named NIC1 to VM1.

To which subnets can NIC1 be attached?

A. Subnet11 only

B. Subnet12 only

C. Subnet11 and Subnetl2 only

D. Submet12 and Subnet21 only

E. Subnet11, Subnet12, Subnet21, and Subnet31

SIMULATION

You need to ensure that the minimum password length for members of the BranchAdmins group is 12 characters. The solution must affect only the BranchAdmins group.

To complete this task, sign in the required computer or computers.

A. See explanation below.

B. PlaceHolder

C. PlaceHolder

D. PlaceHolder

You need to configure remote administration to meet the security requirements. What should you use?

A. an Azure Bastion host

B. Azure AD Privileged Identity Management (PIM)

C. the Remote Desktop extension for Azure Cloud Services

D. just in time (JIT) VM access

HOTSPOT

You plan to deploy an Azure virtual machine that will run Windows Server. The virtual machine will host an Active Directory Domain Services (AD DS) domain controller and a drive named F: on a new virtual disk.

You need to configure storage for the virtual machine. The solution must meet the following requirements:

1.

Maximize resiliency for AD DS.

2.

Prevent accidental data loss.

How should you configure the storage? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

HOTSPOT

You need to meet the technical requirements for VM1.

Which cmdlet should you run first? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

DRAG DROP

Which three actions should you perform in sequence to meet the security requirements for Webapp1?

To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place: