Microsoft AZ-800 Actual Free Exam Questions & Community Discussion
You have an on-premises server named Server1 that runs Windows Server and has internet connectivity.
You have an Azure subscription.
You need to monitor Server1 by using Azure Monitor.
Which resources should you create in the subscription, and what should you install on Server1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selec tion is worth one point.
You have an Azure subscription.
You need to monitor Server1 by using Azure Monitor.
Which resources should you create in the subscription, and what should you install on Server1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selec tion is worth one point.
Correct Answer:
Explanation:
The Administering Windows Server Hybrid Core Infrastructure learning path explains that onboarding Windows Server machines to Azure Monitor hinges on a Log Analytics workspace as the data store for logs and metrics, and an agent on the machine to collect and send data. The guide states that "Azure Monitor collects telemetry from Windows Server machines into a Log Analytics workspace," and that for current deployments you should "install the Azure Monitor agent (AMA) on each computer and associate it with a workspace." It further notes that "the AMA replaces the legacy Log Analytics agent" and "uses data collection rules (DCRs) to define which data to collect and to which Log Analytics workspace to send it." Storage accounts, SQL databases, or analytics gateways are not required to onboard a standalone Windows Server to Azure Monitor. Likewise, Device Health Attestation is unrelated to Azure Monitor onboarding.
In short, to monitor an on-premises Windows Server from Azure you create a Log Analytics workspace in the subscription and install the Azure Monitor agent on the server. (In practice, you then configure a DCR to route data from the AMA to the workspace, but no additional Azure resources like SQL or Blob/Azure Files are needed for basic monitoring.)
Note: This question is part of a series of questions that present the same scenario. Each q uestion in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be ab le to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that runs Windows Server 2022 and has the DHCP Server role. Server1 contains a single DHCP scope named Scope1.
You deploy five printers t o the network.
You need to ensure that the printers are always assigned the same IP address.
Solution: You create a DHCP reservation for each printer.
Does this meet the requirement?
After you answer a question in this section, you will NOT be ab le to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that runs Windows Server 2022 and has the DHCP Server role. Server1 contains a single DHCP scope named Scope1.
You deploy five printers t o the network.
You need to ensure that the printers are always assigned the same IP address.
Solution: You create a DHCP reservation for each printer.
Does this meet the requirement?
Correct Answer: A
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the re view screen.
Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using DEFAULTIPSIT ELINK.
You open a new branch office that contains only client computers.
You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1.
Solution: You create a new site named Site4 and assoc iate Site4 to DEFAULTSITELINK.
Does this meet the goal?
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the re view screen.
Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using DEFAULTIPSIT ELINK.
You open a new branch office that contains only client computers.
You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1.
Solution: You create a new site named Site4 and assoc iate Site4 to DEFAULTSITELINK.
Does this meet the goal?
Correct Answer: B
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
You need to implement an availability solution for DHCP that meets the network ing requirements.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Correct Answer: C,E
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed.
You need 10 limit which Hyper-V module cmdlets helpdesk users can use when administering Server 1 remotely.
You configure Just Enough Administration (JEA) and successfully build the role capabilities and session configuration files.
How should you complete the PowerShell command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth on e point.
You need 10 limit which Hyper-V module cmdlets helpdesk users can use when administering Server 1 remotely.
You configure Just Enough Administration (JEA) and successfully build the role capabilities and session configuration files.
How should you complete the PowerShell command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth on e point.
Correct Answer:
Explanation:
In Just Enough Administration (JEA), you restrict what remote users can do by publishing a PowerShell se ssion endpoint that references a session configuration file and one or more role capability files . The AZ-
800 "Administering Windows Server Hybrid Core Infrastructure" materials explain that a JEA deployment follows this order: (1) create role capability f iles (.psrc) in a module's RoleCapabilities folder to enumerate allowed cmdlets, functions, and parameters; (2) author a session configuration file (.pssc) -typically with New-PSSessionConfigurationFile -that maps users or groups to the role capabilities; an d (3) register the endpoint with Register-PSSessionConfiguration , supplying the .pssc path and a Name for the endpoint. Only after registration can helpdesk users connect to the constrained endpoint.
Critically, among the listed cmdlets, Register-PSSession Configuration is the one that accepts -Name and - Path to a .pssc file, which matches the prompt ( -Path .\hypervJeaConfig __ -Name ' hypervJeaHelpDesk ' - Force ). Enter-PSSession is for connecting to an already published endpoint, and New- PSSessionConfigurationFile creates the .pssc but does not publish it. Likewise, file types .ps1 (script), .psm1 (module), and .psrc (role capability) are not valid for the -Path parameter when registering an endpoint.
Therefore, the correct completion is:
Register-PSSessionConfiguration -Path .\hypervJeaConfig.pssc -Name ' hypervJeaHelpDesk ' -Force .
You have a server named Server1 that runs Windows Server. The disks on Server1 are configured as shown in the following exhibit.
You need to convert volume E to ReFS. The solution must meet the following requirements:
* Preserve the existing data on volume E.
* M inimize administrative effort.
What should you do first?
You need to convert volume E to ReFS. The solution must meet the following requirements:
* Preserve the existing data on volume E.
* M inimize administrative effort.
What should you do first?
Correct Answer: A
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
You have a server named Server1 that runs Windows Server.
You plan to host applications in Windows containers.
You need to configure Server1 to run containers. What should you install?
You plan to host applications in Windows containers.
You need to configure Server1 to run containers. What should you install?
Correct Answer: C
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
You have a server named Server1 that runs Windows Server and contains two drives named C and D. Server1 hosts multiple file shares.
You enable Data Deduplication on drive D and select the General purpose file server workload.
You need to mini mize the space consumed by files that were recently modified or deleted.
What should you do?
You enable Data Deduplication on drive D and select the General purpose file server workload.
You need to mini mize the space consumed by files that were recently modified or deleted.
What should you do?
Correct Answer: A
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains the servers shown in the following table.
Server 1 hosts the DNS zone tor contoso.com. The General tab of the eontoso.com properties is configured as shown in the following exhibit.
Server3 hosts the DNS zone for east.contoso.com and is configured as shown in the following exhibit.
for each of the following statements, sele ct Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Server 1 hosts the DNS zone tor contoso.com. The General tab of the eontoso.com properties is configured as shown in the following exhibit.
Server3 hosts the DNS zone for east.contoso.com and is configured as shown in the following exhibit.
for each of the following statements, sele ct Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation:
A secondary DNS zone for contoso.com can be added to Server3. : Yes
If you add a DNS record to contoso.com, the record will replicate to Server2. : Yes If you add a DNS record to east.contoso.com, the record will re plicate to Server1. : Yes The replication and availability of DNS data in a Windows Server environment are dictated by the zone type and its replication scope. According to official documentation, Active Directory-integrated zones provide high availability and multi-master replication.
* Secondary Zone Availability : A secondary zone is a read-only copy of a DNS zone hosted on another server (the master). Standard DNS protocol allows any DNS server, regardless of its role as a Domain Controller, to host a seco ndary zone for any reachable primary zone. Since Server3 is a member server, it can host a secondary zone for contoso.com to provide local name resolution.
* Replication of contoso.com : The properties for the contoso.com zone on Server1 show the replication scope is set to " All DNS servers in this domain " . Since Server1 and Server2 are both domain controllers in the contoso.com domain, any record added to this zone will automatically replicate between them through the Active Directory replication process.
* Rep lication of east.contoso.com : The properties for the east.contoso.com zone on Server3 show the replication scope is set to " All DNS servers in this forest " . In Active Directory, the forest-wide replication scope stores the DNS zone in the ForestDnsZones partition. This partition is replicated to every domain controller that runs the DNS Server service throughout the entire forest. Because Server1 is a domain controller within the same forest (contoso.com root), it will receive the replicated records from the east.contoso.com zone.
You have an on-premises Active Directory Domain Servic es (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant Group writeback is enabled in Azure AD Connect.
The AD DS domain contains a server named Server1 Server 1 contains a shared folder named share1.
You have an Azure Storage account named storage2 that uses Azure AD-based access control. The storage2 account contains a share named shared You need to create a security group that meets the following requirements:
* Can contain users from the AD DS domain
* Can be used to authorize user access to share 1 and share2
What should you do?
The AD DS domain contains a server named Server1 Server 1 contains a shared folder named share1.
You have an Azure Storage account named storage2 that uses Azure AD-based access control. The storage2 account contains a share named shared You need to create a security group that meets the following requirements:
* Can contain users from the AD DS domain
* Can be used to authorize user access to share 1 and share2
What should you do?
Correct Answer: B
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
You have a Windows Server 2022 container host named Host1 and a container registry that contains the container images shown in the following table.
You need to run the containers on Host1
Which isolation mode can you use for each image? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You need to run the containers on Host1
Which isolation mode can you use for each image? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation:
In the Windows Server container topic of Administering Windows Server Hybrid Core Infrastructure , Microsoft states the behavior of the two Windows container isolation modes very clearly:
* Process isolation: "Windows Server containers run with process isolation and share the kernel with the host . Because the container uses the host's kernel, the container base image must match the host OS version (including build) for the container to start."
* Hyper-V isolation: "With Hyper-V isolated containers, each container runs inside a lightweight virtual machine that has its own kernel , providing kernel-level isolation. Hyper-V isolation removes the requirement for the container image version to match the host , allowing older or differen t Windows versions to run on a newer host." Applying those rules to Host1 (Windows Server 2022):
* Image1 (Windows Server 2022) matches the host version. Therefore, it can run with process isolation (kernel shared and versions match). Hyper-V isolation is always available as well, so either process or Hyper-V isolation can be used.
* Image2 (Windows Server 2019) does not match the host's kernel version. With process isolation this mismatch prevents startup. However, Hyper-V isolation provides its own kernel boundary, so the container can run only with Hyper-V isolation.
Thus, the correct selections are: Image1 - Hyper-V isolation or process isolation; Image2 - Hyper-V isolation only.
You have an Azure subscription and a computer named Computed that runs Windows 11.
From the Azure portal, you deploy a virtual machine named VM1 that runs Windows Server. You configure VM1 to use the default settings.
You need to ensure that you can connect to VM1 by using PowerShell remoting.
Which cmdlet should you run, and what should you use to run the cmdlet? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
From the Azure portal, you deploy a virtual machine named VM1 that runs Windows Server. You configure VM1 to use the default settings.
You need to ensure that you can connect to VM1 by using PowerShell remoting.
Which cmdlet should you run, and what should you use to run the cmdlet? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation:
< Run from: Azure Cloud Shell
Cmdlet: Enable-AzVMPSRemoting
In the Administering Windows Server Hybrid Core Infrastructure guidance for managin g Windows Server IaaS VMs, Microsoft specifies that when a newly deployed Windows Server VM in Azure is using default settings, WinRM (PowerShell Remoting) isn't opened by default in the NSG and the VM may not be configured for remoting. The prescribed met hod is to use Azure PowerShell to configure the VM from outside the VM . The module provides the purpose-built cmdlet Enable-AzVMPSRemoting , which
"configures WinRM on the target Windows VM, opens the required inbound ports in the attached network security group, and enables required firewall rules by using the Azure VM agent." Because you cannot yet remote to the VM to run Enable-PSRemoting , you must run the Azure cmdlet remotely -the study materials note that this can be executed from Azure Cloud Shell or a ny workstation with the Az PowerShell module.
Running it from Azure Cloud Shell minimizes local setup and uses your signed-in Azure context.
Therefore, to ensure you can connect to VM1 using PowerShell remoting, run Enable-AzVMPSRemoting from Azure Cloud S hell . Options like Enable-PSRemoting -Force or Enable-PSSessionConfiguration require executing on the VM itself , which isn't possible until remoting is already enabled.
0
0
0
10