AZ-800 practice questions 91–100

1. Question 91 · 264 in bank

   You need to meet the technical requirements for VM3. On which volumes can you enable Data Deduplication?

   • AC and D only
   • BD only
   • CC, D, E, and F
   • DD and E only
   • ED, E, and F only

   Show answer

   Answer: D

   Explanation

   More info why is D) D and E only You can't include C (Boot drive) https://docs.microsoft.com/en-us/previous-versions/windows/desktop/dedup/about-data-deduplication Deduplication is not supported on: System or boot volumes Remote mapped or remote mounted drives Cluster shared volume file system (CSVFS) for non-VDI workloads or any workloads on Windows Server 2012 Files approaching or larger than 1 TB in size. Volumes approaching or larger than 64 TB in size.

   Source: Adapted from community discussion — AvoKikinha

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

2. Question 92 · 264 in bank

   Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen. Your network contains an Active Directory Domains Services (AD DS) domain named contoso.com. You implement a central store. You create a new Group Policy Object (GPO) named GPO1. When you attempt to edit GPO1, you see the settings shown in the exhibit. (Click the Exhibit tab.)

   

   You need to ensure that all settings are available. Solution: You copy the contents of the C:\Windows\PolicyDefinitions folder to the central store. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: A

   Next question

3. Question 93 · 264 in bank

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise. select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   I am confused... I thought that the only place where you set the password policies is the default domain policy. And is applicable for all users. If you want to refine the password policies you can use Fine Grained Password policy. This should be enabled for specific users and groups. (NO OU's) So that means the answers should be: NYN So

   Source: Adapted from community discussion — Rel2002

   References

   • Microsoft Learn

   

   Next question

4. Question 94 · 264 in bank

   Your network contains an Active Directory Domains Services (AD DS) forest named adatum.com. Adatum.com contains the users shown in the following table.

   

   You deploy a workgroup server named RODC1 that runs Windows Server. RODC1 contains a user named User4 that is a member of the local Administrators group. You pre-create a read-only domain controller (RODC) account named RODC1 in east.adatum.com and delegate RODC installation and administration permissions to User3. You sign-in to RODC1 as User4. Which credentials can be used to promote RODC1 to a RODC in east.adatum.com?

   • AUser3 only
   • BUser3 and User1 only
   • CUser3 and User2 only
   • DUser1, User2, and User3

   Show answer

   Answer: C

   Next question

5. Question 95 · 264 in bank

   HOTSPOT - You have 10 on-premises servers that run Windows Server. You plan to use Azure Network Adapter to connect the servers to the resources in Azure. Which prerequisites do you require on-premises and in Azure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/use-azure-network-adapter

   Source: Adapted from community discussion — AvoKikinha

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 96 · 264 in bank

   Your company has a main office and a branch office. The two offices are connected by using a WAN link. Each office contains a firewall that filters WAN traffic. The network in the branch office contains 10 servers that run Windows Server. All servers are administered from the main office only. You plan to manage the servers in the branch office by using a Windows Admin Center gateway. On a server in the branch office, you install the Windows Admin Center gateway by using the defaults settings. You need to configure the firewall in the branch office to allow the required inbound connection to the Windows Admin Center gateway. Which inbound TCP port should you allow?

   • A443
   • B3389
   • C5985
   • D6516

   Show answer

   Answer: A

   Explanation

   A is the answer based on The default port for the Windows Admin Center Gateway Installation is Port 443 – it is recommended to use this default port. https://www.manfredhelber.de/installing-and-configuring-windows-admin-center-for-windows-server-2022-management/

   Source: Adapted from community discussion — JohnO1971

   References

   • Microsoft Learn

   Next question

7. Question 97 · 264 in bank

   Select 2

   You have an Azure subscription that contains the following resources. ✑ An Azure Log Analytics workspace ✑ An Azure Automation account ✑ Azure Arc You have an on-premises server named Server1 that is onboarded to Azure Arc. You need to manage Microsoft updates on Server1 by using Azure Arc. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • AFrom the Automation account, enable Update Management for Server1.
   • BFrom the Virtual machines data source of the Log Analytics workspace, connect Server1.
   • COn Server1, install the Azure Monitor agent
   • DAdd Microsoft Sentinel to the Log Analytics workspace

   Show answer

   Answer: AC

   Explanation

   A: To manage Microsoft updates on Server1 by using Azure Arc, you need to enable Update Management for the server from the Automation account. Azure Arc Update Management enables you to manage updates for your Azure Arc-enabled servers from the Azure portal, using the same update management solution that you use for Azure VMs. C: To enable Update Management for Server1, you also need to install the Azure Monitor agent on the server. The Azure Monitor agent is a lightweight process that runs on your servers and collects performance, event, and diagnostic data, and forwards it to Azure Monitor for analysis. This data is used to monitor the performance and health of your servers and to detect and diagnose issues.

   Source: Adapted from community discussion — empee1977

   References

   • Microsoft Learn

   Next question

8. Question 98 · 264 in bank

   HOTSPOT - You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. You have an on-premises web app named WebApp1 that only supports Kerberos authentication. You need to ensure that users can access WebApp1 by using their Azure AD account. The solution must minimize administrative effort. What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-add-on-premises-application

   Source: Adapted from community discussion — Leocan

   

   Next question

9. Question 99 · 264 in bank

   SIMULATION - You need to collect errors from the System event log of SRV1 to a Log Analytics workspace. The required source files are located in a folder named \\dc1.contoso.com\install. To complete this task, sign in the required computer or computers.

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Could you tell me how to answer this question? In the exam, do we have to connect to another PC to run the exercise like a laboratory? Thanks.

   Source: Adapted from community discussion — smorar

   References

   • Microsoft Learn

   

   Next question

10. Question 100 · 264 in bank

    HOTSPOT - Your on-premises network contains an Active Directory domain named contoso.com and 500 servers that run Windows Server. All the servers are Azure Arc-enabled and joined to contoso.com. You need to implement PowerShell Desired State Configuration (DSC) on all the servers. The solution must minimize administrative effort. Where should you store the DSC scripts, and what should you use to apply DSC to the servers? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Correct answer in second part is use virtual machine extensions Here's an overview of the process: You store and compile your DSC scripts in your Azure Automation account. When the scripts are compiled, they become Node Configurations. To apply the DSC configurations to your VMs, you "Onboard" the VMs to Azure Automation DSC. This process involves installing the PowerShell DSC VM extension on the VMs (if it's not already installed), and registering the VMs with the Azure Automation DSC service. As part of the onboarding process, you assign a Node Configuration to each VM. The PowerShell DSC VM extension on each VM then periodically checks with the Azure Automation DSC service, pulls the assigned Node Configuration, and ensures that the VM is configured according to that Node Configuration. The compliance status of each VM (whether it's correctly configured according to its assigned Node Configuration) is then reported back to Azure Automation DSC, and you can view this status in the Azure portal.

    Source: Adapted from community discussion — ala76nl

    References

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-800 practice, question 91. 264 questions available.