AZ-800 practice questions 111–120

1. Question 111 · 264 in bank

   SIMULATION - You need to ensure that you can manage DC1 by using Windows Admin Center on SRV1. The required source files are located in a folder named \\dc1.contoso.com\install. To complete this task, sign in the required computer or computers.

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Install Windows Admin Center on SRV1: You can download the installer from the official Microsoft website and run it on SRV1. During installation, choose the appropriate options for your environment. Add DC1 to Windows Admin Center: After installation, open Windows Admin Center and click on Add in the All Connections pane. In the Add Server Connection pane, enter the name of the server (DC1) you want to manage and click on Submit.

   Source: Adapted from community discussion — Krayzr

   

   Next question

2. Question 112 · 264 in bank

   SIMULATION - You plan to create group managed service accounts (gMSAs). You need to configure the domain to support the creation of gMSAs. To complete this task, sign in the required computer or computers.

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

3. Question 113 · 264 in bank

   DRAG DROP - Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two servers named Server1 and Server2 that run Windows Server 2022. You plan to deploy an app named App1 that will be load balanced between Server1 and Server2. You need to create an identity that will be used to run App1 on Server1 and Server2. The solution must meet the following requirements: • The password for the identity must be changed regularly. • Administrative effort must be minimized. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn

   

   Next question

4. Question 114 · 264 in bank

   Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1. On Server1, you install Windows Admin Center and use Windows Admin Center to remove BUILTIN\Users from the allowed groups. You discover that all users can still sign in to Windows Admin Center. You need to prevent unauthorized users from signing in to Windows Admin Center. What should you do in Windows Admin Center?

   • ASet Performance Profile to On.
   • BSet Require manage-as sessions to re-authenticate to On.
   • CFrom the Proxy settings, configure a bypass list.
   • DAdd a security group to the allowed groups.

   Show answer

   Answer: D

   References

   • Microsoft Learn

   Next question

5. Question 115 · 264 in bank

   You have on-premises servers that run Windows Server as shown in the following table.

   

   You have an Azure subscription that contains a virtual machine named VM1. You need to ensure that you can manage all the servers by using Azure Arc. The solution must minimize administrative effort. On which servers should you install the Azure Connected Machine agent?

   • AServer1 only
   • BVM1 only
   • CVM2 only
   • DVM1 and VM2 only
   • EServer1 and VM2 only
   • FServer1, VM1, and VM2

   Show answer

   Answer: E

   Explanation

   You shouldn't install Azure Arc on virtual machines hosted in Azure, Azure Stack Hub, or Azure Stack Edge, as they already have similar capabilities. You can, however, use an Azure VM to simulate an on-premises environment for testing purposes, only. https://learn.microsoft.com/en-us/azure/azure-arc/servers/prerequisites

   Source: Adapted from community discussion — db94

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

6. Question 116 · 264 in bank

   HOTSPOT - You have an on-premises server named Server1 that runs Windows Server and has internet connectivity. You have an Azure subscription. You need to monitor Server1 by using Azure Monitor. Which resources should you create in the subscription, and what should you install on Server1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/azure-monitor

   Source: Adapted from community discussion — examcrammer

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

7. Question 117 · 264 in bank

   HOTSPOT - Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.

   

   The domain contains the users shown in the following table.

   

   On Server2, you run the Enable-PSRemoting cmdlet. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   YNN User1 can establish a PowerShell remoting session from Server1 to Server2. **Yes. User1 is a member of the Contoso\Administrators group, which typically has the necessary permissions to establish a PowerShell remoting session. User2 can establish a PowerShell remoting session from Server2 to DC1. **No. User2 is a member of the Contoso\Remote Management Users group, which allows remote management but does not necessarily grant permissions to connect to a domain controller unless explicitly configured. User3 can establish a PowerShell remoting session from Server1 to Server2. **No. User3 is a member of the Server2\Power Users group, which grants elevated privileges on Server2 but does not inherently provide permissions to establish a remote session from another server.

   Source: Adapted from community discussion — Krayzr

   References

   • Microsoft Learn

   

   Next question

8. Question 118 · 264 in bank

   Your network contains an on-premises Active Directory Domain Services (AD DS) domain. The domain contains a user named User1 and the servers shown in the following table.

   

   User1 is a member of the Protected Users security group. User1 performs the following actions: • From Server1, establishes a remote PowerShell session on Server2 • From the PowerShell session on Server2, attempts to access a resource on Backup1 The request to access the resource on Backup1 is denied. You need to ensure that User1 can access the resources on Backup1 by using the PowerShell session on Server2. The solution must follow the principle of least privilege and minimize administrative effort. What should you configure?

   • AKerberos delegation (unconstrained)
   • BCredSSP
   • CPSSessionConfiguration by using RunAs
   • Dresource-based Kerberos constrained delegation

   Show answer

   Answer: D

   References

   • Microsoft Learn

   Next question

9. Question 119 · 264 in bank

   You have 50 on-premises servers that run Windows Server. You have an Azure subscription. You plan to monitor the on-premises servers by using Azure Monitor. You need to collect event logs from the on-premises servers. What should you do first?

   • AFrom the Azure portal, create a storage account.
   • BFrom the Azure portal, create a Log Analytics workspace.
   • CFrom the on-premises servers, run azuremonitoragentclientsetup.msi.
   • DFrom the Azure portal, create a data collection rule (DCR) in Azure Monitor.

   Show answer

   Answer: B

   Explanation

   A Log Analytics workspace is essential for storing and analyzing the data collected from your servers. Once the workspace is set up, you can proceed with installing the Azure Monitor agent on your servers and configuring data collection rules

   Source: Adapted from community discussion — Krayzr

   References

   • Microsoft Learn

   Next question

10. Question 120 · 264 in bank

    You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. The domain contains two servers named Server1 and Server2. A user named Admin1 is a member of the local Administrators group on Server1 and Server2. You plan to manage Server1 and Server2 by using Azure Arc. Azure Arc objects will be added to a resource group named RG1. You need to ensure that Admin1 can configure Server1 and Server2 to be managed by using Azure Arc. What should you do first?

    • AFrom the Azure portal, generate a new onboarding script.
    • BAssign Admin1 the Azure Connected Machine Onboarding role for RG1.
    • CHybrid Azure AD join Server1 and Server2.
    • DCreate an Azure cloud-only account for Admin1.

    Show answer

    Answer: B

    Explanation

    This is the correct answer. 1. I tested this in LAB. 2. Documentation: https://learn.microsoft.com/en-us/azure/azure-arc/servers/onboard-portal ---snap--- You can enable Azure Arc-enabled servers for one or a small number of Windows or Linux machines in your environment by performing a set of steps manually. Or you can use an automated method by running a template script that we provide. This script automates the download and installation of both agents. This method requires that you have administrator permissions on the machine to install and configure the agent. On Linux, by using the root account, and on Windows, you are member of the Local Administrators group. --snap--

    Source: Adapted from community discussion — phi3nix

    References

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-800 practice, question 111. 264 questions available.