AZ-800 practice questions 121–130

1. Question 121 · 264 in bank

   HOTSPOT - Your network contains two Active Directory Domain Services (AD DS) forests named contoso.com and fabrikam.com. A two-way forest trust exists between the forests. Each forest contains a single domain. The domains contain the servers shown in the following table.

   

   You need to configure resource based constrained delegation so that the users in contoso.com can use Windows Admin Center on Server1 to connect to Server2. How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/windows-server/security/kerberos/kerberos-constrained-delegation-overview https://docs.microsoft.com/en-us/powershell/module/activedirectory/set-adcomputer?view=windowsserver2022-ps

   Source: Adapted from community discussion — AvoKikinha

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 122 · 264 in bank

   HOTSPOT - You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed. You need to limit which Hyper-V module cmdlets helpdesk users can use when administering Server1 remotely. You configure Just Enough Administration (JEA) and successfully build the role capabilities and session configuration files. How should you complete the PowerShell command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/powershell/scripting/learn/remoting/jea/register-jea?view=powershell-7.2

   Source: Adapted from community discussion — examcrammer

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

3. Question 123 · 264 in bank

   You have an Azure virtual machine named VM1 that runs Windows Server. You have an Azure subscription that has Microsoft Defender for Cloud enabled. You need to ensure that you can use the Azure Policy guest configuration feature to manage VM1. What should you do?

   • AAdd the PowerShell Desired State Configuration (DSC) extension to VM1.
   • BConfigure VM1 to use a user-assigned managed identity.
   • CConfigure VM1 to use a system-assigned managed identity.
   • DAdd the Custom Script Extension to VM1.

   Show answer

   Answer: C

   Explanation

   "For the machine to authenticate to the Guest Configuration service, the machine must have a System-Assigned Managed Identity." (see the given reference, https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/guest-configuration)

   Source: Adapted from community discussion — GoforIT21

   References

   • Microsoft Learn

   Next question

4. Question 124 · 264 in bank

   HOTSPOT - You have an Azure subscription named sub1 and 500 on-premises virtual machines that run Windows Server. You plan to onboard the on-premises virtual machines to Azure Arc by running the Azure Arc deployment script. You need to create an identity that will be used by the script to authenticate access to sub1. The solution must use the principle of least privilege. How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/azure-arc/servers/onboard-service-principal

   Source: Adapted from community discussion — boapaulo

   

   Next question

5. Question 125 · 264 in bank

   You have an Azure virtual machine named VM1 that has a private IP address only. You configure the Windows Admin Center extension on VM1. You have an on-premises computer that runs Windows 11. You use the computer for server management. You need to ensure that you can use Windows Admin Center from the Azure portal to manage VM1. What should you configure?

   • Aan Azure Bastion host on the virtual network that contains VM1.
   • Ba VPN connection to the virtual network that contains VM1.
   • Ca private endpoint on the virtual network that contains VM1.
   • Da network security group (NSG) rule that allows inbound traffic on port 443.

   Show answer

   Answer: D

   Explanation

   "You need to ensure that you can use Windows Admin Center from the Azure portal" - The portal use 443 port. No VPN required, the use is trough Portal, not RDP access. Answer, D.

   Source: Adapted from community discussion — hchafloque

   References

   • Microsoft Learn

   Next question

6. Question 126 · 264 in bank

   Select 2

   You have a server named Host1 that has the Hyper-V server role installed. Host1 hosts a virtual machine named VM1. You have a management server named Server1 that runs Windows Server. You remotely manage Host1 from Server1 by using Hyper-V Manager. You need to ensure that you can access a USB hard drive connected to Server1 when you connect to VM1 by using Virtual Machine Connection. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • AFrom the Hyper-V Settings of Host1, select Allow enhanced session mode.
   • BFrom Virtual Machine Connection, select Show Options, and then select the USB hard drive.
   • CFrom Virtual Machine Connection, switch to a basic session.
   • DFrom Disk Management on Host1, select Rescan Disks.
   • EFrom Disk Management on Host1, attach a virtual hard disk.

   Show answer

   Answer: AB

   Explanation

   From: https://docs.microsoft.com/en-us/windows-server/virtualization/hyper-v/learn-more/use-local-resources-on-hyper-v-virtual-machine-with-vmconnect As you can see on link in "Choose a local resource" section Open VMConnect. Select the virtual machine that you want to connect to. Click Show options. Select Local resources. Click More. Select the drive that you want to use on the virtual machine and click Ok. A+B are the correct

   Source: Adapted from community discussion — AvoKikinha

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

7. Question 127 · 264 in bank

   Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains three servers that run Windows Server and have the Hyper-V server role installed. Each server has a Switch Embedded Teaming (SET) team. You need to verify that Remote Direct Memory Access (RDMA) and all the required Windows Server settings are configured properly on each server to support an Azure Stack HCI cluster. What should you use?

   • AServer Manager
   • Bthe Get-NetAdapter cmdlet
   • CFailover Cluster Manager
   • Dthe Validate-DCB cmdlet

   Show answer

   Answer: D

   Explanation

   https://learn.microsoft.com/en-us/azure-stack/hci/deploy/validate After deploying a server cluster, run the Validate-DCB tool to test networking. After updating a server cluster, depending on your scenario, run both validation options to troubleshoot cluster issues. After setting up replication with Storage Replica, validate that the replication is proceeding normally by checking some specific events and running a couple commands. After creating a server cluster, run the Validate-DCB tool before placing it into production. D is correct

   Source: Adapted from community discussion — syu31svc

   References

   • Microsoft Learn

   Next question

8. Question 128 · 264 in bank

   HOTSPOT - You plan to deploy an Azure virtual machine that will run Windows Server. You need to ensure that an Azure Active Directory (Azure AD) user named user1@contoso.com can connect to the virtual machine by using the Azure Serial Console. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/serial-console-overview

   Source: Adapted from community discussion — sloky

   References

   • Microsoft Learn

   

   Next question

9. Question 129 · 264 in bank

   HOTSPOT - You have a Windows Server container host named Server1 and an Azure subscription. You deploy an Azure container registry named Registry1 to the subscription. On Server1, you create a container image named image1. You need to store image1 in Registry1. Which command should you run on Server1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/container-registry/container-registry-get-started-docker-cli?tabs=azure-cli#push-the-image-to-your-registry

   Source: Adapted from community discussion — Burnie

   References

   • Microsoft Learn

   

   Next question

10. Question 130 · 264 in bank

    HOTSPOT - You plan to deploy an Azure virtual machine that will run Windows Server. The virtual machine will host an Active Directory Domain Services (AD DS) domain controller and a drive named F: on a new virtual disk. You need to configure storage for the virtual machine. The solution must meet the following requirements: * Maximize resiliency for AD DS. * Prevent accidental data loss. How should you configure the storage? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Box 1: F - Create a separate virtual data disk for storing the database, logs, and sysvol folder for Active Directory. Do not store these items on the same disk as the operating system. Box 2: None - By default, data disks that are attached to a VM use write-through caching. However, this form of caching can conflict with the requirements of AD DS. For this reason, set the Host Cache Preference setting on the data disk to None. Reference: https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/identity/adds-extend-domain

    Source: Adapted from community discussion — lucacose

    References

    • Microsoft Learn
    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-800 practice, question 121. 264 questions available.