AZ-800 practice questions 161–170

1. Question 161 · 264 in bank

   HOTSPOT - You have a Windows Server container host named Server1 that has a single disk. On Server1, you plan to start the containers shown in the following table.

   

   Which isolation mode can you use for each container? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/hyperv-container

   Source: Adapted from community discussion — darshanajayathilake

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 162 · 264 in bank

   DRAG DROP - You have a server named Server1 that runs Windows Server and has the Hyper V server role installed. Server1 hosts a virtual machine named VM1. Server1 has an NVMe storage device. The device is currently assigned to VM1 by using Discrete Device Assignment. You need to make the device available to Server1. Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/windows-server/virtualization/hyper-v/deploy/deploying-storage-devices-using-dda

   Source: Adapted from community discussion — syu31svc

   References

   • Microsoft Learn

   

   Next question

3. Question 163 · 264 in bank

   You have a server named Server1 that hosts Windows containers. You plan to deploy an application that will have multiple containers. Each container will be on the same subnet. Each container requires a separate MAC address and IP address. Each container must be able to communicate by using its IP address. You need to create a Docker network that supports the deployment of the application. Which type of network should you create?

   • ANAT
   • Btransparent
   • CI2bridge
   • DI2tunnel

   Show answer

   Answer: B

   Explanation

   Wrong From: https://docs.microsoft.com/en-us/virtualization/windowscontainers/container-networking/network-drivers-topologies ransparent network driver Containers attached to a network created with the 'transparent' driver will be directly connected to the physical network through an external Hyper-V switch. IPs from the physical network can be assigned statically (requires user-specified --subnet option) or dynamically using an external DHCP server. L2bridge network driver Containers attached to a network created with the 'l2bridge' driver will be connected to the physical network through an external Hyper-V switch. In l2bridge, container network traffic will have the same MAC address as the host due to Layer-2 address translation (MAC re-write) operation on ingress and egress. In datacenters, this helps alleviate the stress on switches having to learn MAC addresses of sometimes short-lived containers. L2bridge networks can be configured in 2 different ways

   Source: Adapted from community discussion — AvoKikinha

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

4. Question 164 · 264 in bank

   You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. You plan deploy 100 new Azure virtual machines that will run Windows Server. You need to ensure that each new virtual machine is joined to the AD DS domain. What should you use?

   • Aan Azure Resource Manager (ARM) template
   • Ba Group Policy Object (GPO)
   • CAzure AD Connect
   • Dan Azure management group

   Show answer

   Answer: A

   Explanation

   https://learn.microsoft.com/en-us/azure/active-directory-domain-services/join-windows-vm-template To automate the deployment and configuration of Azure virtual machines (VMs), you can use a Resource Manager template. These templates let you create consistent deployments each time. Extensions can also be included in templates to automatically configure a VM as part of the deployment. One useful extension joins VMs to a domain, which can be used with Azure Active Directory Domain Services (Azure AD DS) managed domains. Answer is A

   Source: Adapted from community discussion — syu31svc

   References

   • Microsoft Learn

   Next question

5. Question 165 · 264 in bank

   HOTSPOT - Your network contains two VLANs for client computers and one VLAN for a datacenter. Each VLAN is assigned an IPv4 subnet. Currently, all the client computers use static IP addresses. You plan to deploy a DHCP server to the VLAN in the datacenter. You need to use the DHCP server to provide IP configurations to all the client computers. What is the minimum number of scopes and DHCP relays you should create? To answer, select the appropriate option the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: 3 - You need a DHCP scope for each of the three subnets. Box 2: 2 - The two client VLANs need a DHCP Relay Agent to forward DHCP requests to the DHCP server. The datacenter VLAN that contains the DHCP server does not require a DHCP Relay Agent.

   Source: Adapted from community discussion — loulouka

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 166 · 264 in bank

   Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains 10 servers that run Windows Server. The servers have static IP addresses. You plan to use DHCP to assign IP addresses to the servers. You need to ensure that each server always receives the same IP address. Which type of identifier should you use to create a DHCP reservation for each server?

   • ANetBIOS name
   • BMAC address
   • Cfully qualified domain name (FQDN)
   • Duniversally unique identifier (UUID)

   Show answer

   Answer: B

   Explanation

   https://docs.infoblox.com/space/NAG8/22252617/Configuring+IPv4+Fixed+Addresses "When a DHCP client sends a DHCPDISCOVER, it can include the MAC address or a unique client identifier" Answer is B

   Source: Adapted from community discussion — syu31svc

   Next question

7. Question 167 · 264 in bank

   HOTSPOT - Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the VPN servers shown in the following table.

   

   You have a server named NPS1 that has Network Policy Server (NPS) installed. NPS1 has the following RADIUS clients:

   

   VPN1, VPN2, and VPN3 use NPS1 for RADIUS authentication. All the users in contoso.com are allowed to establish VPN connections. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   It is important to remember that the client computers that are connecting to the VPNs are not RADIUS clients. The VPN servers are the RADIUS clients. You configure the RADIUS clients on the RADIUS server (NPS1) server to allow the VPN servers to use NPS1 to authenticate the connections. Box 1: No - NPSClient1 is not enabled. Box 2: Yes - NPSClient2 is configured correctly. It is enabled and has the correct IP address of VPN2. Box 3: No - NPSClient3 has an incorrect IP address configured for VPN3.

   Source: Adapted from community discussion — SuradjBajaj

   References

   • Microsoft Learn

   

   Next question

8. Question 168 · 264 in bank

   Select 2

   You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. The on-premises network is connected to Azure by using a Site-to-Site VPN. You have the DNS zones shown in the following table.

   

   You need to ensure that names from fabrikam.com can be resolved from the on-premises network. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • ACreate a stub zone for fabrikam.com on DC1.
   • BCreate a conditional forwarder for fabrikam.com on DC1.
   • CCreate a secondary zone for fabrikam.com on DC1.
   • DDeploy an Azure virtual machine that runs Windows Server. Modify the DNS Servers settings for the virtual network.
   • EDeploy an Azure virtual machine that runs Windows Server. Configure the virtual machine as a DNS forwarder.

   Show answer

   Answer: BE

   Explanation

   https://learn.microsoft.com/en-us/answers/questions/181776/azure-private-dns-zone-resolution-from-on-prem According to this question from 2020 and link provided it should be BE BUT https://learn.microsoft.com/en-us/azure/dns/private-resolver-hybrid-dns This one is new thing and will probably be used instead in the future so I believe we will have questions about it instead of this one

   Source: Adapted from community discussion — Doman01

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

9. Question 169 · 264 in bank

   You have an on-premises server named Server1 that runs Windows Server. You have an Azure virtual network that contains an Azure virtual network gateway. You need to connect only Server1 to the Azure virtual network. What should you use?

   • Aa Site-to-Site VPN
   • BAzure Network Adapter
   • Can ExpressRoute circuit
   • DAzure Extended Network

   Show answer

   Answer: B

   Explanation

   https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/use-azure-network-adapter Azure Network Adapter Point-to-Site VPN connections are useful when you want to connect to your virtual network from a remote location, such as a branch office, store, or other location. You can also use Azure Network Adapter instead of a Site-to-Site VPN when you require only a few servers to connect to a virtual network. Azure Network Adapter connections don't require a VPN device or a public-facing IP address. Answer is B

   Source: Adapted from community discussion — syu31svc

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

10. Question 170 · 264 in bank

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You are planning the deployment of DNS to a new network. You have three internal DNS servers as shown in the following table.

    

    The contoso.local zone contains zone delegations for east.contoso.local and west.contoso.local. All the DNS servers use root hints. You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts. Solution: On Server2, you create a conditional forwarder for west.contoso.local. On Server3, you create a conditional forwarder for east.contoso.local. Does this meet the goal?

    • AYes
    • BNo

    Show answer

    Answer: B

    Explanation

    These DNS questions are quite misleading. By default, root DC DNS has delegations to child domains. And child domains DNSes by default have forwarders to root domain DNS. So even without any additional conditions name resolution will work between all of the domains.

    Source: Adapted from community discussion — rimvydukas

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-800 practice, question 161. 264 questions available.