AZ-800 practice questions 191–200

1. Question 191 · 264 in bank

   HOTSPOT - Your network contains the segments shown in the following table.

   

   You have servers that run Windows Server and are configured as shown in the following table.

   

   You deploy a server named Server4 that runs Windows Server and has a static IP address of 172.16.1.1. You connect Server4 to Segment1. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point,

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Answer should be No, No, No. 2nd answer: server 2 has 172.16.2.2 but is on 172.16.1.0/24 subnet, it cannot talk to anyone else on the same segment that hasn't got IP address in the subnet of 172.16.2.0/24

   Source: Adapted from community discussion — Lionred

   

   Next question

2. Question 192 · 264 in bank

   HOTSPOT - Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains the sites and site links shown in the following exhibit.

   

   The sites contain the bridgehead domain controllers shown in the following table.

   

   The IP intersite transport container is configured as shown in the following exhibit.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   N-N-N "DC1 can replicate directly to DC3": No Why: While "Bridge all site links" does allow transitive replication between sites connected by site links, it doesn't create direct physical connections. Instead, it allows replication to flow through intermediate sites along the existing site links. "DC3 will load balance replication traffic to DC1 via SiteLink1 and SiteLink4": No Why: For load balancing to occur between site links, the costs must be equal "To ensure that replication between DC4 and DC2 is routed via DC1, the configuration of the IP inter-site transport container must be modified": No Why: With "Bridge all site links" enabled, the system automatically uses the least cost path Traffic will naturally route through DC1 due to lower cost, no modification needed

   Source: Adapted from community discussion — NoMedi

   

   Next question

3. Question 193 · 264 in bank

   DRAG DROP - You have a server named Server1 that runs Windows Server and has the Active Directory Federation Services role installed. You plan to deploy Web Application Proxy to a server named Server2. You export the Active Directory Federation Services (AD FS) certificate from Server1. Which actions should you perform on Server2 in sequence? To answer, drag the appropriate actions to the correct order. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   1. Install the Active Directory Federation Services (AD FS) role on Server2 2. Import the AD FS Certificate to Server2 3. Configure Web Application Proxy on Server2 (Run Web Application Proxy configuration wizard)

   Source: Adapted from community discussion — SIAMIANJI

   References

   • Microsoft Learn

   

   Next question

4. Question 194 · 264 in bank

   Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.

   

   You need to deploy inbound firewall rules to the servers. The solution must minimize administrative effort. What should you use?

   • APowerShell Desired State Configuration (DSC)
   • Blocal security objects
   • CGroup Policy Objects (GPOs)
   • DMicrosoft Intune configuration profiles

   Show answer

   Answer: C

   Explanation

   Group Policy allows you to centralize the management of the settings of the computers in your Active Directory Domain Services (AD DS) domain. By using Group Policy Objects (GPOs), you can apply inbound firewall rules to multiple servers at once, regardless of their operating system version. This makes it a more efficient choice compared to the other options. Please note that while PowerShell Desired State Configuration (DSC) and Microsoft Intune configuration profiles can also be used to manage settings, they might require more administrative effort compared to GPOs. Local security objects, on the other hand, would need to be configured individually on each server, which could be time-consuming. Therefore, GPOs would be the most efficient choice in this scenario.

   Source: Adapted from community discussion — Krayzr

   Next question

5. Question 195 · 264 in bank

   SIMULATION - You need to create an Active Directory Domain Services (AD DS) site named Site2 that is associated to an IP address range of 192.168.2.0 to 192.168.2.255. To complete this task, sign in the required computer or computers.

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

6. Question 196 · 264 in bank

   You have an on-premises network that is connected to an Azure virtual network by using a Site-to-Site VPN. Each network contains a subnet that has the same IP address space. The on-premises subnet contains a virtual machine. You plan to migrate the virtual machine to the Azure subnet. You need to migrate the on premises virtual machine to Azure without modifying the IP address. The solution must minim administrative effort. What should you implement before you perform the migration?

   • AAzure Extended Network
   • BAzure Virtual Network NAT
   • CAzure Application Gateway
   • DAzure virtual network peering

   Show answer

   Answer: A

   Explanation

   A. Azure Extended Network This allows you to extend your on-premises network to Azure and allows the virtual machine to retain its IP address during the migration. It also allows for minimal administrative effort as it does not require additional configuration on the virtual machine or the on-premises network.

   Source: Adapted from community discussion — empee1977

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

7. Question 197 · 264 in bank

   SIMULATION - You need to configure SRV1 as a DNS server. SRV1 must be able resolve names from the contoso.com domain by using DC1. All other names must be resolved by using the root hint servers. To complete this task, sign in the required computer or computers.

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Access SRV1: Use Remote Desktop Connection (RDC) to connect to SRV1 if needed2. Open DNS Manager: On SRV1, open the DNS Manager from the Administrative Tools. Configure Conditional Forwarder: In DNS Manager, right-click on "Conditional Forwarders" and select "New Conditional Forwarder." Enter "contoso.com" as the domain name. Add the IP address of DC1 as the forwarding server. Verify Root Hints Configuration: In DNS Manager, right-click on the server name and select "Properties." Go to the "Root Hints" tab and ensure it is correctly configured with root servers. Test Configuration: Use tools like nslookup to verify that queries for contoso.com are resolved by DC1 and other queries use root hints.

   Source: Adapted from community discussion — Ksk08

   

   Next question

8. Question 198 · 264 in bank

   SIMULATION - You need to ensure that a DHCP scope named scope1 on SRV1 can service client requests. To complete this task, sign in the required computer or computers.

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Start | v Open DHCP Management Console | v Verify Scope Configuration |---> Address Pool |---> Subnet Mask |---> Lease Duration | v Activate Scope1 | v Configure Scope Options |---> Default Gateway |---> DNS Servers | v Authorize DHCP Server (if needed) | v Test Client Request for IP Address | v End

   Source: Adapted from community discussion — Ksk08

   

   Next question

9. Question 199 · 264 in bank

   SIMULATION - You need to ensure that all DHCP clients that get an IP address from SRV1 will be configured to use DC1 as a DNS server. To complete this task, sign in the required computer or computers.

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Start | v Open DHCP Management Console | v Select Appropriate Scope | v Configure Scope Options |---> Select Option 006 |---> Enter DC1's IP Address | v Apply Changes | v Test Client Configuration |---> Release/Renew IP Address |---> Verify DNS Server Setting | v End

   Source: Adapted from community discussion — Ksk08

   

   Next question

10. Question 200 · 264 in bank

    You have a server that runs Windows Server. You need to prevent the creation of SMB Direct connections. Which cmdlet should you run?

    • ADisable-WindowsOptionalFeature
    • BRemove-WindowsFeature
    • CSet-NetAdapterAdvancedProperty
    • DDisable-NetAdapterBinding

    Show answer

    Answer: A

    References

    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-800 practice, question 191. 264 questions available.