AZ-800 practice questions 211–220

1. Question 211 · 264 in bank

   You have two severs that have the Hyper-V server role installed. The servers are joined to a failover cluster. Both servers can connect to the same disk on an iSCSI storage device. You plan to use the iSCSI storage to store highly available Hyper-V virtual machines that will. support live migration functionally. You need to configure a storage resource in the failover cluster to store the virtual machines. What should you configure?

   • ACluster Shared Volumes (CSV)
   • BDistributed File System (DFS) Replication
   • Ca storage pool
   • Da mirrored volume

   Show answer

   Answer: A

   Explanation

   A. Cluster Shared Volumes (CSV) would be the appropriate configuration for storing highly available Hyper-V virtual machines that support live migration functionality. CSV allows multiple nodes in a failover cluster to have simultaneous read-write access to the same LUN (logical unit number) on an iSCSI storage device, making it possible for live migration of virtual machines between the Hyper-V servers.

   Source: Adapted from community discussion — empee1977

   References

   • Microsoft Learn

   Next question

2. Question 212 · 264 in bank

   You have a server named Server1 that runs Windows Server. You plan to host applications in Windows containers. You need to configure Server1 to run containers. What should you install?

   • AWindows Admin Center
   • BDocker
   • Cthe Windows Subsystem for Linux
   • DHyper-V

   Show answer

   Answer: B

   Explanation

   Docker seems like the correct answer, but I thought the Hyper-V role was a pre-requisite, I'll do some testing, maybe that gets installed automatically?

   Source: Adapted from community discussion — ProfileX

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

3. Question 213 · 264 in bank

   HOTSPOT - You have a server named Server1 that runs Windows Server. Server1 has a just-a-bunch-of-disks (JBOD) enclosure attached. You plan to create a storage pool on Server1 and a virtual disk that will use a mirror layout. You are considering whether to use a two-way or a three-way mirror layout. What is the minimum number of disks required for each type of mirror layout? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   2 and 5 https://learn.microsoft.com/en-us/training/modules/implement-storage-spaces-storage-spaces-direct/2-define-storage-spaces-architecture-components Resiliency levels To create a highly available virtual disk, you need at least one physical disk that satisfies the following requirements: 1.One physical disk is required to create a storage pool. 2.A minimum of two physical disks are required to create a resilient mirror virtual disk. 3.A minimum of three physical disks are required to create a virtual disk with resiliency through parity. 4.Three-way mirroring requires at least five physical disks. 5.Disks must be blank and unformatted. No volume can exist on the disks.

   Source: Adapted from community discussion — Joystickj

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

4. Question 214 · 264 in bank

   HOTSPOT - Your company has offices in Boston and Montreal. The offices are connected by using a 10-Mbps WAN link that is often saturated. The office in Boston contains the following: ✑ An Active Directory Domain Services (AD DS) domain controller named DC1 ✑ A server named Server1 that runs Windows Server and has the File Server role installed The office in Montreal contains 20 client computers that run Windows 10. Montreal does NOT have any servers. The company plans to deploy a new line-of-business (LOB) application to all the client computers. The installation source files for the application are in \\Server1 \Apps. You need to make the installation source files available to the client computers in the Montreal office by using the minimum amount of WAN bandwidth possible. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Ways to install branch cache file server/client https://learn.microsoft.com/en-us/windows-server/networking/branchcache/branchcache Main office is - BranchCache for Network Files role service of the File Services server role For =branch office or clients- install branch cache in distributed mode or hosted mode. -- distributed because several clients will have a copy You could also use the office and have - branch cache - with hosted cache server mode enabled- ** not used this question

   Source: Adapted from community discussion — johosofat

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

5. Question 215 · 264 in bank

   You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. Group writeback is enabled in Azure AD Connect. The AD DS domain contains a server named Server1. Server1 contains a shared folder named share1. You have an Azure Storage account named storage2 that uses Azure AD-based access control. The storage2 account contains a share named share2. You need to create a security group that meets the following requirements: ✑ Can contain users from the AD DS domain ✑ Can be used to authorize user access to share1 and share2 What should you do?

   • AIn the Azure AD tenant, create a security group that has assigned membership.
   • BIn the AD DS domain, create a universal security group.
   • CIn the Azure AD tenant, create a security group that has dynamic membership.
   • DIn the Azure AD tenant, create a Microsoft 365 group.

   Show answer

   Answer: B

   Explanation

   https://learn.microsoft.com/en-us/entra/identity/hybrid/cloud-sync/how-to-configure-entra-to-active-directory Supported groups: - only cloud created Security groups are supported - these groups can have assigned or dynamic membership. - these groups can only contain on-premises synchronized users and / or additional cloud created security groups. - the on-premises user accounts that are synchronized and are members of this cloud created security group, can be from the same domain or cross-domain, but they all must be from the same forest. - these groups are written back with the AD groups scope of universal. Your on-premises environment must support the universal group scope. - groups that are larger than 50,000 members aren't supported. - each direct child nested group counts as one member in the referencing group

   Source: Adapted from community discussion — Kuikz

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

6. Question 216 · 264 in bank

   HOTSPOT - You need to sync files from an on premises server named Server1 to Azure by using Azure File Sync. You have a cloud tiering policy that is configured for 30 percent free space and 70 days. Volume E on Server1 is 500 GB. A year ago, you configured E:\Data on Server1 to sync by using Azure File Sync. The files that are visible in E:\Data are shown in the following table.

   

   Volume E does NOT contain any other files. Where are File1 and File3 located? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/azure-file-sync https://docs.microsoft.com/en-us/azure/storage/file-sync/file-sync-cloud-tiering-overview

   Source: Adapted from community discussion — valgaw

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

7. Question 217 · 264 in bank

   HOTSPOT - You have a Group Policy Object (GPO) named GPO1 that contains user settings only. You plan to apply GPO1 to a global security group named Group1. You link GPO1 to the domain, and you remove all the permissions granted to the Authenticated Users group. You need to configure permissions for GPOI to meet the following requirements: ✑ GPO1 must apply only to the users in Group1. ✑ The solution must use the principle of least privilege. Which permissions should you grant to Group1 and the Domain Computers group? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   I'm wrong! I should write: Permissions for Group1 should be "Apply group policy and Read" and for Domain Computers correct permissions are "Read only". When you choose "Read only"for Group1 GPO will not be applied for members of Group1. You shouldn't choose "Apply group policy" specific permission for Domain Computers group, because this GPO is not designed for this group, but this group have to have Read specific permission - I have checked it in my lab

   Source: Adapted from community discussion — lukiduc9625

   References

   • Microsoft Learn

   

   Next question

8. Question 218 · 264 in bank

   HOTSPOT - Your network contains a two-domain on-premises Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains the domain controllers shown in the following table.

   

   All domain controllers are backed up by using Azure Backup. You create an Active Directory site named Site3. Site1, Site2, and Site3 each has a dedicated site link to the Hub site. In Site3, you install a new server named Server1. You need to promote Server1 to an RODC in child.contoso.com by using the Install from Media (IFM) option. The solution must minimize network traffic. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   NTDSUTIL.exe is correct: https://social.technet.microsoft.com/wiki/contents/articles/8630.active-directory-step-by-step-guide-to-install-an-additional-domain-controller-using-ifm.aspx "Windows Server 2008 and Windows Server 2008 R2 include an improved version of the Ntdsutil tool that you can use to create installation media for an additional domain controller. You can use Ntdsutil.exe to create installation media for additional domain controllers that you are creating in a domain. The IFM method uses the data in the installation media to install AD DS, which eliminates the need to replicate every object from a partner domain controller."

   Source: Adapted from community discussion — [Removed]

   

   Next question

9. Question 219 · 264 in bank

   DRAG DROP - You deploy a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. You deploy a server to the domain and configure the server to run a service. You need to ensure that the service can use a group managed service account (gMSA) to authenticate. Which three PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

10. Question 220 · 264 in bank

    HOTSPOT - You have an on-premises DNS server named Server1 that runs Windows Server. Server1 hosts a DNS zone named fabnkam.com. You have an Azure subscription that contains the resources shown in the following table.

    

    You need to design a solution that will automatically resolve the names of any PaaS resources for which you configure private endpoints in Vnet1. How should you configure the name resolution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    I think the correct answer is: -Configure VM1 to fordward request for the contoso.com zone to the Azure-provided DNS al 168.63.129.16 -Configure fordwarding for the contodo.com zone to VM1 The public DNS zone don´t have nothing to do here. https://learn.microsoft.com/en-us/azure/private-link/private-endpoint-dns#on-premises-workloads-using-a-dns-forwarder

    Source: Adapted from community discussion — [Removed]

    References

    • Microsoft Learn
    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-800 practice, question 211. 264 questions available.