AZ-800 practice questions 61–70

1. Question 61 · 264 in bank

   SIMULATION - You need to create a group-managed service account (gMSA) named gMSA1 and make gMSA1 available on SRV1. To complete this task, sign in to the required computer or computers.

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   1.Open PowerShell as an Administrator on a domain controller. 2. Create the KDS Root Key (if not already created): Add-KdsRootKey -EffectiveImmediately 3.Create the gMSA: New-ADServiceAccount -Name gMSA1 -DNSHostName srv1.yourdomain.com -PrincipalsAllowedToRetrieveManagedPassword "Domain Computers" 4. Install the gMSA on SRV1: Open PowerShell on SRV1 as an Administrator. Install the AD module if not already installed: Install-WindowsFeature RSAT-AD-PowerShell Install the gMSA: Install-ADServiceAccount -Identity gMSA1 5.Test the gMSA installation: Test-ADServiceAccount -Identity gMSA1 If the test returns True, the gMSA is successfully installed and available on SRV1.

   Source: Adapted from community discussion — Krayzr

   

   Next question

2. Question 62 · 264 in bank

   SIMULATION - You use a Group Policy preference to map \\dc1.contoso.com\install as drive H for all users. If a user already has an existing drive mapping for H, the new drive mapping must take precedence. To complete this task, sign in to the required computer or computers.

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

3. Question 63 · 264 in bank

   HOTSPOT - Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the users shown in the following table.

   

   The domain has the Group Policy Objects (GPOs) shown in the following table.

   

   The GPOs are configured as shown in the following table.

   

   For each of the following statements, select Yes if the statement is true, Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   No granular password policies are mentiod. So the Default Domain Policy is leading. In this case minimal password length of 8. So: YES NO NO

   Source: Adapted from community discussion — 6de0f77

   

   Next question

4. Question 64 · 264 in bank

   Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server 2022. You need to manage Storage Quality of Service (QoS) from Server1. Which Remote Server Administration Tools (RSAT) feature should you install?

   • ARSAT: Failover Clustering Tools
   • BRSAT: File Services Tools
   • CRSAT: Storage Replica Module for Windows PowerShell
   • DRSAT: Data Center Bridging LLDP Tools

   Show answer

   Answer: A

   Next question

5. Question 65 · 264 in bank

   HOTSPOT - Your network contains the domains shown in the following exhibit.

   

   You need to establish trust relationships as shown in the following exhibit.

   

   Which type of trust can you use for Trust1 and Trust2? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

6. Question 66 · 264 in bank

   You have a server named Server1 that runs Windows Server, has the File Server Resource Manager role service installed, and contains the volumes shown in the following table.

   

   You plan to configure file screens on Server1. On which volumes can you configure a file screen?

   • AC, D, E, and F
   • BF only
   • CC and F only
   • DC, E and F only
   • EE and F only

   Show answer

   Answer: C

   Next question

7. Question 67 · 264 in bank

   HOTSPOT - You have an Azure Active Directory Domain Services (Azure AD DS) domain. You create a new user named Admin1. You need Admin1 to deploy custom Group Policy settings to all the computers in the domain. The solution must use the principle of least privilege. What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/active-directory-domain-services/manage-group-policy https://docs.microsoft.com/en-us/azure/active-directory-domain-services/create-ou

   Source: Adapted from community discussion — stonwall12

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 68 · 264 in bank

   You have three on-premises servers named SVR1, SVR2, and SVR3 that run Windows Server. SRV1 has a direct-attached storage (DAS) array. You plan to deploy a failover cluster named Cluster1 by using SVR2 and SVR3. You need to ensure that the DAS array on SRV1 can be used as shared storage for Cluster1. The solution must ensure that Cluster1 has block-level access to the storage. What should you do first on SRV1?

   • ARun the start-service -name msiscsi cmdlet.
   • BInstall the iSCSI Target Server role service.
   • CInstall the File Server role service.
   • DRun the Enable-ClusterStorageSpacesDirect cmdlet.

   Show answer

   Answer: D

   Next question

9. Question 69 · 264 in bank

   HOTSPOT - Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the users shown in the following table.

   

   The domain has the Group Policy Objects (GPOs) shown in the following table.

   

   The GPOs are configured to map a drive named H as shown in the following table.

   

   For each of the following statements, select Yes if the statement is true, Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   N/Y/N Enforced. If the GPO link is enforced, it cannot be blocked at a lower-level (in the Group Policy processing hierarchy) container. https://learn.microsoft.com/en-us/powershell/module/grouppolicy/set-gplink?view=windowsserver2022-ps

   Source: Adapted from community discussion — makonmakon

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

10. Question 70 · 264 in bank

    Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a user named User1. User1 is a member of a group named Group1 and is in an organizational unit (OU) named OU1. The domain has minimum password lengths configured as shown in the following table.

    

    What is the minimum password length that User1 should use when changing to a new password?

    • A7
    • B8
    • C10
    • D12
    • E14

    Show answer

    Answer: A

    Explanation

    When determining the minimum password length that User1 should use when changing to a new password, the following precedence order should be considered: Password Settings object applied directly to the user (User1). Password Settings object applied to the user's group (Group1). Group Policy linked to the user's organizational unit (OU1). Default Domain Policy. Default Domain Controllers Policy. Based on the precedence order and the configuration provided: Password Settings object applied to User1: 7 Password Settings object applied to Group1: 14 Group Policy linked to OU1: 8 Default Domain Policy: 10 Default Domain Controllers Policy: 12 User1's minimum password length will be determined by the Password Settings object applied directly to the user (User1), which specifies a minimum password length of 7 characters. Therefore, User1 should use a minimum password length of 7 characters when changing to a new password.

    Source: Adapted from community discussion — SIAMIANJI

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-800 practice, question 61. 264 questions available.