AZ-800 practice questions 81–90

1. Question 81 · 264 in bank

   DRAG DROP - You deploy a new Active Directory Domain Services (AD DS) forest named contoso.com. The domain contains three domain controllers named DC1, DC2, and DC3. You rename Default-First-Site-Name as Site1. You plan to ship DC1, DC2, and DC3 to datacenters in different locations. You need to configure replication between DC1, DC2, and DC3 to meet the following requirements: ✑ Each domain controller must reside in its own Active Directory site. ✑ The replication schedule between each site must be controlled independently. ✑ Interruptions to replication must be minimized. Which three actions should you perform in sequence in the Active Directory Sites and Services console? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Answer is wrong, nothing to do with Connection objects. To control Inter-site replication, configure the IPSITELINK properties and schedule. KCC generates connection objects and takes replication details from the site link. Correct answer is: 1. create 2 additional sites and move DC2 and DC3. 2. Create and additional site link between site 2 and site 3 (does this first so as not to disrupt site 1 and site 2) 3. remove Site 2 from Default sitelink (leaving site 1 and 3 to replicate. by default site-link Bridging is enabled so 1 to 2 and 1 to 3 bridges the link between 2 and 3)

   Source: Adapted from community discussion — prepper666

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 82 · 264 in bank

   HOTSPOT - You need to meet the technical requirements for VM1. Which cmdlet should you run first? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/virtualization/hyper-v-on-windows/user-guide/nested-virtualization

   References

   • Microsoft Learn

   

   Next question

3. Question 83 · 264 in bank

   You need to meet the technical requirements for VM2. What should you do?

   • AImplement shielded virtual machines.
   • BEnable the Guest services integration service.
   • CImplement Credential Guard.
   • DEnable enhanced session mode.

   Show answer

   Answer: D

   Explanation

   The question is about preventing a VMConnect user from taking over another user's VMConnect session. - "Turn on enhanced session mode on Hyper-V host."

   Source: Adapted from community discussion — bastien95

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

4. Question 84 · 264 in bank

   Select 2

   You need to implement a name resolution solution that meets the networking requirements. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • AConfigure the DNS Servers settings for Vnet1.
   • BOn DC3, install the DNS Server role.
   • CCreate a virtual network link in the corp.fabrikam.com Azure private DNS zone.
   • DConfigure a conditional forwarder on DC3.
   • EEnable autoregistration in the corp.fabrikam.com Azure private DNS zone.
   • FCreate an Azure private DNZ zone named corp.fabrikam.com.
   • GCreate an Azure DNZ zone named corp.fabrikam.com.

   Show answer

   Answer: AB

   Explanation

   D is incorrect, due to the fact, there is no requirement stated in question nor architecture for conditional forwarding. Why question forest or DNS structure when in single DC model. ? Can someone provide links to support that claim? Single domain, don't need a conditional forwarder.

   Source: Adapted from community discussion — stormyR

   Next question

5. Question 85 · 264 in bank

   HOTSPOT - You need to configure network communication between the Seattle and New York offices. The solution must meet the networking requirements. What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-expressroute-portal

   Source: Adapted from community discussion — GoforIT21

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • azure.microsoft.com documentation

   

   Next question

6. Question 86 · 264 in bank

   You need to configure remote administration to meet the security requirements. What should you use?

   • Aan Azure Bastion host
   • BAzure AD Privileged Identity Management (PIM)
   • Cthe Remote Desktop extension for Azure Cloud Services
   • Djust in time (JIT) VM access

   Show answer

   Answer: D

   Explanation

   This is defender for cloud now- it has more features possible - you can go to security center and add JIT now and you can also go to the vm properties and ask that way- these are the links that start down the foxhole- but im saving this for az-104 https://learn.microsoft.com/en-us/azure/defender-for-cloud/just-in-time-access-usage?tabs=jit-config-asc%2Cjit-request-asc https://learn.microsoft.com/en-us/azure/defender-for-cloud/just-in-time-access-overview?tabs=defender-for-container-arch-aks

   Source: Adapted from community discussion — johosofat

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

7. Question 87 · 264 in bank

   Select 2

   You need to implement an availability solution for DHCP that meets the networking requirements. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • AOn DHCP1, create a scope that contains 25 percent of the IP addresses from Scope2.
   • BOn the router in each office, configure a DHCP relay.
   • CDHCP2, configure a scope that contains 25 percent of the IP addresses from Scope1.
   • DOn each DHCP server, install the Failover Clustering feature and add the DHCP cluster role.
   • EOn each DHCP scope, configure DHCP failover.

   Show answer

   Answer: BE

   Explanation

   Correct Answers are DHCP failover (no split scope needed) & DHCP relay (as you need the IP helper to forward requests from different networks).

   Source: Adapted from community discussion — musmas82473

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

8. Question 88 · 264 in bank

   Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen. Your network contains an Active Directory Domains Services (AD DS) domain named contoso.com. You implement a central store. You create a new Group Policy Object (GPO) named GPO1. When you attempt to edit GPO1, you see the settings shown in the exhibit. (Click the Exhibit tab.)

   

   You need to ensure that all settings are available. Solution: You delete the \\contoso.com\SYSVOL\contoso.com\Policies\PolicyDefinitions folder. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Next question

9. Question 89 · 264 in bank

   HOTSPOT - You need to configure Azure File Sync to meet the file sharing requirements. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/storage/file-sync/file-sync-planning

   Source: Adapted from community discussion — syu31svc

   

   Next question

10. Question 90 · 264 in bank

    Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen. Your network contains an Active Directory Domains Services (AD DS) domain named contoso.com. You implement a central store. You create a new Group Policy Object (GPO) named GPO1. When you attempt to edit GPO1, you see the settings shown in the exhibit. (Click the Exhibit tab.)

    

    You need to ensure that all settings are available. Solution: You modify the properties of GPO1. Does this meet the goal?

    • AYes
    • BNo

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-800 practice, question 81. 264 questions available.