All About Tested AZ-800 Dumps Questions
Exam Code: AZ-800 (Practice Exam Latest Test Questions VCE PDF)
Exam Name: Administering Windows Server Hybrid Core Infrastructure
Certification Provider: Microsoft
Free Today! Guaranteed Training- Pass AZ-800 Exam.
Free AZ-800 Demo Online For Microsoft Certifitcation:
NEW QUESTION 1
Your network contains an Active Directory Domain Services (AD DS) domain named conioso.com.
You need to identify which server is the PDC emulator for the domain.
Solution: from Active Directory Users and Computers, you right-click contoso.com in the console tree, and then select Operations Master
Does this meet the goal?
- A. Yes
- B. No
Answer: A
NEW QUESTION 2
Your network contains an Active Directory Domain Services (AD DS) domain.
You have a Group Policy Object (GPO) named GPO1 that contains Group Policy preferences.
You plan to link GPO1 to the domain.
You need to ensure that the preference in GPO1 apply only to domain member servers and NOT to domain controllers or client computers. All the other Group Policy settings in GPO1 must apply to all the computers. The solution must minimize administrative effort.
Which type of item level targeting should you use?
- A. Domain
- B. Operating System
- C. Security Group
- D. Environment Variable
Answer: B
Explanation:
Reference:
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn789189(v=ws.11)#operating-system-targeting
NEW QUESTION 3
You need to meet the technical requirements for User1. The solution must use the principle of least privilege.
What should you do?
- A. Add Users1 to the Server Operators group in contoso.com.
- B. Create a delegation on contoso.com.
- C. Add Users1 to the Account Operators group in contoso.com.
- D. Create a delegation on OU3.
Answer: D
Explanation:
Reference:
https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/delegating-administration-of-account-ous-and-resource-ous
NEW QUESTION 4
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.
You need to identify which server is the PDC emulator for the domain.
Solution: From Active Directory Domains and Trusts, you right-click Active Directory Domains and Trusts in the console tree, and then select Operations Master.
Does this meet the goal?
- A. Yes
- B. No
Answer: B
NEW QUESTION 5
You need to meet the technical requirements for Server1. Which users can currently perform the required tasks?
- A. Admin1 only
- B. Admin3 only
- C. Admin1 and Admin3 only
- D. Admin1 Admin2. and Admm3
Answer: C
NEW QUESTION 6
HOTSPOT
Your network contains an Active Directory Domain Services (AD DS) domain named adatum.com. The domain contains a server named Server1 and the users shown in the following table.
Server1 contains a folder named D:\Folder1. The advanced security settings for Folder1 are configured as shown in the Permissions exhibit. (Click the Permissions tab.)
Folder1 is shared by using the following configurations:
The share permissions for Share1 are shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Solution:
To access files in a shared folder, you need to be granted permissions on the folder (NTFS permissions) AND permissions on the share. The most restrictive permission of the folder permissions and share permissions apply.
Box 1: Yes
Group1 has Read access to Folder1 and Change access to Share1. Therefore, User1 can read the files in Share1.
Box 2: No
Group3 has Full Control access to Share1. However, Group3 has no permissions configured Folder1. Therefore, User3 cannot access the files in Share1.
Box 3: Yes
Group2 has write permission to Folder1. However, Group2 has no permission on Share1. Therefore, users in Group2 cannot access files in the shared folder.
Access Based Enumeration when enabled hides files and folders that users do not have permission to access. However, Access Based Enumeration is not enabled on Share1.
This is indicated by the FolderEnumerationMode – Unrestricted setting. Therefore, the share will be visible to User2 even though User2 cannot access the shared folder.
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 7
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using DEFAULTIPSITELINK.
You open a new branch office that contains only client computers.
You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1.
Solution: You create an organization unit (OU) that contains the client computers in the branch office. You configure the Try Next Closest Site Group Policy Object (GPO) setting in a GPO that is linked to the new OU.
Does this meet the goal?
- A. Yes
- B. No
Answer: B
NEW QUESTION 8
Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using DEFAULTIPSITELINK.
You open a new branch office that contains only client computers.
You need to ensure that the client computers in the new office are primarily authenticated
by the domain controllers in Site1.
Solution: You create a new subnet object that is associated to Site1. Does this meet the goal?
- A. Yes
- B. No
Answer: B
NEW QUESTION 9
You have a server named Server1 that runs Windows Server.
You plan to host applications in Windows containers.
You need to configure Server1 to run containers. What should you install?
- A. Windows Admin Center
- B. the Windows Subsystem for Linux
- C. Doctor
- D. Hyper-V
Answer: C
NEW QUESTION 10
HOTSPOT
You need to configure Azure File Sync to meet the file sharing requirements. What should you do? To answer, select the appropriate options in the answer area. NOTE Each correct selection is worth one point.
Solution:
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 11
You have an on-premises server named Server1 that runs Windows Server. Server1 contains an app named App1 and a firewall named Firewall1.
You have an Azure subscription.
Internal users connect to App1 by using WebSockets.
You need to make App1 available to users on the internet. The solution must minimize the number of inbound ports open on Firewall 1.
What should you include in the solution?
- A. Microsoft Application Request Routing (ARR) Version 2
- B. Web Application Proxy
- C. Azure Relay
- D. Azure Application Gateway
Answer: C
NEW QUESTION 12
DRAG DROP
You deploy a single-domain Active Directory Domain Services (AD DS) forest named contoso.com.
You deploy a server to the domain and configure the server to run a service.
You need to ensure that the service can use a group managed service account (gMSA) to authenticate.
Which three PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.
Solution:
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 13
You haw? a server named Host! that has the Hyper-V server role installed. Host! hosts a virtual machine named VM1.
You have a management server named Server! that runs Windows Server. You remotely
manage Host1 from Server1 by using Hyper-V Manager.
You need to ensure that you can access a USB hard drive connected to Server1 when you connect to VM1 by using Virtual Machine Connection.
Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
- A. From the Hyper-V Settings of Host1, select Allow enhanced session mode
- B. From Disk Management on Host1. attach a virtual hard disk.
- C. From Virtual Machine Connection, switch to a basic session.
- D. From Virtual Machine Connection select Show Options and then select the USB hard drive.
- E. From Disk Management on Host1, select Rescan Disks
Answer: AD
Explanation:
Reference:
https://docs.microsoft.com/en-us/windows-server/virtualization/hyper-v/learn-more/use-local-resources-on-hyper-v-virtual-machine-with-vmconnect
NEW QUESTION 14
HOTSPOT
Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com that syncs with an Azure AD tenant. The tenant contains a group named Group1 and the users shown in the following table.
Domain/OU filtering in Azure AD Connect is configured as shown in the Filtering exhibit. (Click the Filtering tab.)
You review the Azure AD Connect configurations as shown in the Configure exhibit. (Click the Configure tab.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Solution:
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 15
SIMULATION
Task 8
You need to create an Active Directory Domain Services (AD DS) site named Site2 that is associated to an IP address range of 192.168.2.0 to 192.168.2.255.
Solution:
To create an AD DS site named Site2 that is associated to an IP address range of 192.168.2.0 to 192.168.2.255, you can follow these steps:
✑ On a domain controller or a computer that has the Remote Server Administration
Tools (RSAT) installed, open Active Directory Sites and Services from the Administrative Tools menu or by typing dssite.msc in the Run box.
✑ In the left pane, right-click on Sites and select New Site.
✑ In the New Object - Site dialog box, enter Site2 as the Name of the new site.
Select a site link to associate the new site with, such as DEFAULTIPSITELINK, and click OK. You can also create a new site link if you want to customize the
replication frequency and schedule between the sites. For more information on how to create a site link, see Create a Site Link.✑ In the left pane, right-click on Subnets and select New Subnet.
✑ In the New Object - Subnet dialog box, enter 192.168.2.0/24 as the Prefix of the subnet. This notation represents the IP address range of 192.168.2.0 to 192.168.2.255 with a subnet mask of 255.255.255.0. Select Site2 as the Site object to associate the subnet with, and click OK.
✑ Wait for the changes to replicate to other domain controllers. You can verify the
site and subnet creation by checking the Sites and Subnets containers in Active Directory Sites and Services.
Now, you have created an AD DS site named Site2 that is associated to an IP address range of 192.168.2.0 to 192.168.2.255. You can add domain controllers to the new site and configure the site links and site link bridges to optimize the replication topology.
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 16
Your company has a main office and a branch office. The two offices are connected by using a WAN link. Each office contains a firewall that filters WAN traffic.
The network in the branch office contains 10 servers that run Windows Server. All servers are administered from the main office only.
You plan to manage the servers in the branch office by using a Windows Admin Center gateway.
On a server in the branch office, you install the Windows Admin Center gateway by using the defaults settings.
You need to configure the firewall in the branch office to allow the required inbound connection to the Windows Admin Center gateway.
Which inbound TCP port should you allow?
- A. 443
- B. 3389
- C. 5985
- D. 6516
Answer: A
NEW QUESTION 17
You have an Azure subscription that contains the storage accounts shown in the following table.
In the West US Azure region, you create a storage sync service named SyncA. You plan to create a sync group named GroupA.
What is the maximum number of cloud endpoints you can use with GroupA?
- A. 1
- B. 2
- C. 3
- D. 4
Answer: B
NEW QUESTION 18You have an Active Directory Domain Services (AD DS) domain. The domain contains three servers named Server 1, Server2, and Server3 that run Windows Server.
You sign in to Server1 by using a domain account and start a remote PowerShell session to Server2. From the remote PowerShell session, you attempt to access a resource on Server3. but access to the resource is denied.
You need to ensure that your credentials are passed from Server1 to Server3. The solution must minimize administrative effort. What should you do?
- A. Configure Kerberos constrained delegation.
- B. Configure Just Enough Administration (JEA).
- C. Configure selective authentication for the domain.
- D. Disable the Enforce user logon restrictions policy setting for the domain.
Answer: A
NEW QUESTION 19
......
P.S. Allfreedumps.com now are offering 100% pass ensure AZ-800 dumps! All AZ-800 exam questions have been updated with correct answers: https://www.allfreedumps.com/AZ-800-dumps.html (225 New Questions)