How to pass Microsoft AZ-800 exam with the help of dumps?

Question # 1

You have an Azure virtual machine named VM1 that runs Windows Server. You perform the following actions on VM1: • Create a folder named Folder1 on volume C • Create a folder named Folder2 on volume D. • Add a new data disk to VM1 and create a new volume that is assigned drive letter E. • Install an app named App1 on volume E. You plan to resize VM1. Which objects will present after you resize VM1?

A. Folded and Folder2 only 
B. Folder1, volume 
E, and App1 only 
C. Folder1 only
 D. Folded. Folder2. App1, and volume E

Show Answer

Question # 2

Your network contains a Active Directory Domain Service (AD DS) forest named contoso.com. The forest root domain contains a server named server1. contoso.com. A two-way forest trust exists between the contoso.com forest and an AD DS forest named fabrikam.com. The fabrikam.com forest contains 10 child domains. You need to ensure that only the members of a group named fabrikam\Group1 can authenticate to server1.contoso.com. What should you do first?

A. Change the trust to a one-way external trust. 
B. Add fabrikam\Group1 to the local Users group on server1.contoso.com. 
C. Enable SID filtering for the trust.
 D. Enable Selective authentication for the trust. 

Show Answer

Question # 3

Your network contains an Active Domain Services (AD DS) forest. The forest contains three domains. Each domain contains 10 domain controllers. You plan to store a DNS zone in a custom active Directory partition. You need to create the Active Directory partition for the zone. The partition replicate to only four of the domain controllers. What should you use?

A. Active Directory Sites and Services 
B. Active Directory Administrator Center 
C. dnscmd.exe 
D. DNS Manager 

Show Answer

Question # 4

You have a server named Server1 that runs Windows Server. Server1 has the storage pools shown in the following table. You plan to create a virtual disk named VDisk1 that will use storage tiers. Which pools can you use to create VDisk1 ?

A. Pool2 and Pool3 only 
B. Pool 2only 
C. Pool only 
D. Pool, Pool2, and Pool3 
E. Pool1 and Pool2 only 
F. Pool1 and Pool3 only 
G. Pool3 only 

Show Answer

Question # 5

You have an Azure virtual machine named Server1 that runs a network management application. Server1 has the following network configuration. * Network interface.Nic1 * IP address 10.1.1.1/24 * Connected to: Vnet1/Subnet1 You need connect Server1 to an additional subnet named Vnet1/Subnet2. What should you do?

A. Create a private endpoint on Subnet2
 B. Add a network interface to server1. 
C. Modify the IP configurations of Nic1. 
D. Add an IP configuration to Nic1. 

Show Answer

Question # 6

You have a server named Server1 that runs Windows Server. You plan to host applications in Windows containers. You need to configure Server1 to run containers. What should you install?

A. Windows Admin Center 
B. the Windows Subsystem for Linux 
C. Doctor
 D. Hyper-V

Show Answer

Question # 7

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant Group writeback is enabled in Azure AD Connect. The AD DS domain contains a server named Server1 Server 1 contains a shared folder named share1. You have an Azure Storage account named storage2 that uses Azure AD-based access control. The storage2 account contains a share named shared You need to create a security group that meets the following requirements: • Can contain users from the AD DS domain • Can be used to authorize user access to share 1 and share2 What should you do?

A. in the AD DS domain, create a universal security group 
B. in the Azure AD tenant create a security group that has assigned membership 
C. in the Azure AD Tenant create a security group that has dynamic membership. 
D. in the Azure AD tenant create a Microsoft 365 group 

Show Answer

Question # 8

You haw an Azure virtual machine named VM1 that runs Windows Server You need to configure the management of VM1 to meet the following requirements: • Require administrators to request access to VM1 before establishing a Remote Desktop connection. • Limit access to VM1 from specific source IP addresses. • Limit access to VMI to a specific management portWhat should you configure?

A. a network security group (NSG) 
B. Azure Active Directory (Azure AD) Privileged identity Management (PIM) 
C. Azure Front Door 
D. Microsoft Defender for Cloud 

Show Answer

Question # 9

You haw an Azure virtual machine named VM1 that runs Windows Server You need to configure the management of VM1 to meet the following requirements: • Require administrators to request access to VM1 before establishing a Remote Desktopconnection.• Limit access to VM1 from specific source IP addresses.• Limit access to VMI to a specific management portWhat should you configure?

A. a network security group (NSG) 
B. Azure Active Directory (Azure AD) Privileged identity Management (PIM) 
C. Azure Front Door 
D. Microsoft Defender for Cloud 

Show Answer

Question # 10

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using DEFAULTIPSITELINK. You open a new branch office that contains only client computers. You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1. Solution: You configure the Try Next Closest Site Group Policy Object (GPO) setting in a GPO that is linked to Site1.Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 11

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a DNS server named Server1. Server1 hosts a DNS zone named fabrikam.com that was signed by DNSSEC. You need to ensure that all the member servers in the domain perform DNSSEC validation for the fabrikam.com namespace. What should you do?

A. On Served, run the Add-DnsServerTrustAnchor cmdlet. 
B. On each member server, run the Add-DnsServerTrustAnchor cmdlet. 
C. From a Group Policy Object (GPO). add a rule to the Name Resolution Policy Table (NRPT). 
D. From a Group Policy Object (GPO). modify the Network List Manager policies. 

Show Answer

Question # 12

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. You need to identify which server is the PDC emulator for the domain. Solution: From Active Directory Sites and Services, you right-click Default-First-Site-Name in the console tree, and then select Properties.  Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 13

You have an Azure Active Directory Domain Services (Azure AD DS) domain named contoso.com. You need to provide an administrator with the ability to manage Group Policy Objects(GPOs). The solution must use the principle of least privilege. To which group should you add the administrator?

A. AAD DC Administrators 
B. Domain Admins 
C. Schema Admins 
D. Enterprise Admins 
E. Group Policy Creator Owners 

Show Answer

Question # 14

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using DEFAULTIPSITELINK. You open a new branch office that contains only client computers. You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1. Solution: You create a new site named Site4 and associate Site4 to DEFAULTSITELINK. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 15

You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. You plan to implement self-service password reset (SSPR) in Azure AD. You need to ensure that users that reset their passwords by using SSPR can use the new password resources in the AD DS domain. What should you do?

A. Deploy the Azure AD Password Protection proxy service to the on premises network. 
B. Run the Microsoft Azure Active Directory Connect wizard and select Password writeback. 
C. Grant the Change password permission for the domain to the Azure AD Connect service account. 
D. Grant the impersonate a client after authentication user right to the Azure AD Connect service account. 

Show Answer

Question # 16

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com You need to identify which server is the PDC emulator for the domain. Solution: From Active Directory Domains and Trusts, you right-click Active Directory Domains and Trusts in the console tree, and then select Operations Master.Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 17

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains two servers named Server1 and Server2. Server1 contains a disk named Disk2. Disk2 contains a folder named UserData. UserData is shared to the Domain Users group. Disk2 is configured for deduplication. Server1 is protected by using Azure Backup.Server1 fails. You connect Disk2 to Server2. You need to ensure that you can access all the files on Disk2 as quickly as possible. What should you do?

A. Create a storage pool. 
B. Restore files from Azure Backup. 
C. Install the File Server Resource Manager server role. 
D. Install the Data Deduplication server role. 

Show Answer

Question # 18

A. DC1 
B. DC2 
C. DC3 
D. DC4 
E. DC5 

Show Answer

Question # 19

Your network contains an Active Directory Domain Services (AD DS) domain namedcontoso.com.You need to identify which server is the PDC emulator for the domain.Solution: From a command prompt, you run netdom.exe query fsmo.Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 20

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result,these questions will not appear in the review screen. You are planning the deployment of DNS to a new network. You have three internal DNS servers as shown in the following table.

A. Yes 
B. No 

Show Answer

Question # 21

You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. The domain contains two servers namedServer1 and Server2. A user named Admin1 is a member of the local Administrators group on Server1 and Server2. You plan to manage Server1 and Server2 by using Azure Arc. Azure Arc objects will be added to a resource group named RG1. You need to ensure that Admin1 can configure Server1 and Server2 to be managed by using Azure Arc. What should you do first? 

A. From the Azure portal, generate a new onboarding script. 
B. Assign Admin1 the Azure Connected Machine Onboarding role for RG1. 
C. Hybrid Azure AD join Server1 and Server2. 
D. Create an Azure cloud-only account for Admin1. 

Show Answer

Question # 22

You have an on-premises network that is connected to an Azure virtual network by using a Site-to-Site VPN. Each network contains a subnet that has the same IP address space.The on-premises subnet contains a virtual machine. You plan to migrate the virtual machine to the Azure subnet. You need to migrate the on premises virtual machine to Azure without modifying the IP address. The solution must minim administrative effort. What should you implement before you perform the migration?

A. Azure Extended Network 
B. Azure Virtual Network NAT 
C. Azure Application Gateway 
D. Azure virtual network peering 

Show Answer

Question # 23

A. Yes 
B. No 

Show Answer

Question # 24

A. Create a conditional forwarder for fabrikam.com on DC1. 
B. Create a stub zone for fabrikam.com on DC1. 
C. Create a secondary zone for fabnlcam.com on DO. 
D. Deploy an Azure virtual machine that runs Windows Server. Modify the DNS Serverssettings for the virtual network. 
E. Deploy an Azure virtual machine that runs Windows Server. Configure the virtualmachine &s a DNS forwarder. 

Show Answer

Question # 25

You have an Azure virtual machine named VM1 that has a private IP address only.You configure the Windows Admin Center extension on VM1.You have an on-premises computer that runs Windows 11. You use the computer forserver management.You need to ensure that you can use Windows Admin Center from the Azure portal tomanage VM1.What should you configure?

A. an Azure Bastion host on the virtual network that contains VM1. 
B. a VPN connection to the virtual network that contains VM1. 
C. a network security group 1NSG) rule that allows inbound traffic on port 443. 
D. a private endpoint on the virtual network that contains VM1.

Show Answer

Question # 26

You have a Windows Server container host named Server 1 and a container image named Image1. You need to start a container from image1. The solution must run the container on a HyperV virtual machine. Which parameter should you specify when you run the docker run command?

A. --expose 
B. --privileged 
C. --runtime 
D. --entrypoint 
E. --isolation 

Show Answer

Question # 27

You plan to deploy a containerized application that requires .NET Core. You need to create a container image for the application. the image must be as small as possible.Which base image should you use?

A. Nano Server 
B. Server Cote 
C. Windows Server 
D. Windows 

Show Answer

Question # 28

Your network contains an Active Directory Domain Services (AD DS) domain- The domain contains 10 servers that run Windows Server. The servers have static IP addresses.You plan to use DHCP to assign IP addresses to the servers. You need to ensure that each server always receives the same IP address. Which type of identifier should you use to create a DHCP reservation for each server?

A. universally unique identifier (UUID) 
B. fully qualified domain name (FQDN) 
C. NetBIOS name 
D. MAC address 

Show Answer

Question # 29

A. Change the scope of Group2 to Universal 
B. Clear the Configure device writeback option. 
C. Change the scope o' Group1 and Group2 to Global 
D. Select the Configure Hybrid Azure AD join option. 

Show Answer

Question # 30

Your network contains an Active Directory Domain Services (AD DS) domain named conioso.com. You need to identify which server is the PDC emulator for the domain. Solution: from Active Directory Users and Computers, you right-click contoso.com in the console tree, and then select Operations Master Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 31

You have five tile servers that run Windows Server.You need to block users from uploading video files that have the .mov extension to sharedfolders on the file servers. All other types of files must be allowed. The solution mustminimize administrative effort.What should you create?

A. a Dynamic Access Control central access policy 
B. a file screen 
C. a Dynamic Access Control central access rule 
D. a data loss prevention (DLP) policy 

Show Answer

Question # 32

A. Pool2 and Pool3 only 
B. Pool 2only 
C. Pool only 
D. Pool, Pool2, and Pool3 
E. Pool1 and Pool2 only 
F. Pool1 and Pool3 only 
G. Pool3 only 

Show Answer

Question # 33

A. a forwarder 
B. a conditional forwarder 
C. a delegation 
D. a secondary zone 
E. a reverse lookup zone 

Show Answer

Question # 34

You have an on-premises server named Server1 that runs Windows Server. You have an Azure virtual network that contains an Azure virtual network gateway. You need to connectonly Server1 to the Azure virtual network What should you use?

A. Azure Network Adapter 
B. a Site-to-SiteVPN 
C. an ExpressRoute circuit 
D. Azure Extended Network 

Show Answer

Question # 35

You have an Azure virtual machine named VM1 that runs Windows Server and has the following configurations: Size: D2s_v4 Operating system disk: 127-GiB standard SSD Data disk 128-GiB standard SSD Virtual machine generation: Gen 2 You plan to perform the following changes to VM1: Change the virtual machine size to D4s_v4. Detach the data disk. Add a new standard SSD. Which changes require downtime for VM1?

A. Detaching the data disk only and adding a new standard SSD. 
B. Detaching the data disk only. 
C. Changing the virtual machine size only. 
D. Adding a new standard SSD only. 

Show Answer

Question # 36

A. Yes 
B. No 

Show Answer

Question # 37

You haw? a server named Host! that has the Hyper-V server role installed. Host! hosts a virtual machine named VM1. You have a management server named Server! that runs Windows Server. You remotely manage Host1 from Server1 by using Hyper-V Manager. You need to ensure that you can access a USB hard drive connected to Server1 when you connect to VM1 by using Virtual Machine Connection. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A. From the Hyper-V Settings of Host1, select Allow enhanced session mode 
B. From Disk Management on Host1. attach a virtual hard disk. 
C. From Virtual Machine Connection, switch to a basic session. 
D. From Virtual Machine Connection select Show Options and then select the USB hard drive. 
E. From Disk Management on Host1, select Rescan Disks 

Show Answer

Question # 38

You have an Azure subscription that contains the following resources: • An Azure Log Analytics workspace • An Azure Automation account • Azure Arc. You have an on-premises server named Server1 that is onboaraed to Azure Arc You need to manage Microsoft updates on Server! by using Azure Arc Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point

A. Add Microsoft Sentinel to the Log Analytics workspace 
B. On Server1, install the Azure Monitor agent 
C. From the Automation account, enable Update Management for Server1. 
D. From the Virtual machines data source of the Log Analytics workspace, connectServer1. 

Show Answer

Question # 39

You have a server that runs Windows Server and contains a shared folder named UserData. You need to limit the amount of storage space that each user can consume in UserData.What should you use?

A. Storage Spaces 
B. Work Folders 
C. Distributed File System (DFS) Namespaces 
D. File Server Resource Manager (FSRM) 

Show Answer

Question # 40

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. You plan deploy 100 new Azure virtualmachines that will run Windows Server. You need to ensure that each new virtual machine is joined to the AD DS domain. What should you use?

A. Azure AD Connect 
B. a Group Policy Object (GPO) 
C. an Azure Resource Manager (ARM) template 
D. an Azure management group 

Show Answer

Question # 41

You have a server named Server1 that hosts Windows containers. You plan to deploy an application that will have multiple containers. Each container will be You need to create a Docker network that supports the deployment of the application. Which type of network should you create?

A. transparent 
B. I2bridge 
C. NAT 
D. I2tunnel 

Show Answer

Question # 42

Your network contains an Active Directory Domain Services (AD DS) domain. You have a Group Policy Object (GPO) named GPO1 that contains Group Policy preferences. You plan to link GPO1 to the domain. You need to ensure that the preference in GPO1 apply only to domain member servers and NOT to domain controllers or client computers. All the other Group Policy settings in GPO1 must apply to all the computers. The solution must minimize administrative effort. Which type of item level targeting should you use?

A. Domain 
B. Operating System 
C. Security Group 
D. Environment Variable 

Show Answer

Question # 43

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant You have several Windows 10 devices that are Azure AD hybrid-joined. You need to ensure that when users sign in to the devices, they can use Windows Hello for Business. Which optional feature should you select in Azure AD Connect?

A. Device writeback 
B. Group writeback 
C. Password writeback 
D. Directory extension attribute sync 
E. Azure AD app and attribute filtering 

Show Answer

Question # 44

You have an Azure virtual machine named VM1 that runs Windows Server. You perform the following actions on VM1: • Create a folder named Folder1 on volume C • Create a folder named Folder2 on volume D. • Add a new data disk to VM1 and create a new volume that is assigned drive letter E. • Install an app named App1 on volume E. You plan to resize VM1. Which objects will present after you resize VM1 ?

A. Folded and Folder2 only 
B. Folder1, volume E, and App1 only 
C. Folder1 only 
D. Folded. Folder2. App1, and volume E 

Show Answer

Question # 45

Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 46

You have an Azure virtual machine named VM1 that runs Windows Server. You have an Azure subscription that has Microsoft Defender for Cloud enabled. You need to ensure that you can use the Azure Policy guest configuration feature to manage VM1. What should you do?

A. Add the PowerShell Desired State Configuration (DSC) extension to VM1. 
B. Configure VM1 to use a user-assigned managed identity. 
C. Configure VM1 to use a system-assigned managed identity. 
D. Add the Custom Script Extension to VM1. 

Show Answer

Question # 47

Your network contains a multi-site Active Directory Domain Services (AD DS) forest. Each Active Directory site is connected by using manually configured site links and automaticallygenerated connections. You need to minimize the convergence time for changes to Active Directory. What should you do?

A. For each site link, modify the options attribute. 
B. For each site link, modify the site link costs. 
C. For each site link, modify the replication schedule. 
D. Create a site link bridge that contains all the site links. 

Show Answer