How Many Questions Of AZ-800 Latest Exam

AZ-800 Dumps

AZ-800 Exam Questions - Online Test

AZ-800 Premium VCE File

Learn More 100% Pass Guarantee - Dumps Verified - Instant Download
150 Lectures, 20 Hours

Exam Code: AZ-800 (Practice Exam Latest Test Questions VCE PDF)
Exam Name: Administering Windows Server Hybrid Core Infrastructure
Certification Provider: Microsoft
Free Today! Guaranteed Training- Pass AZ-800 Exam.

Online AZ-800 free questions and answers of New Version:

NEW QUESTION 1

You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant.
You plan to implement self-service password reset (SSPR) in Azure AD.
You need to ensure that users that reset their passwords by using SSPR can use the new password resources in the AD DS domain.
What should you do?

A. Deploy the Azure AD Password Protection proxy service to the on premises network.
B. Run the Microsoft Azure Active Directory Connect wizard and select Password writeback.
C. Grant the Change password permission for the domain to the Azure AD Connect service account.
D. Grant the impersonate a client after authentication user right to the Azure AD Connect service account.

Answer: B

Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr- writeback

NEW QUESTION 2
HOTSPOT
Your network contains two Active Directory forests and a domain trust as shown in the following exhibit.
AZ-800 dumps exhibit
The domain trust has the following configurations:
• Name: adatum.com
• Type: External
• Direction: One-way. outgoing
• Outgoing trust authentication level: Domain-wide authentication

The forests contain the network shares shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
AZ-800 dumps exhibit

Solution:
AZ-800 dumps exhibit

Topic 4, Labs

Does this meet the goal?

A. Yes
B. Not Mastered

Answer: A

NEW QUESTION 3
HOTSPOT
You have a Windows Server container host named Server1.
You start the containers on Server1 as shown in the following table.
AZ-800 dumps exhibit
You need to validate the status of ProcessA and ProcessC.
Where can you verify that ProcessA and ProcessC are in a running state? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Solution:
AZ-800 dumps exhibit

Does this meet the goal?

A. Yes
B. Not Mastered

Answer: A

NEW QUESTION 4

AZ-800 dumps exhibit Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a user named User1 and the servers shown in the following table.

You need to ensure that User1 can manage only Scope1 and Scope3. What should you do?

A. Add User1 to the DHCP Administrators group on Server1 and Server2.
B. Implement IP Address Management (IPAM).
C. Add User1 to the DHCP Administrators domain local group.
D. Implement Windows Admin Center and add connections to Server1 and Server2.

Answer: B

NEW QUESTION 5
DRAG DROP
You have a server named Server1 that has Windows Admin Center installed. The certificate used by Windows Admin Center was obtained from a certification authority (CA).
The certificate expires.
You need to replace the certificate.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
AZ-800 dumps exhibit

Solution:
AZ-800 dumps exhibit

Does this meet the goal?

A. Yes
B. Not Mastered

Answer: A

NEW QUESTION 6
HOTSPOT
You have an Active Directory Domain Services (AD DS) domain that contains a group named Group1.
You need to create a group managed service account (gMSA) named Account1. The solution must ensure that Group1 can use Account1.
How should you complete the script? To answer, select the appropriate options in the answer area,
NOTE: Each correct selection is worth one point.
AZ-800 dumps exhibit

Solution:
AZ-800 dumps exhibit

Does this meet the goal?

A. Yes
B. Not Mastered

Answer: A

NEW QUESTION 7

You have a server that runs Windows Server and has the DHCP Server role installed. The server has a scope named Scope! that has the following configurations:
• Address range: 192.168.0.2 to 192.16B.1.2M . Mask 255.255.254.0
• Router: 192.168.0.1
• Lease duration: 3 days
• DNS server 172.16.0.254
You have 50 Microsoft Teams Phone devices from the same vendor. All the devices have MAC addresses within the same range.
You need to ensure that all the Teams Phone devices that receive a lease from Scope1 have IP addresses in the range of 192.168.1.100 to 192.168.1.200. The solution must NOT affect other DHCP clients that receive IP configurations from Scope1.
What should you create?

A. a policy
B. a scope
C. a fitter
D. scope options

Answer: A

Explanation:
Reference:
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn425040(v=ws.11)

NEW QUESTION 8
HOTSPOT
Your network contains two Active Directory Domain Services (AD DS) forests as shown in the following exhibit.
AZ-800 dumps exhibit
The forests contain the domain controllers shown in the following table.

You perform the following actions on DO:
• Create a user named User1.
• Extend the schema with a new attribute named Attributed
To which domain controllers are User1 and Attribute1 replicated? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
AZ-800 dumps exhibit
Answer:

Solution:

Does this meet the goal?

A. Yes
B. Not Mastered

Answer: A

NEW QUESTION 9
DRAG DROP
You have an on-premises server named Server 1 that runs Windows Server. Server 1 contains a file share named Share 1.
You have an Azure subscription. You perform the following actions:
• Deploy Azure File Sync
• Install the Azure File Sync agent on Server1.
• Register Server1 with Azure File Sync
You need to ensure that you can add Share1 as an Azure File Sync server endpoint. Which three actions should you perform in sequence? To answer, move the appropriate
actions from the list of actions to the answer area and arrange them in the correct order.
AZ-800 dumps exhibit

Solution:
AZ-800 dumps exhibit

Does this meet the goal?

A. Yes
B. Not Mastered

Answer: A

NEW QUESTION 10
DRAG DROP
You have a server named Server 1 that runs Windows Server and has the Hyper-V server role installed.
Server1 hosts a virtual machine named VM1. Server1 has an NV Me storage device that is assigned to VM1 by using Discrete Device Assignment.
You need to make the device available to the host.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
AZ-800 dumps exhibit

Solution:
AZ-800 dumps exhibit

Does this meet the goal?

A. Yes
B. Not Mastered

Answer: A

NEW QUESTION 11

Your network contains an Active Directory Domain Services (AD DS) domain- The domain contains 10 servers that run Windows Server. The servers have static IP addresses.
You plan to use DHCP to assign IP addresses to the servers.
You need to ensure that each server always receives the same IP address.
Which type of identifier should you use to create a DHCP reservation for each server?

A. universally unique identifier (UUID)
B. fully qualified domain name (FQDN)
C. NetBIOS name
D. MAC address

Answer: D

Explanation:
Reference:
https://docs.microsoft.com/en-us/powershell/module/dhcpserver/add-dhcpserverv4reservation?view=windowsserver2022-ps

NEW QUESTION 12
HOTSPOT
AZ-800 dumps exhibit You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant
You have an on-premises web app named WebApp1 that only supports Kerberos authentication.
You need to ensure that users can access WebApp1 by using their Azure AD account. The solution must minimize administrative effort.
What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
AZ-800 dumps exhibit

Solution:
AZ-800 dumps exhibit

Does this meet the goal?

A. Yes
B. Not Mastered

Answer: A

NEW QUESTION 13

You have servers that run Windows Server 2022 as shown in the following table.
AZ-800 dumps exhibit
Server2 contains a .NET app named App1.
You need to establish a WebSocket connection from App1 to the SQL Server instance on Server!. The solution must meet the following requirements:
• Minimize the number of network ports that must be open on the on-premises network firewall.
• Minimize administrative effort. What should you create first?

A. an Azure Relay namespace
B. an Azure VPN gateway
C. a WFC relay connection
D. a hybrid connection

Answer: D

NEW QUESTION 14

You need to implement a name resolution solution that meets the networking requirements. Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point

A. Create an Azure private DNS zone named corp.fabhkam.com.
B. Create a virtual network link in the coip.fabnkam.c om Azure private DNS zone.
C. Create an Azure DNS zone named corp.fabrikam.com.
D. Configure the DNS Servers settings for Vnet1.
E. Enable autoregistration in the corp.fabnkam.com Azure private DNS zone.
F. On DC3, install the DNS Server role.
G. Configure a conditional forwarder on DC3.

Answer: DF

Explanation:
Virtual machines in an Azure virtual network receive their DNS configuration from the DNS settings configured on the virtual network. You need to configure the Azure virtual network to use DC3 as the DNS server. Then all virtual machines in the virtual network will use DC3 and their DNS server.

NEW QUESTION 15
SIMULATION
Task 1
You need to prevent domain users from saving executable files in a share named
\\SRVl\Data. The users must be able to save other files to the share.

Solution:
One possible solution to prevent domain users from saving executable files in a share named \SRVl\Data is to use file screening on the file server. File screening allows you to block certain files from being saved based on their file name extension. Here are the steps to configure file screening:
✑ On the file server, open File Server Resource Manager from the Administrative Tools menu.
✑ In the left pane, expand File Screening Management and click on File Groups.
✑ Right-click on File Groups and select Create File Group.
✑ In the File Group Properties dialog box, enter a name for the file group, such as Executable Files.
✑ In the Files to include box, enter the file name extensions that you want to block, such as .exe, .bat, .cmd, .com, .msi, .scr. You can use wildcards to specify multiple extensions, such as *.exe.
✑ Click OK to create the file group.
✑ In the left pane, click on File Screen Templates.
✑ Right-click on File Screen Templates and select Create File Screen Template.
✑ In the File Screen Template Properties dialog box, enter a name for the template, AZ-800 dumps exhibit

such as Block Executable Files.
✑ On the Settings tab, select the option Active screening: Do not allow users to save unauthorized files.
✑ On the File Groups tab, check the box next to the file group that you created, such as Executable Files.
✑ On the Notification tab, you can configure how to notify users and administrators when a file screening event occurs, such as sending an email, logging an event, or running a command or script. You can also customize the message that users see when they try to save a blocked file.
✑ Click OK to create the file screen template.
✑ In the left pane, click on File Screens.
✑ Right-click on File Screens and select Create File Screen.
✑ In the Create File Screen dialog box, enter the path of the folder that you want to apply the file screening to, such as \SRVl\Data.
✑ Select the option Derive properties from this file screen template (recommended) and choose the template that you created, such as Block Executable Files.
✑ Click Create to create the file screen.
Now, domain users will not be able to save executable files in the share named
\SRVl\Data. They will be able to save other files to the share.

Does this meet the goal?

A. Yes
B. Not Mastered

Answer: A

NEW QUESTION 16
HOTSPOT
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the VPN servers shown in the following table.
AZ-800 dumps exhibit
You have a server named NPS1 that has Network Policy Server (NPS) installed. NPS1 has the following RADIUS clients:

VPN1, VPN2, and VPN3 use NPS1 for RADIUS authentication. All the users in contoso.com are allowed to establish VPN connections. For each of the following statements, select Yes If the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
AZ-800 dumps exhibit

Solution:
AZ-800 dumps exhibit

Does this meet the goal?

A. Yes
B. Not Mastered

Answer: A

NEW QUESTION 17

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.
You need to identify which server is the PDC emulator for the domain. Solution: From a command prompt, you run netdom.exe query fsmo. Does this meet the goal?

A. Yes
B. No

Answer: A

Explanation:
Reference:
https://activedirectorypro.com/how-to-check-fsmo-roles/

NEW QUESTION 18
......

Recommend!! Get the Full AZ-800 dumps in VCE and PDF From Dumps-files.com, Welcome to Download: https://www.dumps-files.com/files/AZ-800/ (New 225 Q&As Version)