Download AZ-800 Practice Test (V21.02) to Practice the Latest Questions – Read AZ-800 Free Dumps (Part 1, Q1-Q40) of V21.02) Today

1. You have servers that have the DNS Server role installed.

The servers are configured as shown in the following table.

All the client computers in the New York office use Server2 as the DNS server.

You need to configure name resolution in the New York office to meet the following requirements:

Ensure that the client computers in New York can resolve names from contoso.com.

Ensure that Server2 forwards all DNS queries for internet hosts to 131. 107.100.200.

The solution must NOT require modifications to Server1.

Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

2. What should you implement for the deployment of DC3?

3. You haw? a server named Host1 that has the Hyper-V server role installed. Host! hosts a virtual machine named VM1.

You have a management server named Server! that runs Windows Server. You remotely manage Host1 from Server1 by using Hyper-V Manager.

You need to ensure that you can access a USB hard drive connected to Server1 when you connect to VM1 by using Virtual Machine Connection.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

4. HOTSPOT

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

The domain contains a server named Server1 that has the DFS Namespaces role service installed.

Server! hosts a domain-based Distributed File System (DFS) Namespace named Files.

The domain contains a tile server named Server2. Seiver2 contains a shared folder named Share1.

Share1 contains a subfolder named Folder 1.

In the Files namespace, you create a folder named Folder! that has a target of \Server2.contoso.comShare1Folder1.

You need to configure a logon script that will map drive letter M to Folder1. The solution must use the path of the DFS Namespace.

How should you complete the command to map the drive letter? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

5. You have a server that runs Windows Server and has the DHCP Server role installed.

The server has a scope named Scope! that has the following configurations:

• Address range: 192.168.0.2 to 192.16B.1.2M. Mask 255.255.254.0

• Router: 192.168.0.1

• Lease duration: 3 days

• DNS server 172.16.0.254

You have 50 Microsoft Teams Phone devices from the same vendor. All the devices have MAC addresses within the same range.

You need to ensure that all the Teams Phone devices that receive a lease from Scope1 have IP addresses in the range of 192.168.1.100 to 192.168.1.200. The solution must NOT affect other DHCP clients that receive IP configurations from Scope1.

What should you create?

6. You have an Azure virtual machine named VM1 that runs Windows Server and has the following configurations:

Size: D2s_v4

Operating system disk: 127-GiB standard SSD

Data disk 128-GiB standard SSD

Virtual machine generation: Gen 2

You plan to perform the following changes to VM1:

Change the virtual machine size to D4s_v4.

Detach the data disk.

Add a new standard SSD.

Which changes require downtime for VM1?

7. Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using DEFAULTIPSITELINK.

You open a new branch office that contains only client computers.

You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1.

Solution: You configure the Try Next Closest Site Group Policy Object (GPO) setting in a GPO that is linked to Site1.

Does this meet the goal?

8. You need to meet the technical requirements for VM3

On which volumes can you enable Data Deduplication?

9. HOTSPOT

You have an on-premises server named Server1 that runs Windows Server and has internet connectivity.

You have an Azure subscription.

You need to monitor Server1 by using Azure Monitor.

Which resources should you create in the subscription, and what should you install on Server1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

10. HOTSPOT

You need to configure Azure File Sync to meet the file sharing requirements.

What should you do? To answer, select the appropriate options in the answer area. NOTE Each correct selection is worth one point.

11. Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three

Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using DEFAULTIPSITELINK.

You open a new branch office that contains only client computers.

You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1.

Solution: You create a new subnet object that is associated to Site1.

Does this meet the goal?

12. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You are planning the deployment of DNS to a new network.

You have three internal DNS servers as shown in the following table.

The contoso.local zone contains zone delegations for east.conloso.local and west.contoso.local. All the DNS servers use root hints.

You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts.

Solution: On Server2 and Server3, you configure a conditional forwarder for contoso.local.

Does this meet the goal?

13. Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

You need to identify which server is the PDC emulator for the domain.

Solution: From Active Directory Sites and Services, you right-click Default-First-Site-Name in the console tree, and then select Properties.

Does this meet the goal?

14. Note: This question is part of a series of questions that present the same scenario. Each question in

the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You are planning the deployment of DNS to a new network.

You have three internal DNS servers as shown in the following table.

The contoso.local zone contains zone delegations for east.contoso.local and west.contoso.local. All the DNS servers use root hints.

You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts.

Solution: You configure Server2 and Server3 to forward DNS requests to 10.0.1.10.

Does this meet the goal?

15. You need to meet the technical requirements for User1. The solution must use the principle of least privilege.

What should you do?

16. HOTSPOT

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

The domain contains the VPN servers shown in the following table.

You have a server named NPS1 that has Network Policy Server (NPS) installed.

NPS1 has the following RADIUS clients:

VPN1, VPN2, and VPN3 use NPS1 for RADIUS authentication. All the users in contoso.com are allowed to establish VPN connections.

For each of the following statements, select Yes If the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

17. HOTSPOT

You need to configure network communication between the Seattle and New York offices. The solution must meet the networking requirements.

What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

18. Topic 3, Datum Corporation

Overview

A. Datum Corporation is a manufacturing company that has a main office in Seattle and two branch offices in Los Angeles and Montreal.

A. Datum recently partnered with a company named Fabrikam, Inc.

Fabrikam is a manufacturing company that has a main office in Boston and a branch office in Orlando.

Both companies intend to collaborate on several joint projects.

The on-premises network of

A. Datum contains an Active Directory Domain Services (AD DS) forest named adatum.com.

The forest contains two domains named adatum.com and east.adatum.com and the domain controllers shown in the following table.

The on-premises network of Fabrikam contains an AD DS forest named fabrikam.com.

The forest contains two domains named fabrikam.com and south.fabrikam.com.

The fabrikam.com domain contains an organizational unit (OU) named Marketing.

The adatum.com domain contains the servers shown in the following table.

HyperV1 contains the virtual machines shown in the following table.

All the virtual machines on HyperV1 have only the default management tools installed.

SSPace1 contains the Storage Spaces virtual disks shown in the following table.

A. Datum has an Azure subscription that contains a Microsoft Entra tenant. Microsoft Entra Connect is configured to sync the adatum.com forest with Microsoft Entra ID.

The subscription contains the virtual networks shown in the following table.

The subscription contains the Azure Private DNS zones shown in the following table.

The subscription contains the virtual machines shown in the following table.

All the servers are in a workgroup.

The subscription contains a storage account named storage1 that has a file share named share1.

A. Datum plans to implement the following changes:

• Sync Data1 to share1.

• Configure an Azure runbook named Task1.

• Enable Microsoft Entra users to sign in to Server1.

• Create an Azure DNS Private Resolver that has the following configurations:

o Name: Private1

o Region: West US

o Virtual network: VNet1

o Inbound endpoint: SubnetB

• Enable users in the adatum.com domain to access the resources in the south.fabrikam.com domain.

A. Datum identifies the following technical requirements:

• The data on SSPace1 must be available always.

• DC2 must become the schema master if DC1 fails.

• VMS must be configured to enable per-folder quotas.

• Trusts must allow access to only the required resources.

• The users in the Marketing OU must have access to storage!

• Azure Automanage must be used on all supported Azure virtual machines.

• A direct SSH session must be used to manage all the supported virtual machines on HyperV1.

You need to implement the planned changes for the Azure DNS Private Resolver.

Which private DNS zones can you use for name resolution?

19. You have an Azure virtual machine named VM1 that runs Windows Server.

You have an Azure subscription that has Microsoft Defender for Cloud enabled.

You need to ensure that you can use the Azure Policy guest configuration feature to manage VM1.

What should you do?

20. HOTSPOT

You have an Azure subscription named sub1 and 500 on-premises virtual machines that run Windows Server.

You plan to onboard the on-premises virtual machines to Azure Arc by running the Azure Arc deployment script.

You need to create an identity that mil be used by the script to authenticate access to sub1. The solution must use the principle of least privilege.

How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

21. You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant.

You plan to implement self-service password reset (SSPR) in Azure AD.

You need to ensure that users that reset their passwords by using SSPR can use the new password resources in the AD DS domain.

What should you do?

22. You need to ensure that access to storage1 for the Marketing OU users meets the technical requirements.

What should you implement?

23. Your network contains an Active Directory Domain Services (AD DS) domain.

You have a Group Policy Object (GPO) named GPO1 that contains Group Policy preferences.

You plan to link GPO1 to the domain.

You need to ensure that the preference in GPO1 apply only to domain member servers and NOT to domain controllers or client computers. All the other Group Policy settings in GPO1 must apply to all the computers. The solution must minimize administrative effort.

Which type of item level targeting should you use?

24. You have an on-premises network that is connected to an Azure virtual network by using a Site-to-Site VPN. Each network contains a subnet that has the same IP address space. The on-premises subnet contains a virtual machine.

You plan to migrate the virtual machine to the Azure subnet.

You need to migrate the on premises virtual machine to Azure without modifying the IP address. The solution must minim administrative effort.

What should you implement before you perform the migration?

25. HOTSPOT

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant

You have an on-premises web app named WebApp1 that only supports Kerberos authentication.

You need to ensure that users can access WebApp1 by using their Azure AD account. The solution must minimize administrative effort.

What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

26. Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com.

The root domain contains the domain controllers shown in the following table.

A failure of which domain controller will prevent you from creating application partitions?

27. HOTSPOT

Your network contains two Active Directory Domain Services (AD DS) forests named contoso.com and fabrikam.com. A two-way forest trust exists between the forests. Each forest contains a single domain.

The domains contain the servers shown in the following table.

You need to configure resources based constrained delegation so that the users. In contoso.com can use Windows Admin Center on Server) to connect to Server?

How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

28. HOTSPOT

You need to ensure that data availability on SSPace1 meets the technical requirements.

What is the maximum number of physical disks that can fail on each disk? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

29. You have an Azure Active Directory Domain Services (Azure AD DS) domain named contoso.com.

You need to provide an administrator with the ability to manage Group Policy Objects (GPOs). The solution must use the principle of least privilege.

To which group should you add the administrator?

30. Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a DNS server named Server1. Server1 hosts a DNS zone named fabrikam.com that was signed by DNSSEC.

You need to ensure that all the member servers in the domain perform DNSSEC validation for the fabrikam.com namespace.

What should you do?

31. DRAG DROP

You deploy a new Active Directory Domain Services (AD DS) forest named contoso.com. The domain contains three domain controllers named DC1, DC2, and DC3.

You rename Default-First-Site-Name as Site1.

You plan to ship DC1, DC2, and DC3 to datacenters in different locations.

You need to configure replication between DC1, DC2, and DC3 to meet the following requirements:

Each domain controller must reside in its own Active Directory site.

The replication schedule between each site must be controlled independently.

Interruptions to replication must be minimized.

Which three actions should you perform in sequence in the Active Directory Sites and Services console? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

32. 1. Topic 1, Contoso Ltd

Overview

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.

To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more Information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.

To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements, if the case study has an All Information tab. note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.

AD DS Environment

The network contains an on-premises Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains two domains named contoso.com and canada.contoso.com.

The forest contains the domain controllers shown in the following table.

All the domain controllers are global catalog servers.

Server Infrastructure

The network contains the servers shown in the following table.

A server named Server4 runs Windows Server and is in a workgroup. Windows Firewall on Servei4 uses the private profile.

Server2 hosts three virtual machines named VM1. VM2, and VM3.

VM3 is a file server that stores data in the volumes shown in the following table.

Group Policies

The contoso.com domain has the Group Policies Objects (GPOs) shown in the following table.

Existing Identities

The forest contains the users shown in the following table.

The forest contains the groups shown in the following table.

Current Problems

When an administrator signs in to the console of VM2 by using Virtual Machine Connection, and then disconnects from the session without signing out another administrator can connect to the console session as the currently signed-in user.

Requirements

Contoso identifies the following technical requirements:

• Change the replication schedule for all site links to 30 minutes.

• Promote Server1 to a domain controller in canada.contoso.com.

• Install and authorize Server3 as a DHCP server.

• Ensure that User! can manage the membership of all the groups in ContosoOU3.

• Ensure that you can manage Server4 from Server1 by using PowerShell removing.

• Ensure that you can run virtual machines on VM1.

• Force users to provide credentials when they connect to VM2.

• On VM3, ensure that Data Deduplication on all volumes is possible.

You need to meet the technical requirements for Server1.

Which users can currently perform the required tasks?

33. HOTSPOT

You need to sync files from an on-premises server named Server1 to Azure by using Azure File Sync You have a cloud tiering policy that is configured for 30 percent free space and 70 days. Volume f on Server1 is 500 GB.

A year ago. you configured E:Oata on Server1 to sync by using Azure File Sync.

The files that are visible in E:Data are shown in the following table.

Volume E does NOT contain any other files.

Where are File1 and flle3 located? To answer, select the appropriate options In the answer area.

34. HOTSPOT

You have an Azure Active Directory Domain Services (Azure AD DS) domain.

You create a new user named Admin1.

You need Admin1 to deploy custom Group Policy settings to all the computers in the domain. The solution must use the principle of least privilege.

What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point

35. You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. You plan deploy 100 new Azure virtual machines that will run Windows Server. You need to ensure that each new virtual machine is joined to the AD DS domain.

What should you use?

36. You have an Azure virtual machine named VM1 that has a private IP address only.

You configure the Windows Admin Center extension on VM1.

You have an on-premises computer that runs Windows 11. You use the computer for server management.

You need to ensure that you can use Windows Admin Center from the Azure portal to manage VM1.

What should you configure?

37. Topic 4, Misc Questions

You have an Azure virtual machine named VM1 that runs Windows Server.

You perform the following actions on VM1:

• Create a folder named Folder1 on volume C

• Create a folder named Folder2 on volume D.

• Add a new data disk to VM1 and create a new volume that is assigned drive letter E.

• Install an app named App1 on volume E.

You plan to resize VM1.

Which objects will present after you resize VM1?

38. DRAG DROP

Your network contains a single domain Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a single Active Directory site.

You plan to deploy a read only domain controller (RODC) to a new datacenter on a server named Server1. A user named User1 is a member of the local Administrators group on Server1.

You need to recommend a deployment plan that meets the following requirements:

Ensures that a user named User1 can perform the RODC installation on Server1 Ensures that you can control the AD DS replication schedule to the Server1 Ensures that Server1 is in a new site named RemoteSite1 Uses the principle of least privilege

Which three actions should you recommend performing in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

39. Which two languages can you use for Task1? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

40. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

You need to identify which server is the PDC emulator for the domain.

Solution: From Active Directory Domains and Trusts, you right-click Active Directory Domains and Trusts in the console tree, and then select Operations Master.

Does this meet the goal?