Microsoft Administering Windows Server Hybrid Core Infrastructure (AZ-800)

You have a Windows Server container host named Server1.

You create a Dockerfile named df1.

You need to generate a container image by using df1.

Which command should you run?

Your network contains the domains shown in the following exhibit.

 

You need to establish trust relationships as shown in the following exhibit.
 

Which type of trust can you use for Trust1 and Trust2? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have a server named Server1 that runs Windows Server 2022.

You add two 4-TB hard drives named Disk1 and Disk2 to Server1.

You need to format the drives. The solution must meet the following requirements:

• Disk1 must support disk level quotas.
• Disk2 must support Data Deduplication.

Which type of file system should you use for each drive? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You need to ensure that data availability on SSPace1 meets the technical requirements.

What is the maximum number of physical disks that can fail on each disk? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains a virtual network named VNet1. Vnet1 contains three subnets named Subnet1, Subnet2, and Subnet3.

You deploy a virtual machine that has the following settings:

• Name:VM1
• Subnet: Subnet2
• Network interface name: NIC1
• Operating system: Windows Server 2022

You need to ensure that VM1 can route traffic between Subnet1 and Subnet3. The solution must minimize administrative effort.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have 50 on-premises servers that run Windows Server

You have an Azure subscription.

You plan to monitor the on-premises servers by using Azure Monitor.

You need to collect event logs from the on-premises servers.

What should you do first?

Your network contains an on-premises Active Directory Domain Services (AD DS) domain. The domain contains a user named User1 and the servers shown in the following table.

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.

The domain contains the users shown in the following table.

On Server2, you run the Enable-PSRemoting cmdlet.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1.

On Server1, you install Windows Admin Center and use Windows Admin Center to remove BUILTIN\Users from the allowed groups.

You discover that all users can still sign in to Windows Admin Center.

You need to prevent unauthorized users from signing in to Windows Admin Center.

What should you do in Windows Admin Center?

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two servers named Server1 and Server2 that run Windows Server 2022.

You plan to deploy an app named App1 that will be load balanced between Server1 and Server2.

You need to create an identity that will be used to run App1 on Server1 and Server2. The solution must meet the following requirements:

• The password for the identity must be changed regularly.
• Administrative effort must be minimized.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Your network contains two Active Directory forests and a domain trust as shown in the following exhibit.

The domain trust has the following configurations:

• Name: adatum.com
• Type: External
• Direction: One-way, outgoing
• Outgoing trust authentication level: Domain-wide authentication

The forests contain the users shown in the following table.

The forests contain the network shares shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

You have a Microsoft Entra tenant.

You need to implement Microsoft Entra Connect Sync. The solution must meet the following requirements:

• Prevent the password hashes of contoso.com from being synced to the Microsoft Entra tenant.
• Minimize user effort when authenticating to Microsoft Entra registered apps.
• Minimize the number of on-premises infrastructure components.

What should you include in the solution for each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure virtual machine named VM1 that runs Windows Server.

You need to ensure that administrators request access to VM1 before establishing a Remote Desktop connection.

What should you configure?

Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. Contoso.com contains an organizational unit (OU) named OU1.

You have an Azure subscription named Sub1 that is linked to a Microsoft Entra tenant named fabrikam.com. Fabrikam.com syncs with contoso.com.

In Sub1, you create a Microsoft Entra Domain Services domain configured as shown in the following table.

In domain1.onmicrosoft.com, you create two OUs named OU1 and OU2.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. Contoso.com contains an organizational unit (OU) named OU1.

You have an Azure subscription that is linked to a Microsoft Entra tenant named fabrikam.com.

You need to sync contoso.com with fabrikam.com. The solution must meet the following requirements:

• Support Windows Hello for Business by using a hybrid certificate deployment.
• Ensure that the passwords in contoso.com do NOT sync to fabnkam.com.

Which Microsoft Entra Connect feature should you use for each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains the domain controllers shown in the following table.

Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a child named east.contoso.com and the servers shown in the following table.

You need to create a folder for the Central Store to manage Group Policy template files for the entire forest.

What should you name the folder, and on which server should you create the folder? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a user named User1. User1 is a member of a group named Group1 and is in an organizational unit (OU) named OU1.

The domain has minimum password lengths configured as shown in the following table.

You have a server named Server1 that runs Windows Server and contains two drives named C and

You have on-premises servers that run Windows Server as shown in the following table.

On which servers should you install the Azure Connected Machine agent?

Which two languages can you use for Task1? Each correct answer presents a complete solution.

You need to ensure that VM3 meets the technical requirements.

What should you install first?

You have an Azure subscription that contains the storage accounts shown in the following table.

In the East US Azure region, you create a storage sync service named Sync1.

You need to create a sync group in Sync1.

Which storage accounts can you use, and what can you specify as the cloud endpoints. To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a user named User1 and the servers shown in the following table.

You have an Azure virtual machine named VM1 that contains the drives shown in the following table.

You have a Windows Server 2022 container host named Host1 and a container registry that contains the container images shown in the following table.

You need to run the containers on Host1.

Which isolation mode can you use for each image? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You need to meet technical requirements for HyperV1.

Which command should you run? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Active Directory Domain Services (AD DS) domain. The domain contains three servers named Server1, Server2, and Server3 that run Windows Server.

You sign in to Server1 by using a domain account and start a remote PowerShell session to Server2. From the remote PowerShell session, you attempt to access a resource on Server3, but access to the resource is denied.

You need to ensure that your credentials are passed from Server1 to Server3. The solution must minimize administrative effort.

What should you do?

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.

The domain controllers do NOT have internet connectivity.

You plan to implement Azure AD Password Protection for the domain.

You need to deploy Azure AD Password Protection agents. The solution must meet the following requirements:

• All Azure AD Password Protection policies must be enforced.
• Agent updates must be applied automatically.
• Administrative effort must be minimized.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You need to ensure that access to storage1 for the Marketing OU users meets the technical requirements.

What should you implement?

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the resources shown in the following table.

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the domain controllers shown in the following table.

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the domain controllers shown in the following table.

You need to configure DC3 to be the authoritative time server for the domain.

Which operations master role should you transfer to DC3, and which console should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.

You have a server named Server1 that runs Windows Server and has the Active Directory Federation Services role installed.

You plan to deploy Web Application Proxy to a server named Server2.

You export the Active Directory Federation Services (AD FS) certificate from Server1.

Which actions should you perform on Server2 in sequence? To answer, drag the appropriate actions to the correct order. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Your network contains the segments shown in the following table.

You have servers that run Windows Server and are configured as shown in the following table.

You deploy a server named Server4 that runs Windows Server and has a static IP address of 172.16.1.1. You connect Server4 to Segment1.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point,

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains the servers shown in the following table.

You have a server named Server1 that runs Windows Server. Server1 has a single network interface and the Hyper-V virtual switches shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

NOTE: Each correct selection is worth one point.

Your network contains a DHCP server.

You plan to add a new subnet and deploy Windows Server to the subnet.

You need to use the server as a DHCP relay agent.

Which role should you install on the server?

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the offices shown in the following table.

You have an Active Directory Domain Services (AD DS) domain. The domain contains a member server named Server1 that runs Windows Server.

You need to ensure that you can manage password policies for the domain from Server1.

Which command should you run first on Server1?

You have servers that run Windows Server 2022 as shown in the following table.

Your network contains an Active Directory domain, a web app named App1, and a perimeter network. The perimeter network contains a server named Server1 that runs Windows Server.

You plan to provide external access to App1.

You need to implement the Web Application Proxy role service on Server1.

Which role should you add to Server1, and which role should you add to the network? To answer, drag the appropriate roles to the correct targets. Each role may be used once, more than once, or not at all.

You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

You have an on-premises server named Server1 that runs Windows Server.

You have an Azure subscription that contains a virtual network named VNet1.

You need to connect Server1 to VNet1 by using Azure Network Adapter.

What should you use?

You have a server that runs Windows Server 2022 and has the network adapters shown in the following table.

You have an Azure subscription that contains the virtual machines shown in the following table.

You plan to implement Azure Automanage for Windows Server.

You need to identify the operating system prerequisites.

Which virtual machines support Hotpatch, and which virtual machines support SMB over QUIC? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server.

You build an app named App1.

You need to configure continuous integration and continuous deployment (CI/CD) of App1 to VM1.

What should you create first?

You have a server named Server1 that has the Hyper-V server role installed. Server1 hosts the virtual machines shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

NOTE: Each correct selection is worth one point.

Your network contains two Active Directory Domain Services (AD DS) forests named contoso.com and fabrikam.com. Contoso.com contains three child domains named amer.contoso.com, apac.contoso.com, and emea.contoso.com. Fabrikam.com contains a child domain named apac.fabrikam.com.

A bidirectional forest trust exists between contoso.com and fabrikam.com.

You need to provide users in the contoso.com forest with access to the resources in the fabrikam.com forest. The solution must meet the following requirements:

• Users in contoso.com must only be added directly to groups in the contoso.com forest.
• Permissions to access the resources in fabrikam.com must only be granted directly to groups in the fabrikam.com forest.
• The number of groups must be minimized.

Which type of groups should you use to organize the users and to assign permissions? To answer, drag the appropriate group types to the correct requirements. Each group may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Your network contains an Azure Active Directory Domain Services (Azure AD DS) domain named contoso.com.

You need to configure a password policy for the local user accounts on the Azure virtual machines joined to contoso.com.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.