[2025] AZ-800 by Windows Server Actual Free Exam Practice Test
Free Windows Server AZ-800 Exam Question
Microsoft AZ-800 (Administering Windows Server Hybrid Core Infrastructure) Certification Exam is designed for IT professionals who have experience and knowledge of managing and administering Windows Server infrastructure in hybrid environments. AZ-800 exam measures the candidate's ability to manage Windows Server, Azure services, and other Microsoft hybrid solutions that are used in hybrid environments. AZ-800 exam aims to test the candidate's skills in deploying and managing various Microsoft server technologies in a hybrid environment, which includes on-premises, cloud-based, and hybrid scenarios.
NEW QUESTION # 81
Which groups can you add lo Group3 and Groups? To answer, select the appropriate options in the answer area. NOTE Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 82
Your network contains an Active Directory Domain Services (AD DS) domain named adatum.com The domain contains a server named Server1 and the users shown In the following table.
Server1 contains a folder named D:\Folder1. The advanced security settings for Folder 1 are configured as shown in the Permissions exhibit. (Click the Permissions lab.)
Folder1 is shared by using the following configurations
Answer:
Explanation:
NEW QUESTION # 83
You have an Azure subscription that contains a virtual machine named VM1 as shown in the following exhibit.
The subscription has the disks shown in the following table.
Which disks can you attach as data disks to VM1?
- A. Disk2 and Disk4 only
- B. Disk4 only
- C. Disk2 only
- D. Disk1, Disk2, Disk3. and Disk4
- E. Disk1 and Disk2 only
- F. Disk1, Disk3, and Disk4 only
Answer: E
NEW QUESTION # 84
You have an Active Directory Domain Services (AD DS) domain. The domain contains three servers named Server 1, Server2, and Server3 that run Windows Server.
You sign in to Server1 by using a domain account and start a remote PowerShell session to Server2. From the remote PowerShell session, you attempt to access a resource on Server3. but access to the resource is denied.
You need to ensure that your credentials are passed from Server1 to Server3. The solution must minimize administrative effort. What should you do?
- A. Disable the Enforce user logon restrictions policy setting for the domain.
- B. Configure Kerberos constrained delegation.
- C. Configure Just Enough Administration (JEA).
- D. Configure selective authentication for the domain.
Answer: C
NEW QUESTION # 85
You have a Windows Server container host named Server1 and an Azure subscription.
You deploy an Azure container registry named Registry1 to the subscription.
On Server1, you create a container image named image1.
You need to store imager in Registry1.
Which command should you run on Server1 ? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/container-registry/container-registry-get-started-docker-cli?tabs=azure-cli#push-the-image-to-your-registry
NEW QUESTION # 86
You have an Azure subscription named sub1 and 500 on-premises virtual machines that run Windows Server.
You plan to onboard the on-premises virtual machines to Azure Arc by running the Azure Arc deployment script You need to create an identity that mil be used by the script to authenticate access to sub1. The solution must use the principle of least privilege.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/azure-arc/servers/onboard-service-principal
NEW QUESTION # 87
SIMULATION
Task 8
You need to deploy a new primary DNS zone named fabrikam.com to DC1. The zone must be signed.
Answer:
Explanation:
See the solution of this Task below
Explanation:
To deploy a new primary DNS zone named fabrikam.com to DC1 and sign the zone, you can follow these steps:
Step 1: Create the Primary DNS Zone Use the Add-DnsServerPrimaryZone PowerShell command to create the primary zone:
Add-DnsServerPrimaryZone -Name "fabrikam.com" -ZoneFile "fabrikam.com.dns" -DynamicUpdate Secure This command creates a primary zone for fabrikam.com with a DNS file named fabrikam.com.dns and allows secure dynamic updates.
Step 2: Sign the Zone To sign the zone, you can use the DNS Manager or Windows PowerShell. Here's how to sign the zone using PowerShell:
Add-DnsServerSigningKey -ZoneName "fabrikam.com" -Type KeySigningKey -CryptoAlgorithm RsaSha256 Set-DnsServerDnsSecZoneSetting -ZoneName "fabrikam.com" -DenialOfExistence NSEC3 -NSEC3Parameters 1,0,10,"" These commands add a signing key to the zone and set DNSSEC settings with NSEC3 parameters.
Step 3: Publish the Signed Zone After signing the zone, ensure that it is published and available for DNS queries. You can verify the zone signing status using the following command:
Get-DnsServerZone -Name "fabrikam.com"
Note: Ensure that you have the appropriate permissions to perform these actions on DC1 and that the DNS Server role is installed and properly configured. Also, replace "fabrikam.com.dns" with the actual path to your DNS file if it's different12.
By following these steps, you should be able to deploy and sign the new primary DNS zone fabrikam.com on DC1.
NEW QUESTION # 88
Task 3
You need to create 3 user named Admin1 in contoso.com. Admin1 must be able to back up and restore files on SRV1. The solution must use principle of the least privilege.
Answer:
Explanation:
See the solution of this Task below.
Explanation:
TASK 3
# Objective:
* Create a user named Admin1 in contoso.com.
* Admin1 must be able to back up and restore files on SRV1.
* Follow the principle of least privilege.
Step-by-Step Guide
# Step 1: Create the User Account
* Log in to a Domain Controller (e.g., DC1) with appropriate admin rights.
* Open Active Directory Users and Computers (dsa.msc).
* In the contoso.com domain:
* Right-click the Users container or another OU where you want to create the account.
* Select New > User.
* Enter the following:
* First name: Admin1
* User logon name: Admin1
* Click Next and set a password (ensure it meets the domain's password policy).
* Configure password options (e.g., User must change password at next logon, if required).
* Click Finish.
# Step 2: Grant Backup and Restore Rights on SRV1
By default, Backup Operators have the ability to back up and restore files (without giving full admin rights).
* Log in to SRV1 (the target server).
* Open Computer Management (compmgmt.msc).
* In the left pane, expand:
* System Tools > Local Users and Groups > Groups.
* Find and double-click the Backup Operators group.
* Click Add.
* In the Select Users, Computers, Service Accounts, or Groups window:
* Type Admin1.
* Click Check Names to resolve the user.
* Click OK to add Admin1 to the group.
* Click OK again to close the Backup Operators group properties.
# Step 3: Verify Access
* Log in as Admin1 on SRV1 and test performing backup and restore operations using tools like Windows Server Backup.
* Since Backup Operators can back up and restore data but do not have full administrative privileges, this follows the least privilege principle.
# Additional Notes
* If you prefer using PowerShell, you can add the user to the group like this on SRV1:
Add-LocalGroupMember -Group "Backup Operators" -Member "contoso\Admin1"
NEW QUESTION # 89
You need to meet the technical requirements for the site links. Which users can perform the required tasks?
- A. Admin1 and Admin2 only
- B. Admin1, Adrrun2. and Admin3
- C. Admin1 only
- D. Admin1 and Admin3 only
- E. Admin3 only
Answer: A
Explanation:
Membership in the Enterprise Admins group or the Domain Admins group in the forest root domain is required.
Topic 1, Contoso Ltd
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements, if the case study has an All Information tab. note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
AD DS Environment
The network contains an on-premises Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains two domains named contoso.com and canada.contoso.com. The forest contains the domain controllers shown in the following table.
All the domain controllers are global catalog servers.
Server Infrastructure
The network contains the servers shown in the following table.
A server named Server4 runs Windows Server and is in a workgroup. Windows Firewall on Servei4 uses the private profile.
Server2 hosts three virtual machines named VM1. VM2, and VM3.
VM3 is a file server that stores data in the volumes shown in the following table.
Group Policies
The contoso.com domain has the Group Policies Objects (GPOs) shown in the following table.
Existing Identities
The forest contains the users shown in the following table.
The forest contains the groups shown in the following table.
Current Problems
When an administrator signs in to the console of VM2 by using Virtual Machine Connection, and then disconnects from the session without signing out another administrator can connect to the console session as the currently signed-in user.
Requirements
Contoso identifies the following technical requirements:
* Change the replication schedule for all site links to 30 minutes.
* Promote Server1 to a domain controller in canada.contoso.com.
* Install and authorize Server3 as a DHCP server.
* Ensure that User! can manage the membership of all the groups in Contoso\OU3.
* Ensure that you can manage Server4 from Server1 by using PowerShell removing.
* Ensure that you can run virtual machines on VM1.
* Force users to provide credentials when they connect to VM2.
* On VM3, ensure that Data Deduplication on all volumes is possible.
NEW QUESTION # 90
Your company has a main office and 10 branch offices that are connected by using WAN links. The network contains an Active Directory domain.
All users have laptops and regularly travel between offices.
You plan to implement BranchCache in the branch offices.
In each branch office, you install a server that runs Windows Server and the BranchCache feature. You register the servers in Active Directory.
You need to configure the laptops to use the local BranchCache server automatically. The solution must minimize administrative effort.
Which two Group Policy settings should you configure? To answer, select the settings in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
--> Turn on BranchCache
--> Enable Automatic Hosted Cache Discovery by Service Connection ...
NEW QUESTION # 91
SIMULATION
You need to monitor the security configuration of DC1 by using Microsoft Defender for Cloud.
The required source files are located in a folder named \\dc1.contoso.com\install.
To complete this task, sign in the required computer or computers.
Answer:
Explanation:
NEW QUESTION # 92
You have a Windows Server container host named Server1 and an Azure subscription.
You deploy an Azure container registry named Registry1 to the subscription.
On Server1, you create a container image named image1.
You need to store imager in Registry1.
Which command should you run on Server1 ? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/container-registry/container-registry-get-started-docker-cli?tabs=azure- cli#push-the-image-to-your-registry
NEW QUESTION # 93
You have a file server named Server1 that runs Windows Server and contains the volumes shown in the following table.
On which volumes can you use BitLocker Drive Encryption (BitLocker) and disk quotas? To answer select the appropriate options in the answer area. NOTE Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Table Description automatically generated
Reference:
https://docs.microsoft.com/en-us/windows-server/storage/refs/refs-overview
NEW QUESTION # 94
You deploy a new Active Directory Domain Services (AD DS) forest named contoso.com. The domain contains three domain controllers named DC1, DC2, and DC3.
You rename Default-First-Site-Name as Site1.
You plan to ship DC1, DC2, and DC3 to datacenters in different locations.
You need to configure replication between DC1, DC2, and DC3 to meet the following requirements:
Each domain controller must reside in its own Active Directory site.
The replication schedule between each site must be controlled independently.
Interruptions to replication must be minimized.
Which three actions should you perform in sequence in the Active Directory Sites and Services console? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Create two additional sites....
2 - Create a connection object between DC1 and DC2.
3 - Create a connection object between DC2 and DC3.
NEW QUESTION # 95
Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com that syncs with an Azure AD tenant. The tenant contains a group named Group1 and the users shown in the following table.
Domain/OU filtering in Azure AD Connect is configured as shown in the Filtering exhibit. (Click the Filtering tab.)
You review the Azure AD Connect configurations as shown in the Configure exhibit. (Click the Configure tab.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 96
......
All about the Rising Salaries For Microsoft AZ-800 Certification Certified Professionals
Definitely, a Microsoft AZ-800 Certified Professional will earn a great salary. However, the salary of a Microsoft AZ-800 Certified Professional depends on location, experience, and skills. The expected average salary of the individual is as follows:
- In the United Kingdom: 70,000 GBP
- In New Zealand: 65,000 NZD
- In the United States: 85,000 USD
Microsoft AZ-800 Actual Questions and Braindumps: https://passking.actualtorrent.com/AZ-800-exam-guide-torrent.html