Lead4Pass AZ-800 dumps are verified and audited by a Microsoft professional team, and they really meet the requirements of the AZ-800 certification exam, covering more than 95% of the exam questions in the exam room!
And, offer the most popular study methods: AZ-800 dumps PDF, and AZ-800 dumps VCE, both study formats contain the latest certification exam questions and answers!
Therefore, the best exam solution is to use AZ-800 dumps with PDF and VCE formats: https://www.leads4pass.com/az-800.html (141 Q&A), to help you practice easily and achieve exam success.
What’s more! Part of the Lead4Pass AZ-800 dumps exam questions online for free download: https://drive.google.com/file/d/1yQaRu-DPqdsLwC4uMvXQ3ykQYBAM5cWb/
You can also practice some of the Lead4Pass AZ-800 dumps exam questions online
| Type | Number of exam questions | Exam name | Exam code | Last updated |
| Free | 15 | Administering Windows Server Hybrid Core Infrastructure | AZ-800 | AZ-800 dumps |
Question 1:
DRAG DROP
You create a new Azure subscription.
You plan to deploy Azure Active Directory Domain Services (Azure AD DS) and Azure virtual machines. The virtual machines will be joined to Azure AD DS.
You need to deploy Active Directory Domain Services (AD DS) to ensure that the virtual machines can be deployed and joined to Azure AD DS.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:
Correct Answer:
Reference: https://docs.microsoft.com/en-us/azure/active-directory-domain-services/tutorial-create-instance
Question 2:
DRAG DROP
Your network contains a single domain Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a single Active Directory site.
You plan to deploy a read-only domain controller (RODC) to a new data center on a server named Server1. A user named User1 is a member of the local Administrators group on Server1.
You need to recommend a deployment plan that meets the following requirements:
1.
Ensures that a user named User1 can perform the RODC installation on Server1
2.
Ensures that you can control the AD DS replication schedule to the Server1
3.
Ensures that Server1 is in a new site named RemoteSite1
4.
Uses the principle of least privilege
Which three actions should you recommend performing in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:
Correct Answer:
Box 1.
We need to create a site and subnet for the remote site. The new site will be added to the Default IP Site Link so we don’t need to create a new site link. You configure the replication schedule on the site link.
Box 2.
When we pre-create an RODC account, we can specify who is allowed to attach the server to the pre staged account. This means that User1 does not need to be added to the Domain Admins group.
Box3.
User1 can connect the RODC to the pre staged account by running the AD DS installation wizard.
Reference:
Question 3:
DRAG DROP
You deploy a new Active Directory Domain Services (AD DS) forest named contoso.com. The domain contains three domain controllers named DC1, DC2, and DC3.
You rename Default-First-Site-Name as Site1.
You plan to ship DC1, DC2, and DC3 to data centers in different locations.
You need to configure replication between DC1, DC2, and DC3 to meet the following requirements:
1.
Each domain controller must reside in its own Active Directory site.
2.
The replication schedule between each site must be controlled independently.
3.
Interruptions to replication must be minimized.
Which three actions should you perform in sequence in the Active Directory Sites and Services console? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:
Correct Answer:
Question 4:
DRAG DROP
You have a server named Server1 that runs Windows Server and has the Hyper V server role installed. Server1 hosts a virtual machine named VM1.
Server1 has an NVMe storage device. The device is currently assigned to VM1 by using Discrete Device Assignment.
You need to make the device available to Server1.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:
Correct Answer:
Question 5:
DRAG DROP
You have a server named Server1 that has Windows Admin Center installed. The certificate used by Windows Admin Center was obtained from a certification authority (CA).
The certificate expires.
You need to replace the certificate.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:
Correct Answer:
Reference: https://www.starwindsoftware.com/blog/change-the-windows-admin-center-certificate
Question 6:
DRAG DROP
You have a server named Server1.
You plan to use Storage Spaces to expand the storage available to Server1. You attach eight physical disks to Server1. Four disks are HDDs and four are SSDs.
You need to create a volume on Server1 that will use the storage on all the new disks. The solution must provide the fastest read performance for frequently used files.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:
Correct Answer:
Reference: https://redmondmag.com/articles/2018/07/31/storage-spaces-windows-server-2016-1.aspx https://redmondmag.com/articles/2018/08/02/storage-spaces-windows-server-2016-2.aspx
Question 7:
DRAG DROP
You deploy a single-domain Active Directory Domain Services (AD DS) forest named contoso.com.
You deploy five servers to the domain. You add the servers to a group named ITFarmHosts.
You plan to configure a Network Load Balancing (NLB) cluster named NLBCluster.contoso.com that will contain the five servers.
You need to ensure that the NLB service on the nodes of the cluster can use a group-managed service account (gMSA) to authenticate.
Which three PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.
Select and Place:
Correct Answer:
Reference: https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/create-the-key-distribution-services-kds-root-key https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts
Question 8:
HOTSPOT
Which groups can you add to Group 3 and Group 5? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Group 3 = Group 1, 2 4, and 5 only. Domain-Local groups can contain members from the “forest”.
Group 5 = Group 4 only. Global groups can only contain Users, Computers, and Global groups from the “same” domain.
Reference:
Question 9:
HOTSPOT
You need to meet the technical requirements for VM1.
Which cmdlet should you run first? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Question 10:
HOTSPOT
You need to configure network communication between the Seattle and New York offices. The solution must meet the networking requirements.
What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Reference: https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-expressroute-portal
Question 11:
HOTSPOT
Configure network communication between the Seattle and New York offices to meet the networking requirements.
Which action should you take to configure this? Select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Question 12:
HOTSPOT
You need to configure Azure File Sync to meet the file-sharing requirements.
What should you do? To answer, select the appropriate options in the answer area.
NOTE Each correct selection is worth one point.
Hot Area:
Correct Answer:
Reference: https://docs.microsoft.com/en-us/azure/storage/file-sync/file-sync-planning
Question 13:
HOTSPOT
Your network contains an Active Directory Domain Services (AD DS) domain named adatum.com. The domain contains a server named Server1 and the users are shown in the following table.
Server1 contains a folder named D:\Folder1. The advanced security settings for Folder1 are configured as shown in the Permissions exhibit. (Click the Permissions tab.)
Folder1 is shared by using the following configurations:
The share permissions for Share1 are shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
To access files in a shared folder, you need to be granted permissions on the folder (NTFS permissions) AND permissions on the share. The most restrictive permission of folder permissions and share permissions apply.
Box 1: Yes
Group1 has Read access to Folder1 and changed access to Share1. Therefore, User1 can read the files in Share1.
Box 2: No
Group 3 has Full Control access to Share1. However, Group3 has no permissions configured in Folder1. Therefore, User3 cannot access the files in Share1.
Box 3: Yes
Group2 has to write permission to Folder1. However, Group2 has no permission on Share1. Therefore, users in Group 2 cannot access files in the shared folder.
Access Based Enumeration when enabled hides files and folders that users do not have permission to access. However, Access Based Enumeration is not enabled on Share1. This is indicated by the FolderEnumerationMode
Question 14:
HOTSPOT
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the VPN servers shown in the following table.
You have a server named NPS1 that has Network Policy Server (NPS) installed. NPS1 has the following RADIUS clients:
VPN1, VPN2, and VPN3 use NPS1 for RADIUS authentication. All the users on contoso.com are allowed to establish VPN connections.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
It is important to remember that the client computers that are connecting to the VPNs are not RADIUS clients. The VPN servers are the RADIUS clients. You configure the RADIUS clients on the RADIUS server (NPS1) server to allow the
VPN servers use NPS1 to authenticate the connections.
Box 1: No
NPSClient1 is not enabled.
Box 2: Yes
NPSClient2 is configured correctly. It is enabled and has the correct IP address of VPN2.
Box 3: No
NPSClient3 has an incorrect IP address configured for VPN3.
Question 15:
HOTSPOT
You have an Azure subscription named sub1 and 500 on-premises virtual machines that run Windows Server.
You plan to onboard the on-premises virtual machines to Azure Arc by running the Azure Arc deployment script.
You need to create an identity that will be used by the script to authenticate access to sub1. The solution must use the principle of least privilege.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Reference: https://docs.microsoft.com/en-us/azure/azure-arc/servers/onboard-service-principal
Lead4Pass AZ-800 dumps share two study materials for free: you can download them online and practice exams online!
Now! Download the AZ-800 best practice solution! Use Lead4Pass AZ-800 dumps with PDF and VCE: https://www.leads4pass.com/az-800.html Contains 141 latest exam questions and answers to help you pass the exam 100%.
