At Lead4Pass you can get new AZ-800 dumps, we provide two study modes, PDF and VCE, any mode can get the most accurate AZ-800 exam questions.
Helping you 100% pass the Administering Windows Server Hybrid Core Infrastructure exam. One of the biggest advantages of the Lead4Pass AZ-800 dumps is that it is prepared for Administering Windows Server Hybrid Core Infrastructure real exam questions.
The new AZ-800 dumps issues are managed and organized by certified professionals and true experts with years of experience in the IT field. Follow Lead4Pass AZ-800 new exam dumps https://www.leads4pass.com/az-800.html.
You will pass the Administering Windows Server Hybrid Core Infrastructure exam 100% on the first attempt.
And share a part of Microsoft AZ-800 free dumps online detection
Question 1:
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear on the review screen.
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.
You need to identify which server is the PDC emulator for the domain.
Solution: From Active Directory Sites and Services, you right-click Default-First-Site-Name in the console tree, and then select Properties.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
Question 2:
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear on the review screen.
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.
You need to identify which server is the PDC emulator for the domain.
Solution: From Active Directory Domains and Trusts, you right-click Active Directory Domains and Trusts in the console tree, and then select Operations Master.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
Question 3:
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear on the review screen.
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.
You need to identify which server is the PDC emulator for the domain.
Solution: From a command prompt, you run netdom.exe query fsmo.
Does this meet the goal?
A. Yes
B. No
Correct Answer: A
Reference: https://activedirectorypro.com/how-to-check-fsmo-roles/
Question 4:
You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant.
You plan to implement a self-service password reset (SSPR) in Azure AD.
You need to ensure that users that reset their passwords by using SSPR can use the new password resources in the AD DS domain.
What should you do?
A. Deploy the Azure AD Password Protection proxy service to the on premises network.
B. Run the Microsoft Azure Active Directory Connect wizard and select Password writeback.
C. Grant the Change password permission for the domain to the Azure AD Connect service account.
D. Grant the impersonate a client after authentication user right to the Azure AD Connect service account.
Correct Answer: B
Reference: https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr-writeback
Question 5:
You have an Azure Active Directory Domain Services (Azure AD DS) domain named contoso.com.
You need to provide an administrator with the ability to manage Group Policy Objects (GPOs). The solution must use the principle of least privilege.
To which group should you add the administrator?
A. AAD DC Administrators
B. Domain Admins
C. Schema Admins
D. Enterprise Admins
E. Group Policy Creator Owners
Correct Answer: B
Only the Domain Admins group and the Enterprise Admins group can fully manage GPOs. Members of the Group Policy Creator Owners group can create new GPOs but they can\’t link the GPOs to sites, the domain, or OUs and they cannot manage existing GPOs.
Reference: https://social.technet.microsoft.com/wiki/contents/articles/20579.delegation-of-group-policy-full-administration.aspx
Question 6:
Your network contains an Active Directory Domain Services (AD DS) domain.
You have a Group Policy Object (GPO) named GPO1 that contains Group Policy preferences.
You plan to link GPO1 to the domain.
You need to ensure that the preference in GPO1 apply only to domain member servers and NOT to domain controllers or client computers. All the other Group Policy settings in GPO1 must apply to all the computers. The solution must
minimize administrative effort.
Which type of item-level targeting should you use?
A. Domain
B. Operating System
C. Security Group
D. Environment Variable
Correct Answer: B
Reference: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn789189(v=ws.11)#operating-system-targeting
Question 7:
Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The root domain contains the domain controllers shown in the following table.
A failure of which domain controller will prevent you from creating application partitions?
A. DC1
B. DC2
C. DC3
D. DC4
E. DC5
Correct Answer: A
Reference: https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/fsmo-roles
Question 8:
You have a server named Host1 that has the Hyper-V server role installed. Host1 hosts a virtual machine named VM1.
You have a management server named Server1 that runs Windows Server. You remotely manage Host1 from Server1 by using Hyper-V Manager.
You need to ensure that you can access a USB hard drive connected to Server1 when you connect to VM1 by using Virtual Machine Connection.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. From the Hyper-V Settings of Host1, select Allow enhanced session mode.
B. From Virtual Machine Connection, select Show Options, and then select the USB hard drive.
C. From Virtual Machine Connection, switch to a basic session.
D. From Disk Management on Host1, select Rescan Disks.
E. From Disk Management on Host1, attach a virtual hard disk.
Correct Answer: AB
Reference: https://docs.microsoft.com/en-us/windows-server/virtualization/hyper-v/learn-more/use-local-resources-on-hyper-v-virtual-machine-with-vmconnect
Question 9:
You have a Windows Server container host named Server1 and a container image named image1.
You need to start a container from the image1. The solution must run the container on a Hyper-V virtual machine.
Which parameter should you specify when you run the docker run command?
A. –expose
B. –privileged
C. –runtime
D. –isolation
E. –entrypoint
Correct Answer: D
Reference: https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/hyperv-container
Question 10:
You plan to deploy a containerized application that requires .NET Core.
You need to create a container image for the application. The image must be as small as possible.
Which base image should you use?
A. Windows Server
B. Nano Server
C. Windows
D. Server Core
Correct Answer: B
Reference: https://techcommunity.microsoft.com/t5/containers/nano-server-x-server-core-x-server-which-base-image-is-the-right/ba-p/2835785
Question 11:
You have an Azure virtual machine named VM1 that runs Windows Server. You perform the following actions on VM1:
- Create a folder named Folder1 on volume C.
- Create a folder named Folder2 on volume D.
- Add a new data disk to VM1 and create a new volume that is assigned drive letter E.
- Install an app named App1 on volume E.
You plan to resize VM1.
Which objects will be present after you resize VM1?
A. Folder1, volume E, and App1 only
B. Folder1 only
C. Folder1 and Folder2 only
D. Folder1, Folder2, App1, and volume E
Correct Answer: D
Question 12:
You have an Azure virtual machine named VM1 that runs Windows Server and has the following configurations:
- Size: D2s_v4
- Operating system disk: 127-GiB standard SSD
- Data disk 128-GiB standard SSD
- Virtual machine generation: Gen 2
You plan to perform the following changes to VM1:
- Change the virtual machine size to D4s_v4.
- Detach the data disk.
- Add a new standard SSD.
Which changes require downtime for VM1?
A. Detaching the data disk only and adding a new standard SSD.
B. Detaching the data disk only.
C. Changing the virtual machine size only.
D. Adding a new standard SSD only.
Correct Answer: C
Data disks can be added and detached without requiring downtime. Changing the VM size requires the VM to be restarted.
Question 13:
You have a server named Server1 that hosts Windows containers.
You plan to deploy an application that will have multiple containers. Each container will be on the same subnet. Each container requires a separate MAC address and IP address. Each container must be able to communicate by using its IP address.
You need to create a Docker network that supports the deployment of the application.
Which type of network should you create?
A. NAT
B. transparent
C. I2bridge
D. I2tunnel
Correct Answer: B
Reference: https://docs.microsoft.com/en-us/virtualization/windowscontainers/container-networking/network-drivers-topologies
Question 14:
You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. The domain contains two servers named Server1 and Server2.
A user named Admin1 is a member of the local Administrators group on Server1 and Server2.
You plan to manage Server1 and Server2 by using Azure Arc. Azure Arc objects will be added to a resource group named RG1.
You need to ensure that Admin1 can configure Server1 and Server2 to be managed by using Azure Arc.
What should you do first?
A. From the Azure portal, generate a new onboarding script.
B. Assign Admin1 the Azure Connected Machine Onboarding role for RG1.
C. Hybrid Azure AD join Server1 and Server2.
D. Create an Azure cloud-only account for Admin1.
Correct Answer: B
Reference: https://docs.microsoft.com/en-us/azure/azure-arc/servers/onboard-service-principal
Question 15:
You have an Azure virtual machine named VM1 that runs Windows Server.
You have an Azure subscription that has Microsoft Defender for Cloud-enabled.
You need to ensure that you can use the Azure Policy guest configuration feature to manage VM1.
What should you do?
A. Add the PowerShell Desired State Configuration (DSC) extension to VM1.
B. Configure VM1 to use a user-assigned managed identity.
C. Configure VM1 to use a system-assigned managed identity.
D. Add the Custom Script Extension to VM1.
Correct Answer: C
Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/guest-configuration
……
15 Microsoft AZ-800 free dumps online test to help you improve your exam experience. A truly complete AZ-800 dumps contain 94 exam questions.
Check out the new AZ-800 dumps: https://www.leads4pass.com/az-800.html, Get real material to pass the Administering Windows Server Hybrid Core Infrastructure exam,
Helping you successfully pass the Administering Windows Server Hybrid Core Infrastructure exam on your first try.