.

AZ-800

Gentile signore o signora, la preghiamo di dedicare alcuni minuti del suo tempo per completare il seguente sondaggio.

Protetto
AZ-800
1

Nome e Cognome

2

You need to configure the Group Policy settings to ensure that the Azure Virtual Desktop session hosts meet the security requirements. What should you configure?

Scegli una risposta
3

Your network contains an Active Directory Domain Services (AD DS) domain. The network also contains 20 domain controllers, 100 member servers, and 100 client computers. You have a Group Policy Object (GPO) named GPO1 that contains Group Policy preferences. You plan to link GPO1 to the domain. You need to ensure that the preference in GPO1 apply only to domain member servers and NOT to domain controllers or client computers. All the other Group Policy settings in GPO1 must apply to all the computers. The solution must minimize administrative effort. Which type of item level targeting should you use?

Scegli una risposta
4

Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The root domain contains the domain controllers shown in the following table. A failure of which domain controller will prevent you from creating application partitions?

Scegli una risposta
question image
5

Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the objects shown in the following table. You plan to sync contoso.com with an Azure Active Directory (Azure AD) tenant by using Azure AD Connect. You need to ensure that all the objects can be used in Conditional Access policies. What should you do?

Scegli una risposta
question image
6

Your network contains a multi-site Active Directory Domain Services (AD DS) forest. Each Active Directory site is connected by using manually configured site links and automatically generated connections. You need to minimize the convergence time for changes to Active Directory. What should you do?

Scegli una risposta
7

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. You have several Windows 10 devices that are Azure AD hybrid-joined. You need to ensure that when users sign in to the devices, they can use Windows Hello for Business. Which optional feature should you select in Azure AD Connect?

Scegli una risposta
8

Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains the servers shown in the following exhibit table. You plan to install a line-of-business (LOB) application on Server1. The application will install a custom Windows service. A new corporate security policy states that all custom Windows services must run under the context of a group managed service account (gMSA). You deploy a root key. You need to create, configure, and install the gMSA that will be used by the new application. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point

Scegli 2 risposte
question image
9

Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest root domain contains a server named server1.contoso.com. A two-way forest trust exists between the contoso.com forest and an AD DS forest named fabrikam.com. The fabrikam.com forest contains 10 child domains. You need to ensure that only the members of a group named fabrikam\Group1 can authenticate to server1.contoso.com. What should you do first?

Scegli una risposta
10

You are planning the implementation Azure Arc to support the planned changes. You need to configure the environment to support configuration management policies. What should you do?

Scegli una risposta
11

You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. The domain contains two servers named Server1 and Server2. A user named Admin1 is a member of the local Administrators group on Server1 and Server2. You plan to manage Server1 and Server2 by using Azure Arc. Azure Arc objects will be added to a resource group named RG1. You need to ensure that Admin1 can configure Server1 and Server2 to be managed by using Azure Arc. What should you do first?

Scegli una risposta
12

You have an Azure virtual machine named VM1 that runs Windows Server. You have an Azure subscription that has Microsoft Defender for Cloud enabled. You need to ensure that you can use the Azure Policy guest configuration feature to manage VM1. What should you do?

Scegli una risposta
13

You have an Azure virtual machine named VM1 that has a private IP address only. You configure the Windows Admin Center extension on VM1. You have an on-premises computer that runs Windows 11. You use the computer for server management. You need to ensure that you can use Windows Admin Center from the Azure portal to manage VM1. What should you configure?

Scegli una risposta
14

Your company has a main office and a branch office. The two offices are connected by using a WAN link. Each office contains a firewall that filters WAN traffic. The network in the branch office contains 10 servers that run Windows Server. All servers are administered from the main office only. You plan to manage the servers in the branch office by using a Windows Admin Center gateway. On a server in the branch office, you install the Windows Admin Center gateway by using the defaults settings. You need to configure the firewall in the branch office to allow the required inbound connection to the Windows Admin Center gateway. Which inbound TCP port should you allow?

Scegli una risposta
15

You have an Azure subscription that contains the following resources. An Azure Log Analytics workspace An Azure Automation account Azure Arc You have an on-premises server named Server1 that is onboarded to Azure Arc. You need to manage Microsoft updates on Server1 by using Azure Arc. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Scegli 2 risposte
16

You have a server named Host1 that has the Hyper-V server role installed. Host1 hosts a virtual machine named VM1. You have a management server named Server1 that runs Windows Server. You remotely manage Host1 from Server1 by using Hyper-V Manager. You need to ensure that you can access a USB hard drive connected to Server1 when you connect to VM1 by using Virtual Machine Connection. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Scegli 2 risposte
17

You plan to deploy a containerized application that requires .NET Core. You need to create a container image for the application. The image must be as small as possible. Which base image should you use?

Scegli una risposta
18

You have an Azure virtual machine named VM1 that runs Windows Server. You perform the following actions on VM1: Create a folder named Folder1 on volume C. Create a folder named Folder2 on volume D. Add a new data disk to VM1 and create a new volume that is assigned drive letter E. Install an app named App1 on volume E. You plan to resize VM1. Which objects will present after you resize VM1?

Scegli una risposta
19

You have an Azure virtual machine named VM1 that runs Windows Server and has the following configurations: Size: D2s_v4 Operating system disk: 127-GiB standard SSD Data disk 128-GiB standard SSD Virtual machine generation: Gen 2 You plan to perform the following changes to VM1: Change the virtual machine size to D4s_v4. Detach the data disk. Add a new standard SSD. Which changes require downtime for VM1?

Scegli una risposta
20

You have a server named Server1 that hosts Windows containers. You plan to deploy an application that will have multiple containers. Each container will be on the same subnet. Each container requires a separate MAC address and IP address. Each container must be able to communicate by using its IP address. You need to create a Docker network that supports the deployment of the application. Which type of network should you create?

Scegli una risposta
21

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. You plan deploy 100 new Azure virtual machines that will run Windows Server. You need to ensure that each new virtual machine is joined to the AD DS domain. What should you use?

Scegli una risposta
22

Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains three servers that run Windows Server and have the Hyper-V server role installed. Each server has a Switch Embedded Teaming (SET) team. You need to verify that Remote Direct Memory Access (RDMA) and all the required Windows Server settings are configured properly on each server to support an Azure Stack HCI cluster. What should you use?

Scegli una risposta
23

You have an Azure virtual machine named Server1 that runs a network management application. Server1 has the following network configurations: · Network interface: Nic1 · IP address: 10.1.1.1/24 · Connected to: Vnet1/Subnet1 You need to connect Server1 to an additional subnet named Vnet1/Subnet2. What should you do?

Scegli una risposta
24

You have a server that runs Windows Server and has the DHCP Server role installed. The server has a scope named Scope1 that has the following configurations: Address range: 192.168.0.2 to 192. 168.1.254 Mask: 255.255.254.0 Router: 192.168.0.1 Lease duration: 3 days DNS server: 172.16.0.254 You have 50 Microsoft Teams Phone devices from the same vendor. All the devices have MAC addresses within the same range. You need to ensure that all the Teams Phone devices that receive a lease from Scope1 have IP addresses in the range of 192.168.1.100 to 192.168.1.200. The solution must NOT affect other DHCP clients that receive IP configurations from Scope1. What should you create?

Scegli una risposta
25

You have an on-premises network that is connected to an Azure virtual network by using a Site-to-Site VPN. Each network contains a subnet that has the same IP address space. The on-premises subnet contains a virtual machine. You plan to migrate the virtual machine to the Azure subnet. You need to migrate the on premises virtual machine to Azure without modifying the IP address. The solution must minim administrative effort. What should you implement before you perform the migration?

Scegli una risposta
26

You have servers that have the DNS Server role installed. The servers are configured as shown in the following table. All the client computers in the New York office use Server2 as the DNS server. You need to configure name resolution in the New York office to meet the following requirements: Ensure that the client computers in New York can resolve names from contoso.com. Ensure that Server2 forwards all DNS queries for internet hosts to 131. 107.100.200. The solution must NOT require modifications to Server1. Which two components should you configure on Server2? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Scegli 2 risposte
question image
27

You have an Azure virtual machine named VM1 that runs Windows Server. You need to configure the management of VM1 to meet the following requirements: Require administrators to request access to VM1 before establishing a Remote Desktop connection. Limit access to VM1 from specific source IP addresses. Limit access to VM1 to a specific management port. What should you configure?

Scegli una risposta
28

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a DNS server named Server1. Server1 hosts a DNS zone named fabrikam.com that was signed by DNSSEC. You need to ensure that all the member servers in the domain perform DNSSEC validation for the fabrikam.com namespace. What should you do?

Scegli una risposta
29

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains 10 servers that run Windows Server. The servers have static IP addresses. You plan to use DHCP to assign IP addresses to the servers. You need to ensure that each server always receives the same IP address. Which type of identifier should you use to create a DHCP reservation for each server?

Scegli una risposta
30

You have an on-premises server named Server1 that runs Windows Server. You have an Azure virtual network that contains an Azure virtual network gateway. You need to connect only Server1 to the Azure virtual network. What should you use?

Scegli una risposta
31

You have a server that runs Windows Server and contains a shared folder named UserData. You need to limit the amount of storage space that each user can consume in UserData. What should you use?

Scegli una risposta