AZ-800 — questions

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1. You implement Just Enough Administration (JEA) on Server1. You need to perform remote administration tasks on Server by using only JEA. What should you use?

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. You plan to manage VM1 by using a PowerShell runbook. You need to create the runbook. What should you create first?

You have a server named Server1 that runs Windows Server and has the DHCP Server role installed. Server1 contains the following single scope: • Scope: 192.168.16.0 • Address pool: 192.168.16.1-192.168.16.254 • Subnet mask: 255.255.255.0 • Lease duration: 8 days You have four testing devices that are configured with static IP addresses as shown in the following table. The test devices are turned on once a month. You need to prevent Server1 from assigning the IP addresses allocated to the test devices to other devices when the test devices are offline. The solution must minimize administrative effort. What should you do?

You have an Active Directory Domain Services (AD DS) domain. The domain contains three servers named Server1, Server2, and Server3 that run Windows Server. You sign in to Server1 by using a domain account and start a remote PowerShell session to Server2. From the remote PowerShell session, you attempt to access a resource on Server3, but access to the resource is denied. You need to ensure that your credentials are passed from Server1 to Server3. The solution must minimize administrative effort. What should you do?

You have an Active Directory Domain Services (AD DS) domain. The domain contains a member server named Server1 that runs Windows Server. You need to ensure that you can manage password policies for the domain from Server1. Which command should you run first on Server1?

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1. On Server1, you install Windows Admin Center and use Windows Admin Center to remove BUILTIN\Users from the allowed groups. You discover that all users can still sign in to Windows Admin Center. You need to prevent unauthorized users from signing in to Windows Admin Center. What should you do in Windows Admin Center?

You have on-premises servers that run Windows Server as shown in the following table. You have an Azure subscription that contains a virtual machine named VM1. You need to ensure that you can manage all the servers by using Azure Arc. The solution must minimize administrative effort. On which servers should you install the Azure Connected Machine agent?

Your network contains an on-premises Active Directory Domain Services (AD DS) domain. The domain contains a user named User1 and the servers shown in the following table. User1 is a member of the Protected Users security group. User1 performs the following actions: • From Server1, establishes a remote PowerShell session on Server2 • From the PowerShell session on Server2, attempts to access a resource on Backup1 The request to access the resource on Backup1 is denied. You need to ensure that User1 can access the resources on Backup1 by using the PowerShell session on Server2. The solution must follow the principle of least privilege and minimize administrative effort. What should you configure?

You have 50 on-premises servers that run Windows Server. You have an Azure subscription. You plan to monitor the on-premises servers by using Azure Monitor. You need to collect event logs from the on-premises servers. What should you do first?

You have a server named Host1 that has the Hyper-V server role installed. Host1 hosts a virtual machine named VM1. You have a management server named Server1 that runs Windows Server. You remotely manage Host1 from Server1 by using Hyper-V Manager. You need to ensure that you can access a USB hard drive connected to Server1 when you connect to VM1 by using Virtual Machine Connection. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

You have a Windows Server container host named Server1 and a container image named image1. You need to start a container from image1. The solution must run the container on a Hyper-V virtual machine. Which parameter should you specify when you run the docker run command?

You plan to deploy a containerized application that requires .NET Core. You need to create a container image for the application. The image must be as small as possible. Which base image should you use?

You have an Azure virtual machine named VM1 that runs Windows Server. You perform the following actions on VM1: • Create a folder named Folder1 on volume C. • Create a folder named Folder2 on volume D. • Add a new data disk to VM1 and create a new volume that is assigned drive letter E. • Install an app named App1 on volume E. You plan to resize VM1. Which objects will present after you resize VM1?

You have an Azure virtual machine named VM1 that runs Windows Server and has the following configurations: • Size: D2s_v4 • Operating system disk: 127-GiB standard SSD • Data disk 128-GiB standard SSD • Virtual machine generation: Gen 2 You plan to perform the following changes to VM1: • Change the virtual machine size to D4s_v4. • Detach the data disk. • Add a new standard SSD. Which changes require downtime for VM1?

You have a server named Server1 that hosts Windows containers. You plan to deploy an application that will have multiple containers. Each container will be on the same subnet. Each container requires a separate MAC address and IP address. Each container must be able to communicate by using its IP address. You need to create a Docker network that supports the deployment of the application. Which type of network should you create?

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. You plan deploy 100 new Azure virtual machines that will run Windows Server. You need to ensure that each new virtual machine is joined to the AD DS domain. What should you use?

Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains three servers that run Windows Server and have the Hyper-V server role installed. Each server has a Switch Embedded Teaming (SET) team. You need to verify that Remote Direct Memory Access (RDMA) and all the required Windows Server settings are configured properly on each server to support an Azure Stack HCI cluster. What should you use?

You have an Azure virtual machine named Server1 that runs a network management application. Server1 has the following network configurations: * Network interface: Nic1 * IP address: 10.1.1.1/24 * Connected to: Vnet1/Subnet1 You need to connect Server1 to an additional subnet named Vnet1/Subnet2. What should you do?

You have an Azure subscription that contains the virtual networks shown in the following table. You deploy a virtual machine named VM1 that runs Windows Server. VM1 is connected to Subnet11. You plan to add an additional network interface named NIC1 to VM1. To which subnets can NIC1 be attached?

You have an Azure subscription that contains a virtual machine named VM1 as shown in the following exhibit. The subscription has the disks shown in the following table. Which disks can you attach as data disks to VM1?