πŸ”

AZ-800 β€” questions

Page 4 of 7 Β· 124 total questions.

Topic 3 Β· Question 122

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. You build an app named App1. You need to configure continuous integration and continuous deployment (CI/CD) of App1 to VM1. What should you create first?

  • Aan App Service Environment
  • Ban Azure DevOps organization (correct answer)
  • Ca managed identity
  • Dan Azure Automation account
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: an Azure DevOps organization.

Topic 3 Β· Question 132

You have an Azure virtual machine named VM1 that contains the drives shown in the following table. On VM1, you plan to install an app named App1. The data for App1 must be stored on a persistent data disk assigned to drive D. You need assign the data disk to drive D. What should you do on VM1 first?

Exhibit 1 for question 132
  • AChange the drive letter of the Temporary Storage drive to F.
  • BMove pagefile.sys to the Operating System drive. (correct answer)
  • CStop (deallocate) VM1.
  • DExpand the Temporary Storage drive.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Move pagefile.sys to the Operating System drive.

Topic 3 Β· Question 133

Your on-premises network has an IP address range of 10.0.0.0/23. You have an Azure virtual network named VNet1 that contains a virtual machine named VM1. VNet1 has an IP address range of 10.0.1.0/24. You need to deploy a Site-to-Site (S2S) VPN to connect the on-premises network to VNet1. What should you do first?

  • ADeploy Azure Bastion to VNet1.
  • BDeploy Azure Extended Network.
  • CConfigure VNet1 to use the IP address range of 10.0.2.0/24. (correct answer)
  • DConfigure VNet1 to use an IP address range of 10.0.1.128/25.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Configure VNet1 to use the IP address range of 10.0.2.0/24.

Topic 3 Β· Question 134

You have a server that runs Windows Server 2022 and has the network adapters shown in the following table. You need to configure NIC teaming for LAN2 and LAN3. The solution must support Dynamic Virtual Machine Multi-Queue (d.VMMQ). What should you use?

Exhibit 1 for question 134
  • ALACP teaming mode
  • BSwitch Embedded Teaming (SET) (correct answer)
  • Cload balancing and failover (LBFO)
  • DStatic teaming mode
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Switch Embedded Teaming (SET).

Topic 3 Β· Question 136

You have a Windows Server container host named Server1. You create a Dockerfile named df1. You need to generate a container image by using df1. Which command should you run?

  • Adocker build (correct answer)
  • Bdocker exec
  • Cdocker create
  • Ddocker images
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: docker build.

Topic 3 Β· Question 138

You have a server named Server1 that runs Windows Server 2019 and hosts a container named Container1. Container1 uses a Windows Server 2019 base image that was built by using a Docker file. You upgrade Server1 to Windows Server 2022. You need to ensure that Container1 will run on Server1. The solution must minimize administrative effort. What should you do?

  • AStart Container1 in Hyper-V isolation mode. (correct answer)
  • BModify the Docker file.
  • CStart Container1 in process isolation mode.
  • DRebuild the base image for Container1.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Start Container1 in Hyper-V isolation mode.

Topic 4 Β· Question 140

You have a server that runs Windows Server and has the DHCP Server role installed. The server has a scope named Scope1 that has the following configurations: β€’ Address range: 192.168.0.2 to 192. 168.1.254 β€’ Mask: 255.255.254.0 β€’ Router: 192.168.0.1 β€’ Lease duration: 3 days DNS server: 172.16.0.254 - You have 50 Microsoft Teams Phone devices from the same vendor. All the devices have MAC addresses within the same range. You need to ensure that all the Teams Phone devices that receive a lease from Scope1 have IP addresses in the range of 192.168.1.100 to 192.168.1.200. The solution must NOT affect other DHCP clients that receive IP configurations from Scope1. What should you create?

  • Aa scope
  • Ba filter
  • Cscope options
  • Da policy (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: a policy.

Topic 4 Β· Question 141

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You are planning the deployment of DNS to a new network. You have three internal DNS servers as shown in the following table. The contoso.local zone contains zone delegations for east.contoso.local and west.contoso.local. All the DNS servers use root hints. You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts. Solution: You configure Server2 and Server3 to forward DNS requests to 10.0.1.10. Does this meet the goal?

  • AYes (correct answer)
  • BNo
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Yes.

Topic 4 Β· Question 142

You have an on-premises network that is connected to an Azure virtual network by using a Site-to-Site VPN. Each network contains a subnet that has the same IP address space. The on-premises subnet contains a virtual machine. You plan to migrate the virtual machine to the Azure subnet. You need to migrate the on premises virtual machine to Azure without modifying the IP address. The solution must minim administrative effort. What should you implement before you perform the migration?

  • AAzure Extended Network (correct answer)
  • BAzure Virtual Network NAT
  • CAzure Application Gateway
  • DAzure virtual network peering
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Azure Extended Network.

Topic 4 Β· Question 143

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You are planning the deployment of DNS to a new network. You have three internal DNS servers as shown in the following table. The contoso.local zone contains zone delegations for east.conloso.local and west.contoso.local. All the DNS servers use root hints. You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts. Solution: On Server2 and Server3, you configure a conditional forwarder for contoso.local. Does this meet the goal?

  • AYes
  • BNo (correct answer)
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: No.

Topic 4 Β· Question 144 Β· Select all that apply

You have servers that have the DNS Server role installed. The servers are configured as shown in the following table. All the client computers in the New York office use Server2 as the DNS server. You need to configure name resolution in the New York office to meet the following requirements: β€’ Ensure that the client computers in New York can resolve names from contoso.com. β€’ Ensure that Server2 forwards all DNS queries for internet hosts to 131. 107.100.200. The solution must NOT require modifications to Server1. Which two components should you configure on Server2? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  • Aa forwarder (correct answer)
  • Ba conditional forwarder (correct answer)
  • Ca delegation
  • Da secondary zone
  • Ea reverse lookup zone
Reveal answer & explanation
Correct answer: A, B

The correct answer is A, B. Option A: a forwarder Option B: a conditional forwarder.

Topic 4 Β· Question 145

You have an Azure virtual machine named VM1 that runs Windows Server. You need to configure the management of VM1 to meet the following requirements: β€’ Require administrators to request access to VM1 before establishing a Remote Desktop connection. β€’ Limit access to VM1 from specific source IP addresses. β€’ Limit access to VM1 to a specific management port. What should you configure?

  • Aa network security group (NSG)
  • BAzure Active Directory (Azure AD) Privileged Identity Management (PIM)
  • CMicrosoft Defender for Cloud (correct answer)
  • DAzure Front Door
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Microsoft Defender for Cloud

Explanation

Microsoft Defender for Cloud provides security posture management and threat protection across resources.

Topic 4 Β· Question 146

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a DNS server named Server1. Server1 hosts a DNS zone named fabrikam.com that was signed by DNSSEC. You need to ensure that all the member servers in the domain perform DNSSEC validation for the fabrikam.com namespace. What should you do?

  • AOn Server1, run the Add-DnsServerTrustAnchor cmdlet.
  • BOn each member server, run the Add-DnsServerTrustAnchor cmdlet.
  • CFrom a Group Policy Object (GPO), add a rule to the Name Resolution Policy Table (NRPT). (correct answer)
  • DFrom a Group Policy Object (GPO), modify the Network List Manager policies.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: From a Group Policy Object (GPO), add a rule to the Name Resolution Policy Table (NRPT).

Topic 4 Β· Question 147

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You are planning the deployment of DNS to a new network. You have three internal DNS servers as shown in the following table. The contoso.local zone contains zone delegations for east.contoso.local and west.contoso.local. All the DNS servers use root hints. You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts. Solution: On Server2, you create a conditional forwarder for contoso.local and west.contoso.local. On Server3, you create a conditional forwarder for contoso.local and east.contoso.local. Does this meet the goal?

  • AYes (correct answer)
  • BNo
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Yes.

Topic 4 Β· Question 148

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains 10 servers that run Windows Server. The servers have static IP addresses. You plan to use DHCP to assign IP addresses to the servers. You need to ensure that each server always receives the same IP address. Which type of identifier should you use to create a DHCP reservation for each server?

  • ANetBIOS name
  • BMAC address (correct answer)
  • Cfully qualified domain name (FQDN)
  • Duniversally unique identifier (UUID)
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: MAC address.

Topic 4 Β· Question 150 Β· Select all that apply

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. The on-premises network is connected to Azure by using a Site-to-Site VPN. You have the DNS zones shown in the following table. You need to ensure that names from fabrikam.com can be resolved from the on-premises network. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  • ACreate a stub zone for fabrikam.com on DC1.
  • BCreate a conditional forwarder for fabrikam.com on DC1. (correct answer)
  • CCreate a secondary zone for fabrikam.com on DC1.
  • DDeploy an Azure virtual machine that runs Windows Server. Modify the DNS Servers settings for the virtual network.
  • EDeploy an Azure virtual machine that runs Windows Server. Configure the virtual machine as a DNS forwarder. (correct answer)
Reveal answer & explanation
Correct answer: B, E

The correct answer is B, E. Option B: Create a conditional forwarder for fabrikam.com on DC1. Option E: Deploy an Azure virtual machine that runs Windows Server. Configure the virtual machine as a DNS forwarder.

Explanation

An Azure Virtual Machine provides full control of the OS when you need to run custom or legacy workloads.

Topic 4 Β· Question 151

You have an on-premises server named Server1 that runs Windows Server. You have an Azure virtual network that contains an Azure virtual network gateway. You need to connect only Server1 to the Azure virtual network. What should you use?

  • Aa Site-to-Site VPN
  • BAzure Network Adapter (correct answer)
  • Can ExpressRoute circuit
  • DAzure Extended Network
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Azure Network Adapter.

Topic 4 Β· Question 152

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You are planning the deployment of DNS to a new network. You have three internal DNS servers as shown in the following table. The contoso.local zone contains zone delegations for east.contoso.local and west.contoso.local. All the DNS servers use root hints. You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts. Solution: On Server2, you create a conditional forwarder for west.contoso.local. On Server3, you create a conditional forwarder for east.contoso.local. Does this meet the goal?

  • AYes
  • BNo (correct answer)
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: No.

Topic 4 Β· Question 153

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three domains. Each domain contains 10 domain controllers. You plan to store a DNS zone in a custom Active Directory partition. You need to create the Active Directory partition for the zone. The partition must replicate to only four of the domain controllers. What should you use?

  • AActive Directory Administrative Center
  • BSet-DnsServer
  • CNew-ADObject
  • Dntdsutil.exe (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: ntdsutil.exe.

Topic 4 Β· Question 157

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains 10 servers that run Windows Server. The servers have static IPv4 addresses. You plan to use DHCP to assign IPv4 addresses to the servers. You need to ensure that each server always receives the same IPv4 address. Which type of identifier should you use to create a DHCP reservation for each server?

  • Afully qualified domain name (FQDN)
  • Buniversally unique identifier (UUID)
  • CNetBIOS name
  • DMAC address (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: MAC address.

Showing questions 61–80 of 124 Β· Page 4 of 7