microsoft az-800 online test

Administering Windows Server Hybrid Core Infrastructure

What students need to know about the az-800 exam

  • Total 88 Questions & Answers
  • Has case studies
  • Passing score: 700

Skills Measured:

  • Deploy and manage AD DS in on-premises and cloud environments (30-35%)
  • Manage Windows Servers and workloads in a hybrid environment (10-15%)
  • Manage virtual machines and containers (15-20%)
  • Implement and manage an on-premises and hybrid networking infrastructure (15-20%)
  • Manage storage and file services (15-20%)

Question 1 Topic 1, Case Study 1Case Study Question View Case

You need to configure the Group Policy settings to ensure that the Azure Virtual Desktop session hosts meet the security
requirements.
What should you configure?

  • A. loopback processing in GPO4
  • B. security filtering for the link of GPO1
  • C. loopback processing in GPO1
  • D. the Enforced property for the link of GPO4
  • E. the Enforced property for the link of GPO1
  • F. security filtering for the link of GPO4
Answer:

A

Discussions

Question 2 Topic 1, Case Study 1Case Study Question View Case

What should you implement for the deployment of DC3?

  • A. Azure Active Directory Domain Services (Azure AD DS)
  • B. an Azure virtual machine
  • C. an Azure AD administrative unit
  • D. Azure AD Application Proxy
Answer:

B

Explanation:
Create a domain controller named dc3.corp.fabrikam.com in Vnet1.
In a hybrid network, you can configure Azure virtual machines as domain controllers. The domain controllers in Azure
communicate with the on-premises domain controllers in the same way that onpremises domain controllers communicate
with each other.

Discussions

Question 3 Topic 1, Case Study 1Case Study Question View Case

DRAG DROP
Which three actions should you perform in sequence to meet the security requirements for Webapp1? To answer, move the
appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

Answer:

Explanation:
Reference: https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/group-managed-
service-accounts-overview

Discussions

Question 4 Topic 1, Case Study 1Case Study Question View Case

DRAG DROP
You need to meet the security requirements for passwords.
Where should you configure the components for Azure AD Password Protection? To answer, drag the appropriate
components to the correct locations. Each component may be used once, more than once, or not at all. You may need to
drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

Answer:

Explanation:
Reference: https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-password-ban-bad-on-premises

Discussions

Question 5 Topic 2, Case Study 2Case Study Question View Case

You need to meet the technical requirements for Server1.
Which users can currently perform the required tasks?

  • A. Admin3 only
  • B. Admin1 and Admin3 only
  • C. Admin1 only
  • D. Admin1, Admin2, and Admin3
Answer:

B

Discussions

Question 6 Topic 2, Case Study 2Case Study Question View Case

You need to meet the technical requirements for the site links.
Which users can perform the required tasks?

  • A. Admin1, Admin2, and Admin3
  • B. Admin1 and Admin3 only
  • C. Admin1 only
  • D. Admin1 and Admin2 only
  • E. Admin3 only
Answer:

D

Explanation:
Membership in the Enterprise Admins group or the Domain Admins group in the forest root domain is required.

Discussions

Question 7 Topic 2, Case Study 2Case Study Question View Case

You need to meet the technical requirements for User1. The solution must use the principle of least privilege.
What should you do?

  • A. Add Users1 to the Server Operators group in contoso.com.
  • B. Create a delegation on contoso.com.
  • C. Add Users1 to the Account Operators group in contoso.com.
  • D. Create a delegation on OU3.
Answer:

D

Explanation:
Reference: https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/delegating-administration-of-account-ous-
and-resource-ous

Discussions

Question 8 Topic 2, Case Study 2Case Study Question View Case

HOTSPOT
Which groups can you add to Group3 and Group5? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Answer:

Explanation:
Reference:
https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups

Discussions

Question 9 Topic 3, Case Study 3Case Study Question View Case

HOTSPOT
You need to meet the technical requirements for VM1.
Which cmdlet should you run first? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Answer:

Explanation:
Reference: https://docs.microsoft.com/en-us/virtualization/hyper-v-on-windows/user-guide/nested-virtualization

Discussions

Question 10 Topic 3, Case Study 3Case Study Question View Case

You need to meet the technical requirements for VM2.
What should you do?

  • A. Implement shielded virtual machines.
  • B. Enable the Guest services integration service.
  • C. Implement Credential Guard.
  • D. Enable enhanced session mode.
Answer:

D

Discussions
To page 2