Microsoft AZ-800 Übungsprüfungen

Zuletzt aktualisiert am 04.05.2025

Prüfungscode: AZ-800
Prüfungsname: Administering Windows Server Hybrid Core Infrastructure
Zertifizierungsanbieter: Microsoft
Zuletzt aktualisiert am: 04.05.2025

Vollständige Microsoft AZ-800-Prüfungsfragen erhalten

Question #1

SIMULATION

Task2

You need to ensure that the Azure file share named share1 can sync to on-premises servers.

The required source files are located in a folder named \dc1.contoso.cominstall.

You do NOT need to specify the on-premises servers at this time.

Lösung einblenden Lösung ausblenden

Richtige Antwort: One possible solution to ensure that the Azure file share named share1 can sync to on-premises servers is to use Azure File Sync. Azure File Sync allows you to centralize your file shares in Azure Files without giving up the flexibility, performance, and compatibility of an on-premises file server. It does this by transforming your Windows Servers into a quick cache of your Azure file share. You can use any protocol available on Windows Server to access your data locally (including SMB, NFS, and FTPS) and you can have as many caches as you need across the world1.

Here are the steps to configure Azure File Sync for the Azure file share named share1 and the source files located in a folder named dc1.contoso.cominstall:

On the Azure portal, create a Storage Sync Service in the same region as your storage account that contains the Azure file share named share1. For more information on how to create a Storage Sync Service, see How to deploy Azure File Sync.

On the on-premises server that hosts the folder named dc1.contoso.cominstall, install the Azure File Sync agent. For more information on how to install the Azure File Sync agent, see Install the Azure File Sync agent.

On the on-premises server, register the server with the Storage Sync Service that you created in the first step. For more information on how to register a server with a Storage Sync Service, see Register/unregister a server with Storage Sync Service.

On the Azure portal, create a sync group that defines the sync topology for a set of files. In the sync group, select the Azure file share named share1 as the cloud endpoint and the folder named dc1.contoso.cominstall as the server endpoint. For more information on how to create a sync group, see Create a sync group and a cloud endpoint and Create a server endpoint.

Wait for the initial sync to complete. You can monitor the sync progress on the Azure portal or on the on-premises server. For more information on how to monitor sync progress, see [Monitor sync progress].

Once the initial sync is complete, you can add more on-premises servers to the same sync group to sync and cache the content locally. You can also enable cloud tiering to optimize the storage space on the on-premises servers by tiering infrequently accessed or older files to Azure Files.

Question #2

Your network contains an Active Directory Domain Services (AD DS) domain- The domain contains 10 servers that run Windows Server. The servers have static IP addresses. You plan to use DHCP to assign IP addresses to the servers.

You need to ensure that each server always receives the same IP address.

Which type of identifier should you use to create a DHCP reservation for each server?

A . universally unique identifier (UUID)
B . fully qualified domain name (FQDN)
C . NetBIOS name
D . MAC address

Lösung einblenden Lösung ausblenden

Question #3

Your network contains an Active Directory Domain Services (AD DS) domain.

You have a Group Policy Object (GPO) named GPO1 that contains Group Policy preferences.

You plan to link GPO1 to the domain.

You need to ensure that the preference in GPO1 apply only to domain member servers and NOT to domain controllers or client computers. All the other Group Policy settings in GPO1 must apply to all the computers. The solution must minimize administrative effort.

Which type of item level targeting should you use?

A . Domain
B . Operating System
C . Security Group
D . Environment Variable

Lösung einblenden Lösung ausblenden

Question #4

You have an on-premises Active Directory Domain Services (AD DS) domain named contoso.com that syncs with Azure AD by using A2ure AD Connect.

You enable password protection for contoso.com.

You need to prevent users from including the word Contoso as part of their password.

What should you use?

A . the Azure Active Directory admin center
B . Active Directory Users and Computers
C . Synchronization Service Manager
D . Windows Admin Center

Lösung einblenden Lösung ausblenden

Question #5

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You are planning the deployment of DNS to a new network.

You have three internal DNS servers as shown in the following table.

The contoso.local zone contains zone delegations for east.contoso.local and west.contoso.local. All the DNS servers use root hints.

You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts.

Solution: On Server2, you create a conditional forwarder for contoso.local and west.contoso.local. On Server3, you create a conditional forwarder for contoso.local and east.contoso.local.

Does this meet the goal?

A . Yes
B . No

Lösung einblenden Lösung ausblenden

Question #6

You have a Windows Server container host named Server1.

You create a Dockerfile named df1.

You need to generate a container image by using dt1.

Which command should you run?

A . docker build
B . docker exec
C . docker create
D . docker images

Lösung einblenden Lösung ausblenden

Question #7

HOTSPOT

You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed. Server1 contains a virtual machine named VM1 that runs Windows Server. You need to install the Hyper-V server role on VM1.

Which PowerShell command should you run first? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Lösung einblenden Lösung ausblenden

Question #8

HOTSPOT

You plan to deploy an Azure virtual machine that will run Windows Server.

You need to ensure that an Azure Active Directory (Azure AD) user [email protected] can connect 10 the virtual machine by using the Azure Serial Console.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Lösung einblenden Lösung ausblenden

Question #9

HOTSPOT

You have a Windows server named Server1.

You add two 4-TB hard drives named Disk1 and Disk2 to Server1.

You need to format the drives.

The solution must meet the following requirements:

• Disk1 must support disk level quotas.

• Disk2 must support Data Deduplication.

Which type of file system should you use for each drive? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Lösung einblenden Lösung ausblenden

Question #10

Topic 5, Labs

SIMULATION

Task 1

You need to prevent domain users from saving executable files in a share named \SRVlDat a. The users must be able to save other files to the share.

Lösung einblenden Lösung ausblenden

Richtige Antwort: One possible solution to prevent domain users from saving executable files in a share named SRVlData is to use file screening on the file server. File screening allows you to block certain files from being saved based on their file name extension. Here are the steps to configure file screening: On the file server, open File Server Resource Manager from the Administrative Tools menu. In the left pane, expand File Screening Management and click on File Groups.

Right-click on File Groups and select Create File Group.

In the File Group Properties dialog box, enter a name for the file group, such as Executable Files. In the Files to include box, enter the file name extensions that you want to block, such as .exe, .bat, .cmd, .com, .msi, .scr. You can use wildcards to specify multiple extensions, such as *.exe.

Click OK to create the file group.

In the left pane, click on File Screen Templates.

Right-click on File Screen Templates and select Create File Screen Template.

In the File Screen Template Properties dialog box, enter a name for the template, such as Block Executable Files.

On the Settings tab, select the option Active screening: Do not allow users to save unauthorized files. On the File Groups tab, check the box next to the file group that you created, such as Executable Files.

On the Notification tab, you can configure how to notify users and administrators when a file screening event occurs, such as sending an email, logging an event, or running a command or script. You can also customize the message that users see when they try to save a blocked file. Click OK to create the file screen template.

In the left pane, click on File Screens.

Right-click on File Screens and select Create File Screen.

In the Create File Screen dialog box, enter the path of the folder that you want to apply the file screening to, such as SRVlData.

Select the option Derive properties from this file screen template (recommended) and choose the template that you created, such as Block Executable Files. Click Create to create the file screen.

Now, domain users will not be able to save executable files in the share named SRVlData. They will be able to save other files to the share.

Next Questions

Free Microsoft AZ-800 Übungsprüfungen

Microsoft AZ-800 Übungsprüfungen