Free Microsoft AZ-800 Übungsprüfungen - Seite 7 von 10

Question #61

Which two languages can you use for Task1? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A . Java
B . Bicep
C . JavaScript
D . Python
E . PowerShell

Lösung einblenden Lösung ausblenden

Question #62

You have four testing devices that are configured with static IP addresses as shown in the following table.

The test devices are turned on once a month.

You need to prevent Server1 from assigning the IP addresses allocated to the test devices to other devices when the test devices are offline. The solution must minimize administrative effort.

What should you do?

A . Create an exclusion range.
B . Create reservations.
C . Configure the Scope options.
D . Create a policy.

Lösung einblenden Lösung ausblenden

Question #63

Your network contains an on -premises Active Directory Domain Services (AD DS) domain named contoso.com.

The domain contains the objects shown in the following table.

You plan to sync contoso.com with an Azure Active Directory (Azure AD) tenant by using Azure AD Connect You need to ensure that all the objects can be used in Conditional Access policies.

What should you do?

A . Change the scope of Group2 to Universal
B . Clear the Configure device writeback option.
C . Change the scope o‘ Group1 and Group2 to Global
D . Select the Configure Hybrid Azure AD join option.

Lösung einblenden Lösung ausblenden

Question #64

DRAG DROP

You deploy a new Active Directory Domain Services (AD DS) forest named contoso.com. The domain contains three domain controllers named DC1, DC2, and DC3.

You rename Default-First-Site-Name as Site1.

You plan to ship DC1, DC2, and DC3 to datacenters in different locations.

You need to configure replication between DC1, DC2, and DC3 to meet the following requirements:

Each domain controller must reside in its own Active Directory site.

The replication schedule between each site must be controlled independently.

Interruptions to replication must be minimized.

Which three actions should you perform in sequence in the Active Directory Sites and Services console? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Lösung einblenden Lösung ausblenden

Question #65

You have servers that have the DNS Server role installed.

The servers are configured as shown in the following table.

All the client computers in the New York office use Server2 as the DNS server.

You need to configure name resolution in the New York office to meet the following requirements:

✑ Ensure that the client computers in New York can resolve names from contoso.com.

✑ Ensure that Server2 forwards all DNS queries for internet hosts to 131. 107.100.200.

The solution must NOT require modifications to Server1.

Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A . a forwarder
B . a conditional forwarder
C . a delegation
D . a secondary zone
E . a reverse lookup zone

Lösung einblenden Lösung ausblenden

Question #66

SIMULATION

Task 4

You need to register SRV1 to sync Azure file shares. The registration must use the 34646045 Storage Sync Service.

The required source files are located in a folder named \dc1.contoso.cominstall.

You do NOT need to configure file share synchronization at this time and you do NOT need to update the agent.

Lösung einblenden Lösung ausblenden

Question #67

DRAG DROP

Your network contains an Active Directory domain named contoso.com. The domain contains group managed service accounts (gMSAs). You have a server named Server1 that runs Windows Server and is in a workgroup. Server! hosts Windows containers.

You need to ensure that the Windows containers can authenticate to contoso.com.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Lösung einblenden Lösung ausblenden

Question #68

HOTSPOT

Your network contains an Active Directory Domain Services (AD DS) domain named adatum.com. The domain contains a server named Server1 and the users shown.

In the following table.

Server1 contains a folder named D:Folder1.

The advanced security settings for Folder 1 are configured as shown in the Permissions exhibit. (Click the Permissions lab.)

Folder1 is shared by using the following configurations

Lösung einblenden Lösung ausblenden

Question #69

SIMULATION

Task 7

You need to monitor the security configuration of DC1 by using Microsoft Defender for Cloud.

The required source files are located in a folder named \dc1.contoso.cominstall.

Lösung einblenden Lösung ausblenden

Richtige Antwort: One possible solution to monitor the security configuration of DC1 by using Microsoft Defender for Cloud is to use the Guest Configuration feature. Guest Configuration is a service that audits settings inside Linux and Windows virtual machines (VMs) to assess their compliance with your organization’s security policies. You can use Guest Configuration to monitor the security baseline settings for Windows Server in the Microsoft Defender for Cloud portal by following these steps:

On DC1, open a web browser and go to the folder named dc1.contoso.cominstall. Download the Guest Configuration extension file (GuestConfiguration.msi) and save it to a local folder, such as C:Temp.

Run the Guest Configuration extension file and follow the installation wizard. You can choose to install the extension for all users or only for the current user. For more information on how to install the Guest Configuration extension, see Install the Guest Configuration extension. After the installation is complete, sign in to the Microsoft Defender for Cloud portal (2).

In the left pane, select Security Center and then Recommendations.

In the recommendations list, find and select Vulnerabilities in security configuration on your Windows machines should be remediated (powered by Guest Configuration).

In the Remediate Security Configurations page, you can see the compliance status of your Windows VMs, including DC1, based on the Azure Compute Benchmark. The Azure Compute Benchmark is a set of rules that define the desired configuration state of your VMs. You can also see the number of failed, passed, and skipped rules for each VM. For more information on the Azure Compute Benchmark, see Microsoft cloud security benchmark: Azure compute benchmark is now available. To view the details of the security configuration of DC1, click on the VM name and then select View details. You can see the list of rules that apply to DC1 and their compliance status. You can also see the severity, description, and remediation steps for each rule. For example, you can see if DC1 has the latest security updates installed, if the firewall is enabled, if the password policy is enforced, and so on.

To monitor the security configuration of DC1 over time, you can use the Compliance over time chart, which shows the trend of compliance status for DC1 in the past 30 days. You can also use the Compliance breakdown chart, which shows the distribution of compliance status for DC1 by rule severity.

By using Guest Configuration, you can monitor the security configuration of DC1 by using Microsoft Defender for Cloud and ensure that it meets your organization’s security standards. You can also use Guest Configuration to monitor the security configuration of other Windows and Linux VMs in your Azure environment.

Question #70

HOTSPOT

You have an Active Directory Domain Services (AD DS) domain that contains the member servers shown in the following table.

Server3 contains a data disk named Disk1 that has Data Deduplication installed.

Disk1 contains the files shown in the following table.

Server3 fails.

You need to recover the files on Disk1.

Which files can you recover if you attach Disk1 to Server 1, and which files can you recover if you attach Disk1 to Server2? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Lösung einblenden Lösung ausblenden