Pass Microsoft Administering Windows Server Hybrid Core Infrastructure Exam in First Attempt Guaranteed Updated Dump from VCE4Plus!
Pass AZ-800 Exam with 114 Questions - Verified By VCE4Plus
NEW QUESTION 48
Your network contains two Active Directory Domain Services (AD DS) forests named contoso.com and fabrikam.com. A two-way forest trust exists between the forests. Each forest contains a single domain. The domains contain the servers shown in the following table.
You need to configure resources based constrained delegation so that the users In contoso.com can use Windows Admin Center on Server) to connect to Server? How should you complete the command? To answer, select the appropriate options in the answer are
a. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/windows-server/security/kerberos/kerberos-constrained-delegation-overview
https://docs.microsoft.com/en-us/powershell/module/activedirectory/set-adcomputer?view=windowsserver2022-ps
NEW QUESTION 49
Which three actions should you perform in sequence to meet the security requirements for Webapp1? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Configure the IS application pool to run as Network Service.
2 - Create a group managed service account (gMSA) in Active Directory.
3 - Create the Key Distribution Services (KDS)root key in AD DS.
NEW QUESTION 50
You have an on-premises server named Server1 that runs Windows Server.
You have an Azure virtual network that contains an Azure virtual network gateway.
You need to connect only Server1 to the Azure virtual network.
What should you use?
- A. a Site-to-SiteVPN
- B. Azure Network Adapter
- C. Azure Extended Network
- D. an ExpressRoute circuit
Answer: B
NEW QUESTION 51
You have an Azure subscription named sub1 and 500 on-premises virtual machines that run Windows Server.
You plan to onboard the on-premises virtual machines to Azure Arc by running the Azure Arc deployment script
You need to create an identity that mil be used by the script to authenticate access to sub1. The solution must use the principle of least privilege.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/azure-arc/servers/onboard-service-principal
NEW QUESTION 52
You create an Azure virtual machine named Server1 that runs Windows Server.
Server1 has the disk configuration shown in the following exhibit.
Answer:
Explanation:
1 - Start Server1.
2 - Create and attach a new data disk.
3 - Shut down Server1.
NEW QUESTION 53
Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a child domain named east.contoso.com.
in the contoso.com domain, you create two users named Admin1 and Admin2.
You need to ensure that the users can perform the following tasks:
* Admin1 can create and manage Active Directory sites.
* Admin2 can deploy domain controller to the easl.conloso.com domain.
The solution must use the principle of least privilege.
To which group should you add each user? To answer, select the appropriate options in the answer area.
NOTE Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 54
You have a Windows Server container host named Server1 that has a single disk.
On Server1, you plan to start the containers shown in the following table.
Which isolation mode can you use for each container? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/hyperv-container
NEW QUESTION 55
You need to meet the technical requirements for User1. The solution must use the principle of least privilege.
What should you do?
- A. Create a delegation on contoso.com.
- B. Create a delegation on OU3.
- C. Add Users1 to the Account Operators group in contoso.com.
- D. Add Users1 to the Server Operators group in contoso.com.
Answer: B
Explanation:
Reference:
https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/delegating-administration-of-account-ous-and-resource-ous
NEW QUESTION 56
You have two on-premises servers named Server1 and Servet2 that run Windows Server.
You have an Azure Storage account named storage1 that contains a file share named share'. Server1 syncs with share1 by using Azure File Sync You need to configure Server2 to sync with share1.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - On Server2, install the Azure File Sync agent.
2 - Register Server2 with the Storage Sync Service.
3 - Add a server endpoint to the sync group.
NEW QUESTION 57
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.
You need to identify which server is the PDC emulator for the domain.
Solution: From a command prompt, you run netdom.exe query fsmo.
Does this meet the goal?
- A. Yes
- B. No
Answer: A
Explanation:
Reference:
https://activedirectorypro.com/how-to-check-fsmo-roles/
NEW QUESTION 58
You have an Azure virtual machine named VM1 Ilia! has a private IP address only.
You configure the Windows Admin Center extension on VM!.
You have an on-premises computer that runs Windows 11. You use the computer for server management You need to ensure that you can use Windows Admin Center from the Azure portal to manage VM1.
What should you configure?
- A. a network security group 1NSG) rule that allows inbound traffic on port 443.
- B. a private endpoint on the virtual network that contains VM1.
- C. a VPN connection to the virtual network that contains VM1.
- D. an Azure Bastion host on the virtual network that contains VM1.
Answer: D
NEW QUESTION 59
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the VPN servers shown in the following table.
You have a server named NPS1 that has Network Policy Server (NPS) installed. NPS1 has the following RADIUS clients:
VPN1, VPN2, and VPN3 use NPS1 for RADIUS authentication. All the users in contoso.com are allowed to establish VPN connections. For each of the following statements, select Yes If the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 60
You are planning the implementation Azure Arc to support the planned changes. You need to configure the environment to support configuration management policies. What should you do?
- A. Deploy the Azure Monitor agent to all the servers.
- B. Hybrid Azure AD join all the servers.
- C. Deploy the Azure Connected Machine agent to all the servers.
- D. Create a hybrid runbook worker m Azure Automation.
Answer: C
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/azure-arc/servers/plan-at-scale-deployment
NEW QUESTION 61
You have two on-premises servers named Server1 and Servet2 that run Windows Server.
You have an Azure Storage account named storage1 that contains a file share named share'. Server1 syncs with share1 by using Azure File Sync
You need to configure Server2 to sync with share1.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - On Server2, install the Azure File Sync agent.
2 - Register Server2 with the Storage Sync Service.
3 - Add a server endpoint to the sync group.
NEW QUESTION 62
You have a Windows Server container host named Server1 and an Azure subscription.
You deploy an Azure container registry named Registry1 to the subscription.
On Server1, you create a container image named image1.
You need to store imager in Registry1.
Which command should you run on Server1 ? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/container-registry/container-registry-get-started-docker-cli?tabs=azure-cli#push-the-image-to-your-registry
NEW QUESTION 63
You have an Azure subscription that contains the following resources:
* An Azure Log Analytics workspace
* An Azure Automation account
* Azure Arc.
You have an on-premises server named Server1 that is onboaraed to Azure Arc You need to manage Microsoft updates on Server! by using Azure Arc Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point
- A. On Server1, install the Azure Monitor agent
- B. Add Microsoft Sentinel to the Log Analytics workspace
- C. From the Virtual machines data source of the Log Analytics workspace, connect Server1.
- D. From the Automation account, enable Update Management for Server1.
Answer: A,D
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/manage/hybrid/server/best-practices/arc-update-management
NEW QUESTION 64
You have five tile servers that run Windows Server.
You need to block users from uploading video files that have the .mov extension to shared folders on the file servers. All other types of files must be allowed. The solution must minimize administrative effort.
What should you create?
- A. a Dynamic Access Control central access policy
- B. a data loss prevention (DLP) policy
- C. a Dynamic Access Control central access rule
- D. a file screen
Answer: D
Explanation:
Reference:
https://docs.microsoft.com/en-us/windows-server/storage/fsrm/file-screening-management
NEW QUESTION 65
You have a Windows Server container host named Server 1 and a container image named Image1.
You need to start a container from image1. The solution must run the container on a Hyper-V virtual machine.
Which parameter should you specify when you run the docker run command?
- A. --privileged
- B. --isolation
- C. --expose
- D. --runtime
- E. --entrypoint
Answer: E
Explanation:
Reference:
https://docs.docker.com/language/nodejs/run-containers/
NEW QUESTION 66
......
Penetration testers simulate AZ-800 exam: https://braindumpsschool.vce4plus.com/Microsoft/AZ-800-valid-vce-dumps.html