Questions for the AZ-800 were updated on : Sep 01 ,2024
You need to configure the Group Policy settings to ensure that the Azure Virtual Desktop session hosts meet the security
requirements.
What should you configure?
A
What should you implement for the deployment of DC3?
B
Explanation:
Create a domain controller named dc3.corp.fabrikam.com in Vnet1.
In a hybrid network, you can configure Azure virtual machines as domain controllers. The domain controllers in Azure
communicate with the on-premises domain controllers in the same way that onpremises domain controllers communicate
with each other.
DRAG DROP
Which three actions should you perform in sequence to meet the security requirements for Webapp1? To answer, move the
appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:
Explanation:
Reference: https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/group-managed-
service-accounts-overview
DRAG DROP
You need to meet the security requirements for passwords.
Where should you configure the components for Azure AD Password Protection? To answer, drag the appropriate
components to the correct locations. Each component may be used once, more than once, or not at all. You may need to
drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:
Explanation:
Reference: https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-password-ban-bad-on-premises
You need to meet the technical requirements for Server1.
Which users can currently perform the required tasks?
B
You need to meet the technical requirements for the site links.
Which users can perform the required tasks?
D
Explanation:
Membership in the Enterprise Admins group or the Domain Admins group in the forest root domain is required.
You need to meet the technical requirements for User1. The solution must use the principle of least privilege.
What should you do?
D
Explanation:
Reference: https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/delegating-administration-of-account-ous-
and-resource-ous
HOTSPOT
Which groups can you add to Group3 and Group5? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Explanation:
Reference:
https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups
HOTSPOT
You need to meet the technical requirements for VM1.
Which cmdlet should you run first? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Explanation:
Reference: https://docs.microsoft.com/en-us/virtualization/hyper-v-on-windows/user-guide/nested-virtualization
You need to meet the technical requirements for VM2.
What should you do?
D
You need to implement a name resolution solution that meets the networking requirements.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A B
Explanation:
Virtual machines in an Azure virtual network receive their DNS configuration from the DNS settings configured on the virtual
network. You need to configure the Azure virtual network to use DC3 as the DNS server. Then all virtual machines in the
virtual network will use DC3 and their DNS server.
HOTSPOT
You need to configure network communication between the Seattle and New York offices. The solution must meet the
networking requirements.
What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Explanation:
Reference: https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-expressroute-portal
You need to configure remote administration to meet the security requirements.
What should you use?
D
Explanation:
Reference: https://docs.microsoft.com/en-us/azure/defender-for-cloud/just-in-time-access-usage?tabs=jit-config-asc%2Cjit-
request-asc
You need to implement an availability solution for DHCP that meets the networking requirements.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
B E
Explanation:
Reference: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-
2012/hh831385(v=ws.11)
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a
unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in
the review screen.
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.
You need to identify which server is the PDC emulator for the domain.
Solution: From Active Directory Sites and Services, you right-click Default-First-Site-Name in the console tree, and then
select Properties.
Does this meet the goal?
B