AZ-800 Study Guide 2026
Everything you need to pass the AZ-800 exam in one place: the exam format, every topic to study, real practice questions with explanations, flashcards, and full-length practice tests. Free, no sign-up needed.
📋 AZ-800 Exam Format at a Glance
📚 AZ-800 Topics to Study (43)
✍️ Sample AZ-800 Questions & Answers
1. Which DNS record type would you create in Azure DNS to specify the mail servers responsible for accepting email for a domain?
MX (Mail Exchange) records direct email traffic to designated mail servers for a domain.
2. An Azure Firewall Policy is configured in a Virtual WAN secured hub. What is different about this deployment compared to a standard VNet hub deployment?
In a Virtual WAN secured hub, Azure Firewall Manager automatically manages routing so traffic flows through the firewall, unlike standard VNet deployments where UDRs must be manually configured.
3. You want to use Azure Private DNS Resolver to forward private endpoint DNS queries from on-premises to Azure. What must you deploy?
The Azure DNS Private Resolver inbound endpoint provides an IP in your VNet that on-premises DNS servers can forward queries to, which then resolve via Azure private DNS zones.
4. A Traffic Manager profile uses Geographic routing. Which behavior occurs if no geographic mapping covers a user's region?
With Geographic routing, if no mapping matches the user's location, Traffic Manager returns NXDOMAIN, so every region must be explicitly mapped.
5. Which Azure Firewall Policy rule collection action causes matching traffic to be silently discarded without sending a TCP reset to the source?
Azure Firewall's 'Deny' action drops matching packets without sending a TCP RST, resulting in a connection timeout at the source rather than an immediate rejection.
6. Which next hop type in a UDR is used to silently drop (blackhole) matched traffic?
The None next hop type discards all traffic matching the route prefix, effectively creating a blackhole to block unwanted traffic.