FREE AZ 800: Administering Windows Server Hybrid Questions and Answers

Question 1

A Kerberos authentication-based application must be deployed by your firm; on-premises directory services are not necessary. Select the deployment strategy that best fits this situation.

Accepted Answer

Deploy AD DS only on an Azure VM

Answer

You can choose any deployment model. All will have equal performance.

Answer

Deploy a separate AD forest that's trusted by domains in their on-premises AD forest

Answer

Deploy AD DS in on-premises infrastructure and on an Azure VM

Question 2

Decommissioning the member hosts from an existing server farm is the duty you have been given. You have to remove group Managed Service Account (gMSA) after removing the member host as part of the procedure. In PowerShell, which of the following cmdlets would you use?

Accepted Answer

Uninstall-ADServiceAccount

Answer

Remove-ADServiceAccount

Answer

Uninstall-gMSAAccount

Answer

Remove -gMSAAccount

Question 3

You must permit users to alter Azure AD Connect Health settings, such as email notifications. Which Roles from the list below would you assign to the user? (Select the position with the fewest restrictions that best fits the circumstances and is adequate.)

Accepted Answer

Contributor

Answer

Writer

Answer

Owner

Answer

Reader

Question 4

A management tool included into Windows Server called Group Policy enables you to protect user and computer settings. The group policy applies Group Policy items in a particular order. From the available options below, pick the right sequence.

Accepted Answer

Local-> Site-> Domain-> Organizational Units

Answer

Site-> Local-> Domain-> Organizational Units

Answer

Organizational Units-> Domain-> Site-> Local

Answer

Domain-> Local-> Site-> Organizational Units

Question 5

How should a role capability file be set up to determine the precise PowerShell features that are accessible during a Just Enough Administration (JEA) session? Which settings from the options listed below should be selected?

Accepted Answer

VisibleFunctions

Answer

VisibleAliases

Answer

VisibleExternalCommands

Answer

VisibleCmdlets

Question 6

To modify a deployed VM's configuration, you must execute an Azure VM extension. In order to run Azure VM extensions, which of the following platforms would you choose?

Accepted Answer

Any of the above

Answer

ARM Templates

Answer

Azure CLI

Answer

PowerShell

Question 7

The Contoso IT staff wants to make sure that clients on the internal and external networks resolve names to the appropriate internal and external IP addresses. What should they do?

Accepted Answer

Set up split-horizon DNS by creating two DNS zones in Azure—one private and one public, both with the same name.

Answer

Set up split-horizon DNS by creating a single, private DNS zone in Azure.

Answer

Set up split-horizon DNS by creating two DNS zones in Azure—one private and one public. The zones must have different names.

Answer

None of the above

A Kerberos authentication-based application must be deployed by your firm; on-premises directory services are not necessary.Select the deployment strategy that best fits this situation.

A Kerberos authentication-based application must be deployed by your firm; on-premises directory services are not necessary.
Select the deployment strategy that best fits this situation.