Online Access Free AZ-800 Practice Test

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.
After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.
Your network contains an Active Directory Domains Services (AD DS) domain named contoso.com.
You implement a central store.
You create a new Group Policy Object (GPO) named GPO1.
When you attempt to edit GPO1, you see the settings shown in the exhibit. (Click the Exhibit tab.)

You need to ensure that all settings are available.
Solution: You modify the WMI Filtering settings for GPO1.
Does this meet the goal?

• A.No
• B.Yes

Hotspot Question
Your network contains a Microsoft Entra Domain Services domain named
sk230128outlook.onmicrosoft.com. The domain contains a server named Server1 that runs Windows Server.
You have the users shown in the following table.

The domain contains the Group Policy Objects (GPOs) shown in the following exhibit.

The minimum password length for each GPO is configured as shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Box 1: Yes
User1 is a domain user in the AADDC Users organizational unit (OU).
The AADDC Users GPO has the minimum password length set to 10.
Box 2: No
User2 is a local user on Server1.
The AADDC Computers GPO has a minimum password length of 7, but it does not apply to local users in a server in the domain.
The default Domain Policy has a minimum password length of 9 will be applied.
Note:
In an Entra Domain Services managed domain, the AADDC Computers GPO minimum password length policy primarily applies to users created directly within the managed domain.
Box 3: Yes
User3 is a domain user in an organizational unit (OU) named OU1.
GPO1 is linked to OU1.
GPO1 is configured with a minimum password length of 13.
Reference:
https://learn.microsoft.com/en-us/entra/identity/domain-services/password-policy

You have three on-premises servers named SVR1, SVR2, and SVR3 that run Windows Server.
SRV1 has a direct-attached storage (DAS) array.
You plan to deploy a failover cluster named Cluster1 by using SVR2 and SVR3.
You need to ensure that the DAS array on SRV1 can be used as shared storage for Cluster1.
The solution must ensure that Cluster1 has block-level access to the storage.
What should you do first on SRV1?

• A.Run the Enable-ClusterStorageSpacesDirectcmdlet.
• B.Run the start-service -name msiscsicmdlet.
• C.Install the iSCSI Target Server role service.
• D.Install the File Server role service.

Hotspot Question
You have a server named Server1 that runs Windows Server and is Azure Arc-enabled.
You need to prevent the Microsoft Monitoring Agent from being installed on Server1.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Box 1: azcmagent
azcmagent config set extensions.blocklist
"Microsoft.EnterpriseCloud.Monitoring/MicrosoftMonitoringAgent" is the command used to prevent the Microsoft Monitoring Agent from being installed via VM extensions on an Azure Arc- enabled server.
The Azure Connected Machine Agent (azcmagent) command-line tool provides local security controls to restrict extensions by specifying their Publisher/Type in a comma-separated blocklist.
Box 2: config
Reference:
https://github.com/MicrosoftDocs/azure-management-docs/blob/main/articles/azure-arc/servers/security-extensions.md

You have an Active Directory domain that contains a file server named Server1. Server1 runs Windows Server and includes the file shares shown in the following table.

When users login to the network they receive the following network drive mappings.
- H: maps to \\server1\users\%UserName%
- G: maps to \\server1\%Department%
You need to limit the amount of space consumed by user's on Server1. The solution must meet the following requirements:
- Prevent users using more than 5GB of space on their H: drive
- Prevent Accounts department users from using more than 10GB of space
on the G: drive
- Prevent Marketing department users from using more than 15GB of space on the G: drive
- Prevent Customer Service department users from using more than 2GB of space on the G: drive
- Minimize administrative effort
What should you use?

• A.Group Policy Preferences
• B.Storage tiering
• C.NTFS Disk quotas
• D.File Server Resource Manager (FSRM) quotas