{"id":81590,"date":"2022-03-23T01:43:10","date_gmt":"2022-03-23T07:13:10","guid":{"rendered":"https:\/\/www.whizlabs.com\/blog\/?p=81590"},"modified":"2022-03-28T03:40:22","modified_gmt":"2022-03-28T09:10:22","slug":"az-800-exam-questions-administering-windows-server","status":"publish","type":"post","link":"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/","title":{"rendered":"Free Questions on AZ-800 exam: Administering Windows Server Hybrid Core Infrastructure"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">These free<a href=\"https:\/\/www.whizlabs.com\/microsoft-azure-certification-az-800\/\"><strong> AZ-800 exam questions<\/strong><\/a> and answers provided here cover the important concepts of the AZ-800 certification exam. Our detailed explanations for these sample questions helps you to learn the exam objectives faster. <\/span><span style=\"font-weight: 400;\">AZ-800: Administering Windows Server Hybrid Core Infrastructure exam tests your knowledge and understanding on the performing of various technical tasks <\/span><span style=\"font-weight: 400;\">including the:<\/span><\/p>\n<ul>\n<li><span style=\"font-weight: 400;\"> Deployment and management of Active Directory Domain Services in the on-premises &amp; cloud environment, <\/span><\/li>\n<li><span style=\"font-weight: 400;\">Managing virtual machines and containers, <\/span><\/li>\n<li><span style=\"font-weight: 400;\">Managing Windows servers and workloads in a hybrid environment, <\/span><\/li>\n<li><span style=\"font-weight: 400;\">Implementation and management of hybrid and on-premises networking infrastructure, <\/span><\/li>\n<li><span style=\"font-weight: 400;\">The management of file services and storage.<\/span><\/li>\n<\/ul>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_76 ez-toc-wrap-left counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #ea7e02;color:#ea7e02\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #ea7e02;color:#ea7e02\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Deploy_and_Manage_Active_Directory_Domain_Services_AD_DS_in_On-premises_and_Cloud_Environments\" >Domain : Deploy and Manage Active Directory Domain Services (AD DS) in On-premises and Cloud Environments<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Deploy_and_Manage_Active_Directory_Domain_Services_AD_DS_in_On-premises_and_Cloud_Environments-2\" >Domain : Deploy and Manage Active Directory Domain Services (AD DS) in On-premises and Cloud Environments<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Deploy_and_Manage_Active_Directory_Domain_Services_AD_DS_in_On-premises_and_Cloud_Environments-3\" >Domain : Deploy and Manage Active Directory Domain Services (AD DS) in On-premises and Cloud Environments<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Deploy_and_Manage_Active_Directory_Domain_Services_AD_DS_in_On-premises_and_Cloud_Environments-4\" >Domain : Deploy and Manage Active Directory Domain Services (AD DS) in On-premises and Cloud Environments<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Deploy_and_Manage_Active_Directory_Domain_Services_AD_DS_in_On-premises_and_Cloud_Environments-5\" >Domain : Deploy and Manage Active Directory Domain Services (AD DS) in On-premises and Cloud Environments<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Deploy_and_Manage_Active_Directory_Domain_Services_AD_DS_in_On-premises_and_Cloud_Environments-6\" >Domain : Deploy and Manage Active Directory Domain Services (AD DS) in On-premises and Cloud Environments<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Manage_Windows_Servers_and_Workloads_in_a_Hybrid_Environment\" >Domain : Manage Windows Servers and Workloads in a Hybrid Environment<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Manage_Virtual_Machines_and_Containers\" >Domain: Manage Virtual Machines and Containers<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Manage_Virtual_Machines_and_Containers-2\" >Domain : Manage Virtual Machines and Containers<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Manage_Virtual_Machines_and_Containers-3\" >Domain : Manage Virtual Machines and Containers<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Implement_and_Manage_an_On-premises_and_Hybrid_Networking_Infrastructure\" >Domain : Implement and Manage an On-premises and Hybrid Networking Infrastructure<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Implement_and_Manage_an_On-premises_and_Hybrid_Networking_Infrastructure-2\" >Domain : Implement and Manage an On-premises and Hybrid Networking Infrastructure<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Implement_and_Manage_an_On-premises_and_Hybrid_Networking_Infrastructure-3\" >Domain : Implement and Manage an On-premises and Hybrid Networking Infrastructure<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Implement_and_Manage_an_On-premises_and_Hybrid_Networking_Infrastructure-4\" >Domain : Implement and Manage an On-premises and Hybrid Networking Infrastructure<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Implement_and_Manage_an_On-premises_and_Hybrid_Networking_Infrastructure-5\" >Domain : Implement and Manage an On-premises and Hybrid Networking Infrastructure<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Deploy_and_Manage_Active_Directory_Domain_Services_AD_DS_in_On-premises_and_Cloud_Environments-7\" >Domain : Deploy and Manage Active Directory Domain Services (AD DS) in On-premises and Cloud Environments<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Deploy_and_Manage_Active_Directory_Domain_Services_AD_DS_in_On-premises_and_Cloud_Environments-8\" >Domain : Deploy and Manage Active Directory Domain Services (AD DS) in On-premises and Cloud Environments<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Deploy_and_Manage_Active_Directory_Domain_Services_AD_DS_in_On-premises_and_Cloud_Environments-9\" >Domain : Deploy and Manage Active Directory Domain Services (AD DS) in On-premises and Cloud Environments<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Deploy_and_Manage_Active_Directory_Domain_Services_AD_DS_in_On-premises_and_Cloud_Environments-10\" >Domain : Deploy and Manage Active Directory Domain Services (AD DS) in On-premises and Cloud Environments<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Deploy_and_Manage_Active_Directory_Domain_Services_AD_DS_in_On-premises_and_Cloud_Environments-11\" >Domain : Deploy and Manage Active Directory Domain Services (AD DS) in On-premises and Cloud Environments<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Deploy_and_Manage_Active_Directory_Domain_Services_AD_DS_in_On-premises_and_Cloud_Environments-12\" >Domain : Deploy and Manage Active Directory Domain Services (AD DS) in On-premises and Cloud Environments<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Manage_Windows_Servers_and_Workloads_in_a_Hybrid_Environment-2\" >Domain : Manage Windows Servers and Workloads in a Hybrid Environment<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Manage_Windows_Servers_and_Workloads_in_a_Hybrid_Environment-3\" >Domain : Manage Windows Servers and Workloads in a Hybrid Environment<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-24\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Manage_Windows_Servers_and_Workloads_in_a_Hybrid_Environment-4\" >Domain : Manage Windows Servers and Workloads in a Hybrid Environment<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-25\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Domain_Manage_Virtual_Machines_and_Containers-4\" >Domain : Manage Virtual Machines and Containers<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-26\" href=\"https:\/\/www.whizlabs.com\/blog\/az-800-exam-questions-administering-windows-server\/#Summary\" >Summary<\/a><\/li><\/ul><\/nav><\/div>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Deploy_and_Manage_Active_Directory_Domain_Services_AD_DS_in_On-premises_and_Cloud_Environments\"><\/span>Domain : Deploy and Manage Active Directory Domain Services (AD DS) in On-premises and Cloud Environments<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Q1 : You have recently joined the company. Nica and you will be responsible for managing Active Directory Domain Services (AD DS) in the administrator role. You need to set the FSMO role such that the Active directory objects will be unique in every domain. Which of the following Flexible Single Master Operation (FSMO) roles is responsible for the uniqueness of Active directory objects in every domain?<\/em><\/h4>\n<p><span style=\"font-weight: 400;\"><strong>A. <\/strong>RID Master Role<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B. <\/strong>Infrastructure Master Role<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C. <\/strong>Schema Master Role<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D. <\/strong>Domain Naming Master Role<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>E. <\/strong>PDC Emulator Role<\/span><\/p>\n<p><b>Correct Answer: A<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">When a Domain controller creates a security principal object like a group or a user, it attaches a unique SID (Security ID) to the object. The SID contains:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A domain SID, which is the same for all Security IDs created in a domain.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A RID (Relative ID), that is unique for every security principal Security ID created in a domain.<\/span><\/li>\n<\/ul>\n<p><b>Option A is correct<\/b><span style=\"font-weight: 400;\">. RID Master Role is responsible for <\/span><span style=\"font-weight: 400;\">the uniqueness of Active directory objects in every domain.<\/span><br \/>\n<b>Option B is incorrect<\/b><span style=\"font-weight: 400;\">. <\/span><span style=\"font-weight: 400;\">Infrastructure Master Role isn&#8217;t responsible for the <\/span><span style=\"font-weight: 400;\">uniqueness of Active directory objects in every domain.<\/span><br \/>\n<b>Option C is incorrect.<\/b><span style=\"font-weight: 400;\"> The schema master role is responsible to perform updates to the directory schema.<\/span><br \/>\n<b>Option D is incorrect.<\/b><span style=\"font-weight: 400;\"> \u00a0The domain naming master role is responsible for making updates to the forest-wide domain name space of the directory.<\/span><br \/>\n<b>Option E is incorrect<\/b><span style=\"font-weight: 400;\">. The PDC emulator role is essential to synchronize time in an organization.<\/span><\/p>\n<p><b>Reference: <\/b><span style=\"font-weight: 400;\">To know more about Active Directory FSMO roles in Windows, please visit the below-given link: <\/span><a href=\"https:\/\/docs.microsoft.com\/en-us\/troubleshoot\/windows-server\/identity\/fsmo-roles?WT.mc_id=ravikirans\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/troubleshoot\/windows-server\/identity\/fsmo-roles<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Deploy_and_Manage_Active_Directory_Domain_Services_AD_DS_in_On-premises_and_Cloud_Environments-2\"><\/span>Domain : Deploy and Manage Active Directory Domain Services (AD DS) in On-premises and Cloud Environments<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Q2 : Active Directory Recycle Bin is a feature offered by Windows Server that helps in restoring the objects deleted from AD DS with no AD DS downtime. Can you use the Active Directory Recycle Bin to revert the changes to existing objects?<\/em><\/h4>\n<p><span style=\"font-weight: 400;\"><strong>A. <\/strong>Yes<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B.<\/strong>\u00a0No<\/span><\/p>\n<p><b>Correct Answer: B<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Active Directory Recycle Bin can&#8217;t be used to revert changes to existing objects. For such cases, you need to use the traditional approaches of backing up and restoring AD DS.<\/span><\/p>\n<p><b>Reference: <\/b><span style=\"font-weight: 400;\">To know more about how to Maintain AD DS domain controllers, please visit the below-given link: <\/span><a href=\"https:\/\/docs.microsoft.com\/en-us\/learn\/modules\/manage-active-directory-domain-services-flexible-single-master-operation-roles\/3-maintain-domain-controllers\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/learn\/modules\/manage-active-directory-domain-services-flexible-single-master-operation-roles\/3-maintain-domain-controllers<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Deploy_and_Manage_Active_Directory_Domain_Services_AD_DS_in_On-premises_and_Cloud_Environments-3\"><\/span>Domain : Deploy and Manage Active Directory Domain Services (AD DS) in On-premises and Cloud Environments<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Q3 : You have recently joined Carla company as an administrator. Your team lead is working on AD DS and asks you a few questions to check your existing knowledge. One question he asks is &#8211; what kind of trust relationship is automatically created when you create a new AD DS tree in an existing AD DS forest? What would be your response?\u00a0<\/em><\/h4>\n<p><span style=\"font-weight: 400;\"><strong>A. <\/strong>A Parent and Child trust<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B. <\/strong>An External trust<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C. <\/strong>A tree-root trust<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D. <\/strong>A Realm trust<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>E. <\/strong>A shortcut trust<\/span><\/p>\n<p><b>Correct Answer: C<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">When a new AD DS tree is created in an existing AD DS forest, it automatically creates a new tree-root trust.<\/span><\/p>\n<p><b>Option A is incorrect<\/b><span style=\"font-weight: 400;\">. When a new AD DS domain is added to an existing AD DS tree, it creates new parent and child trusts.<\/span><br \/>\n<b>Option B is incorrect<\/b><span style=\"font-weight: 400;\">. when you create a new AD DS tree in an existing AD DS forest, a tree-root trust, not an external trust is created.<\/span><br \/>\n<b>Option C is correct. <\/b><span style=\"font-weight: 400;\">When a new AD DS tree is created in an existing AD DS forest, it automatically creates a new tree-root trust.<\/span><br \/>\n<b>Option D is incorrect<\/b><span style=\"font-weight: 400;\">.<\/span> <span style=\"font-weight: 400;\">Realm trusts create an authentication path between a Windows Server AD DS domain and a Kerberos version 5 (v5) protocol realm that implements by utilizing a directory service other than AD DS.<\/span><br \/>\n<b>Option E is incorrect. <\/b><span style=\"font-weight: 400;\">Shortcut trusts are configured to reduce the time consumed to authenticate between AD DS domains that are in various parts of an AD DS forest.<\/span><\/p>\n<p><b>Reference<\/b><span style=\"font-weight: 400;\">: To know more about AD DS forests and domains, please visit the below-given link: <\/span><a href=\"https:\/\/docs.microsoft.com\/en-us\/learn\/modules\/introduction-to-ad-ds\/4-define-forests-domains?ns-enrollment-type=LearningPath&amp;ns-enrollment-id=learn.wwl.deploy-manage-identity-infrastructure\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/learn\/modules\/introduction-to-ad-ds\/4-define-forests-domains<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Deploy_and_Manage_Active_Directory_Domain_Services_AD_DS_in_On-premises_and_Cloud_Environments-4\"><\/span>Domain : Deploy and Manage Active Directory Domain Services (AD DS) in On-premises and Cloud Environments<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Q4 :\u00a0You have downloaded a software from the Internet and you want to check this software against vendor-provided file hashes to make sure that it is not tampered with by unauthorized third parties. Which of the following commands can help you?<\/em><\/h4>\n<p><span style=\"font-weight: 400;\"><strong>A. <\/strong>Matchutil.exe command<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B. <\/strong>certutil.exe command<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C. <\/strong>Hashmatch.exe command<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D. <\/strong>Filematch.exe command<\/span><\/p>\n<p><b>Correct Answer: B<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">certutil.exe command, built into the Windows operating system, can be used to compare a downloaded file with the hash file that has been provided by the vendor.<\/span><\/p>\n<p><b>Option A is incorrect<\/b><span style=\"font-weight: 400;\">. Matchutil.exe is not a valid command.<\/span><br \/>\n<b>Option B is correct.<\/b><span style=\"font-weight: 400;\"> certutil.exe command can be used to compare a downloaded file with the hash file that has been provided by the vendor.<\/span><br \/>\n<b>Option C is incorrect<\/b><span style=\"font-weight: 400;\">. Hashmatch.exe command can\u2019t be used for the said purpose.<\/span><br \/>\n<b>Option D is incorrect<\/b><span style=\"font-weight: 400;\">. Filematch.exe is not a valid command.<\/span><\/p>\n<p><b>Reference:<\/b><span style=\"font-weight: 400;\"> To know more about ESAE forests, please visit the below-given link: <\/span><a href=\"https:\/\/docs.microsoft.com\/en-us\/learn\/modules\/manage-advanced-features-of-ad-ds\/3-implement-esae-forests\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/learn\/modules\/manage-advanced-features-of-ad-ds\/3-implement-esae-forests<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Deploy_and_Manage_Active_Directory_Domain_Services_AD_DS_in_On-premises_and_Cloud_Environments-5\"><\/span>Domain : Deploy and Manage Active Directory Domain Services (AD DS) in On-premises and Cloud Environments<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Q5. From the below list of attributes or objects, choose the ones that are synchronized from an on-premises AD DS environment to Azure AD DS or Azure AD.<\/em><\/h4>\n<p><span style=\"font-weight: 400;\"><strong>A. <\/strong>Group Policies<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B. <\/strong>Sysvol folder<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C. <\/strong>SidHistory attributes for users and groups<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D. <\/strong>Organization Units (OU) structures<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>E. <\/strong>None of these<\/span><\/p>\n<p><b>Correct Answer: E<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The following attributes or objects are not synchronized from an on-premises AD DS environment to Azure AD DS or Azure AD:<\/span><\/p>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Excluded attributes<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Group policies<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Sysvol folder<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Computer objects<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">SidHistory attributes for users and groups<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<ul>\n<li aria-level=\"1\"><span style=\"font-weight: 400;\">Organization<\/span> <span style=\"font-weight: 400;\">Units (OU) structures<\/span><\/li>\n<\/ul>\n<p><b>Option A is incorrect. <\/b><span style=\"font-weight: 400;\">Not only<\/span> <span style=\"font-weight: 400;\">group policies, but all the given attributes or objects are not synchronized.<\/span><br \/>\n<b>Option B is incorrect.<\/b><span style=\"font-weight: 400;\"> The content of the\u00a0<\/span><i><span style=\"font-weight: 400;\">Sysvol<\/span><\/i><span style=\"font-weight: 400;\"> folder in an on-premises AD DS environment isn\u2019t synchronized to Azure AD DS.\u00a0<\/span><br \/>\n<b>Option C is incorrect<\/b><span style=\"font-weight: 400;\">. The primary group and primary user SIDs from an on-premises AD DS environment are synchronized to Azure AD DS.\u00a0However, existing\u00a0<\/span><i><span style=\"font-weight: 400;\">SidHistory<\/span><\/i><span style=\"font-weight: 400;\"> attributes for groups and users are not synchronized from the on-premises AD DS environment to Azure AD DS.<\/span><br \/>\n<b>Option D is incorrect.<\/b><span style=\"font-weight: 400;\"> OUs defined in an on-premises AD DS environment are not synchronized to Azure AD DS.\u00a0<\/span><br \/>\n<b>Option E is correct<\/b><span style=\"font-weight: 400;\">. None of the given attributes or objects is synchronized from an on-premises AD DS environment to Azure AD DS or Azure AD.<\/span><\/p>\n<p><b>Reference:<\/b><span style=\"font-weight: 400;\"> To know more about synchronization, please visit the below-given link: <\/span><a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory-domain-services\/synchronization?WT.mc_id=ravikirans\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory-domain-services\/synchronization<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Deploy_and_Manage_Active_Directory_Domain_Services_AD_DS_in_On-premises_and_Cloud_Environments-6\"><\/span>Domain : Deploy and Manage Active Directory Domain Services (AD DS) in On-premises and Cloud Environments<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Q6 : There are two sites Manchester and Sydney in Whizlabs.com. A single GPO (called Manchester settings) is linked to Manchester and another (Sydney settings) is linked to Sydney. Additionally, there are 2 GPOs linked to the Whizlabs.com domain: The Default Domain GPO (which is Enforced) and a further policy: Whizlabs Folder Redirection (which has a link order value of 2). The Sales OU has a linked GPO called Sales Desktop settings. A user in the Sales department based in Sydney, whose user account and computer account reside in the Sales OU, is facing issues with settings on their computer. Being the administrator, you decide to investigate. You suspect that there are conflicting settings in the several GPOs that apply to the users and their computers. Which of the following GPOs settings take precedence?<\/em><\/h4>\n<p><span style=\"font-weight: 400;\"><strong>A. <\/strong>Sydney setting GPO<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B. <\/strong>Default Domain GPO<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C. <\/strong>Sales Desktop setting GPO<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D. <\/strong>Manchester setting GPO<\/span><\/p>\n<p><b>Correct Answer: B<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The Default Domain Policy GPO is associated with the domain, and it applies to Authenticated Users. Because of not having any WMI filters, it affects all the computers and users in the domain.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In the above case, Default Domain GPO takes precedence because it is Enforced.<\/span><\/p>\n<p><b>Option A is incorrect<\/b><span style=\"font-weight: 400;\">. Sydney setting GPO won\u2019t take precedence as it is likely to be superseded by more specific GPOs on the domain and OU.<\/span><br \/>\n<b>Option B is correct.<\/b><span style=\"font-weight: 400;\"> Default Domain GPO will take precedence because it is enforced.<\/span><br \/>\n<b>Option C is incorrect<\/b><span style=\"font-weight: 400;\">. Although this GPO is the most specific, its settings are overridden by settings in the enforced Default Domain policy.<\/span><br \/>\n<b>Option D is incorrect.<\/b><span style=\"font-weight: 400;\"> Manchester setting GPO is the incorrect answer.<\/span><\/p>\n<p><b>Reference:<\/b><span style=\"font-weight: 400;\"> To know more about group policy order, please visit the below-given link:\u00a0<\/span><a href=\"https:\/\/4sysops.com\/archives\/understanding-group-policy-order\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/4sysops.com\/archives\/understanding-group-policy-order\/<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Manage_Windows_Servers_and_Workloads_in_a_Hybrid_Environment\"><\/span>Domain : Manage Windows Servers and Workloads in a Hybrid Environment<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Q7 : You have been tasked to reconfigure the properties of some users in the Sales organization unit of the fabrikam.com domain. Which of the following cmdlets would you use in PowerShell to make the changes?<\/em><\/h4>\n<p><span style=\"font-weight: 400;\"><strong>A. <\/strong>New-ADuser<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B. <\/strong>Set-ADuser<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C. <\/strong>Get-ADuser<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D. <\/strong>Change-ADuser<\/span><\/p>\n<p><b>Correct Answer: B<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Set-ADUser is used to make<\/span><b> c<\/b><span style=\"font-weight: 400;\">hanges to the data associated with a resource, such as a user or a file property. Therefore, in the given scenario, being the administrator you need to use Set-ADuser PowerShell cmdlet to reconfigure the properties of some users in the Sales organization unit of the fabrikam.com domain.<\/span><\/p>\n<p><b>Option A is incorrect.<\/b><span style=\"font-weight: 400;\"> New-ADuser cmdlet is used to create a new user in AD DS.<\/span><br \/>\n<b>Option B is correct<\/b><span style=\"font-weight: 400;\">. Set-ADuser is the right cmdlet to be used to reconfigure the properties of some users in the Sales organization unit of the fabrikam.com domain.<\/span><br \/>\n<b>Option C is incorrect.<\/b><span style=\"font-weight: 400;\"> Although the administrator may go with this cmdlet to get user details, it doesn&#8217;t commit changes.<\/span><br \/>\n<b>Option D is incorrect<\/b><span style=\"font-weight: 400;\">. Change-ADuser is not a valid cmdlet to use.<\/span><\/p>\n<p><b>Reference:<\/b> <span style=\"font-weight: 400;\">To know more about Set-ADUser cmdlet, please visit the below-given link<\/span><b>: <\/b><a href=\"https:\/\/docs.microsoft.com\/en-us\/powershell\/module\/activedirectory\/set-aduser\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/powershell\/module\/activedirectory\/set-aduser<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Manage_Virtual_Machines_and_Containers\"><\/span>Domain: Manage Virtual Machines and Containers<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Question 8 : You decide to create a Virtual Machine using New-AzVM cmdlet. Which of the following parameters would you use to specify the name of the availability set where it should be created?<\/em><\/h4>\n<p><span style=\"font-weight: 400;\"><strong>A. <\/strong>-AvailabilitySetName<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B. <\/strong>-AvailabilitySetVMName<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C. <\/strong>-AvailableVirtualMachine<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D. <\/strong>-AvailabilityVirtualSetName<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>E. <\/strong>-AvailabilityVirtualName<\/span><\/p>\n<p><b>Correct Answer: A<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Virtual machines must be created within the availability set to ensure they are correctly distributed across the hardware. An existing virtual machine can\u2019t be added to an availability set after it has been created.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">When you create a virtual machine with\u00a0<\/span><a href=\"https:\/\/docs.microsoft.com\/en-us\/powershell\/module\/az.compute\/new-azvm\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">New-AzVM<\/span><\/a><span style=\"font-weight: 400;\"> cmdlet, you should use the\u00a0-AvailabilitySetName\u00a0parameter for specifying the name of the availability set.<\/span><\/p>\n<p><b>Option A is correct<\/b><span style=\"font-weight: 400;\">. -AvailabilitySetName is the right parameter to specify the name of the availability set.<\/span><br \/>\n<b>Option B is incorrect<\/b><span style=\"font-weight: 400;\">. -AvailabilitySetVMName is not the right parameter to use.<\/span><br \/>\n<b>Option C is incorrect.<\/b><span style=\"font-weight: 400;\"> -AvailableVirtualMachine is not the valid parameter.<\/span><br \/>\n<b>Option D is incorrect<\/b><span style=\"font-weight: 400;\">. -AvailabilityVirtualSetName isn\u2019t a valid parameter.<\/span><br \/>\n<b>Option E is incorrect.\u00a0 <\/b><span style=\"font-weight: 400;\">-AvailableVirtualName is not the valid parameter.<\/span><\/p>\n<p><b>Reference:<\/b><span style=\"font-weight: 400;\"> To know more about creating and deploying virtual machines in an availability set, please visit the below-given link: <\/span><a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/virtual-machines\/windows\/tutorial-availability-sets?WT.mc_id=ravikirans\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/azure\/virtual-machines\/windows\/tutorial-availability-sets<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Manage_Virtual_Machines_and_Containers-2\"><\/span>Domain : Manage Virtual Machines and Containers<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Q9 : While creating a new container image on Windows Admin Center, which of the following options would you use to create a new container image using the IIS base image?<\/em><\/h4>\n<p><strong>A. <\/strong>Use an existing Dockerfile<br \/>\n<strong>B. <\/strong>IIS web application\/Visual Studio solution (ASP.NET)<br \/>\n<strong>C. <\/strong>IIS web application\/Web Deploy (exported Zip file)<br \/>\n<strong>D. <\/strong>IIS web application\/static web application folder<\/p>\n<p><b>Correct Answer: D<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">IIS web application\/static web application folder option is used for creating a new container image utilizing the IIS base image. The content of the folder is copied to the container image to include it as a website. It adds no framework.<\/span><\/p>\n<p><b>Option A is incorrect.<\/b> <span style=\"font-weight: 400;\">It allows the users to rebuild a new container image depending upon an existing Dockerfile.<\/span><br \/>\n<b>Option B is incorrect<\/b><span style=\"font-weight: 400;\">. It is used to create a new container image depending upon an existing Visual Studio solution.\u00a0<\/span><br \/>\n<b>Option C is incorrect<\/b><span style=\"font-weight: 400;\">. This option is used to create a container image from the artifacts exported from a running server.<\/span><br \/>\n<b>Option D is correct<\/b><span style=\"font-weight: 400;\">. This option is used <\/span><span style=\"font-weight: 400;\">for creating a new container image utilizing the IIS base image.<\/span><\/p>\n<p><b>Reference:<\/b><span style=\"font-weight: 400;\"> To know more about creating new container images on Windows Admin Center, please visit the below-given link: <\/span><a href=\"https:\/\/docs.microsoft.com\/en-us\/virtualization\/windowscontainers\/wac-tooling\/wac-images?WT.mc_id=ravikirans\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/virtualization\/windowscontainers\/wac-tooling\/wac-images<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Manage_Virtual_Machines_and_Containers-3\"><\/span>Domain : Manage Virtual Machines and Containers<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Q10 : You are an administrator and you need to create and manage AD DS Partitions. You have to use a command-line tool to perform the required tasks. Which of the following tools can help you?<\/em><\/h4>\n<p><span style=\"font-weight: 400;\"><strong>A. <\/strong>Dcdiag.exe<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B. <\/strong>Repadmin.exe<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C. <\/strong>NtdsUtil.exe<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D. <\/strong>Diskpart<\/span><\/p>\n<p><b>Correct Answer: C<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">AD DS partitions can be created and managed by using the NtdsUtil.exe command-line tool. This tool also allows the users to perform various other AD DS related management tasks, such as:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cleaning up domain-controller metadata after its unrecoverable failure.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">NTDS database maintenance, which includes creating snapshots, relocating, files, database and offline defragmentation.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Resetting the password utilized to sign in to the DSRM (Directory Services Restore Mode).<\/span><\/li>\n<\/ul>\n<p><b>Option A is incorrect.<\/b><span style=\"font-weight: 400;\"> Dcdiag.exe is the tool used to monitor and troubleshoot replication.<\/span><br \/>\n<b>Option B is incorrect<\/b><span style=\"font-weight: 400;\">. Repadmin.exe also helps in monitoring and troubleshooting replication.<\/span><br \/>\n<b>Option C is correct<\/b><span style=\"font-weight: 400;\">. AD DS partitions can be created and managed by using the NtdsUtil.exe command-line tool.<\/span><br \/>\n<b>Option D is incorrect.<\/b><span style=\"font-weight: 400;\"> Diskpart helps in managing the disk partitions, not AD DS application partitions.<\/span><\/p>\n<p><b>Reference<\/b><span style=\"font-weight: 400;\">: To know more about naming contexts and Application partitions, please visit the below-given link: <\/span><a href=\"https:\/\/www.oreilly.com\/library\/view\/active-directory-5th\/9781449361211\/ch04.html\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/www.oreilly.com\/library\/view\/active-directory-5th\/9781449361211\/ch04.html<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Implement_and_Manage_an_On-premises_and_Hybrid_Networking_Infrastructure\"><\/span>Domain : Implement and Manage an On-premises and Hybrid Networking Infrastructure<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Q11 : While creating a zone on a DNS server, it is essential to identify whether it is a primary zone or a secondary zone. Which of the following statements is false about a primary or a secondary zone?<\/em><\/h4>\n<p><span style=\"font-weight: 400;\"><strong>A. <\/strong>It is possible to create, delete or edit resource records in a primary zone.\u00a0<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B. <\/strong>A secondary zone allows creating resource records but you can&#8217;t delete records in the secondary zone.<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C. <\/strong>A secondary zone is a read-only copy of a primary zone.<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D. <\/strong>You can\u2019t manage resource records in a secondary zone.<\/span><\/p>\n<p><b>Correct Answer: B<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">While creating a zone on a DNS server, you need to identify whether it is a primary zone or a secondary zone. If you want to create, delete or edit the resource records, you need to use the primary zone. As a secondary zone is a read-only copy of a primary zone, resource records can\u2019t be managed in a secondary zone.<\/span><\/p>\n<p><b>Option A is incorrect.<\/b><span style=\"font-weight: 400;\"> It is true that you can c<\/span><span style=\"font-weight: 400;\">reate, delete or edit resource records in a primary zone.<\/span><br \/>\n<b>Option B is correct.<\/b> <span style=\"font-weight: 400;\">As a secondary zone is a read-only copy of a primary zone, you can\u2019t even create the resource records there.<\/span><br \/>\n<b>Option C is incorrect.<\/b><span style=\"font-weight: 400;\"> It is true that a secondary zone is a read-only copy of a primary zone.<\/span><br \/>\n<b>Option D is incorrect.<\/b><span style=\"font-weight: 400;\"> As a secondary zone is a read-only copy of a primary zone, y<\/span><span style=\"font-weight: 400;\">ou can\u2019t manage resource records in a secondary zone.<\/span><\/p>\n<p><b>Reference:<\/b><span style=\"font-weight: 400;\"> To know more about primary and secondary DNS, please visit the below-given link: <\/span><a href=\"https:\/\/www.cloudflare.com\/en-ca\/learning\/dns\/glossary\/primary-secondary-dns\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/www.cloudflare.com\/en-ca\/learning\/dns\/glossary\/primary-secondary-dns\/<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Implement_and_Manage_an_On-premises_and_Hybrid_Networking_Infrastructure-2\"><\/span>Domain : Implement and Manage an On-premises and Hybrid Networking Infrastructure<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Q12 : You need to create CNAME alias resource records for a specific app running on a server. Which of the following cmdlet can you use to create the required resource records in Windows PowerShell?<\/em><\/h4>\n<p><span style=\"font-weight: 400;\"><strong>A. <\/strong>Add-DnsServerResourceRecordA<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B. <\/strong>Add-DnsServerResourceRecordAAAA<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C. <\/strong>Add-DnsServerResourceRecordCNAME<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D. <\/strong>Add-DnsServerResourceRecordPtr<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>E. <\/strong>Add-DnsServerResourceRecordMX<\/span><\/p>\n<p><b>Correct Answer: C<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">R<\/span><span style=\"font-weight: 400;\">esource records can be created by using DNS manager, Windows PowerShell, or Windows Admin Center. Here are some Windows PowerShell cmdlets that can be used to create DNS resource records. <img decoding=\"async\" class=\"aligncenter size-full wp-image-81591\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/03\/az12.png\" alt=\"\" width=\"807\" height=\"366\" srcset=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/03\/az12.png 807w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/03\/az12-300x136.png 300w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/03\/az12-768x348.png 768w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/03\/az12-640x290.png 640w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/03\/az12-681x309.png 681w\" sizes=\"(max-width: 807px) 100vw, 807px\" \/><\/span><\/p>\n<p><b>Option A is incorrect.<\/b> <span style=\"font-weight: 400;\">Add-DnsServerResourceRecordA cmdlet is used to create a host(A) resource record.<\/span><br \/>\n<b>Option B is incorrect<\/b><span style=\"font-weight: 400;\">. Add-DnsServerResourceRecordAAAA cmdlet is used to create a host (AAAA) resource record.<\/span><br \/>\n<b>Option C is correct<\/b><span style=\"font-weight: 400;\">. Add-DnsServerResourceRecordCNAME cmdlet is used to create a CNAME alias resource record.<\/span><br \/>\n<b>Option D is incorrect.<\/b><span style=\"font-weight: 400;\"> Add-DnsServerResourceRecordPtr cmdlet is used to create a PTR resource record.<\/span><br \/>\n<b>Option E is incorrect.<\/b><span style=\"font-weight: 400;\"> Add-DnsServerResourceRecordMX cmdlet is used to create an MX resource record.<\/span><\/p>\n<p><b>Reference:<\/b><span style=\"font-weight: 400;\"> To know more about installing and configuring the DNS role, please visit the below-given link: <\/span><a href=\"https:\/\/docs.microsoft.com\/en-us\/learn\/modules\/implement-windows-server-dns\/4-install-configure-dns-role?ns-enrollment-type=LearningPath&amp;ns-enrollment-id=learn.wwl.implement-operate-premises-hybrid\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/learn\/modules\/implement-windows-server-dns\/4-install-configure-dns-role<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Implement_and_Manage_an_On-premises_and_Hybrid_Networking_Infrastructure-3\"><\/span>Domain : Implement and Manage an On-premises and Hybrid Networking Infrastructure<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Question 13 : Your network consists of an AD domain named fabrikam.com. This domain has a server known as Server2 running Windows Server 2016.<\/em><br \/>\n<em>Server2 has IPAM (IP Address Management) installed. IPAM has been configured to utilize the Group Policy-based provisioning approach. The prefix of IPAM GPOs is IP.<\/em><br \/>\n<em>You rename the IPAM GPOs manually from Group Policy Management to have IPAM\u2019s prefix.<\/em><br \/>\n<em>Now, you are required to edit the GPO prefix utilized by IPAM. What would you do?<\/em><\/h4>\n<p><span style=\"font-weight: 400;\"><strong>A. <\/strong>In the Server Manager, click on the Configure server discovery\u00a0<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B. <\/strong>In the Server Manager, Click on Provision the IPAM server.<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C. <\/strong>Run the PowerShell cmdlet Set-IpamConfiguration\u00a0<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D. <\/strong>Run the PowerShell cmdlet Invoke-IpamGpoProvisioning\u00a0<\/span><\/p>\n<p><b>Correct Answer: C<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The Set-IpamConfiguration is the command that can be used to modify the configuration for the system running IPAM (IP Address Management) server.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The -GpoPrefix&lt;String&gt; parameter mentions the unique GPO prefix name that is used by IPAM for creating the group policy objects. This parameter is used only when the ProvisioningMethod parameter is assigned the value as Automatic.<\/span><\/p>\n<p><b>Option A is incorrect<\/b><span style=\"font-weight: 400;\">. The given option won\u2019t help in editing the GPO prefix used by IPAM.<\/span><br \/>\n<b>Option B is incorrect.<\/b><span style=\"font-weight: 400;\"> The question clearly states that you manually rename, not create the new settings. Therefore, the given option is the incorrect answer.<\/span><br \/>\n<b>Option C is correct.<\/b><span style=\"font-weight: 400;\"> Set-IpamConfiguration cmdlet would help in editing<\/span> <span style=\"font-weight: 400;\">the GPO prefix used by IPAM.<\/span><br \/>\n<b>Option D is incorrect.<\/b><span style=\"font-weight: 400;\"> This cmdlet is used to create GPO, not to rename GPO.<\/span><\/p>\n<p><b>Reference:<\/b><span style=\"font-weight: 400;\"> To know more about the Set-IpamConfiguration cmdlet, please visit the below-given link: <\/span><a href=\"https:\/\/docs.microsoft.com\/en-us\/powershell\/module\/ipamserver\/set-ipamconfiguration?view=windowsserver2022-ps\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/powershell\/module\/ipamserver\/set-ipamconfiguration?view=windowsserver2022-ps<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Implement_and_Manage_an_On-premises_and_Hybrid_Networking_Infrastructure-4\"><\/span>Domain : Implement and Manage an On-premises and Hybrid Networking Infrastructure<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Q14 : As an administrator, you\u2019re responsible for managing the security in hybrid as well as on-premises scenarios. While securing IPAM, which of the following would help you with defining the administrative domains of IPAM?<\/em><\/h4>\n<p><span style=\"font-weight: 400;\"><strong>A. <\/strong>IPAM Roles<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B. <\/strong>IPAM Access Scopes<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C. <\/strong>IPAM Access Policies<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D. <\/strong>None of the above<\/span><\/p>\n<p><b>Correct Answer: B<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">An\u00a0<\/span><i><span style=\"font-weight: 400;\">access scope<\/span><\/i><span style=\"font-weight: 400;\">\u00a0is responsible to decide which objects a user has access. Access scopes can be used for defining the IPAM administrative domains.<\/span><\/p>\n<p><b>Option A is incorrect.<\/b><span style=\"font-weight: 400;\"> A\u00a0<\/span><i><span style=\"font-weight: 400;\">role<\/span><\/i><span style=\"font-weight: 400;\"> is a collection of IPAM operations. A role can be associated with a group or user in Windows by utilizing an access policy.<\/span><br \/>\n<b>Option B is correct.<\/b><span style=\"font-weight: 400;\"> An\u00a0<\/span><i><span style=\"font-weight: 400;\">access scope<\/span><\/i><span style=\"font-weight: 400;\"> is responsible for determining the objects that can be accessed by a user. Access scopes can be used for defining IPAM administrative domains.\u00a0<\/span><br \/>\n<b>Option C is incorrect<\/b><span style=\"font-weight: 400;\">. An\u00a0IPAM <\/span><i><span style=\"font-weight: 400;\">access policy<\/span><\/i><span style=\"font-weight: 400;\"> joins a role with the help of access scope for assigning the permissions to a group or user.<\/span><br \/>\n<b>Option D is incorrect<\/b><span style=\"font-weight: 400;\">. IPAM access scope is the correct answer.<\/span><\/p>\n<p><b>Reference:<\/b><span style=\"font-weight: 400;\"> To know more about how to Administer IP Address Management, please visit the below-given link: <\/span><a href=\"https:\/\/docs.microsoft.com\/en-us\/learn\/modules\/implement-ip-address-management\/4-administer-ip-address-management\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/learn\/modules\/implement-ip-address-management\/4-administer-ip-address-management<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Implement_and_Manage_an_On-premises_and_Hybrid_Networking_Infrastructure-5\"><\/span>Domain : Implement and Manage an On-premises and Hybrid Networking Infrastructure<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Q15 : Whizlabs Solutions has hired you as an expert consultant for its Azure projects. You are chairing a team session and you are supposed to educate the team about Azure Bastion. Which of the following statement(s) would you use while describing the Azure Bastion?<\/em><\/h4>\n<p><span style=\"font-weight: 400;\"><strong>A. <\/strong>Azure Bastion routes the <\/span><span style=\"font-weight: 400;\">Network traffic from the VPN gateway to the cloud application.<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B. <\/strong>Azure Bastion allows users to log into virtual machines in the Azure VNet without exposing the Virtual Machines directly to the internet.<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C. <\/strong>Azure Bastion uses SSH(Secure Shell) or RDP(Remote Desktop Protocol) protocols.<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D. <\/strong>If you lose VPN connectivity, you can\u2019t use Azure Bastion to manage your virtual machines in the Azure virtual network.<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>E. <\/strong>Azure Bastion supports the management of on-premises servers.<\/span><\/p>\n<p><b>Correct Answers: B and C<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Azure Bastion allows the users to log into virtual machines in the Azure VNet without exposing the virtual machines directly to the internet. It utilizes Remote Desktop Protocol (RDP) or Secure Shell (SSH). Even If you lose VPN connectivity, you can still utilize Azure for managing your virtual machines in the Azure VNet. However, Azure Bastion doesn\u2019t support the management of on-premises servers.<\/span><\/p>\n<p><b>Option A is incorrect.<\/b><span style=\"font-weight: 400;\"> It is the internal load balancer that <\/span><span style=\"font-weight: 400;\">routes the<\/span> <span style=\"font-weight: 400;\">Network traffic from the VPN gateway to the cloud application.<\/span><br \/>\n<b>Option B is correct<\/b><span style=\"font-weight: 400;\">. It is true that Azure Bastion allows the users to log into virtual machines in the Azure VNet without exposing the Virtual Machines directly to the internet.<\/span><br \/>\n<b>Option C is correct.<\/b><span style=\"font-weight: 400;\"> Azure Bastion uses SSH(Secure Shell) or RDP(Remote Desktop Protocol) protocols.<\/span><br \/>\n<b>Option D is incorrect<\/b><span style=\"font-weight: 400;\">. If you lose VPN connectivity, you can still utilize Azure for managing your virtual machines in the Azure VNet.<\/span><br \/>\n<b>Option E is incorrect.<\/b><span style=\"font-weight: 400;\"> Azure Bastion doesn\u2019t support the management of on-premises servers.<\/span><\/p>\n<p><b>Reference: <\/b><span style=\"font-weight: 400;\">To know more about connecting standalone servers by using Azure Network Adapter, please visit the below-given link: <\/span><a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/architecture\/hybrid\/azure-network-adapter?WT.mc_id=ravikirans\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/azure\/architecture\/hybrid\/azure-network-adapter<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Deploy_and_Manage_Active_Directory_Domain_Services_AD_DS_in_On-premises_and_Cloud_Environments-7\"><\/span>Domain : Deploy and Manage Active Directory Domain Services (AD DS) in On-premises and Cloud Environments<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Q16 : You have been hired as the networking administrator in Whizlabs company. There is one user account that is required to be moved very often between the Sales &amp; Marketing groups.\u00a0 But you notice that the changes aren&#8217;t working. Which of the following Flexible Single Master Operation (FSMO) roles might be responsible?<\/em><\/h4>\n<p><span style=\"font-weight: 400;\"><strong>A. <\/strong>Infrastructure Master Role<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B. <\/strong>Domain Naming Master Role<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C. <\/strong>Schema Master Role<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D. <\/strong>RID Role<\/span><\/p>\n<p><b>Correct Answer: A<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The Infrastructure Master role should be held by a Domain Controller that isn\u2019t a Global Catalog server (GC). If the IM role runs on a GC server it will halt updating object information because it doesn\u2019t have any references to objects that it doesn\u2019t hold.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Additionally, the Infrastructure master doesn\u2019t make changes often.<\/span><\/p>\n<p><b>Option A is correct.<\/b><span style=\"font-weight: 400;\"> As Infrastructure Master Role doesn&#8217;t make changes often, it might be responsible for the said issue in the scenario.<\/span><br \/>\n<b>Option B is incorrect<\/b><span style=\"font-weight: 400;\">. Domain Naming Master Role can\u2019t be responsible for the said issue.<\/span><br \/>\n<b>Option C is incorrect. <\/b><span style=\"font-weight: 400;\">Infrastructure Master role, not Schema Master Role might be the possible reason.<\/span><br \/>\n<b>Option D is incorrect. <\/b><span style=\"font-weight: 400;\">RID role is not the right answer.<\/span><\/p>\n<p><b>References<\/b><span style=\"font-weight: 400;\"><strong>:<\/strong> To know more about various FSMO Roles, please visit the below-given links: <\/span><a href=\"https:\/\/docs.microsoft.com\/en-us\/troubleshoot\/windows-server\/identity\/fsmo-roles?WT.mc_id=ravikirans\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/troubleshoot\/windows-server\/identity\/fsmo-roles<\/span><\/a>,\u00a0<a href=\"https:\/\/docs.microsoft.com\/en-us\/troubleshoot\/windows-server\/identity\/transfer-or-seize-fsmo-roles-in-ad-ds\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/troubleshoot\/windows-server\/identity\/transfer-or-seize-fsmo-roles-in-ad-ds<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Deploy_and_Manage_Active_Directory_Domain_Services_AD_DS_in_On-premises_and_Cloud_Environments-8\"><\/span>Domain : Deploy and Manage Active Directory Domain Services (AD DS) in On-premises and Cloud Environments<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Q17 : You are chairing a team session where you are discussing with your team members important points to be considered while deploying AD domain controllers in Azure. In between, will you suggest your team members to shut down an AD domain controller VM through the Azure portal?<\/em><\/h4>\n<p><span style=\"font-weight: 400;\"><strong>A. <\/strong>Yes<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B.<\/strong>\u00a0No<\/span><\/p>\n<p><b>Correct Answer: B<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">It is always advised not to use Azure portal to turn off the AD domain controller virtual machine. However, you can use the guest operating system to turn off and start again. If you use the Azure portal to turn off the AD domain controller virtual machine, it will delicate the Azure VM, which will reset both VM invocationID and GenerationID of the Active Directory repository.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">It further results in discarding the Azure Directory Domain Services RID (Relative Identifier) pool. It also non-authorize the\u00a0<\/span><i><span style=\"font-weight: 400;\">sysvol<\/span><\/i><span style=\"font-weight: 400;\">\u00a0folder. You may even need to reconfigure the whole domain controller.<\/span><\/p>\n<p><b>Reference<\/b><span style=\"font-weight: 400;\">: To know more about deploying AD DS in an Azure virtual network, please visit the below-given link: <\/span><a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/architecture\/reference-architectures\/identity\/adds-extend-domain\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/azure\/architecture\/reference-architectures\/identity\/adds-extend-domain<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Deploy_and_Manage_Active_Directory_Domain_Services_AD_DS_in_On-premises_and_Cloud_Environments-9\"><\/span>Domain : Deploy and Manage Active Directory Domain Services (AD DS) in On-premises and Cloud Environments<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Q18 : Which of the following cmdlet would you use in PowerShell to domain-join a VM without connecting to it and manually configuring the connection?<\/em><\/h4>\n<p><span style=\"font-weight: 400;\"><strong>A. <\/strong>Set-AzVmAdDomainConfig<\/span><br \/>\n<strong>B. <\/strong><a href=\"https:\/\/docs.microsoft.com\/en-us\/powershell\/module\/az.compute\/set-azvmaddomainextension\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Set-AzVmAdDomainExtension<\/span><\/a><span style=\"font-weight: 400;\">\u00a0<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C. <\/strong>Set-AzVmConnectDomainExtension<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D. <\/strong>Set-AzVmAdDomainManualConfig<\/span><\/p>\n<p><b>Correct Answer: B<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">To domain-join a VM without connecting to it and manually configuring the connection, you can utilize the Set-AzVmAdDomainExtension Azure PowerShell cmdlet.<\/span><\/p>\n<p><b>Option A is incorrect. <\/b><span style=\"font-weight: 400;\">Set-AzVmAdDomainConfig is not a valid cmdlet for the said purpose.<\/span><br \/>\n<b>Option B is correct. <\/b><a href=\"https:\/\/docs.microsoft.com\/en-us\/powershell\/module\/az.compute\/set-azvmaddomainextension\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Set-AzVmAdDomainExtension<\/span><\/a><span style=\"font-weight: 400;\"> is used to domain-join a VM without connecting to it and manually configuring the connection.<\/span><br \/>\n<b>Option C is incorrect<\/b><span style=\"font-weight: 400;\">. Set-AzVmConnectDomainExtension is not the right cmdlet.<\/span><br \/>\n<b>Option D is incorrect<\/b><span style=\"font-weight: 400;\">. Set-AzVmAdDomainManualConfig can\u2019t be used to domain-join a VM without connecting to it and manually configuring the connection.<\/span><\/p>\n<p><b>Reference<\/b><span style=\"font-weight: 400;\">: To know more about joining a Windows Server VM to an Azure AD Domain Services managed domain, please visit the below-given link: <\/span><a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory-domain-services\/join-windows-vm?WT.mc_id=ravikirans\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory-domain-services\/join-windows-vm<\/span><\/a><\/p>\n<p><span style=\"font-weight: 400;\">\u00a0<\/span><\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Deploy_and_Manage_Active_Directory_Domain_Services_AD_DS_in_On-premises_and_Cloud_Environments-10\"><\/span>Domain : Deploy and Manage Active Directory Domain Services (AD DS) in On-premises and Cloud Environments<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Q19 : Your company network is made up of 2 on-premises AD forests named powlene.com and marico.com. Forest powlene.com has 1 domain and 5 domain controllers (DCs) while marico.com consists of the domains as demonstrated in the table below.<\/em><\/h4>\n<table>\n<tbody>\n<tr>\n<td>\n<h4><em>Name<\/em><\/h4>\n<\/td>\n<td>\n<h4><em>Number of Domain Controllers<\/em><\/h4>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<h4><em>Marico.com<\/em><\/h4>\n<\/td>\n<td>\n<h4><em>2<\/em><\/h4>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<h4><em>East.marico.com<\/em><\/h4>\n<\/td>\n<td>\n<h4><em>3<\/em><\/h4>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<h4><em>West.marico.com<\/em><\/h4>\n<\/td>\n<td>\n<h4><em>3<\/em><\/h4>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h4><em>You have been tasked to synchronize users from powlene.com and marico.com to a common Azure Active Directory tenant through Azure Active Directory Connect.<\/em><br \/>\n<em>How many Azure Active Directory Connect sync servers would you need (at least) to perform the task?<\/em><\/h4>\n<p><span style=\"font-weight: 400;\"><strong>A. <\/strong>8<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B. <\/strong>4<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C. <\/strong>3<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D. <\/strong>2<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>E. <\/strong>1<\/span><\/p>\n<p><b>Correct Answer: E<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">You can have only 1 active Azure Active Directory Connect server synchronizing accounts to a common Azure Active Directory tenant. You can have backup Azure Active Directory Connect servers, but they must be running in staging mode.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">When there are multiple forests, it must be possible to reach all the forests by a common Azure AD Connect sync server. This server needs to be linked to a specific domain. If required, the server can be placed in a secure network, so it will allow reaching all the forests.<\/span><\/p>\n<p><b>Option A is incorrect.<\/b><span style=\"font-weight: 400;\"> At a minimum, there is a need for only 1 Azure Active Directory Connect sync server.<\/span><br \/>\n<b>Option B is incorrect.<\/b><span style=\"font-weight: 400;\"> 1 Azure Active Directory Connect sync server would be enough to perform the task.<\/span><br \/>\n<b>Option C is incorrect<\/b><span style=\"font-weight: 400;\">. At a minimum, there is a need for only 1 Azure Active Directory Connect sync server.<\/span><br \/>\n<b>Option D is incorrect<\/b><span style=\"font-weight: 400;\">. <\/span><span style=\"font-weight: 400;\">You can have only 1 active Azure Active Directory Connect server synchronizing accounts to a common Azure Active Directory tenant. Also, you can have backup Azure AD Connect servers, but they must be running in staging mode.\u00a0<\/span><br \/>\n<b>Option E is correct. <\/b><span style=\"font-weight: 400;\">1 Azure <\/span><span style=\"font-weight: 400;\">Active Directory<\/span><span style=\"font-weight: 400;\"> Connect sync server would be enough to perform the task.<\/span><\/p>\n<p><b>Reference<\/b><span style=\"font-weight: 400;\">: To know more about various topologies for Azure <\/span><span style=\"font-weight: 400;\">Active Directory<\/span><span style=\"font-weight: 400;\"> Connect, please visit the below-given link: <\/span><a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory\/hybrid\/plan-connect-topologies#multiple-forests-single-azure-ad-tenant\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory\/hybrid\/plan-connect-topologies#multiple-forests-single-azure-ad-tenant<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Deploy_and_Manage_Active_Directory_Domain_Services_AD_DS_in_On-premises_and_Cloud_Environments-11\"><\/span>Domain : Deploy and Manage Active Directory Domain Services (AD DS) in On-premises and Cloud Environments<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Q20 : Which of the following tools helps the users in identifying and remediating the object synchronization errors or issues like malformed or duplicate proxyAddresses\u00a0and userPrincipalName in the Active directory?<\/em><\/h4>\n<p><span style=\"font-weight: 400;\"><strong>A. <\/strong>ADModify.NET tool<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B. <\/strong>Repadmin.exe tool<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C. <\/strong>Dsdiag.exe tool<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D. <\/strong>Microsoft 365 IdFix tool\u00a0<\/span><\/p>\n<p><b>Correct Answer: D<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The Microsoft 365 IdFix tool allows the users to identify and remediate the common object synchronization errors including general like malformed\u00a0or duplicate proxyAddresses\u00a0and\u00a0userPrincipalName in Active Directory.\u00a0 You can choose the Organizational units that you expect IdFix to check, and the common errors can be fixed within the tool itself.<\/span><\/p>\n<p><b>Option A is incorrect. <\/b><span style=\"font-weight: 400;\">For errors like format issues, changes can be made to particular attributes object-by-object by utilizing either ADSIEdit or Advanced Mode in AD computers and users.\u00a0<\/span><br \/>\n<b>Option B is incorrect<\/b><span style=\"font-weight: 400;\">. <\/span><span style=\"font-weight: 400;\">Repadmin.exe tool is used for analyzing and reporting the replication.<\/span><br \/>\n<b>Option C is incorrect<\/b><span style=\"font-weight: 400;\">. Dsdiag.exe tool is another tool that helps in analyzing and reporting the replication.<\/span><br \/>\n<b>Option D is correct. <\/b><span style=\"font-weight: 400;\">The Microsoft 365 IdFix tool allows the users to identify and remediate the common object synchronization errors including general like malformed\u00a0or duplicate proxyAddresses\u00a0and\u00a0userPrincipalName in Active Directory.\u00a0\u00a0<\/span><\/p>\n<p><b>Reference<\/b><span style=\"font-weight: 400;\">: To know more about Active Directory health-check tools, please visit the below-given link: <\/span><a href=\"https:\/\/docs.microsoft.com\/en-us\/learn\/modules\/implement-hybrid-identity-windows-server\/04-prepare-premises-active-directory-synchronization?ns-enrollment-type=LearningPath&amp;ns-enrollment-id=learn.wwl.deploy-manage-identity-infrastructure\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/learn\/modules\/implement-hybrid-identity-windows-server\/04-prepare-premises-active-directory-synchronization<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Deploy_and_Manage_Active_Directory_Domain_Services_AD_DS_in_On-premises_and_Cloud_Environments-12\"><\/span>Domain : Deploy and Manage Active Directory Domain Services (AD DS) in On-premises and Cloud Environments<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Q21 : The IT department in Contoso is deploying a new version of MS Office in their on-premises environment. The administrator desires to configure the settings with GPOs for Office. What should they do?<\/em><\/h4>\n<p><span style=\"font-weight: 400;\"><strong>A. <\/strong>Download and install new .adml files and then configure the desired settings in the Administrative Templates node in the appropriate GPO.<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B. <\/strong>Download and install new .admx files and then configure the desired settings in the Administrative Templates node in the appropriate GPO.<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C. <\/strong>Download and install new administrative template files and then configure the desired settings in the Administrative Templates node in the appropriate GPO.<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D. <\/strong>Copy the content of the Windows\\PolicyDefinitions folder to the Central Store.<\/span><\/p>\n<p><b>Correct Answer: C<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">A<\/span><span style=\"font-weight: 400;\">dministrative templates can be used to control the environment of an operating system(OS) and the user experience. Two available sets of administrative templates are computer-related settings and user-related settings. <\/span><span style=\"font-weight: 400;\">Administrative template files offer most of the available GPO settings, which change particular registry keys.\u00a0<\/span><\/p>\n<p><b>Option A is incorrect.<\/b><span style=\"font-weight: 400;\"> .adml files store only language-specific information and don&#8217;t directly deal with GPO settings.<\/span><br \/>\n<b>Option B is incorrect.<\/b><span style=\"font-weight: 400;\"> The .admx files are language-neutral and don&#8217;t directly deal with GPO settings.<\/span><br \/>\n<b>Option C is correct.<\/b> <span style=\"font-weight: 400;\">Downloading and installing new administrative template files and then configuring the desired settings in the Administrative Templates node in the appropriate GPO is the right solution. You must update the .admx and .adml files together.<\/span><br \/>\n<b>Option D is incorrect.<\/b><span style=\"font-weight: 400;\"> Although a Central Store makes managing Administrative Templates easier, administrators still need updated template files.<\/span><\/p>\n<p><b>References:<\/b><span style=\"font-weight: 400;\"> To know more about administrative templates, please visit the below-given links: <\/span><a href=\"https:\/\/docs.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-server-2012-r2-and-2012\/dn789186(v=ws.11)\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-server-2012-r2-and-2012\/dn789186(v=ws.11),<\/span><\/a> <a href=\"https:\/\/docs.microsoft.com\/en-us\/learn\/modules\/implement-group-policy-objects\/7-define-administrative-templates?ns-enrollment-type=LearningPath&amp;ns-enrollment-id=learn.wwl.deploy-manage-identity-infrastructure\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/learn\/modules\/implement-group-policy-objects\/7-define-administrative-templates?<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Manage_Windows_Servers_and_Workloads_in_a_Hybrid_Environment-2\"><\/span>Domain : Manage Windows Servers and Workloads in a Hybrid Environment<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Q22 : You need to add some virtual machines in the VNet and in consideration of that, you want to ensure that WinRM is running on the target VM. Which of the following commands would you run on the target VM to ensure that?<\/em><\/h4>\n<p><span style=\"font-weight: 400;\"><strong>A. <\/strong>winrm noconfig<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B. <\/strong>winrm VMconfig<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C. <\/strong>winrm targetVM<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D. <\/strong>winrm quickconfig<\/span><\/p>\n<p><b>Correct Answer: D<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">In order to add other virtual machines in the VNet, you should ensure WinRM is running on the target VMs by running the below cmdlet in PowerShell or the command prompt upon the target VM<\/span><\/p>\n<p><b><i>winrm quickconfig<\/i><\/b><\/p>\n<p><b>Option A is incorrect<\/b><span style=\"font-weight: 400;\">. winrm noconfig is not the right command to be run.<\/span><br \/>\n<b>Option B is incorrect<\/b><span style=\"font-weight: 400;\">. Running winrm VMconfig won\u2019t help in ensuring that WinRM is running on the target VM.<\/span><br \/>\n<b>Option C is incorrect<\/b><span style=\"font-weight: 400;\">. winrm targetVM is not the valid command.<\/span><br \/>\n<b>Option D is correct.<\/b><span style=\"font-weight: 400;\"> winrm quickconfig is the right command that is used to ensure that WinRM is running on the target VMs.<\/span><\/p>\n<p><b>Reference:<\/b><span style=\"font-weight: 400;\"> To know more about manually deploying Windows Admin Center in Azure for managing multiple servers, please visit the below-given link: <\/span><a href=\"https:\/\/docs.microsoft.com\/en-us\/windows-server\/manage\/windows-admin-center\/azure\/deploy-wac-in-azure?WT.mc_id=ravikirans\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/windows-server\/manage\/windows-admin-center\/azure\/deploy-wac-in-azure?WT.mc_id=ravikirans<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Manage_Windows_Servers_and_Workloads_in_a_Hybrid_Environment-3\"><\/span>Domain : Manage Windows Servers and Workloads in a Hybrid Environment<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Q23 : In a demonstration video, at time point 4:15, the administrator selects an account to sign in with. What are the minimum permissions that are needed by this account?<\/em><\/h4>\n<p><span style=\"font-weight: 400;\"><strong>A. <\/strong>The account must be a member of the Azure Connected Machine Resource Administrator role.<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B. <\/strong>The account must be a member of the Global Administrator role.<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C. <\/strong>The account must be a member of the Azure Connected Machine Onboarding role.<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D. <\/strong>None of these<\/span><\/p>\n<p><b>Correct Answer: C<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">At time point 4:15, The script first downloads the agent, then installs it, and then onboards the device into Azure Arc. To onboard the device or machine, the account must be <\/span><span style=\"font-weight: 400;\">a part of the Azure Connected Machine Onboarding role.<\/span><\/p>\n<p><b>Option A is incorrect.<\/b><span style=\"font-weight: 400;\"> The account only requires being a part of the Azure Connected Machine Onboarding role.<\/span><br \/>\n<b>Option B is incorrect<\/b><span style=\"font-weight: 400;\">.<\/span> <span style=\"font-weight: 400;\">The account doesn\u2019t require being a part of the Global Administrator role.<\/span><br \/>\n<b>Option C is correct<\/b><span style=\"font-weight: 400;\">. For the given scenario, the account must be a part of the Azure Connected Machine Onboarding role.<\/span><br \/>\n<b>Option D is incorrect.<\/b><span style=\"font-weight: 400;\"> The account only should be a part of the Azure Connected Machine Onboarding role.<\/span><\/p>\n<p><b>Reference: <\/b><span style=\"font-weight: 400;\">To know more about onboarding Windows Server Instances, please visit the below-given link: <\/span><a href=\"https:\/\/docs.microsoft.com\/en-us\/learn\/modules\/manage-hybrid-workloads-azure-arc\/3-onboard-windows-server-instances?ns-enrollment-type=LearningPath&amp;ns-enrollment-id=learn.wwl.manage-windows-servers-workloads-hybrid-environment\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/learn\/modules\/manage-hybrid-workloads-azure-arc\/3-onboard-windows-server-instances<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Manage_Windows_Servers_and_Workloads_in_a_Hybrid_Environment-4\"><\/span>Domain : Manage Windows Servers and Workloads in a Hybrid Environment<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Q24 : Which of the following PowerShell cmdlet can you use to create JEA endpoints on a single computer?\u00a0<\/em><\/h4>\n<p><span style=\"font-weight: 400;\"><strong>A. <\/strong>Register-PSSessionConfiguration<\/span><br \/>\n<strong>B. <\/strong>Set-PSSessionConfiguration<br \/>\n<strong>C. <\/strong>Get-PSSessionConfiguration<br \/>\n<span style=\"font-weight: 400;\"><strong>D. <\/strong>Create-PSSessionJEApoints<\/span><\/p>\n<p><b>Correct Answer: A<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">On a single machine, JEA endpoints can be created by using the\u00a0<\/span><b>Register-PSSessionConfiguration<\/b><span style=\"font-weight: 400;\">\u00a0PowerShell cmdlet. When you want to use this cmdlet, you need to specify an endpoint name and a session configuration file placed on the local machine.<\/span><\/p>\n<p><b>Option A is correct.<\/b> <i><span style=\"font-weight: 400;\">Register-PSSessionConfiguration<\/span><\/i><span style=\"font-weight: 400;\"> command is used to create JEA endpoints on a single machine.<\/span><br \/>\n<b>Option B is incorrect<\/b><span style=\"font-weight: 400;\">. <\/span><i><span style=\"font-weight: 400;\">Set-PSSessionConfiguration<\/span><\/i><span style=\"font-weight: 400;\"> cmdlet is used to modify the properties of a registered session configuration.<\/span><br \/>\n<b>Option C is incorrect.<\/b> <i><span style=\"font-weight: 400;\">Get-PSSessionConfiguration<\/span><\/i><span style=\"font-weight: 400;\"> cmdlet is used to view existing JEA endpoints.<\/span><br \/>\n<b>Option D is incorrect<\/b><span style=\"font-weight: 400;\">. <\/span><i><span style=\"font-weight: 400;\">Create-PSSessionJEApoints<\/span><\/i><span style=\"font-weight: 400;\"> is not a valid PowerShell cmdlet.<\/span><\/p>\n<p><b>Reference:<\/b><span style=\"font-weight: 400;\"> To know more about JEA configurations, please visit the below-given link: <\/span><a href=\"https:\/\/docs.microsoft.com\/en-us\/powershell\/scripting\/learn\/remoting\/jea\/register-jea?view=powershell-7.2\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/powershell\/scripting\/learn\/remoting\/jea\/register-jea?view=powershell-7.2<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Domain_Manage_Virtual_Machines_and_Containers-4\"><\/span>Domain : Manage Virtual Machines and Containers<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><em>Q25 : Which of the following schedulers provide a fair share and preemptive round-robin scheduling approach for guest virtual processors in Windows Server 2016 Hyper-V?<\/em><\/h4>\n<p><span style=\"font-weight: 400;\"><strong>A. <\/strong>Classic Scheduler<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>B. <\/strong>Core Scheduler<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>C. <\/strong>Root Scheduler<\/span><br \/>\n<span style=\"font-weight: 400;\"><strong>D. <\/strong>None of these<\/span><\/p>\n<p><b>Correct Answer: A<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The classic scheduler is the default for all versions of the Windows Hyper-V hypervisor since its commencement that also includes Windows Server 2016 Hyper-V. This scheduler provides a fair share and preemptive round-robin scheduling approach for guest virtual processors.<\/span><\/p>\n<p><b>Option A is correct.<\/b><span style=\"font-weight: 400;\"> The classic scheduler provides a fair share and preemptive round-robin scheduling approach for guest virtual processors.<\/span><br \/>\n<b>Option B is incorrect<\/b><span style=\"font-weight: 400;\">. <\/span><span style=\"font-weight: 400;\">The core scheduler provides a strong security boundary for guest workload isolation and decreased performance variability for workloads inside virtual machines running upon an SMT-enabled virtualization host.\u00a0<\/span><br \/>\n<b>Option C is incorrect<\/b><span style=\"font-weight: 400;\">. The root scheduler meets the unique requirements inherent in supporting a utility partition to offer strong workload isolation, as utilized with WDAG(Windows Defender Application Guard).<\/span><br \/>\n<b>Option D is incorrect<\/b><span style=\"font-weight: 400;\">. A classic scheduler is the right type of scheduler.<\/span><\/p>\n<p><b>Reference:<\/b><span style=\"font-weight: 400;\"> To know more about Managing Hyper-V hypervisor scheduler types, please visit the below-given link: <\/span><a href=\"https:\/\/docs.microsoft.com\/en-us\/windows-server\/virtualization\/hyper-v\/manage\/manage-hyper-v-scheduler-types?WT.mc_id=ravikirans\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/windows-server\/virtualization\/hyper-v\/manage\/manage-hyper-v-scheduler-types<\/span><\/a><\/p>\n<h3><span class=\"ez-toc-section\" id=\"Summary\"><\/span><span style=\"font-weight: 400;\">Summary<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><span style=\"font-weight: 400;\">These AZ-800 exam questions must have helped you to get a quick assessment of the exam. For more such questions and content on the AZ-800: Administering Windows Server Hybrid Core Infrastructure, go through our detailed <strong>AZ-800 practice tests<\/strong> that not only contain elaborate explanations for all the concepts covered, but will also help you pass the certification in the first attempt.<\/span><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>These free AZ-800 exam questions and answers provided here cover the important concepts of the AZ-800 certification exam. Our detailed explanations for these sample questions helps you to learn the exam objectives faster. AZ-800: Administering Windows Server Hybrid Core Infrastructure exam tests your knowledge and understanding on the performing of various technical tasks including the: Deployment and management of Active Directory Domain Services in the on-premises &amp; cloud environment, Managing virtual machines and containers, Managing Windows servers and workloads in a hybrid environment, Implementation and management of hybrid and on-premises networking infrastructure, The management of file services and storage. Domain [&hellip;]<\/p>\n","protected":false},"author":223,"featured_media":81806,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_uag_custom_page_level_css":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[10,15],"tags":[4848],"class_list":["post-81590","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cloud-computing-certifications","category-microsoft-azure","tag-az-800-exam"],"uagb_featured_image_src":{"full":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/03\/Free-Questions-on-AZ-800-Exam.jpg",600,315,false],"thumbnail":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/03\/Free-Questions-on-AZ-800-Exam-150x150.jpg",150,150,true],"medium":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/03\/Free-Questions-on-AZ-800-Exam-300x158.jpg",300,158,true],"medium_large":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/03\/Free-Questions-on-AZ-800-Exam.jpg",600,315,false],"large":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/03\/Free-Questions-on-AZ-800-Exam.jpg",600,315,false],"1536x1536":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/03\/Free-Questions-on-AZ-800-Exam.jpg",600,315,false],"2048x2048":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/03\/Free-Questions-on-AZ-800-Exam.jpg",600,315,false],"profile_24":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/03\/Free-Questions-on-AZ-800-Exam.jpg",24,13,false],"profile_48":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/03\/Free-Questions-on-AZ-800-Exam.jpg",48,25,false],"profile_96":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/03\/Free-Questions-on-AZ-800-Exam.jpg",96,50,false],"profile_150":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/03\/Free-Questions-on-AZ-800-Exam.jpg",150,79,false],"profile_300":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/03\/Free-Questions-on-AZ-800-Exam.jpg",300,158,false],"tptn_thumbnail":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/03\/Free-Questions-on-AZ-800-Exam-250x250.jpg",250,250,true],"web-stories-poster-portrait":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/03\/Free-Questions-on-AZ-800-Exam.jpg",600,315,false],"web-stories-publisher-logo":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/03\/Free-Questions-on-AZ-800-Exam.jpg",96,50,false],"web-stories-thumbnail":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2022\/03\/Free-Questions-on-AZ-800-Exam.jpg",150,79,false]},"uagb_author_info":{"display_name":"Dharmendra Digari","author_link":"https:\/\/www.whizlabs.com\/blog\/author\/dharmendrawhizlabs-com\/"},"uagb_comment_info":15,"uagb_excerpt":"These free AZ-800 exam questions and answers provided here cover the important concepts of the AZ-800 certification exam. Our detailed explanations for these sample questions helps you to learn the exam objectives faster. AZ-800: Administering Windows Server Hybrid Core Infrastructure exam tests your knowledge and understanding on the performing of various technical tasks including the:&hellip;","_links":{"self":[{"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/posts\/81590","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/users\/223"}],"replies":[{"embeddable":true,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/comments?post=81590"}],"version-history":[{"count":8,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/posts\/81590\/revisions"}],"predecessor-version":[{"id":81712,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/posts\/81590\/revisions\/81712"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/media\/81806"}],"wp:attachment":[{"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/media?parent=81590"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/categories?post=81590"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/tags?post=81590"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}