AZ-800 Free Practice Test

- (Topic 2)
You need to configure remote administration to meet the security requirements. What should you use?

1. A. just in time (JIT) VM access
2. B. Azure AD Privileged Identity Management (PIM)
3. C. the Remote Desktop extension for Azure Cloud Services
4. D. an Azure Bastion host

Correct Answer: A
Reference:
https://docs.microsoft.com/en-us/azure/defender-for-cloud/just-in-time-access-usage?tabs=jit-config-asc,jit-request-asc

HOTSPOT - (Topic 3)
You have an on-premises server named Server1 that runs Windows Server and has internet connectivity.
You have an Azure subscription.
You need to monitor Server1 by using Azure Monitor.
Which resources should you create in the subscription, and what should you install on Server1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Topic 3)
Your network contains an Active Directory Domain Services (AD DS) domain- The domain contains 10 servers that run Windows Server. The servers have static IP addresses.
You plan to use DHCP to assign IP addresses to the servers.
You need to ensure that each server always receives the same IP address.
Which type of identifier should you use to create a DHCP reservation for each server?

1. A. universally unique identifier (UUID)
2. B. fully qualified domain name (FQDN)
3. C. NetBIOS name
4. D. MAC address

Correct Answer: D
Reference:
https://docs.microsoft.com/en-us/powershell/module/dhcpserver/add-dhcpserverv4reservation?view=windowsserver2022-ps

- (Topic 3)
You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant
You have several Windows 10 devices that are Azure AD hybrid-joined.
You need to ensure that when users sign in to the devices, they can use Windows Hello for Business.
Which optional feature should you select in Azure AD Connect?

1. A. Device writeback
2. B. Group writeback
3. C. Password writeback
4. D. Directory extension attribute sync
5. E. Azure AD app and attribute filtering

Correct Answer: C
Reference:
https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-prereqs

- (Topic 3)
You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. You plan deploy 100 new Azure virtual machines that will run Windows Server. You need to ensure that each new virtual machine is joined to the AD DS domain. What should you use?

1. A. Azure AD Connect
2. B. a Group Policy Object (GPO)
3. C. an Azure Resource Manager (ARM) template
4. D. an Azure management group

Correct Answer: C
Reference:
https://www.ludovicmedard.com/create-an-arm-template-of-a-virtual-machine-automatically-joined-to-a-domain/