AZ-800 Free Practice Test

- (Topic 3)
You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant.
You plan to implement self-service password reset (SSPR) in Azure AD.
You need to ensure that users that reset their passwords by using SSPR can use the new password resources in the AD DS domain.
What should you do?

1. A. Deploy the Azure AD Password Protection proxy service to the on premises network.
2. B. Run the Microsoft Azure Active Directory Connect wizard and select Password writeback.
3. C. Grant the Change password permission for the domain to the Azure AD Connect service account.
4. D. Grant the impersonate a client after authentication user right to the Azure AD Connect service account.

Correct Answer: B
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr- writeback

- (Topic 3)
You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant The on-premises network is connected to Azure by using a Site-to-Site VPN. You have the DNS zones shown in the following table.

You need to ensure that names from (aDiifcam.com can be resolved from the on-premises network Which two actions should you perform? Each correct answer presents part of the solution, NOTE: Each correct selection Is worth one point

1. A. Create a conditional forwarder for fabrikam.com on DC1.
2. B. Create a stub zone for fabrikam.com on DC1.
3. C. Create a secondary zone for fabnlcam.com on DO.
4. D. Deploy an Azure virtual machine that runs Windows Serve
5. E. Modify the DNS Servers settings for the virtual network.
6. F. Deploy an Azure virtual machine that runs Windows Serve
7. G. Configure the virtual machine &s a DNS forwarder.

Correct Answer: AE
Reference:
https://docs.microsoft.com/en-us/azure/private-link/private-endpoint-dns#on-premises-workloads-using-a-dns-forwarder

DRAG DROP - (Topic 3)
You deploy a single-domain Active Directory Domain Services (AD DS) forest named contoso.com.
You deploy a server to the domain and configure the server to run a service.
You need to ensure that the service can use a group managed service account (gMSA) to authenticate.
Which three PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

HOTSPOT - (Topic 3)
You have an Azure subscription that contains the virtual machines shown in the following table.

You plan to implement Azure Automanage for Windows Server. You need to identify the operating system prerequisites.
Which virtual machines support Hotpatch, and which virtual machines support SMB over QUIC? To answer select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Topic 3)
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.
You need to identify which server is the PDC emulator for the domain.
Solution: From Active Directory Sites and Services, you right-click Default-First-Site-Name in the console tree, and then select Properties.
Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: B