AZ-800 Online Practice Questions and Answers

Correct Answer: A

Replicate read-only copy DNS zone. Step 1: In DNS Manager log in to SRV2.

Step 2: Right click Forward Lookup Zones, and select New Zone...

Step 3: Select Secondary Zone

Step 4: Select Secondary Zone

Step 5: Enter the same domain name as the first DNS server. In our case: contoso.com

Step 6: At the next screen enter the Hostname or IP address of the primary DNS server and hit Enter. In our case: contoso.com

Step 7: Hit Next, Next, Finish - That's it, you’re all done.

The secondary server will now replicate changes FROM the first DNS server.

Reference: https://cogenesis.com.au/blog/how-to-setup-windows-dns-replication-dns-manager

Correct Answer: A

https://docs.microsoft.com/en-us/answers/questions/235/can-i-use-the-temporary-disk-the-d-drive-by-defaul.html

Correct Answer: BE

Reference: https://docs.microsoft.com/en-us/azure/private-link/private-endpoint-dns#on-premises-workloads-using-a-dns-forwarder

Correct Answer: C

Reconfigure the link site option to use notification.

Details: Active Directory - Change Notification (Inter-Site Replication)

Since we know Active Directory, we know also that its replication works automatically between the domain controllers. The lowest value of this replication schedule is 15 minutes. You can't get lower. If there aren't that many frequent changes,

or the active directory site is not large (probably with only one site) then this value should work for you.

But what if your active directory environment is larger? What if you have more than one site, on different locations, with different networks? Or what if you’ve got some remotedesktop services running in your main site and some users working

with them in a branch office? What about the “I forgot my password” cases?

Well, there is a solution for you. We can tune-up the Active Directory Inter-Site Replication. The inter-site replication works also automatically, and you can also schedule the replication only for 15 minutes. But there are some settings we can

tweak to get the domain controllers pulling the changes made recently.

1.

First open “Active Directory Sites and Services” on your primary domain controller (that's the icon with the blue “building”).

2.

Let's start now with the tuning operation. Expand “Sites” and “Inter-Site Transports” (if you haven't already). Click on the IP folder.

3.

Now right-click (or double-click) on your site link on the right hand side. If you did not rename it, it's just the DEFAULTIPSITELINK. Then click “Properties”. Then click on the “Attribute Editor” tab.

4.

The attribute we should edit is called “options”.

We now have to change this attribute to a specific value which allows us to tweak the inter-site replication.

Value,

1 USE_NOTIFY (use this setting!)

2 TWOWAY_SYNC

4 DISABLE_COMPRESSION

Incorrect:

Not B: Two scenarios in which you need a site link bridge design to control replication flow include controlling replication failover and controlling replication through a firewall.

Not D: The minimal replication schedule is 15 minutes. When you use manual site link replication interval is set to 15 minutes and cannot be lowered further.

Reference: https://www.driftar.ch/2016/10/26/active-directory-change-notification-inter-site-replication/

Correct Answer: B

Azure Pipelines architecture for IaaS Azure Virtual Machines is an option for hosting custom applications when you want flexible and granular management of your compute. Virtual machines (VMs) should be subject to the same level of engineering rigor as Platform-as-a-Service (PaaS) offerings throughout the development lifecycle. For example, implementing automated build and release pipelines to push changes to the VMs.

This article describes a high-level DevOps workflow for deploying application changes to VMs using continuous integration (CI) and continuous deployment (CD) practices using Azure Pipelines.

Reference: https://learn.microsoft.com/en-us/azure/devops/pipelines/architectures/devops-pipelines-iaas-vms-architecture

Correct Answer: A

Configuring Kerberos constrained delegation allows you to pass your credentials from Server1 to Server3 when accessing a resource. Constrained delegation is a Kerberos feature that restricts the servers to which a service can delegate a user's credentials. This ensures that the delegation is secure and limited to specific services.

Correct Answer:

Box 1: Remote Access

Web Application Proxy is a new Remote Access role service in Windows Server 2012 R2.

To install the Web Application Proxy role service (see step 4 below).

1.

On the edge server, open Server Manager. To do this, click Server Manager on the Start screen, or Server Manager in the taskbar on the desktop.

2.

In the Quick Start tab of the Welcome tile on the Dashboard page, click Add roles and features. Alternatively, you can click Add Roles and Features on the Manage menu.

3.

In the Add Roles and Features Wizard, click Next three times to get to the server role selection screen.

4.

On the Select server roles dialog, select Remote Access, and then click Next.

5.

Click Next twice.

6.

On the Select role services dialog, select Web Application Proxy, click Add Features, and then click Next.

7.

On the Confirm installation selections dialog, click Install.

8.

On the Installation progress dialog, verify that the installation was successful, and then click Close.

Box 2: Active Directory Federation Services Web Application Proxy preauthenticates access to web applications using Active Directory Federation Services (AD FS), and also functions as an AD FS proxy. Using Active Directory Federation Services

This scenario describes the additions and changes that you must make to your AD FS servers to provide the following functionality:

Application publishing For all applications and services that you want to publish through Web Application Proxy, you must configure a relying party on the AD FS server.

Authentication No specific configuration is required to provide authentication for published applications.

Incorrect:

*

Active Directory Certificate Services

*

Network Policy and Access Services

Reference: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn280943(v=ws.11)

Correct Answer:

https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/serial-console-overview

"Boot diagnostics must be enabled for the VM"

"The Azure account accessing Serial Console must have Virtual Machine Contributor role for both the VM and the boot diagnostics storage account"

Correct Answer:

Correct Answer:

It is important to remember that the client computers that are connecting to the VPNs are not RADIUS clients. The VPN servers are the RADIUS clients. You configure the RADIUS clients on the RADIUS server (NPS1) server to allow the

VPN servers to use NPS1 to authenticate the connections.

Box 1: No

NPSClient1 is not enabled.

Box 2: Yes

NPSClient2 is configured correctly. It is enabled and has the correct IP address of VPN2.

Box 3: No

NPSClient3 has an incorrect IP address configured for VPN3.