Question 1

You have an Azure virtual machine named VM1 that runs Windows Server.

You have an Azure subscription that has Microsoft Defender for Cloud enabled.

You need to ensure that you can use the Azure Policy guest configuration feature to manage VM1.

What should you do?

Options :

A : Add the PowerShell Desired State Configuration (DSC) extension to VM1.

B : Configure VM1 to use a user-assigned managed identity.

C : Configure VM1 to use a system-assigned managed identity.

D : Add the Custom Script Extension to VM1.

Answer: C

Question 2

You have an on-premises server that runs Windows Server and contains the folders shown in the following

table.

You have an Azure subscription.

You plan to implement Azure File Sync

Which folders can be added as Azure File Sync server endpoints?

Options :

A : Folder1 and Folder? only

B : Folder1, FoWer2, and FoWet3

C : Folder1 only

D : Folder? and Foldet3 only

E : Folder3 only

F : Folder? only

Answer: A

Question 3

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure

Active Directory (Azure AD) tenant Group writeback is enabled in Azure AD Connect.

The AD DS domain contains a server named Server1 Server 1 contains a shared folder named share1.

You have an Azure Storage account named storage2 that uses Azure AD-based access control. The storage2

account contains a share named shared

You need to create a security group that meets the following requirements:

• Can contain users from the AD DS domain

• Can be used to authorize user access to share 1 and share2

What should you do?

Options :

A : in the AD DS domain, create a universal security group

B : in the Azure AD tenant create a security group that has assigned membership

C : in the Azure AD Tenant create a security group that has dynamic membership.

D : in the Azure AD tenant create a Microsoft 365 group

Answer: B

Question 4

You have an on-premises server named Server! that runs Windows Server.

You have an Azure subscription that contains a virtual network named VNet1.

You need to connect Server1 to VNet1 by using Azure Network Adapter.

What should you use?

Options :

A : Azure AD Connect

B : Device Manager

C : the Azure portal

D : Windows Admin Center

Answer: D

Question 5

You need to implement a name resolution solution that meets the networking requirements. Which two

actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point

Options :

A : Create an Azure private DNS zone named corp.fabhkam.com.

B : Create a virtual network link in the coip.fabnkam.c om Azure private DNS zone.

C : Create an Azure DNS zone named corp.fabrikam.com.

D : Configure the DNS Servers settings for Vnet1.

E : Enable autoregistration in the corp.fabnkam.com Azure private DNS zone.

F : On DC3, install the DNS Server role.

G : Configure a conditional forwarder on DC3.

Answer: C,F

Confidently Practice Online with Free AZ-800 Exam Cram

Buying Options: