Knowledge Check: Microsoft Exam AZ800: Post-Assessment Quiz
Which of the following IPv4 addresses should not be used in Azure virtual networks? a. 127.0.0.1 b. 10.0.0.1 c. 192.168.1.1 d. 172.16.0.1
a. 127.0.0.1
You need to build a sandbox testing environment to restrict network traffic exchanged among several virtual machines (VMs). To which virtual switch should the VMs be connected? a. A private virtual switch b. A public virtual switch c. An internal virtual switch d. An external virtual switch
a. A private virtual switch
Which of the following statements is NOT correct about active directory trust relationships? a. Active Directory trust relationships can only exist between domains. b. An Active Directory trust relationship defines whether and how security principals from one domain can access network resources in another domain. c. Active Directory trust relationships are established automatically between all domains in a forest. d. Active Directory trust relationships must be configured when an Active Directory environment includes two or more forests.
a. Active Directory trust relationships can only exist between domains.
A Windows administrator needs to monitor Azure File Sync, creating alerts based on the number of files syncing or not syncing and defining an action that should be taken if an alert is triggered. Which service would you recommend? a. Azure Monitor b. Windows Server Event Viewer c. Windows Server Performance Monitor d. Storage Sync Service
a. Azure Monitor
What does the command below accomplish?redircmp ou=MemberComputers,dc=csmtech,dc=corp a. Change the default location of computer accounts. b. Join a computer to a domain. c. Join a computer to a domain by using PowerShell. d. Perform an offline domain join.
a. Change the default location of computer accounts.
When creating a new NIC team on a Windows server, which load-balancing mode would you recommend so that outgoing traffic is evenly distributed among all team members? a. Dynamic b. Static c. Address Hash d. Hyper-V Port
a. Dynamic
For production environments that require the fastest virtual disk performance, which type of virtual disks would you recommend? a. Fixed-size disks b. Dynamically expanding disks c. Static disks d. Dynamic disks
a. Fixed-size disks
What is Web Application Proxy (WAP) used for? a. It makes applications available to users without having to install the applications on each user's computer. b. It defines and enforces rules that determine who can access a network and how they can access it. c. It creates a secure connection from a client computer or branch office to the company's intranet. d. It allows remote users to access network applications from any device that supports a web browser.
a. It makes applications available to users without having to install the applications on each user's computer.
Which Desired State Configuration (DSC) mode requires the least amount of administrative effort? a. Pull b. Push c. Auto d. Poll
a. Pull
A user is granted Read access by share permissions. It is also granted Read & Write access by file and folder permissions. What permissions does the user eventually receive? a. Read b. Execute c. Read & Execute d. Write
a. Read
Which of the following is not a reason to maintain separate forests? a. Replication between domains b. Schema changes c. Security d. Corporate mergers
a. Replication between domains
Which of the following is NOT correct about Infrastructure Master and global catalog? a. The Infrastructure Master should not be in the same site as the global catalog server. b. The Infrastructure Master is responsible for ensuring that changes made to object names in one domain are updated in reference to these objects in other domains. c. The infrastructure master role shouldn't be performed by a domain controller (DC) that's also a global catalog server unless all servers in the forest have been configured as global catalog servers. d. The infrastructure master role shouldn't be performed by a domain controller (DC) that's also a global catalog server unless there's only one domain in the forest.
a. The Infrastructure Master should not be in the same site as the global catalog server.
Which of the following stations is NOT correct about Knowledge Consistency Checker (KCC) and replication topology? a. The KCCs on domain controllers may generate different replication topology, depending on the algorithms and data they use. b. The KCC on each DC uses data stored in the forest-wide configuration directory partition to create the replication topology. c. The KCCs don't need to communicate with one another for data because the configuration directory partition is replicated to all DCs in the forest. d. The replication topology can be recalculated manually in Active Directory Sites and Services.
a. The KCCs on domain controllers may generate different replication topology, depending on the algorithms and data they use.
Which BranchCache mode is best suited for an organization with small branch offices and limited IT support? a. The distributed cache mode b. The hosted cache mode c. Windows Server 2000 mode d. Windows Server 2008 mode
a. The distributed cache mode
Which of the following is the most likely reason that a user signing into a computer on a large network cannot access domain resources? a. The user account is a local account. b. The user account isn't present in the local Users and Groups. c. The user entered an incorrect password. d. The user signed in as the administrator.
a. The user account is a local account.
Which of the following statements is correct about containers supported by Windows Server? a. There are two types of Windows-supported containers: process isolation containers and Hyper-V isolation containers. b. When running in the Hyper-V Isolation mode, containers share the same kernel with the host as well as each other. c. With process isolation, each container runs inside of a virtual machine and gets its own kernel. d. Containers running under two different isolation modes are created, managed, and function differently.
a. There are two types of Windows-supported containers: process isolation containers and Hyper-V isolation containers.
Which of the following is correct about the Azure VNet address space? a. VNet address spaces within the Azure cloud cannot overlap. b. When connecting an on-premises network to an Azure VNet, you use the same address space. c. An address space is assigned to a VNet by default, but you have to choose your own subnet(s). d. You can use the entire VNet address space for a subnet.
a. VNet address spaces within the Azure cloud cannot overlap.
In the Add Roles and Features Wizard, when should you select the role-based or feature-based installation under Installation Type? a. When configuring a single server by adding roles, role services, and features. b. When installing required role services for Virtual Desktop (VDI) to create a virtual machine-based desktop deployment. c. When installing required role services for Virtual Desktop (VDI) to create a virtual session-based desktop deployment. d. When distributing components of the Remote Desktop Services role across different servers for use in a virtual desktop infrastructure (VDI).
a. When configuring a single server by adding roles, role services, and features.
All the information in the Active Directory database is organized as _______. a. objects b. schemas c. user accounts d. groups
a. objects
In which order are GPO applied? a. the local computer, site, domain, and OU b. the local computer, domain, site, and OU c. OU, domain, site, and the local computer d. OU, site, domain, and the local computer
a. the local computer, site, domain, and OU
Which PowerShell cmdlet sets the least aggressive level of load balancing for the Node Fairness feature? a. (Get-Cluster).AutoBalancerLevel = 0 b. (Get-Cluster).AutoBalancerLevel = 1 c. (Get-Cluster).AutoBalancerLevel = 2 d. (Get-Cluster).AutoBalancerLevel = 3
b. (Get-Cluster).AutoBalancerLevel = 1
In the output of the "CpuGroups GetCpuTopology" cmdlet, all entries in the PackageID column are 0. How many physical processors does the server have? a. 0 b. 1 c. 2 d. 4
b. 1
Which type of active directory doesn't support domain join? a. Windows Active Directory b. Azure Active Directory (AAD) c. Azure Active Directory DS (AADDS) d. Azure AD Connect
b. Azure Active Directory (AAD)
A server or workstation just became a domain member. By default, in which folder of Active Directory would you find the computer account created for this server or workstation? a. Domain Controllers b. Computers c. Builtin d. Users
b. Computers
Which Windows Admin Center installation method should you choose so that you can connect to Windows Admin Center from another computer using the IP address or DNS name of the designated server? a. Local client b. Gateway server c. Managed server d. Failover cluster
b. Gateway server
On the Account tab of the Account Properties window, what option is used to specify that an account only signs into designated computers? a. Log on Hours b. Log On To c. Account options d. Unlock account
b. Log On To
Two physical disks are allocated to a storage pool. Which storage layout should the Windows administrator consider for fault tolerance when creating a virtual disk from this storage pool? a. Simple b. Mirror c. Parity d. Enclosure
b. Mirror
In Distributed File System (DFS), what are the shares from different servers that are grouped into a single logical share referred to as? a. Folder target b. Namespace c. Namespace root d. Namespace server
b. Namespace
You are creating a folder preference under the User Configuration node in the Group Policy Management Editor. Which of the following actions should you choose to delete an existing folder and create a new folder with the same name and specified attributes? a. Create b. Replace c. Update d. Delete
b. Replace
The DNS server supports various types of zones and storage. Which type helps balance the processing load of primary servers and provides fault tolerance? a. Primary zone b. Secondary zone c. Tertiary zone d. Stub zone
b. Secondary zone
If a running application doesn't automatically save data, which one of the following PowerShell cmdlets could potentially cause loss of data? a. Suspend-VM b. Stop-VM c. Start-VM d. Checkpoint-VM
b. Stop-VM
In a hybrid network infrastructure, what should happen first if you want on-premises computers to resolve DNS names of VMs running on Azure? a. There should be an Azure VM with the DNS server role and with a forwarder pointing to the Azure DNS service b. The on-premises network must be connected to the Azure virtual network c. Configure your virtual network(s) to point to the DNS server VM that has the forwarder configured d. An Azure subscription
b. The on-premises network must be connected to the Azure virtual network
Which one of the following binds folder c:\HostData on the host computer to folder c:\ContainerData in the container called MyContainer for read/write access? a. docker run -v c:\ContainerData:c:\HostData MyContainer b. docker run -v c:\HostData:c:\ContainerData MyContainer c. docker run -v c:\ContainerData:c:\HostData:RO MyContainer d. docker run -v c:\HostData:c:\ContainerData:RO MyContainer
b. docker run -v c:\HostData:c:\ContainerData MyContainer
Which of the following is the broadest logical component of the Active Directory structure? a. A tree b. A domain c. A forest d. An organization unit (OU)
c. A forest
In single-domain environments or when users from only one domain are assigned access to a resource, which of the following processes is recommended for assigning rights and permissions to domain resources? a. Accounts are made members of Global groups, which are made members of Universal groups, which are then assigned permissions to resources b. Accounts are made members of Universal groups, which are made members of Global groups, which are then assigned permissions to resources c. Accounts are made members of Global groups, which are made members of Domain Local groups, which are then assigned permissions to resources d. Accounts are made members of Domain Local groups, which are made members of Global groups, which are then assigned permissions to resources
c. Accounts are made members of Global groups, which are made members of Domain Local groups, which are then assigned permissions to resources
When installing Active Directory the very first time, which of the following deployment operation options should an administrator select in the Deployment Configuration window? a. Add a domain controller to an existing domain b. Add a new domain to an existing forest c. Add a new forest d. Add a Domain Name System (DNS) server
c. Add a new forest
A hybrid IPAM infrastructure is deployed in an organization with several large branch locations. Which of the following statements is correct about the IPAM topology? a. One or more IPAM servers are centrally located with a reliable and high-performance connection to the network. b. An IPAM server is deployed at every branch location, and there is no communication between IPAM servers in the network. c. An IPAM server in the headquarters collects information from all managed servers, with IPAM servers in branch locations collecting information in that location. d. The management team manages all servers from a single location. The IT staff at branch locations have no control of the servers in their locations.
c. An IPAM server in the headquarters collects information from all managed servers, with IPAM servers in branch locations collecting information in that location.
Which of the following is a hidden share name in Windows? a. HiddenShare# b. HiddenShare% c. HiddenShare$ d. HiddenShare\
c. HiddenShare$
A network admin observed a lot of queries to the enterprise DNS server in a short period of time. Which of the following DNS features could be enabled or configured to protect a potential target system? a. DNS cache locking b. DNS socket pool c. Response Rate Limiting (RRL) d. DNS-based Authentication of Named Entities (DANE)
c. Response Rate Limiting (RRL)
Which of the following performance technologies doesn't involve a network adapter? a. Server Message Block (SMB) b. Direct Receive side scaling (RSS) c. Storage Quality of Service (QoS) d. Single-root I/O virtualization (SR-IOV)
c. Storage Quality of Service (QoS)
Which of the following statements is correct about the timers related to zone transfer? a. If the Refresh interval timer expires without a successful zone transfer, the Expires after timer begins b. If the Refresh interval timer expires without a successful zone transfer, the Retry interval timer begins c. The Expires after timer prevents a secondary server from responding to DNS queries with data that might be stale d. The Expires after timer should be less than the Refresh interval and Retry interval combined
c. The Expires after timer prevents a secondary server from responding to DNS queries with data that might be stale
Which of the following statements is NOT correct? a. Having a global catalog server in sites with more than a few users speeds up logons and forest-wide searches for Active Directory objects b. Replication traffic is increased considerably in sites with global catalog servers, particularly if there are several large domains in the Active Directory Forest c. With universal group membership caching, a global catalog server is no longer needed d. Microsoft recommends placing a global catalog server at the site when the number of accounts exceeds 500 and the number of domain controllers (DCs) exceeds 2
c. With universal group membership caching, a global catalog server is no longer needed
Why couldn't an administrator change the direction of trust from two-way to one-way: incoming in the General tab of an active directory trust's Property dialog box? a. The direction of trust can only be changed from one-way to two-way b. The trust type field needs to be changed to forest c. You can't change the trust direction without deleting and re-creating the trust d. The direction of trust field is locked until the Validate button is activated
c. You can't change the trust direction without deleting and re-creating the trust
When integrating an on-premises server environment with Azure Active Directory services, where should the changes to the directory in Azure Active Directory DS (AADDS) occur? a. Azure Active Directory (AAD) b. AADDS itself c. on-premises domain controllers d. an Azure AD account
c. on-premises domain controllers
A Hyper-V server runs four virtual machines (VMs). Each running VM is assigned 1 GB of RAM. How much memory would you recommend for the server? a. 2 GB b. 3 GB c. 4 GB d. 5 GB
d. 5 GB
In Windows Server 2022, you can manage all your servers from a single Server Manager interface by adding servers to Server Manager. How do you add a server that is not a domain member? a. By Searching Active Directory b. By Searching DNS c. By Importing a text file d. By adding the remote server to the TrustedHosts list on the computer running Server Manager first
d. By adding the remote server to the TrustedHosts list on the computer running Server Manager first
You need to install the Group Policy Management tools on a Windows management virtual machine (VM) to create and configure Group Policy Objects (GPOs). Your VM must connect to an Azure virtual network subnet that can communicate with the subnet into which your managed domain is deployed. Which of the following is NOT a correct way of deploying the VM? a. Create a subnet in the same virtual network as your managed domain and deploy the VM in the subnet b. Select an existing subnet in the same virtual network as your managed domain and deploy the VM in the subnet c. Select a subnet in an Azure virtual network that is connected to the virtual network of the management domain using Azure virtual network peering and deploy the VM in the subnet d. Deploy the VM in the same subnet as the managed domain
d. Deploy the VM in the same subnet as the managed domain
Which of the following subfolders is not contained in the Administrative Templates of the Computer Configuration node? a. Control Panel b. Network c. System d. Desktop
d. Desktop
You are deploying a domain controller in Azure. When selecting the path for where Active Directory should store Active Directory database files, why should you select a data disk instead of the OS disk? a. The OS disk doesn't have enough capacity for Active Directory database files. b. During a VM reboot, data on the data disk will persist, but data on the OS disk will not. c. The OS disk is read-only. d. Due to caching settings on the OS disk in Azure, storing Active Directory database files on the OS disk could cause data corruption.
d. Due to caching settings on the OS disk in Azure, storing Active Directory database files on the OS disk could cause data corruption.
An OU named ConfRoomComputers contains all computer accounts of computers in conference rooms. You want these computers to have a consistent look for visitors. However, the desktop settings are in the User Configuration node, and can't apply to computer accounts. Which of the following is a solution to this scenario? a. Enable the Block Inheritance setting on the ConfRoomComputers OU. b. Use Security Filtering to add or remove security principals from the access list of the related GPO. c. Create a WMI filter and link it to the related GPO. d. Enable the "Configure user Group Policy loopback processing mode" setting under the Computer Configuration node.
d. Enable the "Configure user Group Policy loopback processing mode" setting under the Computer Configuration node.
The mechanism of inner packets and outer headers of VPN tunnels is referred to as what? a. Authentication b. Authorization c. Accounting d. Encapsulation
d. Encapsulation
After starting a data deduplication job, which of the following PowerShell cmdlets is used to view the status of deduplication and check how well deduplication is keeping up with the data on a volume? a. Get-DedupJob b. Get-DedupSchedule c. Get-DedupVolume d. Get-DedupStatus
d. Get-DedupStatus
Which of the following PowerShell cmdlets is run only on the Storage Replica source computer? a. Get-SrGroup b. Get-SRPartnership c. Get-DedupJob d. Get-SRPartnership | Remove-SRPartnership
d. Get-SRPartnership | Remove-SRPartnership
Which of the following is not a subdomain of the forest root domain csmtech.corp? a. publishing.csmtech.corp b. US.csmtech.corp c. headquarters.csmtech.corp d. HR.tech.corp
d. HR.tech.corp
Which of the following statements about Group Policy Objective (GPO) is NOT correct? a. When OUs are nested, the GPO linked to the OU nested the deepest takes precedence over all other GPOs b. When a policy setting isn't configured, its status is Not defined or Not configured c. When a GPO is applied to an object, only the configured settings have any effect on that object d. If two GPOs are applied to an object, a certain setting is not applied unless it is configured on both GPOs
d. If two GPOs are applied to an object, a certain setting is not applied unless it is configured on both GPOs
Identify the elements of the following service principal name (SPN): HTTP/www.csmtech.com. a. Service type: HTTP, Instance name: www.csmtech.com, Port number: blank, Service name: blank b. Service type: HTTP, Instance name: www, Port number: csmtech, Service name: com c. Service type: HTTP, Instance name: blank, Port number: blank, Service name: www.csmtech.com d. Service type: HTTP, Instance name: www.csmtech.com, Port number: 80, Service name: www.csmtech.com
d. Service type: HTTP, Instance name: www.csmtech.com, Port number: 80, Service name: www.csmtech.com
Which File Server Resource Manager (FSRM) feature alerts users when files in the target folder exceed the quota limit, but don't prevent users from saving files? a. Active screening b. Passive screening c. Hard quotas d. Soft quotas
d. Soft quotas
Which of the following is NOT correct about the Add a single server option and the Add multiple servers option when onboarding servers with Azure Arc using a PowerShell script? a. Both options will generate a script for the onboard process b. With the Add a single server option, you will be prompted for your Azure login for the authentication purpose c. With the Add multiple servers option, the authentication is handled through a service principal d. The Add a single server option is suitable for large-scale deployments
d. The Add a single server option is suitable for large-scale deployments
With DHCP Load-balancing Failover, why is no lease information lost when one DHCP server fails? a. Both servers share the same DHCP database. b. If one server fails, the other server takes over all leasing duties. c. With DHCP Load-balancing Failover, both DHCP servers participate in address leasing at the same time. d. The DHCP database is replicated between the servers in Load-balancing Failover.
d. The DHCP database is replicated between the servers in Load-balancing Failover.
A GPO in the Computer Configuration node is configured to disable access to the Windows services manager. Another GPO in the User Configuration node is configured to enable such access. What will happen when a user tries to access the Windows services manager? a. The user will have access because the settings in User Configuration overwrite those in Computer Configuration b. The user will have access because the settings in User Configuration take precedence c. The user will not have access because the settings in Computer Configuration overwrite those in User Configuration d. The user will not have access because the settings in Computer Configuration take precedence
d. The user will not have access because the settings in Computer Configuration take precedence
