What's more, part of that DumpsTorrent AZ-800 dumps now are free: https://drive.google.com/open?id=1fh8pb5A7sD_YBW6RoI08FISItihyjwug
The Microsoft - Administering Windows Server Hybrid Core Infrastructure AZ-800 PDF file we have introduced is ideal for quick exam preparation. If you are working in a company, studying, or busy with your daily activities, our Microsoft AZ-800 dumps PDF format is the best option for you. Since this format works on laptops, tablets, and smartphones, you can open it and read Microsoft AZ-800 Questions without place and time restrictions.
| Section | Objectives |
|---|---|
| Topic 1: Implement and manage Windows Server on-premises hybrid infrastructure | - Deploy and manage Active Directory Domain Services (AD DS)
|
| Topic 2: Monitor and maintain Windows Server environments | - Implement backup and recovery
|
| Topic 3: Manage Windows Server hybrid core infrastructure services | - Implement hybrid networking
|
| Topic 4: Manage Windows Server workloads and virtualization | - Manage containers
|
>> Test AZ-800 Guide Online <<
The trial version of our AZ-800 practice test is also available for free on our website. Students can go and check it out to get an idea of the content they wish to pay for. Our prices are also very low in comparison to our competitors as we know that students cannot afford high-budget practice materials. Just choose the right DumpsTorrent Administering Windows Server Hybrid Core Infrastructure Questions formats and download quickly and start AZ-800 Exam Preparation without wasting further time.
NEW QUESTION # 26
You need to meet the technical requirements for Server4.
Which cmdlets should you run on Server1 and Server4? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Reference:
https://4sysops.com/wiki/enable-powershell-remoting/
NEW QUESTION # 27
SIMULATION
Task 3
You need to configure SRV1 as a DNS server. SRV1 must be able resolve names from the contoso.com domain by using DC1. All other names must be resolved by using the root hint servers.
Answer:
Explanation:
See the solution of this Task below
Explanation:
One possible solution to configure SRV1 as a DNS server that can resolve names from the contoso.com domain by using DC1 and all other names by using the root hint servers is to use conditional forwarding. Conditional forwarding allows a DNS server to forward queries for a specific domain name to another DNS server, while using the normal forwarding or root hint servers for other queries. Here are the steps to configure conditional forwarding on SRV1:
On SRV1, open DNS Manager from the Administrative Tools menu or by typing dnsmgmt.msc in the Run box.
In the left pane, right-click on Conditional Forwarders and select New Conditional Forwarder.
In the New Conditional Forwarder dialog box, enter contoso.com as the DNS Domain name.
In the IP addresses of the master servers box, enter the IP address of DC1, which is the DNS server for the contoso.com domain. You can also click on Resolve to verify the name resolution of DC1.
Optionally, you can check the box Store this conditional forwarder in Active Directory, and replicate it as follows if you want to store and replicate the conditional forwarder in AD DS. You can also select the replication scope from the drop-down list.
Click OK to create the conditional forwarder.
Now, SRV1 will forward any queries for the contoso.com domain to DC1, and use the root hint servers for any other queries. You can test the name resolution by using the nslookup command on SRV1 or another computer that uses SRV1 as its DNS server. For example, you can run the following commands:
nslookup www.contoso.com
nslookup www.microsoft.com
The first command should return the IP address of www.contoso.com from DC1, and the second command should return the IP address of www.microsoft.com from a root hint server.
NEW QUESTION # 28
SIMULATION
Task 1
You need to create a group-managed service account (gMSA) named gMSA1 and make gMSA1 available on SRV1.
Answer:
Explanation:
See the solution of this Task below
Explanation:
To create a group-managed service account (gMSA) named gMSA1 and make it available on SRV1, you can follow these steps:
Step 1: Create the Key Distribution Services Root Key First, you need to create the KDS Root Key, which is required for the gMSA to function. You can do this with the following PowerShell command:
Add-KdsRootKey -EffectiveTime ((get-date).addhours(-10))
Note: The -EffectiveTime parameter is set to 10 hours in the past to ensure immediate effect.
Step 2: Create the gMSA Next, use the New-ADServiceAccount cmdlet to create the gMSA:
New-ADServiceAccount -Name gMSA1 -DNSHostName gmsa1.domain.com -PrincipalsAllowedToRetrieveManagedPassword SRV1$ Replace domain.com with your actual domain name.
Step 3: Install the gMSA on SRV1 Now, you need to install the gMSA on the server SRV1. Run the following command on SRV1:
Install-ADServiceAccount -Identity gMSA1
Step 4: Test the gMSA To ensure that the gMSA is installed correctly and ready for use, perform a test using:
Test-ADServiceAccount -Identity gMSA1
If the test returns True, the gMSA is correctly installed and ready for use on SRV1.
Step 5: Configure the Service to Use the gMSA Finally, configure the service that requires the gMSA to use gMSA1 by setting the service's logon account to domain\gMSA1$ and leave the password field blank.
This will create and make the gMSA gMSA1 available on SRV1. Ensure that you have the necessary permissions and that SRV1 is properly joined to the domain before proceeding with these steps123.
NEW QUESTION # 29
Case Study 1 - Fabrikam, Inc
Overview
Fabrikam, Inc is a manufacturing company that has a main office in New York and a branch office in Seattle.
Existing Environment
On-premises Servers
The on-premises network contains servers that run Windows Server as shown in the following table.
DC1 hosts all the operation master roles.
WEB1 and WEB2 run an Internet Information Services (IIS) web app named Webapp1.
On-premises Network
The New York and Seattle offices are connected by using redundant WAN links.
The client computers in each office get IP addresses from their local DHCP server.
DHCP1 contains a scope named Scope1 that has addresses for the New York office, DHCP2 contains a scope named Scope2 that has addresses for the Seattle office.
Identity Infrastructure
The network contains a single on-premises Active Directory Domain Services (AD DS) domain named corp.falbrikam.com. Currently, all the service accounts use individual domain user accounts.
All domain controllers have the DNS Server role installed and host a copy of the Active Directory integrated DNS zone of corp.fabrikam.com.
The corp.fabrikam.com AD DS domain syncs with an Azure Active Directory (Azure AD) tenant.
Group Policy Objects (GPOs)
The corp.fabrikam.com domain contains the organizational units (OUs) and custom Group Policy Objects (GPOs) shown in the following table.
Requirements
Planned Changes
Fabrikam identifies the following planned changes:
Create a single Azure subscription named Sub1 that will contain a single Azure virtual network named Vnet1.
Replace the WAN links between the Seattle and New York offices by using Azure Virtual WAN and FxpressRoute. Both on premises offices will be connected to Vnet1 by using ExpressRoute.
Create three Azure file shares named newyorkhiles, seattlefiles, and companyfiles.
Create a domain controller named dc3.corp.fabrikam.com in Vnet1.
Deploy an Azure Virtual Desktop host pool to Vnet1. The Azure Virtual Desktop session hosts will be hybrid Azure AD-joined.
License all servers for Microsoft Defender for servers.
Use Azure Policy to enforce configuration management policies on the servers in Azure and on- premises.
Networking Requirements
Fabrikam identifies the following networking requirements:
Implement Virtual WAN and ensure that all the network traffic between the sites uses Virtual WAN. All communications must occur over ExpressRoute.
If a DHCP server fails, ensure that the client computers can continue to receive their dynamic IP address and renew their existing lease.
Ensure that the resources in Vnet1 can resolve the names of the on-premises servers in the corp.fabrikam.com domain.
Security Requirements
Fabrikam identifies the following security requirements:
Apply GPO4 to the Azure Virtual Desktop session hosts. Ensure that Azure Virtual Desktop user sessions lock after being idle for 10 minutes. Users must be able to control the lockout time manually from their client computer.
Ensure that server administrators request approval before they can establish a Remote Desktop connection to an Azure virtual machine. If the request is approved, the connection must be established within two hours.
Prevent user passwords from containing all or part of words that are based on the company name, such as Fab, f@br1kAm or fabr!|.
Ensure that all instances of Webapp1 use the same service account. The password of the service account must change automatically every 30 days.
Prevent domain controllers from directly contacting hosts on the internet.
File Sharing Requirements
You need to configure the synchronization of Azure files to meet the following requirements:
Ensure that seattlefiles syncs to FS2.
Ensure that newyorkfiles syncs to FS1.
Ensure that companyfiles syncs to both FS1 and FS2.
Question
Drag and Drop Question
Which three actions should you perform in sequence to meet the security requirements for Webapp1? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
https://docs.microsoft.com/en-us/windows-server/security/group-managed-service- accounts/group-managed-service-accounts-overview
NEW QUESTION # 30
You need to run an Azure VM extension to make configuration changes to an already deployed VM. Which of the following platforms would you use to run Azure VM extensions? (Choose multiple options if required)
Answer: C
Explanation:
Azure VM extensions are the small-sized apps used to assist with the process of automation tasks and post-deployment configuration on Azure VMs. You can run Azure VM extensions using PowerShell, Azure CLI, Azure Portal, and Azure Resource Manager templates portal. Azure Virtual Machine extensions can be paired with a new Virtual Machine deployment or you can run them against an existing system.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/features-windows
NEW QUESTION # 31
......
Our company has the highly authoritative and experienced team. In order to let customers enjoy the best service, all AZ-800 exam prep of our company were designed by hundreds of experienced experts. Our AZ-800 test questions will help customers learn the important knowledge about exam. If you buy our products, it will be very easy for you to have the mastery of a core set of knowledge in the shortest time, at the same time, our AZ-800 Test Torrent can help you avoid falling into rote learning habits. You just need to spend 20 to 30 hours on study, and then you can take your exam. In addition, the authoritative production team of our AZ-800 exam prep will update the study system every day in order to make our customers enjoy the newest information.
AZ-800 Practice Mock: https://www.dumpstorrent.com/AZ-800-exam-dumps-torrent.html
BONUS!!! Download part of DumpsTorrent AZ-800 dumps for free: https://drive.google.com/open?id=1fh8pb5A7sD_YBW6RoI08FISItihyjwug