| Exam Code | AZ-800 |
| Exam Name | Administering Windows Server Hybrid Core Infrastructure |
| Questions | 266 Questions Answers With Explanation |
| Update Date | July 16,2026 |
| Price |
Was : |
Welcome to Certsleader, your ultimate source for top-quality AZ-800 dumps tailored for Microsoft AZ-800 exam. Our comprehensive resources are designed to help you excel in your exam preparations and achieve your certification goals. Whether you are a beginner looking to start a career in Microsoft or an experienced professional seeking to advance your skills, Certsleader has the right tools to support your journey.
At Certsleader, we are committed to your success. Our practice questions answers are designed to improve your knowledge and help you pass your exams on the first attempt with high scores. In the rare event that you do not succeed, we offer a full refund, taking responsibility for your satisfaction.
Join thousands of satisfied learners who have successfully passed their certification exams with Certsleader. Explore our study materials, download your PDF files, and take the first step towards a rewarding IT career today.
Task 8 You need to create an Active Directory Domain Services (AD DS) site named Site2 that is associated to an IP address range of 192.168.2.0 to 192.168.2.255.
Task 7 You need to monitor the security configuration of DC1 by using Microsoft Defender for Cloud. The required source files are located in a folder named \\dc1.contoso.com\install.
Task 5 You need to ensure that a DHCP scope named scope! on SRV1 can service client requests.
Task 3 You need to configure SRV1 as a DNS server. SRV1 must be able resolve names from the contoso.com domain by using DC1. All other names must be resolved by using the root hint servers.
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains two servers named Server1 and Server2. Question No : 185 - (Topic 4) Question No : 186 - (Topic 4) 166 Server1 contains a disk named Disk2. Disk2 contains a folder named UserData. UserData is shared to the Domain Users group. Disk2 is configured for deduplication. Server1 is protected by using Azure Backup. Server1 fails. You connect Disk2 to Server2. You need to ensure that you can access all the files on Disk2 as quickly as possible. What should you do?
A. Create a storage pool.
B. Restore files from Azure Backup.
C. Install the File Server Resource Manager server role.
D. Install the Data Deduplication server role.
You have an Active Directory Domain Services (AD DS) domain. The domain contains a member server named Server1 that runs Windows Server. You need to ensure that you can manage password policies for the domain from Serve1. Which command should you run first on Server1?
A. Install-Windows Feature RSAT-AO-PowerShell
B. Install-Windows Feature 6PHC
C. Install-Windows Feature RSAT-AD-Tool$
D. Install-windows Feature RSAT-AWIMS
You have an Azure virtual machine named VM1 that runs Windows Server. You need to ensure that administrators request access to VM1 before establishing a Remote Desktop connection. What should you configure?
A. Azure Front Door
B. Microsoft Defender for Cloud
C. Azure AD Privileged Identity Management (PIM)
D. a network security group (NSG)
You need to ensure that VM3 meets the technical requirementsWhat should you install first?
A. Enhanced Storage
B. File Server Resource Manager (FSRM)
C. Windows Standards-Based Storage Management
D. the iSNS Server service
Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains three servers that run Windows Server and have the Hyper-V server role installed. Each server has a Switch Embedded Teaming (SET) team.You need to verify that Remote Direct Memory Access (RDMA) and required Windows Server settings are configured properly on each server to support a failover cluster.What should you use?
A. the validate-DCB cmdlet
B. Server Manager
C. the Get-NetAdapter cmdlet
D. Failover Cluster Manager
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a DNS server named Server1. Server1 hosts a DNS zone named fabrikam.com that was signed by DNSSEC.You need to ensure that all the member servers in the domain perform DNSSEC validation for the fabrikam.com namespace. What should you do?
A. On Served, run the Add-DnsServerTrustAnchor cmdlet.
B. On each member server, run the Add-DnsServerTrustAnchor cmdlet.
C. From a Group Policy Object (GPO). add a rule to the Name Resolution Policy Table (NRPT).
D. From a Group Policy Object (GPO). modify the Network List Manager policies.
You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant Group writeback is enabled in Azure AD Connect.The AD DS domain contains a server named Server1 Server 1 contains a shared folder named share1.You have an Azure Storage account named storage2 that uses Azure AD-based access control. The storage2 account contains a share named shared You need to create a security group that meets the following requirements:• Can contain users from the AD DS domain• Can be used to authorize user access to share 1 and share2What should you do?
A. in the AD DS domain, create a universal security group
B. in the Azure AD tenant create a security group that has assigned membership
C. in the Azure AD Tenant create a security group that has dynamic membership.
D. in the Azure AD tenant create a Microsoft 365 group
You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. You plan to implement self-service password reset (SSPR) in Azure AD.You need to ensure that users that reset their passwords by using SSPR can use the new password resources in the AD DS domain. What should you do?
A. Deploy the Azure AD Password Protection proxy service to the on premises network.
B. Run the Microsoft Azure Active Directory Connect wizard and select Password
writeback.
C. Grant the Change password permission for the domain to the Azure AD Connect service
account.
D. Grant the impersonate a client after authentication user right to the Azure AD Connect
service account.
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.You need to identify which server is the PDC emulator for the domain.Solution: From a command prompt, you run netdom.exe query fsmo.Does this meet the goal?
A. Yes
B. No
You have two servers that have the Hyper-V server role installed. The servers are joined to a failover cluster both servers can connect to the same disk on an iSCSi storage device. You plan to use the iSCSI storage to store highly available Hyper-V virtual machines that will support live migration functionality. You need to configure a storage resource in the failover cluster to store the virtual machines. What should you configure?
A. a storage pool
B. attributed File System (DFS) Replication
C. a mirrored volume
D. Cluster Shared volumes (CSV)
Your company has a main office and a branch office. The two offices are connected by using a WAN link. Each office contains a firewall that filters WAN traffic. The network in the branch office contains 10 servers that run Windows Server. All servers are administered from the main office only.You plan to manage the servers in the branch office by using a Windows Admin Center gateway.On a server in the branch office, you install the Windows Admin Center gateway by using the defaults settings.You need to configure the firewall in the branch office to allow the required inbound connection to the Windows Admin Center gateway. Which inbound TCP port should you allow?
A. 443
B. 3389
C. 5985
D. 6516
You have an Azure subscription that contains the following resources:• An Azure Log Analytics workspace • An Azure Automation account • Azure Arc.You have an on-premises server named Server1 that is onboaraed to Azure Arc You need to manage Microsoft updates on Server! by using Azure Arc Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point
A. Add Microsoft Sentinel to the Log Analytics workspace
B. On Server1, install the Azure Monitor agent
C. From the Automation account, enable Update Management for Server1.
D. From the Virtual machines data source of the Log Analytics workspace, connect
Server1.
Your network contains an Active Directory Domain Services (AD DS) domain named conioso.com. You need to identify which server is the PDC emulator for the domain.Solution: from Active Directory Users and Computers, you right-click contoso.com in the console tree, and then select Operations MasterDoes this meet the goal?
A. Yes
B. No
You have a server named Server1 that runs Windows Server. You plan to host applications in Windows containers. You need to configure Server1 to run containers. What should you install?
A. Windows Admin Center
B. the Windows Subsystem for Linux
C. Doctor
D. Hyper-V
Your network contains an Active Directory Domain Services (AD DS) domain. You plan to use Active Directory Administrative Center to create a new user named User1. Which two attributes are required to create User1? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A. Password
B. Profile path
C. User SameAccountName logon
D. Full name
E. First name
F. User UPN logon
You have an on-premises server named Server! that runs Windows Server. You have an Azure subscription that contains a virtual network named VNet1.You need to connect Server! to VNet1 by using Azure Network Adapter.What should you use?
A. Azure AD Connect
B. Device Manager
C. the Azure portal
D. Windows Admin Center
