[2024年07月] 合格 Microsoft AZ-800 テストエンジンpdf - 完全版無料問題集 [Q12-Q29]

[2024年07月] 合格させるMicrosoft AZ-800テストエンジンPDFで完全版無料問題集

Administering Windows Server Hybrid Core Infrastructure練習テスト2024年最新のAZ-800ストレスなしで合格！

Microsoft AZ-800試験は、Windows Serverインフラストラクチャを管理する経験を持ち、ハイブリッドクラウド環境にスキルを拡張しようとしているITプロフェッショナルを対象としています。この試験に合格すると、複雑なハイブリッド環境を管理する能力が証明され、クラウドテクノロジーの高度な認証を追求する準備が整います。この試験は、ハイブリッド環境を管理する責任があるITプロフェッショナルで、雇用主や同僚に自分の専門知識を証明したい人に最適です。

Microsoft AZ-800の認定を取得することにより、ITプロフェッショナルがWindows Serverハイブリッドコアインフラストラクチャを管理する能力を習得していることを潜在的な雇用主に示すことができます。この認定は、ITプロフェッショナルがキャリアを進め、収入を増やすのに役立ちます。さらに、組織は、ITスタッフがハイブリッドインフラストラクチャを効果的に管理するために必要なスキルと知識を持っていることを確認できます。

Microsoft AZ-800認定試験は、Windows Serverハイブリッドコアインフラストラクチャの管理におけるITプロフェッショナルの知識とスキルをテストするように設計されています。この認定は、オンプレミスとクラウドベースのリソースの両方で構成されるハイブリッド環境の管理と保護を担当する人に適しています。この試験では、仮想化、ネットワーク、ストレージ、アイデンティティ、アクセス管理、セキュリティなど、幅広いトピックをカバーしています。

質問 # 12
Case Study 3 - ADatum Corporation
Overview
Company Information
ADatum Corporation is a manufacturing company that has a main office in Seattle and two branch offices in Los Angeles and Montreal.
Fabrikam Partnership
ADatum recently partnered with 2 company named Fabrikam, Inc.
Fabrikam is a manufacturing company that has a main office in Boston and a branch office in Orlando.
Both companies intend to collaborate on several joint projects.
Existing Environment
ADatum AD DS Environment
The on-premises network of ADatum contains an Active Directory Domain Services (AD DS) forest named adatum.com.
The forest contains two domains named adatum.com and east.adatum.com and the domain controllers shown in the following table.

Fabrikam AD DS Environment
The on-premises network of Fabrikam contains an AD DS forest named fabrikam.com.
The forest contains two domains named fabrikam.com and south.fabrikam.com.
The fabrikam.com domain contains an organizational unit (OU) named Marketing.
Server Infrastructure
The adatum.com domain contains the servers shown in the following table.

HyperV1 contains the virtual machines shown in the following table.

All the virtual machines on HyperV1 have only the default management tools installed.
SSPace1 contains the Storage Spaces virtual disks shown in the following table.

Azure Resources
ADatum has an Azure subscription that contains an Azure AD tenant. Azure AD Connect is configured to sync the adatum.com forest with Azure AD.
The subscription contains the virtual networks shown in the following table.

The subscription contains the Azure Private DNS zones shown in the following table.

The subscription contains the virtual machines shown in the following table.

All the servers are in a workgroup.
The subscription contains a storage account named storage1 that has a file share named share1.
Requirements
Planned Changes
ADatum plans to implement the following changes:
- Sync Data1 to share1.
- Configure an Azure runbook named Task1.
- Enable Azure AD users to sign in to Server1.
- Create an Azure DNS Private Resolver that has the following configurations:
- Name: Private1
- Region: West US
- Virtual network: VNet1
- Inbound endpoint: SubnetB
- Enable users in the adatum.com domain to access the resources in the south.fabrikam.com domain.
Technical Requirements
ADatum identifies the following technical requirements:
- The data on SSPace1 must be available always.
- DC2 must become the schema master if DC1 fails.
- VM3 must be configured to enable per-folder quotas.
- Trusts must allow access to only the required resources.
- The users in the Marketing OU must have access to storage1.
- Azure Automanage must be used on all supported Azure virtual machines.
- A direct SSH session must be used to manage all the supported virtual machines on HyperV1.
Drag and Drop Question
DC1 fails.
You need to meet the technical requirements for the schema master.
You run ntdsutil.exe.
Which five commands should you run in sequence? To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the correct order?

正解：

解説：

質問 # 13
Your network contains an Active Directory Domain Services (AD DS) domain named adatum.com. The domain contains a file server named Server1 and three users named User1, User2, and User3.
Server1 contains a shared folder named Share1 that has the following configurations:

The share permissions for Share1 are configured as shown in the Share Permissions exhibit.

Share1 contains a file named File1.bxt. The advanced security settings for File1.txt are configured as shown in the File Permissions exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

正解：

解説：

質問 # 14
You have a server named Server1 that runs Windows Server. The disks on Server1 are configured as shown in the following exhibit.

You need to convert volume E to ReFS. The solution must meet the following requirements:
* Preserve the existing data on volume E.
* Minimize administrative effort.
What should you do first?

A. Runconvert.exe.
B. Back up the data on volume E.
C. Take Disk 2 offline.
D. Convert Disk 2 to a dynamic disk.

正解：B

質問 # 15
You need to ensure that access to storage1 for the Marketing OU users meets the technical requirements.
What should you implement?

A. Microsoft Entra Connect cloud sync
B. Active Directory Federation Services (AD FS)
C. Microsoft Entra Connect in active mode
D. Microsoft Entra Connect in staging mode

正解：A

質問 # 16
Your network contains two VLANs for client computers and one VLAN for a datacenter Each VLAN is assigned an IPv4 subnet Currently, all the client computers use static IP addresses.
You plan to deploy a DHCP server to the VLAN in the datacenter.
You need to use the DHCP server to provide IP configurations to all the client computers.
What is the minimum number of scopes and DHCP relays you should create? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

質問 # 17
Your network contains three Active Directory Domain Services (AD DS) forest as shown in the following exhibit.

The network contains the users shown in the following table.

The network contains the security groups shown in the following table.

For each of the following statements, select Yes if the statement is true, Otherwise, select No.
NOTE: Each correct selection is worth one point.

正解：

解説：

質問 # 18
Hotspot Question
You have a file server named Server1 that runs Windows Server and contains the volumes shown in the following table.

On which volumes can you use BitLocker Drive Encryption (BitLocker) and disk quotas? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

Explanation:
https://docs.microsoft.com/en-us/windows-server/storage/refs/refs-overview

質問 # 19
Which three actions should you perform in sequence to meet the security requirements for Webapp1? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

正解：

解説：

Explanation
Graphical user interface, text, application Description automatically generated

Reference:
https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/group-managed-serv

質問 # 20
You need to configure the Group Policy settings to ensure that the Azure Virtual Desktop session hosts meet the security requirements. What should you configure?

A. loopback processing in GPO1
B. the Enforced property for the link of GP01
C. security filtering for the link of GP04
D. loopback processing in GPO4
E. the Enforced property for the link of GP04
F. security filtering for the link of GPO1

正解：D

解説：
Topic 3, Mix Questions
Mix Questions
AZ-800 Mix Questions IN THIS CASE STUDY

質問 # 21
Task 5
You have an application that is copied to a folder named C:\app on SRV1. C:\app also contains also a Dockerfile for the app.
On SRV1. you need to create a container image for the application by using the Dockerfile. The container image mutt be named app1.

正解：

解説：
See the solution of this Task below.
Explanation:

Docker
Explore
To create a container image named app1 for your application using the Dockerfile in the C:\app directory on SRV1, follow these steps:
Step 1: Open PowerShell or Command Prompt First, open PowerShell or Command Prompt on SRV1.
Step 2: Navigate to the Application Directory Change to the directory where your application and Dockerfile are located:
cd C:\app
Step 3: Build the Container Image Use the docker build command to create the container image. The -t flag tags the image with the name app1:
docker build -t app1 .
The period . at the end of the command tells Docker to use the Dockerfile in the current directory.
Step 4: Verify the Image Creation After the build process completes, verify that the image app1 has been created successfully by listing all images:
docker images
You should see app1 in the list of images.
Step 5: Use the Image Now, you can use the image app1 to run containers or push it to a container registry if needed.
By following these steps, you'll have created a Docker container image named app1 using the Dockerfile located in C:\app on SRV11. Ensure that Docker is installed on SRV1 and that you have the necessary permissions to execute these commands.

質問 # 22
Your on-premises network contains a single-domain Active Directory Domain Services (AD DS) forest. You have an Azure AD tenant named contoso.com. The AD DS forest syncs with the Azure AD tenant by using Azure AD Connect.
You need to ensure that users in the forest that have a custom attribute of NoSync are excluded from synchronization.
How should you configure the Azure AD Connect cloudFiltered attribute, and which tool should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

質問 # 23
Hotspot Question
You have a server named Server1 that runs Windows Server and contains three volumes named C, D, and E.
Files are stored on Server1 as shown in the following table.

For volume D, Data Deduplication is enabled and set to General purpose file server.
You perform the following actions:
- Move File1 to volume D.
- Copy File2 to volume D and name the copy File4.
- Move File3 to volume E.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

正解：

解説：

質問 # 24
Hotspot Question
You have an on-premises DNS server named Server1 that runs Windows Server. Server1 hosts a DNS zone named fabrikam.com.
You have an Azure subscription that contains the resources shown in the following table.

You need to design a solution that will automatically resolve the names of any PaaS resources for which you configure private endpoints in Vnet1.
How should you configure the name resolution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

Explanation:
https://learn.microsoft.com/en-us/azure/private-link/private-endpoint-dns#on-premises-workloads- using-a-dns-forwarder

質問 # 25
Hotspot Question
You have an Active Directory Domain Services (AD DS) domain that contains a group named Group1.
You need to create a group managed service account (gMSA) named Account1. The solution must ensure that Group1 can use Account1.
How should you complete the script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

質問 # 26
Your network contains an Active Directory forest. The forest contains two domains named contoso.com and east.contoso.com and the servers shown in the following table.

Contoso.com contains a user named User1.
You add User1 to the built-in Backup Operators group in contoso.com.
Which servers can User1 back up?

A. Server1 only
B. DC1 only
C. DC1. DCZ Serve1, and Server2
D. DC! and DC2 only
E. DC1 and Server! only

正解：B

質問 # 27
Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com.
The forest root domain contains a server named server1.contoso.com.
A two-way forest trust exists between the contoso.com forest and an AD DS forest named fabrikam.com. The fabrikam.com forest contains 10 child domains.
You need to ensure that only the members of a group named fabrikam\Group1 can authenticate to server1.contoso.com.
What should you do first?

A. Change the trust to a one-way external trust.
B. Enable SID filtering for the trust.
C. Add fabrikam\Group1 to the local Users group on server1.contoso.com.
D. Enable Selective authentication for the trust.

正解：D

解説：
Selective authentication restricts access over an external or forest trust to only those users in a trusted domain or forest who have been explicitly given authentication permissions to computer objects (resource computers) residing in the trusting domain or forest. This authentication setting must be manually enabled.
Note: When a two way Forest Trust is created between Forest A and Forest B, all domains in Forest A will trust all domains in Forest B and vice versa.

質問 # 28
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the users shown in the following table.

The domain has the Group Policy Objects (GPOs) shown in the following table.

The GPOs are configured to map a drive named H as shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.