AZ-800 Practice Test

AZ-800 Practice Test practice questions, page 5 of 13, with answer review and explanations.

Question 21

Your network contains three Active Directory Domain Services (AD DS) forests as shown in the following exhibit. The network contains the users shown in the following table. The network contains the security groups shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise. select No. NOTE: Each correct selection is worth one point. Hot Area:

Question 22

Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest root domain contains a server named server1.contoso.com. A two-way forest trust exists between the contoso.com forest and an AD DS forest named fabrikam.com. The fabrikam.com forest contains 10 child domains. You need to ensure that only the members of a group named fabrikam\Group1 can authenticate to server1.contoso.com. What should you do first?

  1. Add fabrikam\Group1 to the local Users group on server1.contoso.com.
  2. Enable SID filtering for the trust.
  3. Enable Selective authentication for the trust.
  4. Change the trust to a one-way external trust.

Question 23

Your network contains an Active Directory forest. The forest contains two domains named contoso.com and east.contoso.com and the servers shown in the following table. Contoso.com contains a user named User1. You add User1 to the built-in Backup Operators group in contoso.com. Which servers can User1 back up?

  1. DC1 only
  2. Server1 only
  3. DC1 and DC2 only
  4. DC1 and Server1 only
  5. DC1, DC2, Server1, and Server2

Question 24

Your network contains an Azure Active Directory Domain Services (Azure AD DS) domain named contoso.com. You need to configure a password policy for the local user accounts on the Azure virtual machines joined to contoso.com. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 25

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three domains. Each domain contains 10 domain controllers. You plan to store a DNS zone in a custom Active Directory partition. You need to create the Active Directory partition for the zone. The partition must replicate to only four of the domain controllers. What should you use?

  1. dnscmd.exe
  2. Active Directory Sites and Services
  3. Set-DnsServer
  4. DNS Manager