【2026新版】微软 AZ-800 AZ800 英文_在线真题试卷与模拟练习_【2026新版】微软 AZ-800 AZ800 英文_考试宝

更新时间：试题数量：购买人数：提供作者：

有效期：个月

章节介绍：共有个章节

收藏

我的练习

我的错题
(0道)

我的收藏
(0道)

我的斩题
(0道)

我的笔记
(0道)

专项练习

顺序练习 0 / 0

随机练习 自定义设置练习量

题型乱序 按导入顺序练习

模拟考试 仿真模拟

题型练习 按题型分类练习

易错题 精选高频易错题

学习资料 考试学习相关信息

搜索

题库预览

This is a case study. Case studies are not timed separately. You can use as much exam time as you Would like to complete each case. However, there may be additional case studies and sections on this Exam. You must manage your time to ensure that you are able to complete all questions included on this Exam in the time provided. To answer the questions included in a case study, you will need to reference information that is provided in The case study. Case studies might contain exhibits and other resources that provide more information About the scenario that is described in the case study. Each question is independent of the other questions In this case study. At the end of this case study, a review screen will appear. This screen allows you to review your answers And to make changes before you move to the next section of the exam. After you begin a new section, you Cannot return to this section. To start the case study To display the first question in this case study, click the Next button. Use the buttons in the left pane to Explore the content of the case study before you answer the questions. Clicking these buttons displays Information such as business requirements, existing environment, and problem statements. If the case Study has an All Information tab, note that the information displayed is identical to the information Displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to Return to the question. Overview Company Information ADatum Corporation is a manufacturing company that has a main office in Seattle and two branch offices In Los Angeles and Montreal. Fabrikam Partnership ADatum recently partnered with a company named Fabrikam, Inc. Fabrikam is a manufacturing company that has a main office in Boston and a branch office in Orlando. Both companies intend to collaborate on several joint projects. Existing Environment ADatum AD DS Environment The on-premises network of ADatum contains an Active Directory Domain Services (AD DS) forest named Adatum.com. The forest contains two domains named adatum.com and east.adatum.com and the domain controllers Shown in the following table. （含图） Fabrikam AD DS Environment The on-premises network of Fabrikam contains an AD DS forest named fabrikam.com. The forest contains two domains named fabrikam.com and south.fabrikam.com. The fabrikam.com domain contains an organizational unit (OU) named Marketing. Server Infrastructure The adatum.com domain contains the servers shown in the following table. （含图） HyperV1 contains the virtual machines shown in the following table. （含图） All the virtual machines on HyperV1 have only the default management tools installed. SSPace1 contains the Storage Spaces virtual disks shown in the following table. （含图） Azure Resources ADatum has an Azure subscription that contains a Microsoft Entra tenant. Microsoft Entra Connect is Configured to sync the adatum.com forest with Microsoft Entra ID. The subscription contains the virtual networks shown in the following table. （含图） The subscription contains the Azure Private DNS zones shown in the following table. （含图） The subscription contains the virtual machines shown in the following table. （含图） All the servers are in a workgroup. The subscription contains a storage account named storage1 that has a file share named share1. Requirements Planned Changes ADatum plans to implement the following changes: Sync Data1 to share1. Configure an Azure runbook named Task1. Enable Microsoft Entra users to sign in to Server1. Create an Azure DNS Private Resolver that has the following configurations: - Name: Private1 - Region: West US - Virtual network: VNet1 - Inbound endpoint: SubnetB Enable users in the adatum.com domain to access the resources in the south.fabrikam.com domain. Technical Requirements ADatum identifies the following technical requirements: The data on SSPace1 must be available always. DC2 must become the schema master if DC1 fails. VM3 must be configured to enable per-folder quotas. Trusts must allow access to only the required resources. The users in the Marketing OU must have access to storage1. Azure Automanage must be used on all supported Azure virtual machines.A direct SSH session must be used to manage all the supported virtual machines on HyperV1. You need to ensure that Automanage meets the technical requirements. On which Azure virtual machines should you enable Automanage?

Case Study This is a case study. Case studies are not timed separately. You can use as much exam time as you Would like to complete each case. However, there may be additional case studies and sections on this Exam. You must manage your time to ensure that you are able to complete all questions included on this Exam in the time provided. To answer the questions included in a case study, you will need to reference information that is provided in The case study. Case studies might contain exhibits and other resources that provide more information About the scenario that is described in the case study. Each question is independent of the other questions In this case study. At the end of this case study, a review screen will appear. This screen allows you to review your answers And to make changes before you move to the next section of the exam. After you begin a new section, you Cannot return to this section. To start the case study To display the first question in this case study, click the Next button. Use the buttons in the left pane to Explore the content of the case study before you answer the questions. Clicking these buttons displays Information such as business requirements, existing environment, and problem statements. If the case Study has an All Information tab, note that the information displayed is identical to the information Displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to Return to the question. Overview Fabrikam, Inc is a manufacturing company that has a main office in New York and a branch office in Seattle. Existing Environment On-premises Servers The on-premises network contains servers that run Windows Server as shown in the following table. （含图） DC1 hosts all the operation master roles. VM1 and VM2 are connected to the internet. WEB1 and WEB2 run an Internet Information Services (IIS) web app named Webapp1. On-premises Network The New York and Seattle offices are connected by using redundant WAN links. The client computers in each office get IP addresses from their local DHCP server. DHCP1 contains a scope named Scope1 that has addresses for the New York office, DHCP2 contains a Scope named Scope2 that has addresses for the Seattle office. Identity Infrastructure The network contains a single on-premises Active Directory Domain Services (AD DS) domain named Corp.falbrikam.com. Currently, all the service accounts use individual domain user accounts. All domain controllers have the DNS Server role installed and host a copy of the Active Directory Integrated DNS zone of corp.fabrikam.com. The corp.fabrikam.com AD DS domain syncs with a Microsoft Entra tenant. Group Policy Objects (GPOs) The corp.fabrikam.com domain contains the organizational units (OUs) and custom Group Policy Objects (GPOs) shown in the following table. （含图） Requirements Planned Changes Fabrikam identifies the following planned changes: Create a single Azure subscription named Sub1 that will contain a single Azure virtual network named Vnet1. Replace the WAN links between the Seattle and New York offices by using Azure Virtual WAN and FxpressRoute. Both on premises offices will be connected to Vnet1 by using ExpressRoute. Create three Azure file shares named newyorkfiles, seattlefiles, and companyfiles. Create a domain controller named dc3.corp.fabrikam.com in Vnet1. Deploy an Azure Virtual Desktop host pool to Vnet1. The Azure Virtual Desktop session hosts will be Hybrid Microsoft Entra joined. License all servers for Microsoft Defender for servers. Use Azure Policy to enforce configuration management policies on the servers in Azure and onpremises. Networking Requirements Fabrikam identifies the following networking requirements: Implement Virtual WAN and ensure that all the network traffic between the sites uses Virtual WAN. All Communications must occur over ExpressRoute. If a DHCP server fails, ensure that the client computers can continue to receive their dynamic IP Address and renew their existing lease. Ensure that the resources in Vnet1 can resolve the names of the on-premises servers in the Corp.fabrikam.com domain. Security Requirements Fabrikam identifies the following security requirements: Apply GPO4 to the Azure Virtual Desktop session hosts. Ensure that Azure Virtual Desktop user Sessions lock after being idle for 10 minutes. Users must be able to control the lockout time manually From their client computer. Ensure that server administrators request approval before they can establish a Remote Desktop Connection to an Azure virtual machine. If the request is approved, the connection must be established Within two hours. Prevent user passwords from containing all or part of words that are based on the company name, Such as Fab, f@br1kAm or fabr!|. Ensure that all instances of Webapp1 use the same service account. The password of the service Account must change automatically every 30 days. Prevent domain controllers from directly contacting hosts on the internet. File Sharing Requirements You need to configure the synchronization of Azure files to meet the following requirements: Ensure that seattlefiles syncs to FS2. Ensure that newyorkfiles syncs to FS1. Ensure that companyfiles syncs to both FS1 and FS2. You are planning the implementation Azure Arc to support the planned changes. You need to configure the environment to support configuration management policies. What should you do?

You have an on premises Active Directory Domain Services (AD DS) domain that syncs with a Microsoft Entra tenant. The domain contains two servers named Server1 and Server2.A user named Admin1 Is a member of the local Administrators group on Server1 and Server2. You plan to manage Server1 and Server2 by using Azure Arc. Azure Arc objects will be added to a Resource group named RG1. You need to ensure that Admin1 can configure Server1 and Server2 to be managed by using Azure Arc. What should you do first?

You have an Azure virtual machine named VM1 that runs Windows Server. You have an Azure subscription that has Microsoft Defender for Cloud enabled. You need to ensure that you can use the Azure Policy guest configuration feature to manage VM1. What should you do?

You have an Azure virtual machine named VM1 that has a private IP address only. You configure the Windows Admin Center extension on VM1. You have an on-premises computer that runs Windows 11. You use the computer for server management. You need to ensure that you can use Windows Admin Center from the Azure portal to manage VM1. What should you configure?

Your company has a main office and a branch office. The two offices are connected by using a WAN link. Each office contains a firewall that filters WAN traffic. The network in the branch office contains 10 servers that run Windows Server. All servers are Administered from the main office only. You plan to manage the servers in the branch office by using a Windows Admin Center gateway. On a server in the branch office, you install the Windows Admin Center gateway by using the defaults Settings. You need to configure the firewall in the branch office to allow the required inbound connection to the Windows Admin Center gateway. Which inbound TCP port should you allow?

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a Server named Server1. You implement Just Enough Administration (JEA) on Server1. You need to perform remote administration tasks on Server by using only JEA. What should you use?

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. You plan to manage VM1 by using a PowerShell runbook. You need to create the runbook. What should you create first?

You have a server named Server1 that runs Windows Server and has the DHCP Server role installed. Server1 contains the following single scope: Scope: 192.168.16.0 Address pool: 192.168.16.1-192.168.16.254 Subnet mask: 255.255.255.0 Lease duration: 8 days You have four testing devices that are configured with static IP addresses as shown in the following table. （含图） The test devices are turned on once a month. You need to prevent Server1 from assigning the IP addresses allocated to the test devices to other Devices when the test devices are offline. The solution must minimize administrative effort. What should you do?

You have an Active Directory Domain Services (AD DS) domain. The domain contains three servers Named Server1, Server2, and Server3 that run Windows Server. You sign in to Server1 by using a domain account and start a remote PowerShell session to Server2. From The remote PowerShell session, you attempt to access a resource on Server3, but access to the resource Is denied. You need to ensure that your credentials are passed from Server1 to Server3. The solution must minimize Administrative effort. What should you do?

You have an Active Directory Domain Services (AD DS) domain. The domain contains a member server Named Server1 that runs Windows Server. You need to ensure that you can manage password policies for the domain from Server1. Which command should you run first on Server1?

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a Server named Server1. On Server1, you install Windows Admin Center and use Windows Admin Center to remove BUILTIN\Users From the allowed groups. You discover that all users can still sign in to Windows Admin Center. You need to prevent unauthorized users from signing in to Windows Admin Center. What should you do in Windows Admin Center?

You have on-premises servers that run Windows Server as shown in the following table. （含图） You have an Azure subscription that contains a virtual machine named VM1. You need to ensure that you can manage all the servers by using Azure Arc. The solution must minimize Administrative effort. On which servers should you install the Azure Connected Machine agent?

Your network contains an on-premises Active Directory Domain Services (AD DS) domain. The domain Contains a user named User1 and the servers shown in the following table. （含图） User1 is a member of the Protected Users security group. User1 performs the following actions: From Server1, establishes a remote PowerShell session on Server2 From the PowerShell session on Server2, attempts to access a resource on Backup1 The request to access the resource on Backup1 is denied. You need to ensure that User1 can access the resources on Backup1 by using the PowerShell session on Server2. The solution must follow the principle of least privilege and minimize administrative effort. What should you configure?

You have 50 on-premises servers that run Windows Server. You have an Azure subscription. You plan to monitor the on-premises servers by using Azure Monitor. You need to collect event logs from the on-premises servers. What should you do first?

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains Servers that run Windows Server and computers that run Windows. You link a Group Policy Object (GPO) to the domain and set Turn on BranchCache to Enabled. You need to enable BranchCache in BranchCache Distributed Cache mode. What should you configure on the computers?

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the Servers shown in the following table. （含图） You need to ensure that from Server1, you can use Windows Admin Center to manage the DHCP Server Role on Server2. What should you do first?

This is a case study. Case studies are not timed separately. You can use as much exam time as you Would like to complete each case. However, there may be additional case studies and sections on this Exam. You must manage your time to ensure that you are able to complete all questions included on this Exam in the time provided. To answer the questions included in a case study, you will need to reference information that is provided in The case study. Case studies might contain exhibits and other resources that provide more information About the scenario that is described in the case study. Each question is independent of the other questions In this case study. At the end of this case study, a review screen will appear. This screen allows you to review your answers And to make changes before you move to the next section of the exam. After you begin a new section, you Cannot return to this section. To start the case study To display the first question in this case study, click the Next button. Use the buttons in the left pane to Explore the content of the case study before you answer the questions. Clicking these buttons displays Information such as business requirements, existing environment, and problem statements. If the case Study has an All Information tab, note that the information displayed is identical to the information Displayed on the subsequent labs. When you are ready to answer a question, click the Question button to Return to the question. Overview Contoso, Ltd. is a company that has a main office in Seattle and two branch offices in Los Angeles and Montreal. Existing Environment AD DS Environment The network contains an on premises Active Directory Domain Services (AD DS) forest named Contoso.com. The forest contains two domains named contoso.com and canada.contoso.com. The forest contains the domain controllers shown in the following table. （含图） All the domain controllers are global catalog servers. Server infrastructure The network contains the servers shown in the following table. （含图） server named Server4 runs Windows Server and is in a workgroup. Windows Firewall on Server4 uses The private profile. Server2 hosts three virtual machines named VM1, VM2, and VM3. VM3 is a file server that stores data in the volumes shown in the following table. （含图） Group Policies The contoso.com domain has the Group Policies Objects (GPOs) shown in the following table. （含图） Existing Identities The forest contains the users shown in the following table. （含图） The forest contains the groups shown in the following table. （含图） Current Problems When an administrator signs in to the console of VM2 by using Virtual Machine Connection, and then Disconnects from the session without signing out, another administrator can connect to the console Session as the currently signed in user. Requirements Technical Requirements Contoso identifies the following technical requirements: Change the replication schedule for all site links to 30 minutes. Promote Server1 to a domain controller in canada.contoso.com. Install and authorize Server3 as a DHCP server. Ensure that User1 can manage the membership of all the groups in Contoso\OU3. Ensure that you can manage Server4 from Server1 by using PowerShell remoting. Ensure that you can run virtual machines on VM1. Force users to provide credentials when they connect to VM2. On VM3, enable Data Deduplication on all volumes that support the feature. You need to meet the technical requirements for VM2. What should you do?

You have a Windows Server container host named Server1 and a container image named image1. You need to start a container from image1. The solution must run the container on a Hyper-V virtual Machine. Which parameter should you specify when you run the docker run command?

You plan to deploy a containerized application that requires .NET Core. You need to create a container image for the application. The image must be as small as possible. Which base image should you use?