HOTSPOT (Drag and Drop is not supported)You have an Azure subscription named sub1 and 500 on-premises virtual machines that run Windows Server.You plan to onboard the on-premises virtual machines to Azure Arc by running the Azure Arc deployment script.You need to create an identity that will be used by the script to authenticate access to sub1. The solution must use the principle of least privilege.How should you complete the command? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
Answer(s): A
https://docs.microsoft.com/en-us/azure/azure-arc/servers/onboard-service-principal
You have an Azure virtual machine named VM1 that has a private IP address only.You configure the Windows Admin Center extension on VM1.You have an on-premises computer that runs Windows 11. You use the computer for server management.You need to ensure that you can use Windows Admin Center from the Azure portal to manage VM1.What should you configure?
Answer(s): D
Your company has a main office and a branch office. The two offices are connected by using a WAN link. Each office contains a firewall that filters WAN traffic.The network in the branch office contains 10 servers that run Windows Server. All servers are administered from the main office only.You plan to manage the servers in the branch office by using a Windows Admin Center.On a server in the branch office, you install the Windows Admin Center by using the defaults settings.You need to configure the firewall in the branch office to allow the required inbound connection to the Windows Admin Center gateway.Which inbound TCP port should you allow?
You have an Azure subscription that contains the following resources.-An Azure Log Analytics workspace-An Azure Automation account-Azure ArcYou have an on-premises server named Server1 that is onboarded to Azure Arc.You need to manage Microsoft updates on Server1 by using Azure Arc.Which two actions should you perform? Each correct answer presents part of the solution.Note: Each correct selection is worth one point.
Answer(s): A,C
https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/manage/hybrid/server/best-practices/arc-update-management
HOTSPOT (Drag and Drop is not supported)You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with a Microsoft Entra tenant.You have an on-premises web app named WebApp1 that only supports Kerberos authentication.You need to ensure that users can access WebApp1 by using their Microsoft Entra account. The solution must minimize administrative effort.What should you configure? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
https://docs.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-add-on-premises-application
SIMULATIONYou need to collect errors from the System event log of SRV1 to a Log Analytics workspace.The required source files are located in a folder named \\dc1.contoso.com\install.To complete this task, sign in the required computer or computers.
Configure Windows event logs Configure Windows event logs from the Agents configuration menu for the Log Analytics workspace.Step 1: Go to the Log Analytics workspaces menu in the Azure portal. Configure data sources To configure data sources for Log Analytics agents, go to the Log Analytics workspaces menu in the Azure portal and select a workspace.Step 2: Select Agents configuration.Step 3: Select the tab for the data source you want to configure. In this case the Windows event log of SRV1.Step 4: Select only Error option in the System Log row. Azure Monitor only collects events from Windows event logs that are specified in the settings.
https://learn.microsoft.com/en-us/azure/azure-monitor/agents/data-sources-windows-events https://learn.microsoft.com/en-us/azure/azure-monitor/agents/agent-data-sources#configure-data-sources
HOTSPOT (Drag and Drop is not supported)You have an on-premises network and an Azure subscriptionYour on-premises network contains an Active Directory domain named contoso.com and 500 servers that run Windows Server. All the servers are Azure Arc-enabled and joined to contoso.com.You need to implement PowerShell Desired State Configuration (DSC) on all the servers. The solution must minimize administrative effort.Where should you store the DSC scripts, and what should you use to apply DSC to the servers? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
Box 1: An Azure Automation account Azure Automation allows you to automate tasks against resources in Azure, on-premises, and with other cloud providers such as Amazon Web Services (AWS).When you start Azure Automation for the first time, you must create at least one Automation account.Azure Automation State Configuration Prerequisites include: An Azure Automation accountAzure Automation State Configuration is an Azure configuration management service that allows you to write, manage, and compile PowerShell Desired State Configuration (DSC) configurations for nodes in any cloud or on-premises datacenter.Box 2: Guest configuration in Azure policy Note: Before you enable Automation State Configuration, we would like you to know that a newer version of DSC is now generally available, managed by a feature of Azure Policy named guest configuration. The guest configuration service combines features of DSC Extension, Azure Automation State Configuration, and the most commonly requested features from customer feedback. Guest configuration also includes hybrid machine support through Arc-enabled servers.
https://learn.microsoft.com/en-us/azure/automation/automation-security-overview https://learn.microsoft.com/en-us/azure/automation/automation-dsc-overview
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1.You implement Just Enough Administration (JEA) on Server1.You need to perform remote administration tasks on Server by using only JEA.What should you use?
Just Enough Administration is a feature included in PowerShell 5.0 and higher.Just Enough Administration (JEA) is a security technology that enables delegated administration for anything managed by PowerShell. With JEA, you can:Reduce the number of administrators on your machines using virtual accounts or group-managed service accounts to perform privileged actions on behalf of regular users. Limit what users can do by specifying which cmdlets, functions, and external commands they can run. Better understand what your users are doing with transcripts and logs that show you exactly which commands a user executed during their session.
https://learn.microsoft.com/en-us/powershell/scripting/learn/remoting/jea/overview https://learn.microsoft.com/en-us/powershell/scripting/learn/remoting/jea/prerequisites
Post your Comments and Discuss Microsoft AZ-800 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-800 content, but please register or login to continue.