You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server.You plan to manage VM1 by using a PowerShell runbook.You need to create the runbook.What should you create first?
Answer(s): A
Create Automation PowerShell runbook using managed identity This tutorial walks you through creating a PowerShell runbook in Azure Automation that uses a managed identity, rather than the Run As account to interact with resources. PowerShell runbooks are based on Windows PowerShell. A managed identity from Azure Active Directory (Azure AD) allows your runbook to easily access other Azure AD-protected resources.Prerequisites * An Azure Automation account with at least one user-assigned managed identity.* Etc.
https://learn.microsoft.com/en-us/azure/automation/learn/powershell-runbook-managed-identity
You have a server named Server1 that runs Windows Server and has the DHCP Server role installed. Server1 contains the following single scope:-Scope: 192.168.16.0-Address pool: 192.168.16.1-192.168.16.254-Subnet mask: 255.255.255.0-Lease duration: 8 daysYou have four testing devices that are configured with static IP addresses as shown in the following table.The test devices are turned on once a month.You need to prevent Server1 from assigning the IP addresses allocated to the test devices to other devices when the test devices are offline. The solution must minimize administrative effort.What should you do?
Answer(s): D
You have an Active Directory Domain Services (AD DS) domain. The domain contains three servers named Server1, Server2, and Server3 that run Windows Server.You sign in to Server1 by using a domain account and start a remote PowerShell session to Server2. From the remote PowerShell session, you attempt to access a resource on Server3, but access to the resource is denied.You need to ensure that your credentials are passed from Server1 to Server3. The solution must minimize administrative effort.What should you do?
SIMULATIONYou need to collect the recommended Windows Performance Counters from SRV1 in a Log Analytics workspace.The required files are stored in a shared folder named \\dc1\install.To complete this task, sign in to the required computer or computers.
Microsoft Azure – Enable Windows Performance Counters in Azure for Monitoring Collect windows performance counters from Log Analytics agents at custom intervals to gain insight into the performance of hardware components, operating systems, and applications.Implementation: Step 1: Log in to Azure Portal.Step 2: Access the Log Analytics Workspace >> Select your Log Analytics.Step 3: After selecting the select Log Analytics Workspace, Navigate to Settings >> Agents ConfigurationStep 4: Select Windows Performance Counters >>You can start with the recommended performance counters by clicking on Add recommended counters or using the add button to add a new performance counter.Step 5: Click on + Add Performance Counter >> Select the Performance Counter nameStep 6: After adding the required Performance Counter name, click on Apply to make the changes.That’s it. You are done. At this point, we have successfully enabled Windows Performance Counters in Azure for Monitoring.
https://www.geeksforgeeks.org/microsoft-azure-enable-windows-performance-counters-in-azure-for-monitoring/
You have an Active Directory Domain Services (AD DS) domain. The domain contains a member server named Server1 that runs Windows Server.You need to ensure that you can manage password policies for the domain from Server1.Which command should you run first on Server1?
Answer(s): C
SIMULATIONYou need to ensure that you can manage DC1 by using Windows Admin Center on SRV1. The required source files are located in a folder named \\dc1.contoso.com\install.To complete this task, sign in the required computer or computers.
Install Windows Admin Center on DC1 Step 1: On dc1 locate folder \\dc1.contoso.com\install, start installation, complete Wizard.Once the install is complete, open a browser from a remote computer and navigate to URL presented in the last step of the installer.Step 2: On SRV1 use the URL from the installation process, and complete the installation.
https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/deploy/install
SIMULATIONYou need to monitor the security configuration of DC1 by using Microsoft Defender for Cloud.The required source files are located in a folder named \\dc1.contoso.com\install.To complete this task, sign in the required computer or computers.
You can connect your non-Azure computers in any of the following ways:* Onboarding with Azure Arc: - By using Azure Arc-enabled servers (recommended) -->By using the Azure portal * Onboarding directly with Microsoft Defender for EndpointConnect on-premises machines by using the Azure portal After you connect Defender for Cloud to your Azure subscription, you can start connecting your on-premises machines from the Getting started page in Defender for Cloud.Step 1: Sign in to the Azure portal.Step 2: Search for and select Microsoft Defender for Cloud.Step 3: On the Defender for Cloud menu, select Getting started.Step 4: Select the Get started tab.Step 5: Find Add non-Azure servers and select Configure.A list of your Log Analytics workspaces appears.Step 6: (Optional) If you don't already have a Log Analytics workspace in which to store the data, select Create new workspace, and follow the on-screen guidance.Step 7: From the list of workspaces, select Upgrade for the relevant workspace to turn on Defender for Cloud paid plans for 30 free days.Step 8: From the list of workspaces, select Add Servers for the relevant workspace.On the Agents management page, choose one of the following procedures, depending on the type of machines you're onboarding (Either Windows or Linux)Onboard your Windows server When you add a Windows server, you need to get the information on the Agents management page and download the appropriate agent file (32 bit or 64 bit).To onboard a Windows server:Step 1: Select Windows servers.Step 2: Select the Download Windows Agent link that's applicable to your computer processor type to download the setup file.Step 3: From the Agents management page, copy the Workspace ID and Primary Key values into Notepad.Step 4: Copy the downloaded setup file to the target computer and run it.Step 5: Follow the installation wizard (select Next > I Agree > Next > Next).Step 6: On the Azure Log Analytics page, paste the Workspace ID and Primary Key values that you copied into Notepad.Step 7: If the computer should report to a Log Analytics workspace in the Azure Government cloud, select Azure US Government from the Azure Cloud dropdown list.Step 8: If the computer needs to communicate through a proxy server to the Log Analytics service, select Advanced. Then provide the URL and port number of the proxy server.Step 9: When you finish entering all of the configuration settings, select Next.Step 10: On the Ready to Install page, review the settings to be applied and select Install.Step 11: On the Configuration completed successfully page, select Finish.When the process is complete, Microsoft Monitoring agent appears in Control Panel. You can review your configuration there and verify that the agent is connected.
https://learn.microsoft.com/en-us/azure/defender-for-cloud/quickstart-onboard-machines
SIMULATIONYou plan to create group managed service accounts (gMSAs).You need to configure the domain to support the creation of gMSAs.To complete this task, sign in the required computer or computers.
Getting Started with Group Managed Service AccountsPreparing the domain Perform these steps to prepare the domain:Step 1: Run ADPrep /domainPrepYou will then see:Note: Active Directory Domain Service requirementsThe Active Directory schema in the gMSA domain's forest needs to be updated to Windows Server 2012 to create a gMSA.*-> You can update the schema by installing a domain controller that runs Windows Server 2012 or by running the version of adprep.exe from a computer running Windows Server 2012 . The object-version attribute value for the object CN=Schema,CN=Configuration,DC=Contoso,DC=Com must be 52.
https://learn.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts https://www.koolaid.info/dude-wheres-my-managed-service-accounts/
Post your Comments and Discuss Microsoft AZ-800 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-800 content, but please register or login to continue.