Free Preparation Discussions
MENU
Microsoft AZ-800 Exam Questions
Free Microsoft AZ-800 Exam Actual Questions
Note: Premium Questions for AZ-800 were last updated On Jul. 21, 2026 (see below)
You need to meet the technical requirements for the site links. Which users can perform the required tasks?
The AZ-800 content covering Active Directory Sites and Services clarifies that site, subnet, and site-link objects live in the Configuration partition. The guides emphasize that administration of the Configuration naming context is restricted to Enterprise Admins and to Domain Admins of the forest-root domain. In the context of changing replication topology parameters---such as editing the replication schedule on site links---the documentation notes: ''Only Enterprise Admins or administrators in the forest-root Domain Admins group have default permissions to modify site and site-link objects,'' because these objects affect replication forest-wide.
Applying this to the scenario:
Contoso\Admin1 (Enterprise Admins) has forest-wide rights to modify site links.
Contoso\Admin2 (Domain Admins in contoso.com, the forest-root domain) also has the required rights to change site-link schedules.
Canada\Admin3 (Domain Admins in canada.contoso.com) does not have default permissions in the Configuration partition for forest-wide site-link administration.
Thus, to meet the technical requirement to change all site links to a 30-minute schedule, the users who can perform the task are Admin1 and Admin2.
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.
You need to identify which server is the PDC emulator for the domain.
Solution: From a command prompt, you run netdom.exe query fsmo.
Does this meet the goal?
Within the Manage AD DS operations master roles (FSMO) section of the AZ-800 materials, Microsoft documents multiple supported methods to identify role holders. The guidance states that the command-line utility NETDOM can enumerate all FSMO roles with: netdom query fsmo. The output lists the Schema Master, Domain Naming Master, RID Master, PDC Emulator, and Infrastructure Master, each with the current role holder's FQDN. The course notes emphasize that this method is fast, non-interactive, and does not require specific MMC snap-ins, making it suitable for both Server Core and remote administration scenarios. Because the command returns the PDC Emulator holder explicitly in its results, running netdom.exe query fsmo does meet the goal of identifying which server is the PDC Emulator for the domain. This aligns with best practices for quick verification of FSMO placement during operations such as time service verification, password update convergence checks, or when planning FSMO transfers and seizures.
SIMULATION
Task 2
You plan to promote a domain controller named DC3 in a site in Seattle.
You need to ensure that DC3 only replicates with DC1 and DC2 between 8 pm and 6 AM.
TASK 2
Objective: Configure DC3 to replicate with DC1 and DC2 only between 8:00 PM and 6:00 AM.
Step-by-Step Guide: Replication Scheduling for DC3
Step 1: Promote DC3 to a Domain Controller (if not already done)
Use Server Manager or PowerShell to install the Active Directory Domain Services role and promote the server as a domain controller.
Example PowerShell command to install the AD DS role:
powershell
Copy
Install-WindowsFeature AD-Domain-Services
To promote:
powershell
Copy
Install-ADDSDomainController -DomainName 'contoso.com'
Step 2: Open Active Directory Sites and Services
Log in to DC3 or another DC with administrative tools.
Open Active Directory Sites and Services (dssite.msc).
Step 3: Locate the Site
In the left pane, expand the Sites container and find the site that contains DC3.
Expand the site to find Servers.
Under Servers, select DC3.
Step 4: Configure Replication Connection Objects
Expand DC3 and click on NTDS Settings.
In the right pane, you'll see connection objects to other domain controllers (these represent replication partners).
Step 5: Adjust the Replication Schedule for Each Connection
For each connection object to DC1 and DC2:
Right-click the connection object and select Properties.
Click the Change Schedule button.
Step 6: Set the Replication Schedule
In the schedule window, you'll see a grid of hours.
Clear all hours except the time window of 8 PM to 6 AM (in 1-hour blocks).
Select 8 PM to 6 AM (10 hours total) for all days.
Click OK to save.
Step 7: Verify and Document
Ensure that both connection objects (to DC1 and DC2) have the updated schedule.
Document your configuration as part of your environment's change control.
You have a server named Server1 that hosts Windows containers. You plan to deploy an application that will have multiple containers. Each container will be You need to create a Docker network that supports the deployment of the application. Which type of network should you create?
In the context of Windows Server Hybrid Core Infrastructure and container networking, choosing the correct network driver is critical for application deployment. According to official documentation, the l2bridge (Layer 2 Bridge) network mode is used when container hosts are connected to the same IP subnet. In this configuration, each container is assigned an IP address from the same prefix as the container host. All container traffic is bridged to the physical network through an external Hyper-V Virtual Switch. Because the containers share the same underlying network infrastructure as the host, they are visible to the rest of the physical network without requiring Network Address Translation (NAT).
The documentation specifies that for multi-node clusters or deployments where containers must be directly reachable on the physical network via their own IP addresses, l2bridge is the standard choice. This differs from NAT, which uses a private internal IP range and translates traffic through the host's IP, and Transparent mode, which is often used for individual hosts where the container is directly connected to the physical network but can have complexities in virtualized environments. l2tunnel is specifically used for Microsoft Cloud Stack (Azure Stack HCI) and SDN scenarios, typically involving encapsulation, which is not the standard requirement for a general multi-container application deployment on a single server unless specified. Therefore, for a high-performance, direct-access network that bridges traffic at Layer 2, l2bridge is the verified architectural choice for Windows containers.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are planning the deployment of DNS to a new network.
You have three internal DNS servers as shown in the following table.
The contoso.local zone contains zone delegations for east.conloso.local and west.contoso.local. All the DNS servers use root hints.
You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts.
Solution: On Server2 and Server3, you configure a conditional forwarder for contoso.local.
Does this meet the goal?
The DNS chapters in Administering Windows Server Hybrid Core Infrastructure describe conditional forwarders as a way to direct queries for specific namespaces to authoritative DNS servers. The text notes: ''A conditional forwarder forwards queries for a designated DNS domain to specified DNS servers,'' which is used to ''integrate split or private namespaces across sites or forests.'' In this design, Server1 hosts contoso.local and delegates east and west to Server2 and Server3. By configuring Server2 and Server3 with a conditional forwarder for contoso.local pointing to Server1, any query for contoso.local (including child names like east.contoso.local or west.contoso.local when not answered locally) is sent to Server1. Server1, being authoritative for the parent, uses the existing delegations to return referrals/answers from the proper child zones. For Internet hosts, all three servers already use root hints, which the course material confirms remains valid alongside conditional forwarding. The documentation also stresses that ''authoritative data is answered locally first; forwarding applies only to names the server is not authoritative for,'' so Server2 continues to answer east locally while leveraging Server1 to reach parent and sibling zones. This configuration ensures that all servers can resolve all internal namespaces and Internet hosts.
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Matthew Thompson
19 days agoAshley Murphy
24 days agoTiffany Garcia
2 months agoAnthony Lee
2 months agoFrank Young
3 months agoMelissa Ramirez
3 months agoJoseph Torres
3 months agoMelissa Roberts
3 months agoMichael Cook
3 months agoJeffrey Hernandez
3 months agoHeather Sanchez
2 months agoJenifer
4 months agoStephaine
4 months agoMiesha
4 months agoKallie
4 months agoMalcolm
5 months agoVirgilio
5 months agoLauna
5 months agoEmmanuel
5 months agoMaile
6 months agoMari
6 months agoMica
6 months agoStefanie
6 months agoBrinda
7 months agoFiliberto
7 months agoZena
7 months agoThaddeus
7 months agoZona
8 months agoAlyce
8 months agoAlishia
8 months agoCyril
8 months agoJustine
9 months agoJohanna
9 months agoBobbie
9 months agoBette
9 months agoJacquelyne
10 months agoSteffanie
10 months agoAvery
10 months agoJesus
10 months agoSherell
10 months agoRikki
11 months agoKasandra
11 months agoBernardine
11 months agoDorothea
1 year agoVicky
1 year agoLang
1 year agoNan
1 year agoStanton
1 year agoLavina
1 year agoIzetta
1 year agoShawna
1 year agoVallie
1 year agoAngelyn
1 year agoShaun
1 year agoBillye
1 year agoSharan
1 year agoAlberto
2 years agoTeddy
2 years agoBrande
2 years agoEvangelina
2 years agoJerry
2 years agoTitus
2 years agoJulene
2 years agoCharlene
2 years agoMalcolm
2 years agoWeldon
2 years agoSelma
2 years agoBuddy
2 years agoAlfred
2 years agoJesusita
2 years agoAnnabelle
2 years agoNell
2 years agoCammy
2 years agoZona
2 years agoPaulina
2 years agoBrock
2 years agoNohemi
2 years agoGlory
2 years agoRoselle
2 years agoStevie
2 years agoClaudia
2 years agoAlecia
2 years agoCecilia
2 years agoXochitl
2 years agoKenny
2 years ago