AZ-802 Practice Test 9 — 10 Questions

Question 1

You are preparing to onboard a sensitive on-premises Windows Server to Azure Arc. You want to ensure the traffic is as secure as possible. Which THREE actions should you take? (Choose three.)

Accepted Answer

Configure an Azure Private Link Scope.. To maximize security for hybrid connectivity, you must minimize the attack surface by using a private endpoint, enforcing modern authentication, and restricting outbound access. Private Link ensures traffic never traverses the public internet, Managed Identities prevent static credential leakage, and limiting outbound access via a proxy or firewall ensures that the agent only communicates with known, required Azure service endpoints, reducing the risk of data exfiltration.

Answer

Disable the Windows Firewall on the server.

Answer

Store the agent's registration token in a local text file.

Question 2

You are troubleshooting an issue where an Azure Arc-enabled server is showing as 'Offline' in the Azure portal, despite the server being powered on. Which local service should you check first to ensure the agent is running?

Accepted Answer

Azure Connected Machine Agent service (himds). The Azure Connected Machine agent relies on the 'himds' (Hybrid Instance Metadata Service) to function. If this service is stopped, the server loses its heartbeat to the Azure control plane, causing it to appear as offline. Checking this service status is the most direct way to identify if the agent software has crashed or been disabled, which is the most common cause of communication gaps.

Answer

Windows Update service

Answer

Server Manager

Answer

Network Location Awareness service

Question 3

You are troubleshooting an issue where an Azure Arc-enabled server is showing a status of 'Offline' in the Azure portal. Which TWO logs or files should you inspect on the Windows Server? (Choose two.)

Accepted Answer

C:\ProgramData\AzureConnectedMachineAgent\Log\himds.log. The agent's health is documented in the agent's log file ('himds.log') and the Windows Event Viewer. The 'himds.log' provides the most granular details regarding the agent's handshake, heartbeat, and API connectivity to the Azure endpoints. The Application and System event logs in Windows are essential for identifying underlying OS-level issues, such as certificate store errors or network interface failures that prevent the agent from reaching the required endpoints.

Answer

C:\Windows\System32\drivers\etc\hosts

Answer

C:\Windows\System32\config\SAM

Answer

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys

Question 4

You are creating a new virtual machine on a Hyper-V host. You decide to use the VHDX file format for the virtual hard disks. Which THREE advantages does VHDX provide over the older VHD format? (Choose three.)

Accepted Answer

Support for virtual disks up to 64 TB in size.. The VHDX format was introduced to overcome the limitations of the original VHD format. It offers significant improvements in capacity, performance, and data integrity. Understanding these benefits is crucial for designing modern virtualization storage that can support large enterprise workloads and ensure resilience against unexpected power failures or system crashes.

Answer

Support for virtual disks up to 2 TB in size.

Answer

Compatibility with Windows Server 2008 R2 hosts.

Question 5

You are managing a Windows Server 2022 server that needs to access a storage array on a different subnet. You notice the server is not reaching the storage controller. Which PowerShell command should you use to add a permanent persistent route to the storage network?

Accepted Answer

New-NetRoute. The New-NetRoute cmdlet is the standard PowerShell method to add routes to the Windows routing table. By specifying the -DestinationPrefix and the -NextHop, you instruct the OS on how to route traffic to the storage network. Using the -PolicyStore command ensures that the route is persistent across system reboots, which is critical for storage connectivity stability.

Answer

Add-NetNeighbor

Answer

Set-NetIPInterface

Answer

New-NetIPAddress

Question 6

An organization uses an on-premises Active Directory Domain Services (AD DS) environment and an Azure subscription. The IT team needs to ensure that on-premises clients can resolve names for resources hosted in an Azure Private DNS zone. Which component should be implemented to facilitate this specific name resolution path without deploying custom DNS servers in Azure?

Accepted Answer

Azure DNS Private Resolver Inbound Endpoint. Hybrid name resolution requires a bridge between on-premises DNS servers and Azure Private DNS zones. The Azure DNS Private Resolver provides a managed service that allows on-premises DNS queries to be forwarded to an inbound endpoint. This architecture eliminates the need for maintaining custom-built DNS forwarders on virtual machines, improving reliability and simplifying the administrative overhead for hybrid connectivity.

Answer

Azure Private Link

Answer

A standard Azure Public DNS Zone

Answer

Azure Application Gateway

Question 7

You are deploying IP Address Management (IPAM) on a Windows Server 2022 instance to manage your hybrid environment. You choose the Group Policy-based provisioning method. Which requirement must be met for the IPAM server to successfully manage the domain controllers and DHCP servers?

Accepted Answer

Invoke-IpamGpoProvisioning must be run with a unique GPO prefix.. IPAM requires specific permissions and firewall rules to collect data from managed servers. When using GPO-based provisioning, the IPAM server uses the GPOs to automate the configuration of these settings across the domain. Without the correct GPO prefix and security filtering, the managed servers will not allow the IPAM server to access their data.

Answer

The IPAM server must be a Domain Controller.

Answer

The GPOs must be manually linked to each individual server object.

Answer

The IPAM server must have the Web Server (IIS) role removed.

Question 8

Refer to the exhibit displaying the status of a DHCP failover relationship. A network administrator notices the 'CommunicationInterrupted' state. What is the immediate impact on DHCP clients that attempt to renew their leases while the server is in this state?

Accepted Answer

The server continues to renew leases for the duration of the MCLT.. In a DHCP failover configuration, the 'CommunicationInterrupted' state indicates that the two servers can no longer talk to each other. This state is designed to ensure continuity of service. Understanding how the Max Client Lead Time (MCLT) and server roles function during this interruption is critical for maintaining network availability.

Answer

Clients cannot renew leases and will lose connectivity immediately.

Answer

The server will grant new leases for the full scope duration.

Answer

The partner server automatically takes over all active leases.

Question 9

An administrator is managing a Hyper-V cluster with Scale-Out File Server (SOFS) storage. They want to prevent a single non-critical virtual machine from consuming all available storage bandwidth and affecting the performance of a production database VM. Which feature should be used?

Accepted Answer

Storage QoS Policy. Storage Quality of Service (QoS) provides a way to centrally monitor and manage storage performance for virtual machines. By creating and applying QoS policies, administrators can set minimum and maximum throughput and IOPS limits. This ensures that critical workloads receive the necessary resources while 'noisy neighbors' are restricted from impacting the overall health of the storage cluster.

Answer

Resource Pools

Answer

Storage Tiering

Answer

Virtual Fibre Channel

Question 10

An administrator is configuring a new storage pool on a Windows Server 2022 stand-alone server with four 4TB SATA drives. They need to create a virtual disk that can survive the failure of any single drive while providing the best possible write performance. Which resiliency type should they choose?

Accepted Answer

Two-way mirror. Selecting the right resiliency type involves balancing performance, capacity, and fault tolerance. For a four-drive system, mirroring and parity are the primary options. Mirroring is generally preferred for performance-sensitive workloads because it avoids the computational overhead of parity calculations, leading to faster write operations at the cost of reduced usable storage capacity compared to parity.

Answer

Simple

Answer

Parity

Answer

Three-way mirror