AZ-802 Implement and Manage On-Prem and Hybrid Networking — All Questions With Answers

Question 1

Your organization is implementing Software Defined Networking (SDN) using Windows Server 2022. You need to deploy a Network Controller to manage your infrastructure. Which TWO of the following tasks are prerequisites for the Network Controller deployment?

Accepted Answer

Provision a REST-based SSL certificate for secure communication.. Deploying a Network Controller requires a REST-based SSL certificate for secure communication (HTTPS) and a DNS entry for the controller's FQDN to allow management clients and SDN components to resolve the controller's address. Hyper-V is not required on the controller itself, and iSCSI/IPsec are not standard prerequisites for the controller deployment.

Answer

Install the Hyper-V role on the Network Controller virtual machine.

Answer

Configure an iSCSI target for the Controller's virtual disk storage.

Answer

Disable IPsec on all nodes managed by the Network Controller.

Question 2

Refer to the exhibit. You are troubleshooting a performance issue on a Windows Server 2022 Hyper-V host. The administrator reports intermittent network latency. Based on the output, what is the most likely cause of the network degradation?

Accepted Answer

The virtual switch is experiencing receive buffer overflows.. The 'DiscardedPacketsReceived' counter in Hyper-V performance monitoring specifically tracks packets dropped by the virtual switch because the receive buffer is full. This occurs when the host's CPU or the virtual switch cannot process incoming traffic at the rate it is arriving, leading to buffer exhaustion. The explanation should explicitly state that this counter is the definitive indicator of buffer overflows in the virtual switch context.

Answer

The network adapter is currently running in half-duplex mode.

Answer

The server has reached its maximum transmission unit (MTU) limit.

Answer

The network cable is faulty and causing physical layer interference.

Question 3

Refer to the exhibit. You are configuring a storage-heavy workload on Windows Server 2022. You want to enable high-speed network transfers between the host and the storage array. Based on the output, what should you do to leverage the hardware capabilities?

Accepted Answer

Install the Data Center Bridging (DCB) feature.. While the adapter supports RoCEv2, simply 'configuring' it is not the full picture. To leverage RDMA/RoCEv2 in Windows Server 2022, you must install the Data Center Bridging (DCB) feature first, as RoCEv2 requires a lossless Ethernet fabric (PFC/ETS) which is managed by DCB. Option C is a prerequisite for Option B to function correctly in a RoCEv2 environment.

Answer

Enable the iSCSI target role on the server.

Answer

Configure the network adapter to use the RoCEv2 protocol.

Answer

Update the network adapter firmware to the latest version.

Question 4

You are configuring a Windows Server 2022 virtual machine on a Hyper-V host. You need to ensure that the virtual machine's network traffic is isolated from other VMs on the same physical host. Which feature should you use?

Accepted Answer

VLAN tagging. Configuring a VLAN ID on the virtual network adapter settings of the virtual machine allows you to segment and isolate network traffic from other VMs on the same Hyper-V host that belong to different VLANs.

Answer

Virtual Subnet ID

Answer

MAC address spoofing protection

Answer

Hyper-V virtual switch extension

Question 5

Refer to the exhibit. The administrator reports that the server can communicate with devices on the 10.10.10.0/24 subnet but cannot reach the internet. What is the most likely issue based on the provided output?

Accepted Answer

The gateway device is not routing traffic to the internet.. If the default gateway is configured (0.0.0.0/0 -> 10.10.10.1) and local traffic works, the most common issue for 'cannot reach the internet' when the gateway is reachable is a DNS configuration issue or a lack of NAT/Internet access on the gateway. However, option C is a 'black box' answer that blames the infrastructure rather than the server configuration. If the question implies the server is configured correctly, C is plausible, but the explanation mentions DNS as a potential issue, making D a strong contender.

Answer

The server has an incorrect subnet mask.

Answer

The default gateway route is missing.

Answer

The DNS server is unreachable.

Question 6

You are managing a Windows Server 2022 environment and need to implement DHCP Failover for high availability. Which THREE conditions must be met to successfully establish a failover relationship?

Accepted Answer

Both servers must be members of the same Active Directory domain.. DHCP Failover requires that both servers are members of the same Active Directory domain (or both are in a workgroup, but they must be in the same forest/domain context for authorization). Option A is a requirement. Option D is incorrect because Load Balance mode is only one of two possible modes; Hot Standby is also valid, so requiring Load Balance is false.

Answer

Both servers must have an identical DHCP scope configuration.

Answer

The servers must be configured to use Load Balance mode.

Question 7

You are setting up a Windows Server 2022 Data Center as a multi-tenant gateway. You need to provide high availability for the gateway services. Which feature should you implement?

Accepted Answer

Failover Clustering with a Shared VHDX. In Windows Server 2022, to provide high availability for a multi-tenant gateway (RRAS), you must install the Remote Access role and configure it within a Failover Cluster. 'Gateway Cluster' is a descriptive term, not the technical feature name.

Answer

Network Load Balancing (NLB) cluster

Answer

Gateway Cluster

Answer

Distributed File System (DFS) Replication

Question 8

You are deploying a new virtual machine on a Windows Server 2022 Hyper-V host. You want to ensure that the VM can communicate on the network without having its own dedicated physical network card. What should you configure?

Accepted Answer

A Virtual Switch. While 'A Virtual Switch' is the general category, the stem specifically asks for the VM to communicate on the network (implying external network access). An 'External' Virtual Switch is the specific configuration required to allow VMs to share a physical NIC to access the host's network. The current explanation mentions 'External' but the option A is generic.

Answer

A Private Virtual Switch

Answer

An Internal Virtual Switch

Answer

Network Adapter Teaming

Question 9

Refer to the exhibit showing a partial JSON configuration for an Azure DNS Private Resolver. A Windows Server administrator needs to configure on-premises DNS servers to resolve Azure resources. What is the most critical step to perform on the on-premises DNS server to utilize this configuration?

Accepted Answer

Create a Conditional Forwarder for the Azure zone pointing to 10.0.0.4.. The exhibit displays an Inbound Endpoint configuration for the Azure DNS Private Resolver, which provides a specific private IP address (10.0.0.4) within the VNet. To enable hybrid resolution, the on-premises DNS server must be told specifically which queries should be sent to this IP address to reach the Azure Private DNS zones.

Answer

Configure a Root Hint pointing to the 10.0.0.4 IP address.

Answer

Enable DNSSEC validation for the 10.0.0.4 IP address.

Answer

Add 10.0.0.4 as a secondary DNS server in the client IP settings.

Question 10

An organization plans to use Azure Extended Network to migrate virtual machines (VMs) from an on-premises data center to Azure while keeping their original IP addresses. Which TWO components are mandatory for this implementation?

Accepted Answer

An on-premises virtual machine running the Azure Extended Network tool.. Azure Extended Network requires a Windows Admin Center gateway to manage the extension and an on-premises virtual machine (the Azure Extended Network agent) to act as the local VXLAN tunnel endpoint. The explanation should explicitly state that these two components are the mandatory requirements for the solution.

Answer

An Azure Virtual Network Gateway with the Basic SKU.

Answer

An Azure ExpressRoute circuit with Global Reach enabled.

Answer

A public IP address assigned to every migrated VM.

Question 11

You are configuring a Windows Server 2022 instance to act as a router between two subnets. You have enabled IP forwarding, but traffic is not passing between the subnets. Which PowerShell cmdlet should you use to verify if the routing table is correctly identifying the local interface routes?

Accepted Answer

Get-NetRoute. The Get-NetRoute cmdlet is essential for inspecting the IPv4 and IPv6 routing tables on Windows Server. It allows administrators to verify that the destination network is reachable via the correct interface and gateway. Misconfigured routes are a primary cause of packet loss in multi-homed server environments, and this tool provides the granular visibility needed to troubleshoot connectivity issues between internal subnets.

Answer

Get-NetIPAddress

Answer

Test-NetConnection

Answer

Get-NetAdapter

Question 12

You are managing a hybrid cloud environment and need to connect an on-premises Windows Server 2022 to an Azure Virtual Network. Which service should you implement to provide a secure, persistent, and encrypted tunnel over the public internet?

Accepted Answer

Azure Site-to-Site VPN. A Site-to-Site VPN is the standard solution for connecting on-premises infrastructure to Azure over the internet using an IPsec/IKE tunnel. It provides a secure, encrypted path for traffic, ensuring that data moving between the local data center and the cloud remains protected. This is the most common deployment scenario for hybrid connectivity where a dedicated line like ExpressRoute is not financially feasible.

Answer

Azure ExpressRoute

Answer

Remote Access Server (RAS) Gateway

Answer

Azure Point-to-Site VPN

Question 13

You are tasked with securing network traffic in a Windows Server 2022 environment using Windows Firewall with Advanced Security. Which TWO actions are required to allow traffic only from a specific trusted application while blocking all other incoming connections?

Accepted Answer

Create an inbound rule that allows connections for the specific application executable.. Securing a server involves both positive and negative enforcement. By creating a specific inbound rule for the trusted application, you permit necessary traffic, while a default deny policy ensures that no other unsolicited traffic reaches the server. This combination effectively implements the principle of least privilege, reducing the attack surface by ensuring that only authorized communication flows are allowed through the firewall boundaries.

Answer

Configure the firewall to drop all outbound traffic by default.

Answer

Enable IPsec encryption for the specific application rule.

Answer

Disable the Windows Firewall and use a third-party appliance.

Question 14

You are managing a Windows Server 2022 server that needs to access a storage array on a different subnet. You notice the server is not reaching the storage controller. Which PowerShell command should you use to add a permanent persistent route to the storage network?

Accepted Answer

New-NetRoute. The New-NetRoute cmdlet is the standard PowerShell method to add routes to the Windows routing table. By specifying the -DestinationPrefix and the -NextHop, you instruct the OS on how to route traffic to the storage network. Using the -PolicyStore command ensures that the route is persistent across system reboots, which is critical for storage connectivity stability.

Answer

Add-NetNeighbor

Answer

Set-NetIPInterface

Answer

New-NetIPAddress

Question 15

You are deploying a Windows Server 2022-based Gateway server for a hybrid network. The gateway must perform Network Address Translation (NAT) for a private subnet. Which feature should you enable?

Accepted Answer

Routing and Remote Access (RRAS). The Remote Access role in Windows Server 2022 includes the NAT functionality required to route traffic from a private network to a public one. By enabling NAT within the Routing and Remote Access Service (RRAS), the server masks the private IP addresses of the internal clients, allowing them to access the internet through a single public IP address assigned to the gateway's external interface.

Answer

DHCP Server role

Answer

Network Policy Server (NPS)

Answer

Hyper-V Network Virtualization

Question 16

You are monitoring network utilization on a Windows Server 2022 node. You notice consistently high CPU usage when transferring large amounts of data over the network. Which feature can you enable to offload this processing and improve performance?

Accepted Answer

Receive Side Scaling (RSS). Receive Side Scaling (RSS) is a technology that allows the network stack to distribute incoming network traffic processing across multiple CPU cores. By offloading this task, the server can handle higher network throughput without overloading a single core, which is critical for high-traffic servers. This reduces CPU bottlenecks and ensures that the server can scale its networking capabilities to meet increasing demand efficiently.

Answer

Virtual Machine Queue (VMQ)

Answer

IPsec Task Offloading

Answer

Network Load Balancing (NLB)

Question 17

An organization uses an on-premises Active Directory Domain Services (AD DS) environment and an Azure subscription. The IT team needs to ensure that on-premises clients can resolve names for resources hosted in an Azure Private DNS zone. Which component should be implemented to facilitate this specific name resolution path without deploying custom DNS servers in Azure?

Accepted Answer

Azure DNS Private Resolver Inbound Endpoint. Hybrid name resolution requires a bridge between on-premises DNS servers and Azure Private DNS zones. The Azure DNS Private Resolver provides a managed service that allows on-premises DNS queries to be forwarded to an inbound endpoint. This architecture eliminates the need for maintaining custom-built DNS forwarders on virtual machines, improving reliability and simplifying the administrative overhead for hybrid connectivity.

Answer

Azure Private Link

Answer

A standard Azure Public DNS Zone

Answer

Azure Application Gateway

Question 18

You are configuring DHCP failover between two Windows Server 2022 nodes named Server1 and Server2 to ensure high availability for a critical subnet. Which TWO failover modes are available for selection during the configuration wizard?

Accepted Answer

Load Balance. Windows Server DHCP failover provides two distinct modes to ensure that IP address leasing remains operational if one server fails. Choosing the correct mode depends on whether the administrator wants both servers to actively lease addresses simultaneously or have one server remain idle until a failure event occurs within the network environment.

Answer

Active-Passive Cluster

Answer

Split-Scope

Answer

Distributed Relay

Question 19

You are deploying IP Address Management (IPAM) on a Windows Server 2022 instance to manage your hybrid environment. You choose the Group Policy-based provisioning method. Which requirement must be met for the IPAM server to successfully manage the domain controllers and DHCP servers?

Accepted Answer

Invoke-IpamGpoProvisioning must be run with a unique GPO prefix.. IPAM requires specific permissions and firewall rules to collect data from managed servers. When using GPO-based provisioning, the IPAM server uses the GPOs to automate the configuration of these settings across the domain. Without the correct GPO prefix and security filtering, the managed servers will not allow the IPAM server to access their data.

Answer

The IPAM server must be a Domain Controller.

Answer

The GPOs must be manually linked to each individual server object.

Answer

The IPAM server must have the Web Server (IIS) role removed.

Question 20

You are managing a Windows Server 2022 DNS server. You need to implement DNS policies to ensure that queries for 'www.contoso.com' are resolved to different IP addresses based on the client's subnet. Which DNS policy component should you create first to define the client groupings?

Accepted Answer

DNS Server Client Subnet. DNS policies in Windows Server allow for intelligent traffic management by tailoring responses based on various criteria. To achieve location-based or subnet-based resolution, the server must first be able to identify which subnet a client belongs to. This is the foundational step before any resolution logic or policies can be applied.

Answer

DNS Server Zone Scope

Answer

DNS Server Recursion Scope

Answer

DNS Server Query Resolution Policy

AZ-802 Implement and Manage On-Prem and Hybrid Networking — All Questions With Answers

Your organization is implementing Software Defined Networking (SDN) using Windows Server 2022. You need to deploy a Network Controller to manage your infrastructure. Which TWO of the following tasks are prerequisites for the Network Controller deployment?

Refer to the exhibit. You are troubleshooting a performance issue on a Windows Server 2022 Hyper-V host. The administrator reports intermittent network latency. Based on the output, what is the most likely cause of the network degradation?

Exhibit

Refer to the exhibit. You are configuring a storage-heavy workload on Windows Server 2022. You want to enable high-speed network transfers between the host and the storage array. Based on the output, what should you do to leverage the hardware capabilities?

Exhibit

You are configuring a Windows Server 2022 virtual machine on a Hyper-V host. You need to ensure that the virtual machine's network traffic is isolated from other VMs on the same physical host. Which feature should you use?

Refer to the exhibit. The administrator reports that the server can communicate with devices on the 10.10.10.0/24 subnet but cannot reach the internet. What is the most likely issue based on the provided output?

Exhibit

You are managing a Windows Server 2022 environment and need to implement DHCP Failover for high availability. Which THREE conditions must be met to successfully establish a failover relationship?

You are setting up a Windows Server 2022 Data Center as a multi-tenant gateway. You need to provide high availability for the gateway services. Which feature should you implement?

You are deploying a new virtual machine on a Windows Server 2022 Hyper-V host. You want to ensure that the VM can communicate on the network without having its own dedicated physical network card. What should you configure?

Refer to the exhibit showing a partial JSON configuration for an Azure DNS Private Resolver. A Windows Server administrator needs to configure on-premises DNS servers to resolve Azure resources. What is the most critical step to perform on the on-premises DNS server to utilize this configuration?

Exhibit

An organization plans to use Azure Extended Network to migrate virtual machines (VMs) from an on-premises data center to Azure while keeping their original IP addresses. Which TWO components are mandatory for this implementation?

You are configuring a Windows Server 2022 instance to act as a router between two subnets. You have enabled IP forwarding, but traffic is not passing between the subnets. Which PowerShell cmdlet should you use to verify if the routing table is correctly identifying the local interface routes?

You are managing a hybrid cloud environment and need to connect an on-premises Windows Server 2022 to an Azure Virtual Network. Which service should you implement to provide a secure, persistent, and encrypted tunnel over the public internet?

You are tasked with securing network traffic in a Windows Server 2022 environment using Windows Firewall with Advanced Security. Which TWO actions are required to allow traffic only from a specific trusted application while blocking all other incoming connections?

You are managing a Windows Server 2022 server that needs to access a storage array on a different subnet. You notice the server is not reaching the storage controller. Which PowerShell command should you use to add a permanent persistent route to the storage network?

You are deploying a Windows Server 2022-based Gateway server for a hybrid network. The gateway must perform Network Address Translation (NAT) for a private subnet. Which feature should you enable?

You are monitoring network utilization on a Windows Server 2022 node. You notice consistently high CPU usage when transferring large amounts of data over the network. Which feature can you enable to offload this processing and improve performance?

You are configuring DHCP failover between two Windows Server 2022 nodes named Server1 and Server2 to ensure high availability for a critical subnet. Which TWO failover modes are available for selection during the configuration wizard?

You are deploying IP Address Management (IPAM) on a Windows Server 2022 instance to manage your hybrid environment. You choose the Group Policy-based provisioning method. Which requirement must be met for the IPAM server to successfully manage the domain controllers and DHCP servers?

You are managing a Windows Server 2022 DNS server. You need to implement DNS policies to ensure that queries for 'www.contoso.com' are resolved to different IP addresses based on the client's subnet. Which DNS policy component should you create first to define the client groupings?

Refer to the exhibit displaying the status of a DHCP failover relationship. A network administrator notices the 'CommunicationInterrupted' state. What is the immediate impact on DHCP clients that attempt to renew their leases while the server is in this state?

Exhibit

You need to provide a secure method for on-premises administrators to manage Azure SQL databases without exposing the database to the public internet. You want to ensure that traffic from the on-premises network stays within the private network space. Which solution should you implement?

You are troubleshooting a Windows Server DNS environment where stale resource records are not being removed, leading to name resolution errors. Which THREE conditions must be met for DNS scavenging to successfully delete a stale record?

AZ-802 Implement and Manage On-Prem and Hybrid Networking — All Questions With Answers

Your organization is implementing Software Defined Networking (SDN) using Windows Server 2022. You need to deploy a Network Controller to manage your infrastructure. Which TWO of the following tasks are prerequisites for the Network Controller deployment?

Refer to the exhibit. You are troubleshooting a performance issue on a Windows Server 2022 Hyper-V host. The administrator reports intermittent network latency. Based on the output, what is the most likely cause of the network degradation?

Exhibit

Refer to the exhibit. You are configuring a storage-heavy workload on Windows Server 2022. You want to enable high-speed network transfers between the host and the storage array. Based on the output, what should you do to leverage the hardware capabilities?

Exhibit

You are configuring a Windows Server 2022 virtual machine on a Hyper-V host. You need to ensure that the virtual machine's network traffic is isolated from other VMs on the same physical host. Which feature should you use?

Refer to the exhibit. The administrator reports that the server can communicate with devices on the 10.10.10.0/24 subnet but cannot reach the internet. What is the most likely issue based on the provided output?

Exhibit

You are managing a Windows Server 2022 environment and need to implement DHCP Failover for high availability. Which THREE conditions must be met to successfully establish a failover relationship?

You are setting up a Windows Server 2022 Data Center as a multi-tenant gateway. You need to provide high availability for the gateway services. Which feature should you implement?

You are deploying a new virtual machine on a Windows Server 2022 Hyper-V host. You want to ensure that the VM can communicate on the network without having its own dedicated physical network card. What should you configure?

Refer to the exhibit showing a partial JSON configuration for an Azure DNS Private Resolver. A Windows Server administrator needs to configure on-premises DNS servers to resolve Azure resources. What is the most critical step to perform on the on-premises DNS server to utilize this configuration?

Exhibit

An organization plans to use Azure Extended Network to migrate virtual machines (VMs) from an on-premises data center to Azure while keeping their original IP addresses. Which TWO components are mandatory for this implementation?

You are configuring a Windows Server 2022 instance to act as a router between two subnets. You have enabled IP forwarding, but traffic is not passing between the subnets. Which PowerShell cmdlet should you use to verify if the routing table is correctly identifying the local interface routes?

You are managing a hybrid cloud environment and need to connect an on-premises Windows Server 2022 to an Azure Virtual Network. Which service should you implement to provide a secure, persistent, and encrypted tunnel over the public internet?

You are tasked with securing network traffic in a Windows Server 2022 environment using Windows Firewall with Advanced Security. Which TWO actions are required to allow traffic only from a specific trusted application while blocking all other incoming connections?

You are managing a Windows Server 2022 server that needs to access a storage array on a different subnet. You notice the server is not reaching the storage controller. Which PowerShell command should you use to add a permanent persistent route to the storage network?

You are deploying a Windows Server 2022-based Gateway server for a hybrid network. The gateway must perform Network Address Translation (NAT) for a private subnet. Which feature should you enable?

You are monitoring network utilization on a Windows Server 2022 node. You notice consistently high CPU usage when transferring large amounts of data over the network. Which feature can you enable to offload this processing and improve performance?

You are configuring DHCP failover between two Windows Server 2022 nodes named Server1 and Server2 to ensure high availability for a critical subnet. Which TWO failover modes are available for selection during the configuration wizard?

You are deploying IP Address Management (IPAM) on a Windows Server 2022 instance to manage your hybrid environment. You choose the Group Policy-based provisioning method. Which requirement must be met for the IPAM server to successfully manage the domain controllers and DHCP servers?

You are managing a Windows Server 2022 DNS server. You need to implement DNS policies to ensure that queries for 'www.contoso.com' are resolved to different IP addresses based on the client's subnet. Which DNS policy component should you create first to define the client groupings?

Refer to the exhibit displaying the status of a DHCP failover relationship. A network administrator notices the 'CommunicationInterrupted' state. What is the immediate impact on DHCP clients that attempt to renew their leases while the server is in this state?

Exhibit

You need to provide a secure method for on-premises administrators to manage Azure SQL databases without exposing the database to the public internet. You want to ensure that traffic from the on-premises network stays within the private network space. Which solution should you implement?

You are troubleshooting a Windows Server DNS environment where stale resource records are not being removed, leading to name resolution errors. Which THREE conditions must be met for DNS scavenging to successfully delete a stale record?