AZ-800

Practice AZ-800 Exam

Is it difficult for you to decide to purchase Microsoft AZ-800 exam dumps questions? CertQueen provides FREE online Administering Windows Server Hybrid Core Infrastructure AZ-800 exam questions below, and you can test your AZ-800 skills first, and then decide whether to buy the full version or not. We promise you get the following advantages after purchasing our AZ-800 exam dumps questions.
1.Free update in ONE year from the date of your purchase.
2.Full payment fee refund if you fail AZ-800 exam with the dumps

Full AZ-800 Exam Dump Here

Latest AZ-800 Exam Dumps Questions

The dumps for AZ-800 exam was last updated on Apr 03,2026 .

Viewing page 1 out of 6 pages.

Viewing questions 1 out of 30 questions

Question#1

HOTSPOT
You have a server named Server1 that runs Windows Server and contains three volumes named C, D, and E.
Files are stored on Server1 as shown in the following table.

For volume D, Data Deduplication is enabled and set to General purpose file server.
You perform the following actions:
• Move File1 to volume D.
• Copy File2 to volume D and name the copy File4.
• Move File3 to volume E
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Explanation:
File1 is deduplicated after the deduplication job runs. C YES
File3 is deduplicated after the deduplication job runs. C NO
File4 is deduplicated after the deduplication job runs. C NO
The Administering Windows Server Hybrid Core Infrastructure materials explain that Data Deduplication operates per-volume and only processes files on volumes where the role is enabled. The guide states that deduplication “is applied only to NTFS/ReFS volumes on which the Data Deduplication role is enabled,” and that the General-purpose file server usage type applies default policies for typical data shares. It further specifies the file size limits: “Files smaller than 32 KB are not deduplicated; supported files are 32 KB up to multiple terabytes,” and clarifies that optimization jobs process eligible files during scheduled runs.
Applying those rules:
Volume D has Data Deduplication enabled (General-purpose). After moving File1 (500 KB) from C: to D:, it resides on a deduplicated volume and exceeds the minimum size threshold, so it will be deduplicated by the next optimization job.
File3 (1 MB) is moved off the deduplicated volume (to E:), and dedup only affects enabled volumes; therefore it will not be deduplicated.
File4 is a copy of File2 (10 KB) on D:. Because the file is smaller than the 32-KB minimum, it is not deduplicated even though it is on a deduplicated volume.
Thus the correct outcomes are YES for File1, NO for File3, and NO for File4.

Question#2

You need to ensure that access to storage1 for the Marketing OU users meets the technical requirements.
What should you implement?

A. Microsoft Entra Connect cloud sync

B. Active Directory Federation Services (AD FS)

C. Microsoft Entra Connect in staging mode

D. Microsoft Entra Connect in active mode

Explanation:
The Administering Windows Server Hybrid Core Infrastructure content notes that Microsoft Entra Connect cloud sync uses lightweight agents and supports synchronizing specific OUs from multiple forests into a single tenant. The guide highlights that cloud sync “is designed for multi-forest or cross-organization scenarios and allows scoping to selected OUs and groups,” enabling granular onboarding of just the identities you need. The requirement says “the users in the Marketing OU (in Fabrikam’s forest) must have access to storage1.” Granting access to Azure Files using Entra-based authorization requires that those users exist in the same Entra tenant. Cloud sync enables importing only the Fabrikam Marketing OU into A. Datum’s tenant without establishing full trust for all users. Azure AD Connect in active or staging mode would target the A. Datum Forest and isn’t intended for selectively bringing in a separate partner forest OU; AD FS is a federation solution and does not create tenant objects for ACLs on Azure resources like Azure Files. Therefore, implement Microsoft Entra Connect cloud sync and scope it to the Marketing OU to meet the requirement.

Question#3

HOTSPOT
You need to configure Azure File Sync to meet the file sharing requirements.
What should you do? To answer, select the appropriate options in the answer area. NOTE Each correct selection is worth one point.

Explanation:
In Azure File Sync architecture (covered in Administering Windows Server Hybrid Core Infrastructure under “Implement and manage storage solutions”), the fundamental design points are:
Sync group C “A sync group defines a sync topology. Each sync group contains exactly one cloud endpoint (an Azure file share) and one or more server endpoints.” A server endpoint is a folder on a registered Windows Server. A server can participate in multiple sync groups so long as the server endpoints are different paths.
Storage Sync Service C “The Storage Sync Service is the top-level resource that maintains server registrations and houses your sync groups.” A Windows Server registers to one Storage Sync Service at a time, and that service can contain many sync groups and many servers.
FS1 must sync with newyorkfiles and companyfiles; FS2 must sync with seattlefiles and companyfiles. Since one Storage Sync Service can host multiple sync groups and multiple servers, and a server must be registered to a single service, the most efficient design is a single Storage Sync Service containing all three sync groups and both servers.

Question#4

You need to configure remote administration to meet the security requirements.
What should you use?

A. just in time (JIT) VM access

B. Azure AD Privileged Identity Management (PIM)

C. the Remote Desktop extension for Azure Cloud Services

D. an Azure Bastion host

Explanation:
In the Administering Windows Server Hybrid Core Infrastructure materials (hybrid security and IaaS management), Just-In-Time (JIT) VM access from Microsoft Defender for Cloud is the prescribed way to require approval-based, time-bound Remote Desktop access to Azure VMs. The guide explains that JIT “locks down inbound traffic to management ports (for example, TCP/3389) and opens them only on request, for a limited time and only from approved source IPs.” Administrators request access; upon approval, Defender for Cloud creates a temporary NSG rule that expires automatically― you specify the maximum allowed window (e.g., 2 hours) and the ports. This matches the requirement: “Ensure that server administrators request approval before they can establish a Remote Desktop connection to an Azure virtual machine. If the request is approved, the connection must be established within two hours.” Alternatives don’t meet this: PIM governs Azure roles, not VM RDP port exposure; Azure Bastion provides secure RDP/SSH over TLS without public IPs but doesn’t provide approval/time-boxed gating; the Remote Desktop extension is for classic Cloud Services and not for policy-driven approval windows. JIT is the least-privilege, policy-enforced solution aligned with the exam’s hybrid security objectives.

Question#5

Your network contains an Active Directory Domain Services (AD DS) domain.
You plan to use Active Directory Administrative Center to create a new user named User1.
Which two attributes are required to create User1? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A. Password

B. Profile path

C. User SamAccountName logon

D. Full name

E. First name

F. User UPN logon

Explanation:
When creating users with Active Directory Administrative Center (ADAC), the New User workflow highlights the required attributes with indicators. The Administering Windows Server Hybrid Core Infrastructure materials note that ADAC uses a modern schema-driven form in which “Full name (CN)” and “User UPN logon” are the minimum required identity fields to create the object in the directory. The wizard auto-generates the sAMAccountName from the UPN by default (you can edit it), but sAMAccountName isn’t required to be manually entered to complete creation. Likewise, Password can be deferred depending on your provisioning pattern (for example, creating a disabled or pre-staged account or enforcing “User must change password at next logon”), and fields such as Profile path and First name are optional profile details. The guide explains that ADAC “derives the RDN from Full name” and relies on UPN as the primary modern logon attribute in Azure AD-connected/hybrid scenarios, ensuring uniqueness within the UPN suffix. Therefore, to successfully create User1 using ADAC without additional, non-mandatory properties, you must provide Full name and User UPN logon.

Exam Code: AZ-800 Q & A: 260 Q&As Updated: Apr 03,2026

Full AZ-800 Exam Dumps Here

Exam Code: AZ-800
Q & A: 260 Q&As
Updated: Apr 03,2026

About AZ-800 Dumps