Microsoft AZ-800

You have an Azure subscription. The subscription contains 10 virtual machines that run Windows Server.

You need to manage the virtual machines from the Azure portal by using Windows Admin Center.

What should you do first?

You have a server that runs Windows Server.

You need to enable PowerShell remoting. The solution must maximize security.

Which port should you open?

You have a Microsoft Entra Domain Services domain named contoso.com

For the contoso.com domain, you need to configure the password settings.

What should you use?

Question 15 of 50

Your network contains an Active Directory Domain Services (AD DS) domain that contains a security group named Group1.

You need to enforce stronger password requirements for the members of Group1.The solution must meet the following requirements:

• Minimize the impact on users that are NOT members of Group1.
• Minimize administrative effort.

What should you do?

Your network contains a Microsoft Entra Domain Services domain. The domain contains 20 servers that run Windows Server.

You need to configure the password policy settings for local accounts on the servers. The solution must follow the principle of least privilege.

Which Group Policy Object (GPO) should you use?

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains 500 Windows client devices.

You need to deploy apps and enforce security settings on the Windows client devices. The solution must minimize administrative effort.

What should you use?

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains five domain controllers that run Windows Server and 500 Windows client devices.

You need to enforce minimum password requirements by using Group Policy.

Which two actions achieve the goal? Each correct answer presents a complete solution.

Your network contains an on-premises Active Directory Domain Services (AD DS) domain and a Microsoft Entra tenant.

You need to configure synchronization between the AD DS domain and the Microsoft Entra tenant.

What should you do?

Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com and a Microsoft Entra tenant named contoso.com that sync by using Microsoft Entra Connect.

Microsoft Entra Connect sync is configured to use pass-through authentication with seamless single sign-on (SSO).

You need to deploy a Microsoft Entra Domain Services domain named fabrikam.com that will be integrated with the Microsoft Entra tenant.

What should you do first?

Your network contains an on-premises Active Directory Domain Services (AD DS) domain that syncs with a Microsoft Entra tenant.

You need to ensure that when an on-premises user signs in to Microsoft Entra, the authentication request is validated by an on-premises AD DS domain controller. The solution must minimize administrative effort.

What should you enable?