Microsoft Azure

Administering Windows Server Hybrid Core Infrastructure

AZ-800

The AZ-800 exam assesses your skills in administering Windows Server hybrid core infrastructure.

147 questions 0 views Free
Start Mock Test Timed · Full-length · Scored

Questions 111–120 of 147

Q111

What happens when a network security group (NSG) rule denies inbound traffic to a virtual machine?

  • A Traffic is blocked only for specific ports
  • B All inbound traffic is blocked
  • C Traffic is logged for audit
  • D Traffic routes through a different network
Explanation An NSG deny rule blocks all specified inbound traffic; options A and D are incorrect as deny applies universally, not selectively, and logging is not implied.
Q112

Which feature optimizes Azure resources for cost savings?

  • A Azure Advisor
  • B Azure Resource Manager
  • C Azure Monitor
  • D Azure Functions
Explanation Azure Advisor provides recommendations that help optimize resources and reduce costs; the others do not specifically focus on cost optimization.
Q113

A company needs to establish a VPN connection between Azure and their on-premises network. Which Azure service is required?

  • A Azure Application Gateway
  • B Azure Virtual Network
  • C Azure ExpressRoute
  • D Azure Load Balancer
Explanation Azure ExpressRoute provides a dedicated private connection; the other options are unsuitable for establishing a VPN connection.
Q114

You are configuring Azure Active Directory Identity Protection. What happens if a user is at risk?

  • A User is blocked immediately.
  • B User receives a warning email.
  • C User's account is reviewed.
  • D User might require MFA.
Explanation The user's account may require multi-factor authentication to verify identity, while others do not action the risk appropriately.
Q115

Which Azure service is best for data analytics solutions?

  • A Azure Synapse Analytics
  • B Azure Blob Storage
  • C Azure Virtual Machines
  • D Azure Functions
Explanation Azure Synapse Analytics integrates big data and data warehousing, unlike the other options.
Q116

A company needs to securely manage secrets. What service should they use?

  • A Azure Key Vault
  • B Azure Active Directory
  • C Azure Blob Storage
  • D Azure DevTest Labs
Explanation Azure Key Vault is specifically designed for secrets management.
Q117

You are configuring an Azure Virtual Network. What happens if you set a subnet's address space to overlap with another subnet?

  • A Routing will fail
  • B Both subnets will function normally
  • C Overlapping is not allowed
  • D One subnet will be prioritized
Explanation Azure does not allow subnets with overlapping address spaces.
Q118

Which service should you use to deploy applications in a hybrid environment?

  • A Azure App Service
  • B Azure Blob Storage
  • C Azure Virtual Network
  • D Azure Functions
Explanation Azure App Service is designed for web applications deployment, while others serve different purposes.
Q119

A company needs to enforce multi-factor authentication for their administrative accounts. What should they enable?

  • A Azure AD Conditional Access
  • B Azure AD Connect
  • C Network Security Group
  • D Azure Policy
Explanation Azure AD Conditional Access allows enforcing multi-factor authentication, while others do not.
Q120

What happens when you disable a virtual network gateway in Azure?

  • A Traffic routed through the gateway fails
  • B All linked resources become inaccessible
  • C Gateway settings are deleted
  • D Routing tables are unchanged
Explanation Disabling the gateway will cause all traffic routed through it to fail, while other options are incorrect.