AZ-800 Exam Prep Free – 50 Practice Questions to Get You Ready for Exam Day
Getting ready for the AZ-800 certification? Our AZ-800 Exam Prep Free resource includes 50 exam-style questions designed to help you practice effectively and feel confident on test day
Effective AZ-800 exam prep free is the key to success. With our free practice questions, you can:
- Get familiar with exam format and question style
- Identify which topics you’ve mastered—and which need more review
- Boost your confidence and reduce exam anxiety
Below, you will find 50 realistic AZ-800 Exam Prep Free questions that cover key exam topics. These questions are designed to reflect the structure and challenge level of the actual exam, making them perfect for your study routine.
Overview - Company Information - ADatum Corporation is a manufacturing company that has a main office in Seattle and two branch offices in Los Angeles and Montreal. Fabrikam Partnership - ADatum recently partnered with 2 company named Fabrikam, Inc. Fabrikam is a manufacturing company that has a main office in Boston and a branch office in Orlando. Both companies intend to collaborate on several joint projects. Existing Environment - ADatum AD DS Environment - The on-premises network of ADatum contains an Active Directory Domain Services (AD DS) forest named adatum.com. The forest contains two domains named adatum.com and east.adatum.com and the domain controllers shown in the following table.Fabrikam AD DS Environment - The on-premises network of Fabrikam contains an AD DS forest named fabrikam.com. The forest contains two domains named fabrikam.com and south.fabrikam.com. The fabrikam.com domain contains an organizational unit (OU) named Marketing. Server Infrastructure - The adatum.com domain contains the servers shown in the following table.
HyperV1 contains the virtual machines shown in the following table.
All the virtual machines on HyperV1 have only the default management tools installed. SSPace1 contains the Storage Spaces virtual disks shown in the following table.
Azure Resources - ADatum has an Azure subscription that contains an Azure AD tenant. Azure AD Connect is configured to sync the adatum.com forest with Azure AD. The subscription contains the virtual networks shown in the following table.
The subscription contains the Azure Private DNS zones shown in the following table.
The subscription contains the virtual machines shown in the following table.
All the servers are in a workgroup. The subscription contains a storage account named storage1 that has a file share named share1. Requirements - Planned Changes - ADatum plans to implement the following changes: • Sync Data1 to share1. • Configure an Azure runbook named Task1. • Enable Azure AD users to sign in to Server1. • Create an Azure DNS Private Resolver that has the following configurations: • Name: Private1 • Region: West US • Virtual network: VNet1 • Inbound endpoint: SubnetB • Enable users in the adatum.com domain to access the resources in the south.fabrikam.com domain. Technical Requirements - ADatum identifies the following technical requirements: • The data on SSPace1 must be available always. • DC2 must become the schema master if DC1 fails. • VM3 must be configured to enable per-folder quotas. • Trusts must allow access to only the required resources. • The users in the Marketing OU must have access to storage1. • Azure Automanage must be used on all supported Azure virtual machines. • A direct SSH session must be used to manage all the supported virtual machines on HyperV1. You need to ensure that Automanage meets the technical requirements. On which Azure virtual machines should you enable Automanage?
A. Server1 only
B. Server2 only
C. Server1 and Server2 only
D. Server2 and Server3 only
E. Server1 and Server4 only
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You are planning the deployment of DNS to a new network. You have three internal DNS servers as shown in the following table.The contoso.local zone contains zone delegations for east.contoso.local and west.contoso.local. All the DNS servers use root hints. You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts. Solution: On Server2, you create a conditional forwarder for west.contoso.local. On Server3, you create a conditional forwarder for east.contoso.local. Does this meet the goal?
A. Yes
B. No
SIMULATION - You need to create a group-managed service account (gMSA) named gMSA1 and make gMSA1 available on SRV1. To complete this task, sign in to the required computer or computers.
You need to meet the technical requirements for Server3. Which users can perform the required tasks?
A. Admin3 only
B. Admin1 and Admin3 only
C. Admin1 only
D. Admin1, Admin2, and Admin3
E. Admin1 and Admin2 only
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. You need to identify which server is the PDC emulator for the domain. Solution: From Active Directory Sites and Services, you right-click Default-First-Site-Name in the console tree, and then select Properties. Does this meet the goal?
A. Yes
B. No
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. You need to identify which server is the PDC emulator for the domain. Solution: From Active Directory Users and Computers, you right-click contoso.com in the console tree, and then select Operations Master. Does this meet the goal?
A. Yes
B. No
You have a Windows Server container host named Server1 and a container image named image1. You need to start a container from image1. The solution must run the container on a Hyper-V virtual machine. Which parameter should you specify when you run the docker run command?
A. –expose
B. –privileged
C. –runtime
D. –isolation
E. –entrypoint
Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three domains. Each domain contains 10 domain controllers. You plan to store a DNS zone in a custom Active Directory partition. You need to create the Active Directory partition for the zone. The partition must replicate to only four of the domain controllers. What should you use?
A. dnscmd.exe
B. Active Directory Sites and Services
C. Set-DnsServer
D. New-ADObject
HOTSPOT - Your network contains two VLANs for client computers and one VLAN for a datacenter. Each VLAN is assigned an IPv4 subnet. Currently, all the client computers use static IP addresses. You plan to deploy a DHCP server to the VLAN in the datacenter. You need to use the DHCP server to provide IP configurations to all the client computers. What is the minimum number of scopes and DHCP relays you should create? To answer, select the appropriate option the answer area. NOTE: Each correct selection is worth one point. Hot Area:
SIMULATION - You plan to promote a domain controller named DC3 in a site in Seattle. You need to ensure that DC3 only replicates with DC1 and DC2 between 8 PM and 6 AM. To complete this task, sign in the required computer or computers.
Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the objects shown in the following table.You plan to sync contoso.com with an Azure Active Directory (Azure AD) tenant by using Azure AD Connect. You need to ensure that all the objects can be used in Conditional Access policies. What should you do?
A. Select the Configure Hybrid Azure AD join option.
B. Change the scope of Group1 and Group2 to Global.
C. Clear the Configure device writeback option.
D. Change the scope of Group2 to Universal.
HOTSPOT - You have a Windows Server 2022 container host named Host1 and a container registry that contains the container images shown in the following table.You need to run the containers on Host1. Which isolation mode can you use for each image? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
HOTSPOT - You have an Active Directory Domain Services (AD DS) domain that contains the member servers shown in the following table.Server3 contains a data disk named Disk1 that has Data Deduplication installed. Disk1 contains the files shown in the following table.
Server3 fails. You need to recover the files on Disk1. Which files can you recover if you attach Disk1 to Server1, and which files can you recover if you attach Disk1 to Server2? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Overview - Company Information - ADatum Corporation is a manufacturing company that has a main office in Seattle and two branch offices in Los Angeles and Montreal. Fabrikam Partnership - ADatum recently partnered with 2 company named Fabrikam, Inc. Fabrikam is a manufacturing company that has a main office in Boston and a branch office in Orlando. Both companies intend to collaborate on several joint projects. Existing Environment - ADatum AD DS Environment - The on-premises network of ADatum contains an Active Directory Domain Services (AD DS) forest named adatum.com. The forest contains two domains named adatum.com and east.adatum.com and the domain controllers shown in the following table.
A. Zone1.com only
B. Zone2.com only
C. Zone1.com and Zone2.com only
D. Zone2.com and Zone3.com only
E. Zone1.com, Zone2.com, and Zone3.com
HOTSPOT - You have on-premises servers that run Windows Server as shown in the following table.You have an Azure file share named share1 that stores two files named File2.docx and File3.docx. You create an Azure File Sync sync group that includes the following endpoints: ✑ share1 ✑ D:Folder1 on Server1 ✑ D:Data1 on Server2 For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
DRAG DROP - Your network contains an Active Directory domain named contoso.com. The domain contains group managed service accounts (gMSAs). You have a server named Server1 that runs Windows Server and is in a workgroup. Server1 hosts Windows containers. You need to ensure that the Windows containers can authenticate to contoso.com. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
HOTSPOT - Your network contains three Active Directory Domain Services (AD DS) forests as shown in the following exhibit.The network contains the users shown in the following table.
The network contains the security groups shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise. select No. NOTE: Each correct selection is worth one point. Hot Area:
HOTSPOT - You have an on-premises DNS server named Server1 that runs Windows Server. Server1 hosts a DNS zone named fabnkam.com. You have an Azure subscription that contains the resources shown in the following table.You need to design a solution that will automatically resolve the names of any PaaS resources for which you configure private endpoints in Vnet1. How should you configure the name resolution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using DEFAULTIPSITELINK. You open a new branch office that contains only client computers. You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1. Solution: You create an organization unit (OU) that contains the client computers in the branch office. You configure the Try Next Closest Site Group Policy Object (GPO) setting in a GPO that is linked to the new OU. Does this meet the goal?
A. Yes
B. No
You plan to deploy a containerized application that requires .NET Core. You need to create a container image for the application. The image must be as small as possible. Which base image should you use?
A. Windows Server
B. Nano Server
C. Windows
D. Server Core
HOTSPOT - Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains the sites and site links shown in the following exhibit.The sites contain the bridgehead domain controllers shown in the following table.
The IP intersite transport container is configured as shown in the following exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
HOTSPOT - You need to configure Azure File Sync to meet the file sharing requirements. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:
You have an on-premises server named Server1 that runs Windows Server. You have an Azure virtual network that contains an Azure virtual network gateway. You need to connect only Server1 to the Azure virtual network. What should you use?
A. a Site-to-Site VPN
B. Azure Network Adapter
C. an ExpressRoute circuit
D. Azure Extended Network
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the resources shown in the following table.You plan to replicate a volume from Server1 to Server2 by using Storage Replica. You need to configure Storage Replica. Where should you install Windows Admin Center?
A. Server1
B. CLIENT1
C. DC1
D. Server2
You have an Azure virtual machine named VM1 that has a private IP address only. You configure the Windows Admin Center extension on VM1. You have an on-premises computer that runs Windows 11. You use the computer for server management. You need to ensure that you can use Windows Admin Center from the Azure portal to manage VM1. What should you configure?
A. an Azure Bastion host on the virtual network that contains VM1.
B. a VPN connection to the virtual network that contains VM1.
C. a private endpoint on the virtual network that contains VM1.
D. a network security group (NSG) rule that allows inbound traffic on port 443.
You have five file servers that run Windows Server. You need to block users from uploading video files that have the .mov extension to shared folders on the file servers. All other types of files must be allowed. The solution must minimize administrative effort. What should you create?
A. a Dynamic Access Control central access policy
B. a data loss prevention (DLP) policy
C. a Dynamic Access Control central access rule
D. a file screen
DRAG DROP - You deploy a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. You deploy five servers to the domain. You add the servers to a group named ITFarmHosts. You plan to configure a Network Load Balancing (NLB) cluster named NLBCluster.contoso.com that will contain the five servers. You need to ensure that the NLB service on the nodes of the cluster can use a group managed service account (gMSA) to authenticate. Which three PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order. Select and Place:
HOTSPOT - Your network contains an Active Directory Domain Services (AD DS) domain named adatum.com. The domain contains a file server named Server1 and three users named User1, User2, and User3. Server1 contains a shared folder named Share1 that has the following configurations:The share permissions for Share1 are configured as shown in the Share Permissions exhibit.
Share1 contains a file named File1.bxt. The advanced security settings for File1.txt are configured as shown in the File Permissions exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
HOTSPOT - Overview - Company Information - ADatum Corporation is a manufacturing company that has a main office in Seattle and two branch offices in Los Angeles and Montreal. Fabrikam Partnership - ADatum recently partnered with 2 company named Fabrikam, Inc. Fabrikam is a manufacturing company that has a main office in Boston and a branch office in Orlando. Both companies intend to collaborate on several joint projects. Existing Environment - ADatum AD DS Environment - The on-premises network of ADatum contains an Active Directory Domain Services (AD DS) forest named adatum.com. The forest contains two domains named adatum.com and east.adatum.com and the domain controllers shown in the following table.
HOTSPOT - Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a child domain named east.contoso.com. In the contoso.com domain, you create two users named Admin1 and Admin2. You need to ensure that the users can perform the following tasks: ✑ Admin1 can create and manage Active Directory sites. ✑ Admin2 can deploy domain controllers to the east.contoso.com domain. The solution must use the principle of least privilege. To which group should you add each user? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:
You have an Azure virtual machine named VM1 that runs Windows Server. You perform the following actions on VM1: ✑ Create a folder named Folder1 on volume C. ✑ Create a folder named Folder2 on volume D. ✑ Add a new data disk to VM1 and create a new volume that is assigned drive letter E. ✑ Install an app named App1 on volume E. You plan to resize VM1. Which objects will present after you resize VM1?
A. Folder1, volume E, and App1 only
B. Folder1 only
C. Folder1 and Folder2 only
D. Folder1, Folder2, App1, and volume E
You need to meet the technical requirements for Server1. Which users can currently perform the required tasks?
A. Admin3 only
B. Admin1 and Admin3 only
C. Admin1 only
D. Admin1, Admin2, and Admin3
SIMULATION - You need to ensure that you can manage SRV1 remotely by using PowerShell. To complete this task, sign in to the required computer or computers.
SIMULATION - You need to ensure that SRV1 only leases IP addresses from the range of 192.168.1.190 to 192.168.1.200 to computers that have a MAC address that starts with aabb. To complete this task, sign in the required computer or computers.
You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. The on-premises network is connected to Azure by using a Site-to-Site VPN. You have the DNS zones shown in the following table.You need to ensure that names from fabrikam.com can be resolved from the on-premises network. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A. Create a stub zone for fabrikam.com on DC1.
B. Create a conditional forwarder for fabrikam.com on DC1.
C. Create a secondary zone for fabrikam.com on DC1.
D. Deploy an Azure virtual machine that runs Windows Server. Modify the DNS Servers settings for the virtual network.
E. Deploy an Azure virtual machine that runs Windows Server. Configure the virtual machine as a DNS forwarder.
SIMULATION - You plan to delegate the management of a DNS zone named fabrikam.com located on DC1 to the BranchAdmins group. You need to ensure that you can grant permissions to the fabikam.com zone. To complete this task, sign in the required computer or computers.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using DEFAULTIPSITELINK. You open a new branch office that contains only client computers. You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1. Solution: You create a new subnet object that is associated to Site1. Does this meet the goal?
A. Yes
B. No
HOTSPOT - You need to sync files from an on premises server named Server1 to Azure by using Azure File Sync. You have a cloud tiering policy that is configured for 30 percent free space and 70 days. Volume E on Server1 is 500 GB. A year ago, you configured E:Data on Server1 to sync by using Azure File Sync. The files that are visible in E:Data are shown in the following table.Volume E does NOT contain any other files. Where are File1 and File3 located? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:
SIMULATION - You need to ensure that the Azure file share named share1 can sync to on-premises servers. The required source files are located in a folder named dc1.contoso.cominstall. You do NOT need to specify the on-premises servers at this time. To complete this task, sign in the required computer or computers.
DRAG DROP - You have a server named Server1 that runs Windows Server and has the Active Directory Federation Services role installed. You plan to deploy Web Application Proxy to a server named Server2. You export the Active Directory Federation Services (AD FS) certificate from Server1. Which actions should you perform on Server2 in sequence? To answer, drag the appropriate actions to the correct order. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.
You have an Azure virtual machine named VM1 that runs Windows Server and has the following configurations: ✑ Size: D2s_v4 ✑ Operating system disk: 127-GiB standard SSD ✑ Data disk 128-GiB standard SSD ✑ Virtual machine generation: Gen 2 You plan to perform the following changes to VM1: ✑ Change the virtual machine size to D4s_v4. ✑ Detach the data disk. ✑ Add a new standard SSD. Which changes require downtime for VM1?
A. Detaching the data disk only and adding a new standard SSD.
B. Detaching the data disk only.
C. Changing the virtual machine size only.
D. Adding a new standard SSD only.
HOTSPOT - You have an Azure subscription named sub1 and 500 on-premises virtual machines that run Windows Server. You plan to onboard the on-premises virtual machines to Azure Arc by running the Azure Arc deployment script. You need to create an identity that will be used by the script to authenticate access to sub1. The solution must use the principle of least privilege. How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:
HOTSPOT - Your network contains two Active Directory Domain Services (AD DS) forests named contoso.com and fabrikam.com. A two-way forest trust exists between the forests. Each forest contains a single domain. The domains contain the servers shown in the following table.You need to configure resource based constrained delegation so that the users in contoso.com can use Windows Admin Center on Server1 to connect to Server2. How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:
SIMULATION - You need to collect the recommended Windows Performance Counters from SRV1 in a Log Analytics workspace. The required files are stored in a shared folder named dc1install. To complete this task, sign in to the required computer or computers.
Your network contains a DHCP server. You plan to add a new subnet and deploy Windows Server to the subnet. You need to use the server as a DHCP relay agent. Which role should you install on the server?
A. Network Policy and Access Services
B. Remote Access
C. Network Controller
D. DHCP Server
You have servers that have the DNS Server role installed. The servers are configured as shown in the following table.All the client computers in the New York office use Server2 as the DNS server. You need to configure name resolution in the New York office to meet the following requirements: ✑ Ensure that the client computers in New York can resolve names from contoso.com. ✑ Ensure that Server2 forwards all DNS queries for internet hosts to 131. 107.100.200. The solution must NOT require modifications to Server1. Which two components should you configure on Server2? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A. a forwarder
B. a conditional forwarder
C. a delegation
D. a secondary zone
E. a reverse lookup zone
DRAG DROP - You have a server named Server1. You plan to use Storage Spaces to expand the storage available to Server1. You attach eight physical disks to Server1. Four disks are HDDs and four are SSDs. You need to create a volume on Server1 that will use the storage on all the new disks. The solution must provide the fastest read performance for frequently used files. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:
DRAG DROP - You have a server named Server1 that has Windows Admin Center installed. The certificate used by Windows Admin Center was obtained from a certification authority (CA). The certificate expires. You need to replace the certificate. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:
HOTSPOT - You have a Windows Server container host named Server1. You start the containers on Server1 as shown in the following table.You need to validate the status of ProcessA and ProcessC. Where can you verify that ProcessA and ProcessC are in a running state? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
SIMULATION - You need to configure SRV1 as a DNS server. SRV1 must be able resolve names from the contoso.com domain by using DC1. All other names must be resolved by using the root hint servers. To complete this task, sign in the required computer or computers.
Access Full AZ-800 Exam Prep Free
Want to go beyond these 50 questions? Click here to unlock a full set of AZ-800 exam prep free questions covering every domain tested on the exam.
We continuously update our content to ensure you have the most current and effective prep materials.
Good luck with your AZ-800 certification journey!