Renewal for Microsoft Certified: Windows Server Hybrid

Administrator Associate
Exam 2022/12/21
Question 1 of 28
You have an Azure subscription and an on-premises server named Server1 that runs Windows
Server.

You plan to onboard Server1 to Azure Arc.

What should you install on Server1?

Select only one answer.

▪ the Azure Monitor agent

▪ the Azure Virtual Machine Agent
▪ the Azure Connected Machine agent
▪ the Azure AD Connect provisioning agent

Question 2policy of 28
You have an Azure subscription and an on-premises server named Server1 that runs Windows
Server.

You need to ensure that you can assign an Azure policy to Server1.

What should you do?

Select only one answer.

▪ Onboard Server1 to Azure Arc.

▪ Install the Azure Monitoring agent on Server1.
▪ Onboard Server1 to Microsoft Defender for Endpoint.
▪ Install the Azure AD Connect provisioning agent on Server1.

Question 3 of 28
You plan to deploy a Windows Server Update Services (WSUS) server.

Which two ports does WSUS server use for distributing updates?

Select only one answer.

▪ 80 and 443
▪ 80 and 8080
▪ 8530 and 8531
▪ 8530 and 8080

Question 4 of 28
You plan to implement a Windows Server Update Services update management process in your
environment.

Which phase must you perform first?

Select only one answer.

▪ the identify phase

▪ the assess phase
▪ the deploy phase
▪ the evaluate and plan phase

Question 5 of 28

You have a server that runs Windows Server named Host1.

You need to install Docker.

Which cmdlet should you run on Host1?

Select only one answer.

▪ Install-Package
▪ Add-AppxPackage
▪ Add-SCServerFeature
▪ Install-WindowsFeature

Question 6 of 28
You have a Windows Server container host named Host1.

You plan to run containers named container1 and container2 on Host1.

You need to ensure that container1 and container2 do NOT share a process isolation.

Which parameter should you use with docker run?

Select only one answer.

▪ --isolation=process
▪ --isolation=hyperv
▪ --kernel-memory="4"
▪ --kernel-memory="16"

Question 7 of 28
You have a Windows Server container host named Host1.

You plan to create a container image named image1.

You need to run image1 on devices that have ARM processors.

Which base image should you use to create image1?

Select only one answer.

▪ Windows Server Core

▪ Nano Server
▪ Windows
▪ Windows Internet of Things (IoT) Core
Question 8 of 28
You have a Windows Server container host named Host1.

You plan to run process isolation mode containers on Host1.

Which resources will be shared between the containers on Host1?

Select only one answer.

▪ hardware only
▪ hardware and kernel only
▪ hardware and system resources only
▪ hardware, kernel, and system resources

Question 9 of 28
Your company has an Active Directory Domain Services (AD DS) domain and two branch offices.

You are planning the following deployment:

one VPN server per branch office

a central RADIUS server to provide centralized authentication and accounting

up to 30 simultaneous VPN connections per office

What is the minimum number of RADIUS clients that you must create?

Select only one answer.

▪ 1
▪ 2
▪ 60
▪ 62

Question 10 of 28
You have a server that runs Windows Server named Server1.

You plan to configure Server1 as a VPN server.

You need to ensure that if network connectivity is interrupted, VPN clients can resume their
connection when connectivity is restored.

Which VPN protocol should you use?

Select only one answer.

▪ PPTP
▪ L2TP/IPsec
▪ SSTP
▪ IKEv2
Question 11 of 28
Your company has three branch offices and a server that runs Windows Server named Server1.

You plan to implement a VPN server in every branch office.

You need to implement a RADIUS server on Server1 to provide central authentication and accounting
for the VPN servers.

Which role should you install on Server1?

Select only one answer.

▪ Active Directory Domain Services (AD DS)

▪ Device Health Attestation
▪ Network Controller
▪ Network Policy and Access Services
▪ Remote Access

Question 12 of 28
You have Active Directory Domain Services (AD DS) domain that includes a VPN server and a
certification authority (CA).

The CA issues certificates to following computers:

▪ Windows Server member server named VPN1 that has the VPN server role
▪ Windows 11 workgroup computer named Computer1 used by an employee to work from home
▪ Windows 10 domain-joined computer named Computer2 used by an employee who works from
a remote location
▪ a company owned Android device named Device1

Which computers trust certificate that is issued to VPN1 by default?

Select only one answer.

▪ Computer1 only
▪ Computer2 only
▪ Computer1 and Computer2 only
▪ Computer2 and Device1 only
▪ Computer1, Computer2 and Device1

Question 13 of 28
You have a server that runs Windows Server named Server1 in a perimeter network.

You install the Web Application Proxy role service on Server1.

Which tool should you use to configure the Web Application Proxy?

Select only one answer.

▪ Server Manager
▪ System Configuration
▪ Remote Access Management
▪ Internet Information Services (IIS) Manager
Question 14 of 28
You have an Azure storage account named acc1 that includes a file share named share1.

You need to access share1 from Windows clients by using a UNC path.

Which UNC path should you use on the clients?

Select only one answer.

▪ \acc1.azure.com\share1
▪ \share1.azure.com\acc1
▪ \acc1.file.core.windows.net\share1
▪ \share1.file.core.windows.net\acc1

Question 15 of 28

You plan to implement Azure File Sync.

On which resource can you configure cloud tiering?

Select only one answer.

▪ Sync group
▪ Cloud endpoint
▪ Server endpoint
▪ Storage sync service

Question 16 of 28
You have an Azure subscription and the following on-premises computers:

▪ Server1: Windows Server 2022

▪ Server2: Windows Server 2019
▪ Server3: Red Hat Linux
▪ Computer1: Windows 11

Which computers can host Azure File Sync server endpoints?

Select only one answer.

▪ Server1 only
▪ Server1 and Server2 only
▪ Server1, Server2 and Computer1 only
▪ Server1, Server2 and Server3 only
▪ Server1, Server2, Server3 and Computer1

Question 17 of 28
Which Windows Server functionality can be replaced by Azure File Sync?

Select only one answer.

▪ BranchCache
▪ Storage replicas
▪ DFS Replication
 ▪ Background Intelligent Transfer Service (BITS)

Question 18 of 28
You have an Azure file share named share1.

Users report they cannot connect to share1 from company computers.

You need to ensure that users can access share1 by using SMB protocol.

Which outbound port should you allow on the company firewall?

Select only one answer.

▪ 80
▪ 443
▪ 445
▪ 3389

Question 19 of 28
You have an Azure virtual machine named VM1.

You plan to enable Azure Disk Encryption for VM1.

Where must you store the encryption key for VM1?

Select only one answer.

▪ an Azure key vault

▪ an Azure storage account
▪ an Azure backup vault
▪ an Azure AD

Question 20 of 28
You have an Azure subscription that includes a virtual machine named VM1 and a key vault named
vault1.

Vault1 includes following keys:

• Key1: an RSA key with an RSA key size of 2048

• Key2: an RSA key with an RSA key size of 2048
• Key3: an EC key with a P-256 elliptic curve name

You plan to use Azure Disk Encryption for VM1.

Which keys can you use for the encryption?

Select only one answer.

▪ Key1 only
▪ Key2 only
▪ Key1 and Key2 only
▪ Key1, Key2 and Key3
Question 21 of 28
You have an Azure virtual machine named VM1. VM1 is protected by Azure Disk Encryption.

You need to back up VM1.

Which Azure resource must you create first?

Select only one answer.

▪ Data box
▪ Backup vault
▪ Storage account
▪ Recovery services vault

Question 22 of 28
You have an Active Directory Domain Service (AD DS) domain.

You plan to implement a failover cluster.

What is the maximum number of nodes the failover cluster can have?

Select only one answer.

▪ 8
▪ 16
▪ 32
▪ 64
▪ 256

Question 23 of 28
You have an Active Directory Domain Services (AD DS) domain and two branch offices.

You plan to create a stretch cluster.

What is the maximum allowed round-trip network latency between nodes in different sites?

Select only one answer.

▪ 1 ms
▪ 3 ms
▪ 5 ms
▪ 10 ms
▪ 25 ms

Question 24 of 28
You have a failover cluster that has following nodes:

• Node1: has the File Server role installed

• Node2: has the File Server role installed
• Node3: has the Storage Replica feature installed
• Node4: does NOT have any roles installed
You run Failover Cluster Manager on Node1 and you add a scale-out file server role named SoFS1
to Cluster1.

On which nodes can clients connect to SoFS1 shares?

Select only one answer.

▪ Node1 only
▪ Node1 and Node2 only
▪ Node1, Node2 and Node3 only
▪ Node1, Node2, Node3 and Node4

Question 25 of 28

You have an Active Directory Domain Services (AD DS) domain and two branch offices.

You plan to create a stretch cluster.

Which feature is used by stretch clusters?

Select only one answer.

▪ Storage Replica
▪ DFS Replication
▪ MultiPoint Services
▪ Data Center Bridging

Question 26 of 28
You have a failover cluster named Cluster1.

You plan to configure Cluster1 to use a cloud witness.

Which Azure resource must you create first?

Select only one answer.

▪ Network Watcher instance

▪ Storage account
▪ Managed identity
▪ an Azure AD enterprise application

Question 27 of 28
You have a server that runs Windows Server named Server1.

You need to use Packet Monitor on Server1 to perform packet monitoring.

Which tool should you use?

Select only one answer.

▪ Server Manager
▪ Resource Monitor
 ▪ Performance Monitor
▪ Windows Admin Center

Question 28 of 28

You have Azure virtual machines named VM1 and VM2.

You need to capture VM1 network traffic by using Network watcher.

Where can you store the captured traffic?

Select only one answer.

▪ Azure storage account and a Log Analytics workspace

▪ Azure storage account and a local disk on VM1
▪ Log Analytics workspace and a local disk on VM2
▪ a local disk on VM 1and a local disk on VM2

Question 4 of 28

You have an Azure subscription and an on-premises server named Server1 that runs Windows
Server.

You need to be able to use Azure Update Management to update Server1.

What should you implement in Azure?

Select only one answer.

a Logic app
Automanage
an Automation account
a Log Analytics workspace

Question 6 of 28

You have a Windows Server container host named Host1.

You plan to run a Linux container named container1 on Host1.

Which GUI tool can you use for managing container1?

Select only one answer.

Docker

Server Manager

Hyper-V Manager
Windows Admin Center

Question 9 of 28

You have a server that runs Windows Server named Server1.

You need to configure Server1 as a router.

Which role should you install on Server1?

Select only one answer.

MultiPoint Services

Network Controller

Network Policy and Access Services

Remote Access

Question 10 of 28

You have an Active Directory Domain Service (AD DS) domain that contains a server named
Server1. Server1 runs Windows Server and is in the perimeter network.

You need to configure Server1 as web application proxy.

Which role must you add to the network first?

Select only one answer.

Active Directory Certificate Services

Active Directory Federation Services

Network Controller

Network Policy and Access Services

Web Server (IIS)

Question 14 of 28

You have a hybrid Azure AD tenant named contoso.com and an Azure file share named share1.
Share1 uses identity-based authentication.
Your users have following computers:

a Windows 11 domain-joined computer named Computer1

a Windows 11 workgroup computer named Computer2
a Windows 10 domain-joined computer named Computer3
a Windows 10 workgroup computer named Computer4
From which computers can users access share1?

Select only one answer.

Computer1 only

Computer1 and Computer2 only

Computer1 and Computer3 only

Comuter1, Computer2 and Computer3 only

Computer1, Computer2, Computer3 and Computer4

Question 15 of 28

You have an Azure subscription and on-premises file servers that run Windows Server.

You plan to implement Azure File Sync.

What is the maximum number of cloud endpoints that you can add to an Azure File Sync group?

Select only one answer.

16

64

256

Unlimited

Question 18 of 28

You have an Azure AD tenant that includes a user named User1 and an Azure file share named
share1.
You need to assign User1 to the Storage File Data SMB Share Contributor role for share1.

What should you do first?

Select only one answer.

Enable soft delete.

Implement identity-based authentication.

Configure the security profile to Maximum compatibility.

Configure the security profile to Maximum security.

Question 20 of 28

You have an Azure subscription that includes following virtual machines:

VM1: A-Series Generation 1 virtual machine that runs Windows Server

VM2: A-Series Generation 1 virtual machine that runs Linux
VM3: D-Series Generation 2 virtual machine that runs Windows Server
VM4: D-Series Generation 2 virtual machine that runs Linux
For which virtual machines you can enable Azure Disk Encryption?

Select only one answer.

VM3 only

VM1 and VM2 only

VM3 and VM4 only

VM1 and VM3 only

VM1, VM2, VM3 and VM4

Question 23 of 28

You have an Active Directory Domain Services (AD DS) domain that includes Windows Server
member servers.

You plan to create a failover cluster.

Which tools can you use to create the failover cluster?

Select only one answer.

Server Manager and Failover Cluster Manager only

Windows PowerShell and Failover Cluster Manager only

Failover Cluster Manager and Windows Admin Center only

Windows PowerShell, Failover Cluster Manager and Windows Admin Center only

Server Manager, Failover Cluster Manager, Windows Admin Center, and Windows PowerShell

Question 27 of 28

Your network contains the following subnets:

*Subnet1: address space of 172.16.10.0/24

*Subnet2: address space of 192.168.10.0/24
The network contains the following computers:

*Comp11 with a network interface named NIC1 that has an IP address of 172.16.10.15 on Subnet1
*Comp12 with a network interface named NIC2 that has an IP address of 172.16.10.20 on Subnet1
*Comp13 with routing enabled, a network interface named NIC3 that has an IP address of
172.16.10.254 on Subnet1, and a network interface named NIC4 that has an IP address of
192.168.10.254 on Subnet2
*Comp21 with a network interface named NIC5 that has an IP address of 192.168.10.15 on
Subnet2

Comp11 has following network configuration:

IPv4 Address. . . . . . . . . . . : 172.16.10.15

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . :

Which network interfaces can you ping from Comp11?

Select only one answer.

NIC1 only

NIC1, NIC2 and NIC3 only

NIC1, NIC2, NIC3 and NIC4 only

NIC1, NIC2, NIC3, NIC4 and NIC5