AZ-800 Practice Questions

Administering Windows Server Hybrid Core Infrastructure

Read questions, check verified answers and discuss the reasoning. Use reading options to shape your revision, or switch to the simulator for timed practice.

View 92 free questions

92 questions in this view

Page 1 of 16

Question 1

Overview

Fabrikam, Inc. is a manufacturing company that has a main office in New York and a branch office in Seattle.

Existing Environment

On-premises Servers

The on-premises network contains servers that run Windows Server as shown in the following table.

Name	Configuration	Office
AADC1	Microsoft Entra Connect sync	New York
APP1	Application server	New York
APP2	Application server	Seattle
DC1	Domain controller	New York
DC2	Domain controller	Seattle
DHCP1	DHCP server	New York
DHCP2	DHCP server	Seattle
FS1	File server	New York
FS2	File server	Seattle
VM1	None	New York
VM2	None	Seattle
WEB1	Web server	New York
WEB2	Web server	Seattle

DC1 hosts all the operation master roles.

VM1 and VM2 are connected to the internet.

WEB1 and WEB2 run an Internet Information Services (IIS) web app named Webapp1.

On-premises Network

The New York and Seattle offices are connected by using redundant WAN links.

The client computers in each office get IP addresses from their local DHCP server.

DHCP1 contains a scope named Scope1 that has addresses for the New York office. DHCP2 contains a scope named Scope2 that has addresses for the Seattle office.

Identity Infrastructure

The network contains a single on-premises Active Directory Domain Services (AD DS) domain named corp.fabrikam.com. Currently, all the service accounts use individual domain user accounts.

All domain controllers have the DNS Server role installed and host a copy of the Active Directory-integrated DNS zone of corp.fabrikam.com.

The corp.fabrikam.com AD DS domain syncs with a Microsoft Entra tenant.

Group Policy Objects (GPOs)

The corp.fabrikam.com domain contains the organizational units (OUs) and custom Group Policy Objects (GPOs) shown in the following table.

OU name	Linked GPO	Description
AllUsers	GPO1	Contains all the user accounts in the domain
AllComputers	GPO2	Contains all the computer accounts for the client computers in the domain
AllServers	GPO3	Contains all the computer accounts for Windows servers
VirtualDesktops	GPO4	A new OU that will contain the computers account for Azure Virtual Desktop session hosts

Requirements

Planned Changes

Fabrikam identifies the following planned changes:

Create a single Azure subscription named Sub1 that will contain a single Azure virtual network named Vnet1.
Replace the WAN links between the Seattle and New York offices by using Azure Virtual WAN and ExpressRoute. Both on-premises offices will be connected to Vnet1 by using ExpressRoute.
Create three Azure file shares named newyorkfiles, seattlefiles, and companyfiles.
Create a domain controller named dc3.corp.fabrikam.com in Vnet1.
Deploy an Azure Virtual Desktop host pool to Vnet1. The Azure Virtual Desktop session hosts will be hybrid Microsoft Entra joined.
License all servers for Microsoft Defender for Servers.
Use Azure Policy to enforce configuration management policies on the servers in Azure and on-premises.

Networking Requirements

Fabrikam identifies the following networking requirements:

Implement Virtual WAN and ensure that all the network traffic between the sites uses Virtual WAN. All communications must occur over ExpressRoute.
If a DHCP server fails, ensure that the client computers can continue to receive their dynamic IP address and renew their existing lease.
Ensure that the resources in Vnet1 can resolve the names of the on-premises servers in the corp.fabrikam.com domain.

Security Requirements

Fabrikam identifies the following security requirements:

Apply GPO4 to the Azure Virtual Desktop session hosts. Ensure that Azure Virtual Desktop user sessions lock after being idle for 10 minutes. Users must be able to control the lockout time manually from their client computer.
Ensure that server administrators request approval before they can establish a Remote Desktop connection to an Azure virtual machine. If the request is approved, the connection must be established within two hours.
Prevent user passwords from containing all or part of words that are based on the company name, such as Fab, F@br1kAm or fabr!.
Ensure that all instances of Webapp1 use the same service account. The password of the service account must change automatically every 30 days.
Prevent domain controllers from directly contacting hosts on the internet.

File Sharing Requirements

You need to configure the synchronization of Azure files to meet the following requirements:

Ensure that seattlefiles syncs to FS2.
Ensure that newyorkfiles syncs to FS1.
Ensure that companyfiles syncs to both FS1 and FS2.

You need to configure remote administration to meet the security requirements.

What should you use?

the Remote Desktop extension for Azure Cloud Services
just in time (JIT) VM access
Microsoft Entra Private Access
an Azure Bastion host

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

Overview

Fabrikam, Inc. is a manufacturing company that has a main office in New York and a branch office in Seattle.

Existing Environment

On-premises Servers

The on-premises network contains servers that run Windows Server as shown in the following table.

Name	Configuration	Office
AADC1	Microsoft Entra Connect sync	New York
APP1	Application server	New York
APP2	Application server	Seattle
DC1	Domain controller	New York
DC2	Domain controller	Seattle
DHCP1	DHCP server	New York
DHCP2	DHCP server	Seattle
FS1	File server	New York
FS2	File server	Seattle
VM1	None	New York
VM2	None	Seattle
WEB1	Web server	New York
WEB2	Web server	Seattle

DC1 hosts all the operation master roles.

VM1 and VM2 are connected to the internet.

WEB1 and WEB2 run an Internet Information Services (IIS) web app named Webapp1.

On-premises Network

The New York and Seattle offices are connected by using redundant WAN links.

The client computers in each office get IP addresses from their local DHCP server.

DHCP1 contains a scope named Scope1 that has addresses for the New York office. DHCP2 contains a scope named Scope2 that has addresses for the Seattle office.

Identity Infrastructure

The network contains a single on-premises Active Directory Domain Services (AD DS) domain named corp.fabrikam.com. Currently, all the service accounts use individual domain user accounts.

All domain controllers have the DNS Server role installed and host a copy of the Active Directory-integrated DNS zone of corp.fabrikam.com.

The corp.fabrikam.com AD DS domain syncs with a Microsoft Entra tenant.

Group Policy Objects (GPOs)

The corp.fabrikam.com domain contains the organizational units (OUs) and custom Group Policy Objects (GPOs) shown in the following table.

OU name	Linked GPO	Description
AllUsers	GPO1	Contains all the user accounts in the domain
AllComputers	GPO2	Contains all the computer accounts for the client computers in the domain
AllServers	GPO3	Contains all the computer accounts for Windows servers
VirtualDesktops	GPO4	A new OU that will contain the computers account for Azure Virtual Desktop session hosts

Requirements

Planned Changes

Fabrikam identifies the following planned changes:

Create a single Azure subscription named Sub1 that will contain a single Azure virtual network named Vnet1.
Replace the WAN links between the Seattle and New York offices by using Azure Virtual WAN and ExpressRoute. Both on-premises offices will be connected to Vnet1 by using ExpressRoute.
Create three Azure file shares named newyorkfiles, seattlefiles, and companyfiles.
Create a domain controller named dc3.corp.fabrikam.com in Vnet1.
Deploy an Azure Virtual Desktop host pool to Vnet1. The Azure Virtual Desktop session hosts will be hybrid Microsoft Entra joined.
License all servers for Microsoft Defender for Servers.
Use Azure Policy to enforce configuration management policies on the servers in Azure and on-premises.

Networking Requirements

Fabrikam identifies the following networking requirements:

Implement Virtual WAN and ensure that all the network traffic between the sites uses Virtual WAN. All communications must occur over ExpressRoute.
If a DHCP server fails, ensure that the client computers can continue to receive their dynamic IP address and renew their existing lease.
Ensure that the resources in Vnet1 can resolve the names of the on-premises servers in the corp.fabrikam.com domain.

Security Requirements

Fabrikam identifies the following security requirements:

Apply GPO4 to the Azure Virtual Desktop session hosts. Ensure that Azure Virtual Desktop user sessions lock after being idle for 10 minutes. Users must be able to control the lockout time manually from their client computer.
Ensure that server administrators request approval before they can establish a Remote Desktop connection to an Azure virtual machine. If the request is approved, the connection must be established within two hours.
Prevent user passwords from containing all or part of words that are based on the company name, such as Fab, F@br1kAm or fabr!.
Ensure that all instances of Webapp1 use the same service account. The password of the service account must change automatically every 30 days.
Prevent domain controllers from directly contacting hosts on the internet.

File Sharing Requirements

You need to configure the synchronization of Azure files to meet the following requirements:

Ensure that seattlefiles syncs to FS2.
Ensure that newyorkfiles syncs to FS1.
Ensure that companyfiles syncs to both FS1 and FS2.

You need to implement a name resolution solution that meets the networking requirements.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Configure the DNS Servers settings for Vnet1.
Create an Azure DNS zone named corp.fabrikam.com.
Create a virtual network link in the corp.fabrikam.com Azure private DNS zone.
On DC3, install the DNS Server role.
Configure a conditional forwarder on DC3.
Enable autoregistration in the corp.fabrikam.com Azure private DNS zone.
Create an Azure private DNS zone named corp.fabrikam.com.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

Overview

Fabrikam, Inc. is a manufacturing company that has a main office in New York and a branch office in Seattle.

Existing Environment

On-premises Servers

The on-premises network contains servers that run Windows Server as shown in the following table.

Name	Configuration	Office
AADC1	Microsoft Entra Connect sync	New York
APP1	Application server	New York
APP2	Application server	Seattle
DC1	Domain controller	New York
DC2	Domain controller	Seattle
DHCP1	DHCP server	New York
DHCP2	DHCP server	Seattle
FS1	File server	New York
FS2	File server	Seattle
VM1	None	New York
VM2	None	Seattle
WEB1	Web server	New York
WEB2	Web server	Seattle

DC1 hosts all the operation master roles.

VM1 and VM2 are connected to the internet.

WEB1 and WEB2 run an Internet Information Services (IIS) web app named Webapp1.

On-premises Network

The New York and Seattle offices are connected by using redundant WAN links.

The client computers in each office get IP addresses from their local DHCP server.

DHCP1 contains a scope named Scope1 that has addresses for the New York office. DHCP2 contains a scope named Scope2 that has addresses for the Seattle office.

Identity Infrastructure

The network contains a single on-premises Active Directory Domain Services (AD DS) domain named corp.fabrikam.com. Currently, all the service accounts use individual domain user accounts.

All domain controllers have the DNS Server role installed and host a copy of the Active Directory-integrated DNS zone of corp.fabrikam.com.

The corp.fabrikam.com AD DS domain syncs with a Microsoft Entra tenant.

Group Policy Objects (GPOs)

The corp.fabrikam.com domain contains the organizational units (OUs) and custom Group Policy Objects (GPOs) shown in the following table.

OU name	Linked GPO	Description
AllUsers	GPO1	Contains all the user accounts in the domain
AllComputers	GPO2	Contains all the computer accounts for the client computers in the domain
AllServers	GPO3	Contains all the computer accounts for Windows servers
VirtualDesktops	GPO4	A new OU that will contain the computers account for Azure Virtual Desktop session hosts

Requirements

Planned Changes

Fabrikam identifies the following planned changes:

Create a single Azure subscription named Sub1 that will contain a single Azure virtual network named Vnet1.
Replace the WAN links between the Seattle and New York offices by using Azure Virtual WAN and ExpressRoute. Both on-premises offices will be connected to Vnet1 by using ExpressRoute.
Create three Azure file shares named newyorkfiles, seattlefiles, and companyfiles.
Create a domain controller named dc3.corp.fabrikam.com in Vnet1.
Deploy an Azure Virtual Desktop host pool to Vnet1. The Azure Virtual Desktop session hosts will be hybrid Microsoft Entra joined.
License all servers for Microsoft Defender for Servers.
Use Azure Policy to enforce configuration management policies on the servers in Azure and on-premises.

Networking Requirements

Fabrikam identifies the following networking requirements:

Implement Virtual WAN and ensure that all the network traffic between the sites uses Virtual WAN. All communications must occur over ExpressRoute.
If a DHCP server fails, ensure that the client computers can continue to receive their dynamic IP address and renew their existing lease.
Ensure that the resources in Vnet1 can resolve the names of the on-premises servers in the corp.fabrikam.com domain.

Security Requirements

Fabrikam identifies the following security requirements:

Apply GPO4 to the Azure Virtual Desktop session hosts. Ensure that Azure Virtual Desktop user sessions lock after being idle for 10 minutes. Users must be able to control the lockout time manually from their client computer.
Ensure that server administrators request approval before they can establish a Remote Desktop connection to an Azure virtual machine. If the request is approved, the connection must be established within two hours.
Prevent user passwords from containing all or part of words that are based on the company name, such as Fab, F@br1kAm or fabr!.
Ensure that all instances of Webapp1 use the same service account. The password of the service account must change automatically every 30 days.
Prevent domain controllers from directly contacting hosts on the internet.

File Sharing Requirements

You need to configure the synchronization of Azure files to meet the following requirements:

Ensure that seattlefiles syncs to FS2.
Ensure that newyorkfiles syncs to FS1.
Ensure that companyfiles syncs to both FS1 and FS2.

You need to configure network communication between the Seattle and New York offices. The solution must meet the networking requirements.

What should you configure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question 4

Overview

Fabrikam, Inc. is a manufacturing company that has a main office in New York and a branch office in Seattle.

Existing Environment

On-premises Servers

The on-premises network contains servers that run Windows Server as shown in the following table.

Name	Configuration	Office
AADC1	Microsoft Entra Connect sync	New York
APP1	Application server	New York
APP2	Application server	Seattle
DC1	Domain controller	New York
DC2	Domain controller	Seattle
DHCP1	DHCP server	New York
DHCP2	DHCP server	Seattle
FS1	File server	New York
FS2	File server	Seattle
VM1	None	New York
VM2	None	Seattle
WEB1	Web server	New York
WEB2	Web server	Seattle

DC1 hosts all the operation master roles.

VM1 and VM2 are connected to the internet.

WEB1 and WEB2 run an Internet Information Services (IIS) web app named Webapp1.

On-premises Network

The New York and Seattle offices are connected by using redundant WAN links.

The client computers in each office get IP addresses from their local DHCP server.

DHCP1 contains a scope named Scope1 that has addresses for the New York office. DHCP2 contains a scope named Scope2 that has addresses for the Seattle office.

Identity Infrastructure

The network contains a single on-premises Active Directory Domain Services (AD DS) domain named corp.fabrikam.com. Currently, all the service accounts use individual domain user accounts.

All domain controllers have the DNS Server role installed and host a copy of the Active Directory-integrated DNS zone of corp.fabrikam.com.

The corp.fabrikam.com AD DS domain syncs with a Microsoft Entra tenant.

Group Policy Objects (GPOs)

The corp.fabrikam.com domain contains the organizational units (OUs) and custom Group Policy Objects (GPOs) shown in the following table.

OU name	Linked GPO	Description
AllUsers	GPO1	Contains all the user accounts in the domain
AllComputers	GPO2	Contains all the computer accounts for the client computers in the domain
AllServers	GPO3	Contains all the computer accounts for Windows servers
VirtualDesktops	GPO4	A new OU that will contain the computers account for Azure Virtual Desktop session hosts

Requirements

Planned Changes

Fabrikam identifies the following planned changes:

Create a single Azure subscription named Sub1 that will contain a single Azure virtual network named Vnet1.
Replace the WAN links between the Seattle and New York offices by using Azure Virtual WAN and ExpressRoute. Both on-premises offices will be connected to Vnet1 by using ExpressRoute.
Create three Azure file shares named newyorkfiles, seattlefiles, and companyfiles.
Create a domain controller named dc3.corp.fabrikam.com in Vnet1.
Deploy an Azure Virtual Desktop host pool to Vnet1. The Azure Virtual Desktop session hosts will be hybrid Microsoft Entra joined.
License all servers for Microsoft Defender for Servers.
Use Azure Policy to enforce configuration management policies on the servers in Azure and on-premises.

Networking Requirements

Fabrikam identifies the following networking requirements:

Implement Virtual WAN and ensure that all the network traffic between the sites uses Virtual WAN. All communications must occur over ExpressRoute.
If a DHCP server fails, ensure that the client computers can continue to receive their dynamic IP address and renew their existing lease.
Ensure that the resources in Vnet1 can resolve the names of the on-premises servers in the corp.fabrikam.com domain.

Security Requirements

Fabrikam identifies the following security requirements:

Apply GPO4 to the Azure Virtual Desktop session hosts. Ensure that Azure Virtual Desktop user sessions lock after being idle for 10 minutes. Users must be able to control the lockout time manually from their client computer.
Ensure that server administrators request approval before they can establish a Remote Desktop connection to an Azure virtual machine. If the request is approved, the connection must be established within two hours.
Prevent user passwords from containing all or part of words that are based on the company name, such as Fab, F@br1kAm or fabr!.
Ensure that all instances of Webapp1 use the same service account. The password of the service account must change automatically every 30 days.
Prevent domain controllers from directly contacting hosts on the internet.

File Sharing Requirements

You need to configure the synchronization of Azure files to meet the following requirements:

Ensure that seattlefiles syncs to FS2.
Ensure that newyorkfiles syncs to FS1.
Ensure that companyfiles syncs to both FS1 and FS2.

You need to configure the Group Policy settings to ensure that the Azure Virtual Desktop session hosts meet the security requirements.

What should you configure?

the Enforced property for the link of GPO4
the Enforced property for the link of GPO1
loopback processing in GPO1
loopback processing in GPO4
security filtering for the link of GPO4
security filtering for the link of GPO1

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

Overview

Fabrikam, Inc. is a manufacturing company that has a main office in New York and a branch office in Seattle.

Existing Environment

On-premises Servers

The on-premises network contains servers that run Windows Server as shown in the following table.

Name	Configuration	Office
AADC1	Microsoft Entra Connect sync	New York
APP1	Application server	New York
APP2	Application server	Seattle
DC1	Domain controller	New York
DC2	Domain controller	Seattle
DHCP1	DHCP server	New York
DHCP2	DHCP server	Seattle
FS1	File server	New York
FS2	File server	Seattle
VM1	None	New York
VM2	None	Seattle
WEB1	Web server	New York
WEB2	Web server	Seattle

DC1 hosts all the operation master roles.

VM1 and VM2 are connected to the internet.

WEB1 and WEB2 run an Internet Information Services (IIS) web app named Webapp1.

On-premises Network

The New York and Seattle offices are connected by using redundant WAN links.

The client computers in each office get IP addresses from their local DHCP server.

DHCP1 contains a scope named Scope1 that has addresses for the New York office. DHCP2 contains a scope named Scope2 that has addresses for the Seattle office.

Identity Infrastructure

The network contains a single on-premises Active Directory Domain Services (AD DS) domain named corp.fabrikam.com. Currently, all the service accounts use individual domain user accounts.

All domain controllers have the DNS Server role installed and host a copy of the Active Directory-integrated DNS zone of corp.fabrikam.com.

The corp.fabrikam.com AD DS domain syncs with a Microsoft Entra tenant.

Group Policy Objects (GPOs)

The corp.fabrikam.com domain contains the organizational units (OUs) and custom Group Policy Objects (GPOs) shown in the following table.

OU name	Linked GPO	Description
AllUsers	GPO1	Contains all the user accounts in the domain
AllComputers	GPO2	Contains all the computer accounts for the client computers in the domain
AllServers	GPO3	Contains all the computer accounts for Windows servers
VirtualDesktops	GPO4	A new OU that will contain the computers account for Azure Virtual Desktop session hosts

Requirements

Planned Changes

Fabrikam identifies the following planned changes:

Create a single Azure subscription named Sub1 that will contain a single Azure virtual network named Vnet1.
Replace the WAN links between the Seattle and New York offices by using Azure Virtual WAN and ExpressRoute. Both on-premises offices will be connected to Vnet1 by using ExpressRoute.
Create three Azure file shares named newyorkfiles, seattlefiles, and companyfiles.
Create a domain controller named dc3.corp.fabrikam.com in Vnet1.
Deploy an Azure Virtual Desktop host pool to Vnet1. The Azure Virtual Desktop session hosts will be hybrid Microsoft Entra joined.
License all servers for Microsoft Defender for Servers.
Use Azure Policy to enforce configuration management policies on the servers in Azure and on-premises.

Networking Requirements

Fabrikam identifies the following networking requirements:

Implement Virtual WAN and ensure that all the network traffic between the sites uses Virtual WAN. All communications must occur over ExpressRoute.
If a DHCP server fails, ensure that the client computers can continue to receive their dynamic IP address and renew their existing lease.
Ensure that the resources in Vnet1 can resolve the names of the on-premises servers in the corp.fabrikam.com domain.

Security Requirements

Fabrikam identifies the following security requirements:

Apply GPO4 to the Azure Virtual Desktop session hosts. Ensure that Azure Virtual Desktop user sessions lock after being idle for 10 minutes. Users must be able to control the lockout time manually from their client computer.
Ensure that server administrators request approval before they can establish a Remote Desktop connection to an Azure virtual machine. If the request is approved, the connection must be established within two hours.
Prevent user passwords from containing all or part of words that are based on the company name, such as Fab, F@br1kAm or fabr!.
Ensure that all instances of Webapp1 use the same service account. The password of the service account must change automatically every 30 days.
Prevent domain controllers from directly contacting hosts on the internet.

File Sharing Requirements

You need to configure the synchronization of Azure files to meet the following requirements:

Ensure that seattlefiles syncs to FS2.
Ensure that newyorkfiles syncs to FS1.
Ensure that companyfiles syncs to both FS1 and FS2.

You are planning the implementation of Azure Arc to support the planned changes.

You need to configure the environment to support configuration management policies.

What should you do?

Create a hybrid runbook worker in Azure Automation.
Hybrid Microsoft Entra join all the servers.
Deploy the Azure Connected Machine agent to all the servers.
Install the Azure Monitor agent on all the servers.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

Overview

Fabrikam, Inc. is a manufacturing company that has a main office in New York and a branch office in Seattle.

Existing Environment

On-premises Servers

The on-premises network contains servers that run Windows Server as shown in the following table.

Name	Configuration	Office
AADC1	Microsoft Entra Connect sync	New York
APP1	Application server	New York
APP2	Application server	Seattle
DC1	Domain controller	New York
DC2	Domain controller	Seattle
DHCP1	DHCP server	New York
DHCP2	DHCP server	Seattle
FS1	File server	New York
FS2	File server	Seattle
VM1	None	New York
VM2	None	Seattle
WEB1	Web server	New York
WEB2	Web server	Seattle

DC1 hosts all the operation master roles.

VM1 and VM2 are connected to the internet.

WEB1 and WEB2 run an Internet Information Services (IIS) web app named Webapp1.

On-premises Network

The New York and Seattle offices are connected by using redundant WAN links.

The client computers in each office get IP addresses from their local DHCP server.

DHCP1 contains a scope named Scope1 that has addresses for the New York office. DHCP2 contains a scope named Scope2 that has addresses for the Seattle office.

Identity Infrastructure

The network contains a single on-premises Active Directory Domain Services (AD DS) domain named corp.fabrikam.com. Currently, all the service accounts use individual domain user accounts.

All domain controllers have the DNS Server role installed and host a copy of the Active Directory-integrated DNS zone of corp.fabrikam.com.

The corp.fabrikam.com AD DS domain syncs with a Microsoft Entra tenant.

Group Policy Objects (GPOs)

The corp.fabrikam.com domain contains the organizational units (OUs) and custom Group Policy Objects (GPOs) shown in the following table.

OU name	Linked GPO	Description
AllUsers	GPO1	Contains all the user accounts in the domain
AllComputers	GPO2	Contains all the computer accounts for the client computers in the domain
AllServers	GPO3	Contains all the computer accounts for Windows servers
VirtualDesktops	GPO4	A new OU that will contain the computers account for Azure Virtual Desktop session hosts

Requirements

Planned Changes

Fabrikam identifies the following planned changes:

Create a single Azure subscription named Sub1 that will contain a single Azure virtual network named Vnet1.
Replace the WAN links between the Seattle and New York offices by using Azure Virtual WAN and ExpressRoute. Both on-premises offices will be connected to Vnet1 by using ExpressRoute.
Create three Azure file shares named newyorkfiles, seattlefiles, and companyfiles.
Create a domain controller named dc3.corp.fabrikam.com in Vnet1.
Deploy an Azure Virtual Desktop host pool to Vnet1. The Azure Virtual Desktop session hosts will be hybrid Microsoft Entra joined.
License all servers for Microsoft Defender for Servers.
Use Azure Policy to enforce configuration management policies on the servers in Azure and on-premises.

Networking Requirements

Fabrikam identifies the following networking requirements:

Implement Virtual WAN and ensure that all the network traffic between the sites uses Virtual WAN. All communications must occur over ExpressRoute.
If a DHCP server fails, ensure that the client computers can continue to receive their dynamic IP address and renew their existing lease.
Ensure that the resources in Vnet1 can resolve the names of the on-premises servers in the corp.fabrikam.com domain.

Security Requirements

Fabrikam identifies the following security requirements:

Apply GPO4 to the Azure Virtual Desktop session hosts. Ensure that Azure Virtual Desktop user sessions lock after being idle for 10 minutes. Users must be able to control the lockout time manually from their client computer.
Ensure that server administrators request approval before they can establish a Remote Desktop connection to an Azure virtual machine. If the request is approved, the connection must be established within two hours.
Prevent user passwords from containing all or part of words that are based on the company name, such as Fab, F@br1kAm or fabr!.
Ensure that all instances of Webapp1 use the same service account. The password of the service account must change automatically every 30 days.
Prevent domain controllers from directly contacting hosts on the internet.

File Sharing Requirements

You need to configure the synchronization of Azure files to meet the following requirements:

Ensure that seattlefiles syncs to FS2.
Ensure that newyorkfiles syncs to FS1.
Ensure that companyfiles syncs to both FS1 and FS2.

You need to configure Azure File Sync to meet the file sharing requirements.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.