Administering Windows Server Hybrid Core Infrastructure

Here you have the best Microsoft AZ-800 practice exam questions

  • You have 292 total questions to study from
  • Each page has 5 questions, making a total of 59 pages
  • You can navigate through the pages using the buttons at the bottom
  • This questions were last updated on January 27, 2026
  • This site is not affiliated with or endorsed by Microsoft.
Question 1 of 292
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.
You need to identify which server is the PDC emulator for the domain.
Solution: From Active Directory Domains and Trusts, you right-click Active Directory Domains and Trusts in the console tree, and then select Operations
Master.
Does this meet the goal?
Correct Answer: B

To identify the server that is the PDC emulator for the domain, you should use the Active Directory Users and Computers console, not the Active Directory Domains and Trusts console. From Active Directory Users and Computers, you right-click the domain, select Operations Masters, and then select the PDC tab to view the server holding the PDC emulator role. Therefore, the proposed method does not meet the goal.

Question 2 of 292
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.
You need to identify which server is the PDC emulator for the domain.
Solution: From a command prompt, you run netdom.exe query fsmo.
Does this meet the goal?
Correct Answer: A

To identify which server is the PDC emulator for the domain, you can use the command 'netdom query fsmo' in a command prompt. This command lists the Flexible Single Master Operations (FSMO) roles, including which server holds the PDC emulator role. Running 'netdom.exe query fsmo' will also work, as 'netdom.exe' specifies the executable file directly.

Question 3 of 292
You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant.
You plan to implement self-service password reset (SSPR) in Azure AD.
You need to ensure that users that reset their passwords by using SSPR can use the new password resources in the AD DS domain.
What should you do?
Correct Answer: B

To ensure that users who reset their passwords using self-service password reset (SSPR) in Azure Active Directory (Azure AD) can use the new passwords with resources in the on-premises Active Directory Domain Services (AD DS) domain, you need to enable password writeback. This process synchronizes the new passwords back to the on-premises AD DS in real time. To achieve this, you should run the Microsoft Azure Active Directory Connect wizard and select the Password writeback option. This configuration allows the updated passwords from Azure AD to be written back to the on-premises AD DS environment, ensuring password consistency across both directories.

Question 4 of 292
HOTSPOT -

Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com.

You create the resources shown in the following table.

Exam AZ-800: Question 4 - Image 1

You create the Group Policy Objects (GPOs) shown in the following table.

Exam AZ-800: Question 4 - Image 2

You configure the Group Policy Preferences shown in the following table.

Exam AZ-800: Question 4 - Image 3

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Exam AZ-800: Question 4 - Image 4
Correct Answer:
Exam AZ-800: Question 4 - Image 5
Question 5 of 292
DRAG DROP -
You create a new Azure subscription.
You plan to deploy Azure Active Directory Domain Services (Azure AD DS) and Azure virtual machines.
You need to ensure that the virtual machines can join to Azure AD DS.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:
Exam AZ-800: Question 5 - Image 1
Correct Answer:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory-domain-services/tutorial-create-instance Exam AZ-800: Question 5 - Image 2