You are deploying a new domain controller in an existing on-premises Active Directory domain. You have installed the AD DS server role on the Windows Server. What is the next step to make this server a domain controller?

Run the Active Directory Domain Services Configuration Wizard to promote the server to a domain controller.

Install the DNS Server role and then manually create the necessary SRV records.

Create a new forest by running dcpromo.exe from the command line.

Reboot the server and then join it to the domain using the System Properties dialog.

You have a single-domain forest with two domain controllers. You need to perform maintenance on one of them, which will require a reboot. You want to ensure that authentication and directory services remain available during the maintenance window. What should you do before rebooting the DC?

Demote the domain controller and then promote it after maintenance.

Transfer all FSMO roles to the other domain controller.

Verify that the other domain controller is healthy and has the global catalog enabled.

Take the domain controller offline and then restart it.

You need to provide a managed domain service in Azure without deploying and managing your own domain controllers. Which Azure service should you use?

Azure Active Directory Domain Services (Azure AD DS)

Azure Active Directory (Azure AD)

You are deploying a domain controller in Azure for a new subsidiary that will have its own Active Directory domain. The subsidiary needs to be fully independent but must trust the parent domain for authentication. What should you do?

Add a domain controller to the existing forest and create a new child domain.

Create a new forest in Azure and establish a forest trust with the parent domain.

Use Microsoft Entra Domain Services to create a managed domain.

Deploy a standalone server and manually configure trust relationships.

Your company has an on-premises AD DS domain and wants to deploy a domain controller in Azure to support VMs in a peered virtual network. The VMs are in a different subnet than the DC. You need to ensure that the VMs can authenticate against the Azure DC. What is the most important configuration?

Set the DNS server for the VNet to the private IP address of the Azure DC.

Add the Azure DC to the on-premises Active Directory site.

Create a site-to-site VPN connection between Azure and on-premises.

Enable the Azure DC to be a global catalog server.

Microsoft Certified:Windows Server Hybrid Administrator Associate

Domain 1Objective 1

Deploy and Manage AD DS Domain Controllers AZ-800 Practice Questions (Page 5)

Part of the Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments domain, which accounts for 30–35% of the AZ-800 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 2–5 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

8concepts

30–35%of the exam

8 Concepts in This Objective

On-Premises Domain Controller Deployment
On-Premises Domain Controller Management
Azure Domain Controller Deployment
Azure Domain Controller Management
Read-Only Domain Controller Deployment
Read-Only Domain Controller Management
FSMO Role Management
FSMO Role Troubleshooting

Questions 21–25

21foundation · easy
You are deploying a new domain controller in an existing on-premises Active Directory domain. You have installed the AD DS server role on the Windows Server. What is the next step to make this server a domain controller?
Select an answer first
22application · medium
You have a single-domain forest with two domain controllers. You need to perform maintenance on one of them, which will require a reboot. You want to ensure that authentication and directory services remain available during the maintenance window. What should you do before rebooting the DC?
Select an answer first
23foundation · easy
You need to provide a managed domain service in Azure without deploying and managing your own domain controllers. Which Azure service should you use?
Select an answer first
24application · medium
You are deploying a domain controller in Azure for a new subsidiary that will have its own Active Directory domain. The subsidiary needs to be fully independent but must trust the parent domain for authentication. What should you do?
Select an answer first
25application · medium
Your company has an on-premises AD DS domain and wants to deploy a domain controller in Azure to support VMs in a peered virtual network. The VMs are in a different subnet than the DC. You need to ensure that the VMs can authenticate against the Azure DC. What is the most important configuration?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-800

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-800” is a trademark of its owner, used for identification only.