A company uses a Windows Server 2019 as a VPN server (RRAS) for remote employees. They also have an Azure site-to-site VPN. They need to enforce different connection times for different Active Directory groups: sales gets 8 hours, engineering gets 12 hours. They want to centralize the policy and avoid configuring each VPN client. What should you do?

Configure Network Policy Server (NPS) as a RADIUS server and create network policies that assign session timeouts based on Active Directory group membership.

Configure the Azure VPN gateway to enforce session timeouts for on-premises VPN users.

Configure the VPN server's remote access policies to filter by group and set timeouts.

Use Azure Network Adapter to manage VPN policies for the site-to-site connection.

You need to provide remote access to an on-premises web application for external users without a VPN. Which Microsoft Entra feature should you use?

Microsoft Entra Domain Services

Microsoft Entra Application Proxy

An organization has a mix of on-premises applications: a legacy web app using HTTP, a custom TCP-based app, and an RDP service. They want to provide remote access to all three without deploying a VPN. They also require MFA for all access. Which solution should you choose?

Web Application Proxy for all three apps

Microsoft Entra Private Access for all three apps

Microsoft Entra Application Proxy for the web app and Private Access for the TCP app and RDP

You need to enable remote users to securely access internal resources by using DirectAccess. Which Windows Server role must be installed and configured?

Network Policy and Access Services

Active Directory Certificate Services

What is the primary purpose of Microsoft Entra Private Access?

To provide identity management for on-premises applications

To provide secure access to private applications without requiring a VPN

To replace Active Directory Domain Services

To publish web applications for external users

Microsoft Certified:Windows Server Hybrid Administrator Associate

Domain 4Objective 3

Implement On-Premises and Hybrid Network Connectivity AZ-800 Practice Questions (Page 2)

Part of the Implement and manage an on-premises and hybrid networking infrastructure domain, which accounts for 15–20% of the AZ-800 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 2–4 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

9concepts

15–20%of the exam

9 Concepts in This Objective

Remote Access Role Configuration
Azure Network Adapter Deployment
Azure Extended Network Setup
Network Policy and Access Services Management
Web Application Proxy Implementation
Site-to-Site VPN Configuration
Azure Relay Setup
Microsoft Entra Private Access Deployment
Microsoft Entra Application Proxy Implementation

Questions 6–10

6application · medium
A company uses a Windows Server 2019 as a VPN server (RRAS) for remote employees. They also have an Azure site-to-site VPN. They need to enforce different connection times for different Active Directory groups: sales gets 8 hours, engineering gets 12 hours. They want to centralize the policy and avoid configuring each VPN client. What should you do?
Select an answer first
7foundation · easy
You need to provide remote access to an on-premises web application for external users without a VPN. Which Microsoft Entra feature should you use?
Select an answer first
8expert · hard
An organization has a mix of on-premises applications: a legacy web app using HTTP, a custom TCP-based app, and an RDP service. They want to provide remote access to all three without deploying a VPN. They also require MFA for all access. Which solution should you choose?
Select an answer first
9foundation · easy
You need to enable remote users to securely access internal resources by using DirectAccess. Which Windows Server role must be installed and configured?
Select an answer first
10foundation · easy
What is the primary purpose of Microsoft Entra Private Access?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-800

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-800” is a trademark of its owner, used for identification only.