You need to publish an internal web application for external users without requiring a VPN. Which Windows Server role service should you use?

Routing and Remote Access Services

Internet Information Services (IIS)

A company has a site-to-site VPN between its on-premises network and Azure. They are migrating a legacy application to Azure that requires the same IP subnet to exist on-premises and in Azure. They also need to ensure that the migration does not cause routing conflicts. What should you do?

Reconfigure the application to use a different IP subnet.

Create a second site-to-site VPN with overlapping address spaces.

Use Azure Network Adapter to extend the subnet.

Implement Azure Extended Network over the existing site-to-site VPN.

A company has an on-premises application that needs to send data to an Azure function. The on-premises firewall only allows outbound HTTPS. They want to avoid a VPN. What should you use?

Azure Relay Hybrid Connection with a relay agent on-premises.

Microsoft Entra Application Proxy.

What is the primary purpose of Azure Extended Network?

To create a VPN tunnel between two Azure regions

To extend an on-premises subnet into Azure, allowing IP addresses to be used in both locations

To enable Azure VMs to use on-premises DNS servers

To provide a dedicated private connection between on-premises and Azure

Microsoft Certified:Windows Server Hybrid Administrator Associate

Domain 4Objective 3

Implement On-Premises and Hybrid Network Connectivity AZ-800 Practice Questions (Page 3)

Part of the Implement and manage an on-premises and hybrid networking infrastructure domain, which accounts for 15–20% of the AZ-800 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 2–4 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

9concepts

15–20%of the exam

9 Concepts in This Objective

Remote Access Role Configuration
Azure Network Adapter Deployment
Azure Extended Network Setup
Network Policy and Access Services Management
Web Application Proxy Implementation
Site-to-Site VPN Configuration
Azure Relay Setup
Microsoft Entra Private Access Deployment
Microsoft Entra Application Proxy Implementation

Questions 11–15

11foundation · easy
You need to publish an internal web application for external users without requiring a VPN. Which Windows Server role service should you use?
Select an answer first
12foundation · easy
You need to enable a hybrid application to communicate with an on-premises service without opening inbound firewall ports. Which Azure service should you use?
Select an answer first
13expert · hard
A company has a site-to-site VPN between its on-premises network and Azure. They are migrating a legacy application to Azure that requires the same IP subnet to exist on-premises and in Azure. They also need to ensure that the migration does not cause routing conflicts. What should you do?
Select an answer first
14application · medium
A company has an on-premises application that needs to send data to an Azure function. The on-premises firewall only allows outbound HTTPS. They want to avoid a VPN. What should you use?
Select an answer first
15foundation · easy
What is the primary purpose of Azure Extended Network?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-800

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-800” is a trademark of its owner, used for identification only.