You have a site-to-site VPN between an on-premises network and an Azure VNet. The VPN is configured with IKEv2 and uses a pre-shared key. Recently, you changed the pre-shared key on the Azure VPN gateway. Users report that the VPN is down. What should you do to restore connectivity?

Recreate the local network gateway in Azure.

Change the connection type to policy-based.

Restart the on-premises VPN device.

Update the pre-shared key on the on-premises VPN device to match the new key.

A company runs an internal web application on Windows Server 2019 that uses Integrated Windows Authentication. Remote users need to access it from the internet without a VPN. The company already has an on-premises Active Directory Federation Services (AD FS) farm. What should you implement to publish the application with the least additional infrastructure?

Web Application Proxy (WAP) on a server in the DMZ, publishing the application with pre-authentication using AD FS.

DirectAccess on the Windows Server to allow remote users to access the app without VPN.

Microsoft Entra Application Proxy with Kerberos Constrained Delegation (KCD) configured.

Microsoft Entra Private Access with a connector installed on the application server.

Which authentication method is commonly used by Web Application Proxy to pre-authenticate external users?

Active Directory Federation Services (AD FS)

You need to enforce network access policies for VPN clients by using RADIUS authentication. Which role service should you install?

Host Credential Authorization Policy (HCAP)

Health Registration Authority (HRA)

Routing and Remote Access Services (RRAS)

Which Windows Server role includes Network Policy Server (NPS) as a role service?

Network Policy and Access Services (NPAS)

Active Directory Domain Services

Microsoft Certified:Windows Server Hybrid Administrator Associate

Domain 4Objective 3

Implement On-Premises and Hybrid Network Connectivity AZ-800 Practice Questions (Page 8)

Part of the Implement and manage an on-premises and hybrid networking infrastructure domain, which accounts for 15–20% of the AZ-800 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 2–4 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

9concepts

15–20%of the exam

9 Concepts in This Objective

Remote Access Role Configuration
Azure Network Adapter Deployment
Azure Extended Network Setup
Network Policy and Access Services Management
Web Application Proxy Implementation
Site-to-Site VPN Configuration
Azure Relay Setup
Microsoft Entra Private Access Deployment
Microsoft Entra Application Proxy Implementation

Questions 36–40

36expert · medium
You have a site-to-site VPN between an on-premises network and an Azure VNet. The VPN is configured with IKEv2 and uses a pre-shared key. Recently, you changed the pre-shared key on the Azure VPN gateway. Users report that the VPN is down. What should you do to restore connectivity?
Select an answer first
37application · medium
A company runs an internal web application on Windows Server 2019 that uses Integrated Windows Authentication. Remote users need to access it from the internet without a VPN. The company already has an on-premises Active Directory Federation Services (AD FS) farm. What should you implement to publish the application with the least additional infrastructure?
Select an answer first
38foundation · easy
Which authentication method is commonly used by Web Application Proxy to pre-authenticate external users?
Select an answer first
39foundation · easy
You need to enforce network access policies for VPN clients by using RADIUS authentication. Which role service should you install?
Select an answer first
40foundation · easy
Which Windows Server role includes Network Policy Server (NPS) as a role service?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to AZ-800

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-800” is a trademark of its owner, used for identification only.