You have a Windows Server VM that must be accessible only from the corporate network via a site-to-site VPN. You need to provide RDP access to administrators without assigning a public IP to the VM. What should you do?

Use Just-in-Time VM access to open port 3389 on the VM's existing public IP.

Configure a point-to-site VPN connection directly to the VM's private IP.

Create a public IP and attach it to the VM, then use an NSG to restrict RDP to the corporate VPN gateway IP.

Deploy Azure Bastion in the same virtual network and connect to the VM using its private IP.

Contoso has a Windows Server 2019 VM in Azure running a line-of-business application. The VM currently uses a 128 GB Premium SSD OS disk and a 512 GB Premium SSD data disk. The application is experiencing high disk latency during peak hours, and the VM size is Standard_D4s_v3. You need to improve disk performance without changing the VM size. What should you do?

Move the VM to a different availability zone.

Increase the size of the data disk to 1 TB to get more IOPS.

Convert the data disk to an Ultra Disk and attach it to the VM.

Enable Azure Disk Encryption on the data disk.

You have a Windows Server VM that must be accessed via RDP by administrators from the internet. The VM currently has no public IP. You need to minimize the management overhead and ensure that the VM is not exposed to the internet. What should you do?

Deploy Azure Bastion and grant administrators access via Azure RBAC.

Set up a site-to-site VPN and have admins connect to the VNet.

Assign a public IP and use an NSG to restrict RDP to admin IPs.

Use Just-in-Time VM access with a public IP.

You have a Windows Server VM in Azure that runs a legacy application. The application must be accessible only from your on-premises network via a site-to-site VPN. You need to ensure that the VM is not accessible from the public internet. What should you do?

Assign a public IP address and configure an NSG to allow only the on-premises public IP.

Do not assign a public IP address and place the VM in a subnet that is reachable via the VPN gateway.

Use Azure Bastion to provide access from the internet.

Configure a network security group (NSG) to deny all inbound traffic.

Microsoft Certified:Windows Server Hybrid Administrator Associate

Domain 3Objective 3

Manage Windows Server Virtual Machines on Azure AZ-800 Practice Questions (Page 6)

Part of the Manage virtual machines and containers domain, which accounts for 15–20% of the AZ-800 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 2–4 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

8concepts

15–20%of the exam

Questions 26–30

26application · medium
You have a Windows Server VM that must be accessible only from the corporate network via a site-to-site VPN. You need to provide RDP access to administrators without assigning a public IP to the VM. What should you do?
Select an answer first
27application · medium
Contoso has a Windows Server 2019 VM in Azure running a line-of-business application. The VM currently uses a 128 GB Premium SSD OS disk and a 512 GB Premium SSD data disk. The application is experiencing high disk latency during peak hours, and the VM size is Standard_D4s_v3. You need to improve disk performance without changing the VM size. What should you do?
Select an answer first
28foundation · easy
You need to automatically scale the number of Windows Server VMs based on CPU usage. Which Azure service should you use?
Select an answer first
29expert · medium
You have a Windows Server VM that must be accessed via RDP by administrators from the internet. The VM currently has no public IP. You need to minimize the management overhead and ensure that the VM is not exposed to the internet. What should you do?
Select an answer first
30application · medium
You have a Windows Server VM in Azure that runs a legacy application. The application must be accessible only from your on-premises network via a site-to-site VPN. You need to ensure that the VM is not accessible from the public internet. What should you do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-800

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-800” is a trademark of its owner, used for identification only.

Manage Windows Server Virtual Machines on Azure AZ-800 Practice Questions (Page 6)

Questions 26–30

You have a Windows Server VM that must be accessible only from the corporate network via a site-to-site VPN. You need to provide RDP access to administrators without assigning a public IP to the VM. What should you do?

You need to automatically scale the number of Windows Server VMs based on CPU usage. Which Azure service should you use?

You have a Windows Server VM that must be accessed via RDP by administrators from the internet. The VM currently has no public IP. You need to minimize the management overhead and ensure that the VM is not exposed to the internet. What should you do?

You have a Windows Server VM in Azure that runs a legacy application. The application must be accessible only from your on-premises network via a site-to-site VPN. You need to ensure that the VM is not accessible from the public internet. What should you do?

Keep studying — Manage virtual machines and containers