You want to use Azure Automation to run a script on an on-premises Windows Server that is not Azure Arc-enabled. What must you install on that server to allow Azure Automation to execute the script?

Azure Policy guest configuration extension

A company has Azure Arc-enabled Windows Servers that must comply with an internal security policy requiring specific registry keys and services to be configured. You need to audit and enforce these settings using Azure Machine Configuration. What should you use?

Use Azure Update Manager to apply the configuration as an update.

Use Azure Automation Desired State Configuration (DSC) to push the settings to the servers.

Create a custom Azure Policy definition with a guest configuration assignment that includes the desired registry and service settings.

Deploy a custom script extension to run a PowerShell script that configures the registry and services.

You are preparing to install the Azure Connected Machine Agent on a Windows Server. Which of the following is required before the installation can succeed?

A public key infrastructure (PKI) certificate issued by a public CA

An Azure subscription and a resource group where the server will be registered

A domain join to an Active Directory domain that is synced with Azure AD

A virtual network (VNet) peered with an Azure virtual network

You have Azure Arc-enabled servers running Windows Server 2019. You need to ensure that the 'Windows Defender Antivirus' is enabled on all servers and remediate if it is disabled. You want to use Azure Policy. What should you do?

Use Azure Automation DSC to configure Windows Defender.

Assign a built-in Azure Policy that uses Azure Machine Configuration to audit and remediate the Windows Defender Antivirus setting.

Create a custom Azure Policy with the 'deployIfNotExists' effect to install the agent.

Deploy the Microsoft Antimalware extension to each server.

You have created a PowerShell runbook in Azure Automation. Which of the following is required to run the runbook on a schedule?

A schedule linked to the runbook

Microsoft Certified:Windows Server Hybrid Administrator Associate

Domain 2Objective 2

Manage Windows Servers and Workloads by Using Azure Services AZ-800 Practice Questions (Page 4)

Part of the Manage Windows Servers and workloads in a hybrid environment domain, which accounts for 10–15% of the AZ-800 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~4–10 in this domain), expect 2–5 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

6concepts

10–15%of the exam

Questions 16–20

16foundation · easy
You want to use Azure Automation to run a script on an on-premises Windows Server that is not Azure Arc-enabled. What must you install on that server to allow Azure Automation to execute the script?
Select an answer first
17application · medium
A company has Azure Arc-enabled Windows Servers that must comply with an internal security policy requiring specific registry keys and services to be configured. You need to audit and enforce these settings using Azure Machine Configuration. What should you use?
Select an answer first
18foundation · easy
You are preparing to install the Azure Connected Machine Agent on a Windows Server. Which of the following is required before the installation can succeed?
Select an answer first
19application · medium
You have Azure Arc-enabled servers running Windows Server 2019. You need to ensure that the 'Windows Defender Antivirus' is enabled on all servers and remediate if it is disabled. You want to use Azure Policy. What should you do?
Select an answer first
20foundation · easy
You have created a PowerShell runbook in Azure Automation. Which of the following is required to run the runbook on a schedule?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-800

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-800” is a trademark of its owner, used for identification only.