You have a hybrid environment where on-premises servers need to access Azure Key Vault secrets securely. Which two methods can be used to authenticate the on-premises servers to Azure AD for Key Vault access?

You are configuring a Windows Server 2022 VM in Azure. You want to enable ‘Nested Virtualization’. Which VM size series supports this feature?

You are managing a hybrid environment. You need to migrate a user’s local profile from an old PC to a new PC. Which legacy tool is still often used for this in enterprise environments?

You are configuring ‘Azure AD Password Protection’. You want to add specific words like your ‘Company Name’ to the banned list. Where do you do this?

You are implementing Azure AD Password Protection for your on-premises Active Directory. What are the two components you must install on-premises?

You are configuring Azure Backup for an Azure VM. You want to ensure the backup data is replicated to a secondary, paired region. Which storage redundancy should you choose for the Recovery Services Vault?

You are managing an Azure Virtual Network. You want to use ‘VNet Peering’ to connect two networks in different regions. What is this called?

You are configuring a hybrid DNS solution. You want on-premises clients to be able to resolve names of resources in an Azure Private DNS Zone. What should you deploy in Azure?

You are managing an Azure Arc-enabled server. You want to ensure that the server is always compliant with the ‘PCI-DSS’ security standard. Which Azure service allows you to assign this regulatory compliance initiative?

You are configuring ‘Azure Site Recovery’. You want to perform a ‘Planned Failover’. What is the primary difference between a Planned and Unplanned failover?

You are configuring ‘Azure AD Pass-through Authentication’. Where does the actual password validation happen?

You are managing a hybrid identity environment. You need to identify which on-premises Active Directory accounts have passwords that have never been changed. Which PowerShell cmdlet should you use?

You are managing an Azure Virtual Desktop environment. You want to use ‘FSLogix’ for user profiles. What happens to the user’s profile when they log out?

You are configuring a Windows Server 2022 Azure Edition VM. You want to use the ‘Automanage for Windows Server’ Best Practices. Which of the following is a capability of the ‘Production’ profile in Automanage?

You are managing a hybrid DNS environment. You want to ensure that when an on-premises client queries ‘server1.azure.contoso.com’, the request is automatically sent to Azure. What should you create on your on-premises DNS server?

You are implementing ‘Just Enough Administration’ (JEA) on a Windows Server. What is the primary purpose of JEA?

You have a hybrid identity solution using Pass-through Authentication (PTA). Users report they cannot sign in when the primary on-premises server is offline. Which two actions should you take to ensure high availability?

You have an on-premises Windows Server 2022 server. You need to use the Azure portal to manage its local files and services without opening inbound firewall ports. Which two steps are required?

You have a hybrid network. You want to use ‘Azure Private Link’ to access an Azure Storage Account. You need to ensure that the DNS resolution works for all on-premises clients. Which two components should you use?

You are using ‘Azure Migrate’ to assess on-premises SQL Server instances. You need to determine the recommended Azure SQL deployment option (VM vs. MI vs. DB). Which tool provides this recommendation?

You are using Azure Migrate to move on-premises Windows Servers to Azure. You need to ensure the VMs have the ‘Azure VM Agent’ installed after migration. Which two statements are true?

You have an Azure Stack HCI cluster. You need to verify that the network configuration meets the requirements for ‘Software Defined Networking’ (SDN). Which two tools can you use to validate the environment?

You have an on-premises Hyper-V environment. You need to migrate several virtual machines to Azure using Azure Migrate. Which two discovery methods can you use to identify the virtual machines and their dependencies?

You have 10 on-premises Windows Servers onboarded to Azure Arc. You need to enable ‘Managed Identities’ for these servers so they can access Azure Key Vault without storing credentials. Which two steps are required?

You have a hybrid environment with Azure File Sync. You need to move the ‘Storage Sync Service’ to a different Azure region. Which two statements describe the requirements for this move?

You are using Azure Site Recovery (ASR) to protect on-premises Hyper-V VMs. You need to perform a planned failover to Azure. Which two steps are part of a ‘Planned’ failover process?

You have an Azure File Sync environment. You need to ensure that local users can access files even if the internet connection to Azure is temporarily unavailable. Which feature must be enabled?

You have 20 Azure Arc-enabled servers. You need to collect specific application logs located at C:\Logs\app.log and send them to a Log Analytics workspace. Which two steps are required?

You have a hybrid identity solution using ‘Pass-through Authentication’ (PTA). You need to troubleshoot a scenario where users can sign in from the office but not from home. Which two Azure AD features should you investigate?

You have an Azure File Sync deployment. You need to move a large amount of data (10 TB) from an on-premises NAS to the cloud share while minimizing the impact on your limited internet bandwidth. Which two steps are recommended?

You are deploying Azure File Sync. Your local file server has 5 TB of data, but only 500 GB of local disk space available. How can you make this work?

A company has an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. You deploy an Azure AD Connect server to sync identities. You need to implement Password Hash Synchronization (PHS) and ensure that users can reset their own passwords in Azure AD and have those changes reflect on-premises. What should you enable?

You are configuring ‘SMB over QUIC’ on a Windows Server 2022 Azure Edition server. You want to use a custom port instead of 443. Is this supported?

You are configuring a ‘Scale-Out File Server’ (SoFS). Which shared storage technology is the most common foundation for a modern SoFS on Windows Server 2022?

You are configuring Azure AD Connect Cloud Sync. You have multiple agents installed for high availability. How does the system decide which agent to use?

You are managing a Windows Server 2022 failover cluster. You want to prevent ‘flapping’ where a resource moves back and forth between nodes due to a transient failure. What should you configure?

A company plans to implement Azure File Sync. They have an on-premises server with a 10 TB data set. They want to ensure that only frequently accessed files are kept on the local server while all files are stored in the cloud. Which feature should be configured?

You are managing a 4-node Storage Spaces Direct (S2D) cluster. You need to expand the storage capacity. You add two new disks to each node. What is the next step to ensure the cluster uses the new disks?

You are managing a hybrid Active Directory. You need to verify that the ‘Schema Master’ role is held by a specific Domain Controller. Which tool can you use to see this?

You are configuring Azure File Sync. You have a folder with millions of small files. You notice sync performance is slow. What is a recommended optimization?

You are deploying a Windows Server Azure Edition VM in Azure. You want to use the Hotpatching feature to reduce the number of reboots required for security updates. Which installation option must you select?

You are configuring ‘Azure Site Recovery’. You want to use a ‘Recovery Plan’ to run a custom PowerShell script after the VMs have failed over to Azure. Where is this script stored?

You are managing a hybrid Active Directory. You want to implement ‘Self-Service Password Reset’ (SSPR). You want to ensure that when users change their password in the cloud, it updates on-premises immediately. What should you enable?

You are managing a hybrid environment. You want to use the Azure portal to manage local Windows Server settings like local users, certificates, and the registry. What must you install on the local server?

You are preparing to use Azure Site Recovery (ASR) to protect on-premises Windows VMs. You need to install the component that coordinates communication between on-premises and Azure. What should you deploy?

You are configuring an Azure VM for a high-performance database. You want to use ‘Ultra Disk’ storage. What is a unique feature of Ultra Disk compared to Premium SSD?

You are configuring Azure File Sync for a file server named Server1. The server has a 4 TB volume, but you only want to keep the most frequently accessed files on the local disk. What should you configure?

You are managing an Active Directory site with poor bandwidth. You want to ensure that domain controllers in this site only replicate during non-business hours. Where do you configure this?

You are configuring Azure Backup. You want to protect against the accidental deletion of backup data. Which feature provides a 14-day retention period for deleted backups?

You are configuring ‘Azure Site Recovery’ for an on-premises VM. You want to minimize the cost of the storage used for replication. Which storage type should you use for the ‘Log’ and ‘Replica’ disks in Azure?

You are managing a Windows Server 2022 cluster. You want to use ‘Shared VHDX’ files for a guest cluster. What is a requirement for the storage hosting the VHDX?

You are managing an Azure Virtual Desktop (AVD) host pool. You need to ensure users are redirected to the host with the fewest active sessions. Which load-balancing method should you use?

A user is trying to connect to an Azure VM via RDP but the connection is being blocked by a Network Security Group (NSG). You need to find out which specific NSG rule is causing the block. Which tool should you use?

You are managing an Azure Virtual Network. You want to prevent all outbound internet traffic from your Windows Server VMs except for Windows Update. What should you use?

You are configuring a Site-to-Site VPN to Azure. You want to use BGP (Border Gateway Protocol) for dynamic routing. What is a requirement for the on-premises VPN device?

You are deploying a new Active Directory domain controller in an Azure VM. Which Azure disk setting is critically recommended for the drive containing the AD database (NTDS.DIT)?

You are planning an Azure File Sync deployment. You have a local volume formatted with FAT32. What must you do before you can include a folder from this volume in a sync group?

You are managing a Windows Server 2022 cluster. You want to ensure that a ‘Node’ is automatically quarantined if it fails 3 times within an hour. What is this feature called?

You are managing a hybrid Active Directory. You want to use ‘Azure AD Connect Health’. What information can this tool show you?

You are managing an Azure Virtual Desktop environment. You want to limit the maximum amount of time a user session can remain idle before being disconnected. Where is this configured?