CloudExamCheap

AZ-800 Practice Exam: Windows Server Administrator Associate (Core Infrastructure)

199 questions · 100 min timed mode · Microsoft Azure · Updated 2026

Windows Server hybrid core: AD DS, DNS, storage, VMs, and Azure Arc wrangling.

What you'll be tested on

Sample AZ-800 questions

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. You need to identify which server is the PDC emulator for the domain. Solution: From Active Directory Domains and Trusts, you right-click Active Directory Domains and Trusts in the console tree, and then select Operations Master. Does this meet the goal?
  1. Yes
  2. No
Show answerB — No
The answer is No. Active Directory Domains and Trusts only shows the Domain Naming Master when you select Operations Master; it cannot display the PDC emulator. The PDC emulator is a domain-level FSMO role, so you must use Active Directory Users and Computers, right-click the domain, choose Operations Masters, and open the PDC tab. Command-line alternatives such as netdom query fsmo or Get-ADDomain also reveal the PDC emulator, but this solution does not.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. You need to identify which server is the PDC emulator for the domain. Solution: From a command prompt, you run netdom.exe query fsmo. Does this meet the goal?
  1. Yes
  2. No
Show answerA — Yes
The answer is Yes. Running netdom.exe query fsmo from a command prompt lists the holders of all five FSMO roles, including the PDC emulator, schema master, domain naming master, RID master, and infrastructure master. This fully meets the goal of identifying which server holds the PDC emulator role for the domain. The graphical alternative would be Active Directory Users and Computers, right-click the domain, Operations Masters, PDC tab, but the command-line query is faster and complete.
You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. You plan to implement self-service password reset (SSPR) in Azure AD. You need to ensure that users that reset their passwords by using SSPR can use the new password resources in the AD DS domain. What should you do?
  1. Deploy the Azure AD Password Protection proxy service to the on premises network.
  2. Run the Microsoft Azure Active Directory Connect wizard and select Password writeback.
  3. Grant the Change password permission for the domain to the Azure AD Connect service account.
  4. Grant the impersonate a client after authentication user right to the Azure AD Connect service account.
Show answerB — Run the Microsoft Azure Active Directory Connect wizard and select Password writeback.
Password writeback must be enabled in the Azure AD Connect wizard so that passwords changed through Azure AD self-service password reset are written back to the on-premises AD DS domain, letting users sign in locally with the new password immediately. The Azure AD Password Protection proxy only enforces banned password lists on-premises and does not write passwords back. Manually granting Change password or impersonation rights is not the supported configuration step; the wizard configures the required permissions automatically when you select the feature.

Access plans

AccessPrice
3 months$8.99$3.99
1 year$14.99$8.99
Lifetime$24.99$14.99
Practice AZ-800 now →
Free preview inside — try 5 questions before you pay anything.

FAQ

How many practice questions are in this AZ-800 bank?
199 questions covering the current AZ-800 Windows Server Administrator Associate (Core Infrastructure) syllabus, every one with the correct answer and an explanation.
How long is the real AZ-800 exam?
The official AZ-800 exam gives you 100 minutes. Our timed exam mode uses the same limit so the pace feels familiar.
What does AZ-800 access cost?
Plans start at $3.99 for 3 months. One payment, no subscription — and far cheaper than retaking the real exam.