10 free, exam-style Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-800) (AZ-800) practice questions with answers and explanations. No signup required. Work through them below, then take the full free AZ-800 practice test to study every exam domain.
The AZ-800 exam has 60 questions and runs 100 minutes.
These 10 free AZ-800 questions are organized by exam domain, so you can see how each part of the Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-800) blueprint is tested. Reveal the answer and explanation under each question.
Users report that they cannot change their passwords and that account lockouts are behaving inconsistently across the domain. Time on client computers has also drifted. Which FSMO role holder, if unavailable, is the MOST likely cause of these symptoms?
Correct answer: A - PDC Emulator
A web application runs on a farm of four Windows Servers and currently uses a standard domain user account whose password must be rotated manually every 90 days. You need a single identity for all four servers that provides automatic password management. Which account type should you implement?
Correct answer: C - A group Managed Service Account (gMSA)
Before you can create the first group Managed Service Account (gMSA) in a forest, what must exist, and what timing consideration applies in a multi-domain-controller production environment?
Correct answer: A - A KDS root key; wait up to 10 hours for it to replicate to all domain controllers before use
A setting is configured in a GPO linked to the domain and a conflicting setting is configured in a GPO linked to an organizational unit (OU) that contains the user. By default, which setting applies, and what would guarantee the domain-linked setting wins instead?
Correct answer: B - The OU GPO applies by default; set Enforced on the domain-linked GPO to make it win
An organization has three separate Active Directory forests with no trusts between them. They want the simplest hybrid identity solution to synchronize all three forests to Microsoft Entra ID, with high availability if a sync agent fails. Which solution best fits these requirements?
Correct answer: D - Microsoft Entra Cloud Sync using multiple provisioning agents
A security policy states that on-premises password hashes must NOT be stored in the cloud, yet users must sign in to Microsoft 365 with their on-premises credentials validated against on-premises Active Directory. Which authentication method meets this requirement?
Correct answer: C - Pass-through authentication (PTA)
A branch office in a shared building has no secure server room. You must place a domain controller there to speed up local logons, but you need to minimize the exposure of credentials if the server is physically stolen. What should you deploy?
Correct answer: D - A read-only domain controller (RODC) with a restrictive Password Replication Policy
You need to manage several on-premises Windows Servers and non-Azure Linux servers from the Azure portal, including applying Azure Policy and deploying extensions. What must be installed on each server to achieve this?
Correct answer: A - The Azure Connected Machine agent (Azure Arc)
An administrator uses Invoke-Command to run a script on Server1. The script then attempts to copy files from a share on Server2, and the access is denied even though the administrator has permissions to both servers. What is this issue called, and which is a supported way to resolve it?
Correct answer: D - A double-hop (second-hop) problem; configure resource-based Kerberos constrained delegation or CredSSP
On a Hyper-V host you need a virtual switch that allows the guest VMs to communicate with each other and with the management operating system (the host), but that does NOT provide any connectivity to the physical network. Which virtual switch type should you create?
Correct answer: C - Internal
The AZ-800 exam also covers these domains. Drill them in the full free practice test:
Practice hundreds more AZ-800 questions with instant scoring, weak-area drills, and full exam simulations.