Microsoft AZ-801 Exam Dumps

Microsoft AZ-801 Sample Question Answers

Question # 1

Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The functional level of the forest is Windows Server 2012 R2. All domain controllers run Windows Server 2012 R2. Sysvol replicates by using the File Replication Service (FRS). You plan to replace the existing domain controllers with new domain controllers that will run Windows Server 2022. You need to ensure that you can add the first domain controller that runs Windows Server 2022. Solution; You raise the domain and forest functional levels. Does this meet the goal? 

A. Yes 
B. No 

Show Answer

Question # 2

You have 200 Azure virtual machines. You create a recovery plan in Azure Site Recovery to fail over all the virtual machines to an Azure region. The plan has three manual actions. You need to replace one of the manual actions with an automated process. What should you use? 

A. an Azure Desired State Configuration (DSC) virtual machine extension 
B. an Azure Automation runbook 
C. an Azure PowerShell function 
D. a Custom Script Extension on the virtual machines 

Show Answer

Question # 3

You have 10 servers that run Windows Server in a workgroup. You need to configure the servers to encrypt all the network traffic between the servers. The solution must be as secure as possible. Which authentication method should you configure in a connection security rule? 

A. NTLMv2 
B. pre-shared key 
C. KerberosV5 
D. computer certificate 

Show Answer

Question # 4

You have three Azure virtual machines named VM1, VM2, and VM3 that host a multitier application. You plan to implement Azure Site Recovery. You need to ensure that VM1, VM2, and VM3 fail over as a group. What should you configure? 

A. an availability zone 
B. a recovery plan 
C. an availability set 

Show Answer

Question # 5

You have a server that runs Windows Server. The server is configured to encrypt all incoming traffic by using a connection security rule. You need to ensure that Server1 can respond to the unencrypted tracert commands initiated from computers on the same network. What should you do from Windows Defender Firewall with Advanced Security? 

A. From the IPsec Settings, configure IPsec defaults. 
B. Create a new custom outbound rule that allows ICMPv4 protocol connections for all profiles. 
C. Change the Firewall state of the Private profile to Off. 
D. From the IPsec Settings, configure IPsec exemptions. 

Show Answer

Question # 6

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The functional level of the forest is Windows Server 2012 R2. All domain controllers run Windows Server 2012 R2. Sysvol replicates by using the File Replication Service (FRS). You plan to replace the existing domain controllers with new domain controllers that will run Windows Server 2022. You need to ensure that you can add the first domain controller that runs Windows Server 2022. Solution: You upgrade the PDC emulator. Does this meet the goal? 

A. Yes 
B. No 

Show Answer

Question # 7

You plan to deploy the Azure Monitor agent to 100 on-premises servers that run Windows Server. Which parameters should you provide when you install the agent? 

A. the client ID and the secret of an Azure service principal 
B. the name and the access key of an Azure Storage account 
C. a connection string for an Azure SQL database 
D. the ID and the key of an Azure Log Analytics workspace 

Show Answer

Question # 8

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a server named Server1 that runs Windows Server. You need to ensure that only specific applications can modify the data in protected folders on Server1. Solution: From Virus & threat protection, you configure Controlled folder access. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 9

You need to use a comma-separated value (CSV) file to import server inventory to Azure Migrate. Which fields are mandatory for each entry in the CSV file? 

A. Server name. Cores, OS Name, and Memory (in MB)
B. Server name, IP addresses. Disk 1 size (in GB), and CPU utilization percentage 
C. Server name, IP addresses, OS version, and Number of disks 

Show Answer

Question # 10

You have five Azure virtual machines. You need to collect performance data and Windows Event logs from the virtual machines. The data collected must be sent to an Azure Storage account. What should you install on the virtual machines? 

A. the Azure Connected Machine agent
 B. the Azure Monitor agent 
C. the Dependency agent 
D. the Telegraf agent 
E. the Azure Diagnostics extension 

Show Answer

Question # 11

You have an Azure virtual machine named VM1 that runs Windows Server. You plan to deploy a new line-of-business (LOB) application to VM1. You need to ensure that the application can create child processes. What should you configure on VM1? 

A. Microsoft Defender Credential Guard 
B. Microsoft Defender Application Control 
C. Microsoft Defender SmartScreen 
D. Exploit protection 

Show Answer

Question # 12

You have a failover cluster named Cluster1 that has the following configurations: Number of nodes: 6 Quorum: Dynamic quorum Witness: File share, Dynamic witness What is the maximum number of nodes that can fail simultaneously while maintaining quorum? 

A. 1 
B. 2 
C. 3 
D. 4 
E. 5 

Show Answer

Question # 13

You have two servers named Server1 and Server2 that run Windows Server. Both servers have the Hyper-V server role installed. Server1 hosts three virtual machines named VM1, VM2, and VM3. The virtual machines replicate to Server2. Server1 experiences a hardware failure. You need to bring VM1, VM2, and VM3 back online as soon as possible. From the Hyper-V Manager console on Server2, what should you run for each virtual machine?

A. Start 
B. Move
 C. Unplanned Failover 
D. Planned Failover 

Show Answer

Question # 14

Your network contains an Active Directory Domain Services (AD DS) domain All domain members have Microsoft Defender Credential Guard with UEFI tock configured in the domain you deploy a server named Server1 that runs Windows Server. You disable Credential Guard on Server1. You need to ensure that Server1 is MOST subject to Credential Guard restrictions. What should you do next? 

A. Run the Device Guard and Credential Guard hardware readiness tool 
B. Disable the Turn on Virtual nation Based Security group policy setting 
C. Run dism and specify the /Disable-Feature and /FeatureName:IsolatedUserMode parameters 

Show Answer

Question # 15

Your company uses Storage Spaces Direct. You need to view the available storage in a Storage Space Direct storage pool. What should you use? 

A. File Server Resource Manager (FSRM) 
B. the Get-StorageSubsystem cmdlet 
C. Disk Management 
D. Windows Admin Center 

Show Answer

Question # 16

You have an Azure virtual machine named VM1 that has the Web Server (IIS) server role installed. VM1 hosts a critical line-of-business (LOB) application. After the security team at your company deploys a new security baseline to VM1, users begin reporting that the application is unresponsive. You suspect that the security baseline has caused networking issues. You need to perform a network trace on VM1. What should you do? 

A. From VM1, run necscac. 
B. From Performance Monitor on VM1. create a Data Collector Set.
 C. From the Azure portal, configure the Diagnostics settings for VM1. 
D. From the Azure portal, configure the Performance diagnostics settings for VM1. 

Show Answer

Question # 17

You have an Azure virtual machine named VM1. Crash dumps for a process named Process1 are enabled for VM1. When process1.exe on VM1 crashes, a technician must access the memory dump files on the virtual machine. The technician must be prevented from accessing the virtual machine. To what should you provide the technician access? 

A. an Azure file share 
B. an Azure Log Analytics workspace 
C. an Azure Blob Storage container 
D. a managed disk 

Show Answer

Question # 18

You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed. You import the Azure Migrate appliance as VM1. You need to register VM1 with Azure Migrate. What should you do in Azure Migrate? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A. Create a project. 
B. Add a migration tool. 
C. Add an assessment tool. 
D. Generate a project key. 
E. Download the Azure Migrate installer script ZIP file. 

Show Answer

Question # 19

You have 100 Azure virtual machines that run Windows Server. The virtual machines are onboarded to Microsoft Defender for Cloud. You need to shut down a virtual machine automatically if Microsoft Defender for Cloud generates the "Antimalware disabled in the virtual machine" alert for the virtual machine. What should you use in Microsoft Defender for Cloud

A. a logic app 
B. a workbook 
C. a security policy 
D. adaptive network hardening 

Show Answer

Question # 20

You have an on-premises server that runs Windows Server and has the Web Server (IIS) server role installed. The server hosts a web app that connects to an on-premises Microsoft SQL Server database. You plan to migrate the web app to an Azure App Services web app. The database will remain on-premises. You need to ensure that the migrated web app can access the database. What should you configure in Azure? 

A. an Azure SQL managed instance 
B. an on-premises data gateway 
C. Azure Extended Network 
D. a Hybrid Connection 

Show Answer

Question # 21

You have a Site-to-Site VPN between an on-premises network and an Azure VPN gateway. BGP is disabled for the Site-to-Site VPN. You have an Azure virtual network named Vnet1 that contains a subnet named Subnet1. Subnet1 contains a virtual machine named Server1. You can connect to Server1 from the on-premises network. You extend the address space of Vnet1. You add a subnet named Subnet2 to Vnet1. Subnet2 uses the extended address space. You deploy an Azure virtual machine named Server2 to Subnet2. You cannot connect to Server2 from the on-premises network. Server1 can connect to Server2. You need to ensure that you can connect to Subnet2 from the on-premises network. What should you do? 

A. Add an additional Site-to-Site VPN between the on-premises network and Vnetl. 
B. Add a private endpoint to Subnet2. 
C. To Subnet2. add a route table that contains a user-defined route.
 D. Update the routing information on the on-premises routers. 

Show Answer

Question # 22

Your network contains an Active Directory Domain Services (AD DS> domain. The domain contains 20 Active Directory sites. All user management is performed from a central site. You add users to a group. You discover that group changes do NOT appear on a domain controller in a remote site. You need to identify whether the group changes appear on other domain controllers. What should you use? 

A. Microsoft Support and Recovery Assistant 
B. File Replication Service (FRS) Status Viewer
 C. Active Directory Replication Status Tool 
D. Active Directory Sites and Services 

Show Answer

Question # 23

You have a failover cluster named Cluster1 that hosts an application named App1. The General tab in App1 Properties is shown in the General exhibit (Click the General Tat) The failover tab in App1 Properties is shown in the failover exhibit (Click the Failover tab.) Server 1 shuts down unexpectedly. You need to ensure that when you start Server 1. App1 continues to run on Server2 Solution: From the General settings, you increase the priority of Server2 in the Preferred Owners list. Does this meet the goal? 

A. Yes 
B. NO 

Show Answer

Question # 24

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a server named Server1 that runs Windows Server. You need to ensure that only specific applications can modify the data in protected folders on Server1. Solution: From App & browser control, you configure the Exploit protection settings. Does this meet the goal? 

A. Yes 
B. No 

Show Answer

Question # 25

You deploy Azure Migrate to an on-premises network. You have an on-premises physical server named Server1 that runs Windows Server and has the following configuration. * Operating system disk 600 GB * Data disic 3 TB * NIC Teaming: Enabled * Mobility service: installed * Windows Firewall: Enabled * Microsoft Defender Antivirus: Enabled You need to ensure that you can use Azure Migrate to migrate Server1. Solution: You shrink the data disk on Server1. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 26

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The functional level of the forest is Windows Server 2012 R2. All domain controllers run Windows Server 2012 R2. Sysvol replicates by using the File Replication Service (FRS). You plan to replace the existing domain controllers with new domain controllers that will run Windows Server 2022. You need to ensure that you can add the first domain controller that runs Windows Server 2022. Solution: You migrate sysvol from FRS to Distributed File System (DFS) Replication. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 27

You have an Azure virtual machine named VM1. You install an application on VM1, and then restart the virtual machine. After the restart, you get the following error message: “Boot failure. Reboot and Select proper Boot Device or Insert Boot Media in selected Boot Device.” You need to mount the operating system disk offline from VM1 to a temporary virtual machine to troubleshoot the issue. Which command should you run in Azure CLI? 

A. az vm repair create 
B. az vm boot-diagnostics enable 
C. az vm capture 
D. az vm disk attach 

Show Answer

Question # 28

You have five Azure virtual machines. You have a dedicated Azure Storage account to collect performance data. You need to send the collected data directly to the Azure Storage account. What should you install on the virtual machines? 

A. the Telegraf agent 
B. the Azure Monitor agent 
C. the Dependency agent 
D. the Azure Diagnostics extension 
E. the Azure Connected Machine agent 

Show Answer