Microsoft Microsoft Certifications AZ-801 Questions & Answers

• Question 1:

  You have an Azure virtual machine named VM1 that runs Windows Server.

  The operating system on VM1 fails to fully initialize its network stack, and you cannot establish a network connection.

  You need to establish an interactive shell session.

  What should you use?

  A. Azure Bastion

  B. Serial console

  C. just-in-time (JIT) VM access

  Correct Answer: B

• Question 2:

  Your network contains an on-premises Active Directory Domain Services (AD DS) domain. The domain contains two virtual machines named VM1 and VM2 that run Windows Server.

  You plan to implement a failover cluster named Cluster1 that will use VM1 and VM2 as nodes.

  You need to ensure that Cluster1 can use floating IP addresses.

  Which two components should you deploy? Each correct answer presents part-of the solution.

  NOTE: Each correct selection is worth one point.

  A. Network Load Balancing (NLB)

  B. the Multipoint Services role

  C. the Network Controller role

  D. the Host Guardian Service role

  E. Software Load Balancer (SLB)

  Correct Answer: AE

• Question 3:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an on-premises server named Server1 that runs Windows Server.

  You have a Microsoft Sentinel instance.

  You add the Windows Firewall data connector in Microsoft Sentinel.

  You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1.

  Solution: You install the Microsoft Integration Runtime on Server1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 4:

  Your network contains an Active Directory Domain Services (AD DS) forest. The forest functional level is Windows Server 2012 R2. The forest contains the domains shown in the following table.

  

  You create a user named Admin1.

  You need to ensure that Admin1 can add a new domain controller that runs Windows Server 2022 to the east.contoso.com domain. The solution must follow the principle of least privilege.

  To which groups should you add Admin1?

  A. EAST\Domain Admins only

  B. CONTOSO\Enterprise Admins only

  C. CONTOSO/Schema Admins and EAST\Domain Admins

  D. CONTOSO\Enterprise Admins and CONTOSO/Schema Admins

  Correct Answer: A

• Question 5:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an on-premises server named Server1 that runs Windows Server.

  You have a Microsoft Sentinel instance.

  You add the Windows Firewall data connector in Microsoft Sentine1.

  You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1.

  Solution: You install the Azure Connected Machine agent on Server1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 6:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a server named Server1 that runs Windows Server.

  You need to ensure that only specific applications can modify the data in protected folders on Server1.

  Solution: From Virus and threat protection, you configure Controlled folder access.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/customize- controlled-folders?view=o365-worldwide

• Question 7:

  You plan to deploy the Azure Monitor agent to 100 on-premises servers that run Windows Server. Which parameters should you provide when you install the agent?

  A. the client ID and the secret of an Azure service principal

  B. the name and the access key of an Azure Storage account

  C. a connection string for an Azure SQL database

  D. the ID and the key of an Azure Log Analytics workspace

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/windows-server/storage/storage-spaces/configure-azure-monitor

• Question 8:

  You have a Storage Spaces Direct configuration that has persistent memory and contains the data volumes shown in the following table.

  

  You plan to add data volumes to Storage Spaces Direct as shown in the following table.

  

  On which volumes can you use direct access (DAX)?

  A. Volume3 only

  B. Volume4 only

  C. Volume1 and Volume3 only

  D. Volume2 and Volume4 only

  E. Volume3 and Volume4 only

  Correct Answer: A

  DAX can only be used on one volume and the volume has to be NTFS. You could configure DAX on Volume1 (although that would require reformatting the volume) or Volume3. However, `Volume1 only' isn't an answer option so Volume3 is

  the correct answer.

  `Volume1 and Volume3' is incorrect because of the single volume limitation.

  Reference:

  https://docs.microsoft.com/en-us/windows-server/storage/storage-spaces/persistent-memory-direct-access

• Question 9:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The functional level of the forest is Windows Server 2012 R2. All domain controllers run Windows Server 2012 R2.

  Sysvol replicates by using the File Replication Service (FRS).

  You plan to replace the existing domain controllers with new domain controllers that will run Windows Server 2022.

  You need to ensure that you can add the first domain controller that runs Windows Server 2022.

  Solution: You upgrade the PDC emulator.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead migrate sysvol from FRS to Distributed File System (DFS) Replication.

  Note: Do I need to change SYSVOL replication from FRS to DFS? If your domain is built based on Windows server 2008 or Windows Server 2008 R2, you are already using DFS for SYSVOL replication. If you originally migrated from

  Windows server 2003, it's more likely you are still using FRS. In that case, before migration, you need to change the SYSVOL replication method from FRS to DFS.

  Reference:

  https://www.rebeladmin.com/2021/09/step-by-step-guide-active-directory-migration-from-windows-server-2008-r2-to-windows-server-2022/

• Question 10:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You deploy Azure Migrate to an on-premises network.

  You have an on-premises physical server named Server1 that runs Windows Server and has the following configurations:

  1.

  Operating system disk: 600 GB

  2.

  Data disk: 3 TB

  3.

  NIC Teaming: Enabled

  4.

  Mobility service: Installed

  5.

  Windows Defender Firewall: Enabled

  6.

  Microsoft Defender Antivirus: Enabled

  You need to ensure that you can use Azure Migrate to migrate Server1.

  Solution: You disable Windows Defender Firewall on Server1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B