Microsoft Microsoft Certifications AZ-801 Questions & Answers

• Question 91:

  You have an Azure virtual machine named VM1 that runs Windows Server.

  You need to encrypt the contents of the disks on VM1 by using Azure Disk Encryption.

  What is a prerequisite for implementing Azure Disk Encryption?

  A. Customer Lockbox for Microsoft Azure

  B. an Azure key vault

  C. a BitLocker recovery key

  D. data-link layer encryption in Azure

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-overview

• Question 92:

  Your company uses Storage Spaces Direct.

  You need to view the available storage in a Storage Space Direct storage pool.

  What should you use?

  A. System Configuration

  B. File Server Resource Manager (FSRM)

  C. the Get-ScorageFileServer cmdlet

  D. Failover Cluster Manager

  Correct Answer: D

  If Failover Cluster Manager, select the Storage Space Direct storage pool. The information displayed in the main window includes the free space and used space.

• Question 93:

  Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two servers named Server1 and Server2 that run Windows Server.

  You need to ensure that you can use the Computer Management console to manage Server2. The solution must use the principle of least privilege.

  Which two Windows Defender Firewall with Advanced Security rules should you enable on Server2? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. the COM+ Network Access (DCOM-ln) rule

  B. all the rules in the Remote Event Log Management group

  C. the Windows Management Instrumentation (WMI-ln) rule

  D. the COM+ Remote Administration (DCOM-ln) rule

  E. the Windows Management Instrumentation (DCOM-ln) rule

  Correct Answer: AB

  Reference: https://docs.microsoft.com/en-us/windows-server/administration/server-manager/configure-remote-management-in-server-manager

• Question 94:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a server named Server1 that runs Windows Server.

  You need to ensure that only specific applications can modify the data in protected folders on Server1.

  Solution: From App and browser control, you configure the Reputation-based protection.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 95:

  You have an Azure virtual machine named VM1.

  You enable Microsoft Defender SmartScreen on VM1.

  You need to ensure that the SmartScreen messages displayed to users are logged.

  What should you do?

  A. From a command prompt, run WinRM quickconfig.

  B. From the local Group Policy, modify the Advanced Audit Policy Configuration settings.

  C. From Event Viewer, enable the Debug log.

  D. From the Windows Security app. configure the Virus and threat protection settings.

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview

• Question 96:

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains three domain controllers named DC1, DC2, and DC3.

  You connect a Microsoft Defender or identity instances to the domain.

  You need to onboard all the domain controllers to Defender for identity. What should you run the domain controllers?

  A. Azure ATP Sensor Setup.exe

  B. AzureConnectedMachineAgent.msi

  C. MARSAgentInstaller.exe

  D. MMASetup-AMD64.exe

  Correct Answer: A

  Azure ATP uses data from sensors, known as Azure ATP Sensors, that are installed on your domain controllers. The ATP sensors monitor the domain controller network traffic for signs of malicious activity, as well as other security risks such

  as connections made with weak or insecure protocols.

  Incorrect:

  Not B: The Azure Connected Machine agent enables you to manage your Windows and Linux machines hosted outside of Azure on your corporate network or other cloud providers.

  Not C: Azure Backup uses the MARS agent to back up files, folders, and system state from on-premises machines and Azure VMs. Those backups are stored in a

  Recovery Services vault in Azure.

  Not D: The Microsoft Monitoring Agent is a service used to watch and report on application and system health on a Windows computer. The Microsoft Monitoring

  Agent collects and reports a variety of data including performance metrics, event logs and trace information.

• Question 97:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a failover cluster named Cluster1 that hosts an application named App1.

  The General tab in App1 Properties is shown in the General exhibit. (Click the General tab.)

  

  The Failover tab in App1 Properties is shown in the Failover exhibit. (Click the Failover tab.)

  

  Server1 shuts down unexpectedly.

  You need to ensure that when you start Server1, App1 continues to run on Server2.

  Solution: From the Failover settings, you select Prevent failback.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  The Prevent failback setting will prevent the cluster failing back to Server1.

• Question 98:

  You have two Azure Virtual machines that run Windows Server.

  You plan to create a failover cluster that will host the virtual machines.

  You need to configure an Azure Storage account that will be used by the cluster as a cloud witness. The solution must maximize resiliency.

  Which type of redundancy should you configure for the storage account?

  A. Geo-zone-redundant storage (GZRS)

  B. Geo-redundant storage (GRS)

  C. Zone-redundant storage (ZRS)

  D. Locally-redundant storage (LRS)

  Correct Answer: C

  For Replication, you can select Locally-redundant storage (LRS) or Zone-redundant storage (ZRS) as applicable. ZRS offers more redundancy.

  Reference: https://docs.microsoft.com/en-us/windows-server/failover-clustering/deploy-cloud-witness

• Question 99:

  You have an on-premises server named Served that runs Windows Server. You have an Azure subscription.

  You plan to back up the files and folders on Server1 to Azure by using Azure Backup.

  You need to define how long the backups will be retained.

  What should you use to configure the retention?

  A. Backup center

  B. Windows Server Backup

  C. the Microsoft Azure Recovery Services (MARS) agent

  D. a Recovery Services vault

  Correct Answer: C

• Question 100:

  Your company uses Storage Spaces Direct.

  You need to view the available storage in a Storage Space Direct storage pool.

  What should you use?

  A. The Get-StoragefileServer cmdlet

  B. Resource Monitor

  C. System Configuration

  D. Windows Admin Center

  Correct Answer: D