Microsoft Microsoft Certifications AZ-801 Questions & Answers

• Question 111:

  You are remediating the firewall security risks to meet the security requirements. What should you configure to reduce the risks?

  A. a Group Policy Object (GPO)

  B. adaptive network hardening in Microsoft Defender for Cloud

  C. a network security group (NSG) in Sub1

  D. an Azure Firewall policy

  Correct Answer: A

  Firewall rules configured in a Group Policy Object cannot be modified by local server administrators.

  Reference: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/create-an-inbound-port-rule

• Question 112:

  You are planning the deployment of Microsoft Sentinel.

  Which type of Microsoft Sentinel data connector should you use to meet the security requirements?

  A. Threat Intelligence - TAXII

  B. Azure Active Directory

  C. Microsoft Defender for Cloud

  D. Microsoft Defender for Identity

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/defender-for-identity/cas-isp-legacy-protocols

• Question 113:

  HOTSPOT

  You have an Azure subscription.

  You plan to deploy a virtual machine named VM1 to the East US Azure region and use Azure Site Recovery between availability zones.

  You need to configure the disks on VM1 and the virtual network. The solution must meet the following requirements:

  1.

  Maximize the availability of VM1.

  2.

  Maintain the private IP address of VM1 during failover and failback operations. What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 114:

  HOTSPOT

  You have a generation 1 Azure virtual machine named VM1 that runs Windows Server and is joined to an Active Directory domain.

  You plan to enable BitLocker Drive Encryption (Bit-Locker) on volume C of VM1.

  You need to ensure that the BitLocker recovery key for VM1 is stored in Active Directory.

  Which two Group Policy settings should you configure first? To answer, select the settings in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 115:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains an organizational unit (OU) named OU1. OU1 contains servers that run sensitive workloads.

  You plan to add connection security rules that meet the following requirements:

  1.

  The servers in OU1 must only accept connections from domain-joined

  2.

  The servers in OU1 must only be able to communicate with domain-joined

  You create a Group Policy Object (GPO) named GPO1 and link GPO1 to contoso.com.

  You need to configure a connection security rule in GPO1 by using Windows Defender Firewall with Advanced Security.

  How should you configure the rule? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 116:

  HOTSPOT

  You have a Windows Server failover cluster named Cluster1 that has a cloud witness and the nodes shown in the following table.

  

  Cluster1 has the roles shown in the following table.

  

  Cluster1 has the following configuration.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  1.

  Yes.

  Node 4 has the file server role and is in the same site as node 3. As node 4 is not assigned vote, this means that node 4 will not take part in voting but it can still run the file server service. Furthermore, in multi-stie configuration, failover

  preference will be on the node in the same site (node 4)

  2.

  No.

  As node 1 is in the same site as node 2, the preference will be to failover the DFS role on node 1.

  3.

  Yes

  Site 1 has 2 nodes with the DFS role. Even if site 2 fails, 3 votes will still be remaining (node1, node2 and cloud witness) which is sufficient to maintain quorum.

• Question 117:

  HOTSPOT

  You have three Hyper-V hosts named Server1, Server2, and Server3 that run Windows Server, Server1 hosts a virtual machine named VM1.

  You enable Hyper-V Replica to replicate VM1 to Server2 and set the replication frequency to 30 seconds.

  You need to extend the replication and create a second replica of VM1.

  On which Hyper-V hosts should you configure the replication, and what is the minimum replication frequency you can use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 118:

  HOTSPOT

  Your on-premises datacenter contains physical servers and Hyper-V virtual machines.

  You have an Azure subscription.

  You plan to use Azure Migrate to perform the following tasks:

  1.

  Migrate the physical servers to Azure virtual machines.

  2.

  Migrate the Hyper-V virtual machines to Azure.

  What should you use for each task? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 119:

  HOTSPOT

  Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains 10 servers that run Windows Server.

  You have an Azure subscription. The subscription contains 10 virtual machines that run Windows Server.

  You need to install the Azure Monitor Agent on the Azure virtual machines and the on-premises servers.

  What should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 120:

  HOTSPOT

  You have an Azure virtual machine named VM1 that runs Windows Server.

  You need to perform the following tasks on VM1:

  1.

  Configure Windows Defender Firewall to allow Remote Desktop connections,

  2.

  Configure where to store the logs of the virtual machine console.

  Which two settings should you use? To answer, select the settings in the answer area.

  NOTE: Each correct selection is worth one point,

  Hot Area:

  

  Correct Answer: