Microsoft Microsoft Certifications AZ-801 Questions & Answers

• Question 121:

  HOTSPOT

  You need to implement a security policy solution to authorize the applications. The solution must meet the security requirements.

  Which service should you use to enforce the security policy, and what should you use to manage the policy settings? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/wdac-and-applocker-overview

• Question 122:

  HOTSPOT

  You are planning the www.fabrikam.com website migration to support the Azure migration plan.

  How should you configure WebApp1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Add a custom domain name

  To migrate www.fabrikam.com website to an Azure App Service web app, you need to add Fabrikam.com as a custom domain in Azure. This will make the domain name available to use in the web app.

  Box 2: Modify a DNS record

  You need to change the DNS record for www.fabrikam.com to point to the Azure web app.

  HTTP redirect rules won't work because WEB1 and WEB2 will be decommissioned.

  Reference:

  https://docs.microsoft.com/en-us/azure/app-service/app-service-web-tutorial-custom-domain?tabs=a%2Cazurecli

• Question 123:

  HOTSPOT

  You are planning the migration of APP3 and APP4 to support the Azure migration plan.

  What should you do on Cluster1 and in Azure before you perform the migration? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/migrate/tutorial-discover-hyper-v

• Question 124:

  HOTSPOT

  You are planning the europe.fabrikam.com migration to support the on-premises migration plan

  Where should you install the Password Export Server (PES) service, where should you generate the encryption key?

  To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 125:

  HOTSPOT

  You need to configure BitLocker on Server4.

  On which volumes can you turn on BitLocker, and on which volumes can you turn on auto-unlock? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/windows-server/storage/refs/refs-overview https://docs.microsoft.com/en-us/powershell/module/bitlocker/enable-bitlockerautounlock?view=windowsserver2022-ps

• Question 126:

  HOTSPOT

  What is the effective minimum password length for User1 and Admin1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: 9

  When multiple PSOs apply to a user, the PSO with the highest precedence (lowest precedence number) applies which in this case is PSO1.

  Box 2: 8

  There are no PSOs applied to Admin1 so the password policy from the Default Domain GPO applies.

  The Minimum password length setting in GPO1 would only apply to local user accounts on computers in OU1. It does not apply to domain user accounts.

• Question 127:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 128:

  HOTSPOT

  With which servers can Server1 and Server3 communicate? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 129:

  HOTSPOT

  You need to implement alerts for the domain controllers. The solution must meet the technical requirements.

  What should you do on the domain controllers, and what should you create on Azure? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-overview?tabs=PowerShellWindows

• Question 130:

  DRAG DROP

  You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant.

  The AD DS domain contains a domain controller named DC1. DC1 does NOT have internet access.

  You need to configure password security for on-premises users. The solution must meet the following requirements:

  1.

  Prevent the users from using known weak passwords.

  2.

  Prevent the users from using the company name in passwords.

  What should you do? To answer, drag the appropriate configurations to the correct targets. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-password-ban-bad-on-premises-deploy