Microsoft Microsoft Certifications AZ-801 Questions & Answers

• Question 11:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a failover cluster named Cluster1 that hosts an application named App1.

  The General tab in App1 Properties is shown in the General exhibit. (Click the General tab.)

  

  The Failover tab in App1 Properties is shown in the Failover exhibit. (Click the Failover tab.)

  

  Server1 shuts down unexpectedly.

  You need to ensure that when you start Server1, App1 continues to run on Server2.

  Solution: You pause the Server1 node in Cluster1 and then start Server1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead, from the Failover settings, you select Prevent failback

  Note: The Prevent failback setting will prevent the cluster failing back to Server1.

  Preventing failback.

  A third potential setting is used after a resource's cluster node comes back online after a failover. Under the Failover tab is the Failback setting with the default setting "prevent failback." When failback is configured, the virtual machine will

  return back to its original host when that host is again available. If you want virtual machines to return to your known configuration after a host problem, this can be a good thing.

  Reference:

  https://www.computerweekly.com/tip/Configuring-cluster-failover-settings-for-Hyper-V-virtual-machines

• Question 12:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an on-premises server named Server1 that runs Windows Server.

  You have a Microsoft Sentinel instance.

  You add the Windows Firewall data connector in Microsoft Sentinel.

  You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1.

  Solution: You onboard Server1 to Microsoft Defender for Endpoint.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 13:

  Your network contains an Active Directory Domain Services (AD DS) forest.

  You need to deploy a Storage Spaces Direct converged infrastructure. The solution must meet the following requirements:

  1.

  Use an Ethernet fabric

  2.

  Eliminate the need for Data Center Bridging (DCB).

  Which Remote Direct Memory Access (RDMA) networking technology should you implement?

  A. InfiniBand

  B. RoCEv2

  C. iWARP

  D. RoCEv1

  Correct Answer: C

• Question 14:

  You have an Azure subscription that contains a user named User1 and the resources shown in the following table.

  

  User1 has a computer named Computer1 that runs Windows 11. User1 works from home and establishes a Point-to-Site (P2S) connection to GW1 to access AppSvr1. You deploy the resources shown in the following table.

  

  User1 cannot access AppSvr2.

  You need to ensure that User1 can access AppSvr2.

  What should you do?

  A. On Computer1, download and reinstall the VPN client.

  B. Create a route table and associate the table with GatewaySubnet on VNet1.

  C. On Computer1, modify the Windows Defender Firewall settings.

  D. Add a service endpoint to VNet2.

  Correct Answer: A

• Question 15:

  You have an Azure subscription named Sub1 that contains a resource group named RG1. RG1 contains the resources shown in the following table.

  

  Sub1 has Microsoft Defender for Servers enabled. You are assigned the Contributor role for Sub1.

  You need to implement just-in-time (JIT) VM access for VM1.

  What should you do first?

  A. Create a network security group (NSG).

  B. Enable enhanced security in Microsoft Defender for Cloud.

  C. Request the Owner role for Sub1.

  D. Create an application security group.

  Correct Answer: A

• Question 16:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an on-premises server named Server1 that runs Windows Server.

  You have a Microsoft Sentinel instance.

  You add the Windows Firewall data connector in Microsoft Sentinel.

  You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1.

  Solution: You install the Log Analytics agent on Server1

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 17:

  You have two Azure virtual networks named Vnet1 and Vnet2.

  You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN.

  You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit Vnet2 can use the remote gateway.

  You discover that Client1 cannot communicate with Vnet2.

  You need to ensure that Client1 can communicate with Vnet2.

  Solution: You resize the gateway of Vnet1 to a larger SKU.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 18:

  You have two Azure virtual networks named Vnet1 and Vnet2.

  You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN.

  You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit Vnet2 can use the remote gateway.

  You discover that Client1 cannot communicate with Vnet2.

  You need to ensure that Client1 can communicate with Vnet2.

  Solution: You download and reinstall the VPN client configuration.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 19:

  You have two Azure virtual networks named Vnet1 and Vnet2.

  You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN.

  You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit Vnet2 can use the remote gateway.

  You discover that Client1 cannot communicate with Vnet2.

  You need to ensure that Client1 can communicate with Vnet2.

  Solution: You enable BGP on the gateway of Vnet1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 20:

  You have 50 on-premises servers that run Windows Server. You have an Azure subscription that contains 50 virtual machines that run Windows Server. You need to create an Azure Monitor alert that will be triggered if one of the servers or virtual machines has less than 10 percent available disk space. What should you do first?

  A. Create an Alert Rule

  B. Install the Azure Monitor agent on each server.

  C. Enable System Insights on each server.

  D. Create a Log Analytics workspace and configure the Agent management settings.

  Correct Answer: A

  https://learn.microsoft.com/en-us/answers/questions/165893/help-to-set-up-azure-alert-fordisk-space-alert-wh.html