Microsoft Microsoft Certifications AZ-801 Questions & Answers

• Question 21:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a failover cluster named Cluster1 that hosts an application named App1.

  The General tab in App1 Properties is shown in the General exhibit. (Click the General tab.)

  

  The Failover tab in App1 Properties is shown in the Failover exhibit. (Click the Failover tab.)

  

  Server1 shuts down unexpectedly.

  You need to ensure that when you start Server1, App1 continues to run on Server2.

  Solution: From the General settings, you move Server2 up.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 22:

  Your on-premises network contains two subnets. The subnets contain servers that run Windows Server as shown in the following table.

  

  Server4 has the following IP configurations:

  Ethernet adapter Ethernet:

  Connection-specific DNS Suffix . . :

  IPv4 Address . . . . . . . . . . . : 192.168.0.10

  Subnet Mask . . . . . . . . . . . : 255.255.255.0

  Default Gateway . . . . . . . . . : 192.168.0.1

  From Server4, you can ping Server1 and Server2 successfully. When you ping Server3, you get a Request timed out response.

  From Server2, you can ping Server1 and Server3 successfully.

  The misconfiguration of which component on Server3 can cause the Request timed out response?

  A. default gateway

  B. IP address

  C. subnet mask

  D. DNS server

  Correct Answer: C

• Question 23:

  You have 200 Azure virtual machines.

  You create a recovery plan in Azure Site Recovery to fail over all the virtual machines to an Azure region. The plan has three manual actions.

  You need to replace one of the manual actions with an automated process.

  What should you use?

  A. an Azure Desired State Configuration (DSC) virtual machine extension

  B. an Azure Automation runbook

  C. an Azure PowerShell function

  D. a Custom Script Extension on the virtual machines

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure/site-recovery/recovery-plan-overview

• Question 24:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The functional level of the forest is Windows Server 2012 R2. All domain controllers run Windows Server 2012 R2.

  Sysvol replicates by using the File Replication Service (FRS).

  You plan to replace the existing domain controllers with new domain controllers that will run Windows Server 2022.

  You need to ensure that you can add the first domain controller that runs Windows Server 2022.

  Solution; You raise the domain and forest functional levels.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 25:

  You have 10 servers that run Windows Server in a workgroup.

  You need to configure the servers to encrypt all the network traffic between the servers.

  The solution must be as secure as possible.

  Which authentication method should you configure in a connection security rule?

  A. NTLMv2

  B. pre-shared key

  C. KerberosV5

  D. computer certificate

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/create-an-authentication-request-rule

• Question 26:

  You have a server that runs Windows Server. The server is configured to encrypt all incoming traffic by using a connection security rule. You need to ensure that Server1 can respond to the unencrypted tracert commands initiated from computers on the same network. What should you do from Windows Defender Firewall with Advanced Security?

  A. From the IPsec Settings, configure IPsec defaults.

  B. Create a new custom outbound rule that allows ICMPv4 protocol connections for all profiles.

  C. Change the Firewall state of the Private profile to Off.

  D. From the IPsec Settings, configure IPsec exemptions.

  Correct Answer: D

• Question 27:

  You have three Azure virtual machines named VM1, VM2, and VM3 that host a multitier application.

  You plan to implement Azure Site Recovery.

  You need to ensure that VM1, VM2, and VM3 fail over as a group.

  What should you configure?

  A. an availability zone

  B. a recovery plan

  C. an availability set

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-overview

• Question 28:

  You need to use a comma-separated value (CSV) file to import server inventory to Azure Migrate. Which fields are mandatory for each entry in the CSV file?

  A. Server name. Cores, OS Name, and Memory (in MB)

  B. Server name, IP addresses. Disk 1 size (in GB), and CPU utilization percentage

  C. Server name, IP addresses, OS version, and Number of disks

  Correct Answer: A

  The following table summarizes the file fields to fill in: Reference: https://docs.microsoft.com/en-us/azure/migrate/tutorial-discover-import

  

• Question 29:

  You have an Azure virtual machine named VM1 that runs Windows Server.

  You plan to deploy a new line-of-business (LOB) application to VM1.

  You need to ensure that the application can create child processes.

  What should you configure on VM1?

  A. Microsoft Defender Credential Guard

  B. Microsoft Defender Application Control

  C. Microsoft Defender SmartScreen

  D. Exploit protection

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/customize-exploit-protection?view=o365-worldwide

• Question 30:

  You have five Azure virtual machines.

  You need to collect performance data and Windows Event logs from the virtual machines.

  The data collected must be sent to an Azure Storage account.

  What should you install on the virtual machines?

  A. the Azure Connected Machine agent

  B. the Azure Monitor agent

  C. the Dependency agent

  D. the Telegraf agent

  E. the Azure Diagnostics extension

  Correct Answer: E

  Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/agents/diagnostics-extension-overview