Microsoft Microsoft Certifications AZ-801 Questions & Answers

• Question 31:

  You have a Site-to-Site VPN between an on-premises network and an Azure VPN gateway. BGP is disabled for the Site-to-Site VPN.

  You have an Azure virtual network named Vnet1 that contains a subnet named Subnet1. Subnet1 contains a virtual machine named Server1.

  You can connect to Server1 from the on-premises network.

  You extend the address space of Vnet1. You add a subnet named Subnet2 to Vnet1. Subnet2 uses the extended address space. You deploy an Azure virtual machine named Server2 to Subnet2.

  You cannot connect to Server2 from the on-premises network. Server1 can connect to Server2.

  You need to ensure that you can connect to Subnet2 from the on-premises network.

  What should you do?

  A. Add an additional Site-to-Site VPN between the on-premises network and Vnetl.

  B. Add a private endpoint to Subnet2.

  C. To Subnet2. add a route table that contains a user-defined route.

  D. Update the routing information on the on-premises routers.

  Correct Answer: D

• Question 32:

  You have a failover cluster named Cluster1 that has the following configurations:

  1.

  Number of nodes: 6

  2.

  Quorum: Dynamic quorum

  3.

  Witness: File share, Dynamic witness

  What is the maximum number of nodes that can fail simultaneously while maintaining quorum?

  A. 1

  B. 2

  C. 3

  D. 4

  E. 5

  Correct Answer: C

  Note this question is asking about nodes failing `simultaneously', not nodes failing one after the other.

  With six nodes and one witness, there are seven votes. To maintain quorum there needs to be four votes available (four votes is the majority of seven). This means that a minimum of three nodes plus the witness need to remain online for the

  cluster to function. Therefore, the maximum number of simultaneous failures is three.

  Reference:

  https://docs.microsoft.com/en-us/windows-server/storage/storage-spaces/understand-quorum

• Question 33:

  Your company uses Storage Spaces Direct.

  You need to view the available storage in a Storage Space Direct storage pool.

  What should you use?

  A. File Server Resource Manager (FSRM)

  B. the Get-StorageSubsystem cmdlet

  C. Disk Management

  D. Windows Admin Center

  Correct Answer: D

• Question 34:

  Your network contains an Active Directory Domain Services (AD DS) domain All domain members have Microsoft Defender Credential Guard with UEFI tock configured in the domain you deploy a server named Server1 that runs Windows

  Server.

  You disable Credential Guard on Server1.

  You need to ensure that Server1 is MOST subject to Credential Guard restrictions.

  What should you do next?

  A. Run the Device Guard and Credential Guard hardware readiness tool

  B. Disable the Turn on Virtual nation Based Security group policy setting

  C. Run dism and specify the /Disable-Feature and /FeatureName:IsolatedUserMode parameters

  Correct Answer: B

• Question 35:

  You have an Azure virtual machine named VM1 that has the Web Server (IIS) server role installed. VM1 hosts a critical line-of-business (LOB) application.

  After the security team at your company deploys a new security baseline to VM1, users begin reporting that the application is unresponsive.

  You suspect that the security baseline has caused networking issues.

  You need to perform a network trace on VM1.

  What should you do?

  A. From VM1, run necscac.

  B. From Performance Monitor on VM1. create a Data Collector Set.

  C. From the Azure portal, configure the Diagnostics settings for VM1.

  D. From the Azure portal, configure the Performance diagnostics settings for VM1.

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/performance-diagnostics

• Question 36:

  You have an Azure virtual machine named VM1. Crash dumps for a process named Process1 are enabled for VM1.

  When process1.exe on VM1 crashes, a technician must access the memory dump files on the virtual machine.

  The technician must be prevented from accessing the virtual machine.

  To what should you provide the technician access?

  A. an Azure file share

  B. an Azure Log Analytics workspace

  C. an Azure Blob Storage container

  D. a managed disk

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/agents/diagnostics-extension-overview

• Question 37:

  You have an on-premises server that runs Windows Server and has the Web Server (IIS) server role installed. The server hosts a web app that connects to an on-premises Microsoft SQL Server database.

  You plan to migrate the web app to an Azure App Services web app. The database will remain on-premises.

  You need to ensure that the migrated web app can access the database.

  What should you configure in Azure?

  A. an Azure SQL managed instance

  B. an on-premises data gateway

  C. Azure Extended Network

  D. a Hybrid Connection

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/azure/app-service/app-service-hybrid-connections

• Question 38:

  You have 100 Azure virtual machines that run Windows Server. The virtual machines are onboarded to Microsoft Defender for Cloud.

  You need to shut down a virtual machine automatically if Microsoft Defender for Cloud generates the "Antimalware disabled in the virtual machine" alert for the virtual machine.

  What should you use in Microsoft Defender for Cloud?

  A. a logic app

  B. a workbook

  C. a security policy

  D. adaptive network hardening

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/azure/defender-for-cloud/managing-and-responding-alerts

• Question 39:

  You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed.

  You import the Azure Migrate appliance as VM1.

  You need to register VM1 with Azure Migrate.

  What should you do in Azure Migrate? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Create a project.

  B. Add a migration tool.

  C. Add an assessment tool.

  D. Generate a project key.

  E. Download the Azure Migrate installer script ZIP file.

  Correct Answer: AD

  Reference: https://docs.microsoft.com/en-us/azure/migrate/how-to-set-up-appliance-hyper-v

• Question 40:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You deploy Azure Migrate to an on-premises network.

  You have an on-premises physical server named Server1 that runs Windows Server and has the following configuration.

  1.

  Operating system disk 600 GB

  2.

  Data disic 3 TB

  3.

  NIC Teaming: Enabled

  4.

  Mobility service: installed

  5.

  Windows Firewall: Enabled

  6.

  Microsoft Defender Antivirus: Enabled

  You need to ensure that you can use Azure Migrate to migrate Server1.

  Solution: You shrink the data disk on Server1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B