Microsoft Microsoft Certifications AZ-801 Questions & Answers

• Question 51:

  You have an on-premises network and an Azure virtual network.

  You establish a Site-to-Site VPN connection from the on-premises network to the Azure virtual network, but the connection frequently disconnects.

  You need to debug the IPsec tunnel from Azure.

  Which Azure VPN Gateway diagnostic log should you review?

  A. GatewayDiagnosticLog

  B. RouteDiagnosticLog

  C. IKEDiagnosticLog

  D. TunnelDiagnosticLog

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/troubleshoot-vpn-with-azure- diagnostics

• Question 52:

  Your on-premises network has a 200-Mbps connection to Azure and contains a server named Server1 that stores 70 TB of data files.

  You have an Azure Storage account named storage 1.

  You plan to migrate the data files from Server1 to a blob storage container in storage!. Testing shows that copying the data files by using azcopy will take approximately 35 days.

  You need to minimize how long it will take to migrate the data to Azure.

  What should you use?

  A. Storage Migration Service

  B. Azure Storage Explorer

  C. Azure Data Box

  D. Azure File Sync

  Correct Answer: C

  The Microsoft Azure Data Box cloud solution lets you send terabytes of data into and out of Azure in a quick, inexpensive, and reliable way. The secure data transfer is accelerated by shipping you a proprietary Data Box storage device. Each storage device has a maximum usable storage capacity of 80 TB and is transported to your datacenter through a regional carrier. The device has a rugged casing to protect and secure data during the transit.

  Reference: https://docs.microsoft.com/en-us/azure/databox/data-box-overview

• Question 53:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You deploy Azure Migrate to an on-premises network.

  You have an on-premises physical server named Server1 that runs Windows Server and has the following configuration.

  1.

  Operating system disk 600 GB

  2.

  Data disic 3 TB

  3.

  NIC Teaming: Enabled

  4.

  Mobility service: installed

  5.

  Windows Firewall: Enabled

  6.

  Microsoft Defender Antivirus: Enabled

  You need to ensure that you can use Azure Migrate to migrate Server1.

  Solution: You disable Microsoft Defender Antivirus on Server1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 54:

  You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed. You have a Hyper-V failover cluster named Cluster1. All servers are members of the same domain.

  You need to ensure that you use Hyper-V Replica with Kerberos authentication on the default port to replicate virtual machines from Cluster1 to Server1.

  What should you do on Server1?

  A. Add primary servers to the Hyper-V Replica Broker configuration.

  B. From Hyper-V Settings, select Enable incoming and outgoing live migrations

  C. From Windows Defender Firewall with Advanced Security, enable the Hyper-V Replica HTTPS Listener (TCP-ln) rule.

  D. From Windows Defender Firewall with Advanced Security, enable the Hyper-V Replica HTTP Listener (TCP-ln) rule.

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/windows-server/virtualization/hyper-v/manage/set-up-hyper-v-replica

• Question 55:

  You have a Microsoft Sentinel deployment and 100 Azure Arc-enabled on-premises servers. All the Azure Arc-enabled resources are in the same resource group.

  You need to onboard the servers to Microsoft Sentinel. The solution must minimize administrative effort.

  What should you use to onboard the servers to Microsoft Sentinel?

  A. Azure Automation

  B. Azure Policy

  C. Azure virtual machine extensions

  D. Microsoft Defender for Cloud

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/manage/hybrid/server/best-practices/arc-policies-mma

• Question 56:

  You have a three-node failover cluster.

  You need to run pre-scripts and post-scripts when Cluster-Aware Updating (CAU) runs. The solution must minimize administrative effort.

  What should you use?

  A. Scheduled tasks

  B. Run profiles

  C. Azure Functions

  D. Windows Server Update Serveries (WSUS)

  Correct Answer: B

  Cluster-Aware Updating advanced options and updating run profiles. You can set the PreUpdateScript or PostUpdateScript the option.

  Reference: https://docs.microsoft.com/en-us/windows-server/failover-clustering/cluster-aware-updating-options

• Question 57:

  You have two file servers named Server1 and Server2 that run Windows Server. Server1 contains a shared folder named Data. Data contains 10 TB of data.

  You plan to decommission Server1.

  You need to migrate the files from Data to a new shared folder on Server2. The solution must meet the following requirements:

  1.

  Ensure that share, file, and folder permissions are copied.

  2.

  After the initial copy occurs, ensure that changes in \\Server1\Data can be synced to the destination without initiating a full copy.

  3.

  Minimize administrative effort. What should you use?

  A. xcopy

  B. Storage Replica

  C. Storage Migration Service

  D. azcopy

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/windows-server/storage/storage-migration-service/overview#why-use-storage-migration-service

• Question 58:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a server named Server1 that runs Windows Server.

  You need to ensure that only specific applications can modify the data in protected folders on Server1.

  Solution: From Virus and threat protection, you configure Tamper Protection.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/customize-controlled-folders?view=o365-worldwide

• Question 59:

  You have an Azure virtual machine named VM1 that runs Windows Server.

  When you attempt to install the Azure Performance Diagnostics extension on VM I, the installation fails.

  You need to identify the cause of the installation failure.

  What are two possible ways to achieve the goal? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Sign in to VM1 and verify the MonitoringAgent.log file.

  B. Sign in to VM1 and verify the WaAppAgent.log file.

  C. From the Azure portal, view the alerts for VM1.

  D. From the Azure portal, view the activity log for VM1.

  Correct Answer: BD

  B: Windows Azure Guest Agent Service: This service is the service that is responsible for all the logging in WAppAgent.log. This service is responsible for configuring various extensions and communication from Guest to Host.

  D: Activity log: See activity log entries filtered for the current virtual machine. Use this log to view the recent activity of the machine, such as any configuration changes and when it was stopped and started.

  Reference: https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/performance-diagnostics-vm-extension https://docs.microsoft.com/en-us/azure/azure-monitor/vm/monitor-virtual-machine-analyze

• Question 60:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The functional level of the forest is Windows Server 2012 R2. All domain controllers run Windows Server 2012 R2.

  Sysvol replicates by using the File Replication Service (FRS).

  You plan to replace the existing domain controllers with new domain controllers that will run Windows Server 2022.

  You need to ensure that you can add the first domain controller that runs Windows Server 2022.

  Solution: You run the Active Directory Migration Tool (ADMT). Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead migrate sysvol from FRS to Distributed File System (DFS) Replication.

  Note: Do I need to change SYSVOL replication from FRS to DFS? If your domain is built based on Windows server 2008 or Windows Server 2008 R2, you are already using DFS for SYSVOL replication. If you originally migrated from

  Windows server 2003, it's more likely you are still using FRS. In that case, before migration, you need to change the SYSVOL replication method from FRS to DFS.

  Reference:

  https://www.rebeladmin.com/2021/09/step-by-step-guide-active-directory-migration-from-windows-server-2008-r2-to-windows-server-2022/