Microsoft Microsoft Certifications AZ-801 Questions & Answers

• Question 61:

  You have three servers named Server 1. Servers and Server3 that run Windows Server. The servers have the Hyper-V server rote installed and are configured in a Storage Spaces Deed cluster named Cluster1.

  Cluster1 hosts a virtual machine named VM1 that has Windows Admin Center Installed.

  You manage all servers and clusters by using Windows Admin Center.

  You purchase an Azure subscription.

  You need to configure email alerts in Azure Monitor for the following:

  1.

  Disk Capacity Utilization Over 80% for 10 Minutes

  2.

  Any critical alert in the cluster system event log

  3.

  Memory Utilization over 95% for 10 minutes

  4.

  Heartbeat fewer than 5 beats for 5 Minutes.

  5.

  CPU Utilization over 85 % for 10 Minutes.

  6.

  Any hearth service faults for the cluster

  The solution must use the minimum amount of administrative effort.

  What should you do?

  A. From Windows Admin Center, configure Azure Monitor and onboard Cluster1

  B. From Azure portal, configure Azure Monitor and onboard Cluster1 by using Azure Arc.

  C. Configure Azure Monitor and manually install the Microsoft Monitoring Agent on Server1, Server2 and Server3

  Correct Answer: A

• Question 62:

  HOTSPOT

  You have an on-premises server named Server1 that runs Windows Server.

  You have an Azure subscription.

  You plan to back up the files and folders on Server1 by using the Microsoft Azure Recovery Services (MARS) agent.

  You need to identify to which location the backups can be written and the maximum number of scheduled backups that can be performed per day.

  What should you identify? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point

  Hot Area:

  

  Correct Answer:

  

• Question 63:

  HOTSPOT

  Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contos.com. The domain contains the accounts shown in the following table.

  

  The domain is configured to store BitLocker recovery keys in Active Directory.

  1.

  Admin1 turns on BitLocker Drive Encryption (BitLocker) for volume C on Server1.

  2.

  Admin1 moves Server1 to OU1.

  3.

  Admin2 turns on BitLocker for removable volume E on Server2.

  4.

  Admin2 moves removable volume E from Server2 to Server1 and unlocks the volume.

  On which Active Directory object can you each BitLocker recovery key? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth on point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Server1 You can configure Group Policies in your domain so that when encrypting any drive with BitLocker, the computer will save the recovery key in its computer object account in AD (like storing a local computer administrator password generated using LAPS).

  Box 2: Server2

  Reference: http://woshub.com/store-bitlocker-recovery-keys-active-directory/

• Question 64:

  HOTSPOT

  You have an on-premises Active Directory Domain Services (AD DS) domain that contains the resources shown in the following table.

  

  The domain contains the domain controllers shown in the following table.

  

  You configure a site link between Site1 and Site2 and set the replication interval to 20 minutes.

  At 10:00 AM, connectivity between Site1 and Site2 fails.

  Administrators perform the actions shown in the following table.

  

  At 10:30 AM, connectivity between Site1 and Site2 is restored.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth dim point

  Hot Area:

  

  Correct Answer:

  

• Question 65:

  HOTSPOT

  You have a failover cluster named Cluster1 that contains three Windows Server nodes named Node 1, Node2. and Node3.

  You need to deploy a Storage Spaces Direct virtual disk to Cluster1.

  You add the following disks to each node:

  1.

  Three 512-6B NVMe disks

  2.

  Three 3-TB diskS

  3.

  Three 1-TB SSD disks

  On Cluster1. you enable Storage Spaces Direct and add the new disks.

  What is the total amount of disk space available for the Storage Spaces Direct virtual disk, and which operations are cached for the SSD and HDD disks? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 66:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains three servers named Server1, Server2, and Server3 that run Windows Server. All the servers are on the same network and have network connectivity.

  On Server1, Windows Defender Firewall has a connection security rule that has the following settings:

  1.

  Rule Type: Server-to-server

  2.

  Endpoint 1: Any IP address

  3.

  Endpoint 2: Any IP address

  4.

  Requirements: Require authentication for inbound connections and request authentication for outbound connections

  5.

  Authentication Method: Computer (Kerberos V5)

  6.

  Profile: Domain, Private, Public

  7.

  Name: Rule1

  Server2 has no connection security rules.

  On Server3, Windows Defender Firewall has a connection security rule that has the following settings:

  1.

  Rule Type: Server-to-server

  2.

  Endpoint 1: Any IP address

  3.

  Endpoint 2: Any IP address

  4.

  Requirements: Request authentication for inbound and outbound connections

  5.

  Authentication Method: Computer (Kerberos V5)

  6.

  Profile: Domain, Private, Public

  7.

  Name: Rule1

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 67:

  HOTSPOT

  You have an on-premises server that runs Windows Server and contains a folder named Folder1. Folder1 contains 50 GB of files.

  You have an Azure subscription that contains an Azure Files share named share1.

  You need to migrate the data in Folder1 to share1.

  What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 68:

  HOTSPOT

  You have the servers shown in the following table.

  

  You plan to migrate file shares from Server1 to Server2.

  You need to deploy the Storage Migration Service and the Storage Migration Service extension.

  On which server should you install each component? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 69:

  HOTSPOT

  You have an Azure Active Directory Domain Services (Azure AD DS) domain named aadds.contoso.com.

  You have an Azure virtual network named Vnet1. Vnet1 contains two virtual machines named VM1 and VM2 that run Windows Server. VMI and VM2 are joined to aadds.contoso.com.

  You create a new Azure virtual network named Vnet2. You add a new server named VM3 to Vnet2.

  When you attempt to join VM3 to aadds.contoso.com, you get an error message that the domain cannot be found.

  You need to ensure that you can join VM3 toaadds.contoso.com.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Configure virtual network peering between Vnet1 and Vnet2.

  Connectivity issues for domain-join.

  If the VM can't find the managed domain, there's usually a network connection or configuration issue. Review the following troubleshooting steps to locate and resolve the issue:

  1.

  Ensure the VM is connected to the same, or a peered, virtual network as the managed domain. If not, the VM can't find and connect to the domain in order to join.

  If the VM isn't connected to the same virtual network, confirm that the virtual networking peering or VPN connection is Active or Connected to allow the traffic to flow correctly.

  2.

  Try to ping the domain using the domain name of the managed domain, such as ping aaddscontoso.com.

  * If the ping response fails, try to ping the IP addresses for the domain displayed on the overview page in the portal for your managed domain, such as ping

  10.0.0.4.

  * If you can successfully ping the IP address but not the domain, DNS may be incorrectly configured. Make sure that you've configured the managed domain DNS servers for the virtual network.

  Box 2: Add a virtual network link to an existing Azure private DNS zone.

  The private DNS zone already exists.

  After you create a private DNS zone in Azure, you'll need to link a virtual network to it. Once linked, VMs hosted in that virtual network can access the private DNS zone. Every private DNS zone has a collection of virtual network link child

  resources. Each one of these resources represents a connection to a virtual network. A virtual network can be linked to private DNS zone as a registration or as a resolution virtual network.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory-domain-services/troubleshoot-domain-join https://docs.microsoft.com/en-us/azure/dns/private-dns-virtual-network-links

• Question 70:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains servers that run Windows Server as shown in the following table.

  

  Server1 has the connection security rules shown in the following table.

  

  Server2 has the connection security rules shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/change-rules-from-request-to-require-mode