Microsoft Microsoft Certifications AZ-801 Questions & Answers

• Question 71:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server.

  

  You need to ensure that volume D will be unlocked automatically when Server1 restarts.

  How should you complete the command? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Add-BitLockerKeyProtector

  From the exhibit we see for volume D that AutoUnlockEnabled is False, and AutoUnlockKeyStored is empty.

  The Add-BitLockerKeyProtector cmdlet adds a protector for the volume key of the volume protected with BitLocker Drive Encryption.

  Example: The following example adds an ADAccountOrGroup protector to the previously encrypted operating system volume using the SID of the account:

  Add-BitLockerKeyProtector C: -ADAccountOrGroupProtector -ADAccountOrGroup S-1-5-21-3651336348-8937238915-291003330-500

  Active Directory-based protectors are normally used to unlock Failover Cluster enabled volumes.

  Box 2: Service The -Service parameter indicates that the system account for this computer unlocks the encrypted volume.

  Add-BitLockerKeyProtector syntax with use of the ADAccountOrGroupProtector parameter:

  Add-BitLockerKeyProtector [-MountPoint]

  [-ADAccountOrGroupProtector]

  [-ADAccountOrGroup]

  [-Service]

  [-WhatIf]

  [-Confirm]

  []

  Incorrect:

  *

  Enable-BitLockerAutoUnlock

  The Enable-BitLockerAutoUnlock cmdlet enables automatic unlocking for a volume protected by BitLocker Disk Encryption.

  The command has no -ADAccountOrGroupProtector parameter.

  Syntax:

  Enable-BitLockerAutoUnlock [-MountPoint]

  [-WhatIf]

  [-Confirm]

  []

  *

  The Clear-BitLockerAutoUnlock cmdlet removes all automatic unlocking keys used by BitLocker Drive Encryption. BitLocker stores these keys for the fixed data drives of a system on a volume that hosts a BitLocker-enabled operating

  system volume so that it can automatically unlock the fixed and removable data volumes in a system. This makes it easier for users to access data volumes.

  Syntax: Clear-BitLockerAutoUnlock []

  Reference: https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-use-bitlocker-drive-encryption-tools-to-manage-bitlocker https://docs.microsoft.com/en-us/powershell/module/bitlocker/add-bitlockerkeyprotector

• Question 72:

  HOTSPOT

  You have a failover cluster named Cluster1 that contains the nodes shown in the following table.

  

  A File Server for general use cluster role named HAFS is configured as shown in the General exhibit (Click the General tab.)

  

  The Advanced Policies settings for HAFS are configured as shown in the Advanced Policies exhibit. (Click the Advanced Policies tab.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes

  HAFS will move from Node1 to Node3 if we test failover for the cluster.

  Note: Test failover.

  Test failover of the clustered resource to validate cluster functionality.

  Take the following steps:

  1.

  Connect to one of the SQL Server cluster nodes by using RDP.

  2.

  Open Failover Cluster Manager. Select Roles. Notice which node owns the SQL Server FCI role.

  3.

  Right-click the SQL Server FCI role.

  4.

  Select Move, and then select Best Possible Node.

  5.

  Failover Cluster Manager shows the role, and its resources go offline. The resources then move and come back online in the other node.

  Box 2: Yes

  Node1 is the preferred owner.

  Box 3: No

  Node2 is not a possible owner of the cluster.

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/failover-cluster-instance-vnn-azure-load-balancer-configure

• Question 73:

  HOTSPOT

  You have an on-premises server named Server1 and Microsoft Sentinel instance.

  You plan to collect Windows Defender Firewall events from Server1 and analyze the event data by using Microsoft Sentinel.

  What should you install on Server1, and which information should you provide during the instance? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Azure Monitor agent

  The Azure Monitor agent supports Log Analytics, Metrics explorer, and Microsoft Sentinel.

  Note: The Azure Monitor agent is meant to replace the Log Analytics agent, Azure Diagnostic extension and Telegraf agent for both Windows and Linux machines. It can send data to both Azure Monitor Logs and Azure Monitor Metrics and

  uses Data Collection Rules (DCR) which provide a more scalable method of configuring data collection and destinations for each agent.

  Use the Azure Monitor agent if you need to:

  *

  Collect guest logs and metrics from any machine in Azure, in other clouds, or on-premises. (Azure Arc-enabled servers required for machines outside of Azure.)

  *

  Manage data collection configuration centrally, using data collection rules and use Azure Resource Manager (ARM) templates or policies for management overall.

  *

  Send data to Azure Monitor Logs and Azure Monitor Metrics (preview) for analysis with Azure Monitor.

  *

  Use Windows event filtering or multi-homing for logs on Windows and Linux.

  Box 2: The Azure Log Analytics workspace ID and workspace key

  The Azure Monitor agent sends data to Azure Monitor Metrics (preview) or a Log Analytics workspace supporting Azure Monitor Logs.

  Enable Microsoft Defender for Cloud monitoring of on-premises Windows computers.

  1.

  In the Azure portal on the Defender for Cloud - Overview blade, select the Get Started tab.

  2.

  Select Configure under Add new non-Azure computers. A list of your Log Analytics workspaces displays, and should include the Defender for Cloud-SentinelWorkspace.

  3.

  Select this workspace. The Direct Agent blade opens with a link for downloading a Windows agent and keys for your workspace identification (ID) to use when you configure the agent.

  4.

  Select the Download Windows Agent link applicable to your computer processor type to download the setup file.

  5.

  To the right of Workspace ID, select Copy, and then paste the ID into Notepad.

  6.

  To the right of Primary Key, select Copy, and then paste the key into Notepad.

  Reference: https://docs.microsoft.com/en-us/azure/architecture/hybrid/hybrid-security-monitoring https://docs.microsoft.com/en-us/azure/azure-monitor/agents/agents-overview

• Question 74:

  HOTSPOT

  You have a server named Server1 that runs Windows Server.

  On Server1, you create a Data Collector Set named CollectorSet1 based on the Basic template.

  You need to configure CollectorSet1 to meet the following requirements:

  1.

  Older performance counter logs must be overwritten by new ones.

  2.

  Performance counter logging must stop if there is less than 500 MB of free disk space.

  What should you configure for each requirement? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 75:

  HOTSPOT

  You have a server that runs Windows Server and has the Web Server (IIS) server role installed. Server1 hosts a single website that has the following configurations:

  Is accessible by using a URL of https://www.contoso.com:8443 and has an SSL certificate that was issued by a third-party certification authority (CA) in the Microsoft Trusted Root Program:

  1.

  Uses anonymous authentication

  2.

  Was developed by using PHP

  You plan to use APP Service Migration Assistant to migrate the website to Azure App Service.

  You need to migrate the website. The solution must minimize the number of changes made to the existing website.

  What should you do manually to ensure that the website migration is successful? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 76:

  HOTSPOT

  You have two servers that have the Web Server (IIS) server role installed. The servers are configured as shown in the following table.

  

  Both servers are configured to enable website deployment by using the Web Deployment Tool. Server1 hosts a website named Site1 that has Web Deploy Publishing configured.

  You plan to migrate Site1 to Server2.

  You need to perform a pull synchronization of Site1 by using the Web Deployment Agent Service.

  How should you complete the command? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 77:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.

  

  Server3 contains a share named Share1.

  On Server1, DHCP has the following configurations:

  Conflict detection attempts: 3

  An IPv4 scope named Scope1 that has the following settings:

  Address Pool: 172.16.10.100 - 172.16.10.130

  Address Leases:

  172.16.10.100 computer1.contoso.com

  172.16.10.101 computer2.contoso.com Reservations: 172.16.10.101 computer2.contoso.com Policies: Policy1

  You perform the following actions:

  On Server1, you run Export-DhcpServer -File \\Server3\Share1\File1.xml. On Server2, you run Import-DhcpServer -File \\Server3\Share1\File1.xml -BackupPath \\Server3\Share1.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 78:

  HOTSPOT

  You have three servers named Host1, Host2, and VM1 that run Windows Server. Host1 and Host2 have the Hyper-V server role installed. VM1 is a virtual machine hosted on Host1.

  You configure VM1 to replicate to Host2 by using Hyper-V Replica.

  Which types of failovers can you perform on VM1 on each host? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Planned failover performs prerequisites checks to ensure zero data loss. It checks that the primary virtual machine is shut down before beginning the failover. After the virtual machine is failed over, it starts replicating the changes back to the

  primary site when it's available.

  Failover. Pick the latest or other recovery point if configured. A new test virtual machine will be created and started on the secondary site.

  Unplanned Failover from Hyper-V Manager or Failover Clustering Manager. You can recover from the latest recovery point or from previous recovery points if this option is enabled.

  https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/manage/set-up-hyper-v-replica

• Question 79:

  HOTSPOT

  You have a Hyper-V failover cluster named Cluster1 that uses a cloud witness. Cluster1 hosts a virtual machine named VM1 that runs Windows Server.

  You need to fail over VM1 automatically to a different node when a service named Service1 on VM1 fails.

  What should you do on Cluster1 and VM1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 80:

  HOTSPOT

  You have a failover cluster named Cluster1 that contains three nodes.

  You plan to add two file server cluster roles named File1 and File2 to Cluster1. File1 will use the File Server for general use role. File2 will use the Scale-Out File Server for application data role.

  What is the maximum number of nodes for File1 and File2 that can concurrently serve client connections? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/windows-server/failover-clustering/sofs-overview