Microsoft Microsoft Certifications AZ-801 Questions & Answers

• Question 81:

  HOTSPOT

  You have a Hyper-V failover cluster named Cluster1 at a main datacenter. Cluster1 contains two nodes that have the Hyper-V server role installed. Cluster1 hosts 10 highly available virtual machines.

  You have a cluster named Cluster2 in a disaster recovery site. Cluster2 contains two nodes that have the Hyper-V server role installed.

  You plan to use Hyper-V Replica to replicate the virtual machines from Cluster1 to Cluster2.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 82:

  HOTSPOT

  You have a failover cluster named FC1 that contains two nodes named Server1 and Server2. FC1 is configured to use a file share witness.

  You plan to configure FC1 to use a cloud witness.

  You need to configure Azure Storage accounts for the cloud witness.

  Which storage account type and authorization method should you configure? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 83:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains the domains shown in the following table.

  

  You are implementing Microsoft Defender for Identity sensors.

  You need to install the sensors on the minimum number of domain controllers. The solution must ensure that Defender for Identity will detect all the security risks in both the domains.

  What should you identify? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 84:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the organizational units (OUs) shown in the following table.

  

  In the domain, you create the Group Policy Objects (GPOs) shown in the following table.

  

  You need to implement IPsec authentication to ensure that only authenticated computer accounts can connect to the members in the domain. The solution must minimize administrative effort.

  Which GPOs should you apply to the Domain Controllers OU and the Domain Servers OU? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 85:

  HOTSPOT

  The Default Domain Policy Group Policy Object (GPO) is shown in the GPO exhibit. (Click the GPO tab.)

  

  The members of a group named Service Accounts are shown in the Group exhibit. (Click the Group tab.)

  

  An organizational unit (OU) named ServiceAccounts is shown in the OU exhibit. (Click the OU tab.)

  

  You create a Password Settings Object (PSO) as shown in the PSO exhibit. (Click the PSO tab.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 86:

  You have two servers named Server1 and Server2 that run Windows Server. Both servers have the Hyper-V server role installed.

  Server1 hosts three virtual machines named VM1, VM2, and VM3. The virtual machines replicate to Server2.

  Server1 experiences a hardware failure.

  You need to bring VM1, VM2, and VM3 back online as soon as possible.

  From the Hyper-V Manager console on Server2, what should you run for each virtual machine?

  A. Start

  B. Move

  C. Unplanned Failover

  D. Planned Failover

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/windows-server/virtualization/hyper-v/manage/set-up-hyper-v-replica

• Question 87:

  You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant by using password hash synchronization.

  You have a Microsoft 365 subscription.

  All devices are hybrid Azure AD-joined.

  Users report that they must enter their password manually when accessing Microsoft 365 applications.

  You need to reduce the number of times the users are prompted for their password when they access Microsoft 365 and Azure services.

  What should you do?

  A. In Azure AD. configure a Conditional Access policy for the Microsoft Office 365 applications.

  B. In the DNS zone of the AD DS domain, create an autodiscover record.

  C. From Azure AD Connect, enable single sign-on (SSO).

  D. From Azure AD Connect, configure pass-through authentication.

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso-quick-start

• Question 88:

  You have a server named Server1 that runs the Remote Desktop Session Host role service. Server1 has five custom applications installed.

  Users who sign in to Server1 report that the server is slow. Task Manager shows that the average CPU usage on Server1 is above 90 percent. You suspect that a custom application on Server1 is consuming excessive processor capacity.

  You plan to create a Data Collector Set in Performance Monitor to gather performance statistics from Server1.

  You need to view the resources used by each of the five applications. Which object should you add to the Data Collector Set?

  A. Processor information

  B. Processor

  C. Process

  D. Processor performance

  Correct Answer: C

• Question 89:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You deploy Azure Migrate to an on-premises network.

  You have an on-premises physical server named Server1 that runs Windows Server and has the following configuration.

  1.

  Operating system disk 600 GB

  2.

  Data disic 3 TB

  3.

  NIC Teaming: Enabled

  4.

  Mobility service: installed

  5.

  Windows Firewall: Enabled

  6.

  Microsoft Defender Antivirus: Enabled

  You need to ensure that you can use Azure Migrate to migrate Server1.

  Solution: You disable NIC Teaming on Server1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 90:

  You have an Azure subscription that has Microsoft Defender for Cloud enabled.

  You have 50 Azure virtual machines that run Windows Server.

  You need to ensure that any security exploits detected on the virtual machines are forwarded to Defender for Cloud.

  Which extension should you enable on the virtual machines?

  A. Vulnerability assessment for machines

  B. Microsoft Dependency agent

  C. Log Analytics agent for Azure VMs

  D. Guest Configuration agent

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/azure/defender-for-cloud/deploy-vulnerability-assessment-vm