Last AZ-801 practice test reviews: Practice Test Microsoft dumps
Try AZ-801 Free Now! Real Exam Question Answers Updated [Nov 30, 2024]
Microsoft AZ-801 exam, also known as Configuring Windows Server Hybrid Advanced Services, is designed for IT professionals who are responsible for managing and configuring hybrid cloud solutions that integrate with Microsoft technology. AZ-801 exam measures the ability of the candidates to configure and manage hybrid scenarios for Active Directory, storage, networking, and security. Passing AZ-801 exam validates the skills and knowledge required to implement and manage hybrid scenarios that span on-premises and cloud environments.
Microsoft AZ-801 exam is a challenging exam that requires diligent preparation and a deep understanding of the subject matter. Candidates will need to have hands-on experience with various technologies and services in hybrid scenarios, as well as a solid understanding of Microsoft's cloud-based solutions. Candidates who pass the exam will demonstrate their ability to design and implement hybrid infrastructure solutions that meet the needs of their organization.
NEW QUESTION # 62
You have the servers shown in the following table.
You plan to migrate file shares from Server1 to Server2.
Answer:
Explanation:
NEW QUESTION # 63
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the organizational units (OUs) shown in the following table.
In the domain, you create the Group Policy Objects (GPOs) shown in the following table.
You need to implement IPsec authentication to ensure that only authenticated computer accounts can connect to the members in the domain. The solution must minimize administrative effort.
Which GPOs should you apply to the Domain Controllers OU and the Domain Servers OU? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Table Description automatically generated
Reference:
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/configure- authentication-methods
NEW QUESTION # 64
What is the effective minimum password length for User1 and Admin1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Table Description automatically generated
Box 1: 9
When multiple PSOs apply to a user, the PSO with the highest precedence (lowest precedence number) applies which in this case is PSO1.
Box 2: 8
There are no PSOs applied to Admin1 so the password policy from the Default Domain GPO applies.
The Minimum password length setting in GPO1 would only apply to local user accounts on computers in OU1. It does not apply to domain user accounts.
NEW QUESTION # 65
You have an Azure Active Directory Domain Services (Azure AD DS) domain named aadds.contoso.com.
You have an Azure virtual network named Vnet1. Vnet1 contains two virtual machines named VM1 and VM2 that run Windows Server. VMI and VM2 are joined to aadds.contoso.com.
You create a new Azure virtual network named Vnet2. You add a new server named VM3 to Vnet2.
When you attempt to join VM3 to aadds.contoso.com, you get an error message that the domain cannot be found.
You need to ensure that you can join VM3 toaadds.contoso.com.
Answer:
Explanation:
NEW QUESTION # 66
You need to meet the technical requirements for Cluster2.
Which four actions should you perform in sequence before you can enable replication? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/site-recovery/hyper-v-azure-tutorial
Topic 1, Contoso, Ltd
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Overview
Contoso, Ltd. is a manufacturing company that has a main office in Seattle and branch offices in Los Angeles and Montreal.
Existing Environment
Active Directory Environment
Contoso has an on-premises Active Directory Domain Services (AD DS) domain named contoso.com that syncs with an Azure Active Directory (Azure AD) tenant. The AD DS domain contains the domain controllers shown in the following table.
Contoso recently purchased an Azure subscription.
The functional level of the forest is Windows Server 2012 R2. The functional level of the domain is Windows Server 2012. The forest has the Active Directory Recycle Bin enabled.
The contoso.com domain contains the users shown in the following table.
The contoso.com domain has the Group Policy Objects (GPOs) shown in the following table.
The contoso.com domain has the Password Settings Objects (PSOs) shown in the following table.
Server Infrastructure
The contoso.com domain contains servers that run Windows Server 2022 as shown in the following table.
By using Windows Firewall with Advanced Security, the servers have isolation connection security rules configured as shown in the following table.
Server4 has no connection security rules.
Server4 Configurations
Server4 has the effective Group Policy settings for user rights as shown in the following table.
Server4 has the disk configurations shown in the following exhibit.
Virtualization Infrastructure
The contoso.com domain has the Hyper-V failover clusters shown in the following table.
Technical Requirements
Contoso identifies the following technical requirements:
Promote a new server named DC4 that runs to Windows Server 2022 to a domain controller.
Replicate the virtual machines from Cluster2 to an Azure Recovery Services vault.
Centrally manage performance alerts in Azure for all the domain controllers.
Ensure that User1 can recover objects from the Active Directory Recycle Bin.
Migrate Share1 to Server2, including all the share and folder permissions.
Back up Server4 and all data to an Azure Recovery Services vault.
Use Hyper-V Replica to protect the virtual machines in Cluster3.
Implement BitLocker Drive Encryption (BitLocker) on Server4.
Whenever possible, use the principle of least privilege.
NEW QUESTION # 67
You have a failover cluster named Cluster1 that contains three nodes.
You plan to add two file server cluster roles named File1 and File2 to Cluster1. File1 will use the File Server for general use role. File2 will use the Scale-Out File Server for application data role.
What is the maximum number of nodes for File1 and File2 that can concurrently serve client connections? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Graphical user interface, application Description automatically generated
Reference:
https://docs.microsoft.com/en-us/windows-server/failover-clustering/sofs-overview
NEW QUESTION # 68
You have a Windows Server 2022 failover cluster named Cluster1 that contains the Cluster Shared Volumes (CSV) shown in the following table.
All the nodes in Cluster1 have BitLocker Drive Encryption (BitLocker) installed.
You need to use PowerShell to enable BitLocker on Volume1.
In which order should you run the commands? To answer, drag the appropriate commands to the correct order. You may need to drag the split bar between panes or scroll to view content.
NOTE Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 69
Your network contains an on-premises Active Directory Domain Services (AD DS) domain. The domain contains two virtual machines named VM1 and VM2 that run Windows Server.
You plan to implement a failover cluster named Cluster1 that will use VM1 and VM2 as nodes.
You need to ensure that Cluster1 can use floating IP addresses.
Which two components should you deploy? Each correct answer presents part-of the solution.
NOTE: Each correct selection is worth one point.
- A. the Multipoint Services role
- B. Network Load Balancing (NLB)
- C. the Host Guardian Service role
- D. the Network Controller role
- E. Software Load Balancer (SLB)
Answer: D,E
NEW QUESTION # 70
You have an on-premises server named Server1 and Microsoft Sentinel instance.
You plan to collect windows Defender Firewall events from Sever1 and analyze the event data by using Microsoft Sentinel.
What should you install on Server1, and which information should you provide during the instance? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 71
You have 10 servers that run Windows Server in a workgroup.
You need to configure the servers to encrypt all the network traffic between the servers. The solution must be as secure as possible.
Which authentication method should you configure in a connection security rule?
- A. computer certificate
- B. KerberosV5
- C. pre-shared key
- D. NTLMv2
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/create-an-authentication-request-rule
NEW QUESTION # 72
You have an Azure virtual machine named VM1.
You enable Microsoft Defender SmartScreen on VM1.
You need to ensure that the SmartScreen messages displayed to users are logged.
What should you do?
- A. From a command prompt, run WinRM quickconfig.
- B. From the Windows Security app. configure the Virus & threat protection settings.
- C. From the local Group Policy, modify the Advanced Audit Policy Configuration settings.
- D. From Event Viewer, enable the Debug log.
Answer: D
Explanation:
erence:
https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-smartscreen
/microsoft-defender-smartscreen-overview
NEW QUESTION # 73
You have an Azure virtual machine named VM1 that runs Windows Server. VM1 has boot diagnostics configured to use a managed storage account.
You are troubleshooting connectivity issue on VM1.
You need to run a PowerShell cmdlet on VM1 by using the Azure Serial Console.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/serial-console-overview
https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/serial-console-windows
NEW QUESTION # 74
You have an Azure virtual machine named VM1.
You enable Microsoft Defender SmartScreen on VM1.
You need to ensure that the SmartScreen messages displayed to users are logged.
What should you do?
- A. From a command prompt, run WinRM quickconfig.
- B. From the Windows Security app. configure the Virus & threat protection settings.
- C. From the local Group Policy, modify the Advanced Audit Policy Configuration settings.
- D. From Event Viewer, enable the Debug log.
Answer: D
Explanation:
Reference:
https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-d
NEW QUESTION # 75
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains servers that run Windows Server as shown in the following table.
Server1 has the connection security rules shown in the following table.
Answer:
Explanation:
NEW QUESTION # 76
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a failover cluster named Cluster1 that hosts an application named App1.
The General tab in App1 Properties is shown in the General exhibit. (Click the General tab.)
The Failover tab in App1 Properties is shown in the Failover exhibit. (Click the Failover tab.)
Server1 shuts down unexpectedly.
You need to ensure that when you start Server1, App1 continues to run on Server2.
Solution: From the Failover settings, you select Prevent failback.
Does this meet the goal?
- A. Yes
- B. No
Answer: A
Explanation:
Explanation
The Prevent failback setting will prevent the cluster failing back to Server1.
NEW QUESTION # 77
You have a server named Server1 that runs Windows Server and has the Web Server (IIS) server role installed. Server1 hosts an ASP.NET Core web app named WebApp1 and the app's source files.
You install Docker on Server1.
You need to ensure that you can deploy WebApp1 to an Azure App Service web app from the Azure Container Registry.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
NEW QUESTION # 78
Your network contains an Active Directory Domain Services (AD DS) forest. The forest functional level is Windows Server 2012 R2. The forest contains the domains shown in the following table.
You create a user named Admin1.
You need to ensure that Admin1 can add a new domain controller that runs Windows Server 2022 to the east.
contoso.com domain. The solution must follow the principle of least privilege.
To which groups should you add Admin1?
- A. CONTOSO/Schema Admins and EAST\Domain Admins
- B. CONTOSO\Enterprise Admins only
- C. EAST\Domain Admins only
- D. CONTOSO\Enterprise Admins and CONTOSO/Schema Admins
Answer: C
NEW QUESTION # 79
......
Get Ready to Pass the AZ-801 exam with Microsoft Latest Practice Exam : https://www.braindumpspass.com/Microsoft/AZ-801-practice-exam-dumps.html
Get Prepared for Your AZ-801 Exam With Actual Microsoft Study Guide!: https://drive.google.com/open?id=14-c-YFg-q9L8h9lB16K8l8E3zHtr8kpQ
