Pre-Summer Sale Discount Flat 70% Offer - Ends in 0d 00h 00m 00s - Coupon code: 70diswrap

Microsoft AZ-801 Dumps

Page: 1 / 27
Total 267 questions

Configuring Windows Server Hybrid Advanced Services Questions and Answers

Question 1

You have two Azure virtual networks named Vnet1 and Vnet2.

You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN.

You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit Vnet2 can use the remote gateway.

You discover that Client1 cannot communicate with Vnet2.

You need to ensure that Client1 can communicate with Vnet2.

Solution: You resize the gateway of Vnet1 to a larger SKU.

Does this meet the goal?

Options:

A.

Yes

B.

No

Question 2

You have an Azure subscription.

Your on-premises network connects to Azure by using an Azure VPN gateway named VPN1.

You need to monitor the Azure gateway health probe for VPN1.

Which TCP port should you use?

Options:

A.

443

B.

1723

C.

3389

D.

8081

E.

65500

Question 3

You have 100 Azure virtual machines that run Windows Server. The virtual machines are onboarded to Microsoft Defender for Cloud.

You need to shut down a virtual machine automatically if Microsoft Defender for Cloud generates the " Antimalware disabled in the virtual machine " alert for the virtual machine.

What should you use in Microsoft Defender for Cloud?

Options:

A.

a logic app

B.

a workbook

C.

a security policy

D.

adaptive network hardening

Question 4

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.

as

You have an Azure subscription.

You plan to migrate the data on FS1 to Azure by using Azure Data Box Gateway.

You need to configure a Data Box Gateway virtual device.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

as

Options:

Question 5

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a failover cluster named Cluster! that hosts an application named Appl.

The General tab in App1 Properties is shown in the General exhibit (Click the General tab.)

as

The Failover tab in App1 Properties is shown in the Failover exhibit. (Click the Failover tab.)

as

Server2 shuts down unexpectedly.

You need to ensure that when you start Server2, App1 continues to run on Server2.

Solution: You pause the Server1 node in Cluster1 and then start Server1.

Does this meet the goal?

Options:

A.

Yes

B.

No

Question 6

You have 100 Azure virtual machines that run Windows Server.

You plan to use Azure Monitor agents to track occurrences of event 10 1035 in the Application log of each virtual machine.

You need to ensure that the events will be available tor analysis in Log Analytics. The solution must minimize the total volume of events stored in Azure.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

as

Options:

Question 7

You have an Azure virtual machine named VM1 that runs Windows Server. You need to perform the following tasks on VM1:

• Configure Windows Defender Firewall to allow Remote Desktop connections.

• Configure where to store the logs of the virtual machine console.

Which two settings should you use? To answer, select the settings in the answer area. NOTE: Each correct selection is worth one point.

as

Options:

Question 8

You need to use a comma-separated value (CSV) file to import server inventory to Azure Migrate. Which fields are mandatory for each entry in the CSV file?

Options:

A.

Server name. Cores, OS Name, and Memory (in MB)

B.

Server name, IP addresses. Disk 1 size (in GB), and CPU utilization percentage

C.

Server name, IP addresses, OS version, and Number of disks

Question 9

Your network contains an Active Directory Domain Services (AD DS) domain All domain members have Microsoft Defender Credential Guard with UEFI tock configured in the domain you deploy a server named Server1 that runs Windows Server. You disable Credential Guard on Server1. You need to ensure that Server1 is MOST subject to Credential Guard restrictions. What should you do next?

Options:

A.

Run the Device Guard and Credential Guard hardware readiness tool

B.

Disable the Turn on Virtual nation Based Security group policy setting

C.

Run dism and specify the /Disable-Feature and /FeatureName:IsolatedUserMode parameters

Question 10

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two servers named Server1 and Server2 that run Windows Server.

On Server1, you create an event subscription named Subscription! that retrieves events from Server2. The Query Filter settings (or Subscription! are configured as shown in the following exhibit.

as

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

as

Options:

Question 11

You have a server named Server1 that runs Windows Server.

You need to ensure that only specific applications can modify the data in protected folders on Server1.

Solution: From App & browser control, you configure the Reputation-based protection.

Does this meet the goal?

Options:

A.

Yes

B.

No

Question 12

You have three servers named Server1, Server2, Server3 that run Windows Server and have the Hyper-V server role installed.

You plan to create a hyper-converged cluster to host Hyper-V virtual machines.

You need to ensure that you can store virtual machines in Storage Spaces Direct.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

as

Options:

Question 13

You have an on-premises server named Server1 that runs Windows Server. Server1 contains multiple file shares and has an IP address of 192.168.10.12.

You have an Azure subscription.

You need to migrate the Server1 file shares to an Azure virtual machine by using Storage Migration Service. The solution must ensure that on-premises users can access the migrated file shares by using the 192.168.10.12 IP address.

What should you include in the solution?

Options:

A.

Azure Private DNS zones

B.

Azure Private Link

C.

Azure Extended Network

D.

Azure virtual network peering

Question 14

You have an Azure subscription.

You plan to deploy a virtual machine named VM1 to the East US Azure region and use Azure Site Recovery between availability zones.

You need to configure the disks on VM1 and the virtual network. The solution must meet the following requirements:

• Maximize the availability of VM1.

• Maintain the private IP address of VM1 during failover and failback operations.

What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point .

as

Options:

Question 15

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains domain controllers that run Windows Server 2016.

Vou build a new AD DS forest named nwtraders.com. The forest contains domain controllers that run Windows Server 2025.

You plan to perform a phased migration from contoso.com to nwtraders.com.

You perform the following actions:

• Migrate the users in contoso.com to nwtraders.com and enable slDHistory.

• Establish a two-way forest trust between contoso.com and nwtraders.com.

• Install the Active Directory Migration Tool (ADMT) in nwtraders.com.

as

Options:

Question 16

You have an on-premises IIS web server that hosts several .NET applications.

You plan to migrate the applications to Azure App Service. The applications will NOT be containerized. What should you use to perform the migration?

Options:

A.

Data Migration Assistant (DMA)

B.

Windows Admin Center

C.

App Service Migration Assistant

D.

Web Deploy

E.

IIS Manager

Question 17

You have 200 Azure virtual machines.

You create a recovery plan in Azure Site Recovery to fail over all the virtual machines to an Azure region. The plan has three manual actions.

You need to replace one of the manual actions with an automated process.

What should you use?

Options:

A.

an Azure Desired State Configuration (DSC) virtual machine extension

B.

an Azure Automation runbook

C.

an Azure PowerShell function

D.

a Custom Script Extension on the virtual machines

Question 18

You have a failover cluster named Cluster! that contains two Windows Server nodes named Server1 and Server2. Cluster! hosts highly available Hyper-V virtual machines.

You have a member server named Server3 that runs Windows Server.

You need to implement Cluster-Aware Updating (CUA) on Cluster! and configure Server3 to manage CUA. The solution must minimize administrative effort.

What should you install on Server3?

Options:

A.

the Windows Server Update Services server role

B.

the Failover Cluster Automation Server feature

C.

Windows Admin Center

D.

the Host Guardian Service server role

Question 19

Your company uses Storage Spaces Direct.

You need to view the available storage in a Storage Space Direct storage pool.

What should you use?

Options:

A.

The Get-StoragefileServer cmdlet

B.

Resource Monitor

C.

System Configuration

D.

Windows Admin Center

Question 20

Your network contains an Active Directory Domain Services (AD DS) domain that has a Windows Server 2012 R2 forest and domain functional level. The domain contains the domain controllers shown in the following table.

as

You need to ensure that you can deploy a new domain controller that runs Windows Server 2025. The solution must minimize administrative effort.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Options:

A.

Upgrade DC1, DC2, and CO to Windows Server 2025.

B.

Raise the forest and domain functional level to Windows Server 2025.

C.

Raise the forest and domain functional level to Windows Server 2016.

D.

Remove DC2 and DC3.

E.

Remove DC 1.

Question 21

You deploy Azure Migrate to an on-premises network.

You have an on-premises physical server named Server1 that runs Windows Server and has the following configuration.

Operating system disk 600 GB

Data disic 3 TB

NIC Teaming: Enabled

Mobility service: installed

Windows Firewall: Enabled

Microsoft Defender Antivirus: Enabled

You need to ensure that you can use Azure Migrate to migrate Server1.

Solution: You disable Microsoft Defender Antivirus on Server1.

Does this meet the goal?

Options:

A.

Yes

B.

No

Question 22

You have a failover cluster named Cluster1 that hosts an application named App1.

The General tab in App1 Properties is shown in the General exhibit (Click the General Tat)

The failover tab in App1 Properties is shown in the failover exhibit (Click the Failover tab.)

Server 1 shuts down unexpectedly.

You need to ensure that when you start Server 1. App1 continues to run on Server2

Solution: From the General settings, you increase the priority of Server2 in the Preferred Owners list.

Does this meet the goal?

Options:

A.

Yes

B.

NO

Question 23

You have a server that runs Windows Server. The server is configured to encrypt all incoming traffic by using a connection security rule.

You need to ensure that Server1 can respond to the unencrypted tracert commands initiated from computers on the same network.

What should you do from Windows Defender Firewall with Advanced Security?

Options:

A.

From the IPsec Settings, configure IPsec defaults.

B.

Create a new custom outbound rule that allows ICMPv4 protocol connections for all profiles.

C.

Change the Firewall state of the Private profile to Off.

D.

From the IPsec Settings, configure IPsec exemptions.

Question 24

You have two onpremises Hyper-V hosts named Served and Server2, Server1 contains two virtual machines named VM1 and VM2. Server2 contains three virtual machines named VM21. VM22, and VM23.

You have an Azure subscription.

You plan to use Azure Site Recovery to replicate all the virtual machines to Azure.

You need to deploy the Microsoft Azure Site Recovery Provider to the on-premises infrastructure.

What is the minimum number of providers you should install?

Options:

A.

1

B.

2

C.

5

D.

7

Question 25

You have an on-premises server named Server1 that runs Windows Server.

You have an Azure subscription that uses Microsoft Defender for Cloud.

You need to onboard Server1 to Defender for Cloud.

Which actions should you perform in sequence? To answer, drag the appropriate actions to the correct order. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

as

Options:

Question 26

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an on-premises server named Server1 that runs Windows Server.

You have a Microsoft Sentinel instance.

You add the Windows Firewall data connector in Microsoft Sentinel.

You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1.

Solution: You install the Microsoft Integration Runtime on Server1.

Does this meet the goal?

Options:

A.

Yes

B.

No

Question 27

You have an on-premises server named Server1 that runs Windows Server. You need to perform an on-demand backup of the files on Server 1 by using Azure Backup.

Which five actions should you perform in sequence? To answer, move the appropriate actions actions from the list of actions to the answer are and arrange them in the correct order.

as

Options:

Question 28

You need to meet the technical requirements for User1.

To which group in contoso.com should you add User1?

Options:

A.

Domain Admins

B.

Account Operators

C.

Schema Admins

D.

Backup Operators

Question 29

You are evaluating the technical requirements tor Cluster2.

What is the minimum number of Azure Site Recovery Providers that you should install?

Options:

A.

1

B.

4

C.

12

D.

16

Question 30

You need to meet the technical requirements for Cluster2.

Which four actions should you perform in sequence before you can enable replication? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

as

Options:

Question 31

You need to meet technical requirements for Share1.

What should you use?

Options:

A.

Storage Migration Service

B.

File Server Resource Manager (FSRM)

C.

Server Manager

D.

Storage Replica

Question 32

You need to configure BitLocker on Server4.

On which volumes can you turn on BitLocker, and on which volumes can you turn on auto-unlock? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

as

Options:

Question 33

With which servers can Server1 and Server3 communicate? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

as

Options:

Question 34

You need to implement alerts for the domain controllers. The solution must meet the technical requirements.

What should you do on the domain controllers, and what should you create on Azure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

as

Options:

Question 35

Which domain controller should be online to meet the technical requirements for DC4?

Options:

A.

DC1

B.

DC2

C.

DC3

Question 36

You need to back up Server 4 to meet the technical requirements.

What should you do first?

Options:

A.

Deploy Microsoft Azure Backup Server (MABS).

B.

Configure Windows Server Backup.

C.

Install the Microsoft Azure Recovery Services (MARS) agent.

D.

Configure Storage Replica.

Question 37

What is the effective minimum password length for User1 and Admin1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

as

Options:

Question 38

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

as

Options:

Question 39

You need to meet the technical requirements for Cluster3.

What should you include in the solution?

Options:

A.

Enable integration services on all the virtual machines.

B.

Add a Windows Server server role.

C.

Configure a fault domain doe the cluster.

D.

Add a failover cluster role.

Question 40

You are planning the implementation of Cluster2 to support the on-premises migration plan.

You need to ensure that the disks on Cluster2 meet the security requirements.

In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

as

Options:

Question 41

You are remediating the firewall security risks to meet the security requirements.

What should you configure to reduce the risks?

Options:

A.

a Group Policy Object (GPO)

B.

adaptive network hardening in Microsoft Defender for Cloud

C.

a network security group (NSG) in Sub1

D.

an Azure Firewall policy

Question 42

You are planning the migration of APP3 and APP4 to support the Azure migration plan.

What should you do on Cluster1 and in Azure before you perform the migration? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

as

Options:

Question 43

You are planning the DHCP1 migration to support the DHCP migration plan.

Which two PowerShell cmdlets should you run on DHCP1, and which two PowerShell cmdlets should you run on DHCP2? To answer, drag the appropriate cmdlets to the correct servers. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

as

Options:

Question 44

You are planning the migration of Archive1 to support the on-premises migration plan.

What is the minimum number of IP addresses required for the node and cluster roles on Cluster3?

Options:

A.

2

B.

3

C.

4

D.

5

Question 45

You are planning the europe.fabrikam.com migration to support the on-premises migration plan-Where should you install the Password Export Server (PES) service, where should you generate the encryption key? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

as

Options:

Question 46

You are planning the deployment of Microsoft Sentinel.

Which type of Microsoft Sentinel data connector should you use to meet the security requirements?

Options:

A.

Threat Intelligence - TAXII

B.

Azure Active Directory

C.

Microsoft Defender for Cloud

D.

Microsoft Defender for Identity

Question 47

You are planning the website migration to support the Azure migration plan.

How should you configure WebApp1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

as

Options:

Question 48

You need to implement a security policy solution to authorize the applications. The solution must meet the security requirements.

Which service should you use to enforce the security policy, and what should you use to manage the policy settings? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

as

Options:

Question 49

You are planning the data share migration to support the on-premises migration plan.

What should you use to perform the migration?

Options:

A.

Storage Migration Service

B.

Microsoft File Server Migration Toolkit

C.

File Server Resource Manager (FSRM)

D.

Windows Server Migration Tools

Page: 1 / 27
Total 267 questions