AZ-801 Sample Questions Answers

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. The subscription contains the storage accounts shown in the following table.

You plan to enable boot diagnostics for VM1.

You need to configure storage for the boot diagnostics logs and snapshots.

Which storage account should you use?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a server named Server1 that runs Windows Server.

You need to ensure that only specific applications can modify the data in protected folders on Server1.

Solution: From Virus & threat protection, you configure Tamper Protection.

Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a server named Server1 that runs Windows Server.

You need to ensure that only specific applications can modify the data in protected folders on Server1.

Solution: From App & browser control, you configure Reputation-based protection.

Does this meet the goal?

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains the domains shown in the following table.

You are implementing Microsoft Defender for Identity sensors.

You need to install the sensors on the minimum number of domain controllers. The solution must ensure that Defender for Identity will detect all the security risks in both the domains.

What should you identify? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the organizational units (OUs) shown in the following table.

In the domain, you create the Group Policy Objects (GPOs) shown in the following table.

You need to implement IPsec authentication to ensure that only authenticated computer accounts can connect to the members in the domain. The solution must minimize administrative effort.

Which GPOs should you apply to the Domain Controllers OU and the Domain Servers OU? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure subscription.

You plan to deploy a virtual machine named VM1 to the East US Azure region and use Azure Site Recovery between availability zones.

You need to configure the disks on VM1 and the virtual network. The solution must meet the following requirements:

• Maximize the availability of VM1.

• Maintain the private IP address of VM1 during failover and failback operations.

What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

You have an Azure virtual machine named VM1.

You install an application on VM1, and then restart the virtual machine.

After the restart, you get the following error message: “Boot failure. Reboot and Select proper Boot Device or Insert Boot Media in selected Boot Device.”

You need to mount the operating system disk offline from VM1 to a temporary virtual machine to troubleshoot the issue.

Which command should you run in Azure CLI?

You have a server that runs Windows Server.

You plan to back up the server to an Azure Recovery Services vault once per week starting on the next Saturday.

You need to schedule the weekly backup and perform the initial backup as soon as possible.

In which order should you perform the actions? To answer, move all actions from the list of actions to the answer are and arrange them in the correct order.

Your company uses Storage Spaces Direct.

You need to view the available storage in a Storage Space Direct storage pool.

What should you use?

Your on-premises network contains an Active Directory Domain Services (AD OS) domain.

You plan to implement a failover cluster to enable a highly available file server. You are evaluating the following clustered file servers:

• File server for general use

• Scale-out file server

Which type of storage should you use for each file server? To answer, drag the appropriate storage types to the correct file servers. Each storage type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two servers named Server1 and Server2 that run Windows Server.

You need to ensure that you can use the Computer Management console to manage Server2. The solution must use the principle of least privilege.

Which two Windows Defender Firewall with Advanced Security rules should you enable on Server2? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant.

The AD DS domain contains a domain controller named DC1. DC1 does NOT have internet access.

You need to configure password security for on-premises users. The solution must meet the following requirements:

Prevent the users from using known weak passwords.

Prevent the users from using the company name in passwords.

What should you do? To answer, drag the appropriate configurations to the correct targets. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an on-premises server named Server1 that runs Windows Server.

You have a Microsoft Sentinel instance.

You add the Windows Firewall data connector in Microsoft Sentinel.

You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1.

Solution; You enable event subscription on Server1.

Does this meet the goal?

You have an on-premises server that runs Windows Server and contains a folder named Folder1. Folder1 contains 50 GB of files.

You have an Azure subscription that contains an Azure Files share named share1.

You need to migrate the data in Folder1 to share1.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains an Azure key vault named Vault1.

You plan to deploy a virtual machine named VM1 that will run Windows Server.

You need to enable encryption at host for VM1. The solution must use customer-managed keys.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a server named Server1 that runs Windows Server.

You need to ensure that only specific applications can modify the data in protected folders on Server1.

Solution: From App & browser control, you configure the Exploit protection settings.

Does this meet the goal?

Your on-premises network is connected to Azure.

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server.

You need to identify the latency between the on-premises network and VM1.

Which Azure Network Watcher settings should you use?

Your network contains an Active Directory Domain Services (AD DS) forest.

You need to deploy a Storage Spaces Direct converged infrastructure. The solution must meet the following requirements:

• Use an Ethernet fabric

• Eliminate the need for Data Center Bridging (DCB).

Which Remote Direct Memory Access (RDMA) networking technology should you implement?

You have 10 servers that run Windows Server in a workgroup.

You need to configure the servers to encrypt all the network traffic between the servers. The solution must be as secure as possible.

Which authentication method should you configure in a connection security rule?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an on-premises server named Server1 that runs Windows Server.

You have a Microsoft Sentinel instance.

You add the Windows Firewall data connector in Microsoft Sentinel.

You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1.

Solution; You enable event subscription on Server1.

Does this meet the goal?

You have an Azure virtual machine named VM1.

You enable Microsoft Defender SmartScreen on VM1.

You need to ensure that the SmartScreen messages displayed to users are logged.

What should you do?

You have a server named Server1 that runs Windows Server and has the Web Server (IIS) server role installed. Server1 hosts an ASP.NET Core web app named WebApp1 and the app’s source files.

You install Docker on Server1.

You need to ensure that you can deploy WebApp1 to an Azure App Service web app from the Azure Container Registry.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You have 100 Azure virtual machines that run Windows Server. The virtual machines are onboarded to Microsoft Defender for Cloud.

You need to shut down a virtual machine automatically if Microsoft Defender for Cloud generates the "Antimalware disabled in the virtual machine" alert for the virtual machine.

What should you use in Microsoft Defender for Cloud?

You have a Windows Server 2022 failover cluster named Cluster1 that contains the Cluster Shared Volumes (CSV) shown in the following table.

All the nodes in Cluster1 have BitLocker Drive Encryption (BitLocker) installed.

You need to use PowerShell to enable BitLocker on Volume1.

In which order should you run the commands? To answer, drag the appropriate commands to the correct order. You may need to drag the split bar between panes or scroll to view content.

NOTE Each correct selection is worth one point.

You have a failover cluster named Cluster1 that contains three Windows Server nodes named Node 1, Node2. and Node3.

You need to deploy a Storage Spaces Direct virtual disk to Cluster1.

You add the following disks to each node:

• Three 512-6B NVMe disks

• Three 3-TB diskS

• Three 1-TB SSD disks

On Cluster1. you enable Storage Spaces Direct and add the new disks.

What is the total amount of disk space available for the Storage Spaces Direct virtual disk, and which operations are cached for the SSD and HDD disks? To answer, select the appropriate options in the answer area.

You have an Azure subscription that contains the virtual machines shown in the following table.

You plan to use Azure Site Recovery to replicate supported virtual machines to a secondary Azure region. Which virtual machines can be replicated by using Azure Site Recovery?

You have an Azure virtual machine named VM1 that runs Windows Server.

You plan to deploy a new line-of-business (LOB) application to VM1.

You need to ensure that the application can create child processes.

What should you configure on VM1?

You have five Azure virtual machines.

You need to collect performance data and Windows Event logs from the virtual machines. The data collected must be sent to an Azure Storage account.

What should you install on the virtual machines?

You manage 200 physical servers that run Windows Server.

You plan to migrate the servers to Azure.

You need to prepare for discovery of the servers by using Azure Migrate.

Which three actions should you perform in sequence on a physical server? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You need to implement alerts for the domain controllers. The solution must meet the technical requirements.

What should you do on the domain controllers, and what should you create on Azure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

With which servers can Server1 and Server3 communicate? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You need to meet technical requirements for Share1.

What should you use?

You need to configure BitLocker on Server4.

On which volumes can you turn on BitLocker, and on which volumes can you turn on auto-unlock? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Which domain controller should be online to meet the technical requirements for DC4?

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

You need to meet the technical requirements for Cluster3.

What should you include in the solution?

You are evaluating the technical requirements tor Cluster2.

What is the minimum number of Azure Site Recovery Providers that you should install?

What is the effective minimum password length for User1 and Admin1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You need to back up Server 4 to meet the technical requirements.

What should you do first?

You need to meet the technical requirements for User1.

To which group in contoso.com should you add User1?

You need to meet the technical requirements for Cluster2.

Which four actions should you perform in sequence before you can enable replication? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.