AZ-801 Exam Questions
200 real AZ-801 exam questions with expert-verified answers and explanations. Page 1 of 4.
- Question #1Secure Windows Server on-premises and hybrid infrastructures
You are remediating the firewall security risks to meet the security requirements. What should you configure to reduce the risks?
Group Policy Object (GPO)Windows Server SecurityFirewall Configuration - Question #2Secure Windows Server on-premises and hybrid infrastructures
You are planning the deployment of Microsoft Sentinel. Which type of Microsoft Sentinel data connector should you use to meet the security requirements?
Microsoft SentinelData ConnectorsIdentity SecurityMicrosoft Defender for Identity - Question #3Implement and manage Windows Server high availability
What is the minimum number of IP addresses required for the node and cluster roles on Cluster3?
Windows Server Failover ClusteringIP AddressingHigh AvailabilityCluster Configuration - Question #4Migrate servers and workloads
What should you use to perform the migration?
Storage Migration ServiceWindows Server MigrationFile Server Migration - Question #5Secure Windows Server on-premises and hybrid infrastructures
You are planning the implementation of Cluster2 to support the on-premises migration plan. You need to ensure that the disks on Cluster2 meet the security requirements. In which or...
BitLockerFailover ClusteringCluster Shared Volume (CSV)Disk Encryption - Question #6Secure Windows Server on-premises and hybrid infrastructures
You need to implement a security policy solution to authorize the applications. The solution must meet the security requirements. Which service should you use to enforce the securi...
AppLockerApplication SecurityGroup PolicySecurity Policy Management - Question #7Implement and manage Windows Server high availability
How should you configure WebApp1? To answer, select the appropriate options in the answer area. To enable WebApp1 to handle requests for the website: To point client connections to...
Web application configurationTraffic managementDNS configurationApplication Gateway - Question #8Migrate servers and workloads
You are planning the DHCP1 migration to support the DHCP migration plan. Which two PowerShell cmdlets should you run on DHCP1? And which two PowerShell cmdlets should you run on DH...
DHCP MigrationPowerShellServer MigrationNetwork Services - Question #9Migrate servers and workloads
You are planning the migration of APP3 and APP4 to support the Azure migration plan. What should you do on Cluster1 and in Azure before you perform the migration? To answer, select...
Server migrationAzure migrationPre-migration preparationWorkload migration - Question #10Implement disaster recovery
Contoso, Ltd. is a manufacturing company that has a main office in Seattle and branch offices in Los Angeles and Montreal. Existing Environment Active Directory Environment Contoso...
Azure BackupMARS AgentDisaster RecoveryHybrid Cloud Backup - Question #11Migrate servers and workloads
You need to meet technical requirements for Share1. What should you use?
Storage Migration ServiceFile share migrationWindows Server data migration - Question #12Secure Windows Server on-premises and hybrid infrastructures
You need to configure BitLocker on Server4. On which volumes can you turn on BitLocker, and on which volumes can you turn on auto-unlock? To answer, select the appropriate options...
BitLockerDisk encryptionData securityWindows Server security - Question #13Secure Windows Server on-premises and hybrid infrastructures
What is the effective minimum password length for User1 and Admin1? To answer, select the appropriate options in the answer area.
Password policyMinimum password lengthGroup Policy Objects (GPO)Account security - Question #14Secure Windows Server on-premises and hybrid infrastructures
For each of the following statements, select Yes if the statement is true. Otherwise, select No. Statements: User1 can sign in to Server4 by using Remote Desktop. User2 can sign in...
Remote Desktop Protocol (RDP)User access managementSecurity groupsServer security - Question #15Secure Windows Server on-premises and hybrid infrastructures
With which servers can Server1 communicate?
Network ConnectivityWindows Server NetworkingFirewall ConfigurationIP Addressing - Question #16Secure Windows Server on-premises and hybrid infrastructures
With which servers can Server3 communicate?
Network connectivityServer communicationNetwork access controlFirewall rules - Question #17Implement and manage Windows Server high availability
You need to meet the technical requirements for Cluster2. Which four actions should you perform in sequence before you can enable replication? To answer, move the appropriate actio...
Failover ClusteringStorage ReplicaHigh AvailabilityWindows Server Replication - Question #18Monitor and troubleshoot Windows Server environments
You need to implement alerts for the domain controllers. The solution must meet the technical requirements. What should you do on the domain controllers, and what should you create...
MonitoringAlertingHybrid MonitoringDomain Controllers - Question #19Secure Windows Server on-premises and hybrid infrastructures
You need to implement BitLocker Drive Encryption (BitLocker) on Server4. Whenever possible, use the principle of least privilege. To which group in Contoso.com should you add User1...
BitLockerActive Directory PermissionsLeast PrivilegeServer Security - Question #20Secure Windows Server on-premises and hybrid infrastructures
You have a server named Server1 that runs Windows Server. You need to ensure that only specific applications can modify the data in protected folders on Server1. Solution: From Vir...
Controlled Folder AccessWindows DefenderServer SecurityApplication Control - Question #21Secure Windows Server on-premises and hybrid infrastructures
You have a server named Server1 that runs Windows Server. You need to ensure that only specific applications can modify the data in protected folders on Server1. Solution: You conf...
AppLockerApplication ControlSecurity PoliciesEndpoint Protection - Question #22Secure Windows Server on-premises and hybrid infrastructures
Server1. Solution: From Virus & threat protection, you configure Tamper Protection Does this meet the goal?
Tamper ProtectionWindows DefenderServer SecuritySecurity Configuration - Question #23Secure Windows Server on-premises and hybrid infrastructures
You have a server named Server1 that runs Windows Server. You need to ensure that only specific applications can modify the data in protected folders on Server1. Solution: From App...
Windows SecurityControlled Folder AccessExploit ProtectionRansomware Protection - Question #24Secure Windows Server on-premises and hybrid infrastructures
You have an Azure virtual machine named VM1 that runs Windows Server. You plan to deploy a new line-of-business (LOB) application to VM1. You need to ensure that the application ca...
Exploit ProtectionWindows DefenderApplication SecurityProcess Creation - Question #25Secure Windows Server on-premises and hybrid infrastructures
You have 100 Azure virtual machines that run Windows Server. The virtual machines are onboarded to Microsoft Defender for Cloud. You need to shut down a virtual machine automatical...
Microsoft Defender for CloudAzure Logic AppsSecurity AutomationAutomated Response - Question #26Secure Windows Server on-premises and hybrid infrastructures
You have a Microsoft Sentinel deployment and 100 Azure Arc-enabled on-premises servers. All the Azure Arc-enabled resources are in the same resource group. You need to onboard the...
Microsoft SentinelAzure ArcAzure PolicyHybrid Management - Question #27Secure Windows Server on-premises and hybrid infrastructures
You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant by using password hash synchronization. You have...
Hybrid IdentityAzure AD ConnectSingle Sign-On (SSO)Authentication - Question #28Secure Windows Server on-premises and hybrid infrastructures
You have an Azure subscription that has Microsoft Defender for Cloud enabled. You have 50 Azure virtual machines that run Windows Server. You need to ensure that any security explo...
Azure Defender for CloudVulnerability AssessmentAzure Virtual MachinesSecurity Monitoring - Question #29Secure Windows Server on-premises and hybrid infrastructures
You have 10 servers that run Windows Server in a workgroup. You need to configure the servers to encrypt all the network traffic between the servers. The solution must be as secure...
IPsecNetwork SecurityAuthenticationCertificates - Question #30Secure Windows Server on-premises and hybrid infrastructures
You have an Azure virtual machine named VM1 that runs Windows Server. You need to encrypt the contents of the disks on VM1 by using Azure Disk Encryption. What is a prerequisite fo...
Azure Disk EncryptionAzure Key VaultVM SecurityData Encryption - Question #31Secure Windows Server on-premises and hybrid infrastructures
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two servers named Server1 and Server2 that run Windows Server. You need to ensure that...
Windows FirewallRemote ManagementDCOMLeast Privilege - Question #32Secure Windows Server on-premises and hybrid infrastructures
You have a server that runs Windows Server. The server is configured to encrypt all incoming traffic by using a connection security rule. You need to ensure that Server1 can respon...
Windows Defender FirewallIPsecNetwork SecurityICMP - Question #33Monitor and troubleshoot Windows Server environments
You have an Azure virtual machine named VM1. You enable Microsoft Defender SmartScreen on VM1. You need to ensure that the SmartScreen messages displayed to users are logged. What...
SmartScreenEvent ViewerLoggingSecurity Monitoring - Question #34Implement and manage Windows Server high availability
You have a failover cluster named Cluster1 that hosts an application named App1. The General tab in App1 Properties is shown in the General exhibit. The Failover tab in App1 Proper...
Failover ClusteringHigh AvailabilityCluster ResourcesFallback Settings - Question #35Implement and manage Windows Server high availability
Server1 shuts down unexpectedly. You need to ensure that when you start Server1, App1 continues to run on Server2. Solution: You increase Maximum failures in the specified period f...
Failover ClusteringHigh AvailabilityCluster Role ConfigurationFailover Management - Question #36Implement and manage Windows Server high availability
Server1 shuts down unexpectedly. You need to ensure that when you start Server1, App1 continues to run on Server2. Solution: From the General settings, you move Server2 up. Does th...
Windows Server Failover ClusteringHigh AvailabilityPreferred OwnersFailback - Question #37Implement and manage Windows Server high availability
You have a failover cluster named Cluster1 that has the following configurations: Number of nodes: 6 Quorum: Dynamic Quorum Witness: File share, Dynamic witness What is the maximum...
Failover ClusteringQuorumHigh AvailabilityWindows Server - Question #38Implement and manage Windows Server high availability
Your company uses Storage Spaces Direct. You need to view the available storage in a Storage Space Direct storage pool. What should you use?
Storage Spaces DirectFailover Cluster ManagerHigh AvailabilityStorage Pool - Question #39Implement and manage Windows Server high availability
You plan to add data volumes to Storage Spaces Direct as shown in the following table. Name File system Volume1 NTFS Volume2 ReFS Volume3 NTFS Volume4 ReFS On which volumes can you...
Storage Spaces DirectDirect Access (DAX)Persistent Memory (PMem)NTFS - Question #40Implement disaster recovery
You have two servers named Server1 and Server2 that run Windows Server. Both servers have the Hyper-V server role installed. Server1 hosts three virtual machines named VM1, VM2, an...
Hyper-V ReplicaUnplanned FailoverDisaster Recovery - Question #41Implement disaster recovery
You have three Azure virtual machines named VM1, VM2, and VM3 that host a multitier application. You plan to implement Azure Site Recovery. You need to ensure that VM1, VM2, and VM...
Azure Site RecoveryDisaster RecoveryRecovery PlanVirtual Machines - Question #42Implement disaster recovery
You have an on-premises server named Server1 that runs Windows Server and has the Hyper-V server role installed. You have an Azure subscription. You plan to back up Server1 to Azur...
Azure BackupMABSBare Metal RecoverySystem State - Question #43Implement disaster recovery
You have 200 Azure virtual machines. You create a recovery plan in Azure Site Recovery to fail over all the virtual machines to an Azure region. The plan has three manual actions....
Azure Site Recovery (ASR)Disaster RecoveryAutomationAzure Automation Runbooks - Question #44Implement disaster recovery
You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed. You have a Hyper-V failover cluster named Cluster1. All servers are members of t...
Hyper-V ReplicaKerberos authenticationFirewall configurationDisaster Recovery - Question #45Migrate servers and workloads
You have an on-premises server that runs Windows Server and has the Web Server (IIS) server role installed. The server hosts a web app that connects to an on-premises Microsoft SQL...
Azure App ServicesHybrid ConnectivityHybrid ConnectionsOn-premises SQL - Question #46Migrate servers and workloads
You have two file servers named Server1 and Server2 that run Windows Server. Server1 contains a shared folder named Data. Data contains 10 TB of data. You plan to decommission Serv...
Server MigrationData MigrationStorage Migration ServiceFile Permissions - Question #47Migrate servers and workloads
You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed. You import the Azure Migrate appliance as VM1. You need to register VM1 with Azu...
Azure MigrateAppliance registrationHybrid migrationServer discovery - Question #48Migrate servers and workloads
You have two servers that run Windows Server as shown in the following table. Name Location Domain/workgroup Server1 On-premises Domain Server2 Azure virtual machine Workgroup You...
Server MigrationStorage Migration ServiceHybrid CloudVolume Migration - Question #49Migrate servers and workloads
You migrate sysvol from FRS to Distributed File System (DFS) Replication. Does this meet the goal?
sysvolFRS to DFS-R MigrationActive DirectoryFile Replication - Question #50Migrate servers and workloads
Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The functional level of the forest is Windows Server 2012 R2. All domain co...
Active Directory UpgradeSYSVOL ReplicationDomain Controller PrerequisitesFRS to DFSR Migration