Microsoft AZ-801 Practice Exam Questions

Microsoft AZ-801 Sample Question Answers

Question # 1

Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The functional level of the forest is Windows Server 2012 R2. All domain controllers run Windows Server 2012 R2. Sysvol replicates by using the File Replication Service (FRS). You plan to replace the existing domain controllers with new domain controllers that will run Windows Server 2022. You need to ensure that you can add the first domain controller that runs Windows Server 2022. Solution; You raise the domain and forest functional levels. Does this meet the goal? 

A. Yes 
B. No 

Show Answer

Question # 2

You have 200 Azure virtual machines. You create a recovery plan in Azure Site Recovery to fail over all the virtual machines to an Azure region. The plan has three manual actions. You need to replace one of the manual actions with an automated process. What should you use? 

A. an Azure Desired State Configuration (DSC) virtual machine extension 
B. an Azure Automation runbook 
C. an Azure PowerShell function 
D. a Custom Script Extension on the virtual machines 

Show Answer

Question # 3

You have 10 servers that run Windows Server in a workgroup. You need to configure the servers to encrypt all the network traffic between the servers. The solution must be as secure as possible. Which authentication method should you configure in a connection security rule? 

A. NTLMv2 
B. pre-shared key 
C. KerberosV5 
D. computer certificate 

Show Answer

Question # 4

You have three Azure virtual machines named VM1, VM2, and VM3 that host a multitier application. You plan to implement Azure Site Recovery. You need to ensure that VM1, VM2, and VM3 fail over as a group. What should you configure? 

A. an availability zone 
B. a recovery plan 
C. an availability set 

Show Answer

Question # 5

You have a server that runs Windows Server. The server is configured to encrypt all incoming traffic by using a connection security rule. You need to ensure that Server1 can respond to the unencrypted tracert commands initiated from computers on the same network. What should you do from Windows Defender Firewall with Advanced Security? 

A. From the IPsec Settings, configure IPsec defaults. 
B. Create a new custom outbound rule that allows ICMPv4 protocol connections for all profiles. 
C. Change the Firewall state of the Private profile to Off. 
D. From the IPsec Settings, configure IPsec exemptions. 

Show Answer

Question # 6

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The functional level of the forest is Windows Server 2012 R2. All domain controllers run Windows Server 2012 R2. Sysvol replicates by using the File Replication Service (FRS). You plan to replace the existing domain controllers with new domain controllers that will run Windows Server 2022. You need to ensure that you can add the first domain controller that runs Windows Server 2022. Solution: You upgrade the PDC emulator. Does this meet the goal? 

A. Yes 
B. No 

Show Answer

Question # 7

You plan to deploy the Azure Monitor agent to 100 on-premises servers that run Windows Server. Which parameters should you provide when you install the agent? 

A. the client ID and the secret of an Azure service principal 
B. the name and the access key of an Azure Storage account 
C. a connection string for an Azure SQL database 
D. the ID and the key of an Azure Log Analytics workspace 

Show Answer

Question # 8

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a server named Server1 that runs Windows Server. You need to ensure that only specific applications can modify the data in protected folders on Server1. Solution: From Virus & threat protection, you configure Controlled folder access. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 9

You need to use a comma-separated value (CSV) file to import server inventory to Azure Migrate. Which fields are mandatory for each entry in the CSV file? 

A. Server name. Cores, OS Name, and Memory (in MB)
B. Server name, IP addresses. Disk 1 size (in GB), and CPU utilization percentage 
C. Server name, IP addresses, OS version, and Number of disks 

Show Answer

Question # 10

You have five Azure virtual machines. You need to collect performance data and Windows Event logs from the virtual machines. The data collected must be sent to an Azure Storage account. What should you install on the virtual machines? 

A. the Azure Connected Machine agent
 B. the Azure Monitor agent 
C. the Dependency agent 
D. the Telegraf agent 
E. the Azure Diagnostics extension 

Show Answer