AZ-801 practice questions 211–220

1. Question 211 · 239 in bank

   HOTSPOT - Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains 10 servers that run Windows Server. You have an Azure subscription. The subscription contains 10 virtual machines that run Windows Server. You need to install the Azure Monitor Agent on the Azure virtual machines and the on-premises servers. What should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   First option is correct. Virtual Machine Extensions are designed for Azure VMs and provide a way to install and manage agents like the Azure Monitor Agent. But, for the On-Premises Servers, use The Windows Installer (MSI) package. The Azure Connected Machine agent is not the installer for Azure Monitor Agent. You'd still need to use the MSI package for the actual installation of the Azure Monitor Agent.

   Source: Adapted from community discussion — NilsAbrahamsson

   References

   • Microsoft Learn

   

   Next question

2. Question 212 · 239 in bank

   HOTSPOT - You have an Azure virtual machine named VM1 that runs Windows Server. You need to perform the following tasks on VM1: • Configure Windows Defender Firewall to allow Remote Desktop connections, • Configure where to store the logs of the virtual machine console. Which two settings should you use? To answer, select the settings in the answer area. NOTE: Each correct selection is worth one point,

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

3. Question 213 · 239 in bank

   You have an Azure virtual machine named VM1. Crash dumps for a process named Process1 are enabled for VM1. When process1.exe on VM1 crashes, a technician must access the memory dump files on the virtual machine. The technician must be prevented from accessing the virtual machine. To what should you provide the technician access?

   • Aan Azure file share
   • Ban Azure Log Analytics workspace
   • Can Azure Blob Storage container
   • Da managed disk

   Show answer

   Answer: C

   Explanation

   From the link given Crash dumps (logs) Information about the state of the process if an application crashes. No mention of file share, log analytics workspace and managed disk so C is correct

   Source: Adapted from community discussion — syu31svc

   Next question

4. Question 214 · 239 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an on-premises server named Server1 that runs Windows Server. You have a Microsoft Sentinel instance. You add the Windows Firewall data connector in Microsoft Sentinel. You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1. Solution: You enable event subscription on Server1. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Next question

5. Question 215 · 239 in bank

   Select 2

   You have 20 on-premises virtual machines that run Windows Server. You have an Azure subscription that contains a Microsoft Sentinel workspace named Workspace1. You need to collect events from the on-premises virtual machines end forward the events to Workspace1. The solution must ensure that you can define filters to minimize the volume of collected events. Which two components should you install on each virtual machine? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • Athe Azure Connected Machine agent
   • Bthe Azure VM Dependency agent extension for Windows
   • Cthe Azure Monitor agent
   • Dthe Log Analytics VM extension for Windows
   • Ethe Dependency agent

   Show answer

   Answer: CD

   Next question

6. Question 216 · 239 in bank

   Your on-premises network is connected to Azure. You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. You need to identify the latency between the on-premises network and VM1. Which Azure Network Watcher settings should you use?

   • AIP flow verity
   • BConnection monitor
   • CVPN troubleshoot
   • DConnection troubleshoot

   Show answer

   Answer: B

   References

   • Microsoft Learn

   Next question

7. Question 217 · 239 in bank

   HOTSPOT - Your network contains an Active Directory domain. The domain contains a domain controller named DC1 and a server named Server1 that runs Windows Server. You need to enable event log subscriptions to forward events from DC1 to Server1. Which command should you run to enable the Windows Event Collector service, and on which servers should you run the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Given Correct Command: The Windows Event Collector service needs to be enabled to allow event forwarding. The correct command to configure and enable the Windows Event Collector service is wecutil qc. This command configures the service to accept events from remote computers. Servers: Event forwarding requires the Windows Event Collector service to be enabled on the server that will collect the events (in this case, Server1, the collector). The source server (DC1) needs to be configured to forward events, but the Windows Event Collector service itself runs on the collector server, not the source. Therefore, you run the command on Server1 only.

   Source: Adapted from community discussion — Krayzr

   

   Next question

8. Question 218 · 239 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an on-premises server named Server1 that runs Windows Server. You have a Microsoft Sentinel instance. You add the Windows Firewall data connector in Microsoft Sentinel. You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1. Solution: You install the Azure Connected Machine agent and Azure Monitor Agent for Windows extension on Server1. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: A

   Explanation

   The proposed solution—installing the Azure Connected Machine Agent and the Azure Monitor Agent for Windows extension on Server1—meets the goal of ensuring Microsoft Sentinel can collect Windows Firewall logs, assuming logging is enabled on Server1 and the connector’s DCR configures the agent appropriately. Thus, the answer is: A. Yes

   Source: Adapted from community discussion — Krayzr

   Next question

9. Question 219 · 239 in bank

   You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server and is in the East US Azure region. The subscription contains the storage accounts shown in the following table.

   

   You plan to configure the Diagnostic settings for VM1. Which storage accounts should you specify for the settings?

   • Astorage1 only
   • Bstorage1 and storage2 only
   • Cstorage1 and storage4 only
   • Dstorage1, storage2, and storage3 only
   • Estorage1, storage2, storage3, and storage4

   Show answer

   Answer: D

   Next question

10. Question 220 · 239 in bank

    You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server and uses Azure Disk Encryption. You need to identify which Azure key vault stores the encryption keys for VM1. The solution must minimize administrative effort. Which PowerShell cmdlet should you run?

    • AGet-AzKeyVaultKey
    • BGet-AzKeyVault
    • CGet-AzVMDiskEncryptionStatus
    • DGet-AzDiskEncryptionSet

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-801 practice, question 211. 239 questions available.