AZ-801 practice questions 31–40

1. Question 31 · 239 in bank

   Select 2

   You have a management group named MG1 that contains an Azure subscription named Sub1. Sub1 contains the resources shown in the following table.

   

   You need to enable Microsoft Defender for Servers. From the Azure portal, on which two resources can you enable Defender for Servers? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • ARG1
   • BWorkspace1
   • CSub1
   • DMG1
   • EVNet1
   • FVM1

   Show answer

   Answer: BC

   Explanation

   Question is asking regarding 'Defender for Servers' plan, and 'Servers' instead of a specific srv, so ans can only be Sub and Workspace

   Source: Adapted from community discussion — d08427f

   Next question

2. Question 32 · 239 in bank

   You have an Azure virtual machine named VM1 that runs Windows Server. You configure Azure Site Recovery replication for VM1. You need to perform a test failover on VM1. What should you use from the VM1 blade in the Azure portal?

   • AAvailability + scaling
   • BBackup
   • CDisaster recovery
   • DWindows Admin Center
   • EAutomanage

   Show answer

   Answer: C

   Next question

3. Question 33 · 239 in bank

   You have an on-premises Hyper-V deployment that hosts multiple virtual machines. You have an Azure subscription that contains an Azure Migrate project named Project1. You plan to migrate the virtual machines to Azure by using Project1. You need to discover all the Hyper-V hosts and virtual machines running in your environment. The solution must minimize administrative effort. What should you do first?

   • ARegister an appliance.
   • BCreate a private endpoint.
   • CGenerate a project key.
   • DDeploy an Azure Network Adapter.

   Show answer

   Answer: C

   Next question

4. Question 34 · 239 in bank

   HOTSPOT - Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains an organizational unit (OU) named OU1 and a user named User1. You plan to deploy a Hyper-V failover cluster named Cluster1. You need to prestage the account for Cluster1 and ensure that User1 can deploy Cluster1. The solution must follow the principle of least privilege. Which action should you perform, and which permissions should you grant to User1 for Cluster1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   > New Computer account in disabled state > Full Control https://learn.microsoft.com/en-us/windows-server/failover-clustering/configure-ad-accounts If you create the cluster name account (cluster name object) before creating the cluster—that is, prestage the account—you must give it the Create Computer objects and Read All Properties permissions in the container that is used for computer accounts in the domain. You must also disable the account, and give Full Control of it to the account that will be used by the administrator who installs the cluster. The account must be disabled so that when the Create Cluster wizard is run, it can confirm that the account it will use for the cluster is not currently in use by an existing computer or cluster in the domain.

   Source: Adapted from community discussion — zuzmo483

   References

   • Microsoft Learn

   

   Next question

5. Question 35 · 239 in bank

   Select 2

   You have an on-premises server named Server1 that runs Windows Server 2016 and has IIS enabled. Server1 contains an ASP.NET 3.5 app named App1 You have an Azure subscription. You need to use the Azure Migrate App Containerization tool to migrate App1 to Azure App Service. The solution must minimize administrative effort. Which two actions should you perform on Server1 before you use the Azure Migrate App Containerization tool? Each correct answer presents part of the solution. NOTE: Each correct answer is worth one point.

   • AInstall the Web Deploy tool.
   • BInstall NET Framework 4.8.
   • CEnable remote administration for IIS.
   • DEnable PowerShell remoting.

   Show answer

   Answer: AD

   Next question

6. Question 36 · 239 in bank

   DRAG DROP - You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. The AD DS domain contains a domain controller named DC1. DC1 does NOT have internet access. You need to configure password security for on-premises users. The solution must meet the following requirements: ✑ Prevent the users from using known weak passwords. ✑ Prevent the users from using the company name in passwords. What should you do? To answer, drag the appropriate configurations to the correct targets. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-password-ban-bad-on-premises-deploy

   Source: Adapted from community discussion — tfulanchan

   References

   • Microsoft Learn

   

   Next question

7. Question 37 · 239 in bank

   Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.

   

   Server1 contains the printers shown in the following table.

   

   You plan to use Print Management to migrate the printers to Server2. Which printers can be migrated and retain their current configuration?

   • APrinter3 only
   • BPrinter3 and Printer4 only
   • CPrinter1, Printer3, and Printer4
   • DPrinter2, Printer3, and Printer
   • EPrinter1, Printer2, Printer3, and Printer4

   Show answer

   Answer: C

   Next question

8. Question 38 · 239 in bank

   Select 2

   Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two Windows Server Failover Cluster (WSFC) instances named Cluster1 and Cluster2. Cluster1 hosts Hyper-V virtual machines. Cluster2 does NOT have any high availability roles configured. You need to create a Storage Spaces Direct cluster in Cluster2 that will store the virtual machine hard disk files for Cluster1. Which role should you configure for Cluster2? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   • AVirtual Machine
   • BiSCSI Target Server
   • CHyper-V Replica Broker
   • DFile Server

   Show answer

   Answer: CD

   Next question

9. Question 39 · 239 in bank

   You have two servers named Host1 and Host2 that run Windows Server and have the Hyper-V server role installed. Host2 is configured as a replica server. Host1 contains a virtual machine named VM1. You plan to use Hyper-V Replica to replicate VM1 to Host2. You need to ensure that you can restore a replica of VM1 to a specific state from the past eight hours. What should you do?

   • AFrom the Hyper-V Settings of Host2, configure NUMA spanning.
   • BFrom the Enable Replication wizard, configure recovery points.
   • CFrom the Properties of VM1, enable automatic checkpoints.
   • DFrom the Enable Replication wizard, modify the replication frequency.

   Show answer

   Answer: B

   Next question

10. Question 40 · 239 in bank

    HOTSPOT - The Default Domain Policy Group Policy Object (GPO) is shown in the GPO exhibit. (Click the GPO tab.)

    

    The members of a group named Service Accounts are shown in the Group exhibit. (Click the Group tab.)

    

    An organizational unit (OU) named ServiceAccounts is shown in the OU exhibit. (Click the OU tab.)

    

    You create a Password Settings Object (PSO) as shown in the PSO exhibit. (Click the PSO tab.)

    

    For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Reference: https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/get-started/adac/introduction-to-active-directory-administrative-center-enhancements--level-100- #fine_grained_pswd_policy_mgmt

    Source: Adapted from community discussion — xxxxx85xx

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-801 practice, question 31. 239 questions available.