AZ-801 practice questions 41–50

1. Question 41 · 239 in bank

   Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains a user named User1 that has the following attributes: • whenCreated: 8/16/2023 8:04:55 AM • distinguishedName: CN=User1, DC=contoso, DC=com • objectGUID: ef91e000-d371-4ee4-9c35-7da64c432a67 • objectSID: S-1-5-21-2106002304-3506747707-1284373444-1610 You need to use the Active Directory Migration Tool (ADMT) to migrate User1 to an AD DS forest named fabrikam.com. Which attributes will change after you migrate User1 to fabrikam.com?

   • AdistinguishedName only
   • BdistinguishedName and objectSID only
   • CdistinguishedName, objectSID,and whenCreated only
   • DdistinguishedName, objectGUID,and objectSID only
   • EdistinguishedName, objectGUID,objectSID and whenCreated

   Show answer

   Answer: B

   Next question

2. Question 42 · 239 in bank

   DRAG DROP - Your network contains an Active Directory Domain Services (AD DS) domain. You need to implement a solution that meets the following requirements: ✑ Ensures that the members of the Domain Admins group are allowed to sign in only to domain controllers ✑ Ensures that the lifetime of Kerberos Ticket Granting Ticket (TGT) for the members of the Domain Admins group is limited to one hour Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/manage/how-to-configure-protected-accounts

   Source: Adapted from community discussion — allihadidave

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

3. Question 43 · 239 in bank

   Your network contains an Active Directory Domains Services (AD DS) domain that has a Windows Server 2016 forest functional level. The domain contains domain controller named DC1. You are troubleshooting SYSVOL replication issues on DC1. You need to stop the service responsible for SYSVOL replication. Which service should you stop?

   • ABackground Intelligent Transfer Service
   • BFile Replication
   • CDFS Replication
   • DDS Role Server

   Show answer

   Answer: C

   Next question

4. Question 44 · 239 in bank

   You have an Azure virtual machine named VM1 that runs Windows Server. You plan to deploy a new line-of-business (LOB) application to VM1. You need to ensure that the application can create child processes. What should you configure on VM1?

   • AMicrosoft Defender Credential Guard
   • BMicrosoft Defender Application Control
   • CMicrosoft Defender SmartScreen
   • DExploit protection

   Show answer

   Answer: D

   Explanation

   Windows Defender Credential Guard uses virtualization-based security to isolate secrets so that only privileged system software can access them Windows Defender Application Control is designed to protect devices against malware and other untrusted software Microsoft Defender SmartScreen protects against phishing or malware websites and applications, and the downloading of potentially malicious files Answer is D

   Source: Adapted from community discussion — syu31svc

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

5. Question 45 · 239 in bank

   You have a Hyper-V host named Server1 that runs Windows Server 2019. Server1 hosts a virtual machine named VM1 that has the following configurations: • Static IP address: 192.168.10.15 • Configuration version: 8.0 • Virtual network: VNet1 • Generation: 1 You deploy a Hyper-V host named Server2 that runs Windows Server 2025. You plan to export VM1 from Server1 and import VM1 to Server2 by using Hyper-V Manager. Which VM1 configurations will be preserved when VM1 is imported to Server2?

   • Athe virtual network and IP address only
   • Bthe virtual network and generation only
   • Cthe IP address and configuration version only
   • Dthe IP address, configuration version, and generation only
   • Ethe virtual network, IP address, configuration version, and generation

   Show answer

   Answer: D

   Next question

6. Question 46 · 239 in bank

   HOTSPOT - Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the organizational units (OUs) shown in the following table.

   

   In the domain, you create the Group Policy Objects (GPOs) shown in the following table.

   

   You need to implement IPsec authentication to ensure that only authenticated computer accounts can connect to the members in the domain. The solution must minimize administrative effort. Which GPOs should you apply to the Domain Controllers OU and the Domain Servers OU? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/configure-authentication-methods

   Source: Adapted from community discussion — syu31svc

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

7. Question 47 · 239 in bank

   You have a server named Server1 that runs Windows Server 2019 and has the Hyper-V server role installed. Server1 hosts the virtual machines shown in the following table.

   

   You deploy a new server named Server2 that runs Windows Server 2025 and has the Hyper-V server role installed. You need to distribute the virtual machines across both servers. Which virtual machines can you import to Server2?

   • AVM3 only
   • BVM1 and VM3 only
   • CVM3 and VM4 only
   • DVM1, VM2, and VM3 only
   • EVM1, VM2, VM3, and VM4

   Show answer

   Answer: D

   Next question

8. Question 48 · 239 in bank

   You have 100 Azure virtual machines that run Windows Server. The virtual machines are onboarded to Microsoft Defender for Cloud. You need to shut down a virtual machine automatically if Microsoft Defender for Cloud generates the "Antimalware disabled in the virtual machine" alert for the virtual machine. What should you use in Microsoft Defender for Cloud?

   • Aa logic app
   • Ba workbook
   • Ca security policy
   • Dadaptive network hardening

   Show answer

   Answer: A

   Explanation

   A) Correct! https://docs.microsoft.com/en-us/azure/defender-for-cloud/managing-and-responding-alerts "Trigger automated response - provides the option to trigger a logic app as a response to this security alert"

   Source: Adapted from community discussion — AvoKikinha

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

9. Question 49 · 239 in bank

   You have an Azure subscription that contains the virtual machines shown in the following table.

   

   You plan to use Azure Site Recovery to replicate supported virtual machines to a secondary Azure region. Which virtual machines can be replicated by using Azure Site Recovery?

   • AVM1 only
   • BVM1 and VM2 only
   • CVM1 and VM4 only
   • DVM1, VM2, and VM4 only
   • EVM1, VM2, VM3, and VM4

   Show answer

   Answer: B

   Next question

10. Question 50 · 239 in bank

    Select 2

    Your network contains an Active Directory Domain Services (AD DS) domain that has a Windows Server 2012 R2 forest and domain functional level. The domain contains the domain controllers shown in the following table.

    

    You need to ensure that you can deploy a new domain controller that runs Windows Server 2025. The solution must minimize administrative effort. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point

    • AUpgrade DC1, DC2, and DC3 to Windows Server 2025.
    • BRemove DC1.
    • CRaise the forest and domain functional level to Windows Server 2025.
    • DRemove DC2 and DC3.
    • ERaise the forest and domain functional level to Windows Server 2016.

    Show answer

    Answer: BE

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-801 practice, question 41. 239 questions available.