Pre-Summer Sale Special - Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: mxmas70

Home > Microsoft > Microsoft Certified: Windows Server Hybrid Administrator Associate > AZ-801

AZ-801 Configuring Windows Server Hybrid Advanced Services Question and Answers

Question # 4

You have a three-node failover cluster.

You need to run pre-scripts and post-scripts when Cluster-Aware Updating (CAU) runs. The solution must minimize administrative effort.

What should you use?

A.

Scheduled tasks

B.

Run profiles

C.

Azure Functions

D.

Windows Server Update Serveries (WSUS)

Full Access
Question # 5

You need to meet technical requirements for Share1.

What should you use?

A.

Storage Migration Service

B.

File Server Resource Manager (FSRM)

C.

Server Manager

D.

Storage Replica

Full Access
Question # 6

You need to meet the technical requirements for User1.

To which group in contoso.com should you add User1?

A.

Domain Admins

B.

Account Operators

C.

Schema Admins

D.

Backup Operators

Full Access
Question # 7

You need to meet the technical requirements for Cluster3.

What should you include in the solution?

A.

Enable integration services on all the virtual machines.

B.

Add a Windows Server server role.

C.

Configure a fault domain doe the cluster.

D.

Add a failover cluster role.

Full Access
Question # 8

Which domain controller should be online to meet the technical requirements for DC4?

A.

DC1

B.

DC2

C.

DC3

Full Access
Question # 9

You need to back up Server 4 to meet the technical requirements.

What should you do first?

A.

Deploy Microsoft Azure Backup Server (MABS).

B.

Configure Windows Server Backup.

C.

Install the Microsoft Azure Recovery Services (MARS) agent.

D.

Configure Storage Replica.

Full Access
Question # 10

You need to implement alerts for the domain controllers. The solution must meet the technical requirements.

What should you do on the domain controllers, and what should you create on Azure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 11

What is the effective minimum password length for User1 and Admin1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 12

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Full Access
Question # 13

You need to meet the technical requirements for Cluster2.

Which four actions should you perform in sequence before you can enable replication? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Full Access
Question # 14

You have a server named Server1 that runs Windows Server.

You need to capture the SYN packets exchanged between Server1 and an IP address of 192.168.0.100. How should you complete the command? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 15

You have an on-premises IIS web server that hosts a web app named Appl. You plan to migrate App1 to a container and run the container in Azure. You need to perform the following tasks:

• Export App1 to a ZIP file.

• Create a container image based on Appl.

The solution must minimize administrative effort.

Full Access
Question # 16

You have an Azure virtual machine named VM1 that runs Windows Server.

You need to encrypt the contents of the disks on VM1 by using Azure Disk Encryption.

What is a prerequisite for implementing Azure Disk Encryption?

A.

Customer Lockbox for Microsoft Azure

B.

an Azure key vault

C.

a BitLocker recovery key

D.

data-link layer encryption in Azure

Full Access
Question # 17

You plan to deploy the Azure Monitor agent to 100 on-premises servers that run Windows Server.

Which parameters should you provide when you install the agent?

A.

the client ID and the secret of an Azure service principal

B.

the name and the access key of an Azure Storage account

C.

a connection string for an Azure SQL database

D.

the ID and the key of an Azure Log Analytics workspace

Full Access
Question # 18

With which servers can Server1 and Server3 communicate? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 19

You are evaluating the technical requirements tor Cluster2.

What is the minimum number of Azure Site Recovery Providers that you should install?

A.

1

B.

4

C.

12

D.

16

Full Access
Question # 20

You need to configure BitLocker on Server4.

On which volumes can you turn on BitLocker, and on which volumes can you turn on auto-unlock? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 21

You have two physical servers named AppSrv1 and AppSrv2 and an unconfigured server named Server1. All the servers run Windows Server. Only Server1 can access the internet.

You plan to use Azure Site Recovery to replicate AppSrv1 and AppSrv2 to Azure.

You need to deploy the required components to AppSrv1, AppSrv2, and Server1.

Which components should you deploy? To answer, drag the appropriate components to the correct servers. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Full Access
Question # 22

You are planning the www.fabrikam.com website migration to support the Azure migration plan.

How should you configure WebApp1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 23

Your network contains an Active Directory Domain Services (AD DS) domain. You need to deploy a Storage Spaces Direct cluster that has nested resiliency. What is the maximum number of nodes you can deploy to the cluster?

A.

2

B.

4

C.

12

D.

16

E.

32

Full Access
Question # 24

You have two servers that have the Web Server (IIS) server role installed. The servers are configured as shown in the following table.

Both servers are configured to enable website deployment by using the Web Deployment Tool. Server1 hosts a website named Site1 that has Web Deploy Publishing configured.

You plan to migrate Site1 to Server2.

You need to perform a pull synchronization of Site1 by using the Web Deployment Agent Service.

How should you complete the command? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 25

Your network contains an Active Directory Domain Services (AD DS) forest that has a Windows Server 2008 R2 forest functional level. The forest contains the domains shown in the following table.

You need to perform an in-place upgrade of the domain controllers in east.contoso.com to Windows Server 2025. The solution must minimize administrative effort.

What should you do first?

A.

Raise the domain functional level of east.contoso.com to Windows Server 2025.

B.

Extend the schema.

C.

Raise the domain functional level of contoso.com to Windows Server 2016.

D.

Raise the forest functional level to Windows Server 2025.

Full Access
Question # 26

You have a server that runs Windows Server and hosts an app named Appl.

You need to prevent App1 from accessing external SMTP servers. The solution must meet the following requirements:

• Minimize the impact on AppVs access to external HTTP servers.

• Minimize the impact on other apps on (he server.

• Minimize administrative effort

What should you implement in Windows Defender Firewall?

A.

an outbound program rule

B.

an inbound custom rule

C.

an outbound custom rule

D.

an inbound program rule

E.

an outbound port rule

Full Access
Question # 27

Your network contains an Active Directory Domain Services (AD DS) domain.

You need to deploy a Storage Spaces Direct cluster. The solution must support dual parity.

What is the minimum and maximum number of nodes you can deploy to the cluster? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 28

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it as a result, these questions will not appear in the review screen.

You have an on-premises server named Server1 that runs Windows Server.

You have a Microsoft Sentinel instance.

You add the Windows Firewall data connector in Microsoft Sentine1.

You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1.

Solution: You install the Azure Connected Machine agent on Server1.

Does this meet the goal?

A.

Yes

B.

No

Full Access
Question # 29

You have an Azure subscription. The subscription contains a Microsoft Sentinel workspace named Workspace1 and 100 virtual machines that run Windows Server.

You configure Workspace1 to collect logs from the virtual machines.

You need to query the collected logs for failed logon events.

Which table should you query?

A.

SigninLogs

B.

Securitylncident

C.

SecurityEvent

D.

Auditlogs

Full Access
Question # 30

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The functional level of the forest is Windows Server 2012 R2. All domain controllers run Windows Server 2012 R2.

Sysvol replicates by using the File Replication Service (FRS).

You plan to replace the existing domain controllers with new domain controllers that will run Windows Server 2022.

You need to ensure that you can add the first domain controller that runs Windows Server 2022.

Solution: You upgrade the PDC emulator.

Does this meet the goal?

A.

Yes

B.

No

Full Access
Question # 31

You have five Azure virtual machines.

You need to collect performance data and Windows Event logs from the virtual machines. The data collected must be sent to an Azure Storage account.

What should you install on the virtual machines?

A.

the Azure Connected Machine agent

B.

the Azure Monitor agent

C.

the Dependency agent

D.

the Telegraf agent

E.

the Azure Diagnostics extension

Full Access
Question # 32

You are planning the DHCP1 migration to support the DHCP migration plan.

Which two PowerShell cmdlets should you run on DHCP1, and which two PowerShell cmdlets should you run on DHCP2? To answer, drag the appropriate cmdlets to the correct servers. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Full Access
Question # 33

You are planning the data share migration to support the on-premises migration plan.

What should you use to perform the migration?

A.

Storage Migration Service

B.

Microsoft File Server Migration Toolkit

C.

File Server Resource Manager (FSRM)

D.

Windows Server Migration Tools

Full Access
Question # 34

You are planning the europe.fabrikam.com migration to support the on-premises migration plan-Where should you install the Password Export Server (PES) service, where should you generate the encryption key? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 35

You are planning the migration of Archive1 to support the on-premises migration plan.

What is the minimum number of IP addresses required for the node and cluster roles on Cluster3?

A.

2

B.

3

C.

4

D.

5

Full Access
Question # 36

You are planning the implementation of Cluster2 to support the on-premises migration plan.

You need to ensure that the disks on Cluster2 meet the security requirements.

In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

Full Access
Question # 37

You are planning the deployment of Microsoft Sentinel.

Which type of Microsoft Sentinel data connector should you use to meet the security requirements?

A.

Threat Intelligence - TAXII

B.

Azure Active Directory

C.

Microsoft Defender for Cloud

D.

Microsoft Defender for Identity

Full Access
Question # 38

You need to implement a security policy solution to authorize the applications. The solution must meet the security requirements.

Which service should you use to enforce the security policy, and what should you use to manage the policy settings? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 39

You are remediating the firewall security risks to meet the security requirements.

What should you configure to reduce the risks?

A.

a Group Policy Object (GPO)

B.

adaptive network hardening in Microsoft Defender for Cloud

C.

a network security group (NSG) in Sub1

D.

an Azure Firewall policy

Full Access