Microsoft AZ-801 Online Practice Questions and Exam Preparation

Microsoft AZ-801 Online Questions & Answers

• Question 1:

  HOTSPOT

  You have a generation 1 Azure virtual machine named VM1 that runs Windows Server and is joined to an Active Directory domain.

  You plan to enable BitLocker Drive Encryption (Bit-Locker) on volume C of VM1.

  You need to ensure that the BitLocker recovery key for VM1 is stored in Active Directory.

  Which two Group Policy settings should you configure first? To answer, select the settings in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 2:

  You have 50 on-premises servers that run Windows Server. You have an Azure subscription that contains 50 virtual machines that run Windows Server.

  You need to create an Azure Monitor alert that will be triggered if one of the servers or virtual machines has less than 10 percent available disk space.

  What should you do first?

  A. Create an Alert Rule
  B. Install the Azure Monitor agent on each server.
  C. Enable System Insights on each server.
  D. Create a Log Analytics workspace and configure the Agent management settings.
  A. Create an Alert Rule

  ---

  Explanation

  https://learn.microsoft.com/en-us/answers/questions/165893/help-to-set-up-azure-alert-fordisk-space-alert-wh.html

• Question 3:

  HOTSPOT

  You have an on-premises server named Server1 that runs Windows Server and contains the shares shown in the following table.

  

  You have an Azure subscription named Sub1 that contains an Azure Storage Mover resource named Mover1 and the storage accounts shown in the following table.

  

  The storage accounts contain the resources shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  

  

  ---

  Azure Storage Mover supports migrations from an SMB 2.x/3.x source to an Azure file share. Since Share1 is an SMB share, it can be migrated to azshare1, which is an Azure file share. This scenario is supported. :contentReference

  [oaicite:0]{index=0}

  Azure Storage Mover supports migration from an NFS source to an Azure file share only when the target is an NFS Azure file share. NFS Azure file shares are premium Azure Files shares, not standard StorageV2 file shares. Because azshare2 is in a StorageV2 standard account, this statement is false. :contentReference[oaicite:1]{index=1}

  Azure Storage Mover supports migration from an NFS 3 or NFS 4 source to an Azure blob container, and both flat namespace and hierarchical namespace enabled containers are supported. Since Share2 is NFS and azcont1 is a blob container in an HNS-enabled account, this migration is supported. :contentReference[oaicite:2]{index=2}

• Question 4:

  You have a server that runs Windows Server 2025 Standard and has the Hyper-V role installed.

  You need to upgrade the server to Windows Server 2025 Datacenter. The solution must minimize downtime.

  What should you run?

  A. dism.exe
  B. setup.exe
  C. slmgc.vbs
  D. convert.exe
  A. dism.exe

• Question 5:

  DRAG DROP

  Your network contains an Active Directory Domain Services (AD DS) domain that has the Active Directory Recycle Bin enabled. The domain contains two domain controllers named DC1 and DC2. The system state of the domain controllers is backed up daily at 23:00 by using Windows Server Backup.

  You have an organizational unit (OU) named ParisUsers that contains 1,000 users.

  At 08:00, DC1 shuts down for hardware maintenance. The maintenance completes, but DC1 remains shut down.

  At 09:00, an administrative error causes the manager attribute of each user in ParisUsers to be deleted.

  You need to recover the user account details as quickly as possible. The solution must minimize data loss.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 6:

  Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two servers named Server1 and Server2 that run Windows Server.

  You need to ensure that you can use the Computer Management console to manage Server2. The solution must use the principle of least privilege.

  Which two Windows Defender Firewall with Advanced Security rules should you enable on Server2? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. the COM+ Network Access (DCOM-ln) rule
  B. all the rules in the Remote Event Log Management group
  C. the Windows Management Instrumentation (WMI-ln) rule
  D. the COM+ Remote Administration (DCOM-ln) rule
  E. the Windows Management Instrumentation (DCOM-ln) rule
  A. the COM+ Network Access (DCOM-ln) rule
  B. all the rules in the Remote Event Log Management group

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/windows-server/administration/server-manager/configure-remote-management-in-server-manager

• Question 7:

  You have a server named Server1 that runs the Remote Desktop Session Host role service. Server1 has five custom applications installed.

  Users who sign in to Server1 report that the server is slow. Task Manager shows that the average CPU usage on Server1 is above 90 percent. You suspect that a custom application on Server1 is consuming excessive processor capacity.

  You plan to create a Data Collector Set in Performance Monitor to gather performance statistics from Server1.

  You need to view the resources used by each of the five applications.

  Which object should you add to the Data Collector Set?

  A. Processor information
  B. Processor
  C. Process
  D. Processor performance
  C. Process

• Question 8:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two domain controllers named DC1 and DC2 and the users shown in the following table.

  

  You are planning a restore strategy for AD DS.

  Which users can perform an authoritative restore on DC2, and what should the users run to perform the restore? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Contoso\User1 and DC2\Administrator only Users

  DC2 Administrator

  A member of the Domain Administrators group can perform an authoritative restore on a domain controller in Active Directory Domain Services (AD DS). This process requires specific permissions, which are granted by default to users in the Domain Admins group, allowing them to restore Active Directory data and then mark it as authoritative so it replicates to other domain controllers in the forest.

  User1 - Yes

  User1 is an Enterprise Admin.

  An authoritative restore requires elevated privileges and is typically executed by a member of the Domain Admins or Enterprise Admins group, or at minimum, a user with the necessary permissions in Directory Services Restore Mode (DSRM).

  User2 - No

  A member of the Backup Operators group in Active Directory can perform a restore of a domain controller, but they cannot perform an authoritative restore on their own.

  Box 2: ntdsutil.exe

  Use

  The command used to perform an authoritative restore of Active Directory is ntdsutil. You must first boot the domain controller into Directory Services Restore Mode (DSRM). Once in DSRM, you can launch ntdsutil.exe from the command prompt, activate the AD instance, and then type authoritative restore to initiate the process.

  References:

  https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/cc732211(v=ws.11)

• Question 9:

  You have a three-node failover cluster.

  You need to run pre-scripts and post-scripts when Cluster-Aware Updating (CAU) runs. The solution must minimize administrative effort.

  What should you use?

  A. Scheduled tasks
  B. Run profiles
  C. Azure Functions
  D. Windows Server Update Serveries (WSUS)
  B. Run profiles

  ---

  Explanation

  Cluster-Aware Updating advanced options and updating run profiles.

  You can set the PreUpdateScript or PostUpdateScript the option.

  References:

  https://docs.microsoft.com/en-us/windows-server/failover-clustering/cluster-aware-updating-options

• Question 10:

  HOTSPOT

  Your on-premises datacenter contains physical servers and Hyper-V virtual machines.

  You have an Azure subscription.

  You plan to use Azure Migrate to perform the following tasks:

  1. Migrate the physical servers to Azure virtual machines.

  2. Migrate the Hyper-V virtual machines to Azure.

  What should you use for each task? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.