Microsoft AZ-801 Online Practice Questions and Exam Preparation

Microsoft AZ-801 Online Questions & Answers

• Question 101:

  HOTSPOT

  You have a server that runs Windows Server.

  You need to enable the following security features:

  Core isolation

  Force randomization form images (Mandatory ASLR)

  Which Windows Security tile should you use to enable each feature? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Device Security

  Core isolation

  To enable Core isolation (Memory Integrity) in Windows Server, open the Windows Security app and navigate to Device Security > Core Isolation Details. Toggle Memory Integrity to the On position and restart your computer for the change to take effect. Ensure your system firmware supports virtualization (UEFI mode is required) and that there are no incompatible drivers causing conflicts.

  Box 2: App & browser control

  Force randomization form images (Mandatory ASLR)

  To force Address Space Layout Randomization (ASLR) for all executables on Windows Server, navigate to Windows Security > App & browser control > Exploit protection settings, and then set "Force randomization for images (Mandatory ASLR)" to "On by default". This setting applies system-wide but may cause compatibility issues with older applications that don't fully support ASLR.

  References:

  https://learn.microsoft.com/en-us/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity

  https://learn.microsoft.com/en-us/defender-endpoint/customize-exploit-protection

• Question 102:

  You need to back up Server 4 to meet the technical requirements.

  What should you do first?

  A. Deploy Microsoft Azure Backup Server (MABS).
  B. Configure Windows Server Backup.
  C. Install the Microsoft Azure Recovery Services (MARS) agent.
  D. Configure Storage Replica.
  C. Install the Microsoft Azure Recovery Services (MARS) agent.

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/backup/install-mars-agent

• Question 103:

  DRAG DROP

  You have a Windows Server 2022 failover cluster named Cluster1 that contains the Cluster Shared Volumes (CSV) shown in the following table.

  

  All the nodes in Cluster1 have BitLocker Drive Encryption (BitLocker) installed.

  You need to use PowerShell to enable BitLocker on Volume1.

  In which order should you run the commands? To answer, drag the appropriate commands to the correct order. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

• Question 104:

  Your on-premises datacenter contains a server named Server1 that runs Windows Server.

  You install the System Insights feature on Server1.

  You discover that some of the System Insights capabilities are NOT installed.

  Which two capabilities should be installed manually on Server1? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. CPU capacity forecasting
  B. Physical disk anomaly detection (IOPS)
  C. Networking capacity forecasting
  D. Physical disk anomaly detection (Latency)
  E. Total storage consumption forecasting
  B. Physical disk anomaly detection (IOPS)
  D. Physical disk anomaly detection (Latency)

  ---

  Explanation

  Overview of System Insights capabilities

  A System Insights capability is a machine learning or statistics model that analyzes system data to give you more insight into your deployment. System Insights includes a set of default capabilities, and you can add new capabilities dynamically without updating the operating system.

  The four default capabilities available are:

  CPU capacity forecasting - Forecasts CPU usage. [Not A]

  Networking capacity forecasting - Forecasts network usage for each network adapter. [Not C] Total storage consumption forecasting - Forecasts total storage consumption across all local drives. [Not E] Volume consumption forecasting - Forecasts storage consumption for each volume.

  

  You install the System Insights feature itself, and then add new machine learning-based capabilities dynamically as needed without requiring an operating system update. This allows you to extend the functionality beyond the default capabilities, which include CPU capacity forecasting, Networking capacity forecasting, Total storage consumption forecasting, and Volume consumption forecasting.

  References:

  https://learn.microsoft.com/en-us/windows-server/manage/system-insights/understanding-capabilities

• Question 105:

  HOTSPOT

  Your on-premises network contains an Active Directory Domain Services (AD DS) domain.

  The domain contains four servers named Server1, Server 2, Server3, and Server4 that run Windows Server.

  You configure the connection security rules shown in the following table.

  

  Server4 does NOT have any connection security rules applied.

  With which servers can Server1 and Server2 establish communication after the connection security rules are applied? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Server1 is configured to request authentication for both inbound and outbound connections. "Request" means it will attempt IPsec but will still allow communication if the other side does not support it. Therefore, Server1 can communicate with servers that either request or require authentication, but not with servers that do not negotiate properly under stricter rules.

  Server2 requires authentication for outbound connections and only requests it for inbound. Because outbound is "require", Server2 will only initiate communication with servers that support IPsec. Server1 and Server3 both support IPsec, so communication is allowed. Server4 has no rules and does not support IPsec, so Server2 cannot establish outbound communication with Server4.

  Server3 requires authentication for both inbound and outbound, so it only communicates with servers that support IPsec. Server1 and Server2 both support IPsec negotiation, so they are valid communication partners.

  Server4 has no connection security rules and does not participate in IPsec, so it cannot communicate with servers that require authentication for outbound connections.

• Question 106:

  Your network contains an Active Directory Domain Services (AD DS) forest. The forest functional level is Windows Server 2012 R2. The forest contains the domains shown in the following table.

  

  You create a user named Admin1.

  You need to ensure that Admin1 can add a new domain controller that runs Windows Server 2022 to the east.contoso.com domain. The solution must follow the principle of least privilege.

  To which groups should you add Admin1?

  A. EAST\Domain Admins only
  B. CONTOSO\Enterprise Admins only
  C. CONTOSO/Schema Admins and EAST\Domain Admins
  D. CONTOSO\Enterprise Admins and CONTOSO/Schema Admins
  A. EAST\Domain Admins only

• Question 107:

  You have a server named Server1 that runs Windows Server.

  You install System Insights on Server1.

  You need to modify the schedule for storage consumption forecasting.

  What should you use?

  A. Resource Monitor
  B. Server Manager
  C. Windows Admin Center
  D. Performance Monitor
  C. Windows Admin Center

  ---

  Explanation

  To modify the storage consumption forecasting schedule with Windows Server System Insights, open Windows Admin Center, navigate to the System Insights landing page, select the Storage usage capability, and click on Settings to find and update the Schedule tab for your desired frequency. The capability's schedule controls when it processes collected data, allowing you to adjust the timing or disable it entirely to avoid conflicts with production hours.

  References:

  https://learn.microsoft.com/en-us/windows-server/manage/system-insights/managing-capabilities

• Question 108:

  HOTSPOT

  You have an on-premises server named Server1 that runs Windows Server.

  You have an Azure subscription.

  You migrate Server1 to an Azure virtual machine named VM1.

  You need to configure a backup solution for VM1. The solution must provide recovery points.

  What should you do on VM1, and in which type of vault should you store the backups? To answer, elect the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Install the Windows Azure VM agent.

  On VM1

  You need a backup extension on the Azure VM Agent (or the agent itself if you're backing up files and folders with the MARS agent) for an Azure Windows Server virtual machine to perform backups, as it coordinates with the Volume Shadow Copy Service (VSS) to create snapshots and ensure application-consistent or file-consistent backups. If your VM was deployed from an Azure Marketplace image, the agent and extension are typically installed by default. If not, you will need to manually install the VM Agent or the MARS agent for file/folder backups.

  Incorrect:

  Install the Azure Connected Machine agent.

  Install Windows Server Backup

  You do not use the standard Windows Server Backup feature to create recovery points for an Azure Windows Server VM; instead, you use the Azure Backup service, which employs the Microsoft Azure Recovery Services (MARS) agent or a backup extension to create and manage recovery points directly within Azure. While Windows Server Backup can be used to back up a VM's contents from within the VM, Azure Backup is the managed, native service for protecting entire Azure VMs and managing their recovery points in Azure.

  Box 2: Recovery Services vault

  Vault type

  To configure backup and recovery points for an Azure Windows Server VM, first create a Recovery Services vault in the Azure portal. Next, apply a backup policy to define your backup schedule and retention and select the virtual machine you want to back up. Enable the backup process to start the initial backup, which creates the first recovery point. You can then monitor the backup job and use the recovery points in the vault to restore the VM or individual files when needed.

  References:

  https://learn.microsoft.com/en-us/azure/backup/manage-recovery-points

• Question 109:

  You need to meet the technical requirements for User1.

  To which group in contoso.com should you add User1?

  A. Domain Admins
  B. Account Operators
  C. Schema Admins
  D. Backup Operators
  A. Domain Admins

• Question 110:

  DRAG DROP

  You have three servers named Server1, Server2, Server3 that run Windows Server and have the Hyper-V server role installed.

  You plan to create a hyper-converged cluster to host Hyper-V virtual machines.

  You need to ensure that you can store virtual machines in Storage Spaces Direct.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/system-center/vmm/s2d-hyper-converged?view=sc-vmm-2019