Microsoft AZ-801 Online Practice Questions and Exam Preparation

Microsoft AZ-801 Online Questions & Answers

• Question 111:

  You are evaluating the technical requirements tor Cluster2.

  What is the minimum number of Azure Site Recovery Providers that you should install?

  A. 1
  B. 4
  C. 12
  D. 16
  B. 4

• Question 112:

  HOTSPOT

  Your network contains an on-premises Active Directory Domain Services (AD DS) domain.

  The domain contains the servers shown in the following table.

  

  Server1 has the connection security rule as shown in the Server1 exhibit. (Click the Server1 tab.)

  

  Server2 has the connection security rule as shown in the Server2 exhibit. (Click the Server2 tab.)

  

  Server1 has the inbound firewall rules as shown in the Server1 inbound rules exhibit. (Click the Server1 inbound rules tab.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  

  

• Question 113:

  You need to use a comma-separated value (CSV) file to import server inventory to Azure Migrate.

  Which fields are mandatory for each entry in the CSV file?

  A. Server name. Cores, OS Name, and Memory (in MB)
  B. Server name, IP addresses. Disk 1 size (in GB), and CPU utilization percentage
  C. Server name, IP addresses, OS version, and Number of disks
  A. Server name. Cores, OS Name, and Memory (in MB)

  ---

  Explanation

  The following table summarizes the file fields to fill in:

  

  References:

  https://docs.microsoft.com/en-us/azure/migrate/tutorial-discover-import

• Question 114:

  You have an Azure virtual machine named VM1 that has the Web Server (IIS) server role installed. VM1 hosts a critical line-of-business (LOB) application.

  After the security team at your company deploys a new security baseline to VM1, users begin reporting that the application is unresponsive.

  You suspect that the security baseline has caused networking issues.

  You need to perform a network trace on VM1.

  What should you do?

  A. From VM1, run necscac.
  B. From Performance Monitor on VM1. create a Data Collector Set.
  C. From the Azure portal, configure the Diagnostics settings for VM1.
  D. From the Azure portal, configure the Performance diagnostics settings for VM1.
  D. From the Azure portal, configure the Performance diagnostics settings for VM1.

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/performance-diagnostics

• Question 115:

  HOTSPOT

  You have an Azure virtual machine named VM1 that runs Windows Server.

  You need to perform the following tasks on VM1:

  1. Configure Windows Defender Firewall to allow Remote Desktop connections,

  2. Configure where to store the logs of the virtual machine console.

  Which two settings should you use? To answer, select the settings in the answer area.

  NOTE: Each correct selection is worth one point,

  

  

• Question 116:

  Your network contains an Active Directory Domain Services (AD DS) domain.

  You need to configure a ticket-granting ticket (TGT) lifetime for specific user and computer accounts. The solution must meet the following requirements:

  Minimize the impact on the other user and computer accounts in the domain.

  Minimize administrative effort.

  What should you configure?

  A. a dynamic access control policy
  B. a password policy
  C. an authentication policy and an authentication policy silo
  D. a fine-grained password policy
  C. an authentication policy and an authentication policy silo

  ---

  Explanation

  To configure a specific TGT lifetime for selected users and computers in an Active Directory Domain Services (AD DS) domain, use the Authentication Policies and Authentication Policy Silos feature by creating an Authentication Policy, configuring its TGT lifetime, and then assigning it to an Authentication Policy Silo that contains the target user and computer accounts. This provides more granular control than the domain-wide Kerberos Policy settings in Group Policy.

  Here are the steps:

  1. Open Active Directory Administrative Center (ADAC): Open ADAC and navigate to the Authentication Policy Silos container.

  2. Create an Authentication Policy

  3. Create an Authentication Policy Silo 4. Add Users and Computers to the Silo

  5. Assign the Authentication Policy to the Silo:

  References:

  https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/how-to-configure-protected-accounts

• Question 117:

  DRAG DROP

  Your network contains an Active Directory Domain Services (AD DS) domain that contains the servers shown in the following table.

  

  Server1 and Server2 are authorized as DHCP servers in the domain.

  You need to migrate the DHCP Server role from Server1 to Server2.

  Which five actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  To migrate the DHCP server role in Active Directory, install the role on the new server, then use PowerShell or netsh on the old server to export the DHCP configurations (including scopes, reservations, and leases) to a file. Stop and disable the DHCP service on the old server, then copy the exported configuration file to the new server and import it. Finally, authorize the new DHCP server in Active Directory, and decommission the old one.

  Here are the detailed steps:

  Step 1: From Server2, run the Add-WindowsFeature cmdlet.

  Prepare the destination server Install DHCP Server on the destination server.

  On the New DHCP Server:

  1. Install DHCP Role: In Server Manager, add the DHCP Server role to the new server.

  2. Post-Installation Configuration: Complete the post-deployment configuration and authorize the new DHCP server in your Active Directory domain.

  Step 2: From Server1, run the Stop-Service cmdlet.

  Stop and Disable DHCP Service: Stop the DHCP Server service and set its startup type to "Disabled" to prevent conflicts and ensure the old server no longer assigns IP addresses. PowerShell: Stop-Service DHCPServer and Set-Service DHCPServer -StartupType Disabled

  De-authorize the Old Server: You'll need to de-authorize the old server's DHCP service in Active Directory.

  Step 3: From Server1, run the Export-SmigServerSetting cmdlet.

  On the Old DHCP Server:

  1. Export DHCP Settings:

  The Export-SmigServerSetting cmdlet exports selected Windows features and operating system settings from the local computer, and stores them in a migration store specified in the Path parameter. Use the Import-SmigServerSetting cmdlet to import Windows features and operating system settings to the destination computer from the migration store populated by the Export-SmigServerSetting command.

  Step 4: From Server2, run the Import-SmigServerSetting cmdlet.

  3. Import DHCP Settings

  Use the Import-SmigServerSetting cmdlet to import Windows features and operating system settings to the destination computer from the migration store populated by the Export-SmigServerSetting command.

  Step 5: From Server2, run the Start-Service cmdlet.

  Start the DHCP service on Server2.

  References:

  https://learn.microsoft.com/en-us/powershell/module/microsoft.windows.servermanager.migration/export-smigserversetting

  https://learn.microsoft.com/en-us/windows-server/networking/technologies/dhcp/migrate-dhcp-server

• Question 118:

  Your company uses Storage Spaces Direct.

  You need to view the available storage in a Storage Space Direct storage pool.

  What should you use?

  A. The Get-StoragefileServer cmdlet
  B. Resource Monitor
  C. System Configuration
  D. Windows Admin Center
  D. Windows Admin Center

• Question 119:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a failover cluster named Cluster1 that hosts an application named App1.

  The General tab in App1 Properties is shown in the General exhibit. (Click the General tab.)

  

  The Failover tab in App1 Properties is shown in the Failover exhibit. (Click the Failover tab.)

  

  Server1 shuts down unexpectedly.

  You need to ensure that when you start Server1, App1 continues to run on Server2.

  Solution: You increase Maximum failures in the specified period for the App1 cluster role.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  The Maximum failures setting is used to determine when the cluster determines that a node is offline. It does not affect whether a cluster will fail back when a node comes online.

• Question 120:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com, The domain contains a domain controller named DC1, an organizational unit (OU) named OU1, and a user named User1. The domain has Active Directory Recycle Bin disabled.

  User1 is deleted from OU1 accidentally.

  You need to restore User1 from a backup of DC1.

  How should you complete the command? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.