Microsoft AZ-801 Online Practice Questions and Exam Preparation

Microsoft AZ-801 Online Questions & Answers

• Question 131:

  You have an Azure virtual machine named VM1. Crash dumps for a process named Process1 are enabled for VM1.

  When process1.exe on VM1 crashes, a technician must access the memory dump files on the virtual machine.

  The technician must be prevented from accessing the virtual machine.

  To what should you provide the technician access?

  A. an Azure file share
  B. an Azure Log Analytics workspace
  C. an Azure Blob Storage container
  D. a managed disk
  C. an Azure Blob Storage container

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/azure-monitor/agents/diagnostics-extension-overview

• Question 132:

  DRAG DROP

  You have an on-premises server named Server1 that runs Windows Server and has the Hyper-V server role installed.

  You have an Azure subscription that contains a virtual machine named VM1. VM1 runs Windows Server.

  You plan to use Azure Backup.

  Which type of vault should you configure for each resource? To answer, drag the appropriate vault types to the correct resources. Each vault type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

• Question 133:

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. Contoso.com contains a member server named server1.contoso.com.

  You cannot resolve the FQDN of server1.contoso.com.

  You verify that Windows Defender Firewall is configured correctly and that you can ping server1.contoso.com successfully by using the server's IP address.

  You need to validate that the DNS record for server1.contoso.com exists.

  Which command should you run?

  A. tracert
  B. ipconfig
  C. pathping
  D. nslookup
  D. nslookup

  ---

  Explanation

  How to check DNS records of a domain

  Checking DNS records using the command line

  The most efficient way to check DNS records of the domain is to use a terminal with the command nslookup. This command will run on almost all operating systems (Windows, Linux, and macOS). The command nslookup shows all DNS records of the domain and below will be provided various nslookup command for the different DNS record types to check using the command line.

  References:

  https://www.hostens.com/knowledgebase/how-to-check-dns-records-of-a-domain/

• Question 134:

  HOTSPOT

  You have two on-premises Hyper-V hosts named Server1 and Server2. Server1 hosts a virtual machine named VM1 that uses a static IP address. VM1 replicates to Server2 by using Hyper-V Replica.

  You plan to perform a failover test for VM1.

  You need to configure the Failover TCP/IP settings and the virtual switch for the failover.

  Where should you configure the Failover TCP/IP settings, and where should you configure the virtual switch? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: VM1 on Server2 only.

  Failover TCP/IP settings

  Configure the Failover TCP/IP settings that you want the Replica virtual machine to use in the event of a failover

  Issue

  Replica virtual machines configured with a static IP address should be configured to use a different IP address from their primary virtual machine counterpart in the event of failover.

  Impact

  Clients using the workload supported by the primary virtual machine might not be able to connect to the Replica virtual machine after a failover. Also, the primary virtual machine's original IP address will not be valid in the Replica virtual machine network topology. This impacts the following virtual machines:

  <list of virtual machines>

  Resolution

  Use Hyper-V Manager to configure the IP address that the Replica virtual machine should use in the event of failover.

  Box 2: Server1 only

  Virtual switch

  You should configure the Hyper-V Virtual Switch on the Hyper-V host, not the virtual machine, using the Virtual Switch Manager in Hyper-V Manager to create and manage the switches that your virtual machines will connect to. The virtual switch acts as the network infrastructure layer, while the virtual machine connects to it via a virtual network adapter to access network resources.

  References:

  https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/best-practices-analyzer/configure-the-failover-tcpip-settings-that-you-want-the-replica-virtual-machine

• Question 135:

  You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant by using password hash synchronization.

  You have a Microsoft 365 subscription.

  All devices are hybrid Azure AD-joined.

  Users report that they must enter their password manually when accessing Microsoft 365 applications.

  You need to reduce the number of times the users are prompted for their password when they access Microsoft 365 and Azure services.

  What should you do?

  A. In Azure AD. configure a Conditional Access policy for the Microsoft Office 365 applications.
  B. In the DNS zone of the AD DS domain, create an autodiscover record.
  C. From Azure AD Connect, enable single sign-on (SSO).
  D. From Azure AD Connect, configure pass-through authentication.
  C. From Azure AD Connect, enable single sign-on (SSO).

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso-quick-start

• Question 136:

  DRAG DROP

  Your network contains an Active Directory Domain Services (AD DS) domain.

  You need to implement a solution that meets the following requirements:

  1. Ensures that the members of the Domain Admins group are allowed to sign in only to domain controllers

  2. Ensures that the lifetime of Kerberos Ticket Granting Ticket (TGT) for the members of the Domain Admins group is limited to one hour

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/manage/how-to-configure-protected-accounts

• Question 137:

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains three domain controllers named DC1, DC2, and DC3.

  You connect a Microsoft Defender or identity instances to the domain.

  You need to onboard all the domain controllers to Defender for identity.

  What should you run the domain controllers?

  A. Azure ATP Sensor Setup.exe
  B. AzureConnectedMachineAgent.msi
  C. MARSAgentInstaller.exe
  D. MMASetup-AMD64.exe
  A. Azure ATP Sensor Setup.exe

  ---

  Explanation

  Azure ATP uses data from sensors, known as Azure ATP Sensors, that are installed on your domain controllers. The ATP sensors monitor the domain controller network traffic for signs of malicious activity, as well as other security risks such as connections made with weak or insecure protocols.

  Incorrect:

  Not B: The Azure Connected Machine agent enables you to manage your Windows and Linux machines hosted outside of Azure on your corporate network or other cloud providers.

  Not C: Azure Backup uses the MARS agent to back up files, folders, and system state from on-premises machines and Azure VMs. Those backups are stored in a Recovery Services vault in Azure. Not D: The Microsoft Monitoring Agent is a service used to watch and report on application and system health on a Windows computer. The Microsoft Monitoring Agent collects and reports a variety of data including performance metrics, event logs and trace information.

• Question 138:

  You have an on-premises server named Server1 that runs Windows Server. Server1 has the Web Server (IIS) server role installed and hosts an ASP.NET web app named App1.

  You have an Azure subscription.

  You plan to migrate App1 to a container in Azure.

  You need to export App1 to a ZIP file.

  What should you install on Server1?

  A. the Windows Server Migration Tools feature
  B. the IIS Management Scripts and Tools role service
  C. Web Deploy
  D. Docker Enterprise
  C. Web Deploy

  ---

  Explanation

  Azure Migrate, ASP.NET app containerization and migration to Azure App Service You can containerize ASP.NET applications and migrate them to Azure App Service by using the Azure Migrate App Containerization tool.

  Prerequisites

  Identify a machine on which to install the tool

  You need a Windows machine on which to install and run the Azure Migrate App Containerization tool. The Windows machine could run a server (Windows Server 2016 or later) or client (Windows 10) operating system. (The tool can run on your desktop.)

  If the Microsoft Web Deployment tool isn't already installed on the machine running the App Containerization tool and the application server, install it.

  Application servers

  Enable PowerShell remoting on the application servers.

  If the Microsoft Web Deployment tool isn't already installed on the machine running the App Containerization tool and the application server, install it.

  Etc.

  References:

  https://learn.microsoft.com/en-us/azure/migrate/tutorial-app-containerization-aspnet-app-service

• Question 139:

  HOTSPOT

  Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains 10 servers that run Windows Server.

  You have an Azure subscription. The subscription contains 10 virtual machines that run Windows Server.

  You need to install the Azure Monitor Agent on the Azure virtual machines and the on-premises servers.

  What should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 140:

  Your network contains an Active Directory Domains Services (AD DS) domain that has a Windows Server 2016 forest functional level. The domain contains domain controller named DC1.

  You are troubleshooting SYSVOL replication issues on DC1.

  You need to stop the service responsible for SYSVOL replication.

  Which service should you stop?

  A. Background Intelligent Transfer Service
  B. File Replication
  C. DFS Replication
  D. DS Role Server
  C. DFS Replication

  ---

  Explanation

  SYSVOL replication is managed by either the File Replication Service (FRS) on older Windows Server versions (Server 2003 and earlier) or the Distributed File System Replication (DFS-R) service on Windows Server 2008 and newer, particularly for domains with a Windows Server 2008 functional level or later.

  References:

  https://learn.microsoft.com/en-us/troubleshoot/windows-server/group-policy/force-authoritative-non-authoritative-synchronization