Microsoft AZ-801 Online Practice Questions and Exam Preparation

Microsoft AZ-801 Online Questions & Answers

• Question 161:

  You need to meet technical requirements for Share1.

  What should you use?

  A. Storage Migration Service
  B. File Server Resource Manager (FSRM)
  C. Server Manager
  D. Storage Replica
  A. Storage Migration Service

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/windows-server/storage/storage-migration-service/overview

• Question 162:

  You have an Azure subscription that contains a Recovery Services vault. You plan to back up an on-premises Windows Server by using Azure Backup.

  You need to back up only files and folders.

  Which component should you install on the server?

  A. Windows Server Backup
  B. Microsoft Azure Backup Server (MABS)
  C. the Microsoft Azure Recovery Services (MARS) agent
  D. the Azure Connected Machine agent
  C. the Microsoft Azure Recovery Services (MARS) agent

• Question 163:

  DRAG DROP

  You are planning the implementation of Cluster2 to support the on-premises migration plan.

  You need to ensure that the disks on Cluster2 meet the security requirements.

  In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/windows-server/failover-clustering/bitlocker-on-csv-in-ws-2022

• Question 164:

  You have an Azure subscription that has Microsoft Defender for Cloud enabled.

  You have 50 Azure virtual machines that run Windows Server.

  You need to ensure that any security exploits detected on the virtual machines are forwarded to Defender for Cloud.

  Which extension should you enable on the virtual machines?

  A. Vulnerability assessment for machines
  B. Microsoft Dependency agent
  C. Log Analytics agent for Azure VMs
  D. Guest Configuration agent
  A. Vulnerability assessment for machines

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/defender-for-cloud/deploy-vulnerability-assessment-vm

• Question 165:

  HOTSPOT

  You have four servers that run Windows Server. Each server has the direct-attached storage (DAS) devices shown in the following table.

  

  You need to deploy Storage Spaces Direct.

  Which types of devices will be used for the cache, and what will be the default cache behavior? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: NVMe only

  Device types for cache

  Three-Tier (NVMe, SSD, HDD): When all three types of drives are present, the NVMe drives automatically serve as the cache. The SSDs and HDDs then provide the capacity for the data. NVMe cache accelerates both read and write operations for the capacity drives.

  Note: Cache drives are selected automatically

  In deployments with multiple types of drives, Storage Spaces Direct automatically uses all drives of the fastest type for caching. The remaining drives are used for capacity.

  Which type is "fastest" is determined according to the following hierarchy.

  

  Box 2: Read/write and write-only.

  Cache behavior

  Cache behavior is set automatically

  The behavior of the cache is determined automatically based on the type(s) of drives that are being cached for. When caching for flash drives (such as NVMe caching for SSDs), only writes are cached. When caching for rotating disk drives (such as SSDs caching for HDDs), both reads and writes are cached.

  References:

  https://learn.microsoft.com/en-us/windows-server/storage/storage-spaces/cache

• Question 166:

  You have 20 on-premises virtual machines that run Windows Server.

  You have an Azure subscription that contains a Microsoft Sentinel workspace named Workspace1.

  You need to collect events from the on-premises virtual machines end forward the events to Workspace1. The solution must ensure that you can define filters to minimize the volume of collected events.

  Which two components should you install on each virtual machine? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. the Azure Connected Machine agent
  B. the Azure VM Dependency agent extension for Windows
  C. the Azure Monitor agent
  D. the Log Analytics VM extension for Windows
  E. the Dependency agent
  A. the Azure Connected Machine agent
  C. the Azure Monitor agent

  ---

  Explanation

  Option A: The Azure Connected Machine agent enables you to manage your Windows and Linux machines hosted outside of Azure on your corporate network or other cloud providers.

  Option C: Connect Microsoft Sentinel to other Microsoft services with a Windows agent-based data connector Connect Microsoft Sentinel to other Microsoft services by using a Windows agent-based connections. Microsoft Sentinel uses the Azure foundation to provide built-in, service-to-service support for data ingestion from many Azure and Microsoft 365 services, Amazon Web Services, and various Windows Server services. There are a few different methods through which these connections are made.

  Azure Monitor Agent

  Some connectors based on the Azure Monitor Agent (AMA) are currently in PREVIEW.

  The Azure Monitor Agent is currently supported only for Windows Security Events, Windows Forwarded Events, and Windows DNS Events.

  The Azure Monitor agent uses Data collection rules (DCRs) to define the data to collect from each agent. Data collection rules offer you two distinct advantages:

  Manage collection settings at scale while still allowing unique, scoped configurations for subsets of machines. They are independent of the workspace and independent of the virtual machine, which means they can be defined once and reused across machines and environments. See Configure data collection for the Azure Monitor agent.

  Build custom filters to choose the exact events you want to ingest. The Azure Monitor Agent uses these rules to filter the data at the source and ingest only the events you want, while leaving everything else behind. This can save you a lot of money in data ingestion costs!

  Incorrect:

  Not Option D:

  Log Analytics Agent (Legacy)

  The Log Analytics agent will be retired on 31 August, 2024. If you are using the Log Analytics agent in your Microsoft Sentinel deployment, we recommend that you start planning your migration to the AMA (Azure Monitor Agent).

  References:

  https://learn.microsoft.com/en-us/azure/azure-arc/servers/agent-overview

  https://learn.microsoft.com/en-us/azure/sentinel/connect-services-windows-based

• Question 167:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.

  

  The Failover Clustering tools are NOT installed on the servers.

  You plan to enable Cluster-Aware Updating (CAU).

  On which servers should you install the Failover Clustering tools to implement CAU in self-updating mode, and on which servers should you install the Failover Clustering tools to implement remote-updating made? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Node1 and Node2 only.

  Self-updating mode

  To enable the self-updating mode for Cluster-Aware Updating (CAU), you must install the Failover Clustering Tools, which include the CAU tools, on each cluster node. This installation adds the necessary components for CAU to function autonomously as a clustered role on the failover cluster itself.

  Note: The following table summarizes the CAU feature installation requirements for the two CAU updating modes.

  

  Box 2: Server1 only

  Remote-updating mode

  In remote-updating mode, the CAU tools are installed on a separate, remote computer that acts as the Update Coordinator. This remote computer then coordinates the updates for the cluster.

  References:

  https://learn.microsoft.com/en-us/windows-server/failover-clustering/cluster-aware-updating-requirements

• Question 168:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The functional level of the forest is Windows Server 2012 R2. All domain controllers run Windows Server 2012 R2.

  Sysvol replicates by using the File Replication Service (FRS).

  You plan to replace the existing domain controllers with new domain controllers that will run Windows Server 2022.

  You need to ensure that you can add the first domain controller that runs Windows Server 2022.

  Solution: You migrate sysvol from FRS to Distributed File System (DFS) Replication.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Explanation

  References:

  https://www.rebeladmin.com/2021/09/step-by-step-guide-active-directory-migration-from-windows-server-2008-r2-to-windows-server-2022/

• Question 169:

  You have two servers named Host1 and Host2 that run Windows Server 2022 and are members of a workgroup named Contoso.

  Both servers have the Hyper-V server role installed and are identical in hardware and configuration.

  Host1 contains three virtual machines. Each server is located in a separate site that connect by using a high-speed WAN link.

  You need to replicate the virtual machines from Host1 to Host2 for a disaster recovery solution.

  Which three actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Use certificate-based authentication and enable TCP exceptions.
  B. Use Kerberos authentication and enable TCP exceptions.
  C. Enable Hyper-V replication for each virtual machine.
  D. Enable Host2 as a Replica server.
  E. Enable live migration for Host1 and Host2.
  F. Enable Host1 as a Replica server.
  C. Enable Hyper-V replication for each virtual machine.
  D. Enable Host2 as a Replica server.
  E. Enable live migration for Host1 and Host2.

• Question 170:

  DRAG DROP

  You have a Storage Spaces Direct cluster in a hyper-converged deployment. The cluster contains three nodes that run Windows Server 2022. The cluster hosts 20 Hyper-V virtual machines.

  You need to upgrade the servers to Windows Server 2025. The solution must meet the following requirements:

  Minimize downtime of the virtual machines.

  Minimize administrative effort.

  Which four actions should you perform on each node in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  To upgrade a Windows Server 2022 Storage Spaces Direct (S2D) cluster to Windows Server 2025 with minimal disruption, you must perform an in-place upgrade on each node, moving VMs to other nodes, draining roles, putting the node into maintenance mode, performing the upgrade, and then bringing the node back into the cluster. The general process involves putting the cluster into a drain state, updating nodes one at a time, and then re-initializing the storage pool for S2D to work correctly with the new OS version.

  Step 1: Run the Suspend-clusterNode -Drain cmdlet.

  Step-by-step Upgrade Process:

  1. Drain roles from the first node: In the Failover Cluster Manager, move any running virtual machines to another node in the cluster.

  Note: Transfer workloads off a node Perform the following steps on one node in the cluster (you repeat this process one at a time for every node in the cluster):

  1. To drain the node in Windows Admin Center, navigate to Cluster Manager > Servers, select the node, and then select Pause. To use Failover Cluster Manager, select the node and then select Pause > Drain, as shown in Figure. Or use the Suspend-ClusterNode cmdlet with the -Drain parameter, as shown here.

  

  Step 2: Place the server in storage maintenance mode.

  2. Enter Maintenance Mode: In the Failover Cluster Manager, right-click the node and select Drain Roles to prepare it for maintenance.

  Step 3: Perform an in-place upgrade to Windows Server 2025.

  3. Upgrade to Windows Server 2025: On the node that is now drained, perform an in-place upgrade to Windows Server 2025. Follow the prompts to complete the installation.

  Incorrect:

  * Perform a clean install of Windows Server 2025 Does not minimize downtime.

  * Evict the node from the cluster Only needed for a clean install.

  Step 4: Disable the storage maintenance mode and resume the node.

  4. Reboot and re-initialize: After the upgrade, reboot the node. It will automatically rejoin the cluster, and Storage Spaces Direct will re-initialize.

  Note:

  

  References:

  https://learn.microsoft.com/en-us/system-center/vmm/hyper-v-rolling-upgrade

  https://learn.microsoft.com/en-us/windows-server/failover-clustering/cluster-operating-system-rolling-upgrade