Microsoft AZ-801 Online Practice Questions and Exam Preparation

Microsoft AZ-801 Online Questions & Answers

• Question 181:

  You have a failover cluster named Cluster1 that has the following configurations:

  1. Number of nodes: 6

  2. Quorum: Dynamic quorum

  3. Witness: File share, Dynamic witness

  What is the maximum number of nodes that can fail simultaneously while maintaining quorum?

  A. 1
  B. 2
  C. 3
  D. 4
  E. 5
  C. 3

  ---

  Explanation

  Note this question is asking about nodes failing `simultaneously', not nodes failing one after the other.

  With six nodes and one witness, there are seven votes. To maintain quorum there needs to be four votes available (four votes is the majority of seven). This means that a minimum of three nodes plus the witness need to remain online for the cluster to function. Therefore, the maximum number of simultaneous failures is three.

  References:

  https://docs.microsoft.com/en-us/windows-server/storage/storage-spaces/understand-quorum

• Question 182:

  HOTSPOT

  You have an Azure subscription that contains an Azure key vault named Vault1.

  You deploy Azure Disk Encryption.

  You configure Vault1 to support Azure Disk Encryption.

  You need to ensure that you can encrypt Azure Disk Encryption artifacts before they are written to Vault1. The solution must provide the highest level of encryption.

  How should you complete the command? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: key

  Create and configure a key vault for Azure Disk Encryption on a Windows VM

  Set up a key encryption key (KEK)

  If you want to use a key encryption key (KEK) for an additional layer of security for encryption keys, add a KEK to your key vault. When a key encryption key is specified, Azure Disk Encryption uses that key to wrap the encryption secrets before writing to Key Vault.

  Use the Azure CLI az keyvault key create command to generate a new KEK and store it in your key vault.

  az keyvault key create --name "myKEK" --vault-name "<your-unique-keyvault-name>" --kty RSA --size Box 2: RSA-HSM For 4096-bit encryption choose RSA-HSM.

  Note: Which to choose

  For maximum key security: Always use an HSM (like EC-HSM or RSA-HSM) to protect your keys, regardless of the algorithm you choose.

  Key types and protection methods

  Key Vault Premium and Standard support RSA and EC keys. Managed HSM supports RSA, EC, and symmetric keys.

  HSM-protected keys

  

  References:

  https://learn.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-key-vault

  https://learn.microsoft.com/en-us/azure/key-vault/keys/about-keys

• Question 183:

  You have two file servers named Server1 and Server2 that run Windows Server. Server1 contains a shared folder named Data. Data contains 10 TB of data.

  You plan to decommission Server1.

  You need to migrate the files from Data to a new shared folder on Server2. The solution must meet the following requirements:

  1. Ensure that share, file, and folder permissions are copied.

  2. After the initial copy occurs, ensure that changes in \\Server1\Data can be synced to the destination without initiating a full copy.

  3. Minimize administrative effort.

  What should you use?

  A. xcopy
  B. Storage Replica
  C. Storage Migration Service
  D. azcopy
  C. Storage Migration Service

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/windows-server/storage/storage-migration-service/overview#why-use-storage-migration-service

• Question 184:

  DRAG DROP

  You need to create a Hyper-V hyper-converged cluster that stores virtual machines by using Storage Spaces Owed

  Which three actions should you perform in sequence? To answer, move the appropriate anions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/system-center/vmm/s2d-hyper-converged?view=sc-vmm-2019

• Question 185:

  You have an Azure virtual machine named VM1 that runs Windows Server.

  You configure Azure Site Recovery replication for VM1.

  You need to perform a test failover on VM1.

  What should you use from the VM1 blade in the Azure portal?

  A. Availability + scaling
  B. Backup
  C. Disaster recovery
  D. Windows Admin Center
  E. Automanage
  C. Disaster recovery

  ---

  Explanation

  In the Azure portal, you execute a test failover for Azure Site Recovery by navigating to your Recovery Services Vault, then to the Site Recovery section, and finally selecting either the Recovery Plans blade to test a plan, or the Replicated Items blade to test a single virtual machine (VM). For a recovery plan, you select the plan name and then the Test Failover button, while for a single VM, you select the VM in the Replicated Items list and then click the +Test Failover button.

  References:

  https://learn.microsoft.com/en-us/azure/site-recovery/azure-to-azure-tutorial-dr-drill

• Question 186:

  HOTSPOT

  You need to implement alerts for the domain controllers. The solution must meet the technical requirements.

  What should you do on the domain controllers, and what should you create on Azure? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-overview?tabs=PowerShellWindows

• Question 187:

  You have an on-premises virtual machine named VM1 that runs Windows Server.

  You have an Azure subscription.

  You plan to use an Azure Site Recovery replication policy to replicate VM1 to Azure.

  You need to ensure that changes on VM1 are replicated as often as possible.

  To what should you set the Copy frequency setting for the policy?

  A. 15 Seconds
  B. 30 Seconds
  C. 1 Minute
  D. 5 Minutes
  B. 30 Seconds

  ---

  Explanation

  30 seconds is the smallest available setting.

  Note: For on-premises Windows Server VMs being replicated to Azure with Azure Site Recovery, the Copy frequency should be set to 5 minutes or 30 seconds. These options provide improved performance and recovery point objectives, though the exact choice depends on the VM's data change rate and the user's tolerance for potential data loss during a disaster. A 15-minute setting is being phased out in favor of these faster options.

  References:

  https://www.microsoftpressstore.com/articles/article.aspx?p=3172428&seqNum=4

• Question 188:

  You have an Azure virtual machine named VM1.

  You install an application on VM1, and then restart the virtual machine.

  After the restart, you get the following error message: "Boot failure. Reboot and Select proper Boot Device or Insert Boot Media in selected Boot Device."

  You need to mount the operating system disk offline from VM1 to a temporary virtual machine to troubleshoot the issue.

  Which command should you run in Azure CLI?

  A. az vm repair create
  B. az vm boot-diagnostics enable
  C. az vm capture
  D. az vm disk attach
  A. az vm repair create

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/cli/azure/vm/repair?view=azure-cli-latest

• Question 189:

  DRAG DROP

  You need to meet the technical requirements for Cluster2.

  Which four actions should you perform in sequence before you can enable replication? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/site-recovery/hyper-v-azure-tutorial

• Question 190:

  You have an on-premises server named Server1 that runs Windows Server 2022.

  You plan to onboard Server1 to Azure by using Azure Arc.

  You need to ensure that Server1 can be managed from the Azure portal.

  What should you install on Server1?

  A. the Azure Monitor agent
  B. the Microsoft Monitoring Agent (MMA)
  C. the Azure Connected Machine agent
  D. the Azure Diagnostics extension
  C. the Azure Connected Machine agent