Microsoft AZ-801 Online Practice Questions and Exam Preparation

Microsoft AZ-801 Online Questions & Answers

• Question 191:

  HOTSPOT

  You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server.

  The network interface for VM1 is disabled in the operating system.

  You need to enable the network interface by using the Azure Serial Console.

  How should you complete the command? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: netsh.exe

  Enable the Adapter:

  In the Command Prompt, type the following command: netsh interface set interface "Ethernet" admin=enable.

  The Ethernet is the default name for the adapter in Windows; if your adapter has a different name, you will need to use that name.

  Box 2: interface

  Note: Using Azure Portal to Enable a Disabled Network Adapter (Indirectly)

  1. Enable Boot Diagnostics:

  Go to the Azure portal and select your virtual machine.

  In the Help section, select Boot diagnostics.

  Go to the Settings tab.

  Ensure boot diagnostics is enabled with a managed or custom storage account.

  2. Access Command Prompt using

  Boot Diagnostics:

  Select the "Screenshot" option in the Boot Diagnostics view to see the current screen of the VM. If the network adapter is disabled, you will see a command prompt. If the VM is at the login screen, you may need to use a solution with the Azure portal to generate a new password to log in to the VM.

  3. Enable the Adapter:

  In the Command Prompt, type the following command: netsh interface set interface "Ethernet" admin=enable.

  The Ethernet is the default name for the adapter in Windows; if your adapter has a different name, you will need to use that name.

  4. Check and Verify:

  After executing the command, you can use netsh interface show interface to verify that the adapter is enabled.

  You should then be able to access the VM and verify the network adapter is active.

  References:

  https://www.youtube.com/watch?v=q3IJ1k7FnyU

• Question 192:

  You have 100 Azure virtual machines that run Windows Server. The virtual machines are onboarded to Microsoft Defender for Cloud.

  You need to shut down a virtual machine automatically if Microsoft Defender for Cloud generates the "Antimalware disabled in the virtual machine" alert for the virtual machine.

  What should you use in Microsoft Defender for Cloud?

  A. a logic app
  B. a workbook
  C. a security policy
  D. adaptive network hardening
  A. a logic app

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/defender-for-cloud/managing-and-responding-alerts

• Question 193:

  HOTSPOT

  Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contos.com. The domain contains the accounts shown in the following table.

  

  The domain is configured to store BitLocker recovery keys in Active Directory.

  1. Admin1 turns on BitLocker Drive Encryption (BitLocker) for volume C on Server1.

  2. Admin1 moves Server1 to OU1.

  3. Admin2 turns on BitLocker for removable volume E on Server2.

  4. Admin2 moves removable volume E from Server2 to Server1 and unlocks the volume.

  On which Active Directory object can you each BitLocker recovery key? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth on point.

  

  

  ---

  Box 1: Server1

  You can configure Group Policies in your domain so that when encrypting any drive with BitLocker, the computer will save the recovery key in its computer object account in AD (like storing a local computer administrator password generated using LAPS).

  Box 2: Server2

  References:

  http://woshub.com/store-bitlocker-recovery-keys-active-directory/

• Question 194:

  You have an Active Directory Domain Services (AD DS) forest that has the Active Directory Recycle Bin enabled. The forest contains a user named User1.

  User1 is accidentally deleted.

  You need to restore User1 from the Active Directory Recycle Bin.

  What should you use?

  A. Active Directory Sites and Services
  B. Active Directory Domains and Trusts
  C. Active Directory Administrative Center
  D. Active Directory Users and Computers
  C. Active Directory Administrative Center

• Question 195:

  You have five Azure virtual machines.

  You need to collect performance data and Windows Event logs from the virtual machines.

  The data collected must be sent to an Azure Storage account.

  What should you install on the virtual machines?

  A. the Azure Connected Machine agent
  B. the Azure Monitor agent
  C. the Dependency agent
  D. the Telegraf agent
  E. the Azure Diagnostics extension
  E. the Azure Diagnostics extension

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/azure-monitor/agents/diagnostics-extension-overview

• Question 196:

  DRAG DROP

  Your network contains an Active Directory Domain Services (AD DS) domain that has the Active Directory Recycle Bin enabled. All domain controllers are backed up daily.

  You accidentally remove all the users from a domain group.

  You need to get a list of the users that were previously in the group.

  Which four actions should you perform in sequence from a domain controller? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 197:

  You have a Windows Server 2022 Remote Desktop Services deployment that includes the servers shown in the following table.

  

  You need to upgrade Remote Desktop Services deployment to Windows Server 2025.

  Which Server must you upgrade first?

  A. Server1
  B. Server2
  C. Server3
  D. Server4
  E. Server5
  C. Server3

• Question 198:

  HOTSPOT

  You have an Azure virtual machine named VM1 that runs Windows Server. The disks on VM1 are protected by using Azure Disk Encryption.

  You need to use PowerShell to disable disk encryption on the data disks attached to VM1.

  How should you complete the command? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Disable-AzVMDiskEncryption Disable the Azure Disk Encryption To disable Azure Disk Encryption, use the `Disable-AzureDiskEncryption` cmdlet, which may require a VM reboot.

  Box 2: -VolumeType

  Example: Disable encryption for data volumes on a Windows virtual machine

  $ResourceGroup = "Group002" $VMName = "VM004" $VolumeType = "Data"

  Disable-AzVMDiskEncryption -ResourceGroupName $ResourceGroup -VMName $VMName -VolumeType $VolumeType.

  This command disables encryption for volumes of type data for the virtual machine named VM004 that belongs to the resource group named Group002.

  References:

  https://learn.microsoft.com/en-us/powershell/module/az.compute/disable-azvmdiskencryption

• Question 199:

  You deploy Azure Migrate to an on-premises network.

  You have an on-premises physical server named Server1 that runs Windows Server and has the following configuration.

  Operating system disk 600 GB

  Data disic 3 TB

  NIC Teaming: Enabled

  Mobility service: installed

  Windows Firewall: Enabled

  Microsoft Defender Antivirus: Enabled

  You need to ensure that you can use Azure Migrate to migrate Server1.

  Solution: You disable Windows Firewall on Server1.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 200:

  Your network contains an Active Directory Domain Services (AD DS) forest that has a Windows Server 2008 R2 forest functional level.

  The forest contains the domains shown in the following table.

  

  You need to perform an in-place upgrade of the domain controllers in east.contoso.com to Windows Server 2025.

  The solution must minimize administrative effort.

  What should you do first?

  A. Raise the domain functional level of east.contoso.com to Windows Server 2025.
  B. Raise the domain functional level of contoso.com to Windows Server 2016.
  C. Raise the forest functional level to Windows Server 2025.
  D. Extend the schema.
  B. Raise the domain functional level of contoso.com to Windows Server 2016.

  ---

  Explanation

  2016. Windows Server 2016 is the most recent functional level, and it supports domain controllers running Windows Server 2025. You must have all domain controllers upgraded to the new operating system before you can raise the functional level.

  1. Raise the forest functional level to Windows Server 2016. This can be done using the Active Directory Domains and Trusts console.

  Raise the domain functional level for east.contoso.com to Windows Server 2025.

  Note:

  Windows Server functional level interoperability.

  The following interoperability matrix summarizes which Windows Server versions you can run as domain controllers for each currently supported AD DS forest and domain functional level.

  

  References:

  https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/active-directory-functional-levels