Microsoft AZ-801 Online Practice Questions and Exam Preparation

Microsoft AZ-801 Online Questions & Answers

• Question 211:

  Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two servers named Server1 and Server2.

  Server1 runs Windows Server 2019 and hosts multiple printers. Server2 runs Windows Server 2025. Both servers have the Print and Document Services server role installed.

  You need to migrate the printers hosted on Server1 to Server2. The solution must minimize administrative effort.

  What tools can you use?

  A. Print Management only
  B. Windows Admin Center only
  C. Server Manager and Print Management only
  D. Print Management and Windows Admin Center only
  E. Server Manager, Print Management, and Windows Admin Center
  A. Print Management only

  ---

  Explanation

  Print management - Yes

  To migrate printers in an AD DS environment to a new server, you use the Print Management tool to export and import printer configurations, then update Group Policy to point clients to the new print server.

  Note: In Active Directory (AD) Domain Services, Print Management refers to the centralized control and deployment of printers across a network, allowing administrators to manage printer objects, drivers, and sharing settings from a single location using the Print Management console and Group Policy (GPO). This system enables administrators to add printers to Active Directory for easier discovery by users, enforce printing policies, and distribute printers to users based on their organizational unit (OU) or other criteria.

  Windows Admin Center (WAC) - No

  You can use Windows Admin Center (WAC) to manage the migration of printers hosted on one server to a second server by first adding the source and destination servers to WAC and then utilizing the built-in Print Management functionality on the new server. While WAC acts as a centralized management tool, the actual printer data migration is typically performed using the print export/import utilities and then updating Group Policy or login scripts to point users to the new server.

  Steps to Migrate Printers Using Windows Admin Center

  1. Add Servers to Windows Admin Center: In WAC, connect to both your current print server and your new target server by adding them as connections.

  2. Configure the New Print Server

  3. Export and Import Print Configuration:

  On the old print server, use the built-in *Print Management* utility to export the printer configuration, drivers, and ports.

  Import this configuration onto the new print server using the same utility.

  4. Update Group Policy (GPO) or Login Scripts

  Server Manager - No

  Server Manager itself cannot be used to directly migrate printers between servers in an AD DS environment

  References:

  https://learn.microsoft.com/en-us/troubleshoot/windows-server/printing/use-group-policy-to-control-ad-printer

• Question 212:

  Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two Windows Server Failover Cluster (WSFC) instances named Cluster1 and Cluster2. Cluster1 hosts Hyper-V virtual machines. Cluster2 does NOT have any high availability roles configured.

  You need to create a Storage Spaces Direct cluster in Cluster2 that will store the virtual machine hard disk files for Cluster1.

  Which role should you configure for Cluster2? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  A. Virtual Machine
  B. iSCSI Target Server
  C. Hyper-V Replica Broker
  D. File Server
  C. Hyper-V Replica Broker
  D. File Server

  ---

  Explanation

  To use this Windows Server Failover Cluster (Cluster A) to store VM hard disk files for another cluster (Cluster B), you'll need to add the File Server role to Cluster A and then add the Hyper-V Replica Broker role to it after installing the Hyper- V role on its nodes. Configure the File Server role on Cluster A to provide a shared network location (SMB share), then in Cluster B's Hyper-V Manager, enable replication to Cluster A's Hyper-V Replica Broker, using the shared location for the initial replication.

  References:

  https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/manage/set-up-hyper-v-replica

• Question 213:

  HOTSPOT

  The Default Domain Policy Group Policy Object (GPO) is shown in the GPO exhibit. (Click the GPO tab.)

  

  The members of a group named Service Accounts are shown in the Group exhibit. (Click the Group tab.)

  

  An organizational unit (OU) named ServiceAccounts is shown in the OU exhibit. (Click the OU tab.)

  

  You create a Password Settings Object (PSO) as shown in the PSO exhibit. (Click the PSO tab.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 214:

  You have a server named Server1 that runs Windows Server 2019 and has the Hyper-V server role installed. Server1 hosts the virtual machines shown in the following table.

  

  You deploy a new server named Server2 that runs Windows Server 2025 and has the Hyper-V server role installed.

  You need to distribute the virtual machines across both servers.

  Which virtual machines can you import to Server2?

  A. VM3 only
  B. VM1 and VM3 only
  C. VM3 and VM4 only
  D. VM1, VM2, and VM3 only
  E. VM1, VM2, VM3, and VM4
  D. VM1, VM2, and VM3 only

  ---

  Explanation

  On Windows Server 2025, both Generation 1 and Generation 2 virtual machines are supported by the Hyper-V server role.

  On Windows Server 2025, Hyper-V supports virtual machine configuration versions: 8, 9, 10 , 11, and 12.

  Note: Supported VM configuration versions for long-term servicing hosts.

  The following table lists the VM configuration versions for hosts running a long-term servicing version of Windows.

  

  References:

  https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/supported-windows-guest-operating-systems-for-hyper-v-on-windows

  https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/deploy/upgrade-virtual-machine-version-in-hyper-v-on-windows-or-windows-server

• Question 215:

  HOTSPOT

  You have a failover cluster named Cluster1 that contains three nodes.

  You plan to add two file server cluster roles named File1 and File2 to Cluster1. File1 will use the File Server for general use role. File2 will use the Scale-Out File Server for application data role.

  What is the maximum number of nodes for File1 and File2 that can concurrently serve client connections? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/windows-server/failover-clustering/sofs-overview

• Question 216:

  You have an Azure virtual machine named VM1 that runs Windows Server.

  The operating system on VM1 fails to fully initialize its network stack, and you cannot establish a network connection.

  You need to establish an interactive shell session.

  What should you use?

  A. Azure Bastion
  B. Serial console
  C. just-in-time (JIT) VM access
  B. Serial console

• Question 217:

  DRAG DROP

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The functional level of the forest and the domain is Windows Server 2012 R2. The domain contains the domain controllers shown in the following table.

  

  You need to raise the forest functional level to Windows Server 2016. The solution must meet the following requirements:

  1. Ensure that there are three domain controllers after you raises the level.

  2. Minimize how long the FSMO roles are unavailable.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 218:

  You have 200 Azure virtual machines.

  You create a recovery plan in Azure Site Recovery to fail over all the virtual machines to an Azure region. The plan has three manual actions.

  You need to replace one of the manual actions with an automated process.

  What should you use?

  A. an Azure Desired State Configuration (DSC) virtual machine extension
  B. an Azure Automation runbook
  C. an Azure PowerShell function
  D. a Custom Script Extension on the virtual machines
  B. an Azure Automation runbook

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/site-recovery/recovery-plan-overview

• Question 219:

  Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that hosts an app named App1. App1 uses Active Directory authentication.

  You have a Microsoft Entra tenant that contains a user named User1.

  You deploy Microsoft Entra Connect sync and configure password synchronization.

  User1 fails to authenticate to App1.

  You need to ensure that User1can authenticate to App1.

  What should you do?

  A. For Microsoft Entra Connect sync, enable the BlockCloudObjectTakeoverThroughHardMatch feature.
  B. For Microsoft Entra Connect sync, enable password writeback.
  C. From the AD DS domain, create a new user account named User1.
  D. For Microsoft Entra Connect sync, disable soft match.
  B. For Microsoft Entra Connect sync, enable password writeback.

  ---

  Explanation

  We assume the App works fine with other users, just that User1 has a problem. The password of User1 might have changed in Microsoft Entra after the initial synchronization.

  Note: Microsoft Entra Connect sync password writeback is a feature that synchronizes password changes made in Microsoft Entra ID (the cloud) back to your on-premises Active Directory Domain Services (AD DS). When a user resets or changes their password using a cloud-based self-service password reset (SSPR) tool, the new password is written back to the on-premises directory, ensuring it's applied to their local account and respecting on-premises password policies.

  Incorrect:

  [Not A]

  The BlockCloudObjectTakeoverThroughHardMatch feature in Microsoft Entra Connect sync is a security mechanism that prevents accidental or unintended takeover of cloud-based objects by an on-premises Active Directory object during a "hard-match" process. A hard match occurs when Entra Connect creates or updates an object based on a matching ImmutableId (sourceAnchor) from the cloud to the on-premises directory, and this feature blocks this takeover to avoid corrupting cloud-managed objects.

  It is encouraged to enable this feature to prevent unintended matches and only disable it temporarily for specific matching procedures.

  [Not D]

  When to Use Soft Match Existing Cloud Users.

  This feature is useful when you need to sync on-premises AD accounts with users that were initially created in Microsoft Entra ID and don't have the on-premises sourceAnchor attribute.

  References:

  https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-password-hash-synchronization

• Question 220:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains an organizational unit (OU) named OU1 and a user named User1.

  You plan to deploy a Hyper-V failover cluster named Cluster1.

  You need to prestage the account for Cluster1 and ensure that User1 can deploy Cluster1. The solution must follow the principle of least privilege.

  Which action should you perform, and which permissions should you grant to User1 for Cluster1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Action: Create a new computer account named Cluster1.

  When deploying a failover cluster, a computer account is needed for the cluster itself. Creating a new computer account named Cluster1 is the appropriate step.

  Permissions: Full control.

  User1 needs Full control over the computer account for Cluster1 to ensure they can create and manage the cluster.