Microsoft AZ-801 Online Practice Questions and Exam Preparation

Microsoft AZ-801 Online Questions & Answers

• Question 231:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an on-premises server named Server1 that runs Windows Server.

  You have a Microsoft Sentinel instance.

  You add the Windows Firewall data connector in Microsoft Sentine1.

  You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1.

  Solution: You install the Azure Connected Machine agent on Server1.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 232:

  HOTSPOT

  Your network contains an on-premises Active Directory Domain Services (AD DS) domain.

  

  The domain contains the Hyper-V hosts shown in the following table.

  Server1 has the Authorization and storage settings shown in the Server exhibit. (Click the Server1 tab.)

  

  Server2 has the Authorization and storage settings shown in the Server2 exhibit. (Click the Server2 tab.)

  

  Server3 has the Authorization and storage settings shown in the Server3 exhibit. (Click the Server3 tab.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: No

  No - You can use Hyper-V Replica to replicate VM1 from Server1 to Server2.

  Server2 does not allow any server to replicate virtual machines to it.

  Box 2: No

  No - You can use Hyper-V Replica to replicate VM2 to Server3.

  Server3 only allows replication from Server1.

  Server1 only contains VM1.

  Box 3: No

  No - You can use Hyper-V Replica to replicate VM1 from Server3 to Server2.

  Server2 does not allow any server to replicate virtual machines to it.

  References:

  https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/best-practices-analyzer/a-replica-server-must-be-configured-to-accept-replication-requests

• Question 233:

  You have five Azure virtual machines. You have a dedicated Azure Storage account to collect performance data.

  You need to send the collected data directly to the Azure Storage account.

  What should you install on the virtual machines?

  A. the Telegraf agent
  B. the Azure Monitor agent
  C. the Dependency agent
  D. the Azure Diagnostics extension
  E. the Azure Connected Machine agent
  E. the Azure Connected Machine agent

• Question 234:

  HOTSPOT

  You are planning the migration of APP3 and APP4 to support the Azure migration plan.

  What should you do on Cluster1 and in Azure before you perform the migration? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/migrate/tutorial-discover-hyper-v

• Question 235:

  You have a failover cluster named Cluster1 that hosts several clustered roles. You need to ensure that when a node comes back online after a failure, the clustered roles do NOT automatically return to the original node.

  Which cluster setting should you configure?

  A. Preferred Owners
  B. Failover Threshold
  C. Prevent failback
  D. Maximum failures in the specified period
  C. Prevent failback

• Question 236:

  DRAG DROP

  You have an on-premises server named Server1 that runs Windows Server.

  You have an Azure subscription that uses Microsoft Defender for Cloud.

  You need to onboard Server1 to Defender for Cloud.

  Which actions should you perform in sequence? To answer, drag the appropriate actions to the correct order. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  To onboard an on-premises server to Microsoft Defender for Cloud with a private endpoint, enable Defender for Servers, connect the server using Azure Arc-enabled servers with the private endpoint connectivity method during the Azure Arc agent setup, and ensure proper private DNS configuration for secure communication.

  Step 1: Create a private endpoint

  Use Azure Private Link to securely connect servers to Azure Arc Azure Private Link allows you to securely link Azure PaaS services to your virtual network using private endpoints. For many services, you just set up an endpoint per resource.

  This means you can connect your on-premises or multicloud servers with Azure Arc and send all traffic over an Azure ExpressRoute or site-to-site VPN connection instead of using public networks.

  The Private Endpoint on your VNet allows it to reach Azure Arc-enabled servers endpoints through private IPs from your network's pool, instead of using to the public IPs of these endpoints. That allows you to keep using your Azure Arc-enabled servers resource without opening your VNet to outbound traffic not requested.

  Step 2: Install the Azure Connected Machine agent on Server1.

  Install the Azure Connected Machine Agent 1. Sign in to the Microsoft Defender portal and go to Settings > Endpoints.

  2. Under Device management, select Onboarding.

  3. Select the operating system of your on-premises server (e.g., Windows Server 2016).

  4. Choose a Deployment method and download the installation package.

  5. Run the downloaded script on your on-premises server to install the Azure Connected Machine agent. This agent will connect your server to Azure Arc, making it visible in Microsoft Defender for Cloud's asset inventory.

  Step 3: Create and upgrade a Log Analytics workspace

  How it works

  Azure Arc Private Link Scope connects private endpoints (and the virtual networks they're contained in) to an Azure resource, in this case Azure Arc-enabled servers. When you enable any one of the Azure Arc-enabled servers supported VM extensions, such as Azure Monitor, those resources connect other Azure resources. Such as:

  Log Analytics workspace, required for Azure Automation Change Tracking and Inventory, Azure Monitor VM insights, and Azure Monitor log collection with Azure Monitor agent.

  Azure Key Vault

  Azure Blob storage, required for Custom Script Extension.

  References:

  https://learn.microsoft.com/en-us/azure/defender-for-cloud/onboard-machines-with-defender-for-endpoint

• Question 237:

  You have an on-premises Hyper-V host named Server1. Server1 contains a virtual machine named VM1.

  You have a non-domain joined Hyper-V server named Server2 that is hosted in a remote location.

  You plan to replicate VM1 to Server2 by using Hyper-V Replica.

  You need to configure replication on Server1.

  Which authentication method can you use?

  A. NTLM
  B. Kerberos
  C. preshared secret
  D. certificate
  D. certificate

• Question 238:

  You have an Azure virtual machine named VM1 that runs Windows Server.

  You enable Microsoft Defender SmartScreen.

  You need to ensure that SmartScreen-related events are recorded for troubleshooting.

  What should you enable?

  A. Windows Security notifications
  B. the Debug log in Event Viewer
  C. Advanced Audit Policy Configuration
  D. Virus & threat protection exclusions
  B. the Debug log in Event Viewer

• Question 239:

  HOTSPOT

  Your network contains an Active Directory domain. The domain contains a domain controller named DC1 and a server named Server1 that runs Windows Server.

  You need to enable event log subscriptions to forward events from DC1 to Server1.

  Which command should you run to enable the Windows Event Collector service, and on which servers should you run the command? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 240:

  You have an Azure subscription that contains the Azure key vaults shown in the following table.

  

  You create a virtual machine that has the following configurations:

  Name: VM1

  Resource group: RG1

  Azure region: East US

  Operating system: Windows Server

  You need to enable Azure Disk Encryption for VM1.

  Which key vault can you use to store the encryption key for VM1?

  A. Vault1 only
  B. Vault1 or Vault2 only
  C. Vault1 or Vault3 only
  D. Vault1, Vault2, Vault3, or Vault4
  C. Vault1 or Vault3 only

  ---

  Explanation

  Vault1 and Vault2 are in the same region as VM1.

  Note: When using Azure Disk Encryption (ADE), the Azure Key Vault that stores the encryption keys must be in the same Azure region and same Microsoft Entra tenant as the virtual machine (VM) to be encrypted. This is a requirement for ADE to control and manage the encryption keys for the VM's disks.

  References:

  https://learn.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-key-vault