AZ-801 Practice Questions

You have a server that runs Windows Server and hosts an app named Appl.

You need to prevent App1 from accessing external SMTP servers. The solution must meet the following requirements:

• Minimize the impact on AppVs access to external HTTP servers.

• Minimize the impact on other apps on (he server.

• Minimize administrative effort

What should you implement in Windows Defender Firewall?

You have an on-premises server named Server1 that runs Windows Server. Server1 has the Web Server (IIS) server role installed and hosts an ASP.NET web app named App1.

You have an Azure subscription.

You plan to migrate App1 to a container in Azure.

You need to export App1 to a ZIP file.

What should you install on Server1?

You deploy Azure Migrate to an on-premises network.

You have an on-premises physical server named Server1 that runs Windows Server and has the following configurations:

• Operating system disk; 600 GB

• Data disk: 3 TB

• NIC Teaming: Enabled

• Mobility service: Installed

• Windows Defender Firewall: Enabled

• Microsoft Defender Antivirus: Enabled

You need to ensure that you can use Azure Migrate to migrate Server1.

Solution: You disable Windows Defender Firewall on Server 1.

Does this meet the goal?

Your company uses Storage Spaces Direct.

You need to view the available storage in a Storage Space Direct storage pool.

What should you use?

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains three servers named Server1, Server2, and Server3 that run Windows Server. All the servers are on the same network and have network connectivity.

On Server1, Windows Defender Firewall has a connection security rule that has the following settings:

• Rule Type: Server-to-server

• Endpoint 1: Any IP address

• Endpoint 2: Any IP address

• Requirements: Require authentication for inbound connections and request authentication for outbound connections

• Authentication Method: Computer (Kerberos V5)

• Profile: Domain, Private, Public

• Name: Rule1

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

You have an Azure subscription. The subscription contains a Microsoft Sentinel workspace named Workspace1 and 100 virtual machines that run Windows Server.

You configure Workspace1 to collect logs from the virtual machines.

You need to query the collected logs for failed logon events.

Which table should you query?

You have an Azure subscription that contains the Azure key vaults shown in the following table.

You create a virtual machine that has the following configurations

• Name:VM1

• Resource group: RG1

• Azure region: East US

• Operating system: Windows Server

You need to enable Azure Disk Encryption for VM1. Which key vault can you use to store the encryption key for VM1?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The functional level of the forest is Windows Server 2012 R2. All domain controllers run Windows Server 2012 R2.

Sysvol replicates by using the File Replication Service (FRS).

You plan to replace the existing domain controllers with new domain controllers that will run Windows Server 2022.

You need to ensure that you can add the first domain controller that runs Windows Server 2022.

Solution: You migrate sysvol from FRS to Distributed File System (DFS) Replication.

Does this meet the goal?

Your network contains an Active Directory Domain Services (AD DS) domain.

You need to configure a ticket-granting ticket (TGT) lifetime for specific user and computer accounts. The solution must meet the following requirements:

• Minimize the impact on the other user and computer accounts in the domain.

• Minimize administrative effort.

What should you configure?

You have an Azure subscription that contains two virtual machines named VM1 and VM2. VM1 runs Windows Server. VM2 runs Ubuntu Linux. You need to monitor VM1 and VM2 by using VM insights. The solution must meet the following requirements:

• Ensure that you can monitor the memory usage on VM1.

• Ensure that you run the Map feature on VM2.

The solution must minimize the number of agents required for each virtual machine.

Which agents are required on each virtual machine? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.