AZ-801 Configuring Windows Server Hybrid Advanced Services Questions and Answers

You are planning the www.fabrikam.com website migration to support the Azure migration plan.

How should you configure WebApp1? To answer, select the appropriate opti ons in the answer area.

NOTE: Each correct selection is worth one point.

You are planning the deployment of Microsoft Sentinel.

Which type of Microsoft Sentinel data connector should you use to meet the security requirements?

You are planning the data share migration to support the on-premises migration plan.

What should you use to perform the migration?

You are planning the migration of Archive1 to support the on-premises migration plan.

What is the minimum number of IP addresses required for the node and cluster roles on Cluster3?

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the organizational units (OUs) shown in the following table.

In the domain, you create the Group Policy Objects (GPOs) shown in the following table.

You need to implement IPsec authentication to ensure that only authenticated computer accounts can connect to the members in the domain. The solution must minimize administrative effort.

Which GPOs should you apply to the Domain Controllers OU and the Domain Servers OU? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You are planning the europe.fabrikam.com migration to support the on-premises migration plan-Where should you install the Password Export Server (PES) service, where should you generate the encryption key? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains servers that run Windows Server 2022.

You have a Storage Spaces Direct cluster named SSCIuster1 that contains two physical nodes named Node! and Node2. Node! and Node2 host highly available virtual machines.

You plan to perform an in-place upgrade to Windows Server 2025 on Node1

You need to ensure that the virtual machines remain running during the upgrade.

Which four actions should you perform in sequence on Node1? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a print server named Server1. All printer s are deployed to users by using a Group Policy Object (GPO) named GPO1.

You deploy a new server named Server2.

You need to decommission Server1. The solution must meet the following requirements:

Migrate the shared printers to Server2 by using the Prin ter Migration Wizard.

Ensure that the users use the printers on Server2.

Minimize downtime for the users.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange th em in the correct order.

You have a management group named MG1 that contains an Azure subscription named Sub1. Sub1 contains the resources shown in the following table.

You need to enable Microsoft Defender for Servers.

From the Azure portal, on which two resources can you enable Defender for Servers? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

You have an Azure virtual machine named VM1 that runs Windows Server.

When you attempt to install the Azure Performance Diagnostics extension on VM I, the installation fails.

You need to identify the cause of the installation failure.

What are two possible ways to achieve the goal? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

You need to implement a security policy solution to authorize the applications. The solution must meet the security requirements.

Which service should you use to enforce the security policy, and what should you use to manage the policy settings? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have a failover cluster named Cluster1 that contains the nodes shown in the following table.

A File Server for general use cluster role named HAFS is configured as shown in the General exhibit (Click the General tab.)

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains five servers that run Windows Server. The network also contains two workgroup servers that run Windows Server.

You need to implement a connection security rule between the member servers and the workgroup servers.

Which authentication method should you use?

Your network contains an Active Directory Domain Services (AD DS) domain.

You need to implement a solution that meets the following requirements:

Ensures that the members of the Domain Admins group are allowed to sign in only to domain controllers

Ensures that the lifetime of Kerberos Ticket Granting Ticket (TGT) for the members of the Domain Admins group is limited to one hour

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You have a Windows Server 2022 Storage Spaces Direct cluster named Cluster1. Cluster1 has four nodes that contain virtual machines.

You need to perform an in-place upgrade of Cluster! to Windows Server 2025. The solution must ensure that the virtual machines are always available during the upgrade.

In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

You have an Azure subscription that contains an Azure Recovery Services vault.

You have an on-premises physical server that runs Windows Server.

You need to back up the server daily to Azure.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You have two on-premises servers named Served and Server2 that run Windows Server. Server1 hosts a virtual machine named VM1.

You have an Azure subscription.

You plan to back up VM1 by using Microsoft Azure Backup Server (MABS).

You need to deploy an on-premises MABS server. The solution must ensure that you can restore VM1, including its configuration data.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You are planning the implementation of Cluster2 to support the on-premises migration plan.

You need to ensure that the disks on Cluster2 meet the security requirements.

In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

You have a single-domain Active Directory Domain Services (AD DS) forest named contoso.com that contains two domain controllers named DC1 and DC2. DC1 and DC2 run Windows Server.

You plan to perform an authoritative restore of SYSVOL on DC1.

You isolate DC1 and restore DC1 from a backup.

You need to ensure that SYSVOL on DC1 replicates to DC2.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Your network contains an on-premises Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.

For each server. Windows Defender Firewall is configured to allow only communication between servers on the same segment. Server! has the following connection security rule:

• Name: Rule1

• Rule type: Isolation

• Requirement: Require authentication for inbound connections and request authentication for outbound connections

• Authentication method: Computer (Kerberos V5)

• Profile: Domain. Private. Public

Server2 does not have any connection security rules.

Server3 has the following connection security rule:

• Name: Rute3

• Rule type: Server-to-server

• Endpoints:

o Computers in Endpoint 1:192.168.50/24

o Computers in Endpoint 2: 192.168.1.0/24

• Requirement Request authentication (or inbound and outbound connections

• Authentication method: Computer (Kerberos V5)

• Profile: Domain. Private. Public

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

You have a Storage Spaces Direct cluster named Cluster1 that contains multiple nodes.

You have a firmware update for the hard disks attached to each node.

You create a configuration file named FileLxm1 for the update.

You need to automate the rollout of the firmware update to the nodes of Cluster1. The solution must minimize downtime of the workloads hosted in Cluster1.

How should you complete the PowerShell commands? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains domain controllers that run Windows Server 2016.

Vou build a new AD DS forest named nwtraders.com. The forest contains domain controllers that run Windows Server 2025.

You plan to perform a phased migration from contoso.com to nwtraders.com.

You perform the following actions:

• Migrate the users in contoso.com to nwtraders.com and enable slDHistory.

• Establish a two-way forest trust between contoso.com and nwtraders.com.

• Install the Active Directory Migration Tool (ADMT) in nwtraders.com.

You need to meet the technical requirements for User1.

To which group in contoso.com should you add User1?

You need to configure BitLocker on Server4.

On which volumes can you tu rn on BitLocker, and on which volumes can you turn on auto-unlock? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains three servers named Server1, Server2, and Server3 that run Windows Server. All the servers are on the same network and have network connectivity.

On Server1, Windows Defender Firewall has a connection security rule that has the following settings:

• Rule Type: Server-to-server

• Endpoint 1: Any IP address

• Endpoint 2: Any IP address

• Requirements: Require authentication for inbound connections and request authentication for outbound connections

• Authentication Method: Computer (Kerberos V5)

• Profile: Domain, Private, Public

• Name: Rule1

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

What is the effective minimum password length for User1 and Admin1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You need to meet technical requirements for Share1.

What should you use?

You need to meet the technical requirements for Cluster3.

What should you include in the so lution?

You are evaluating the technical requirements tor Cluster2.

What is the minimum number of Azure Site Recovery Providers that you should install?

With which servers can Server1 and Server3 communicate? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You need to meet the technical requirements f or Cluster2.

Which four actions should you perform in sequence before you can enable replication? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You need to implement alerts for the domain controllers. The solution must meet the technical requirements.

What should you do on the domain controllers, and what should you create on Azure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You need to back up Server 4 to meet the technical requirements.

What should you do first?

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Which domain controller should be online to meet the technical requirements for DC4?