AZ-801 Configuring Windows Server Hybrid Advanced Services Questions and Answers

Which domain controller should be online to meet the technical requirements for DC4?

You need to meet the technical requirements for Cluster3.

What should you include in the solution?

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

You need to configure BitLocker on Server4.

On which volumes can you turn on BitLocker, and on which volumes can you turn on auto-unlock? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You need to meet technical requirements for Share1.

What should you use?

You have an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server.

You need to prevent the registration of specific COM objects on Server1.

What should you use?

You are evaluating the technical requirements tor Cluster2.

What is the minimum number of Azure Site Recovery Providers that you should install?

You need to meet the technical requirements for Cluster2.

Which four actions should you perform in sequence before you can enable replication? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You need to meet the technical requirements for User1.

To which group in contoso.com should you add User1?

What is the effective minimum password length for User1 and Admin1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

With which servers can Server1 and Server3 communicate? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You plan to deploy the Azure Monitor agent to 100 on-premises servers that run Windows Server.

Which parameters should you provide when you install the agent?

You need to implement alerts for the domain controllers. The solution must meet the technical requirements.

What should you do on the domain controllers, and what should you create on Azure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure virtual machine named VM1 that runs Windows Server.

When you attempt to install the Azure Performance Diagnostics extension on VM I, the installation fails.

You need to identify the cause of the installation failure.

What are two possible ways to achieve the goal? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

Your on-premises network is connected to Azure.

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server.

You need to identify the latency between the on-premises network and VM1.

Which Azure Network Watcher settings should you use?

Your network contains an Active Directory Domain Services (AD DS) domain.

You need to configure a ticket-granting ticket (TGT) lifetime for specific user and computer accounts. The solution must meet the following requirements:

• Minimize the impact on the other user and computer accounts in the domain.

• Minimize administrative effort.

What should you configure?

You have the servers shown in the following table.

You plan to migrate file shares from Server1 to Server2.

You have a server that runs Windows Server 2025 Standard and has the Hyper-V role installed. You need to upgrade the server to Windows Server 2025 Datacenter. The solution must minimize downtime. What should you run?

Your network contains an Active Directory Domain Services (AD DS > domain. The domain contains 20 Active Directory sites. All user management is performed from a central site.

You add users to a group.

You discover that group changes do NOT appear on a domain controller in a remote site.

You need to identify whether the group changes appear on other domain controllers.

What should you use?

You plan to deploy an Azure confidential virtual machine named VM1. You need to ensure that you can implement confidential disk encryption for VM1. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

You have a server named Served that runs Windows Server. You install a custom app named App1 that is accessed by using TCP port 52310. Users report that they cannot access App1. You confirm that App1 is running on Server1.

You need to ensure that the users can access App1. The solution must only provide access to App1 on Server1. What should you do in Windows Defender Firewall with Advanced Security?

You have a Site-to-Site VPN between an on-premises network and an Azure VPN gateway. BGP is disabled for the Site-to-Site VPN.

You have an Azure virtual network named Vnet1 that contains a subnet named Subnet1. Subnet1 contains a virtual machine named Server1.

You can connect to Server1 from the on-premises network.

You extend the address space of Vnet1. You add a subnet named Subnet2 to Vnet1. Subnet2 uses the extended address space. You deploy an Azure virtual machine named Server2 to Subnet2.

You cannot connect to Server2 from the on-premises network. Server1 can connect to Server2.

You need to ensure that you can connect to Subnet2 from the on-premises network.

What should you do?

Your network contains an Active Directory Domain Services (AD DS) forest. The forest functional level is Windows Server 2012 R2. The forest contains the domains shown in the following table.

You create a user named Admin1.

You need to ensure that Admin1 can add a new domain controller that runs Windows Server 2022 to the east.contoso.com domain. The solution must follow the principle of least privilege.

To which groups should you add Admin1?

You have a server named Server1 that runs Windows Server.

On Server1, you create a Data Collector Set named CollectorSet1 based on the Basic template.

You need to configure CollectorSet1 to meet the following requirements:

Older performance counter logs must be overwritten by new ones.

Performance counter logging must stop if there is less than 500 MB of free disk space.

What should you configure for each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. A network interface named NI1 is assigned to VM1.

The Ethernet adapter on VM1 is disabled.

You need to use the Azure portal to enable the adapter.

What should you use from the portal?

You have a Hyper-V failover cluster named Cluster1 that uses a cloud witness. Cluster1 hosts a virtual machine named VM1 that runs Windows Server.

You need to fail over VM1 automatically to a different node when a service named Service1 on VM1 fails.

What should you do on Cluster1 and VM1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have two Azure Virtual machines that run Windows Server.

You plan to create a failover cluster that will host the virtual machines.

You need to configure an Azure Storage account that will be used by the cluster as a cloud witness. The solution must maximize resiliency.

Which type of redundancy should you configure for the storage account?

You have a Hyper-V host named Server1 that runs Windows Server 2019. Server1 hosts a virtual machine named VM1 that has the following configurations:

• Static IP address: 192.168.10.15

• Configuration version: 8.0

• Virtual network: VNet1

• Generation: 1

You deploy a Hyper-V host named Server2 that runs Windows Server 2025. You plan to export VM1 from Served and import VM1 to Server2 by using Hyper-V Manager. Which VM1 configurations will be preserved when VM1 is imported to Server2?

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server 2025. All domain controllers run Windows Server 2019. The domain contains a user named User1.

You need to ensure that User1 can promote Server1 to a domain controller. The solution must follow the principle of least privilege.

Which groups should User1 be a member of?

You have an Azure virtual machine named VM1.

You install an application on VM1, and then restart the virtual machine.

After the restart, you get the following error message: “Boot failure. Reboot and Select proper Boot Device or Insert Boot Media in selected Boot Device.”

You need to mount the operating system disk offline from VM1 to a temporary virtual machine to troubleshoot the issue.

Which command should you run in Azure CLI?

You have an Azure subscription. The subscription contains a Microsoft Sentinel workspace named Workspace1 and 100 virtual machines that run Windows Server.

You configure Workspace1 to collect logs from the virtual machines.

You need to query the collected logs for failed logon events.

Which table should you query?

You have an on-premises server named Server1 that runs Windows Server. Server1 contains multiple file shares and has an IP address of 192.168.10.12.

You have an Azure subscription.

You need to migrate the Server1 file shares to an Azure virtual machine by using Storage Migration Service. The solution must ensure that on-premises users can access the migrated file shares by using the 192.168.10.12 IP address.

What should you include in the solution?

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.

Server3 contains a share named Share1.

On Server1, DHCP has the following configurations:

Conflict detection attempts: 3

An IPv4 scope named Scope1 that has the following settings:

1. Address Pool: 172.16.10.100 - 172.16.10.130

2. Address Leases:

- 172.16.10.100 computer1.contoso.com

- 172.16.10.101 computer2.contoso.com

Reservations: 172.16.10.101 computer2.contoso.com

Policies: Policy1

You perform the following actions:

On Server1, you run

Export-DhcpServer -File \\Server3\Share1\File1.xml .

On Server2, you run

Import-DhcpServer -File \\Server3\Share1\File1.xml

-BackupPath \\Server3\Share1 .

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

You are remediating the firewall security risks to meet the security requirements.

What should you configure to reduce the risks?

You are planning the deployment of Microsoft Sentinel.

Which type of Microsoft Sentinel data connector should you use to meet the security requirements?

You are planning the migration of Archive1 to support the on-premises migration plan.

What is the minimum number of IP addresses required for the node and cluster roles on Cluster3?

You are planning the data share migration to support the on-premises migration plan.

What should you use to perform the migration?

You are planning the implementation of Cluster2 to support the on-premises migration plan.

You need to ensure that the disks on Cluster2 meet the security requirements.

In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

You are planning the DHCP1 migration to support the DHCP migration plan.

Which two PowerShell cmdlets should you run on DHCP1, and which two PowerShell cmdlets should you run on DHCP2? To answer, drag the appropriate cmdlets to the correct servers. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

You are planning the migration of APP3 and APP4 to support the Azure migration plan.

What should you do on Cluster1 and in Azure before you perform the migration? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You are planning the www.fabrikam.com website migration to support the Azure migration plan.

How should you configure WebApp1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You are planning the europe.fabrikam.com migration to support the on-premises migration plan-Where should you install the Password Export Server (PES) service, where should you generate the encryption key? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an on-premises server named Server1 that runs Windows Server.

You have an Azure subscription that uses Microsoft Defender for Cloud.

You need to onboard Server1 to Defender for Cloud.

Which actions should you perform in sequence? To answer, drag the appropriate actions to the correct order. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

You have an on-premises Hyper- V deployment that hosts multiple virtual machines. You have an Azure subscription that contains an Azure Migrate project named Project1. You plan to migrate the virtual machines to Azure by using Project1.

You need to discover all the Hyper-V hosts and virtual machines running in your environment. The solution must minimize administrative effort. What should you do first?

Your network contains an Active Directory domain. The domain contains a domain controller named DC1 and a server named Server1 that runs Windows Server.

You need to enable event log subscriptions to forward events from DC1 to Server1.

Which command should you run to enable the Windows Event Collector service, and on which servers should you run the command? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an on-premises IIS web server that hosts a web app named Appl. You plan to migrate App1 to a container and run the container in Azure. You need to perform the following tasks:

• Export App1 to a ZIP file.

• Create a container image based on Appl.

The solution must minimize administrative effort.

You have an on-premises server named Server1 that runs Windows Server and has the Hyper-V server role installed.

You have an Azure subscription that contains a virtual machine named VM1. VM1 runs Windows Server.

You plan to use Azure Backup.

Which type of vault should you configure for each resource? To answer, drag the appropriate vault types to the correct resources. Each vault type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

You have 500 on-premises servers that run Windows Server.

You have an Azure subscription that contains a Log Analytics workspace named Workspace1.

You plan to use VM insights in Azure Monitor to monitor the on-premises servers.

You need to onboard the servers to Azure Arc by using the template script. The solution must meet the following requirements:

• Follow the principle of least privilege.

• Minimize administrative effort.

What should you do first?