Attested AZ-801 Dumps PDF Resource [2025]
Latest AZ-801 Actual Free Exam Questions Updated 258 Questions
Microsoft AZ-801 certification exam focuses on advanced topics related to Windows Server Hybrid configuration. This includes topics such as implementing Azure solutions, configuring hybrid identity, and configuring hybrid networking. As a result, this certification is ideal for IT professionals who are already familiar with basic Windows Server concepts and are ready to take on more advanced topics.
NEW QUESTION # 54
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a failover cluster named Cluster1.
You need to configure Cluster-Aware Updating (CAU) on the cluster by using Windows Admin Center (WAC).
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
NEW QUESTION # 55
You have two servers named Server 1 and Server2 that run Windows Server. You perform the following actions:
* On Server1, you create an Application Control policy named Policy! that contains a rule to allow all the executables in a folder named D:\Folder1.
* You add a rule to Policy1 to trust a folder named \\Server2\FolderZ
* You deploy Policy1.
You need to verify that Policy1 is applied to Server1. Which Event Viewer log should you review?
- A. Applications and Services Logs\Microsoft\Windows\Codelntegrity\Operational
- B. Applications and Services Logs\Microsoft\Windows\AppLocker\MSI and Script
- C. Applications and Services Logs\Miaosoft\Windows\DeviceManagement-Enterprise-Diagnostic- Provider\Admin
Answer: A
NEW QUESTION # 56
You have a failover cluster named Cluster1 that contains the nodes shown in the following table.
A File Server for general use cluster role named HAFS is configured as shown in the General exhibit (Click the General tab.)
Answer:
Explanation:
Explanation:
NEW QUESTION # 57
Your on-premises network has a 200-Mbps connection to Azure and contains a server named Server1 that stores 70 TB of data files.
You have an Azure Storage account named storage 1.
You plan to migrate the data files from Server1 to a blob storage container in storage!. Testing shows that copying the data files by using azcopy will take approximately 35 days.
You need to minimize how long it will take to migrate the data to Azure.
What should you use?
- A. Azure Storage Explorer
- B. Azure Data Box
- C. Storage Migration Service
- D. Azure File Sync
Answer: B
NEW QUESTION # 58
You have an Azure Active Directory Domain Services (Azure AD DS) domain named aadds.contoso.com.
You have an Azure virtual network named Vnet1. Vnet1 contains two virtual machines named VM1 and VM2 that run Windows Server. VMI and VM2 are joined to aadds.contoso.com.
You create a new Azure virtual network named Vnet2. You add a new server named VM3 to Vnet2.
When you attempt to join VM3 to aadds.contoso.com, you get an error message that the domain cannot be found.
You need to ensure that you can join VM3 toaadds.contoso.com.
Answer:
Explanation:
NEW QUESTION # 59
You have a Windows Server failover cluster named Cluster1 that has a cloud witness and the nodes shown in the following table.
Cluster1 has the roles shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 60
You have two onpremises Hyper-V hosts named Served and Server2, Server1 contains two virtual machines named VM1 and VM2. Server2 contains three virtual machines named VM21. VM22, and VM23.
You have an Azure subscription.
You plan to use Azure Site Recovery to replicate all the virtual machines to Azure.
You need to deploy the Microsoft Azure Site Recovery Provider to the on-premises infrastructure.
What is the minimum number of providers you should install?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
NEW QUESTION # 61
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the organizational units (OUs) shown in the following table.
In the domain, you create the Group Policy Objects (GPOs) shown in the following table.
You need to implement IPsec authentication to ensure that only authenticated computer accounts can connect to the members in the domain. The solution must minimize administrative effort.
Which GPOs should you apply to the Domain Controllers OU and the Domain Servers OU? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Table Description automatically generated
Reference:
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/configure-authentication-
NEW QUESTION # 62
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that runs Windows Server.
You need to ensure that only specific applications can modify the data in protected folders on Server1.
Solution: From App & browser control, you configure the Exploit protection settings.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/customize-controlled-folders?
view=o365-worldwide
NEW QUESTION # 63
You need to meet technical requirements for Share1.
What should you use?
- A. File Server Resource Manager (FSRM)
- B. Storage Replica
- C. Storage Migration Service
- D. Server Manager
Answer: C
Explanation:
Reference:
https://docs.microsoft.com/en-us/windows-server/storage/storage-migration-service/overview
Topic 1, Contoso, Ltd
Overview
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Overview
Contoso, Ltd. is a manufacturing company that has a main office in Seattle and branch offices in Los Angeles and Montreal.
Existing Environment
Active Directory Environment
Contoso has an on-premises Active Directory Domain Services (AD DS) domain named contoso.com that syncs with an Azure Active Directory (Azure AD) tenant. The AD DS domain contains the domain controllers shown in the following table.
Contoso recently purchased an Azure subscription.
The functional level of the forest is Windows Server 2012 R2. The functional level of the domain is Windows Server 2012. The forest has the Active Directory Recycle Bin enabled.
The contoso.com domain contains the users shown in the following table.
The contoso.com domain has the Group Policy Objects (GPOs) shown in the following table.
The contoso.com domain has the Password Settings Objects (PSOs) shown in the following table.
Server Infrastructure
The contoso.com domain contains servers that run Windows Server 2022 as shown in the following table.
By using Windows Firewall with Advanced Security, the servers have isolation connection security rules configured as shown in the following table.
Server4 has no connection security rules.
Server4 Configurations
Server4 has the effective Group Policy settings for user rights as shown in the following table.
Server4 has the disk configurations shown in the following exhibit.
Virtualization Infrastructure
The contoso.com domain has the Hyper-V failover clusters shown in the following table.
Technical Requirements
Contoso identifies the following technical requirements:
Promote a new server named DC4 that runs to Windows Server 2022 to a domain controller.
Replicate the virtual machines from Cluster2 to an Azure Recovery Services vault.
Centrally manage performance alerts in Azure for all the domain controllers.
Ensure that User1 can recover objects from the Active Directory Recycle Bin.
Migrate Share1 to Server2, including all the share and folder permissions.
Back up Server4 and all data to an Azure Recovery Services vault.
Use Hyper-V Replica to protect the virtual machines in Cluster3.
Implement BitLocker Drive Encryption (BitLocker) on Server4.
Whenever possible, use the principle of least privilege.
NEW QUESTION # 64
You manage 200 physical servers that run Windows Server.
You plan to migrate the servers to Azure.
You need to prepare for discovery of the servers by using Azure Migrate.
Which three actions should you perform in sequence on a physical server? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Graphical user interface, text, application, email Description automatically generated
Reference:
https://docs.microsoft.com/en-us/azure/migrate/tutorial-discover-physical
NEW QUESTION # 65
Your network contains an Active Directory Domain Services (AD DS) forest. The forest functional level is Windows Server 2012 R2. The forest contains the domains shown in the following table.
You create a user named Admin1.
You need to ensure that Admin1 can add a new domain controller that runs Windows Server 2022 to the east.
contoso.com domain. The solution must follow the principle of least privilege.
To which groups should you add Admin1?
- A. CONTOSO\Enterprise Admins and CONTOSO/Schema Admins
- B. CONTOSO\Enterprise Admins only
- C. CONTOSO/Schema Admins and EAST\Domain Admins
- D. EAST\Domain Admins only
Answer: D
NEW QUESTION # 66
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The functional level of the forest is Windows Server 2012 R2. All domain controllers run Windows Server 2012 R2.
Sysvol replicates by using the File Replication Service (FRS).
You plan to replace the existing domain controllers with new domain controllers that will run Windows Server
2022.
You need to ensure that you can add the first domain controller that runs Windows Server 2022.
Solution: You upgrade the PDC emulator.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
NEW QUESTION # 67
You need to create a Hyper-V hyper-converged cluster that stores virtual machines by using Storage Spaces Owed Which three actions should you perform in sequence? To answer, move the appropriate anions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Create a failover cluster.
2 - Enable Srorage Spaces Direct.
3 - Create a volume.
NEW QUESTION # 68
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains domain controllers that run Windows Server 2019 and are configured as shown in the following table.
You plan to run the adprep /domainprep command.
Which domain controller should be available for the command to complete?
- A. DC2
- B. DC3
- C. DC1
- D. DC4
- E. DC5
Answer: C
NEW QUESTION # 69
......
AZ-801 Certification Overview Latest AZ-801 PDF Dumps: https://www.exam-killer.com/AZ-801-valid-questions.html
Free AZ-801 Exam Braindumps certification guide Q&A: https://drive.google.com/open?id=1dsplWQ_HbpDUervnZRaBRAWk5bidYCWd
