Practice Free AZ-801 Configuring Windows Server Hybrid Advanced Services Exam Questions Answers With Explanation

You need to meet the technical requirements for Cluster3.

What should you include in the so lution?

Your network contains an on-premises Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.

For each server. Windows Defender Firewall is configured to allow only communication between servers on the same segment. Server! has the following connection security rule:

• Name: Rule1

• Rule type: Isolation

• Requirement: Require authentication for inbound connections and request authentication for outbound connections

• Authentication method: Computer (Kerberos V5)

• Profile: Domain. Private. Public

Server2 does not have any connection security rules.

Server3 has the following connection security rule:

• Name: Rute3

• Rule type: Server-to-server

• Endpoints:

o Computers in Endpoint 1:192.168.50/24

o Computers in Endpoint 2: 192.168.1.0/24

• Requirement Request authentication (or inbound and outbound connections

• Authentication method: Computer (Kerberos V5)

• Profile: Domain. Private. Public

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

You are evaluating the technical requirements tor Cluster2.

What is the minimum number of Azure Site Recovery Providers that you should install?

With which servers can Server1 and Server3 communicate? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You need to meet technical requirements for Share1.

What should you use?

You need to back up Server 4 to meet the technical requirements.

What should you do first?

What is the effective minimum password length for User1 and Admin1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You need to implement alerts for the domain controllers. The solution must meet the technical requirements.

What should you do on the domain controllers, and what should you create on Azure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an on-premises server named Server1 that runs Windows Server and contains the shares shown in the following table.

You have an Azure subscription named Sub1 that contains an Azure Storage Mover resource named Mover1 and the storage accounts shown in the following table.

The storage accounts contain the resources shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains a user named User1 that has following attributes:

• whenCreated: 8/16/2023 8:04:55 AM

• distinguishedName: CN=Userl,DC=contoso,DC=com

• objectGUID: ef91eeG0-d371-4ee4-9c35-7da64c432a67

• objectSID: S-l-5-21-2106002304-3506747707-1284373444-1610

You need to use the Active Directory Migration Tool (ADMT) to migrate User1 to an AD DS forest named fabrikam.com. Which attributes will change after you migrate User1 to fabrikam.com?

You have a single-domain Active Directory Domain Services (AD DS) forest named contoso.com that contains two domain controllers named DC1 and DC2. DC1 and DC2 run Windows Server.

You plan to perform an authoritative restore of SYSVOL on DC1.

You isolate DC1 and restore DC1 from a backup.

You need to ensure that SYSVOL on DC1 replicates to DC2.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server and uses Azure Disk Encryption.

You need to identify which Azure key vault stores the encryption keys for VM1. The solution must minimize administrative effort.

Which PowerShell cmdlet should you run?

Your company uses Storage Spaces Direct.

You need to view the available storage in a Storage Space Direct storage pool.

What should you use?

The servers run Windows Server and have the network configurations shown in the following table.

Server3 is configured as a NAT gateway. All the servers allow ICMP requests.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

NOTE: Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) domain that has the Active Directory Recycle Bin enabled. All domain controllers are backed up daily.

You accidentally remove all the users from a domain group.

You need to get a list of the users that were previously in the group.

Which four actions should you perform in sequence from a domain controller? To answer, move the approp riate actions from the list of actions to the answer area and arrange them in the correct order.

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant by using password hash synchronization.

You have a Microsoft 365 subscription.

All devices are hybrid Azure AD-joined.

Users report that they must enter their password manually when accessing Microsoft 365 applications.

You need to reduce the number of times the users are prompted for their password when they access Microsoft 365 and Azure services.

What should you do?

You have multiple servers that run Windows Server.

You plan to use System Insights to collect information about your environment and systems.

How many default System Insights capabilities can you use for capacity forecasting?

You have 20 on-premises servers, including a server named Server1, that run Windows Server. Server1 has Windows Admin Center deployed and is connected to the internet.

You have an Azure subscription.

You need to integrate Windows Admin Center with Azure so that you can use Azure services to manage and monitor the on-premises servers.

What should you do first?

Q A. Install Microsoft Entra Connect Sync on Server1.

Q B. From Server1. run the Connect-AzAceount cmdlet.

(•) C. Enable Azure Arc on each managed server.

Q D. From Server1, run the Set-AzWebApp cmdlet.

Your network contains an Active Directory Domain Services (AD DS) domain that contains the servers shown in the following table.

Server1 and Server2 are authorized as DHCP servers in the domain. You need to migrate the DHCP Server role from Server1 to Server2. Which five actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Your on-premises network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains the domains shown in the following table.

You create a user named User1 that has the following attributes:

You plan to move User1 to OU3 by using the Active Directory Migration Tool (ADMT). Which attributes will change if User1 moves to OU3?

Your network contains an Active Directory domain. The domain contains a domain controller named DC1 and a server named Server1 that runs Windows Server.

You need to enable event log subscriptions to forward events from DC1 to Server1.

Which command should you run to enable the Windows Event Collector service, and on which servers should you run the command? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Note: This question is part of a series of questions that present the same scenario. Each questio n in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a server named Server1 that runs Windows Server.

You need to ensure that only specific applications can modify the data in protected folders on Server1.

Solution: From Virus & threat protection, you configure Tamper Protection .

Does this meet the goal?

You have an on-premises server named Server1 and Microsoft Sentinel instance.

You plan to collect windows Defender Firewall events from Sever1 and analyze the event data by using Microsoft Sentinel.

What should you install on Server1, and which information should you provide during the instance? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have a server named Server1 that runs Windows Server. You install System Insights on Server 1.

You need to modify the schedule for storage consumption forecasting. What should you use?

You need to implement a security policy solution to authorize the applications. The solution must meet the security requirements.

Which service should you use to enforce the security policy, and what should you use to manage the policy settings? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

The Default Domain Policy Group Policy Object ( GPO) is shown in the GPO exhibit. (Click the GPO tab.)

The members of a group named Service Accounts are shown in the Group exhibit. (Click the Group tab.)

An organizational unit (OU) named ServiceAccounts is shown in the OU exhibit. (Click the OU tab.)

You create a Password Settings Object (PSO) as shown in the PSO exhibit. (Click the PSO tab.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

You are planning the migration of Archive1 to support the on-premises migration plan.

What is the minimum number of IP addresses required for the node and cluster roles on Cluster3?

You are planning the www.fabrikam.com website migration to support the Azure migration plan.

How should you configure WebApp1? To answer, select the appropriate opti ons in the answer area.

NOTE: Each correct selection is worth one point.

You are planning the DHCP1 migration to support the DHCP migration plan.

Which two PowerShell cmdlets should you run on DHCP1, and which two PowerShell cmdlets should you run on DHCP2? To answer, drag the appropriate cmdlets to the correct servers. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

You are planning the deployment of Microsoft Sentinel.

Which type of Microsoft Sentinel data connector should you use to meet the security requirements?

You are planning the data share migration to support the on-premises migration plan.

What should you use to perform the migration?

You are planning the migration of APP3 and APP4 to support the Azure migration plan.

What should you do on Cluster1 and in Azure before you perform the migration? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You are planning the europe.fabrikam.com migration to support the on-premises migration plan-Where should you install the Password Export Server (PES) service, where should you generate the encryption key? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You are remediating the firewall security risks to meet the security requirements.

What should you configure to reduce the risks?

You are planning the implementation of Cluster2 to support the on-premises migration plan.

You need to ensure that the disks on Cluster2 meet the security requirements.

In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.