Latest AZ-801 Practice Test Questions Verified Answers As Experienced in the Actual Test!
Pass Microsoft AZ-801 Exam in First Attempt Easily
Microsoft AZ-801 exam is designed to validate the knowledge and skills required to configure and manage advanced hybrid services in a Windows Server environment. AZ-801 exam is targeted towards IT professionals with experience in managing on-premises Windows Server and hybrid environments. Candidates who pass the AZ-801 exam will earn the Microsoft Certified: Azure Solutions Architect Expert certification.
The AZ-801 exam covers a broad range of topics related to configuring and managing hybrid environments, including implementing and managing Azure AD, integrating on-premises and Azure resources, configuring Azure virtual networking, managing hybrid identities, and implementing advanced security solutions. AZ-801 exam also covers skills related to monitoring and optimizing hybrid environments, including managing backup and recovery, monitoring performance, and troubleshooting issues. Successful completion of the AZ-801 exam demonstrates that candidates have the skills and knowledge required to design, implement, and manage complex hybrid environments that leverage the benefits of both on-premises and cloud technologies.
NEW QUESTION # 89
You need to configure BitLocker on Server4.
On which volumes can you turn on BitLocker, and on which volumes can you turn on auto-unlock? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/windows-server/storage/refs/refs-overview
https://docs.microsoft.com/en-us/powershell/module/bitlocker/enable-bitlockerautounlock?view=windowsserver2022-ps
NEW QUESTION # 90
You have an on-premises server named Server1 that runs Windows Server and contains the shares shown in the following table.
You have an Azure subscription named Sub1 that contains an Azure Storage Mover resource named Mover1 and the storage accounts shown in the following table.
The storage accounts contain the resources shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 91
You have an on-premises IIS web server that hosts a web app named Appl. You plan to migrate App1 to a container and run the container in Azure. You need to perform the following tasks:
* Export App1 to a ZIP file.
* Create a container image based on Appl.
The solution must minimize administrative effort.
Answer:
Explanation:
Explanation
Azure Migrate
Web deploy
NEW QUESTION # 92
Your network contains an Active Directory Domain Services (AD DS) forest that has a Windows Server 2008 R2 forest functional level. The forest contains the domains shown in the following table.
You need to perform an in-place upgrade of the domain controllers in east.contoso.com to Windows Server 2025. The solution must minimize administrative effort.
What should you do first?
- A. Raise the domain functional level of contoso.com to Windows Server 2016.
- B. Raise the domain functional level of east.contoso.com to Windows Server 2025.
- C. Extend the schema.
- D. Raise the forest functional level to Windows Server 2025.
Answer: A
Explanation:
The first step is to raise the forest functional level to Windows Server 2016, and then raise the domain functional level of the east.contoso.com domain to Windows Server 2016. Windows Server 2016 is the most recent functional level, and it supports domain controllers running Windows Server 2025. You must have all domain controllers upgraded to the new operating system before you can raise the functional level.
Upgrade steps
Before you begin
*-> 1. Raise the forest functional level to Windows Server 2016. This can be done using the Active Directory Domains and Trusts console.
2. Raise the domain functional level for east.contoso.com to Windows Server 2025.
Note:
Windows Server functional level interoperability
The following interoperability matrix summarizes which Windows Server versions you can run as domain controllers for each currently supported AD DS forest and domain functional level.
Reference:
https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/active-directory-functional-levels
NEW QUESTION # 93
What is the effective minimum password length for User1 and Admin1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Table Description automatically generated
Box 1: 9
When multiple PSOs apply to a user, the PSO with the highest precedence (lowest precedence number) applies which in this case is PSO1.
Box 2: 8
There are no PSOs applied to Admin1 so the password policy from the Default Domain GPO applies.
The Minimum password length setting in GPO1 would only apply to local user accounts on computers in OU1. It does not apply to domain user accounts.
NEW QUESTION # 94
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a failover cluster named Cluster1.
You need to configure Cluster-Aware Updating (CAU) on the cluster by using Windows Admin Center (WAC).
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
NEW QUESTION # 95
Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains a user named User1.
You deploy a read-only domain controller (RODC) named RODC1.
You need to ensure that User1 is a local administrator on RODC1. The solution must use the principle of least privilege.
What should you use?
- A. Local Users and Groups
- B. dsmgmt.exe
- C. Computer Management
- D. net user
Answer: C
Explanation:
Reference:
https://support.intermedia.com/app/articles/detail/a_id/10375/~/how-do-i-create-a-local-administrator%3F
https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/net-user
NEW QUESTION # 96
Your network contains an Active Directory Domain Services (AD DS) domain that has the Active Directory Recycle Bin enabled. All domain controllers are backed up daily.
You accidentally remove all the users from a domain group.
You need to get a list of the users that were previously in the group.
Which four actions should you perform in sequence from a domain controller? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
Reference:
http://sysadmindoc.blogspot.com/2018/10/moun t-active-directory-database-from .html
NEW QUESTION # 97
Hotspot Question
Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains 10 servers that run Windows Server.
You have an Azure subscription. The subscription contains 10 virtual machines that run Windows Server.
You need to install the Azure Monitor Agent on the Azure virtual machines and the on-premises servers.
What should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 98
Drag and Drop Question
You need to create a Hyper-V hyper-converged cluster that stores virtual machines by using Storage Spaces Owed Which three actions should you perform in sequence? To answer, move the appropriate anions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
https://docs.microsoft.com/en-us/system-center/vmm/s2d-hyper-converged?view=sc-vmm-2019
NEW QUESTION # 99
You have an Azure subscription that contains a virtual machine named Server1.
Server1 fails to start and displays the following message: "Getting Windows ready. Don't turn off your computer." You need to submit an Azure support ticket and attach the memory dump from Server1.
Which file should you attach from Server1?
- A. C:\Memory.dmp
- B. D:\Pagefile.sys
- C. C:\Windows\System32\Config\SYSTEM
- D. C:\Windows\Memory.dmp
Answer: D
Explanation:
You need to include the MEMORY.DMP file from the virtual machine. This file is located in the Windows root directory (e.g., C:\Windows\MEMORY.DMP) of the affected OS disk To access and collect this file when the virtual machine fails to start:
1. Take a Snapshot: Create a snapshot of the affected VM's OS disk for backup purposes.
2. Attach the Disk: Detach the OS disk from the broken VM and attach it to a functioning, temporary "recovery" VM as a data disk.
3. Locate the File: Remote desktop (RDP) into the recovery VM and navigate to the Windows folder of the attached disk (e.g., F:\Windows).
4. Submit Ticket: Compress the MEMORY.DMP file and attach it to your Azure Support ticket for analysis.
Reference:
https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/collect-os-memory-dump-file
NEW QUESTION # 100
Your network contains an Active Directory Domain Services (AD DS) forest. The forest functional level is Windows Server 2012 R2. The forest contains the domains shown in the following table.
You create a user named Admin1.
You need to ensure that Admin1 can add a new domain controller that runs Windows Server 2022 to the east.
contoso.com domain. The solution must follow the principle of least privilege.
To which groups should you add Admin1?
- A. EAST\Domain Admins only
- B. CONTOSO\Enterprise Admins only
- C. CONTOSO/Schema Admins and EAST\Domain Admins
- D. CONTOSO\Enterprise Admins and CONTOSO/Schema Admins
Answer: A
NEW QUESTION # 101
You need to meet the technical requirements for Cluster2.
Which four actions should you perform in sequence before you can enable replication? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
Text Description automatically generated
Reference:
https://docs.microsoft.com/en-us/azure/site-recovery/hyper-v-azure-tutorial
NEW QUESTION # 102
Your network contains an Active Directory Domain Services (AD DS) domain that has the Active Directory Recycle Bin enabled. The domain contains two domain controllers named DC1 and DC2. The system state of the domain controllers is backed up daily at 23:00 by using Windows Server Backup.
You have an organizational unit (OU) named ParisUsers that contains 1,000 users.
At 08:00, DC1 shuts down for hardware maintenance. The maintenance completes, but DC1 remains shut down.
At 09:00, an administrative error causes the manager attribute of each user in ParisUsers to be deleted.
You need to recover the user account details as quickly as possible. The solution must minimize data loss.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
NEW QUESTION # 103
You have an Azure virtual machine named VM1 that runs Windows Server. VM1 has boot diagnostics configured to use a managed storage account.
You are troubleshooting connectivity issue on VM1.
You need to run a PowerShell cmdlet on VM1 by using the Azure Serial Console.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
Graphical user interface, text, application, email Description automatically generated
Reference:
https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/serial-console-overview
https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/serial-console-windows
NEW QUESTION # 104
Hotspot Question
Your on-premises network contains an Active Directory Domain Services (AD DS) domain.
The domain contains four servers named Server1, Server 2, Server3, and Server4 that run Windows Server.
You configure the connection security rules shown in the following table.
Server4 does NOT have any connection security rules applied.
With which servers can Server1 and Server2 establish communication after the connection security rules are applied? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: Server2 only
* From Server1 to Server2 - Yes
Server1 requests authentication for the outbound connection to Server2.
Server2 requests authentication for the inbound connection from Server1.
* From Server1 to Server3 - No
Server1 requests authentication for the outbound connection to Server3.
Server3 require authentication for the inbound connection from Server1.
Box 2: No other server
* From Server2 to Server1 -No
Server2 requires authentication for the outbound connection to Server1.
Server1 requests authentication for the inbound connection from Server2.
* From Server2 to Server3 - No
Server2 requires authentication for the outbound connection to Server1.
Server3 requires authentication for the inbound connection from Server2.
* From Server2 to Server4 - No
Reference:
https://www.sciencedirect.com/topics/computer-science/connection-security-rule
NEW QUESTION # 105
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the organizational units (OUs) shown in the following table.
In the domain, you create the Group Policy Objects (GPOs) shown in the following table.
You need to implement IPsec authentication to ensure that only authenticated computer accounts can connect to the members in the domain. The solution must minimize administrative effort.
Which GPOs should you apply to the Domain Controllers OU and the Domain Servers OU? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Table Description automatically generated
Reference:
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/configure-authentication-
NEW QUESTION # 106
You have a Windows Server 2022 failover cluster named Cluster1 that contains the Cluster Shared Volumes (CSV) shown in the following table.
All the nodes in Cluster1 have BitLocker Drive Encryption (BitLocker) installed.
You need to use PowerShell to enable BitLocker on Volume1.
In which order should you run the commands? To answer, drag the appropriate commands to the correct order. You may need to drag the split bar between panes or scroll to view content.
NOTE Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 107
Hotspot Question
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a domain controller named DC1, an organizational unit (OU) named OU1, and a user named User1. The domain has Active Directory Recycle Bin disabled.
User1 is deleted from OU1 accidentally.
You need to restore User1 from a backup of DC1.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: ntdsutil
Authoritative restorations of specific objects take longer but are less destructive than authoritative restorations of a whole subtree. Auth restore the lowest common parent container that holds the deleted objects.
Ntdsutil uses the following syntax:
ntdsutil "authoritative restore" "restore object <object DN path>" q q
Box 2: cn=JUser1,ou=OU1,dc=contoso,dc=com"
For example, to authoritatively restore the deleted user John Doe in the Mayberry OU of the Contoso.com domain, use the following command:
ntdsutil "authoritative restore" "restore object cn=JohnDoe,ou=Mayberry,dc=contoso,dc=com" q q Reference:
https://learn.microsoft.com/en-us/troubleshoot/windows-server/active-directory/retore-deleted-accounts-and-groups-in-ad
NEW QUESTION # 108
You have a Hyper-V failover cluster named Cluster1 that uses a cloud witness. Cluster1 hosts a virtual machine named VM1 that runs Windows Server.
You need to fail over VM1 automatically to a different node when a service named Service1 on VM1 fails.
What should you do on Cluster1 and VM1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Text, table Description automatically generated
NEW QUESTION # 109
You have an on-premises server that runs Windows Server and contains a folder named Folder1. Folder1 contains 50 GB of files.
You have an Azure subscription that contains an Azure Files share named share1.
You need to migrate the data in Folder1 to share1.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 110
You have a Hyper-V failover cluster named Cluster1 that uses a cloud witness. Cluster1 hosts a virtual machine named VM1 that runs Windows Server.
You need to fail over VM1 automatically to a different node when a service named Service1 on VM1 fails.
What should you do on Cluster1 and VM1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Text, table Description automatically generated
NEW QUESTION # 111
Your network contains an Active Directory Domain Services (AD DS) forest. The forest functional level is Windows Server 2012 R2. The forest contains the domains shown in the following table.
You create a user named Admin1.
You need to ensure that Admin1 can add a new domain controller that runs Windows Server 2022 to the east.contoso.com domain. The solution must follow the principle of least privilege.
To which groups should you add Admin1?
- A. CONTOSO\Enterprise Admins only
- B. EAST\Domain Admins only
- C. CONTOSO/Schema Admins and EAST\Domain Admins
- D. CONTOSO\Enterprise Admins and CONTOSO/Schema Admins
Answer: C
NEW QUESTION # 112
......
We offers you the latest free online AZ-801 dumps to practice: https://www.dumpsvalid.com/AZ-801-still-valid-exam.html
The Most Efficient AZ-801 Pdf Dumps For Assured Success : https://drive.google.com/open?id=1jNxpVtl7Nvb8ayrrAM32TfxBR0ytfe45