AZ-801 | Up To Date Configuring Windows Server Hybrid Advanced Services AZ-801 Exam Dumps

NEW QUESTION 1
You have three Azure virtual machines named VM1, VM2, and VM3 that host a multitier application.
You plan to implement Azure Site Recovery.
You need to ensure that VM1, VM2, and VM3 fail over as a group.
What should you configure?

• A. an availability zone
• B. a recovery plan
• C. an availability set

Answer: B

Explanation:
Reference: https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-overview

NEW QUESTION 2
DRAG DROP
Your network contains an Active Directory Domain Services (AD DS) domain that has the Active Directory Recycle Bin enabled. The domain contains two domain controllers named DC1 and DC2. The system state of the domain controllers is backed up daily at 23:00 by using Windows Server Backup.
You have an organizational unit (OU) named ParisUsers that contains 1,000 users.
At 08:00, DC1 shuts down for hardware maintenance. The maintenance completes, but DC1 remains shut down.
At 09:00, an administrative error causes the manager attribute of each user in ParisUsers to be deleted.
You need to recover the user account details as quickly as possible. The solution must minimize data loss.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 3
DRAG DROP
You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant.
The AD DS domain contains a domain controller named DC1. DC1 does NOT have internet access.
You need to configure password security for on-premises users. The solution must meet the following requirements:
Prevent the users from using known weak passwords.
Prevent the users from using the company name in passwords.
What should you do? To answer, drag the appropriate configurations to the correct targets. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 4
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that runs Windows Server.
You need to ensure that only specific applications can modify the data in protected folders on Server1.
Solution: From App & browser control, you configure the Exploit protection settings.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation:
Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/customize-controlledfolders?view=o365-worldwide

NEW QUESTION 5
DRAG DROP
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a print server named Server1. All printers are deployed to users by using a Group Policy Object (GPO) named GPO1.
You deploy a new server named Server2.
You need to decommission Server1. The solution must meet the following requirements:
Migrate the shared printers to Server2 by using the Printer Migration Wizard.
Ensure that the users use the printers on Server2. Minimize downtime for the users.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 6
HOTSPOT
You have a server that runs Windows Server and has the Web Server (IIS) server role installed. Server1 hosts a single website that has the following configurations:
Is accessible by using a URL of https://www.contoso.com:8443 and has an SSL certificate that was issued by a third-partycertification authority (CA) in the Microsoft Trusted Root Program Uses anonymous authentication Was developed byusing PHPYou plan to use APP Service Migration Assistant to migrate the website to Azure App Service.
You need to migrate the website. The solution must minimize the number of changes made to the existing website.
What should you do manually to ensure that the website migration is successful? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 7
You need to meet the technical requirements for User1.
To which group in contoso.com should you add User1?

• A. Domain Admins
• B. Account Operators
• C. Schema Admins
• D. Backup Operators

Answer: A

NEW QUESTION 8
You have a Microsoft Sentinel deployment and 100 Azure Arc-enabled on-premises servers. All the Azure Arc-enabled resources are in the same resource group.
You need to onboard the servers to Microsoft Sentinel. The solution must minimize administrative effort.
What should you use to onboard the servers to Microsoft Sentinel?

• A. Azure Automation
• B. Azure Policy
• C. Azure virtual machine extensions
• D. Microsoft Defender for Cloud

Answer: B

Explanation:
Reference: https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/manage/hybrid/server/best-practices/arcpolicies-mma

NEW QUESTION 9
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that
might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that runs Windows Server.
You need to ensure that only specific applications can modify the data in protected folders on Server1.
Solution: From Virus & threat protection, you configure Controlled folder access.
Does this meet the goal?

• A. Yes
• B. No

Answer: A

Explanation:
Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/customize-controlledfolders?view=o365-worldwide

NEW QUESTION 10
DRAG DROP
You manage 200 physical servers that run Windows Server.
You plan to migrate the servers to Azure.
You need to prepare for discovery of the servers by using Azure Migrate.
Which three actions should you perform in sequence on a physical server? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 11
You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant by using password hash synchronization.
You have a Microsoft 365 subscription.
All devices are hybrid Azure AD-joined.
Users report that they must enter their password manually when accessing Microsoft 365 applications.
You need to reduce the number of times the users are prompted for their password when they access Microsoft 365 and Azure services.
What should you do?

• A. In Azure AD, configure a Conditional Access policy for the Microsoft Office 365 applications.
• B. In the DNS zone of the AD DS domain, create an autodiscover record.
• C. From Azure AD Connect, enable single sign-on (SSO).
• D. From Azure AD Connect, configure pass-through authentication.

Answer: C

Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso-quick-start

NEW QUESTION 12
HOTSPOT
You have a failover cluster named Cluster1 that contains three nodes.
You plan to add two file server cluster roles named File1 and File2 to Cluster1. File1 will use the File Server for general use role. File2 will use the Scale-Out File Server for application data role.
What is the maximum number of nodes for File1 and File2 that can concurrently serve client connections? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 13
You have an Azure subscription that has Microsoft Defender for Cloud enabled.
You have 50 Azure virtual machines that run Windows Server.
You need to ensure that any security exploits detected on the virtual machines are forwarded to Defender for Cloud.
Which extension should you enable on the virtual machines?

• A. Vulnerability assessment for machines
• B. Microsoft Dependency agent
• C. Log Analytics agent for Azure VMs
• D. Guest Configuration agent

Answer: A

Explanation:
Reference: https://docs.microsoft.com/en-us/azure/defender-for-cloud/deploy-vulnerability-assessment-vm

NEW QUESTION 14
You have an on-premises server that runs Windows Server and has the Web Server (IIS) server role installed. The server hosts a web app that connects to an on-premises Microsoft SQL Server database.
You plan to migrate the web app to an Azure App Services web app. The database will remain on-premises.
You need to ensure that the migrated web app can access the database.
What should you configure in Azure?

• A. an Azure SQL managed instance
• B. an on-premises data gateway
• C. Azure Extended Network
• D. a Hybrid Connection

Answer: D

Explanation:
Reference: https://docs.microsoft.com/en-us/azure/app-service/app-service-hybrid-connections

NEW QUESTION 15
HOTSPOT
You need to implement alerts for the domain controllers. The solution must meet the technical requirements.
What should you do on the domain controllers, and what should you create on Azure? To answer, select the appropriate options in the answer
area.
NOTE: Each correct selection is worth one point.
Hot Area:

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 16
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The functional level of the forest is Windows Server 2012 R2. All domain controllers run Windows Server 2012 R2.
Sysvol replicates by using the File Replication Service (FRS).
You plan to replace the existing domain controllers with new domain controllers that will run Windows Server 2022.
You need to ensure that you can add the first domain controller that runs Windows Server 2022.
Solution: You migrate sysvol from FRS to Distributed File System (DFS) Replication.
Does this meet the goal?

• A. Yes
• B. No

Answer: A

Explanation:
Reference:
https://www.rebeladmin.com/2021/09/step-by-step-guide-active-directory-migration-from-windows-server-2008-r2-towindows-server-2022/

NEW QUESTION 17
HOTSPOT
Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains the domains shown in the following table.

You are implementing Microsoft Defender for Identity sensors.
You need to install the sensors on the minimum number of domain controllers. The solution must ensure that Defender for Identity will detect
all the security risks in both the domains.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 18
......