You have an Azure virtual machine named VM1 that runs Windows Server.You need to encrypt the contents of the disks on VM1 by using Azure Disk Encryption.What is a prerequisite for implementing Azure Disk Encryption?

Customer Lockbox for Microsoft Azure

data-link layer encryption in Azure

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two servers named Server1 and Server2 that run Windows Server. You need to ensure that you can use the Computer Management console to manage Server2. The solution must use the principle of least privilege. Which two Windows Defender Firewall with Advanced Security rules should you enable on Server2?Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

the COM+ Network Access (DCOM-ln) rule

all the rules in the Remote Event Log Management group

the COM+ Network Access (DCOM-ln) rule

all the rules in the Remote Event Log Management group

the Windows Management Instrumentation (WMI-ln) rule

the COM+ Remote Administration (DCOM-ln) rule

the Windows Management Instrumentation (DCOM-ln) rule

You have a server that runs Windows Server. The server is configured to encrypt all incoming traffic by using a connection security rule. You need to ensure that Server1 can respond to the unencrypted tracert commands initiated from computers on the same network. What should you do from Windows Defender Firewall with Advanced Security?

From the IPsec Settings, configure IPsec exemptions.

From the IPsec Settings, configure IPsec defaults.

Create a new custom outbound rule that allows ICMPv4 protocol connections for all profiles.

Change the Firewall state of the Private profile to Off.

From the IPsec Settings, configure IPsec exemptions.

You have an Azure virtual machine named VM1.You enable Microsoft Defender SmartScreen on VM1.You need to ensure that the SmartScreen messages displayed to users are logged.What should you do?

From Event Viewer, enable the Debug log.

From a command prompt, run WinRM quickconfig.

From the local Group Policy, modify the Advanced Audit Policy Configuration settings.

From Event Viewer, enable the Debug log.

From the Windows Security app. configure the Virus & threat protection settings.

Your company uses Storage Spaces Direct.You need to view the available storage in a Storage Space Direct storage pool.What should you use?

File Server Resource Manager (FSRM)

the Get-ScorageFileServer cmdlet

You have 200 Azure virtual machines.You create a recovery plan in Azure Site Recovery to fail over all the virtual machines to an Azure region. The plan has three manual actions. You need to replace one of the manual actions with an automated process.What should you use?

an Azure Desired State Configuration (DSC) virtual machine extension

a Custom Script Extension on the virtual machines

You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed. You have a Hyper-V failover cluster named Cluster1. All servers are members of the same domain. You need to ensure that you use Hyper-V Replica with Kerberos authentication on the default port to replicate virtual machines from Cluster1 to Server1. What should you do on Server1?

From Windows Defender Firewall with Advanced Security, enable the Hyper-V Replica HTTPListener (TCP-ln) rule.

Add primary servers to the Hyper-V Replica Broker configuration.

From Hyper-V Settings, select Enable incoming and outgoing live migrations

From Windows Defender Firewall with Advanced Security, enable the Hyper-V Replica HTTPSListener (TCP-ln) rule.

From Windows Defender Firewall with Advanced Security, enable the Hyper-V Replica HTTPListener (TCP-ln) rule.

You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed. You import the Azure Migrate appliance as VM1.You need to register VM1 with Azure Migrate.What should you do in Azure Migrate? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

Download the Azure Migrate installer script ZIP file.

You have an Azure virtual machine named VM1 that has the Web Server (IIS) server role installed.VM1 hosts a critical line-of-business (LOB) application.After the security team at your company deploys a new security baseline to VM1, users begin reporting that the application is unresponsive. You suspect that the security baseline has caused networking issues.You need to perform a network trace on VM1.What should you do?

From the Azure portal, configure the Performance diagnostics settings for VM1.

From Performance Monitor on VM1. create a Data Collector Set.

From the Azure portal, configure the Diagnostics settings for VM1.

From the Azure portal, configure the Performance diagnostics settings for VM1.

You have an Azure virtual machine named VM1. Crash dumps for a process named Process1 are enabled for VM1. When process1.exe on VM1 crashes, a technician must access the memory dump files on the virtual machine. The technician must be prevented from accessing the virtual machine. To what should you provide the technician access?

an Azure Blob Storage container

an Azure Log Analytics workspace

an Azure Blob Storage container

You plan to deploy the Azure Monitor agent to 100 on-premises servers that run Windows Server.Which parameters should you provide when you install the agent?

the ID and the key of an Azure Log Analytics workspace

the client ID and the secret of an Azure service principal

the name and the access key of an Azure Storage account

a connection string for an Azure SQL database

the ID and the key of an Azure Log Analytics workspace

You have five Azure virtual machines.You need to collect performance data and Windows Event logs from the virtual machines. The data collected must be sent to an Azure Storage account. What should you install on the virtual machines?

the Azure Diagnostics extension

the Azure Connected Machine agent

the Azure Diagnostics extension

You have a Site-to-Site VPN between an on-premises network and an Azure VPN gateway. BGP is disabled for the Site-to-Site VPN. You have an Azure virtual network named Vnet1 that contains a subnet named Subnet1. Subnet1 contains a virtual machine named Server1. You can connect to Server1 from the on-premises network.You extend the address space of Vnet1. You add a subnet named Subnet2 to Vnet1. Subnet2 uses the extended address space. You deploy an Azure virtual machine named Server2 to Subnet2. You cannot connect to Server2 from the on-premises network. Server1 can connect to Server2.You need to ensure that you can connect to Subnet2 from the on-premises network.What should you do?

Update the routing information on the on-premises routers.

Add an additional Site-to-Site VPN between the on-premises network and Vnetl.

Add a private endpoint to Subnet2.

To Subnet2. add a route table that contains a user-defined route.

Update the routing information on the on-premises routers.

You need to use a comma-separated value (CSV) file to import server inventory to Azure Migrate.Which fields are mandatory for each entry in the CSV file?

Server name. Cores, OS Name, and Memory (in MB)

Server name, IP addresses. Disk 1 size (in GB), and CPU utilization percentage

Server name, IP addresses, OS version, and Number of disks

You have an Azure virtual machine named VM1 that runs Windows Server.When you attempt to install the Azure Performance Diagnostics extension on VM I, the installation fails. You need to identify the cause of the installation failure.What are two possible ways to achieve the goal? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

Sign in to VM1 and verify the WaAppAgentlog file.

From the Azure portal, view the alerts for VM1.

Sign in to VM1 and verify the WaAppAgentlog file.

From the Azure portal, view the alerts for VM1.

From the Azure portal, view the activity log for VM1.

Sign into VM1 and verify the MonitoringAgentlog file.

Your network contains an Active Directory Domain Services (AD DS> domain. The domain contains 20 Active Directory sites. All user management is performed from a central site. You add users to a group.You discover that group changes do NOT appear on a domain controller in a remote site.You need to identify whether the group changes appear on other domain controllers.What should you use?

Active Directory Replication Status Tool

Microsoft Support and Recovery Assistant

File Replication Service (FRS) Status Viewer

Active Directory Replication Status Tool

Active Directory Sites and Services

You have five Azure virtual machines. You have a dedicated Azure Storage account to collect performance dat a. You need to send the collected data directly to the Azure Storage account. What should you install on the virtual machines?

the Azure Connected Machine agent

the Azure Diagnostics extension

the Azure Connected Machine agent

You have three servers named Server 1. Servers and Server3 that run Windows Server. The servers have the Hyper-V server rote installed and are configured in a Storage Spaces Deed cluster named Cluster1. Cluster1 hosts a virtual machine named VM1 that has Windows Admin Center Installed.You manage all servers and clusters by using Windows Admin Center.You purchase an Azure subscription.You need to configure email alerts in Azure Monitor for the following:• Disk Capacity Utilization Over 80% for 10 Minutes• Any critical alert in the cluster system event log• Memory Utilization over 95% for 10 minutes• Heartbeat fewer than 5 beats for 5 Minutes.• CPU Utilization over 85 % for 10 Minutes.• Any hearth service faults for the clusterThe solution must use the minimum amount of administrative effort.What should you do?

From Azure portal, configure Azure Monitor and onboard Cluster1 by using Azure Arc.

From Windows Admin Center, configure Azure Monitor and onboard clustered.

From Azure portal, configure Azure Monitor and onboard Cluster1 by using Azure Arc.

Configure Azure Monitor and manually install the Microsoft Monitoring Agent on Server1, Server2 and Server3

You have a three-node failover cluster.You need to run pre-scripts and post-scripts when Cluster-Aware Updating (CAU) runs. The solution must minimize administrative effort. What should you use?

Windows Server Update Serveries (WSUS)

You have two Azure Virtual machines that run Windows Server.You plan to create a failover cluster that will host the virtual machines.You need to configure an Azure Storage account that will be used by the cluster as a cloud witness. The solution must maximize resiliency.Which type of redundancy should you configure for the storage account?

Geo-zone-redundant storage (GZRS)

Locally-redundant storage (LRS)

Microsoft AZ-801 Practice Test 2 - Free Online Exam Prep & Questions

You have 10 servers that run Windows Server in a workgroup.

You need to configure the servers to encrypt all the network traffic between the servers. The solution must be as secure as possible. Which authentication method should you configure in a connection security rule?

NTLMv2

pre-shared key

KerberosV5

computer certificate

Comment (0)

Microsoft AZ-801 Practice Test 2

Question

Microsoft AZ-801 Practice Tests

Practice Tests