AZ-801 Configuring Windows Server Hybrid Advanced Services Questions and Answers

You are planning the migration of APP3 and APP4 to support the Azure migration plan.

What should you do on Cluster1 and in Azure before you perform the migration? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You need to back up Server 4 to meet the technical requirements.

What should you do first?

You are planning the deployment of Microsoft Sentinel.

Which type of Microsoft Sentinel data connector should you use to meet the security requirements?

You are remediating the firewall security risks to meet the security requirements.

What should you configure to reduce the risks?

Your on-premises network contains two subnets. The subnets contain servers that run Windows Server as shown in the following table.

Server4 has the following IP configurations:

Ethernet adapter Ethernet:

Connection-specific DNS Suffix.:

IPv4 Address . . . . . . . . . . . : 192.168.0.10

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.0.1

From Server4, you can ping Server1 and Server2 successfully. When you ping Server3, you get a Request timed out response.

From Server2, you can ping Server1 and Server3 successfully.

The misconfiguration of which component on Server3 can cause the Request timed out response?

You have three servers named Host1, Host2, and VM1 that run Windows Server. Host1 and Host2 have the Hyper-V server role installed. VM1 is a virtual machine hosted on Host1.

You configure VM1 to replicate to Host2 by using Hyper-V Replica.

Which types of failovers can you perform on VM1 on each host? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You need to meet the technical requirements for User1.

To which group in contoso.com should you add User1?

You are planning the data share migration to support the on-premises migration plan.

What should you use to perform the migration?

You are planning the www.fabrikam.com website migration to support the Azure migration plan.

How should you configure WebApp1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

You need to configure BitLocker on Server4.

On which volumes can you turn on BitLocker, and on which volumes can you turn on auto-unlock? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You need to meet technical requirements for Share1.

What should you use?

Which domain controller should be online to meet the technical requirements for DC4?

What is the effective minimum password length for User1 and Admin1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

With which servers can Server1 and Server3 communicate? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You need to meet the technical requirements for Cluster3.

What should you include in the solution?

You need to implement alerts for the domain controllers. The solution must meet the technical requirements.

What should you do on the domain controllers, and what should you create on Azure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You are evaluating the technical requirements tor Cluster2.

What is the minimum number of Azure Site Recovery Providers that you should install?

You need to meet the technical requirements for Cluster2.

Which four actions should you perform in sequence before you can enable replication? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You have an on-premises IIS web server that hosts several .NET applications.

You plan to migrate the applications to Azure App Service. The applications will NOT be containerized. What should you use to perform the migration?

You have two servers that have the Web Server (IIS) server role installed. The servers are configured as shown in the following table.

Both servers are configured to enable website deployment by using the Web Deployment Tool. Server1 hosts a website named Site1 that has Web Deploy Publishing configured.

You plan to migrate Site1 to Server2.

You need to perform a pull synchronization of Site1 by using the Web Deployment Agent Service.

How should you complete the command? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You manage 200 physical servers that run Windows Server.

You plan to migrate the servers to Azure.

You need to prepare for discovery of the servers by using Azure Migrate.

Which three actions should you perform in sequence on a physical server? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You have an on-premises file server named Server1 that runs Windows Server.

You have an Azure subscription.

Server1 contains a file share named Share1.

You need to migrate Share1 to an Azure virtual machine.

What should you use?

Your company uses Storage Spaces Direct.

You need to view the available storage in a Storage Space Direct storage pool.

What should you use?

You are planning the DHCP1 migration to support the DHCP migration plan.

Which two PowerShell cmdlets should you run on DHCP1, and which two PowerShell cmdlets should you run on DHCP2? To answer, drag the appropriate cmdlets to the correct servers. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

You have an Azure virtual machine named VM1. Crash dumps for a process named Process1 are enabled for VM1.

When process1.exe on VM1 crashes, a technician must access the memory dump files on the virtual machine. The technician must be prevented from accessing the virtual machine.

To what should you provide the technician access?

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two servers named Server1 and Server2 that run Windows Server.

On Server1, you create an event subscription named Subscription! that retrieves events from Server2. The Query Filter settings (or Subscription! are configured as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

You are planning the implementation of Cluster2 to support the on-premises migration plan.

You need to ensure that the disks on Cluster2 meet the security requirements.

In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

You have an Azure subscription that contains an Azure Recovery Services vault.

You have an on-premises physical server that runs Windows Server.

You need to back up the server daily to Azure.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.

The Failover Clustering tools are NOT installed on the servers.

You plan to enable Cluster-Aware Updating (CAU).

On which servers should you install the Failover Clustering tools to implement CAU in self-updating mode, and on which servers should you install the Failover Clustering tools to implement remote-updating mode? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure virtual machine named VM1.

You enable Microsoft Defender SmartScreen on VM1.

You need to ensure that the SmartScreen messages displayed to users are logged.

What should you do?

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the organizational units (OUs) shown in the following table.

In the domain, you create the Group Policy Objects (GPOs) shown in the following table.

You need to implement IPsec authentication to ensure that only authenticated computer accounts can connect to the members in the domain. The solution must minimize administrative effort.

Which GPOs should you apply to the Domain Controllers OU and the Domain Servers OU? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two users named User! and User2.

You use the following tools to manage Active Directory:

• Active Directory Users and Computers

• Active Directory Administrative Center

• Ntdsutil

• Ldp

You perform the actions shown in the following table.

What can you use to undelete each user? To answer, select the appropriate options in the answer area.

You have a management group named MG1 that contains an Azure subscription named Sub1. Sub1 contains the resources shown in the following table.

You need to enable Microsoft Defender for Servers.

From the Azure portal, on which two resources can you enable Defender for Servers? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

You have a server named Server1 that runs Windows Server and contains two volumes named C and D.

You connect a disk to Server 1 that is encrypted by using BitLocker and contains a volume named E.

You need to ensure that after a restart, the data on volume E can be accessed without providing a password or a recovery key.

Which three actions should you perform on Server1 in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a failover cluster named Cluster! that hosts an application named Appl.

The General tab in App1 Properties is shown in the General exhibit (Click the General tab.)

The Failover tab in App1 Properties is shown in the Failover exhibit. (Click the Failover tab.)

Server2 shuts down unexpectedly.

You need to ensure that when you start Server2, App1 continues to run on Server2.

Solution: You pause the Server1 node in Cluster1 and then start Server1.

Does this meet the goal?

You have an on-premises server named Server1 that runs Windows Server and has the Hyper-V server role installed.

You have an Azure subscription that contains a virtual machine named VM1. VM1 runs Windows Server.

You plan to use Azure Backup.

Which type of vault should you configure for each resource? To answer, drag the appropriate vault types to the correct resources. Each vault type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contos.com. The domain contains the accounts shown in the following table.

The domain is configured to store BitLocker recovery keys in Active Directory.

* Admin1 turns on BitLocker Drive Encryption (BitLocker) for volume C on Server1.

* Admin1 moves Server1 to OU1.

* Admin2 turns on BitLocker for removable volume E on Server2.

* Admin2 moves removable volume E from Server2 to Server1 and unlocks the volume.

On which Active Directory object can you each BitLocker recovery key? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth on point.

You have an on-premises server named Server1 that runs Windows Server.

You have an Azure subscription that uses Microsoft Defender for Cloud.

You need to onboard Server1 to Defender for Cloud.

Which actions should you perform in sequence? To answer, drag the appropriate actions to the correct order. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The functional level of the forest and the domain is Windows Server 2012 R2. The domain contains the domain controllers shown in the following table.

You need to raise the forest functional level to Windows Server 2016. The solution must meet the following requirements:

Ensure that there are three domain controllers after you raises the level.

Minimize how long the FSMO roles are unavailable.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains domain controllers that run Windows Server 2016.

Vou build a new AD DS forest named nwtraders.com. The forest contains domain controllers that run Windows Server 2025.

You plan to perform a phased migration from contoso.com to nwtraders.com.

You perform the following actions:

• Migrate the users in contoso.com to nwtraders.com and enable slDHistory.

• Establish a two-way forest trust between contoso.com and nwtraders.com.

• Install the Active Directory Migration Tool (ADMT) in nwtraders.com.

You have a Windows Server 2022 Remote Desktop Services deployment that includes the servers shown in the following table.

You need to upgrade Remote Desktop Services deployment to Windows Server 2025.

Which server must you upgrade first?

You have an on-premises IIS web server that hosts a web app named Appl. You plan to migrate App1 to a container and run the container in Azure. You need to perform the following tasks:

• Export App1 to a ZIP file.

• Create a container image based on Appl.

The solution must minimize administrative effort.

You deploy Azure Migrate to an on-premises network.

You have an on-premises physical server named Server1 that runs Windows Server and has the following configuration.

* Operating system disk 600 GB

* Data disic 3 TB

* NIC Teaming: Enabled

* Mobility service: installed

* Windows Firewall: Enabled

* Microsoft Defender Antivirus: Enabled

You need to ensure that you can use Azure Migrate to migrate Server1.

Solution: You disable NIC Teaming on Server1.

Does this meet the goal?

Your network contains an Active Directory Domain Services (AD DS) domain. You need to deploy a Storage Spaces Direct cluster that has nested resiliency. What is the maximum number of nodes you can deploy to the cluster?