AZ-801 practice questions
You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed. You have a Hyper-V failover cluster named Cluster1. All servers are members of the same domain.
You need to ensure that you use Hyper-V Replica with Kerberos authentication on the default port to replicate virtual machines from Cluster1 to Server1.
What should you do on Server1?
A. Add primary servers to the Hyper-V Replica Broker configuration.
B. From Hyper-V Settings, select Enable incoming and outgoing live migrations.
C. From Windows Defender Firewall with Advanced Security, enable the Hyper-V Replica HTTPS Listener (TCP-In) rule.
D. From Windows Defender Firewall with Advanced Security, enable the Hyper-V Replica HTTP Listener (TCP-In) rule.
Discussion forum
Question
You have 200 Azure virtual machines.
You create a recovery plan in Azure Site Recovery to fail over all the virtual machines to an Azure region. The plan has three manual actions.
You need to replace one of the manual actions with an automated process.
What should you use?
A. an Azure Desired State Configuration (DSC) virtual machine extension
B. an Azure Automation runbook
C. an Azure PowerShell function
D. a Custom Script Extension on the virtual machines
Discussion forum
Question
You have an on-premises server named Server1 that runs Windows Server and has the Hyper-V server role installed.
You have an Azure subscription.
You plan to back up Server1 to Azure by using Azure Backup.
Which two Azure Backup options require you to deploy Microsoft Azure Backup Server (MABS)? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. Bare Metal Recovery
B. Files and folders
C. System State
D. Hyper-V Virtual Machines
Discussion forum
Question
You have three Azure virtual machines named VM1, VM2, and VM3 that host a multitier application.
You plan to implement Azure Site Recovery.
You need to ensure that VM1, VM2, and VM3 fail over as a group.
What should you configure?
A. an availability zone
B. a recovery plan
C. an availability set
Discussion forum
Question
You have two servers named Server1 and Server2 that run Windows Server. Both servers have the Hyper-V server role installed.
Server1 hosts three virtual machines named VM1, VM2, and VM3. The virtual machines replicate to Server2.
Server1 experiences a hardware failure.
You need to bring VM1, VM2, and VM3 back online as soon as possible.
From the Hyper-V Manager console on Server2, what should you run for each virtual machine?
A. Start
B. Move
C. Unplanned Failover
D. Planned Failover
Discussion forum
Question
You have a three-node failover cluster.
You need to run pre-scripts and post-scripts when Cluster-Aware Updating (CAU) runs. The solution must minimize administrative effort.
What should you use?
A. Azure Functions
B. Run profiles
C. Windows Server Update Services (WSUS)
D. Scheduled tasks
Discussion forum
Question
You have two Azure virtual machines that run Windows Server.
You plan to create a failover cluster that will host the virtual machines.
You need to configure an Azure Storage account that will be used by the cluster as a cloud witness. The solution must maximize resiliency.
Which type of redundancy should you configure for the storage account?
A. Geo-zone-redundant storage (GZRS)
B. Locally-redundant storage (LRS)
C. Zone-redundant storage (ZRS)
D. Geo-redundant storage (GRS)
Discussion forum
Question
You have a Storage Spaces Direct configuration that has persistent memory and contains the data volumes shown in the following table.
You plan to add data volumes to Storage Spaces Direct as shown in the following table.
On which volumes can you use direct access (DAX)?
A. Volume3 only
B. Volume4 only
C. Volume1 and Volume3 only
D. Volume2 and Volume4 only
E. Volume3 and Volume4 only
Discussion forum
Question
Your company uses Storage Spaces Direct.
You need to view the available storage in a Storage Space Direct storage pool.
What should you use?
A. System Configuration
B. File Server Resource Manager (FSRM)
C. the Get-StorageFileServer cmdlet
D. Failover Cluster Manager
Discussion forum
Question
You have a failover cluster named Cluster1 that has the following configurations:
✑ Number of nodes: 6
✑ Quorum: Dynamic quorum
✑ Witness: File share, Dynamic witness
What is the maximum number of nodes that can fail simultaneously while maintaining quorum?
A. 1
B. 2
C. 3
D. 4
E. 5
Discussion forum
Question
You have an Azure virtual machine named VM1.
You enable Microsoft Defender SmartScreen on VM1.
You need to ensure that the SmartScreen messages displayed to users are logged.
What should you do?
A. From a command prompt, run WinRM quickconfig.
B. From the local Group Policy, modify the Advanced Audit Policy Configuration settings.
C. From Event Viewer, enable the Debug log.
D. From the Windows Security app, configure the Virus & threat protection settings.
Discussion forum
Question
You have a server that runs Windows Server. The server is configured to encrypt all incoming traffic by using a connection security rule.
You need to ensure that Server1 can respond to the unencrypted tracert commands initiated from computers on the same network.
What should you do from Windows Defender Firewall with Advanced Security?
A. From the IPsec Settings, configure IPsec defaults.
B. Create a new custom outbound rule that allows ICMPv4 protocol connections for all profiles.
C. Change the Firewall state of the Private profile to Off.
D. From the IPsec Settings, configure IPsec exemptions.
Discussion forum
Question
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two servers named Server1 and Server2 that run Windows Server.
You need to ensure that you can use the Computer Management console to manage Server2. The solution must use the principle of least privilege.
Which two Windows Defender Firewall with Advanced Security rules should you enable on Server2? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. the COM+ Network Access (DCOM-In) rule
B. all the rules in the Remote Event Log Management group
C. the Windows Management Instrumentation (WMI-In) rule
D. the COM+ Remote Administration (DCOM-In) rule
E. the Windows Management Instrumentation (DCOM-In) rule
Discussion forum
Question
You have an Azure virtual machine named VM1 that runs Windows Server.
You need to encrypt the contents of the disks on VM1 by using Azure Disk Encryption.
What is a prerequisite for implementing Azure Disk Encryption?
A. Customer Lockbox for Microsoft Azure
B. an Azure key vault
C. a BitLocker recovery key
D. data-link layer encryption in Azure
Discussion forum
Question
You have 10 servers that run Windows Server in a workgroup.
You need to configure the servers to encrypt all the network traffic between the servers. The solution must be as secure as possible.
Which authentication method should you configure in a connection security rule?
A. NTLMv2
B. pre-shared key
C. Kerberos V5
D. computer certificate
Discussion forum
Question