microsoft az-801 practice test

configuring windows server hybrid advanced services

Last exam update: Apr 13 ,2025
Page 1 out of 15. Viewing questions 1-10 out of 145

Question 1

DRAG DROP You have an Azure virtual machine named VM1 that runs Windows Server. VM1 has boot diagnostics configured to use a managed storage account.
You are troubleshooting connectivity issue on VM1.
You need to run a PowerShell cmdlet on VM1 by using the Azure Serial Console.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

Mark Question:
Answer:


Reference:
https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/serial-console-overview https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/serial-console-windows

Discussions
0 / 1000
zajak
1 month, 3 weeks ago

https://www.examgo.com/static/examtests/examimg/microsoft/az-801/145-1.png

0

Question 2

You have an Azure subscription named Sub1 that contains a resource group named RG1. RG1 contains the resources shown in the following table.



Sub1 has Microsoft Defender for Servers enabled. You are assigned the Contributor role for Sub1.

You need to implement just-in-time (JIT) VM access for VM1.

What should you do first?

  • A. Create a network security group (NSG).
  • B. Enable enhanced security in Microsoft Defender for Cloud.
  • C. Request the Owner role for Sub1.
  • D. Create an application security group.
Mark Question:
Answer:

c

User Votes:
A 1 votes
50%
B
50%
C 1 votes
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 3

You have an Azure virtual machine named VM1. Crash dumps for a process named Process1 are enabled for VM1.
When process1.exe on VM1 crashes, a technician must access the memory dump files on the virtual machine. The technician must be prevented from accessing the virtual machine.
To what should you provide the technician access?

  • A. an Azure file share
  • B. an Azure Log Analytics workspace
  • C. an Azure Blob Storage container
  • D. a managed disk
Mark Question:
Answer:

c


Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/agents/diagnostics-extension-overview

User Votes:
A
50%
B
50%
C 2 votes
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 4

You have an Azure virtual machine named VM1 that runs Windows Server.

The operating system on VM1 fails to fully initialize its network stack, and you cannot establish a network connection.

You need to establish an interactive shell session.

What should you use?

  • A. Azure Bastion
  • B. Serial console
  • C. just-in-time (JIT) VM access
Mark Question:
Answer:

b

User Votes:
A
50%
B 1 votes
50%
C
50%
Discussions
vote your answer:
A
B
C
0 / 1000

Question 5

You have a server that runs Windows Server. The server is configured to encrypt all incoming traffic by using a connection security rule.
You need to ensure that Server1 can respond to the unencrypted tracert commands initiated from computers on the same network.
What should you do from Windows Defender Firewall with Advanced Security?

  • A. From the IPsec Settings, configure IPsec defaults.
  • B. Create a new custom outbound rule that allows ICMPv4 protocol connections for all profiles.
  • C. Change the Firewall state of the Private profile to Off.
  • D. From the IPsec Settings, configure IPsec exemptions.
Mark Question:
Answer:

d

User Votes:
A
50%
B
50%
C
50%
D 2 votes
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 6

You are planning the data share migration to support the on-premises migration plan.
What should you use to perform the migration?

  • A. Storage Migration Service
  • B. Microsoft File Server Migration Toolkit
  • C. File Server Resource Manager (FSRM)
  • D. Windows Server Migration Tools
Mark Question:
Answer:

a


Reference:
https://docs.microsoft.com/en-us/windows-server/storage/storage-migration-service/migrate-data

User Votes:
A 2 votes
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 7

DRAG DROP You have a server named Server1 that runs Windows Server and has the Web Server (IIS) server role installed. Server1 hosts an ASP.NET Core web app named
WebApp1 and the app's source files.
You install Docker on Server1.
You need to ensure that you can deploy WebApp1 to an Azure App Service web app from the Azure Container Registry.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

Mark Question:
Answer:


Step 1: Create a Dockerfile. This file contains instructions for the build process.
Step 2: Run the docker build command to create a container image.
Step 3: Run the docker push command to upload the image to Azure Container Registry.

Discussions
0 / 1000

Question 8

HOTSPOT You are planning the DHCP1 migration to support the DHCP migration plan.
Which two PowerShell cmdlets should you run on DHCP1, and which two PowerShell cmdlets should you run on DHCP2? To answer, drag the appropriate cmdlets to the correct servers. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

Mark Question:
Answer:


Reference:
https://theitbros.com/how-to-migrate-dhcp-to-windows-server-2016/

Discussions
0 / 1000

Question 9

You have an on-premises server named Server1 that runs Windows Server. You have an Azure subscription.

You plan to back up the files and folders on Server1 to Azure by using Azure Backup.

You need to define how long the backups will be retained.

What should you use to configure the retention?

  • A. Windows Server Backup
  • B. a Recovery Services vault
  • C. the Microsoft Azure Recovery Services (MARS) agent
  • D. Backup center
Mark Question:
Answer:

c

User Votes:
A
50%
B
50%
C 1 votes
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 10

DRAG DROP Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a failover cluster named Cluster1.
You need to configure Cluster-Aware Updating (CAU) on the cluster by using Windows Admin Center (WAC).
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

Mark Question:
Answer:


Step 1: Enable CredSSP -
Some tasks that require CredSSP to be enabled include:

Create Cluster wizard workflow -
Active Directory queries or updates

SQL Server queries or updates -
Locating accounts or computers on a different domain or non-domain joined environment
The Credential Security Support Provider protocol (CredSSP) is a Security Support Provider that is implemented by using the Security Support Provider Interface
(SSPI). CredSSP lets an application delegate the user's credentials from the client to the target server for remote authentication.

Step 2: Add Cluster1 to WAC -
Add the failover cluster to Windows Admin Center
Step 3: Add the Cluster-Aware Updating role.
Enabling self-updating mode.
To enable the self-updating mode, you must add the Cluster-Aware Updating clustered role to the failover cluster.
Incorrect:
* Failover clusters do not support gMSAs. However, services that run on top of the Cluster service can use a gMSA or a sMSA if they are a Windows service, an
App pool, a scheduled task, or natively support gMSA or sMSA.
* The Windows Admin Center gateway, when published to DNS and given access through corresponding corporate firewalls, lets you securely connect to, and manage, your servers from anywhere with Microsoft Edge or Google Chrome.
Reference:
https://docs.microsoft.com/en-us/azure-stack/hci/manage/troubleshoot-credssp https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/use/manage-failover-clusters https://docs.microsoft.com/en-us/windows-server/failover-clustering/cluster-aware-updating

Discussions
0 / 1000
To page 2