AZ-801 Configuring Windows Server Hybrid Advanced Services Questions and Answers

What is the effective minimum password length for User1 and Admin1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You need to meet the technical requirements for Cluster2.

Which four actions should you perform in sequence before you can enable replication? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You need to meet the technical requirements for Cluster3.

What should you include in the solution?

You need to meet technical requirements for Share1.

What should you use?

You are planning the implementation of Cluster2 to support the on-premises migration plan.

You need to ensure that the disks on Cluster2 meet the security requirements.

In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

You are remediating the firewall security risks to meet the security requirements.

What should you configure to reduce the risks?

Your network contain an Active Directory Domain Services (AD DS) domain named contoso.com. The domain was built by using domain controllers that run Windows Server 2025. You plan to deploy a custom app. The app will require a domain controller that runs a legacy version of Windows Server. What is the oldest version of Windows Server that you can use for the domain controller in contoso.com?

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The functional level of the forest and the domain is Windows Server 2012 R2. The domain contains the domain controllers shown in the following table.

You need to raise the forest functional level to Windows Server 2016. The solution must meet the following requirements:

Ensure that there are three domain controllers after you raises the level.

Minimize how long the FSMO roles are unavailable.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a failover cluster named Cluster1 that hosts an application named App1.

The General tab in App1 Properties is shown in the General exhibit. (Click the General tab.)

The Failover tab in App1 Properties is shown in the Failover exhibit. (Click the Failover tab.)

Server1 shuts down unexpectedly.

You need to ensure that when you start Server1, App1 continues to run on Server2.

Solution: From the Failover settings, you select Prevent failback.

Does this meet the goal?

You are evaluating the technical requirements tor Cluster2.

What is the minimum number of Azure Site Recovery Providers that you should install?

You need to meet the technical requirements for User1.

To which group in contoso.com should you add User1?

You have an Azure subscription that uses Azure Monitor.

You need to create an alert rule that will generate an alert when an Azure virtual machine is turned off. Which type of signal should you use?

Your network contains an on-premises Active Directory Domain Services (AD DS) domain. The domain contains two virtual machines named VM1 and VM2 that run Windows Server.

You plan to implement a failover cluster named Cluster1 that will use VM1 and VM2 as nodes.

You need to ensure that Cluster1 can use floating IP addresses.

Which two components should you deploy? Each correct answer presents part-of the solution.

NOTE: Each correct selection is worth one point.

You are planning the www.fabrikam.com website migration to support the Azure migration plan.

How should you configure WebApp1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

With which servers can Server1 and Server3 communicate? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Which domain controller should be online to meet the technical requirements for DC4?

You need to configure BitLocker on Server4.

On which volumes can you turn on BitLocker, and on which volumes can you turn on auto-unlock? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

You have an on-premises server named Server1 that runs Windows Server and has the Hyper-V server role installed.

You have an Azure subscription that contains a virtual machine named VM1. VM1 runs Windows Server.

You plan to use Azure Backup.

Which type of vault should you configure for each resource? To answer, drag the appropriate vault types to the correct resources. Each vault type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

You are planning the deployment of Microsoft Sentinel.

Which type of Microsoft Sentinel data connector should you use to meet the security requirements?

You need to implement a security policy solution to authorize the applications. The solution must meet the security requirements.

Which service should you use to enforce the security policy, and what should you use to manage the policy settings? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You are planning the migration of Archive1 to support the on-premises migration plan.

What is the minimum number of IP addresses required for the node and cluster roles on Cluster3?

You are planning the europe.fabrikam.com migration to support the on-premises migration plan-Where should you install the Password Export Server (PES) service, where should you generate the encryption key? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an on-premises server named Server1 that runs Windows Server and contains a shared folder named Share!.

You deploy a new virtual machine named Server2.

You need to migrate Share! to Server2. The solution must meet the following requirements:

• Ensure that users can access a UNC path of \\serverl\sharel after Server1 is decommissioned.

• Minimize administrative effort.

What should you use to perform the migration?

You are planning the DHCP1 migration to support the DHCP migration plan.

Which two PowerShell cmdlets should you run on DHCP1, and which two PowerShell cmdlets should you run on DHCP2? To answer, drag the appropriate cmdlets to the correct servers. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

You have five Azure virtual machines.

You need to collect performance data and Windows Event logs from the virtual machines. The data collected must be sent to an Azure Storage account.

What should you install on the virtual machines?

You are planning the data share migration to support the on-premises migration plan.

What should you use to perform the migration?

You have a three-node failover cluster.

You need to run pre-scripts and post-scripts when Cluster-Aware Updating (CAU) runs. The solution must minimize administrative effort.

What should you use?

You manage 200 physical servers that run Windows Server.

You plan to migrate the servers to Azure.

You need to prepare for discovery of the servers by using Azure Migrate.

Which three actions should you perform in sequence on a physical server? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You have three servers named Server1, Server2, Server3 that run Windows Server and have the Hyper-V server role installed.

You plan to create a hyper-converged cluster to host Hyper-V virtual machines.

You need to ensure that you can store virtual machines in Storage Spaces Direct.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

You need to perform the following tasks:

• Createasnapshotofcontoso.com.

• Expose the snapshot as a read-only AD DS instance.

What should you use for each task? To answer, drag the appropriate tools to the correct tasks. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

You have an on-premises server named Server1 that runs Windows Server.

You have an Azure subscription that uses Microsoft Defender for Cloud.

You need to onboard Server1 to Defender for Cloud.

Which actions should you perform in sequence? To answer, drag the appropriate actions to the correct order. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The functional level of the forest is Windows Server 2012 R2. All domain controllers run Windows Server 2012 R2.

Sysvol replicates by using the File Replication Service (FRS).

You plan to replace the existing domain controllers with new domain controllers that will run Windows Server 2022.

You need to ensure that you can add the first domain controller that runs Windows Server 2022.

Solution: You run the Active Directory Migration Tool (ADMT).

Does this meet the goal?

Your network contains an Active Directory Domain Services (AD DS) domain.

You need to implement a Storage Spaces Direct cluster. The solution must ensure that the cluster supports delimiting the allocation of volumes.

What is the minimum number of servers required, and which type of resiliency is required for the cluster volumes? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains three servers named Server1, Server2, and Server3 that run Windows Server. All the servers are on the same network and have network connectivity.

On Server1, Windows Defender Firewall has a connection security rule that has the following settings:

• Rule Type: Server-to-server

• Endpoint 1: Any IP address

• Endpoint 2: Any IP address

• Requirements: Require authentication for inbound connections and request authentication for outbound connections

• Authentication Method: Computer (Kerberos V5)

• Profile: Domain, Private, Public

• Name: Rule1

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The functional level of the forest is Windows Server 2012 R2. All domain controllers run Windows Server 2012 R2.

Sysvol replicates by using the File Replication Service (FRS).

You plan to replace the existing domain controllers with new domain controllers that will run Windows Server 2022.

You need to ensure that you can add the first domain controller that runs Windows Server 2022.

Solution; You raise the domain and forest functional levels.

Does this meet the goal?

Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contos.com. The domain contains the accounts shown in the following table.

The domain is configured to store BitLocker recovery keys in Active Directory.

* Admin1 turns on BitLocker Drive Encryption (BitLocker) for volume C on Server1.

* Admin1 moves Server1 to OU1.

* Admin2 turns on BitLocker for removable volume E on Server2.

* Admin2 moves removable volume E from Server2 to Server1 and unlocks the volume.

On which Active Directory object can you each BitLocker recovery key? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth on point.

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server and is in an organizational unit (OU) named OU1.

You have a Group Policy Object (GPO) that is linked to OUT and has the Windows Defender SmartScreen settings shown in the following table.

You have the apps shown in the following table.

Which apps can you install on Served?

You have an Azure subscription that contains the Azure key vaults shown in the following table.

You create a virtual machine that has the following configurations

• Name:VM1

• Resource group: RG1

• Azure region: East US

• Operating system: Windows Server

You need to enable Azure Disk Encryption for VM1. Which key vault can you use to store the encryption key for VM1?

You have two servers that run Windows Server as shown in the following table.

You need to copy the contents of volume E from Server1 to Server2. The solution must meet the following requirements:

Ensure that files in-use are copied.

Minimize administrative effort.

What should you use?

Your on-premises network has a 200-Mbps connection to Azure and contains a server named Server1 that stores 70 TB of data files.

You have an Azure Storage account named storage 1.

You plan to migrate the data files from Server1 to a blob storage container in storage!. Testing shows that copying the data files by using azcopy will take approximately 35 days.

You need to minimize how long it will take to migrate the data to Azure.

What should you use?

You have a management group named MG1 that contains an Azure subscription named Sub1. Sub1 contains the resources shown in the following table.

You need to enable Microsoft Defender for Servers.

From the Azure portal, on which two resources can you enable Defender for Servers? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed. You have a Hyper-V failover cluster named Cluster1. All servers are members of the same domain.

You need to ensure that you use Hyper-V Replica with Kerberos authentication on the default port to replicate virtual machines from Cluster1 to Server1.

What should you do on Server1?

You have an on-premises server named Server1 that runs Windows Server.

You have an Azure subscription.

You plan to back up the files and folders on Server1 by using the Microsoft Azure Recovery Services (MARS) agent.

You need to identify to which location the backups can be written and the maximum number of scheduled backups that can be performed per day.

What should you identify? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point

Your network contains an Active Directory Domain Services (AD DS) domain.

You need to configure a ticket-granting ticket (TGT) lifetime for specific user and computer accounts. The solution must meet the following requirements:

• Minimize the impact on the other user and computer accounts in the domain.

• Minimize administrative effort.

What should you configure?