AZ-801 Configuring Windows Server Hybrid Advanced Services Questions and Answers

Which domain controller should be online to meet the technical requirements for DC4?

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the servers shown in the following table.

You need to migrate Site1 from Server 1 to Server2. The solution must meet the following requirements:

• Minimize how long it takes to perform the migration.

• Minimize administrative effort.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of cations to the answer area and arrange them in the correct order.

You need to meet the technical requirements for User1.

To which group in contoso.com should you add User1?

You have an Azure subscription that contains two virtual machines named VM1 and VM2. VM1 runs Windows Server. VM2 runs Ubuntu Linux. You need to monitor VM1 and VM2 by using VM insights. The solution must meet the following requirements:

• Ensure that you can monitor the memory usage on VM1.

• Ensure that you run the Map feature on VM2.

The solution must minimize the number of agents required for each virtual machine.

Which agents are required on each virtual machine? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

What is the effective minimum password length for User1 and Admin1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

You are planning the DHCP1 migration to support the DHCP migration plan.

Which two PowerShell cmdlets should you run on DHCP1, and which two PowerShell cmdlets should you run on DHCP2? To answer, drag the appropriate cmdlets to the correct servers. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

You are planning the data share migration to support the on-premises migration plan.

What should you use to perform the migration?

You are planning the europe.fabrikam.com migration to support the on-premises migration plan-Where should you install the Password Export Server (PES) service, where should you generate the encryption key? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You are planning the migration of APP3 and APP4 to support the Azure migration plan.

What should you do on Cluster1 and in Azure before you perform the migration? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You are planning the deployment of Microsoft Sentinel.

Which type of Microsoft Sentinel data connector should you use to meet the security requirements?

You are planning the implementation of Cluster2 to support the on-premises migration plan.

You need to ensure that the disks on Cluster2 meet the security requirements.

In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

You are planning the www.fabrikam.com website migration to support the Azure migration plan.

How should you configure WebApp1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have a failover cluster named Cluster1 that contains the nodes shown in the following table.

A File Server for general use cluster role named HAFS is configured as shown in the General exhibit (Click the General tab.)

Your network contains an Active Directory Domain Services (AD DS) domain.

You need to implement a solution that meets the following requirements:

Ensures that the members of the Domain Admins group are allowed to sign in only to domain controllers

Ensures that the lifetime of Kerberos Ticket Granting Ticket (TGT) for the members of the Domain Admins group is limited to one hour

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You are remediating the firewall security risks to meet the security requirements.

What should you configure to reduce the risks?

You need to implement a security policy solution to authorize the applications. The solution must meet the security requirements.

Which service should you use to enforce the security policy, and what should you use to manage the policy settings? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You are planning the migration of Archive1 to support the on-premises migration plan.

What is the minimum number of IP addresses required for the node and cluster roles on Cluster3?

You deploy Azure Migrate to an on-premises network.

You have an on-premises physical server named Server1 that runs Windows Server and has the following configuration.

Operating system disk 600 GB

Data disic 3 TB

NIC Teaming: Enabled

Mobility service: installed

Windows Firewall: Enabled

Microsoft Defender Antivirus: Enabled

You need to ensure that you can use Azure Migrate to migrate Server1.

Solution: You disable Windows Firewall on Server1.

Does this meet the goal?

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a group named Group1 and the member servers shown in the following table.

Server1 contains the printers shown in the following table.

You use Print Management to migrate the printers from Server1 to Server2.

Which migrated printers can print to file, and to which migrated printers can the members of Group1 print? To answer, select the appropriate options in the answer area.

Your network contains an Active Directory Domain Services (AD DS) domain. The functional level of the domain is Windows Server 2012 R2.

You need to create and link an authentication policy silo.

What should you do first?

You need to implement alerts for the domain controllers. The solution must meet the technical requirements.

What should you do on the domain controllers, and what should you create on Azure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You need to configure BitLocker on Server4.

On which volumes can you turn on BitLocker, and on which volumes can you turn on auto-unlock? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a file server named Server 1 that hosts multiple shared folders.

You have an Azure subscription.

You need to migrate the files stored on Server! to Azure by using an Azure Data Box gateway.

To which storage services can you migrate the files?

You have two servers named Server1 and Server2 that run Windows Server. Both servers have the Hyper-V server role installed.

Server1 hosts three virtual machines named VM1, VM2, and VM3. The virtual machines replicate to Server2.

Server1 experiences a hardware failure.

You need to bring VM1, VM2, and VM3 back online as soon as possible.

From the Hyper-V Manager console on Server2, what should you run for each virtual machine?

You have three servers named Server1, Server2, Server3 that run Windows Server and have the Hyper-V server role installed.

You plan to create a hyper-converged cluster to host Hyper-V virtual machines.

You need to ensure that you can store virtual machines in Storage Spaces Direct.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You have two onpremises Hyper-V hosts named Served and Server2, Server1 contains two virtual machines named VM1 and VM2. Server2 contains three virtual machines named VM21. VM22, and VM23.

You have an Azure subscription.

You plan to use Azure Site Recovery to replicate all the virtual machines to Azure.

You need to deploy the Microsoft Azure Site Recovery Provider to the on-premises infrastructure.

What is the minimum number of providers you should install?

You need to meet the technical requirements for Cluster2.

Which four actions should you perform in sequence before you can enable replication? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the organizational units (OUs) shown in the following table.

In the domain, you create the Group Policy Objects (GPOs) shown in the following table.

You need to implement IPsec authentication to ensure that only authenticated computer accounts can connect to the members in the domain. The solution must minimize administrative effort.

Which GPOs should you apply to the Domain Controllers OU and the Domain Servers OU? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have a server named Server1 that runs Windows Server.

You need to ensure that only specific applications can modify the data in protected folders on Server1.

Solution: From App & browser control, you configure the Reputation-based protection.

Does this meet the goal?

You have the servers shown in the following table.

You plan to migrate file shares from Server1 to Server2.

You need to deploy the Storage Migration Service and the Storage Migration Service extension.

On which server should you install each component? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains an organizational unit (OU) named 0U1.0U1 contains servers that run sensitive workloads.

You plan to add connection security rules that meet the following requirements:

• The servers in OU 1 must only accept connections from domain-joined

• The servers in OU 1 must only be able to communicate with domain-joined

You create a Group Policy Object (GPO) named GP01 and link GP01 to contoso.com.

You need to configure a connection security rule in GP01 by using Windows Defender Firewall with Advanced Security.

How should you configure the rule? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed. You have a Hyper-V failover cluster named Cluster1. All servers are members of the same domain.

You need to ensure that you use Hyper-V Replica with Kerberos authentication on the default port to replicate virtual machines from Cluster1 to Server1.

What should you do on Server1?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it as a result, these questions will not appear in the review screen.

You have an on-premises server named Server1 that runs Windows Server.

You have a Microsoft Sentinel instance.

You add the Windows Firewall data connector in Microsoft Sentine1.

You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1.

Solution: You install the Azure Connected Machine agent on Server1.

Does this meet the goal?

You have an Active Directory Domain Services (AD DS) forest that has the Active Directory Recycle Bin enabled. The forest contains a user named User1.

User1 is accidentally deleted.

You need to restore User1 from the Active Directory Recycle Bin.

What should you use?

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. The subscription contains the storage accounts shown in the following table.

You plan to enable boot diagnostics for VM1.

You need to configure storage for the boot diagnostics logs and snapshots.

Which storage account should you use?

You have a Windows Server 2022 Remote Desktop Services deployment that includes the servers shown in the following table.

You need to upgrade Remote Desktop Services deployment to Windows Server 2025.

Which server must you upgrade first?

You have an on-premises server named Server1 that runs Windows Server and has the Hyper-V server role installed.

You have an Azure subscription that contains a virtual machine named VM1. VM1 runs Windows Server.

You plan to use Azure Backup.

Which type of vault should you configure for each resource? To answer, drag the appropriate vault types to the correct resources. Each vault type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains a user named User1 that has following attributes:

• whenCreated: 8/16/2023 8:04:55 AM

• distinguishedName: CN=Userl,DC=contoso,DC=com

• objectGUID: ef91eeG0-d371-4ee4-9c35-7da64c432a67

• objectSID: S-l-5-21-2106002304-3506747707-1284373444-1610

You need to use the Active Directory Migration Tool (ADMT) to migrate User1 to an AD DS forest named fabrikam.com. Which attributes will change after you migrate User1 to fabrikam.com?

You have an Azure virtual machine named VM1 that has the Web Server (IIS) server role installed. VM1 hosts a critical line-of-business (LOB) application.

After the security team at your company deploys a new security baseline to VM1, users begin reporting that the application is unresponsive.

You suspect that the security baseline has caused networking issues.

You need to perform a network trace on VM1.

What should you do?

Your network contains an Active Directory Domain Services (AD DS) domain. You plan to protect high-privilege domain credentials by specifying the following:

• The lifetime of the Kerberos Ticket Granting Ticket (TGT)

• The conditions required for devices to request a TGT

What should you use, and what should you create? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an on-premises server named Server 1 that runs Windows Server.

You have an Azure subscription.

You migrate Server1 to an Azure virtual machine named VM1.

You need to configure a backup solution for VM1. The solution must provide recovery points.

What should you do on VM1, and in which type of vault should you store the backups? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains servers that run Windows Server 2022.

You have a Storage Spaces Direct cluster named SSCIuster1 that contains two physical nodes named Node! and Node2. Node! and Node2 host highly available virtual machines.

You plan to perform an in-place upgrade to Windows Server 2025 on Node1

You need to ensure that the virtual machines remain running during the upgrade.

Which four actions should you perform in sequence on Node1? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Your on-premises network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains the domains shown in the following table.

You create a user named User1 that has the following attributes:

You plan to move User1 to OU3 by using the Active Directory Migration Tool (ADMT). Which attributes will change if User1 moves to OU3?

You are evaluating the technical requirements tor Cluster2.

What is the minimum number of Azure Site Recovery Providers that you should install?

You need to back up Server 4 to meet the technical requirements.

What should you do first?