Microsoft AZ-801 Actual Free Exam Questions & Community Discussion

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains five servers that run Windows Server. The network also contains two workgroup servers that run Windows Server.
You need to implement a connection security rule between the member servers and the workgroup servers.
Which authentication method should you use?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an on-premises server named Server1 that runs Windows Server.
You have a Microsoft Sentinel instance.
You add the Windows Firewall data connector in Microsoft Sentinel.
You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1.
Solution; You enable event subscription on Server1.
Does this meet the goal?

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains a user named User1. You deploy a read-only domain controller (RODQ named RODC1.
You need to ensure that User1 is a local administrator on RODC1. The solution must use the principle of least privilege. What should you use?

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. The subscription contains the storage accounts shown in the following table.

You plan to enable boot diagnostics for VM1.
You need to configure storage for the boot diagnostics logs and snapshots.
Which storage account should you use?

You need to meet technical requirements for Share1.
What should you use?

You have an Azure subscription that contains the Azure key vaults shown in the following table.

You create a virtual machine that has the following configurations
* Name:VM1
* Resource group: RG1
* Azure region: East US
* Operating system: Windows Server
You need to enable Azure Disk Encryption for VM1. Which key vault can you use to store the encryption key for VM1?

You have an on-premises server that runs Windows Server and has the Web Server (IIS) server role installed.
The server hosts a web app that connects to an on-premises Microsoft SQL Server database.
You plan to migrate the web app to an Azure App Services web app. The database will remain on-premises.
You need to ensure that the migrated web app can access the database.
What should you configure in Azure?

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains a user named User1 that has following attributes:
* whenCreated: 8/16/2023 8:04:55 AM
* distinguishedName: CN=Userl,DC=contoso,DC=com
* objectGUID: ef91eeG0-d371-4ee4-9c35-7da64c432a67
* objectSID: S-l-5-21-2106002304-3506747707-1284373444-1610
You need to use the Active Directory Migration Tool (ADMT) to migrate User1 to an AD DS forest named fabrikam.com. Which attributes will change after you migrate User1 to fabrikam.com?

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server and uses Azure Disk Encryption.
You need to identify which Azure key vault stores the encryption keys for VM1. The solution must minimize administrative effort.
Which PowerShell cmdlet should you run?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that runs Windows Server.
You need to ensure that only specific applications can modify the data in protected folders on Server1.
Solution: From Virus & threat protection, you configure Tamper Protection .
Does this meet the goal?

You have two servers named Server1 and Server2 that run Windows Server and have the Hyper-V role installed. You plan to deploy Hyper-V Replica between Server1 and Server2. The deployment will use certificate-based authentication. You need to configure the prerequisites for the Hyper-V Replica deployment.
Which two actions should you perform on each server? Each correct answer presents part of the solution.
NOTE: Each correct answer is worth one point.

You have an Azure virtual machine named VM1 that runs Windows Server.
When you attempt to install the Azure Performance Diagnostics extension on VM I, the installation fails.
You need to identify the cause of the installation failure.
What are two possible ways to achieve the goal? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

You plan to deploy an Azure confidential virtual machine named VM1. You need to ensure that you can implement confidential disk encryption for VM1. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

The servers run Windows Server and have the network configurations shown in the following table.


Server3 is configured as a NAT gateway. All the servers allow ICMP requests.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

You have a Microsoft Sentinel deployment and 100 Azure Arc-enabled on-premises servers. All the Azure Arc-enabled resources are in the same resource group.
You need to onboard the servers to Microsoft Sentinel. The solution must minimize administrative effort.
What should you use to onboard the servers to Microsoft Sentinel?