Microsoft AZ-801 Actual Free Exam Questions & Community Discussion

You have an on-premises server named Server1 that runs Windows Server.
You have an Azure subscription that uses Microsoft Defender for Cloud.
You need to onboard Server1 to Defender for Cloud.
Which actions should you perform in sequence? To answer, drag the appropriate actions to the correct order.
Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

You have an Azure subscription.
You plan to deploy a virtual machine named VM1 to the East US Azure region and use Azure Site Recovery between availability zones.
You need to configure the disks on VM1 and the virtual network. The solution must meet the following requirements:
* Maximize the availability of VM1.
* Maintain the private IP address of VM1 during failover and failback operations.
What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point .

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an on-premises server named Server1 that runs Windows Server.
You have a Microsoft Sentinel instance.
You add the Windows Firewall data connector in Microsoft Sentinel.
You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1.
Solution: You install the Log Analytics agent on Server1
Does this meet the goal?

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains a user named User1. You deploy a read-only domain controller (RODC) named RODC1.
You need to ensure that User1 is a local administrator on RODC1. The solution must use the principle of least privilege. What should you use?

You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed.
You import the Azure Migrate appliance as VM1.
You need to register VM1 with Azure Migrate.
What should you do in Azure Migrate? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. Contoso.
com contains a member server named Server1 .contoso.com.
You cannot resolve the FQDN of server1.contoso.com.
You verify that Windows Defender Firewall is configured correctly and that you can ping server1.contoso.
com successfully by using the server ' s IP address.
You need to validate that the DNS record for server1.contoso.com exists.
Which command should you run?

You have two Azure virtual networks named Vnet1 and Vnet2.
You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN.
You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit Vnet2 can use the remote gateway.
You discover that Client1 cannot communicate with Vnet2.
You need to ensure that Client1 can communicate with Vnet2.
Solution: You download and reinstall the VPN client configuration.
Does this meet the goal?

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server and is in an organizational unit (OU) named OU1.
You have a Group Policy Object (GPO) that is linked to OUT and has the Windows Defender SmartScreen settings shown in the following table.

You have the apps shown in the following table.

Which apps can you install on Served?

Your on-premises datacenter contains physical servers and Hyper-V virtual machines.
You have an Azure subscription.
You plan to use Azure Migrate to perform the following tasks:
* Migrate the physical servers to Azure virtual machines.
* Migrate the Hyper-V virtual machines to Azure.
What should you use for each task? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

You have a Site-to-Site VPN between an on-premises network and an Azure VPN gateway. BGP is disabled for the Site-to-Site VPN.
You have an Azure virtual network named Vnet1 that contains a subnet named Subnet1. Subnet1 contains a virtual machine named Server1.
You can connect to Server1 from the on-premises network.
You extend the address space of Vnet1. You add a subnet named Subnet2 to Vnet1. Subnet2 uses the extended address space. You deploy an Azure virtual machine named Server2 to Subnet2.
You cannot connect to Server2 from the on-premises network. Server1 can connect to Server2.
You need to ensure that you can connect to Subnet2 from the on-premises network.
What should you do?

You deploy Azure Migrate to an on-premises network.
You have an on-premises physical server named Server1 that runs Windows Server and has the following configuration.
Operating system disk 600 GB
Data disic 3 TB
NIC Teaming: Enabled
Mobility service: installed
Windows Firewall: Enabled
Microsoft Defender Antivirus: Enabled
You need to ensure that you can use Azure Migrate to migrate Server1.
Solution: You disable Microsoft Defender Antivirus on Server1.
Does this meet the goal?

You have an Azure virtual machine named VM1.
You enable Microsoft Defender SmartScreen on VM1.
You need to ensure that the SmartScreen messages displayed to users are logged.
What should you do?

You deploy Azure Migrate to an on-premises network.
You have an on-premises physical server named Server1 that runs Windows Server and has the following configurations:
* Operating system disk; 600 GB
* Data disk: 3 TB
* NIC Teaming: Enabled
* Mobility service: Installed
* Windows Defender Firewall: Enabled
* Microsoft Defender Antivirus: Enabled
You need to ensure that you can use Azure Migrate to migrate Server1.
Solution: You disable Windows Defender Firewall on Server 1.
Does this meet the goal?

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.
You need to perform the following tasks:
* Createasnapshotofcontoso.com.
* Expose the snapshot as a read-only AD DS instance.
What should you use for each task? To answer, drag the appropriate tools to the correct tasks. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.

Server3 contains a share named Share1.
On Server1, DHCP has the following configurations:
Conflict detection attempts: 3
An IPv4 scope named Scope1 that has the following settings:
1. Address Pool: 172.16.10.100 - 172.16.10.130
2. Address Leases:
- 172.16.10.100 computer1.contoso.com
- 172.16.10.101 computer2.contoso.com
Reservations: 172.16.10.101 computer2.contoso.com
Policies: Policy1
You perform the following actions:
* On Server1, you run
Export-DhcpServer -File \\Server3\Share1\File1.xml .
* On Server2, you run
Import-DhcpServer -File \\Server3\Share1\File1.xml
-BackupPath \\Server3\Share1 .
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.