Download Free Microsoft AZ-801 Practice Exam Questions

1. You have an Azure virtual machine named VM1.

You install an application on VM1, and then restart the virtual machine.

After the restart, you get the following error message: “Boot failure. Reboot and Select proper Boot Device or Insert Boot Media in selected Boot Device.”

You need to mount the operating system disk offline from VM1 to a temporary virtual machine to troubleshoot the issue.

Which command should you run in Azure CLI?

2. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a server named Server1 that runs Windows Server.

You need to ensure that only specific applications can modify the data in protected folders on Server1.

Solution: From Virus & threat protection, you configure Tamper Protection.

Does this meet the goal?

3. You have three servers named Server 1. Servers and Server3 that run Windows Server. The servers have the Hyper-V server rote installed and are configured in a Storage Spaces Deed cluster named Cluster1.

Cluster1 hosts a virtual machine named VM1 that has Windows Admin Center Installed.

You manage all servers and clusters by using Windows Admin Center.

You purchase an Azure subscription.

You need to configure email alerts in Azure Monitor for the following:

• Disk Capacity Utilization Over 80% for 10 Minutes

• Any critical alert in the cluster system event log

• Memory Utilization over 95% for 10 minutes

• Heartbeat fewer than 5 beats for 5 Minutes.

• CPU Utilization over 85 % for 10 Minutes.

• Any hearth service faults for the cluster

The solution must use the minimum amount of administrative effort.

What should you do?

4. You need to meet the technical requirements for Cluster3.

What should you include in the solution?

5. You deploy Azure Migrate to an on-premises network.

You have an on-premises physical server named Server1 that runs Windows Server and has the following configuration.

* Operating system disk 600 GB

* Data disic 3 TB

* NIC Teaming: Enabled

* Mobility service: installed

* Windows Firewall: Enabled

* Microsoft Defender Antivirus: Enabled

You need to ensure that you can use Azure Migrate to migrate Server1.

Solution: You shrink the data disk on Server1.

Does this meet the goal?

6. You have two Azure Virtual machines that run Windows Server.

You plan to create a failover cluster that will host the virtual machines.

You need to configure an Azure Storage account that will be used by the cluster as a cloud witness. The solution must maximize resiliency.

Which type of redundancy should you configure for the storage account?

7. HOTSPOT

You need to implement a security policy solution to authorize the applications. The solution must meet the security requirements.

Which service should you use to enforce the security policy, and what should you use to manage the policy settings? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

8. HOTSPOT

The Default Domain Policy Group Policy Object (GPO) is shown in the GPO exhibit. (Click the GPO tab.)





The members of a group named Service Accounts are shown in the Group exhibit. (Click the Group tab.)





An organizational unit (OU) named Service Accounts is shown in the OU exhibit. (Click the OU tab.)





You create a Password Settings Object (PSO) as shown in the PSO exhibit. (Click the PSO tab.)





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

9. Address Leases:

- 172.16.10.100 computer1.contoso.com

- 172.16.10.101 computer2.contoso.com

Reservations: 172.16.10.101 computer2.contoso.com

Policies: Policy1

You perform the following actions:

✑ On Server1, you run

Export-DhcpServer -File \Server3Share1File1.xml.

✑ On Server2, you run

Import-DhcpServer -File \Server3Share1File1.xml

-BackupPath \Server3Share1.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

10. DRAG DROP

Your network contains an Active Directory Domain Services (AD DS) domain that has the Active Directory Recycle Bin enabled. All domain controllers are backed up daily.

You accidentally remove all the users from a domain group.

You need to get a list of the users that were previously in the group.

Which four actions should you perform in sequence from a domain controller? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

11. DRAG DROP

You have three servers named Server1, Server2, Server3 that run Windows Server and have the Hyper-V server role installed.

You plan to create a hyper-converged cluster to host Hyper-V virtual machines.

You need to ensure that you can store virtual machines in Storage Spaces Direct.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

12. DRAG DROP

You have an on-premises IIS web server that hosts a web app named Appl. You plan to migrate App1 to a container and run the container in Azure.

You need to perform the following tasks:

• Export App1 to a ZIP file.

• Create a container image based on Appl.

The solution must minimize administrative effort.

13. DRAG DROP

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant.

The AD DS domain contains a domain controller named DC1. DC1 does NOT have internet access.

You need to configure password security for on-premises users.

The solution must meet the following requirements:

✑ Prevent the users from using known weak passwords.

✑ Prevent the users from using the company name in passwords.

What should you do? To answer, drag the appropriate configurations to the correct targets. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

14. Topic 2, Contoso, Ltd



Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you

would like to complete each case. However, there may be additional case studies and sections on this

exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.



To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.



At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.



To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.



Overview

Contoso, Ltd. is a manufacturing company that has a main office in Seattle and branch offices in Los Angeles and Montreal.



Existing Environment

Active Directory Environment

Contoso has an on-premises Active Directory Domain Services (AD DS) domain named contoso.com that syncs with an Azure Active Directory (Azure AD) tenant.



The AD DS domain contains the domain controllers shown in the following table.







Contoso recently purchased an Azure subscription.

The functional level of the forest is Windows Server 2012 R2. The functional level of the domain is Windows Server 2012. The forest has the Active Directory Recycle Bin enabled.



The contoso.com domain contains the users shown in the following table.







The contoso.com domain has the Group Policy Objects (GPOs) shown in the following table.







The contoso.com domain has the Password Settings Objects (PSOs) shown in the following table.







Server Infrastructure

The contoso.com domain contains servers that run Windows Server 2022 as shown in the following table.







By using Windows Firewall with Advanced Security, the servers have isolation connection security rules configured as shown in the following table.







Server4 has no connection security rules.



Server4 Configurations

Server4 has the effective Group Policy settings for user rights as shown in the following table.







Server4 has the disk configurations shown in the following exhibit.







Virtualization Infrastructure

The contoso.com domain has the Hyper-V failover clusters shown in the following table.







Technical Requirements

Contoso identifies the following technical requirements:

Promote a new server named DC4 that runs to Windows Server 2022 to a domain controller.

Replicate the virtual machines from Cluster2 to an Azure Recovery Services vault.

Centrally manage performance alerts in Azure for all the domain controllers.

Ensure that User1 can recover objects from the Active Directory Recycle Bin.

Migrate Share1 to Server2, including all the share and folder permissions.

Back up Server4 and all data to an Azure Recovery Services vault.

Use Hyper-V Replica to protect the virtual machines in Cluster3.

Implement BitLocker Drive Encryption (BitLocker) on Server4.

Whenever possible, use the principle of least privilege.



Which domain controller should be online to meet the technical requirements for DC4?

15. DRAG DROP

You need to create a Hyper-V hyper-converged cluster that stores virtual machines by using Storage Spaces Owed

Which three actions should you perform in sequence? To answer, move the appropriate anions from the list of actions to the answer area and arrange them in the correct order.

16. DRAG DROP

You have two Azure virtual machines named VM1 and VM2. VM1 is backed up to an Azure Recovery Services vault daily and retains backups for 30 days.

You need to restore an individual file named C:DataImportant.docx from VM1 to VM2. The solution must minimize administrative effort.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

17. HOTSPOT

Your network contains an Active Directory Domain Services (AD DS) forest.

The forest contains the domains shown in the following table.





You are implementing Microsoft Defender for Identity sensors.

You need to install the sensors on the minimum number of domain controllers. The solution must ensure that Defender for Identity will detect all the security risks in both the domains.

What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

18. Your on-premises network has a 200-Mbps connection to Azure and contains a server named Server1 that stores 70 TB of data files.

You have an Azure Storage account named storage 1.

You plan to migrate the data files from Server1 to a blob storage container in storage!.

Testing shows that copying the data files by using azcopy will take approximately 35 days.

You need to minimize how long it will take to migrate the data to Azure.

What should you use?

19. You have a Storage Spaces Direct configuration that has persistent memory and contains the data volumes shown in the following table.





You plan to add data volumes to Storage Spaces Direct as shown in the following table.





On which volumes can you use direct access (DAX)?

20. HOTSPOT

You have an Azure Active Directory Domain Services (Azure AD DS) domain named aadds.contoso.com.

You have an Azure virtual network named Vnet1. Vnet1 contains two virtual machines named VM1 and VM2 that run Windows Server. VMI and VM2 are joined to aadds.contoso.com.

You create a new Azure virtual network named Vnet2. You add a new server named VM3 to Vnet2.

When you attempt to join VM3 to aadds.contoso.com, you get an error message that the domain cannot be found.

You need to ensure that you can join VM3 toaadds.contoso.com.

21. You have an on-premises server that runs Windows Server and has the Web Server (IIS) server role installed. The server hosts a web app that connects to an on-premises Microsoft SQL Server database.

You plan to migrate the web app to an Azure App Services web app. The database will remain on-premises.

You need to ensure that the migrated web app can access the database.

What should you configure in Azure?

22. DRAG DROP

You have a server named Server1 that runs Windows Server and has the Web Server (IIS) server role installed. Server1 hosts an ASP.NET Core web app named WebApp1 and the app’s source files.

You install Docker on Server1.

You need to ensure that you can deploy WebApp1 to an Azure App Service web app from the Azure Container Registry.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

23. You have an on-premises server named Server1 that runs Windows Server and has the Hyper-V server role installed.

You have an Azure subscription.

You plan to back up Server1 to Azure by using Azure Backup.

Which two Azure Backup options require you to deploy Microsoft Azure Backup Server (MABS)? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

24. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The functional level of the forest is Windows Server 2012 R2. All domain controllers run Windows Server 2012 R2.

Sysvol replicates by using the File Replication Service (FRS).

You plan to replace the existing domain controllers with new domain controllers that will run Windows Server 2022.

You need to ensure that you can add the first domain controller that runs Windows Server 2022.

Solution: You migrate sysvol from FRS to Distributed File System (DFS) Replication.

Does this meet the goal?

25. You plan to deploy the Azure Monitor agent to 100 on-premises servers that run Windows Server.

Which parameters should you provide when you install the agent?

26. Your network contains an Active Directory Domain Services (AD DS) domain All domain members have Microsoft Defender Credential Guard with UEFI tock configured in the domain you deploy a server named Server1 that runs Windows Server. You disable Credential Guard on Server1. You need to ensure that Server1 is MOST subject to Credential Guard restrictions.

What should you do next?

27. Topic 3, Misc. Questions



You have three servers named Server1. Server1 and Server3 that run Windows Server and have the hyper V server rote installed. Server 1 hosts an Azure Migrate appliance named Migrate1.

You plan to migrate virtual machines to Azure.

You need to ensure that any new virtual machines created on Server 1. Server2 and Server3 are available in Azure Migrate

What should you do?

28. You have an on-premises server named Served that runs Windows Server. You have an Azure subscription. You plan to back up the files and folders on Server1 to Azure by using Azure Backup. You need to define how long the backups will be retained.

What should you use to configure the retention?

29. HOTSPOT

You have three servers named Host1, Host2, and VM1 that run Windows Server. Host1 and Host2 have the Hyper-V server role installed. VM1 is a virtual machine hosted on Host1.

You configure VM1 to replicate to Host2 by using Hyper-V Replica.

Which types of failovers can you perform on VM1 on each host? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

30. CORRECT TEXT

Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contos.com.

The domain contains the accounts shown in the following table.





The domain is configured to store BitLocker recovery keys in Active Directory.

* Admin1 turns on BitLocker Drive Encryption (BitLocker) for volume C on Server1.

* Admin1 moves Server1 to OU1.

* Admin2 turns on BitLocker for removable volume E on Server2.

* Admin2 moves removable volume E from Server2 to Server1 and unlocks the volume.

On which Active Directory object can you each BitLocker recovery key? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth on point.

31. You deploy Azure Migrate to an on-premises network.

You have an on-premises physical server named Server1 that runs Windows Server and has the following configuration.

* Operating system disk 600 GB

* Data disic 3 TB

* NIC Teaming: Enabled

* Mobility service: installed

* Windows Firewall: Enabled

* Microsoft Defender Antivirus: Enabled

You need to ensure that you can use Azure Migrate to migrate Server1.

Solution: You disable NIC Teaming on Server1.

Does this meet the goal?