Practice Free AZ-801 Exam Online Questions
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two servers named Server1 and Server2 that run Windows Server.
You need to ensure that you can use the Computer Management console to manage Server2. The solution must use the principle of least privilege.
Which two Windows Defender Firewall with Advanced Security rules should you enable on Server2? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
- A . the COM+ Network Access (DCOM-ln) rule
- B . all the rules in the Remote Event Log Management group
- C . the Windows Management Instrumentation (WMI-ln) rule
- D . the COM+ Remote Administration (DCOM-ln) rule
- E . the Windows Management Instrumentation (DCOM-ln) rule
AB
Explanation:
Reference: https://docs.microsoft.com/en-us/windows-server/administration/server-manager/configure-remote-management-in-server-manager
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that runs Windows Server.
You need to ensure that only specific applications can modify the data in protected folders on Server1.
Solution: From App & browser control, you configure Reputation-based protection.
Does this meet the goal?
- A . Yes
- B . No
You need to back up Server 4 to meet the technical requirements.
What should you do first?
- A . Deploy Microsoft Azure Backup Server (MABS).
- B . Configure Windows Server Backup.
- C . Install the Microsoft Azure Recovery Services (MARS) agent.
- D . Configure Storage Replica.
C
Explanation:
Reference: https://docs.microsoft.com/en-us/azure/backup/install-mars-agent
You have a server named Server1 that runs the Remote Desktop Session Host role service. Server1 has five custom applications installed.
Users who sign in to Server1 report that the server is slow. Task Manager shows that the average CPU usage on Server1 is above 90 percent. You suspect that a custom application on Server1 is consuming excessive processor capacity.
You plan to create a Data Collector Set in Performance Monitor to gather performance statistics from Server1.
You need to view the resources used by each of the five applications.
Which object should you add to the Data Collector Set?
- A . Processor information
- B . Processor
- C . Process
- D . Processor performance
You have an Azure virtual machine named VM1 that runs Windows Server.
You plan to deploy a new line-of-business (LOB) application to VM1.
You need to ensure that the application can create child processes.
What should you configure on VM1?
- A . Microsoft Defender Credential Guard
- B . Microsoft Defender Application Control
- C . Microsoft Defender SmartScreen
- D . Exploit protection
A
Explanation:
Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/customize-exploit-protection?view=o365-worldwide
DRAG DROP
You have a server named Server1 that runs Windows Server and is hosted in a VMWare environment. Server1 contains an ASP.NET application named Appl. Users access App1 by using the following URL: https://app1.contoso.com.
You need to use the integrated flow in Azure Migrate to migrate App1 to Azure App Service. After the migration, users must be able to access App1 by using the same URL.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.


HOTSPOT
You have 100 Azure virtual machines that run Windows Server.
You plan to use Azure Monitor agents to track occurrences of event 10 1035 in the Application log of each virtual machine.
You need to ensure that the events will be available for analysis in Log Analytics. The solution must minimize the total volume of events stored in Azure.
What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.


HOTSPOT
Your network contains an Active Directory Domain Services (AD DS) domain.
The domain contains the servers shown in the following table.

The Failover Clustering tools are NOT installed on the servers.
You plan to enable Cluster-Aware Updating (CAU).
On which servers should you install the Failover Clustering tools to implement CAU in self-updating mode, and on which servers should you install the Failover Clustering tools to implement remote-updating mode? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.


Your network contains an Active Directory Domain Services (AD DS) forest. The forest functional level is Windows Server 2012 R2.
The forest contains the domains shown in the following table.

You create a user named Admin1.
You need to ensure that Admin1 can add a new domain controller that runs Windows Server 2022 to the east.contoso.com domain. The solution must follow the principle of least privilege.
To which groups should you add Admin1?
- A . EASTDomain Admins only
- B . CONTOSOEnterprise Admins only
- C . CONTOSO/Schema Admins and EASTDomain Admins
- D . CONTOSOEnterprise Admins and CONTOSO/Schema Admins
DRAG DROP
You have two physical servers named AppSrv1 and AppSrv2 and an unconfigured server named Server1. All the servers run Windows Server. Only Server1 can access the internet.
You plan to use Azure Site Recovery to replicate AppSrv1 and AppSrv2 to Azure.
You need to deploy the required components to AppSrv1, AppSrv2, and Server1.
Which components should you deploy? To answer, drag the appropriate components to the correct servers. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/site-recovery/physical-azure-architecture
https://docs.microsoft.com/en-us/azure/site-recovery/physical-azure-set-up-source
