Topic 3: Misc. Questions
You have 10 servers that run Windows Server in a workgroup.
You need to configure the servers to encrypt all the network traffic between the servers.
The solution must be as secure as possible.
Which authentication method should you configure in a connection security rule?
A. NTLMv2
B. pre-shared key
C. KerberosV5
D. computer certificate
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen.
You have an on-premises server named Server1 that runs Windows Server.
You have a Microsoft Sentinel instance.
You add the Windows Firewall data connector in Microsoft Sentinel.
You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1.
Solution; You enable event subscription on Server1.
Does this meet the goal?
A. Yes
B. No
You have two servers named Server1 and Server2 that run Windows Server. Both servers
have the Hyper-V server role installed.
Server1 hosts three virtual machines named VM1, VM2, and VM3. The virtual machines
replicate to Server2.
Server1 experiences a hardware failure.
You need to bring VM1, VM2, and VM3 back online as soon as possible.
From the Hyper-V Manager console on Server2, what should you run for each virtual
machine?
A. Start
B. Move
C. Unplanned Failover
D. Planned Failover
Your network contains an Active Directory Domain Services (AD DS) forest. The forest
functional level is Windows Server 2012 R2. The forest contains the domains shown in the
following table.

You create a user named Admin1.
You need to ensure that Admin1 can add a new domain controller that runs Windows
Server 2022 to the east.contoso.com domain. The solution must follow the principle of least
privilege.
To which groups should you add Admin1?
A. EAST\Domain Admins only
B. CONTOSO\Enterprise Admins only
C. CONTOSO/Schema Admins and EAST\Domain Admins
D. CONTOSO\Enterprise Admins and CONTOSO/Schema Admins
Your network contains an Active Directory Domain Services (AD DS) domain. The domain
contains two servers named Server1 and Server2 that run Windows Server.
You need to ensure that you can use the Computer Management console to manage
Server2. The solution must use the principle of least privilege.
Which two Windows Defender Firewall with Advanced Security rules should you enable on
Server2? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. the COM+ Network Access (DCOM-ln) rule
B. all the rules in the Remote Event Log Management group
C. the Windows Management Instrumentation (WMI-ln) rule
D. the COM+ Remote Administration (DCOM-ln) rule
E. the Windows Management Instrumentation (DCOM-ln) rule
B. all the rules in the Remote Event Log Management group
Your network contains a single-domain Active Directory Domain Services (AD DS) forest
named contoso.com. The functional level of the forest is Windows Server 2012 R2. All
domain controllers run Windows Server 2012 R2.
Sysvol replicates by using the File Replication Service (FRS).
You plan to replace the existing domain controllers with new domain controllers that will run
Windows Server 2022.
You need to ensure that you can add the first domain controller that runs Windows Server
2022.
Solution; You raise the domain and forest functional levels.
Does this meet the goal?
A. Yes
B. No
Note: This question is part of a series of questions that present the same scenario.
Each question in the series contains a unique solution that might meet the stated
goals. Some question sets might have more than one correct solution, while others
might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains a single-domain Active Directory Domain Services (AD DS) forest
named contoso.com. The functional level of the forest is Windows Server 2012 R2. All
domain controllers run Windows Server 2012 R2.
Sysvol replicates by using the File Replication Service (FRS).
You plan to replace the existing domain controllers with new domain controllers that will run
Windows Server 2022.
You need to ensure that you can add the first domain controller that runs Windows Server
2022.
Solution: You run the Active Directory Migration Tool (ADMT).
Does this meet the goal?
A. Yes
B. No
You have an Azure virtual machine named VM1 that runs Windows Server.
The operating system on VM1 fails to start due to a disk error.
You need to resolve the error.
Which four commands should you run in sequence in Azure Cloud Shell? To answer, move
the appropriate commands from the list of commands to the answer area and arrange them
in the correct order.
You have an Azure virtual machine named VM1 that runs Windows Server.
You need to encrypt the contents of the disks on VM1 by using Azure Disk Encryption.
What is a prerequisite for implementing Azure Disk Encryption?
A. Customer Lockbox for Microsoft Azure
B. an Azure key vault
C. a BitLocker recovery key
D. data-link layer encryption in Azure
You have a server named Server1 that runs Windows Server.
You need to ensure that only specific applications can modify the data in protected folders
on Server1.
Solution: From App & browser control, you configure the Reputation-based protection.
Does this meet the goal?
A. Yes
B. No
| Page 3 out of 16 Pages |
| AZ-801 Practice Test | Previous |