Free AZ-801 Sample Questions — Configuring Windows Server Hybrid Advanced Services

Free AZ-801 sample questions for the Configuring Windows Server Hybrid Advanced Services exam. No account required: study at your own pace.

Want an interactive quiz? Take the full AZ-801 practice test

Looking for more? Click here to get the full PDF with 104+ practice questions for $10 for offline study and deeper preparation.

Question 1

You have five Azure virtual machines. You have a dedicated Azure Storage account to collect performance data. You need to send the collected data directly to the Azure Storage account. What should you install on the virtual machines?

  • A. the Azure Connected Machine agent
  • B. the Telegraf agent
  • C. the Dependency agent
  • D. the Azure Monitor agent
  • E. the Azure Diagnostics extension
Show Answer
Correct Answer:
E. the Azure Diagnostics extension
Question 2

You have an on-premises file server named Server1 that runs Windows Server. You have an Azure subscription. Server1 contains a file share named Share1. You need to migrate Share1 to an Azure virtual machine. What should you use?

  • A. Server Manager
  • B. Storage Replica
  • C. Windows Admin Center
  • D. Azure Migrate
Show Answer
Correct Answer:
C. Windows Admin Center
Question 3

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains a user named User1. You deploy a read-only domain controller (RODC) named RODC1. You need to ensure that User1 is a local administrator on RODC1. The solution must use the principle of least privilege. What should you use?

  • A. dsmgmt.exe
  • B. Local Users and Groups
  • C. net user
  • D. Computer Management
Show Answer
Correct Answer:
A. dsmgmt.exe
Question 4

Your network contains an Active Directory Domain Services (AD DS) domain. You need to configure a ticket-granting ticket (TGT) lifetime for specific user and computer accounts. The solution must meet the following requirements: • Minimize the impact on the other user and computer accounts in the domain. • Minimize administrative effort. What should you configure?

  • A. a dynamic access control policy
  • B. a password policy
  • C. an authentication policy and an authentication policy silo
  • D. a fine-grained password policy
Show Answer
Correct Answer:
C. an authentication policy and an authentication policy silo
Question 5

You have an Azure virtual machine named VM1 that runs Windows Server. You configure Azure Site Recovery replication for VM1. You need to perform a test failover on VM1. What should you use from the VM1 blade in the Azure portal?

  • A. Availability + scaling
  • B. Backup
  • C. Disaster recovery
  • D. Windows Admin Center
  • E. Automanage
Show Answer
Correct Answer:
C. Disaster recovery
Question 6

You have an Azure subscription. Your on-premises network connects to Azure by using an Azure VPN gateway named VPN1. You need to monitor the Azure gateway health probe for VPN1. Which TCP port should you use?

  • A. 443
  • B. 1723
  • C. 3389
  • D. 8081
  • E. 65500
Show Answer
Correct Answer:
D. 8081
Question 7

Your on-premises network is connected to Azure. You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. You need to identify the latency between the on-premises network and VM1. Which Azure Network Watcher settings should you use?

  • A. IP flow verity
  • B. Connection monitor
  • C. VPN troubleshoot
  • D. Connection troubleshoot
Show Answer
Correct Answer:
B. Connection monitor
Question 8

You are planning the data share migration to support the on-premises migration plan. What should you use to perform the migration?

  • A. Storage Migration Service
  • B. Microsoft File Server Migration Toolkit
  • C. File Server Resource Manager (FSRM)
  • D. Windows Server Migration Tools
Show Answer
Correct Answer:
A. Storage Migration Service
Question 9

You have an Azure subscription that has Microsoft Defender for Cloud enabled. You have 50 Azure virtual machines that run Windows Server. You need to ensure that any security exploits detected on the virtual machines are forwarded to Defender for Cloud. Which extension should you enable on the virtual machines?

  • A. Vulnerability assessment for machines
  • B. Microsoft Dependency agent
  • C. Log Analytics agent for Azure VMs
  • D. Guest Configuration agent
Show Answer
Correct Answer:
A. Vulnerability assessment for machines
Question 10

Your network contains an Active Directory Domains Services (AD DS) domain that has a Windows Server 2016 forest functional level. The domain contains domain controller named DC1. You are troubleshooting SYSVOL replication issues on DC1. You need to stop the service responsible for SYSVOL replication. Which service should you stop?

  • A. Background Intelligent Transfer Service
  • B. File Replication
  • C. DFS Replication
  • D. DS Role Server
Show Answer
Correct Answer:
C. DFS Replication
Question 11

You have an Azure virtual machine named VM1 that runs Windows Server. The operating system on VM1 fails to fully initialize its network stack, and you cannot establish a network connection. You need to establish an interactive shell session. What should you use?

  • A. Azure Bastion
  • B. Serial console
  • C. just-in-time (JIT) VM access
Show Answer
Correct Answer:
B. Serial console
Question 12

You have an on-premises, two-node, hyperconverged Windows Server Failover Cluster (WSFC) named Cluster1. You have an Azure subscription. You need to configure a cloud witness for Cluster1. Which type of Azure Storage should you use?

  • A. file
  • B. queue
  • C. table
  • D. blob
Show Answer
Correct Answer:
D. blob
Question 13

You need to back up Server 4 to meet the technical requirements. What should you do first?

  • A. Deploy Microsoft Azure Backup Server (MABS)
  • B. Configure Windows Server Backup
  • C. Install the Microsoft Azure Recovery Services (MARS) agent
  • D. Configure Storage Replica
Show Answer
Correct Answer:
C. Install the Microsoft Azure Recovery Services (MARS) agent
Question 14

You have an Azure virtual machine named VM1 that has the Web Server (IIS) server role installed. VM1 hosts a critical line-of-business (LOB) application. After the security team at your company deploys a new security baseline to VM1, users begin reporting that the application is unresponsive. You suspect that the security baseline has caused networking issues. You need to perform a network trace on VM1. What should you do?

  • A. From VM1, run netstat
  • B. From Performance Monitor on VM1, create a Data Collector Set
  • C. From the Azure portal, configure the Diagnostics settings for VM1
  • D. From the Azure portal, configure the Performance diagnostics settings for VM1
Show Answer
Correct Answer:
D. From the Azure portal, configure the Performance diagnostics settings for VM1
Question 15

Your network contains an Active Directory Domain Services (AD DS) domain. All domain members have Microsoft Defender Credential Guard with UEFI lock configured. In the domain, you deploy a server named Server1 that runs Windows Server. You disable Credential Guard on Server1. You need to ensure that Server1 is NOT subject to Credential Guard restrictions. What should you do next?

  • A. Disable the Turn on Virtualization Based Security group policy setting
  • B. Run dism and specify the /Disable-Feature and /FeatureName:IsolatedUserMode parameters
  • C. Run the Device Guard and Credential Guard hardware readiness tool
Show Answer
Correct Answer:
A. Disable the Turn on Virtualization Based Security group policy setting
Question 16

You have an Azure virtual machine named VM1 that runs Windows Server. You need to encrypt the contents of the disks on VM1 by using Azure Disk Encryption. What is a prerequisite for implementing Azure Disk Encryption?

  • A. Customer Lockbox for Microsoft Azure
  • B. an Azure key vault
  • C. a BitLocker recovery key
  • D. data-link layer encryption in Azure
Show Answer
Correct Answer:
B. an Azure key vault
Question 17

You have an Azure virtual machine named VM1 that runs Windows Server. When you attempt to install the Azure Performance Diagnostics extension on VM1, the installation fails. You need to identify the cause of the installation failure. What are two possible ways to achieve the goal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

  • A. Sign in to VM1 and verify the MonitoringAgent.log file
  • B. Sign in to VM1 and verify the WaAppAgent.log file
  • C. From the Azure portal, view the alerts for VM1
  • D. From the Azure portal, view the activity log for VM1
Show Answer
Correct Answer:
  • B. Sign in to VM1 and verify the WaAppAgent.log file
  • D. From the Azure portal, view the activity log for VM1
Question 18

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server and uses Azure Disk Encryption. You need to identify which Azure key vault stores the encryption keys for VM1. The solution must minimize administrative effort. Which PowerShell cmdlet should you run?

  • A. Get-AzKeyVaultKey
  • B. Get-AzKeyVault
  • C. Get-AzVMDiskEncryptionStatus
  • D. Get-AzDiskEncryptionSet
Show Answer
Correct Answer:
C. Get-AzVMDiskEncryptionStatus
Question 19

You have an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server. You need to prevent the registration of specific COM objects on Server1. What should you use?

  • A. Windows Defender Application Control (WDAC)
  • B. exploit protection
  • C. Smart App Control
Show Answer
Correct Answer:
A. Windows Defender Application Control (WDAC)
Question 20

You have a Microsoft Sentinel deployment and 100 Azure Arc-enabled on-premises servers. All the Azure Arc-enabled resources are in the same resource group. You need to onboard the servers to Microsoft Sentinel. The solution must minimize administrative effort. What should you use to onboard the servers to Microsoft Sentinel?

  • A. Azure Automation
  • B. Azure Policy
  • C. Azure virtual machine extensions
  • D. Microsoft Defender for Cloud
Show Answer
Correct Answer:
B. Azure Policy

Aced these? Get the Full Exam

Download the complete AZ-801 study bundle with 104+ questions in a single printable PDF.