Microsoft Configuring Windows Server Hybrid Advanced Services - AZ-801 Exam Questions

QUESTION NO: 1
Drag and Drop Question
You have two Azure virtual machines named VM1 and VM2. VM1 is backed up to an Azure Recovery Services vault daily and retains backups for 30 days.
You need to restore an individual file named C:\Data\Important.docx from VM1 to VM2. The solution must minimize administrative effort.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

QUESTION NO: 2
You have an Azure virtual machine named VM1 that runs Windows Server.
When you attempt to install the Azure Performance Diagnostics extension on VM I, the installation fails.
You need to identify the cause of the installation failure.
What are two possible ways to achieve the goal? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

QUESTION NO: 3
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an on-premises server named Server1 that runs Windows Server.
You have a Microsoft Sentinel instance.
You add the Windows Firewall data connector in Microsoft Sentinel.
You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1.
Solution: You install the Azure Connected Machine agent on Server1.
Does this meet the goal?

QUESTION NO: 4
Your network contains an Active Directory Domain Services (AD DS) forest. The forest functional level is Windows Server 2012 R2. The forest contains the domains shown in the following table.

You create a user named Admin1.
You need to ensure that Admin1 can add a new domain controller that runs Windows Server
2022 to the east.contoso.com domain. The solution must follow the principle of least privilege.
To which groups should you add Admin1?

QUESTION NO: 5
Case Study 2 - Contoso, Ltd
Overview
Contoso, Ltd. is a manufacturing company that has a main office in Seattle and branch offices in Los Angeles and Montreal.
Existing Environment
Active Directory Environment
Contoso has an on-premises Active Directory Domain Services (AD DS) domain named contoso.com that syncs with an Azure Active Directory (Azure AD) tenant. The AD DS domain contains the domain controllers shown in the following table.

Contoso recently purchased an Azure subscription.
The functional level of the forest is Windows Server 2012 R2. The functional level of the domain is Windows Server 2012. The forest has the Active Directory Recycle Bin enabled.
The contoso.com domain contains the users shown in the following table.

The contoso.com domain has the Group Policy Objects (GPOs) shown in the following table.

The contoso.com domain has the Password Settings Objects (PSOs) shown in the following table.

Server Infrastructure
The contoso.com domain contains servers that run Windows Server 2022 as shown in the following table.

By using Windows Firewall with Advanced Security, the servers have isolation connection security rules configured as shown in the following table.

Server4 has no connection security rules.
Server4 Configurations
Server4 has the effective Group Policy settings for user rights as shown in the following table.

Server4 has the disk configurations shown in the following exhibit.

Virtualization Infrastructure
The contoso.com domain has the Hyper-V failover clusters shown in the following table.

Technical Requirements
Contoso identifies the following technical requirements:
* Promote a new server named DC4 that runs to Windows Server 2022 to a domain controller.
* Replicate the virtual machines from Cluster2 to an Azure Recovery Services vault.
* Centrally manage performance alerts in Azure for all the domain controllers.
* Ensure that User1 can recover objects from the Active Directory Recycle Bin.
* Migrate Share1 to Server2, including all the share and folder permissions.
* Back up Server4 and all data to an Azure Recovery Services vault.
* Use Hyper-V Replica to protect the virtual machines in Cluster3.
* Implement BitLocker Drive Encryption (BitLocker) on Server4.
* Whenever possible, use the principle of least privilege.
You need to meet the technical requirements for Cluster3.
What should you include in the solution?

QUESTION NO: 6
You have a server that runs Windows Server and hosts an app named App1.
You need to prevent App1 from accessing external SMTP servers. The solution must meet the following requirements:
- Minimize the impact on App1's access to external HTTP servers.
- Minimize the impact on other apps on the server.
- Minimize administrative effort.
What should you implement in Windows Defender Firewall?

QUESTION NO: 7
Hotspot Question
You have a Windows Server Failover Cluster (WSFQ) that has the following configurations:
- Name: App1
- Owner node: Node3
- Type: Generic Application
The General settings for App1 are shown in the General exhibit. (Click the General tab.)

The Failover settings for App1 are shown in the Failover exhibit. (Click the Failover tab.)

The Advanced Policies settings for App1 are shown in the Advanced Policies exhibit. (Click the Advanced Policies tab.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

QUESTION NO: 8
You have an Azure subscription. The subscription contains a virtual machine named Server1 that runs Windows Server.
You create a new Log Analytics workspace named Workspace1.
You need to collect performance metrics for Server1 by using Azure Monitor.
What should you do next?

QUESTION NO: 9
You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server.
You enable Microsoft Defender for Servers Plan 2.
You need to implement File Integrity Monitoring (FIM).
What should you create first?

QUESTION NO: 10
You have multiple servers that run Windows Server.
You plan to use System Insights to collect information about your environment and systems.
How many default System Insights capabilities can you use for capacity forecasting?

QUESTION NO: 11
You establish synchronization between an AD DS and Azure AD environments. Users whose accounts are synced were able to sign in, but none of them could access cloud resources. What could be the problem?