[2022] New AZ-801 exam dumps Use Updated Microsoft Exam
Verified AZ-801 Dumps Q&As - AZ-801 Test Engine with Correct Answers
NEW QUESTION 69
Your network contains an Active Directory Domain Services (AD DS) domain All domain members have Microsoft Defender Credential Guard with UEFI tock configured in the domain you deploy a server named Server1 that runs Windows Server. You disable Credential Guard on Server1. You need to ensure that Server1 is MOST subject to Credential Guard restrictions. What should you do next?
- A. Run dism and specify the /Disable-Feature and /FeatureName:IsolatedUserMode parameters
- B. Run the Device Guard and Credential Guard hardware readiness tool
- C. Disable the Turn on Virtual nation Based Security group policy setting
Answer: C
NEW QUESTION 70
You need to meet technical requirements for Share1.
What should you use?
- A. Server Manager
- B. Storage Replica
- C. Storage Migration Service
- D. File Server Resource Manager (FSRM)
Answer: C
Explanation:
Reference:
https://docs.microsoft.com/en-us/windows-server/storage/storage-migration-service/overview
NEW QUESTION 71
You have an Azure virtual machine named VM1 that runs Windows Server.
You plan to deploy a new line-of-business (LOB) application to VM1.
You need to ensure that the application can create child processes.
What should you configure on VM1?
- A. Microsoft Defender SmartScreen
- B. Exploit protection
- C. Microsoft Defender Application Control
- D. Microsoft Defender Credential Guard
Answer: B
Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/customize-exploit-protection?view=o
NEW QUESTION 72
You have a server named Server1 that runs Windows Server and has the Web Server (IIS) server role installed. Server1 hosts an ASP.NET Core web app named WebApp1 and the app's source files.
You install Docker on Server1.
You need to ensure that you can deploy WebApp1 to an Azure App Service web app from the Azure Container Registry.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
NEW QUESTION 73
You deploy Azure Migrate to an on-premises network.
You have an on-premises physical server named Server1 that runs Windows Server and has the following configuration.
Operating system disk 600 GB
Data disic 3 TB
NIC Teaming: Enabled
Mobility service: installed
Windows Firewall: Enabled
Microsoft Defender Antivirus: Enabled
You need to ensure that you can use Azure Migrate to migrate Server1.
Solution: You disable Windows Firewall on Server1.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
NEW QUESTION 74
Your company uses Storage Spaces Direct.
You need to view the available storage in a Storage Space Direct storage pool.
What should you use?
- A. Disk Management
- B. Windows Admin Center
- C. File Server Resource Manager (FSRM)
- D. the Get-StorageSubsystem cmdlet
Answer: B
NEW QUESTION 75
You have 100 Azure virtual machines that run Windows Server. The virtual machines are onboarded to Microsoft Defender for Cloud.
You need to shut down a virtual machine automatically if Microsoft Defender for Cloud generates the "Antimalware disabled in the virtual machine" alert for the virtual machine.
What should you use in Microsoft Defender for Cloud?
- A. adaptive network hardening
- B. a security policy
- C. a logic app
- D. a workbook
Answer: C
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/defender-for-cloud/managing-and-responding-alerts
NEW QUESTION 76
Your company uses Storage Spaces Direct.
You need to view the available storage in a Storage Space Direct storage pool.
What should you use?
- A. Resource Monitor
- B. Windows Admin Center
- C. System Configuration
- D. The Get-StoragefileServer cmdlet
Answer: B
NEW QUESTION 77
You have a server named Server1 that runs Windows Server.
You need to ensure that only specific applications can modify the data in protected folders on Server1.
Solution: From App & browser control, you configure the Reputation-based protection.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
NEW QUESTION 78
You have two Azure virtual machines named VM1 and VM2. VM1 is backed up to an Azure Recovery Services vault daily and retains backups for 30 days.
You need to restore an individual file named C:\Data\Important.docx from VM1 to VM2. The solution must minimize administrative effort.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Text Description automatically generated
Reference:
https://docs.microsoft.com/en-us/azure/backup/backup-azure-restore-files-from-vm
NEW QUESTION 79
You have an Azure subscription that has Microsoft Defender for Cloud enabled.
You have 50 Azure virtual machines that run Windows Server.
You need to ensure that any security exploits detected on the virtual machines are forwarded to Defender for Cloud.
Which extension should you enable on the virtual machines?
- A. Microsoft Dependency agent
- B. Log Analytics agent for Azure VMs
- C. Guest Configuration agent
- D. Vulnerability assessment for machines
Answer: D
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/defender-for-cloud/deploy-vulnerability-assessment-vm
NEW QUESTION 80
Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains the domains shown in the following table.
You are implementing Microsoft Defender for Identity sensors.
You need to install the sensors on the minimum number of domain controllers. The solution must ensure that Defender for Identity will detect all the security risks in both the domains.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/defender-for-identity/technical-faq#deployment
https://docs.microsoft.com/en-us/defender-for-identity/install-step4
NEW QUESTION 81
You are planning the europe.fabrikam.com migration to support the on-premises migration plan-Where should you install the Password Export Server (PES) service, where should you generate the encryption key? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Topic 2, Contoso, Ltd
Existing Environment
Active Directory Environment
Contoso has an on-premises Active Directory Domain Services (AD DS) domain named contoso.com that syncs with an Azure Active Directory (Azure AD) tenant. The AD DS domain contains the domain controllers shown in the following table.
Contoso recently purchased an Azure subscription.
The functional level of the forest is Windows Server 2012 R2. The functional level of the domain is Windows Server 2012. The forest has the Active Directory Recycle Bin enabled.
The contoso.com domain contains the users shown in the following table.
The contoso.com domain has the Group Policy Objects (GPOs) shown in the following table.
The contoso.com domain has the Password Settings Objects (PSOs) shown in the following table.
Server Infrastructure
The contoso.com domain contains servers that run Windows Server 2022 as shown in the following table.
By using Windows Firewall with Advanced Security, the servers have isolation connection security rules configured as shown in the following table.
Server4 has no connection security rules.
Server4 Configurations
Server4 has the effective Group Policy settings for user rights as shown in the following table.
Server4 has the disk configurations shown in the following exhibit.
Virtualization Infrastructure
The contoso.com domain has the Hyper-V failover clusters shown in the following table.
Technical Requirements
Contoso identifies the following technical requirements:
Promote a new server named DC4 that runs to Windows Server 2022 to a domain controller.
Replicate the virtual machines from Cluster2 to an Azure Recovery Services vault.
Centrally manage performance alerts in Azure for all the domain controllers.
Ensure that User1 can recover objects from the Active Directory Recycle Bin.
Migrate Share1 to Server2, including all the share and folder permissions.
Back up Server4 and all data to an Azure Recovery Services vault.
Use Hyper-V Replica to protect the virtual machines in Cluster3.
Implement BitLocker Drive Encryption (BitLocker) on Server4.
Whenever possible, use the principle of least privilege.
NEW QUESTION 82
You have five Azure virtual machines.
You need to collect performance data and Windows Event logs from the virtual machines. The data collected must be sent to an Azure Storage account.
What should you install on the virtual machines?
- A. the Dependency agent
- B. the Azure Monitor agent
- C. the Telegraf agent
- D. the Azure Connected Machine agent
- E. the Azure Diagnostics extension
Answer: E
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/agents/diagnostics-extension-overview
NEW QUESTION 83
You have an Azure virtual machine named VM1 that runs Windows Server.
You plan to deploy a new line-of-business (LOB) application to VM1.
You need to ensure that the application can create child processes.
What should you configure on VM1?
- A. Microsoft Defender SmartScreen
- B. Exploit protection
- C. Microsoft Defender Application Control
- D. Microsoft Defender Credential Guard
Answer: B
Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/customize-exploit-protection?view=o365-worldwide
NEW QUESTION 84
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.
Server3 contains a share named Share1.
On Server1, DHCP has the following configurations:
Conflict detection attempts: 3
An IPv4 scope named Scope1 that has the following settings:
1.Address Pool: 172.16.10.100 - 172.16.10.130
2.Address Leases:
- 172.16.10.100 computer1.contoso.com
- 172.16.10.101 computer2.contoso.com
Reservations: 172.16.10.101 computer2.contoso.com
Policies: Policy1
You perform the following actions:
* On Server1, you run
Export-DhcpServer -File \\Server3\Share1\File1.xml.
* On Server2, you run
Import-DhcpServer -File \\Server3\Share1\File1.xml
-BackupPath \\Server3\Share1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Text Description automatically generated
Reference:
https://docs.microsoft.com/en-us/powershell/module/dhcpserver/export-dhcpserver?view=windowsserver2022-p
https://docs.microsoft.com/en-us/powershell/module/dhcpserver/import-dhcpserver?view=windowsserver2022-p
NEW QUESTION 85
You have a Site-to-Site VPN between an on-premises network and an Azure VPN gateway. BGP is disabled for the Site-to-Site VPN.
You have an Azure virtual network named Vnet1 that contains a subnet named Subnet1. Subnet1 contains a virtual machine named Server1.
You can connect to Server1 from the on-premises network.
You extend the address space of Vnet1. You add a subnet named Subnet2 to Vnet1. Subnet2 uses the extended address space. You deploy an Azure virtual machine named Server2 to Subnet2.
You cannot connect to Server2 from the on-premises network. Server1 can connect to Server2.
You need to ensure that you can connect to Subnet2 from the on-premises network.
What should you do?
- A. Update the routing information on the on-premises routers.
- B. Add an additional Site-to-Site VPN between the on-premises network and Vnetl.
- C. Add a private endpoint to Subnet2.
- D. To Subnet2. add a route table that contains a user-defined route.
Answer: A
NEW QUESTION 86
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains servers that run Windows Server as shown in the following table.
Server1 has the connection security rules shown in the following table.
Answer:
Explanation:
NEW QUESTION 87
You have an on-premises server named Server1 that runs Windows Server and has the Hyper-V server role installed.
You have an Azure subscription.
You plan to back up Server1 to Azure by using Azure Backup.
Which two Azure Backup options require you to deploy Microsoft Azure Backup Server (MABS)? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. Bare Metal Recovery
- B. Hyper-V Virtual Machines
- C. System State
- D. Files and folders
Answer: A,C
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/backup/backup-mabs-system-state-and-bmr
NEW QUESTION 88
You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant by using password hash synchronization.
You have a Microsoft 365 subscription.
All devices are hybrid Azure AD-joined.
Users report that they must enter their password manually when accessing Microsoft 365 applications.
You need to reduce the number of times the users are prompted for their password when they access Microsoft
365 and Azure services.
What should you do?
- A. In the DNS zone of the AD DS domain, create an autodiscover record.
- B. From Azure AD Connect, enable single sign-on (SSO).
- C. From Azure AD Connect, configure pass-through authentication.
- D. In Azure AD. configure a Conditional Access policy for the Microsoft Office 365 applications.
Answer: B
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso-quick-start
NEW QUESTION 89
You have three servers named Server1. Server1 and Server3 that run Windows Server and have the hyper V server rote installed. Server 1 hosts an Azure Migrate appliance named Migrate1.
You plan to migrate virtual machines to Azure.
You need to ensure that any new virtual machines created on Server 1. Server2 and Server3 are available in Azure Migrate
What should you do?
- A. On the DNS server used by Migrate 1, create a GlobalName zone.
- B. On Migrate1, set the Startup Type of the Computer Browser service to Automatic
- C. On Migrate1, add a discovery source.
- D. On the network that has Migrate1 deployed, deploy a WINS server.
Answer: C
NEW QUESTION 90
Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains the domains shown in the following table.
You are implementing Microsoft Defender for Identity sensors.
You need to install the sensors on the minimum number of domain controllers. The solution must ensure that Defender for Identity will detect all the security risks in both the domains.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Text, table Description automatically generated
Reference:
https://docs.microsoft.com/en-us/defender-for-identity/technical-faq#deployment
https://docs.microsoft.com/en-us/defender-for-identity/install-step4
NEW QUESTION 91
You have an Azure virtual machine named VM1.
You enable Microsoft Defender SmartScreen on VM1.
You need to ensure that the SmartScreen messages displayed to users are logged.
What should you do?
- A. From a command prompt, run WinRM quickconfig.
- B. From Event Viewer, enable the Debug log.
- C. From the Windows Security app. configure the Virus & threat protection settings.
- D. From the local Group Policy, modify the Advanced Audit Policy Configuration settings.
Answer: B
Explanation:
Reference:
https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview
NEW QUESTION 92
......
Pass Your AZ-801 Dumps as PDF Updated on 2022 With 122 Questions: https://passking.actualtorrent.com/AZ-801-exam-guide-torrent.html