Microsoft AZ-801 Practice Exams
Last updated on Mar 31,2025- Exam Code: AZ-801
- Exam Name: Configuring Windows Server Hybrid Advanced Services
- Certification Provider: Microsoft
- Latest update: Mar 31,2025
You have an Azure virtual machine named VM1 that runs Windows Server.
You need to encrypt the contents of the disks on VM1 by using Azure Disk Encryption.
What is a prerequisite for implementing Azure Disk Encryption?
- A . Customer Lockbox for Microsoft Azure
- B . an Azure key vault
- C . a BitLocker recovery key
- D . data-link layer encryption in Azure
You have two servers named Host1 and Host2 that run Windows Server 2022 and are members of a workgroup named Contoso. Both servers have the Hyper-V server role installed and are identical in hardware and configuration.
Host1 contains three virtual machines. Each server is located in a separate site that connect by using a high-speed WAN link.
You need to replicate the virtual machines from Host1 to Host2 for a disaster recovery solution.
Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
- A . Use certificate-based authentication and enable TCP exceptions.
- B . Use Kerberos authentication and enable TCP exceptions.
- C . Enable Hyper-V replication for each virtual machine.
- D . Enable Host2 as a Replica server.
- E . Enable live migration for Host1 and Host2.
- F . Enable Host1 as a Replica server.
You deploy Azure Migrate to an on-premises network.
You have an on-premises physical server named Server1 that runs Windows Server and has the following configuration.
* Operating system disk 600 GB
* Data disic 3 TB
* NIC Teaming: Enabled
* Mobility service: installed
* Windows Firewall: Enabled
* Microsoft Defender Antivirus: Enabled
You need to ensure that you can use Azure Migrate to migrate Server1.
Solution: You shrink the data disk on Server1.
Does this meet the goal?
- A . Yes
- B . No
You have a Microsoft Sentinel deployment and 100 Azure Arc-enabled on-premises servers. All the Azure Arc-enabled resources are in the same resource group.
You need to onboard the servers to Microsoft Sentinel. The solution must minimize administrative effort.
What should you use to onboard the servers to Microsoft Sentinel?
- A . Azure Automation
- B . Azure Policy
- C . Azure virtual machine extensions
- D . Microsoft Defender for Cloud
You have five Azure virtual machines.
You need to collect performance data and Windows Event logs from the virtual machines. The data collected must be sent to an Azure Storage account.
What should you install on the virtual machines?
- A . the Azure Connected Machine agent
- B . the Azure Monitor agent
- C . the Dependency agent
- D . the Telegraf agent
- E . the Azure Diagnostics extension
You have an on-premises server named Served that runs Windows Server. You have an Azure subscription. You plan to back up the files and folders on Server1 to Azure by using Azure Backup. You need to define how long the backups will be retained.
What should you use to configure the retention?
- A . Backup center
- B . Windows Server Backup
- C . the Microsoft Azure Recovery Services (MARS) agent
- D . a Recovery Services vault
You have an Azure virtual machine named VM1 that runs Windows Server.
You plan to deploy a new line-of-business (LOB) application to VM1.
You need to ensure that the application can create child processes.
What should you configure on VM1?
- A . Microsoft Defender Credential Guard
- B . Microsoft Defender Application Control
- C . Microsoft Defender SmartScreen
- D . Exploit protection
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that runs Windows Server.
You need to ensure that only specific applications can modify the data in protected folders on Server1.
Solution: From Virus & threat protection, you configure Tamper Protection.
Does this meet the goal?
- A . Yes
- B . No
DRAG DROP
You have a server that runs Windows Server.
You plan to back up the server to an Azure Recovery Services vault once per week starting on the next Saturday.
You need to schedule the weekly backup and perform the initial backup as soon as possible.
In which order should you perform the actions? To answer, move all actions from the list of actions to the answer are and arrange them in the correct order.
HOTSPOT
Your network contains an Active Directory domain. The domain contains a domain controller named DC1 and a server named Server1 that runs Windows Server.
You need to enable event log subscriptions to forward events from DC1 to Server1.
Which command should you run to enable the Windows Event Collector service, and on which servers should you run the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
