Get Jul-2025 updated Exam AZ-801 Dumps with New Questions [Q48-Q67]

ExamBoosts July 15, 2025 AZ-801 > Microsoft 0

4/5 - (1 vote)

Get Jul-2025 updated Exam AZ-801 Dumps with New Questions

100% Pass Guarantee for AZ-801 Exam Dumps with Actual Exam Questions

Microsoft AZ-801 exam covers a wide range of topics related to hybrid cloud management, including Azure Arc-enabled servers, Azure site recovery, Azure backup, Azure file sync, and Azure Update Management. AZ-801 exam also tests the candidate’s knowledge of security and compliance in hybrid environments.

Microsoft AZ-801: Configuring Windows Server Hybrid Advanced Services is a certification exam that is designed to test the skills and knowledge of IT professionals who are responsible for configuring and managing hybrid environments that include both on-premises and cloud services. AZ-801 exam focuses on advanced skills related to Windows Server and hybrid environments. Passing AZ-801 exam will demonstrate that you have the skills and knowledge required to configure and manage advanced Windows Server hybrid services.

NO.48 You have a Hyper-V failover cluster named Cluster1 at a main datacenter. Cluster1 contains two nodes that have the Hyper-V server role installed. Cluster1 hosts 10 highly available virtual machines.
You have a cluster named Cluster2 in a disaster recovery site. Cluster2 contains two nodes that have the Hyper-V server role installed.
You plan to use Hyper-V Replica to replicate the virtual machines from Cluster1 to Cluster2.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/virtualization/community/team-blog/2012/20120327-why-is-the-hyper-v-replica-broker-required

NO.49 You are planning the www.fabrikam.com website migration to support the Azure migration plan.
How should you configure WebApp1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/azure/app-service/app-service-web-tutorial-custom-domain?tabs=a%2Cazurecli

NO.50 You have an Azure virtual machine named VM1 that runs Windows Server. VM1 has boot diagnostics configured to use a managed storage account.
You are troubleshooting connectivity issue on VM1.
You need to run a PowerShell cmdlet on VM1 by using the Azure Serial Console.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Explanation
Graphical user interface, text, application, email Description automatically generated

Reference:
https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/serial-console-overview
https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/serial-console-windows

NO.51 You need to create a Hyper-V hyper-converged cluster that stores virtual machines by using Storage Spaces Owed Which three actions should you perform in sequence? To answer, move the appropriate anions from the list of actions to the answer area and arrange them in the correct order.

Explanation:

NO.52 You have five Azure virtual machines. You have a dedicated Azure Storage account to collect performance data. You need to send the collected data directly to the Azure Storage account. What should you install on the virtual machines?

the Telegraf agent

the Azure Monitor agent

the Dependency agent

the Azure Diagnostics extension

the Azure Connected Machine agent

NO.53 You have a failover cluster named Cluster1 that contains three Windows Server nodes named Node 1, Node2. and Node3.
You need to deploy a Storage Spaces Direct virtual disk to Cluster1.
You add the following disks to each node:
* Three 512-6B NVMe disks
* Three 3-TB diskS
* Three 1-TB SSD disks
On Cluster1. you enable Storage Spaces Direct and add the new disks.
What is the total amount of disk space available for the Storage Spaces Direct virtual disk, and which operations are cached for the SSD and HDD disks? To answer, select the appropriate options in the answer area.

NO.54 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that runs Windows Server.
You need to ensure that only specific applications can modify the data in protected folders on Server1.
Solution: From App & browser control, you configure the Exploit protection settings.
Does this meet the goal?

Yes

Reference:
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/customize-controlled-folders?view=o

NO.55 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that runs Windows Server.
You need to ensure that only specific applications can modify the data in protected folders on Server1.
Solution: From Virus & threat protection, you configure Controlled folder access.
Does this meet the goal?

Yes

Reference:
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/customize-controlled-folders?view=o

NO.56 You have an Azure virtual machine named VM1 that runs Windows Server.
You plan to deploy a new line-of-business (LOB) application to VM1.
You need to ensure that the application can create child processes.
What should you configure on VM1?

Microsoft Defender Credential Guard

Microsoft Defender Application Control

Microsoft Defender SmartScreen

Exploit protection

Reference:
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/customize-exploit-protection?view=o365-worldwide

NO.57 You have an Azure virtual machine named VM1 that runs Windows Server. VM1 has boot diagnostics configured to use a managed storage account.
You are troubleshooting connectivity issue on VM1.
You need to run a PowerShell cmdlet on VM1 by using the Azure Serial Console.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Explanation
Graphical user interface, text, application, email Description automatically generated

Reference:
https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/serial-console-overview
https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/serial-console-windows

NO.58 With which servers can Server1 and Server3 communicate? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.59 Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains a user named User1 that has following attributes:
* whenCreated: 8/16/2023 8:04:55 AM
* distinguishedName: CN=Userl,DC=contoso,DC=com
* objectGUID: ef91eeG0-d371-4ee4-9c35-7da64c432a67
* objectSID: S-l-5-21-2106002304-3506747707-1284373444-1610
You need to use the Active Directory Migration Tool (ADMT) to migrate User1 to an AD DS forest named fabrikam.com. Which attributes will change after you migrate User1 to fabrikam.com?

distinguishedName only

distinguishedNane and objectSID only

distinguishedHame, objectSID, and whenCreated only

distinguishedName. objectGUID, and objectSID only

distinguishedName, objectGUID, objectSID, and whenCreated

NO.60 Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains the domains shown in the following table.
You are implementing Microsoft Defender for Identity sensors.
You need to install the sensors on the minimum number of domain controllers. The solution must ensure that Defender for Identity will detect all the security risks in both the domains.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/defender-for-identity/technical-faq#deployment
https://docs.microsoft.com/en-us/defender-for-identity/install-step4

NO.61 You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant.
The AD DS domain contains a domain controller named DC1. DC1 does NOT have internet access.
You need to configure password security for on-premises users. The solution must meet the following requirements:
Prevent the users from using known weak passwords.
Prevent the users from using the company name in passwords.
What should you do? To answer, drag the appropriate configurations to the correct targets. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-password-ban-bad-on-premises-deploy

NO.62 You have a failover cluster named Cluster1 that contains three nodes.
You plan to add two file server cluster roles named File1 and File2 to Cluster1. File1 will use the File Server for general use role. File2 will use the Scale-Out File Server for application data role.
What is the maximum number of nodes for File1 and File2 that can concurrently serve client connections? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation
Graphical user interface, application Description automatically generated

Reference:
https://docs.microsoft.com/en-us/windows-server/failover-clustering/sofs-overview

NO.63 You have a failover cluster named Cluster1 that hosts an application named App1.
The General tab in App1 Properties is shown in the General exhibit (Click the General Tat) The failover tab in App1 Properties is shown in the failover exhibit (Click the Failover tab.) Server 1 shuts down unexpectedly.
You need to ensure that when you start Server 1. App1 continues to run on Server2 Solution: From the General settings, you increase the priority of Server2 in the Preferred Owners list.
Does this meet the goal?

Yes

NO.64 You have a failover cluster named Cluster1 that contains three nodes.
You plan to add two file server cluster roles named File1 and File2 to Cluster1. File1 will use the File Server for general use role. File2 will use the Scale-Out File Server for application data role.
What is the maximum number of nodes for File1 and File2 that can concurrently serve client connections? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/windows-server/failover-clustering/sofs-overview

NO.65 You have a failover cluster named Cluster1 that hosts an application named App1.
The General tab in App1 Properties is shown in the General exhibit (Click the General Tat)
The failover tab in App1 Properties is shown in the failover exhibit (Click the Failover tab.)
Server 1 shuts down unexpectedly.
You need to ensure that when you start Server 1. App1 continues to run on Server2
Solution: From the General settings, you increase the priority of Server2 in the Preferred Owners list.
Does this meet the goal?

Yes

NO.66 You need to configure BitLocker on Server4.
On which volumes can you turn on BitLocker, and on which volumes can you turn on auto-unlock? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/windows-server/storage/refs/refs-overview
https://docs.microsoft.com/en-us/powershell/module/bitlocker/enable-bitlockerautounlock?view=windowsserver2022-ps

NO.67 Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a print server named Server1. All printers are deployed to users by using a Group Policy Object (GPO) named GPO1.
You deploy a new server named Server2.
You need to decommission Server1. The solution must meet the following requirements:
Migrate the shared printers to Server2 by using the Printer Migration Wizard.
Ensure that the users use the printers on Server2.
Minimize downtime for the users.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.