Microsoft Configuring Windows Server Hybrid Advanced Services (AZ-801)
Get full access to the updated question bank and confidently prepare for your exam.
Vendor
Microsoft
Certification
Infrastructure
Content
248 Qs
Status
Verified
Updated
4 hours ago
Test the Practice Engine
Experience our interactive testing environment with free demo questions
Premium Bundle
Complete Success Suite
Save $9 Instantly
-
✓Full PDF + Interactive Engine Everything you need to pass
-
✓All Advanced Question Types Drag & Drop, Hotspots, Case Studies
-
✓Priority 24/7 Expert Support Direct line to certification leads
-
✓90 Days Free Priority Updates Stay current as exams change
Success Metric
98.4% Pass Rate
Standard Simulation
Practice Engine
One-Time Payment
-
Web-Based (Zero Install)
-
Real Testing Environment Virtual & Practice Modes
-
Interactive Engine Drag & Drop, Hotspots
-
60 Days Free Updates
Compatible with All Devices
Basic Tier
PDF Study Guide
Digital Access
- ✓ Exam Questions (PDF)
- ✓ Mobile Friendly
- ✓ 60 Days Updates
Verified 50-Question Preview (AZ-801)
Verified Community
The CertoMetrics Standard.
Recommend the #1 platform for verified Microsoft certification resources.
Success Network
Help a Colleague Succeed.
Invite a peer to get their own updated AZ-801 prep kit.
Exam Overview
The Microsoft Configuring Windows Server Hybrid Advanced Services (AZ-801) exam is crucial for IT professionals aiming to master the complexities of modern server infrastructure. This certification validates your advanced skills in implementing and managing Windows Server workloads across on-premises, hybrid, and cloud environments. By demonstrating proficiency in securing, migrating, and ensuring high availability for critical services, you become an invaluable asset in organizations transitioning to or operating within a hybrid cloud model. Earning the AZ-801, coupled with AZ-800, solidifies your expertise as a Windows Server Hybrid Administrator, opening doors to advanced roles and showcasing your capability to design, deploy, and maintain robust, scalable, and secure server solutions that bridge traditional IT with the power of Azure.
Questions
40-60
Passing Score
700/1000
Duration
120 Minutes
Difficulty
Expert
Level
Associate
Skills Measured
Career Path
Target Roles
Common Questions
Is the material up to date?
Yes. We update our question bank weekly to match the latest Microsoft standards. You get free updates for 90 days.
What format do I get?
You get instant access to both the **PDF** (for reading) and our **Premium Test Engine** (for exam simulation).
Is there a guarantee?
Absolutely. If you fail the AZ-801 exam using our materials, we offer a full money-back guarantee.
When do I get the download?
Instantly. The download link is available in your dashboard immediately after payment is confirmed.
Free Study Guide Samples
Previewing updated AZ-801 bank (50 Questions).
Case Study- Fabrikam, Inc.
You are planning the data share migration to support the on-premises migration plan.
What should you use to perform the migration?
Correct Option: A
✅ Option A (Correct) Reasoning: Storage Migration Service (SMS) is the modern, Microsoft-recommended tool for migrating file servers. It is integrated into Windows Server 2019 and later. SMS simplifies the process by inventorying data on source servers, transferring the data, shares, and configurations to a new destination server, and then seamlessly cutting over the identity of the source server. This ensures that users and applications can continue to access resources without reconfiguration, making it the ideal choice for an on-premises data share migration.
❌ Why the other choices are incorrect:
- Option B is incorrect: The Microsoft File Server Migration Toolkit (FSMT) is an older, deprecated tool that has been replaced by the Storage Migration Service. It is not the recommended solution for modern server environments.
- Option C is incorrect: File Server Resource Manager (FSRM) is a suite of tools for managing and classifying data on file servers, such as setting quotas and file screens. It is not a migration tool.
- Option D is incorrect: Windows Server Migration Tools are a set of PowerShell cmdlets for migrating specific roles and features. While they can migrate role settings, they are not a comprehensive solution for migrating the actual file data, shares, and server identity in the orchestrated way that Storage Migration Service provides.
Reference: https://learn.microsoft.com/en-us/windows-server/storage/storage-migration-service/overview
You are planning the migration of APP3 and APP4 to support the Azure migration plan.
What should you do on Cluster1 and in Azure before you perform the migration? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
The provided solution correctly identifies the initial steps for migrating on-premises Hyper-V virtual machines (VMs) to Azure using the Azure Migrate service. The process always begins in the Azure portal, followed by actions in the on-premises environment.
You need to implement alerts for the domain controllers. The solution must meet the technical requirements.
What should you do on the domain controllers, and what should you create on Azure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
On the domain controllers: Install the Azure Monitor agent.
To meet the requirement of centrally managing performance alerts in Azure, the Azure Monitor Agent (AMA) must be installed on the on-premises domain controllers. This agent is responsible for collecting performance counters, events, and other telemetry data from the servers and sending it to Azure Monitor.
In Azure: Create an Azure Log Analytics workspace.
An Azure Log Analytics workspace is the required destination for data collected by the Azure Monitor Agent. This workspace acts as a centralized repository in Azure. Once the performance data from the domain controllers is ingested, you can analyze it and configure alert rules based on specific performance thresholds to meet the technical requirement.
Case Study- Contoso Ltd.
You need to meet the technical requirements for User1.
To which group in contoso.com should you add User1?
Correct Option: A
✅ Option A (Correct) Reasoning: Although the specific technical requirements for User1 are not provided in the case study snippet, the Domain Admins group has the highest level of privilege within an Active Directory domain. Membership in this group is required for tasks such as installing and removing domain controllers, managing all Group Policies, and modifying the membership of all other administrative groups (including Enterprise Admins and Schema Admins within its own domain). It is the most likely correct answer when a task requires broad, domain-wide administrative control.
❌ Why the other choices are incorrect:
- Option B is incorrect: The Account Operators group has limited permissions to create, modify, and delete most user accounts and groups, but they cannot modify administrative accounts or groups. This role is insufficient for high-level domain management.
- Option C is incorrect: The Schema Admins group is an enterprise-level group with the sole permission to modify the Active Directory schema. This is a highly specialized and rarely used permission, not intended for general domain administration.
- Option D is incorrect: The Backup Operators group can back up and restore files on domain controllers, bypassing normal file permissions. However, they do not have permissions to manage users, groups, or configure domain services.
Reference: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/appendix-b--privileged-accounts-and-groups-in-active-directory
You have two Azure virtual machines that run Windows Server.
You plan to create a failover cluster that will host the virtual machines.
You need to configure an Azure Storage account that Will used by the cluster as a cloud witness. The solution must maximize resiliency.
Which type of redundancy should you configure for the storage account?
Correct Option: B
✅ Option B (Correct) Reasoning: Geo-zone-redundant storage (GZRS) provides the highest level of resiliency for Azure Storage. It combines synchronous replication across three separate Availability Zones within the primary region with asynchronous replication to a secondary region. This protects the cloud witness against both zonal failures (like a datacenter outage) and a complete regional disaster, fulfilling the requirement to maximize resiliency.
❌ Why the other choices are incorrect:
- Option A is incorrect: Geo-redundant storage (GRS) replicates data to a secondary region but uses locally-redundant storage (LRS) in the primary region, which is not resilient to a datacenter-level failure. GZRS is more resilient within the primary region.
- Option C is incorrect: Locally-redundant storage (LRS) only replicates data within a single datacenter, offering the lowest resiliency and no protection against zonal or regional failures.
- Option D is incorrect: Zone-redundant storage (ZRS) protects against failures of an entire Availability Zone within a region but offers no protection if the entire primary region fails. GZRS adds this layer of protection.
Reference: https://learn.microsoft.com/en-us/azure/storage/common/storage-redundancy
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a failover cluster named Cluster1.
You need to configure Cluster-Aware Updating (CAU) on the cluster by using Windows Admin Center (WAC).
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
The provided sequence correctly outlines the process for configuring Cluster-Aware Updating (CAU) on a failover cluster using Windows Admin Center (WAC).
✅ Step 1: Add Cluster1 to WAC.
Reasoning: The initial step for managing any server, cluster, or PC with Windows Admin Center is to add it as a connection. This action establishes the management context and allows WAC to interact with the target cluster.
✅ Step 2: Enable CredSSP.
Reasoning: When performing administrative actions on a remote cluster from WAC, a double-hop authentication issue can occur. Enabling the Credential Security Support Provider (CredSSP) is required to delegate the user's credentials from the WAC gateway to the cluster nodes, allowing for the necessary permissions to configure roles and settings.
✅ Step 3: Add the Cluster-Aware Updating role.
Reasoning: After establishing a connection and resolving authentication, the final step is to add the CAU clustered role. This role is the core component that enables the cluster to automatically orchestrate the process of installing updates on each node while maintaining service availability.
You have a three-node failover cluster.
You need to run pre-scripts and post-scripts when Cluster-Aware Updating (CAU) runs. The solution must minimize administrative effort.
What should you use?
Correct Option: A
Correct Answer: A
Reasoning: Cluster-Aware Updating (CAU) uses Run Profiles to define advanced configuration options for an Updating Run. A Run Profile is an XML file that contains settings, including paths to PowerShell scripts that should be executed before and after the update process on each cluster node. Specifically, the <PreUpdateScript> and <PostUpdateScript> elements within the Run Profile are used to specify these scripts. Using a single Run Profile is the most efficient and integrated method to automate pre- and post-update tasks, thereby minimizing administrative effort.
Incorrect Answers:
- B: Azure Functions is incorrect. Azure Functions are a serverless compute service in Azure and are not a native, integrated component for managing on-premises failover cluster updating processes. Using them would add unnecessary complexity.
- C: Windows Server Update Services (WSUS) is incorrect. WSUS is a service for managing and distributing updates to computers in a network. While CAU retrieves updates from a source like WSUS, WSUS itself does not have the capability to run scripts as part of the cluster update orchestration.
- D: Scheduled tasks is incorrect. While you could create scheduled tasks, it would be extremely difficult to trigger them precisely in sync with the CAU process (i.e., just before a node is put into maintenance mode and just after it's brought back online). This would be a manual, complex solution that increases, rather than minimizes, administrative effort.
Reference: https://learn.microsoft.com/en-us/windows-server/failover-clustering/cluster-aware-updating-options
Your company uses Storage Spaces Direct.
You need to view the available storage in a Storage Space Direct storage pool.
What should you use?
Correct Option: C
✅ Option C (Correct)
Reasoning: The Get-StorageSubSystem PowerShell cmdlet is used to get the storage provider objects on a system. Storage Spaces Direct (S2D) is managed by the 'Windows Storage Spaces Management Provider'. By retrieving this subsystem object, you can then pipe it to other cmdlets like Get-StoragePool to view detailed information about the associated storage pools, including total capacity, allocated space, and ultimately the available storage. This cmdlet is a fundamental part of programmatically managing and querying the Windows Server storage stack.
For example, you could run a command similar to this:
Get-StorageSubSystem -FriendlyName "*S2D*" | Get-StoragePool | Select-Object FriendlyName, Size, AllocatedSize
❌ Why the other choices are incorrect:
- Option A is incorrect: Resource Monitor is a performance monitoring tool. It provides real-time data on CPU, memory, disk I/O, and network activity, but it does not provide detailed capacity information for Storage Spaces Direct pools.
- Option B is incorrect: Disk Management is a legacy MMC snap-in for managing local disks, partitions, and simple volumes. It cannot interpret or manage the complex, distributed nature of a Storage Spaces Direct storage pool.
- Option D is incorrect: While Windows Admin Center (WAC) is a modern and highly effective graphical tool for managing Storage Spaces Direct and viewing its storage capacity, the question likely seeks the specific underlying PowerShell cmdlet. In a multiple-choice exam context where a specific, correct cmdlet is an option, it is often considered a more precise answer than a general GUI tool.
Get-StorageSubSystemis the foundational cmdlet for interacting with the storage provider itself.
Reference: https://learn.microsoft.com/en-us/powershell/module/storage/get-storagesubsystem
You need to use a comma-separated value (CSV) file to import server inventory to Azure Migrate.
Which fields are mandatory for each entry in the CSV file?
Correct Option: A
Rationale Breakdown
To perform an Azure VM assessment on servers imported via a CSV file, Azure Migrate requires a specific set of mandatory metadata fields. These fields provide the essential information needed to determine server compatibility and recommend appropriate Azure VM sizes.
✅ Option A (Correct)
Reasoning: According to the official documentation for creating an assessment for imported servers, the mandatory properties for an Azure VM assessment are: Server name, Cores, Memory, and OS name. These four fields allow Azure Migrate to identify the server and provide a basic 'as-is' or 'on-premises sizing' assessment by mapping the on-premises CPU cores and memory to a suitable Azure VM SKU. The OS name is critical for determining compatibility and licensing costs.
❌ Why the other choices are incorrect:
- Option B is incorrect: While IP addresses, OS version, and the number of disks are all valid and useful fields in the CSV template, they are not part of the minimum mandatory set required to create the assessment itself. The assessment can be created without them, although it would lack detail for networking and storage. OS Name is mandatory, not OS version.
- Option C is incorrect: This option includes performance data (CPU utilization percentage), which is only required for a 'performance-based' assessment, not a basic 'as-is' assessment. While recommended for more accurate sizing, it is not a mandatory field for creating the initial assessment. IP addresses and disk size are also not part of the core mandatory set for compute sizing.
Reference: https://learn.microsoft.com/en-us/azure/migrate/how-to-create-assessment#create-an-assessment-for-imported-servers
You have a server named Server1 that runs Windows Server and has the Web Server (IIS) server role installed. Server1 hosts an ASP.NET Core web app named WebApp1 and the app's source files.
You install Docker on Server1.
You to ensure that you can deploy WebApp1 to an Azure App Service web app from the Azure Container Registry.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them.
The provided solution correctly outlines the standard workflow for containerizing an application and publishing it to a remote registry. The process must follow this specific sequence to successfully prepare the web app for deployment from Azure Container Registry (ACR).
✅ Step 1: Create a Dockerfile.
Reasoning: This is the foundational step. A Dockerfile is a text-based script of instructions that Docker uses to build a container image. It specifies the base image, copies the ASP.NET Core application source files into the image, restores dependencies, builds the project, and defines the command to run the application.
✅ Step 2: Run the docker build command.
Reasoning: After defining the build instructions in the Dockerfile, the docker build command executes those instructions. It creates a local Docker image on Server1 that packages the WebApp1 application and all its dependencies, making it a portable and runnable unit.
✅ Step 3: Run the docker push command.
Reasoning: The final step is to upload the locally built image to the Azure Container Registry. The docker push command sends the image from Server1 to the remote ACR repository. Once in ACR, the image is accessible to other Azure services, such as Azure App Service, for deployment.
Your on-premises network has a 200-Mbps connection to Azure and contains a server named Server1 that stores 70 TB of data files.
You have an Azure Storage account named storage1.
You plan to migrate the data files from Server I to a blob storage container in storage1. Testing shows that copying the data files by using azcopy will take approximately 35 days.
You need to minimize how long it will take to migrate the data to Azure.
What should you use?
Premium Solution Locked
Unlock all 248 answers & explanations
You have an Azure virtual machine named VM1 that runs Windows Server.
When you attempt to install the Azure Performance Diagnostics extension on VM1, the installation fails.
You need to identify the cause of the installation failure.
What are two possible ways to achieve the goal? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point
Premium Solution Locked
Unlock all 248 answers & explanations
You have an Azure Active Directory Domain Services (Azure AD DS) domain named aadds.contoso.com.
You have an Azure virtual network named Vnet1. Vnet1 contains two virtual machines named VM1 and VM2 that run Windows Server. VM1 and VM2 are joined to aadds.contoso.com.
You create a new Azure virtual network named Vnet2. You add a new server named VM3 to Vnet2.
When you attempt to join VM3 to aadds.contoso.com, you get an error message that the domain cannot be found.
Premium Solution Locked
Unlock all 248 answers & explanations
You have five Azure virtual machines. You have a dedicated Azure Storage account to collect performance data.
You need to send the collected data directly to the Azure Storage account.
What should you install on the virtual machines?
Premium Solution Locked
Unlock all 248 answers & explanations
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains 20 Active Directory sites. All user management is performed from a central site.
You add users to a group.
You discover that group changes do NOT appear on a domain controller in a remote site.
You need to identify whether the group changes appear on other domain controllers.
What should you use?
Premium Solution Locked
Unlock all 248 answers & explanations
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains servers that run Windows Server as shown in the following table.
Server1 has the connection security rules shown in the following table
Server2 has the connection security rules shown in the following table
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Premium Solution Locked
Unlock all 248 answers & explanations
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains three domain controllers named DC1, DC2, and DC3.
You connect a Microsoft Defender for Identity instance to the domain.
You need to onboard all the domain controllers to Defender for Identity.
What should you run on the domain controllers?
Premium Solution Locked
Unlock all 248 answers & explanations
Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the accounts shown in the following table.
The domain is configured to store BitLocker recovery keys in Active Directory.
Admin1 and Admin2 perform the following configurations:
• Admin1 turns on BitLocker Drive Encryption (BitLocker) for volume C on Server1
• Admin1 moves Server1 to OU1.
• Admin2 turns on BitLocker for removable volume E on Server2.
• Admin2 moves removable volume E from Server2 to Server1 and unlocks the volume.
On which Active Directory Object can you View each BitLocker recovery key? To answer, the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Premium Solution Locked
Unlock all 248 answers & explanations
You have an on-premises server named Server1 and a Microsoft Sentinel instance.
You plan to collect Windows Defender Firewall events from Server1 and analyze the event data by using Microsoft Sentinel.
What should you install on Server1, and which information should you provide during the installation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Premium Solution Locked
Unlock all 248 answers & explanations
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server.
You run Get-BitLockerVolume – MountPoint C,D | F1 *, Which generates the following output.
You need to ensure that volume D will be unlocked automatically when Server1 restarts.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Premium Solution Locked
Unlock all 248 answers & explanations
You are evaluating the technical requirements for Cluster2.
What is the minimum number of Azure Site Recovery Providers that you should install?
Premium Solution Locked
Unlock all 248 answers & explanations
You are planning the data share migration to support the on-premises migration plan.
What should you use to perform the migration?
Premium Solution Locked
Unlock all 248 answers & explanations
You are the europe.fabrikam.com migration to support on-premises migration plan.
Where you install the Password Export Server (PES) service, where should you generate the encryption key? To answer. select appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Premium Solution Locked
Unlock all 248 answers & explanations
Note: This question is pan of a series of questions that present the scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section. You will NOT be able to return to it. As a result, these questions will in the review screen.
You deploy Azure Migrate to an on-premises network.
You have an on-premises physical server named Server1 that runs Windows Saver and has the following configurations:
• Operating system disk 6m GB
• Data disk 3 TB
• NIC Teaming: Enabled
• Mobility service: Installed
• Windows Firewall: Enabled
• Microsoft Defender Antivirus: Enabled
You need to ensure that you can use Azure Migrate to migrate Server1.
Solution: You disable Microsoft Defender Antivirus on Server1.
Does this meet the goal?
Premium Solution Locked
Unlock all 248 answers & explanations
Note: This question is pan of a series of questions that present the scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section. You will NOT be able to return to it. As a result, these questions will in the review screen.
You deploy Azure Migrate to an on-premises network.
You have an on-premises physical server named Server1 that runs Windows Saver and has the following configurations:
• Operating system disk 6m GB
• Data disk 3 TB
• NIC Teaming: Enabled
• Mobility service: Installed
• Windows Firewall: Enabled
• Microsoft Defender Antivirus: Enabled
You need to ensure that you can use Azure Migrate to migrate Server1.
Solution: You disable Windows Firewall on Server1.
Does this meet the goal?
Premium Solution Locked
Unlock all 248 answers & explanations
Note: This question is pan of a series of questions that present the scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section. You will NOT be able to return to it. As a result, these questions will in the review screen.
You deploy Azure Migrate to an on-premises network.
You have an on-premises physical server named Server1 that runs Windows Saver and has the following configurations:
• Operating system disk 6m GB
• Data disk 3 TB
• NIC Teaming: Enabled
• Mobility service: Installed
• Windows Firewall: Enabled
• Microsoft Defender Antivirus: Enabled
You need to ensure that you can use Azure Migrate to migrate Server1.
Solution: You disable NIC Teaming on Server1.
Does this meet the goal?
Premium Solution Locked
Unlock all 248 answers & explanations
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that runs Windows Server.
You need to ensure that only specific applications can modify the data in protected folders on Server1.
Solution: From App & browser control, you configure Reputation-based protection
Does this meet the goal?
Premium Solution Locked
Unlock all 248 answers & explanations
You have a failover cluster named Cluster1 that contains the nodes shown in the following table.
A File Server for general use cluster role named HAFS is configured as shown in the General exhibit. (Click the General tab.)
The Advanced Policies settings for HAFS are configured as shown in the Advanced Policies exhibit (Click the Advanced Policies tab.)
For each of the following statements, select Yes if the statement is true. Otherwise, NO.
NOTE: Each correct selection is worth one point.
Premium Solution Locked
Unlock all 248 answers & explanations
Your network contains an Active Directory Domain Services (AD DS) domain. All domain members have Microsoft Defender Credential Guard with UEFI lock configured.
In the domain, you deploy a server named Server1 that runs Windows Server. You disable Credential Guard on Server1.
You need to ensure that Server1 is NOT subject to Credential Guard restrictions.
What should you do next?
Premium Solution Locked
Unlock all 248 answers & explanations
You have three servers named Server1, Server2, and Server3 that run Windows Server and have the Hyper-V server role installed. Server1 hosts an Azure Migrate appliance named Migrate1.
You plan to migrate virtual machines to Azure.
You need to ensure that any new virtual machines created on Server1, Server2, and Server3 are available in Azure Migrate.
What should you do?
Premium Solution Locked
Unlock all 248 answers & explanations
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The functional level of the forest is Windows Server 2012 R2. All domain controllers run Windows Server 2012 R2.
Sysvol replicates by using the File Replication Service (FRS).
You plan to replace the existing domain controllers with new domain controllers that will run Windows Server 2022.
You need to ensure that you can add the first domain controller that runs Windows Server 2022.
Solution: You raise the domain and forest functional levels.
Does this meet the goal?
Premium Solution Locked
Unlock all 248 answers & explanations
Note: This question is pan of a series of questions that present the scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section. You will NOT be able to return to it. As a result, these questions will in the review screen.
You deploy Azure Migrate to an on-premises network.
You have an on-premises physical server named Server1 that runs Windows Saver and has the following configurations:
• Operating system disk 6m GB
• Data disk 3 TB
• NIC Teaming: Enabled
• Mobility service: Installed
• Windows Firewall: Enabled
• Microsoft Defender Antivirus: Enabled
You need to ensure that you can use Azure Migrate to migrate Server1.
Solution: You shrink the data disk on Server1.
Does this meet the goal?
Premium Solution Locked
Unlock all 248 answers & explanations
You are planning the migration of Archive1 to support the on-premises migration plan.
What is the minimum number of IP addresses required for the nodes and cluster roles on Cluster3?
Premium Solution Locked
Unlock all 248 answers & explanations
Which domain controller should be online to meet the technical requirements for DC4?
Premium Solution Locked
Unlock all 248 answers & explanations
You need to create a Hyper-V hyper-converged cluster that stores virtual machines by using Storage Spaces Direct.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:
Premium Solution Locked
Unlock all 248 answers & explanations
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correa solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a failover cluster named Cluster1 that hosts an application named App1.
The General tab in Appl Properties is shown in the General exhibit. (Click the General tab.)
The Failover tab in App1 Properties is shown in the Failover exhibit (Click the Failover tab.)
Server 1 shuts down unexpectedly.
You need to ensure that when you start Server1, App1 continues to run on Server2.
Solution: You pause the Server1 node in Cluster 1 and then start Server 1.
Does this meet the goal?
Premium Solution Locked
Unlock all 248 answers & explanations
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correa solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a failover cluster named Cluster1 that hosts an application named App1.
The General tab in Appl Properties is shown in the General exhibit. (Click the General tab.)
The Failover tab in App1 Properties is shown in the Failover exhibit (Click the Failover tab.)
Server 1 shuts down unexpectedly.
You need to ensure that when you start Server1, App1 continues to run on Server2.
Solution: From the General settings, you increase the priority of Server2 in the Preferred Owner list.
Does this meet the goal?
Premium Solution Locked
Unlock all 248 answers & explanations
You have three Hyper-V hosts named Server1, Server2, and Server3 that run Windows Server. Server1 hosts a virtual machine named VM1.
You enable Hyper-V Replica to replicate VMI to Server2 and set the replication frequency to 30 seconds.
You need to extend the replication and create a second replica of VM1.
On which Hyper-V hosts should you configure the replication, and what is the minimum replication frequency you can use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Premium Solution Locked
Unlock all 248 answers & explanations
You have an Azure subscription that contains an Azure key vault named Vault1.
You plan to deploy a virtual machine named VM1 that will run Windows Server.
You need to enable encryption at host for VM 1. The solution must use customer-managed keys.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Premium Solution Locked
Unlock all 248 answers & explanations
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two servers named Server1 and Server2 that run Windows Server.
You need to ensure that you can manage Server2 by using the Computer Management console from Server1. The solution must use the principle of least privilege.
Which two Windows Defender Firewall with Advanced Security rules should you enable on Server2?
Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Premium Solution Locked
Unlock all 248 answers & explanations
You have 50 on-premises servers that run Windows Server. You have an Azure subscription that contains 50 virtual machines that run Windows Server.
You need to create an Azure Monitor alert that will be triggered if one of the servers or virtual machines has less than 10 percent available disk space.
What should you do first?
Premium Solution Locked
Unlock all 248 answers & explanations
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains servers that run Windows Server as shown in the following table.
Server1 has the connection security rules shown in the following table.
Server2 has the connection security rules shown in the following table.
Server3 has the connection security rules shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Premium Solution Locked
Unlock all 248 answers & explanations
You have an Azure virtual machine named VM1 that runs Windows Server. VM1 has boot diagnostics configured to use a managed storage account.
You are troubleshooting connectivity issue on VM1.
You need to run a PowerShell cmdlet on VM1 by using the Azure Serial Console.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Premium Solution Locked
Unlock all 248 answers & explanations
You have an Azure subscription.
You plan to deploy a virtual machine named VM1 to the East US Azure region and use Azure Site Recovery between availability zones.
You need to configure the disks on VM1 and the virtual network. The solution must meet the following requirements:
• Maximize the availability of VM1.
• Maintain the private IP address of VM1 during failover and failback operations.
What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Premium Solution Locked
Unlock all 248 answers & explanations
You have an Azure subscription that contains a user named User1 and the resources shown in the following table.
User1 has a computer named Computer1 that runs Windows 11. User1 works from home and establishes a Point-to-Site (P2S) connection to GW1 to access AppSvr1.
You deploy the resources shown in the following table.
User1 cannot access AppSvr2.
You need to ensure that User1 can access AppSvr2.
What should you do?
Premium Solution Locked
Unlock all 248 answers & explanations
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.
You need to perform the following tasks:
• Create a snapshot of contoso.com.
• Expose the snapshot as a read-only AD DS instance.
What should you use for each task? To answer, drag the appropriate tools to the correct tasks. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Premium Solution Locked
Unlock all 248 answers & explanations
You have an on-premises file server named Server 1 that runs Windows Server.
You have an Azure subscription.
Server1 contains a file share named Share1.
You need to migrate Share1 to an Azure virtual machine.
What should you use?
Premium Solution Locked
Unlock all 248 answers & explanations
HOTSPOT
-
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains three servers named Server1, Server2, and Server3 that run Windows Server. All the servers are on the same network and have network connectivity.
On Server1, Windows Defender Firewall has a connection security rule that has the following settings:
• Rule Type: Server-to-server
• Endpoint 1: Any IP address
• Endpoint 2: Any IP address
• Requirements: Require authentication for inbound connections and request authentication for outbound connections
• Authentication Method: Computer (Kerberos V5)
• Profile: Domain, Private, Public
• Name: Rule1
Server2 has no connection security rules.
On Server3, Windows Defender Firewall has a connection security rule that has the following settings:
• Rule Type: Server-to-server
• Endpoint 1: Any IP address
• Endpoint 2: Any IP address
• Requirements: Request authentication for inbound and outbound connections
• Authentication Method: Computer (Kerberos V5)
• Profile: Domain, Private, Public
• Name: Rule1
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Premium Solution Locked
Unlock all 248 answers & explanations
You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. The subscription contains the storage accounts shown in the following table.
You plan to enable boot diagnostics for VM1.
You need to configure storage for the boot diagnostics logs and snapshots.
Which storage account should you use?
Premium Solution Locked
Unlock all 248 answers & explanations
You have a generation 1 Azure virtual machine named VM1 that runs Windows Server and is joined to an Active Directory domain.
You plan to enable BitLocker Drive Encryption (Bit-Locker) on volume C of VM1.
You need to ensure that the BitLocker recovery key for VM1 is stored in Active Directory.
Which two Group Policy settings should you configure first? To answer, select the settings in the answer area.
NOTE: Each correct selection is worth one point.
Premium Solution Locked
Unlock all 248 answers & explanations
Full Question Bank Locked
You have reached the end of the free study guide preview. Upgrade now to unlock all 248 questions and the full simulation engine.
Certification Path
Related Certifications
Customer Reviews
Global Community Feedback
David M.
"The practice engine is incredible. It feels exactly like the real testing environment and helped me build so much confidence."
Sarah J.
"The PDF is very well organized and the explanations for the answers are actually helpful, not just random text."
Michael C.
"I was skeptical, but the content is high quality and definitely worth the price. I passed on my first try!"