AZ-801 Practice Test

AZ-801 Practice Test practice questions, page 10 of 13, with answer review and explanations.

Question 46

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains five servers that run Windows Server. The network also contains two workgroup servers that run Windows Server. You need to implement a connection security rule between the member servers and the workgroup servers. Which authentication method should you use?

  1. User (Kerberos V5)
  2. Computer certificate
  3. Computer (Kerberos V5)
  4. Computer (NTLMv2)

Question 47

You have a server that runs Windows Server. You need to enable the following security features: • Core isolation • Force randomization form images (Mandatory ASLR) Which Windows Security tile should you use to enable each feature? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 48

You have an Azure subscription that contains the Azure key vaults shown in the following table. You create a virtual machine that has the following configurations: • Name: VM1 • Resource group: RG1 • Azure region: East US • Operating system: Windows Server You need to enable Azure Disk Encryption for VM1. Which key vault can you use to store the encryption key for VM1?

  1. Vault1 only
  2. Vault1 or Vault2 only
  3. Vault1 or Vault3 only
  4. Vault1, Vault2, Vault3, or Vault4

Question 49

You have an Azure subscription that contains a network security group (NSG) named NSG1 and a virtual network named VNet1. NSG1 contains only default security rules. VNet1 contains the subnets shown in the following table. The subscription contains virtual machines that run Windows Server as shown in the following table. You configure just-in-time (JIT) VM access as shown in the following exhibit. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 50

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains a user named User1. You deploy a read-only domain controller (RODC) named RODC1. You need to ensure that User1 is a local administrator on RODC1. The solution must use the principle of least privilege. What should you use?

  1. ntdsutil.exe
  2. dsamain.exe
  3. net user
  4. Local Users and Groups