AZ-801 Practice Test

Question 51

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server and is in an organizational unit (OU) named OU1. You have a Group Policy Object (GPO) that is linked to OU1 and has the Windows Defender SmartScreen settings shown in the following table. You have the apps shown in the following table. Which apps can you install on Server1?

1. App1 only
2. App1 and App2 only
3. App1 and App3 only
4. App1, App2, and App3

Question 52

You have an Azure subscription. The subscription contains a Microsoft Sentinel workspace named Workspace1 and 100 virtual machines that run Windows Server. You configure Workspace1 to collect logs from the virtual machines. You need to query the collected logs for failed logon events. Which table should you query?

1. SigninLogs
2. SecurityIncident
3. SecurityEvent
4. AuditLogs

Question 53

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains domain controllers that run Windows Server 2019 and are configured as shown in the following table. You plan to run the adprep /domainprep command Which domain controller should be available for the command to complete?

1. DC1
2. DC2
3. DC3
4. DC4

Question 54

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two users named User1 and User2 that are members of the Domain Admins group. You need to harden security for the domain. The solution must meet the following requirements: • Minimize risks associated with the Domain Admins group and privilege escalation on the domain. • Ensure that the built-in administrator account can perform forest recovery operations. • Reduce the attack surface of the Domain Admins groups. • Follow the principle of least privilege. How should you modify the Domain Admins group, and which user rights should you assign to the Domain Admins group? To answer, drag the appropriate options to the correct requirements. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Question 55

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. You need to encrypt the disks connected to VM1 by using Azure Disk Encryption. The solution must use a key encryption key (KEK). Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.