AZ-801 Practice Test

AZ-801 Practice Test practice questions, page 12 of 13, with answer review and explanations.

Question 56

You have a server named Server1 that runs Windows Server and contains two volumes named C and D. You connect a disk to Server1 that is encrypted by using BitLocker and contains a volume named E. You need to ensure that after a restart, the data on volume E can be accessed without providing a password or a recovery key. Which three actions should you perform on Server1 in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Question 57

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a domain controller named DC1. The domain uses Microsoft Entra Connect sync with a Microsoft Entra tenant and uses Microsoft Entra Password Protection to enforce a custom banned password list. You deploy a new domain controller named DC2 to the domain. You discover that the custom banned password list is applied inconsistently and often allows banned passwords to be used. You need to ensure that the custom banned password list is always enforced. What should you do on DC2?

  1. Install the Microsoft Entra Password Protection DC agent.
  2. Install the Microsoft Entra Password Protection proxy service.
  3. Provide access to the https://login.microsoftonline.com and https://enterpriseregistration.windows.net URLS.
  4. Install the Microsoft Entra provisioning agent.
  5. Install the Azure Monitor Agent.

Question 58

You have an on-premises Hyper-V host named Server1. Server1 contains a virtual machine named VM1. You have a non-domain joined Hyper-V server named Server2 that is hosted in a remote location. You plan to replicate VM1 to Server2 by using Hyper-V Replica. You need to configure replication on Server1. Which authentication method can you use?

  1. NTLM
  2. Kerberos
  3. preshared secret
  4. certificate

Question 59

You have a server that runs Windows Server and hosts an app named App1. You need to prevent App1 from accessing external SMTP servers. The solution must meet the following requirements: • Minimize the impact on App1's access to external HTTP servers. • Minimize the impact on other apps on the server. • Minimize administrative effort. What should you implement in Windows Defender Firewall?

  1. an outbound program rule
  2. an inbound custom rule
  3. an outbound custom rule
  4. an inbound program rule
  5. an outbound port rule

Question 60

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains four servers named Server1, Server 2, Server3, and Server4 that run Windows Server. You configure the connection security rules shown in the following table. Server4 does NOT have any connection security rules applied. With which servers can Server1 and Server2 establish communication after the connection security rules are applied? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.