AZ-801 Practice Test

AZ-801 Practice Test practice questions, page 13 of 13, with answer review and explanations.

Question 61

Your network contains an Active Directory Domain Services (AD DS) domain. You plan to protect high-privilege domain credentials by specifying the following: • The lifetime of the Kerberos Ticket Granting Ticket (TGT) • The conditions required for devices to request a TGT What should you use, and what should you create? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 62

You have the on-premises servers shown in the following table. You are evaluating OSConfig and security baselines. Which cmdlet should you use to deploy OSConfig, and which servers support OSConfig? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 63

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains a user named User1. You deploy a read-only domain controller (RODC) named RODC1. You need to ensure that User1 is a local administrator on RODC1. The solution must use the principle of least privilege. What should you use?

  1. dsmgmt.exe
  2. Local Users and Groups
  3. net user
  4. Computer Management

Question 64

You have an Azure virtual machine named VM1 that runs Windows Server. The disks on VM1 are protected by using Azure Disk Encryption. You need to use PowerShell to disable disk encryption on the data disks attached to VM1. How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 65

You have an Azure subscription that is using Microsoft Defender for Cloud. You have 50 Azure virtual machines that run Windows Server. You need to ensure that any security exploits detected on the virtual machines are forwarded to Defender for Cloud. Which extension should you enable on the virtual machines?

  1. Guest Configuration agent
  2. Vulnerability assessment for machines
  3. Azure Automanage Machine Configuration extension for Windows
  4. Microsoft Dependency agent