AZ-801 Practice Test

Question 21

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains servers that run Windows Server as shown in the following table. Server1 has the connection security rules shown in the following table. Server2 has the connection security rules shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

Question 22

You have an Azure subscription that contains a user named User1 and the resources shown in the following table. User1 has a computer named Computer1 that runs Windows 11. User1 works from home and establishes a Point-to-Site (P2S) connection to GW1 to access AppSvr1. You deploy the resources shown in the following table. User1 cannot access AppSvr2. You need to ensure that User1 can access AppSvr2. What should you do?

1. On Computer1, download and reinstall the VPN client.
2. Create a route table and associate the table with GatewaySubnet on VNet1.
3. On Computer1, modify the Windows Defender Firewall settings.
4. Add a service endpoint to VNet2.

Question 23

You have a generation 1 Azure virtual machine named VM1 that runs Windows Server and is joined to an Active Directory domain. You plan to enable BitLocker Drive Encryption (Bit-Locker) on volume C of VM1. You need to ensure that the BitLocker recovery key for VM1 is stored in Active Directory. Which two Group Policy settings should you configure first? To answer, select the settings in the answer area. NOTE: Each correct selection is worth one point.

Question 24

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a server named Server1 that runs Windows Server. You need to ensure that only specific applications can modify the data in protected folders on Server1. Solution: From App & browser control, you configure Reputation-based protection. Does this meet the goal?

1. Yes
2. No

Question 25

You have an Azure subscription that contains an Azure key vault named Vault1. You plan to deploy a virtual machine named VM1 that will run Windows Server. You need to enable encryption at host for VM1. The solution must use customer-managed keys. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.