AZ-801 Practice Test

AZ-801 Practice Test practice questions, page 7 of 13, with answer review and explanations.

Question 31

You have an on-premises server named Server1 that runs Windows Server 2022 Standard. You have an Azure subscription that contains the virtual machines shown in the following table. The subscription contains a Microsoft Sentinel instance named Sentinel1 in the Central US Azure region. You need to implement the Windows Firewall connector. Which servers can send Windows Firewall logs to Sentinel1?

  1. VM1 only
  2. VM2 only
  3. VM1 and Server1 only
  4. VM1, VM2, and VM3 only
  5. VM1, VM2, and Server1 only
  6. VM1, VM2, VM3, and Server1

Question 32

Your network contains an on-premises Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table. Server1 has the connection security rule as shown in the Server exhibit. (Click the Server1 tab.) Server2 has the connection security rule as shown in the Server2 exhibit. (Click the Server2 tab.) Server1 has the inbound firewall rules as shown in the Server1 inbound rules exhibit. (Click the Server1 inbound rules tab.) For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Question 33

You have an on-premises server named Server1 that runs Windows Server. You have an Azure subscription. You need to onboard Server1 to Microsoft Defender for Cloud. What should you install on Server1?

  1. the Azure File Sync agent
  2. the Microsoft Entra provisioning agent D. the Azure Connected Machine agent
  3. the Device Health Attestation role

Question 34

You have a management group named MG1 that contains an Azure subscription named Sub1. Sub1 contains the resources shown in the following table. You need to enable Microsoft Defender for Servers. From the Azure portal, on which two resources can you enable Defender for Servers? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

  1. RG1
  2. Workspace1
  3. Sub1
  4. MG1
  5. VNet1
  6. VM1

Question 35

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains an organizational unit (OU) named OU1 and a user named User1. You plan to deploy a Hyper-V failover cluster named Cluster1. You need to prestage the account for Cluster1 and ensure that User1 can deploy Cluster1. The solution must follow the principle of least privilege. Which action should you perform, and which permissions should you grant to User1 for Cluster1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.