AZ-801 Practice Test

AZ-801 Practice Test practice questions, page 8 of 13, with answer review and explanations.

Question 36

You have an Active Directory Domain Services (AD DS) domain that contains 1,000 users. The domain has the following password requirements: • The minimum password length must be 12 characters. • Passwords must expire in 90 days. • Passwords must be complex. You need to ensure that the members of a security team have passwords that meet the following requirements: • The minimum password length must be 16 characters. • Passwords must expire in 60 days. • Passwords must be complex. The solution must minimize the impact on users who are NOT members of the security team. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 37

You have 500 on-premises servers that run Windows Server. You have an Azure subscription that contains a Log Analytics workspace named Workspace1. You plan to use VM insights in Azure Monitor to monitor the on-premises servers. You need to onboard the servers to Azure Arc by using the template script. The solution must meet the following requirements: • Follow the principle of least privilege. • Minimize administrative effort. What should you do first?

  1. Create a group managed service account (gMSA).
  2. Generate a Log Analytics key.
  3. Create a Microsoft Entra service principal.
  4. Download the Log Analytics workspace ID.

Question 38

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that hosts an app named App1. App1 uses Active Directory authentication. You have a Microsoft Entra tenant that contains a user named User1. You deploy Microsoft Entra Connect sync and configure password synchronization. User1 fails to authenticate to App1. You need to ensure that User1can authenticate to App1. What should you do?

  1. For Microsoft Entra Connect sync, enable the BlockCloudObjectTakeoverThroughHardMatch feature.
  2. For Microsoft Entra Connect sync, enable password writeback.
  3. From the AD DS domain, create a new user account named User1.
  4. For Microsoft Entra Connect sync, disable soft match.

Question 39

You have an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server. You need to prevent the registration of specific COM objects on Server1. What should you use?

  1. Windows Defender Application Control (WDAC)
  2. exploit protection
  3. Smart App Control

Question 40

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains a user named User1. You deploy a read-only domain controller (RODC) named RODC1. You need to ensure that User1 is a local administrator on RODC1. The solution must use the principle of least privilege. What should you use?

  1. System Configuration
  2. dsmgmt.exe
  3. Computer Management
  4. Active Directory Sites and Services