AZ-801 Practice Test

Question 41

You have a server named Server1 that runs Windows Server. You install a custom app named App1 that is accessed by using TCP port 52310. Users report that they cannot access App1. You confirm that App1 is running on Server1. You need to ensure that the users can access App1. The solution must only provide access to App1 on Server1. What should you do in Windows Defender Firewall with Advanced Security?

1. Create an isolation connection security rule.
2. Create an outbound rule.
3. Create an inbound rule.
4. For the current profile, allow all inbound connections.

Question 42

You have an Azure subscription that contains an Azure key vault named Vault1. You deploy Azure Disk Encryption. You configure Vault1 to support Azure Disk Encryption. You need to ensure that you can encrypt Azure Disk Encryption artifacts before they are written to Vault1. The solution must provide the highest level of encryption. How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 43

You plan to deploy an Azure confidential virtual machine named VM1. You need to ensure that you can implement confidential disk encryption for VM1. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 44

Your network contains an on-premises Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table. For each server, Windows Defender Firewall is configured to allow only communication between servers on the same segment. Server1 has the following connection security rule: • Name: Rule1 • Rule type: isolation • Requirement: Require authentication for inbound connections and request authentication for outbound connections • Authentication method: Computer (Kerberos V5) • Profile: Domain, Private, Public Server2 does not have any connection security rules. Server3 has the following connection security rule: • Name: Rule3 • Rule type: Server-to-server • Endpoints o Computers in Endpoint 1: 192.168:5.0/24 o Computers in Endpoint 2: 192.168.1.0/24 • Requirement: Request authentication for inbound and outbound connections • Authentication method: Computer (Kerberos V5) • Profile: Domain, Private, Public For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 45

Your network contains an Active Directory Domain Services (AD DS) domain. You need to configure a ticket-granting ticket (TGT) lifetime for specific user and computer accounts. The solution must meet the following requirements: • Minimize the impact on the other user and computer accounts in the domain. • Minimize administrative effort. What should you configure?

1. a dynamic access control policy
2. a password policy
3. an authentication policy and an authentication policy silo
4. a fine-grained password policy