Microsoft (AZ-801) Exam Questions 2023
Microsoft (AZ-801) Exam Questions 2023
Visit Official SkillCertPro Website :-
For a full set of 85 questions. Go to
https://skillcertpro.com/product/microsoft-az-801-exam-questions/
SkillCertPro offers detailed explanations to each question which helps to understand the concepts better.
It is recommended to score above 85% in SkillCertPro exams before attempting a real exam.
SkillCertPro updates exam questions every 2 weeks.
You will get life time access and life time free updates
SkillCertPro assures 100% pass guarantee in first attempt.
Question 1:
You have 100 Azure virtual machines that run Windows Server. The virtual machines are on boarded to Microsoft Defender for Cloud.
You need to shut down a virtual machine automatically if Microsoft Defender for Cloud generates the “Antimalware disabled in the virtual machine“alert for the virtual machine.
What should you use in Microsoft Defender for Cloud?
A. a logic app
B. a workbook
C. a security policy
D. adaptive network hardening
Answer: A
Explanation:
https://docs.microsoft.com/en-us/azure/defender-for-cloud/managing-and-responding-alerts
Question 2:
You have a Microsoft Sentinel deployment and 100 Azure Arc-enabled on-premises servers. All the Azure Arc-enabled resources are in the same resource group.
You need to onboard the servers to Microsoft Sentinel. The solution must minimize administrative effort. What should you use to onboard the servers to Microsoft Sentinel?
A. Azure Automation
B. Azure Policy
C. Azure virtual machine extensions
D. Microsoft Defender for Cloud
Answer: B
Explanation:
Question 3:
You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant by using password hash synchronization.
You have a Microsoft 365 subscription. All devices are hybrid Azure AD-joined.
Users report that they must enter their password manually when accessing Microsoft 365 applications.
You need to reduce the number of times the users are prompted for their password when they access Microsoft 365 and Azure services. What should you do?
A. in Azure AD, configure a Conditional Access policy for the Microsoft Office 365 applications.
B. In the DNS zone of the AD DS domain, create an auto discover record.
C. from Azure AD Connect, enable single sign-on (SSO).
D. From Azure AD Connect, configure pass-through authentication.
Answer: C
Explanation:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso-quick-start
Question 4:
You have an Azure subscription that has Microsoft Defender for Cloud enabled. You have 50 Azure virtual machines that run Windows Server.
You need to ensure that any security exploits detected on the virtual machines are forwarded to Defender for Cloud. Which extension should you enable on the virtual machines?
A. Vulnerability assessment for machines
B. Microsoft Dependency agent
C. Log Analytics agent for Azure VMs
D. Guest Configuration agent
Answer: A
Explanation:
https://docs.microsoft.com/en-us/azure/defender-for-cloud/deploy-vulnerability-assessment-vm
Question 5:
You have 10 servers that run Windows Server in a workgroup.
You need to configure the servers to encrypt all the network traffic between the servers. The solution must be as secure as possible. Which authentication method should you configure in a connection security rule?
A. NTLMv2
B. pre-shared key
C. Kerberos V5
D. computer certificate
Answer: D
Explanation:
For a full set of 85 questions. Go to
https://skillcertpro.com/product/microsoft-az-801-exam-questions/
SkillCertPro offers detailed explanations to each question which helps to understand the concepts better.
It is recommended to score above 85% in SkillCertPro exams before attempting a real exam.
SkillCertPro updates exam questions every 2 weeks.
You will get life time access and life time free updates
SkillCertPro assures 100% pass guarantee in first attempt.
Question 6:
You have an Azure virtual machine named VM1 that runs Windows Server.
You need to encrypt the contents of the disks on VM1 by using Azure Disk Encryption. What is a prerequisite for implementing Azure Disk Encryption?
A. Customer Lockbox for Microsoft Azure
B. an Azure key vault
C. a BitLocker recovery key
D. data-link layer encryption in Azure
Answer: B
Explanation:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-overview
Question 7:
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two servers named Server1 and Server2 that run Windows Server.
You need to ensure that you can use the Computer Management console to manage Server2. The solution must use the principle of least privilege.
Which two Windows Defender Firewall with Advanced Security rules should you enable on Server2? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. the COM+ Network Access (DCOM-In) rule
B. all the rules in the Remote Event Log Management group
C. the Windows Management Instrumentation (WMI-In) rule
D. the COM+ Remote Administration (DCOM-In) rule
E. the Windows Management Instrumentation (DCOM-In) rule
Answer: A, B
Question 8:
You have a server that runs Windows Server. The server is configured to encrypt all incoming traffic by using a connection security rule. You need to ensure that Server1 can respond to the unencrypted tracert commands initiated from computers on the same network.
What should you do from Windows Defender Firewall with Advanced Security?
A. From the IPsec Settings, configure IPsec defaults.
B. Create a new custom outbound rule that allows ICMPv4 protocol connections for all profiles.
C. Change the Firewall state of the Private profile to off.
D. From the IPsec Settings, configure IPsec exemptions.
Answer: D
Question 9:
You have an Azure virtual machine named VM1.
You enable Microsoft Defender SmartScreen on VM1.
You need to ensure that the SmartScreen messages displayed to users are logged.
What should you do?
A. From a command prompt, run WinRM quickconfig.
B. From the local Group Policy, modify the Advanced Audit Policy Configuration settings.
C. From Event Viewer, enable the Debug log.
D. From the Windows Security app, configure the Virus & threat protection settings.
Answer: C
Explanation:
Question 10:
You have a failover cluster named Cluster1 that has the following configurations:
· Number of nodes: 6
· Quorum: Dynamic quorum
· Witness: File share, Dynamic witness
What is the maximum number of nodes that can fail simultaneously while maintaining quorum?
A. 1
B. 2
C. 3
D. 4
E. 5
Answer: C
Explanation:
Note this question is asking about nodes failing simultaneously, not nodes failing one after the other.
With six nodes and one witness, there are seven votes. To maintain quorum there needs to be four votes available (four votes is the majority of seven). This means that a minimum of three nodes plus the witness need to remain online for the cluster to function. Therefore, the maximum number of simultaneous failures is three.
Reference: https://docs.microsoft.com/en-us/windows-server/storage/storage-spaces/understand-quorum
For a full set of 85 questions. Go to
https://skillcertpro.com/product/microsoft-az-801-exam-questions/
SkillCertPro offers detailed explanations to each question which helps to understand the concepts better.
It is recommended to score above 85% in SkillCertPro exams before attempting a real exam.
SkillCertPro updates exam questions every 2 weeks.
You will get life time access and life time free updates
SkillCertPro assures 100% pass guarantee in first attempt.