https://killexams.com/pass4sure/exam-detail/AZ-801

AZ-801 MCQs

AZ-801 TestPrep AZ-801 Study Guide

AZ-801 Practice Test AZ-801 Exam Questions

killexams.com

Microsoft

AZ-801

Configuring Windows Server Hybrid Advanced Services

https://killexams.com/pass4sure/exam-detail/AZ-801

Question: 474

You manage a Windows Server 2022 failover cluster with three nodes and a Storage Spaces Direct (S2D) volume of 2 TB . The cluster uses a witness disk hosted in Azure Blob Storage. You need to calculate the minimum Azure Blob Storage size required for the witness disk, given a write throughput of 5 MB/s during peak failover events lasting 10 minutes.

1. 512 MB

2. 3 GB

3. 1 GB

4. 256 MB

Answer: B

Explanation: Peak write throughput is 5 MB/s for 10 minutes (600 seconds). Total data written = 5 MB/s * 600 s = 3000 MB = 3 GB . The witness disk must accommodate this (3 GB) is correct.

Question: 475

You are troubleshooting a Windows Server 2022 VM in Azure that fails to boot after a disk encryption update. You need to access the boot logs using Azure Serial Console. Which command should you enter after accessing the Special Administration Console (SAC)?

1. cmd

2. log dump

3. ch -si 1

4. bootcfg /scan

Answer: C

Explanation: In the Azure Serial Console???s SAC, the command "ch -si 1" switches to the first channel to launch a command prompt, where you can then run "dir" or "type" to view boot logs (e.g., boot.log). The other options either don???t apply to SAC or are invalid in this context.

Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/serial-console-windows

Question: 476

You have a server named Server1 running Windows Server 2022. You need to configure a custom Performance Monitor data collector set to log CPU usage and disk I/O every 10 seconds to a file named "perfdata.blg" for 24 hours. Which PowerShell command should you use?

1. New-PerfCounterDataCollectorSet -Name "PerfSet" -Counter "\Processor(_Total)\% Processor Time", "\PhysicalDisk(_Total)\Disk Bytes/sec" -SampleInterval 10 -LogFile "perfdata.blg" -Duration "24:00:00"

2. Add-PerformanceLog -Name "PerfSet" -Metrics "\Processor(_Total)\% Processor Time", "\PhysicalDisk(_Total)\Disk Bytes/sec" -Frequency 10 -File "perfdata.blg" -Hours 24

3. Set-PerfMonitor -Name "PerfSet" -Counters "CPU", "DiskIO" -Interval 10 -Output "perfdata.blg" -Time 24h

4. logman create counter "PerfSet" -c "\Processor(_Total)\% Processor Time" "\PhysicalDisk(_Total)\Disk Bytes/sec" -si 10 -f bin -o "perfdata.blg" -max 1440

Answer: D

Explanation: The logman create counter command creates a data collector set, specifying counters, sample interval (seconds), binary file output, and maximum duration in minutes (1440 minutes = 24 hours). Option B uses correct syntax. Other options use invalid cmdlets or parameters.

Reference: https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/logman

Question: 477

You need to configure a 5-node cluster with a floating IP of 10.0.0.200 for a SQL Server FCI. What is the minimum number of IP addresses required?

1. 7

2. 5

3. 4

4. 6

Answer: D

Explanation: 5 nodes = 5 IPs, 1 floating IP for SQL FCI = 6 total. The cluster IP is separate from the role IP in an FCI setup.

Question: 478

You are securing a hybrid AD environment. You need to prevent users from reusing the last 10 passwords. Which Group Policy setting should you configure?

1. Minimum Password Age = 10 days

2. Maximum Password Age = 10 days

3. Password Must Meet Complexity = Enabled

4. Enforce Password History = 10

Answer: D

Explanation: Enforce Password History = 10 ensures users cannot reuse their last 10 passwords. Minimum/Maximum Password Age controls duration, not history, and complexity enforces character rules, not reuse prevention.

Question: 479

You are securing an Azure VM running Windows Server 2022 with Microsoft Defender for Endpoint. You need to block a specific executable (malware.exe) using a custom indicator of compromise (IoC). Which PowerShell cmdlet should you use?

1. New-MpPreference -ExclusionPath "C:\malware.exe"

2. Set-MpPreference -AttackSurfaceReductionRules_Ids "BlockExe"

3. Set-MpPreference -DisableRealtimeMonitoring $false -IoC "malware.exe"

4. Add-MpPreference -IndicatorOfCompromise "malware.exe" -Action Block

Answer: D

Explanation: Add-MpPreference with an IoC allows you to define and block specific executables in Microsoft Defender for Endpoint, ensuring precise control over malware mitigation.

Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/indicator-file

Question: 480

You have a Storage Spaces Direct (S2D) cluster named Cluster2 with six nodes running Windows Server 2022. You need to create a 12 TB three-way mirror volume using 4 TB disks with ReFS and calculate the minimum number of disks required. Which PowerShell command should you use, and how many disks are needed?

1. 8 disks; New-StoragePool -FriendlyName "S2D" -ResiliencySettingName ThreeWayMirror -Size 12TB

2. 10 disks; New-Volume -StoragePoolFriendlyName "Cluster2" -FileSystem CSVFS_ReFS -MirrorLevel 3 - Size 12TB

3. 9 disks; New-Volume -StoragePoolFriendlyName "Cluster2" -FileSystem ReFS -ResiliencySettingName Mirror -NumberOfDataCopies 3 -Size 12TB

4. 12 disks; New-Volume -StoragePoolFriendlyName "Cluster2" -FileSystem ReFS -PhysicalDiskRedundancy 3 -Size 12TB

5. 9 disks; New-Volume -StoragePoolFriendlyName "Cluster2" -FileSystem CSVFS_ReFS - ResiliencySettingName Mirror -Size 12TB

Answer: C

Explanation: A three-way mirror requires 3 copies, so 12 TB usable needs 36 TB raw capacity (12 TB x 3). With 4 TB disks, 9 disks are required (36 TB / 4 TB). The correct command uses New-Volume with - NumberOfDataCopies 3 and -FileSystem ReFS for S2D) Option A matches this requirement.

Reference: https://docs.microsoft.com/en-us/windows-server/storage/storage-spaces/plan-volumes

Question: 481

You manage a hybrid environment with an on-premises Windows Server 2022 domain controller and Azure AD Connect. You need to synchronize a custom AD DS attribute "departmentCode" to Azure AD as "extensionAttribute2" with a transformation rule that prepends "D-". Which two PowerShell commands should

you use?

1. New-ADSyncRule -Name "TransformDept" -SourceADAttribute "departmentCode" -TargetAttribute "extensionAttribute2" -ValueRule ' "D-" + [departmentCode]'

2. Set-ADSyncAttributeFlow -Source "departmentCode" -Target "extensionAttribute2" -Transformation ' "D-"

   + $source'

3. New-ADSyncRule -Name "TransformDept" -SourceADAttribute "departmentCode" -TargetAttribute "extensionAttribute2" -FlowType Expression -Expression ' "D-" + [departmentCode]'

4. Update-ADSyncSchema -Attribute "departmentCode" -MapTo "extensionAttribute2" -Prefix "D-"

5. Set-ADSyncConnector -Name "ADConn" -Attribute "departmentCode" -CustomValue "D-[departmentCode]"

Answer: C

Explanation: `New-ADSyncRule` with `-FlowType Expression` and `-Expression ' "D-" + [departmentCode]'` creates a transformation rule to prepend "D-" to "departmentCode" and map it to "extensionAttribute2." A lacks flow type, B/D/E use incorrect cmdlets or syntax.

Question: 482

You manage a Windows Server 2022 server with a failover cluster. You need to configure a File Share Witness on an Azure file share. Which command sets this up?

1. Set-ClusterQuorum -FileShareWitness "\storage.file.core.windows.net\share" -Credential $cred

2. New-ClusterWitness -Type FileShare -Path "\storage.file.core.windows.net\share"

3. Set-ClusterResource -Name "Witness" -Share "\storage.file.core.windows.net\share"

4. Add-ClusterQuorum -FileShare "\storage.file.core.windows.net\share" -Auth $cred

Answer: A

Explanation: Set-ClusterQuorum -FileShareWitness configures a file share witness with credentials for Azure file shares. Other commands are invalid or incorrect.

Question: 483

You have a Windows Server failover cluster with a Hyper-V VM named VM11. You need to configure VM11 for live migration with a maximum of 2 simultaneous migrations and Kerberos authentication. Which PowerShell command should you use?

1. Set-VMHost -VirtualMachineMigrationAuthenticationType Kerberos -MaximumVirtualMachineMigrations 2

   
   

2. Enable-VMMigration -VMName "VM11" -AuthType Kerberos -MaxMigrations 2

3. Set-VMCluster -Name "Cluster1" -LiveMigrationLimit 2 -Authentication "Kerberos"

4. Configure-VMLiveMigration -VMName "VM11" -Kerberos -ConcurrentMigrations 2

Answer: A

Explanation: The Set-VMHost cmdlet configures live migration settings, including authentication type (Kerberos) and the maximum number of simultaneous migrations.

Question: 484

You have an Azure virtual machine named VM1 running Windows Server 2022 with Azure Arc enabled. You need to configure a custom script extension to execute a PowerShell script that modifies registry settings every time the VM restarts. The script must run with administrative privileges and log output to a file named "scriptlog.txt" in the C:\Logs directory. Which command should you use to deploy this extension?

1. Set-AzVMCustomScriptExtension -ResourceGroupName "RG1" -VMName "VM1" -Name "RegScript" - FileUri "https://storage.blob.core.windows.net/scripts/regscript.ps1" -RunAsAdmin -OutputPath "C:\Logs\scriptlog.txt"

2. New-AzVMExtension -ResourceGroupName "RG1" -VMName "VM1" -Name "RegScript" -Publisher "Microsoft.Compute" -ExtensionType "CustomScriptExtension" -TypeHandlerVersion "1.10" -Settings

   @{"fileUris" = "https://storage.blob.core.windows.net/scripts/regscript.ps1"; "commandToExecute" = "powershell.exe -File regscript.ps1"}

3. Set-AzVMCustomScriptExtension -ResourceGroupName "RG1" -VMName "VM1" -Name "RegScript" - FileUri "https://storage.blob.core.windows.net/scripts/regscript.ps1" -Run "powershell.exe -ExecutionPolicy Unrestricted -File regscript.ps1 > C:\Logs\scriptlog.txt"

4. Invoke-AzVMRunCommand -ResourceGroupName "RG1" -VMName "VM1" -CommandId "RunPowerShellScript" -ScriptPath "regscript.ps1" -Parameter @{"LogPath" = "C:\Logs\scriptlog.txt"}

Answer: C

Explanation: The Set-AzVMCustomScriptExtension cmdlet is used to deploy a custom script extension to an Azure VM. The -Run parameter specifies the command to execute, and redirecting output with ">" ensures logging to "scriptlog.txt". The script runs with elevated privileges by default. Option C is invalid as - RunAsAdmin and -OutputPath are not parameters of this cmdlet. Option D uses Invoke-AzVMRunCommand, which is for one-time execution, not recurring on restart.

Reference: https://docs.microsoft.com/en-us/powershell/module/az.compute/set-azvmcustomscriptextension

Question: 485

To migrate 500 GB of data from an on-premises Windows Server 2019 to Azure Blob Storage using AzCopy, which command ensures the fastest transfer with MD5 checksum validation?

1. azcopy copy "C:\data\*" "https://mystorage.blob.core.windows.net/container" --md5-checksum

2. azcopy sync "C:\data" "https://mystorage.blob.core.windows.net/container" --validate-md5

3. azcopy cp "C:\data" "https://mystorage.blob.core.windows.net/container" --recursive --check-md5

4. azcopy transfer "C:\data" "https://mystorage.blob.core.windows.net/container" --recursive --md5

Answer: C

Explanation: azcopy cp with --recursive uploads directories and --check-md5 validates integrity using MD5,

optimizing speed with parallel transfers. Sync is for synchronization, not one-time upload.
Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy

Question: 486

You manage a hybrid environment with an on-premises Windows Server 2022 failover cluster named Cluster1 synchronized with Azure AD . You need to configure Cluster1 to use Azure AD authentication for cluster management over a remote PowerShell session. Which command should you run on each cluster node to enable this?

1. Enable-PSRemoting -Force

2. Install-WindowsFeature -Name RSAT-AD-PowerShell

3. Set-Item -Path WSMan:\localhost\Client\Auth\AzureAD -Value $true

4. Set-PSSessionConfiguration -Name Microsoft.PowerShell -Authentication AzureAD

Answer: C

Explanation: To enable Azure AD authentication for remote PowerShell sessions on a Windows Server, you must configure the WSMan client authentication settings to allow Azure AD . The command Set-Item -Path WSMan:\localhost\Client\Auth\AzureAD -Value $true enables this. Enable-PSRemoting only enables remoting without specifying Azure AD, Install-WindowsFeature installs tools but doesn???t configure authentication, and Set-PSSessionConfiguration is incorrect as it applies to session configurations, not Azure AD auth.

Question: 487

To troubleshoot a Windows Server 2022 VM in Azure with high CPU usage, which Event ID in the System log indicates a process exceeding 90% CPU for over 5 minutes?

1. Event ID 1001

2. Event ID 2004

3. Event ID 2031

4. Event ID 1074

Answer: B

Explanation: Event ID 2004 from the Resource-Exhaustion-Detector indicates a process consuming excessive CPU (e.g., >90% for 5+ minutes). Other IDs relate to different issues (shutdown, app errors).

Reference: https://docs.microsoft.com/en-us/windows-server/administration/windows-event-log

Question: 488

Your hybrid network includes an on-premises Windows Server 2022 server named SRV4. You need to deploy Azure Arc and configure it to use a custom proxy server at http://proxy1:8080 with NTLM authentication.

Which command should you run?

1. azcmagent config set proxy.url "http://proxy1:8080" --authentication NTLM

2. Connect-AzArcServer -Proxy "http://proxy1:8080" -AuthType "NTLM" -ResourceGroup "RG1"

3. azcmagent connect --proxy "http://proxy1:8080" --auth NTLM --resource-group "RG1" --tenant-id "tenant1"

4. Install-AzArcAgent -ProxyServer "http://proxy1:8080" -Authentication "NTLM"

Answer: C

Explanation: The azcmagent connect command configures Azure Arc connectivity, and option correctly specifies the proxy and NTLM authentication.

Question: 489

You manage a Windows Server 2022 Hyper-V cluster with two nodes, HV1 and HV2, hosting a VM named VM1. You need to configure Hyper-V Replica to an Azure VM with a replication frequency of 30 seconds. VM1 has a 100 GB VHDX and generates 10 MB/s of write IOPS. Which setting must you configure to ensure replication succeeds?

1. Enable-VMReplication -VMName "VM1" -Destination "AzureVM1" -Frequency 30 -CompressionEnabled

2. Set-VMReplication -VMName "VM1" -ReplicationFrequencySec 30 -RecoveryHistory 2

3. Set-VMReplication -VMName "VM1" -ReplicationFrequencySec 30 -VSSSnapshotFrequency 1

4. Enable-VMReplication -VMName "VM1" -ReplicaServerName "AzureVM1" -ReplicationFrequencySec 30

Answer: B

Explanation: Hyper-V Replica to Azure requires the Set-VMReplication cmdlet to adjust the replication frequency to 30 seconds. The RecoveryHistory parameter ensures recovery points are retained.

Question: 490

You are configuring a Windows Server 2022 VM to use Azure Disk Encryption with a custom key encryption key (KEK) stored in Azure Key Vault. Which command enables this?

1. Enable-AzDiskEncryption -VMName "VM1" -KEK "https://vault.vault.azure.net/keys/KEK1"

2. Set-AzVMDiskEncryptionExtension -ResourceGroupName "RG1" -VMName "VM1" -KeyVaultUrl "https://vault.vault.azure.net" -KeyEncryptionKey "KEK1"

3. New-AzDiskEncryptionPolicy -KeyVault "vault" -KEKName "KEK1"

4. Set-AzVMEncryption -ResourceGroupName "RG1" -VMName "VM1" -KeyEncryptionKeyUrl "https://vault.vault.azure.net/keys/KEK1"

Answer: B

Explanation: Set-AzVMDiskEncryptionExtension enables Azure Disk Encryption with a KEK from Azure Key Vault, specifying the vault URL and key name for secure encryption.

Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-powershell

KILLEXAMS.COM

Killexams.com is a leading online platform specializing in high-quality certification exam preparation. Offering a robust suite of tools, including MCQs, practice tests, and advanced test engines, Killexams.com empowers candidates to excel in their certification exams. Discover the key features that make Killexams.com the go-to choice for exam success.

Exam Questions:

Killexams.com provides exam questions that are experienced in test centers. These questions are updated regularly to ensure they are up-to-date and relevant to the latest exam syllabus. By studying these questions, candidates can familiarize themselves with the content and format of the real exam.

Exam MCQs:

Killexams.com offers exam MCQs in PDF format. These questions contain a comprehensive

collection of questions and answers that cover the exam topics. By using these MCQs, candidate can enhance their knowledge and improve their chances of success in the certification exam.

Practice Test:

Killexams.com provides practice test through their desktop test engine and online test engine. These practice tests simulate the real exam environment and help candidates assess their readiness for the actual exam. The practice test cover a wide range of questions and enable candidates to identify their strengths and weaknesses.

thorough preparation:

Killexams.com offers a success guarantee with the exam MCQs. Killexams claim that by using this materials, candidates will pass their exams on the first attempt or they will get refund for the purchase price. This guarantee provides assurance and confidence to individuals preparing for certification exam.

Updated Contents:

Killexams.com regularly updates its question bank of MCQs to ensure that they are current and reflect the latest changes in the exam syllabus. This helps candidates stay up-to-date with the exam content and increases their chances of success.