Question 1

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows

Server and uses Azure Disk Encryption.

You need to identify which Azure key vault stores the encryption keys for VM1. The solution must minimize

administrative effort.

Which PowerShell cmdlet should you run?

Options :

A : Get-AzKeyVaultKey

B : Get-AiKeyVault

C : Get-AzVMDiskEncryptionStatus

D : Get-AzDiskEncryptionSet

Answer: C

Question 2

You have three servers named Server1. Server1 and Server3 that run Windows Server and have the hyper V

server rote installed. Server 1 hosts an Azure Migrate appliance named Migrate1.

You plan to migrate virtual machines to Azure.

You need to ensure that any new virtual machines created on Server 1. Server2 and Server3 are available in

Azure Migrate

What should you do?

Options :

A : On Migrate1, add a discovery source.

B : On the DNS server used by Migrate 1, create a GlobalName zone.

C : On Migrate1, set the Startup Type of the Computer Browser service to Automatic

D : On the network that has Migrate1 deployed, deploy a WINS server.

Answer: A

Question 3

You have an Azure subscription. The subscription contains multiple virtual machines that run Windows Server. You have the Azure virtual machine backup policies shown in the following table.

You are evaluating automatically moving recovery points to the vault-archive tier. For which policies can you enable tiering?

Options :

A : Policy2 and Policy4 only

B : Policy4only

C : Policy1, Policy2, Policy3, and Policy4

D : Policy3 and Policy4 only

Answer: D

Question 4

Your network contains an Active Directory Domain Services (AD DS) forest. The forest functional level is Windows Server 2012 R2. The forest contains the domains shown in the following table.

You create a user named Admin1.

You need to ensure that Admin1 can add a new domain controller that runs Windows Server 2022 to the east.

contoso.com domain. The solution must follow the principle of least privilege.

To which groups should you add Admin1?

Options :

A : EAST\Domain Admins only

B : CONTOSO\Enterprise Admins only

C : CONTOSO/Schema Admins and EAST\Domain Admins

D : CONTOSO\Enterprise Admins and CONTOSO/Schema Admins

Answer: A

Question 5

You have an Azure virtual machine named VM1.

You enable Microsoft Defender SmartScreen on VM1.

You need to ensure that the SmartScreen messages displayed to users are logged.

What should you do?

Options :

A : From a command prompt, run WinRM quickconfig.

B : From the local Group Policy, modify the Advanced Audit Policy Configuration settings.

C : From Event Viewer, enable the Debug log.

D : From the Windows Security app. configure the Virus & threat protection settings.

Answer: C

Confidently Practice Online with Free AZ-801 Exam Cram

Buying Options: