AZ-801 Free Practice Test

- (Exam Topic 1)
You are remediating the firewall security risks to meet the security requirements. What should you configure to reduce the risks?

1. A. a Group Policy Object (GPO)
2. B. adaptive network hardening in Microsoft Defender for Cloud
3. C. a network security group (NSG) in Sub1
4. D. an Azure Firewall policy

Correct Answer: A
Firewall rules configured in a Group Policy Object cannot be modified by local server administrators. Reference:
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/create-an-inbound-port-r

- (Exam Topic 1)
You are planning the europe.fabrikam.com migration to support the on-premises migration plan-Where should you install the Password Export Server (PES) service, where should you generate the encryption key? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 3)
You have a Site-to-Site VPN between an on-premises network and an Azure VPN gateway. BGP is disabled for the Site-to-Site VPN.
You have an Azure virtual network named Vnet1 that contains a subnet named Subnet1. Subnet1 contains a virtual machine named Server1.
You can connect to Server1 from the on-premises network.
You extend the address space of Vnet1. You add a subnet named Subnet2 to Vnet1. Subnet2 uses the extended address space. You deploy an Azure virtual machine named Server2 to Subnet2.
You cannot connect to Server2 from the on-premises network. Server1 can connect to Server2. You need to ensure that you can connect to Subnet2 from the on-premises network.
What should you do?

1. A. Add an additional Site-to-Site VPN between the on-premises network and Vnetl.
2. B. Add a private endpoint to Subnet2.
3. C. To Subnet2. add a route table that contains a user-defined route.
4. D. Update the routing information on the on-premises routers.

Correct Answer: D

- (Exam Topic 3)
You have a failover cluster named Cluster1 that contains three nodes.
You plan to add two file server cluster roles named File1 and File2 to Cluster1. File1 will use the File Server for general use role. File2 will use the Scale-Out File Server for application data role.
What is the maximum number of nodes for File1 and File2 that can concurrently serve client connections? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Solution:
Graphical user interface, application Description automatically generated
Reference:
https://docs.microsoft.com/en-us/windows-server/failover-clustering/sofs-overview

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 3)
You have 50 on-premises servers that run Windows Server. You have an Azure subscription that contains 50 virtual machines that run Windows Server.
You need to create an Azure Monitor alert that will be triggered if one of the servers or virtual machines has less than 10 percent available disk space.
What should you do first?

1. A. Create an Alert Rule
2. B. Install the Azure Monitor agent on each server.
3. C. Enable System Insights on each server.
4. D. Create a Log Analytics workspace and configure the Agent management settings.

Correct Answer: A
https://learn.microsoft.com/en-us/answers/questions/165893/help-to-set-up-azure-alert-for-disk-space-alert-wh.h