Font size
WorksheetsAZ 801 Quiz
Total questions: 88
Worksheet time: 44mins
Which of the following is a feature of Microsoft Defender Credential Guard?
Isolates user credentials within a virtualized container
Encrypts all network traffic by default
Provides antivirus protection
Blocks all incoming connections
What must be ensured before blocking NTLM authentication?
All user accounts are migrated to a new domain
Existing applications are no longer using the NTLM protocol
All servers are upgraded to Windows Server 2016
Multi-factor authentication is enabled for all users
Which policy can be configured to audit NTLM authentication in a domain?
Network security: Audit account logon events
Network security: Restrict NTLM: Audit Incoming NTLM Traffic
Network security: Allow log on locally
Network security: Force logoff when logon hours expire
What is the primary goal of the principle of least privilege when configuring user account rights?
Maximizing user access to all systems
Granting users only the rights and privileges they need to perform their tasks
Ensuring users can install any software they need
Allowing users to manage their own passwords
Which of the following is NOT a requirement for Microsoft Defender Credential Guard?
Windows 10 Enterprise or Windows Server 2016
64-bit CPU
Active Directory Certificate Services
UEFI firmware version 2.3.1.c or newer
What action should be taken to find user accounts that have not signed in within the last 90 days using PowerShell?
Get-ADUser -Filter {Enabled -eq $true -and PasswordNeverExpires -eq $true}
Get-ADUser -Filter {LastLogonTimeStamp -lt (Get-Date).AddDays(-90) -and enabled -eq $true} -Properties LastLogonTimeStamp
Search-ADAccount -AccountInactive
Find-User -Inactive
Which of the following should be implemented to ensure that local administrator passwords are unique and regularly changed?
Microsoft Defender Credential Guard
Local Administrator Password Solution (LAPS)
BitLocker Drive Encryption
NTLM authentication blocking
Which feature does NOT support by Windows Defender Credential Guard?
NTLMv1 or MS-CHAPv2
Kerberos DES encryption
Digest authentication
SSL/TLS encryption
What is a key benefit of implementing a split-horizon DNS?
Simplifies management by using a single namespace
Enhances security by separating internal and external DNS records
Reduces the need for firewall configurations
Increases the number of required DNS servers
Which tool helps verify the effects of GPO settings on a local host?
Policy Analyzer tool
LGPO tool
WSUS
Azure Update Management
What is the primary function of Network Security Groups (NSGs) in Azure?
To filter inbound and outbound network traffic
To manage virtual machines
To create virtual networks
To configure DNS settings
Which protocol is NOT a valid option for NSG rules?
TCP
UDP
ICMP
HTTP
What is the purpose of the default security rules in an NSG?
Allow connectivity within a virtual network and from Azure load balancers
Block all inbound and outbound traffic
Restrict access to specific IP ranges
Enable logging for network traffic
Which Azure service can be used to monitor and diagnose network conditions in Azure?
Azure Network Watcher
Azure Monitor
Azure Security Center
Azure Advisor
Which Azure service is used for managing and controlling outbound network access?
Azure Firewall
Azure Active Directory
Azure Security Center
Azure Traffic Manager
What is a key feature of Adaptive Network Hardening in Azure?
Provides recommendations to allow traffic only from specific IP addresses or ports
Creates virtual machines
Manages user permissions
Configures DNS settings
In Microsoft Defender for Cloud, which tier is required to access advanced security features?
Free tier
Basic tier
Standard tier
Premium tier
Which of the following is NOT a compliance standard supported by Microsoft Defender for Cloud?
PCI DSS
ISO 27001
HIPAA
SOC TSP
What is the primary benefit of using Application Security Groups (ASGs) in Azure?
Group network interfaces together to simplify security management
Create virtual networks
Manage DNS settings
Configure Azure Active Directory
Which type of rule in NSG is evaluated first for outbound traffic from a VM?
NSG applied to the subnet
NSG applied to the network interface
Default security rules
Augmented security rules
What is the main function of Cluster Shared Volumes (CSV) in a failover cluster?
To provide a backup solution for cluster nodes
To enable simultaneous read and write access to NTFS or ReFS volumes by cluster nodes
To manage network traffic within the cluster
To monitor cluster performance
Which of the following workloads is supported by CSV?
Microsoft Exchange Servers
Clustered Microsoft Hyper-V VMs
Microsoft SQL Server only
DHCP and DNS services
What tool can be used to perform an online repair of CSV volumes?
Diskpart
Fsutil
Chkdsk
Disk Management
Which feature of CSV allows streaming traffic across multiple networks in the cluster?
SMB Direct
BitLocker Drive Encryption
CSV Cache
Integration with SMB Multichannel
What is a key requirement for implementing a Scale-Out File Server (SOFS)?
It must use traditional RAID arrays.
It requires CSVs and a failover cluster.
It can only be implemented on physical servers.
It must use cloud-based storage solutions.
What type of quorum witness uses a clustered disk resource in the same failover cluster?
A) File Share Witness
B) Cloud Witness
C) Disk Witness
D) Network Witness
What is the benefit of using Cluster-Aware Updating (CAU)?
A) It automatically reboots the cluster nodes.
B) It deploys updates to cluster nodes without downtime.
C) It manages DNS settings for the cluster.
D) It configures failover policies automatically.
Which type of failover cluster does Storage Replica support for replication?
A) Server-to-server only
B) Cluster-to-cluster and stretch cluster
C) Cloud-based clusters only
D) Application-specific clusters
What does the CSV cache improve the performance of?
A) Disk write operations
B) Cluster node communication
C) Read-only unbuffered I/O operations
D) Network load balancing
Which tool is commonly used to create and manage a failover cluster in Windows Server?
A) Hyper-V Manager
B) Active Directory Users and Computers
C) Failover Cluster Manager
D) Windows Admin Center only
What is the main function of Hyper-V Replica?
To backup virtual machines to an external hard drive
To replicate a live VM from one location to another for disaster recovery
To create virtual networks
To monitor VM performance
Which component is essential for Hyper-V Replica to function between two sites?
Hyper-V Manager
Failover Cluster Manager
Hyper-V Replica Broker
System Center Configuration Manager
What are the two types of VMs involved in Hyper-V Replica?
Primary VM and Replica VM
Active VM and Backup VM
Master VM and Slave VM
Source VM and Target VM
What is the purpose of Azure Site Recovery?
To manage DNS settings
To replicate VMs and physical servers to Azure for disaster recovery
To monitor network traffic
To configure firewall rules
Which feature of Azure Site Recovery allows you to test your disaster recovery plan without affecting the live environment?
Planned Failover
Unplanned Failover
Test Failover
Immediate Failover
What does the Failover TCP/IP feature in Hyper-V Replica control?
The storage location of VM backups
The network settings a VM uses when started as part of a failover
The replication frequency of VMs
The encryption of data in transit
Which of the following is NOT a step in implementing Site Recovery from an on-premises site to Azure?
Create Azure resources
Configure Hyper-V hosts
Prepare infrastructure
Set up a local DNS server
What is a key requirement for setting up Hyper-V Replica?
Both primary and replica locations must have the same firewall rules
Only the primary location needs sufficient storage
Only the replica location needs a supported version of Windows Server
Network connectivity between the locations is optional
What is the benefit of using App-consistent snapshots in Azure Site Recovery?
They provide a consistent state of applications during replication
They reduce the storage requirements for backups
They improve the performance of VMs
They eliminate the need for failover testing
Which failover option should be used for planned site maintenance?
Test Failover
Planned Failover
Unplanned Failover
Immediate Failover
What is the primary purpose of Azure Site Recovery?
To manage DNS settings
To replicate VMs and physical servers to Azure for disaster recovery
To monitor network traffic
To configure firewall rules
Which feature allows you to test your disaster recovery plan without affecting the live environment?
Test Failover
Planned Failover
Unplanned Failover
Immediate Failover
What does the Failover TCP/IP feature in Hyper-V Replica control?
The storage location of VM backups
The network settings a VM uses when started as part of a failover
The replication frequency of VMs
The encryption of data in transit
What is the purpose of Recovery Services vaults in Azure Backup?
To manage DNS settings
To store backup data
To monitor network traffic
To configure firewall rules
Which of the following is NOT a step in implementing Site Recovery from an on-premises site to Azure?
Create Azure resources
Configure Hyper-V hosts
Prepare infrastructure
Set up a local DNS server
What is a key benefit of using Azure Backup?
Requires no infrastructure
Provides automatic scaling
Offers unlimited data transfer
All of the above
What does the MARS agent do in Azure Backup?
Manages DNS settings
Backs up files, folders, and system state from on-premises machines and Azure VMs
Configures firewall rules
Monitors network traffic
What type of replication does Azure Backup offer?
Locally redundant storage (LRS)
Geo-redundant storage (GRS)
Both A and B
None of the above
What is the role of the Azure Backup Server?
Manages DNS settings
Provides long-term storage for backups with Recovery Services Agent
Configures firewall rules
Monitors network traffic
What is the minimum domain functional level required to add member servers running Windows Server 2022?
Windows Server 2003
Windows Server 2008
Windows Server 2012
Windows Server 2016
Which command is used to prepare the forest for an Active Directory Domain Services migration?
Adprep /forestprep
Adprep /domainprep
Dcpromo
Ntdsutil
What is the primary function of the Storage Migration Service?
To monitor network traffic
To replicate data to Azure for disaster recovery
To migrate server data and identities from an old server to a new server
To configure firewall rules
Which of the following is NOT a step in upgrading a previous version of Active Directory Domain Services to Windows Server 2022?
Add new member servers running Windows Server 2022
Prepare the forests and domains
Transfer FSMO roles from existing domain controllers
Create a new AD DS forest
Which of the following firewall rules must be enabled on the Storage Migration Service orchestrator server?
HTTP-In
File and Printer Sharing (SMB-In)
DNS Service (TCP-In)
Remote Desktop (TCP-In)
Which Windows PowerShell cmdlet would you use to export settings for Windows features and OS from the local computer to a migration store?
Get-SmigServerFeature
Export-SmigServerSetting
Import-SmigServerSetting
Send-SmigServerData
What must be installed on the destination server to use the Windows Server Migration Tools?
DNS Server Role
Active Directory Domain Services Role
Windows Server Migration Tools feature
Hyper-V Role
Which step is necessary to perform before demoting old domain controllers after promoting Windows Server 2022 domain controllers?
Transfer FSMO roles to the new domain controllers
Configure DNS settings
Backup the old domain controllers
Install new applications
Which of the following is NOT a benefit of using Storage Migration Service?
Assign the identity of the source server to the target server
Inventory source servers
Migrate local user and group accounts
Monitor real-time data transfer speeds
What is the purpose of the Azure Migrate service?
To monitor network traffic in Azure
To assess and migrate different workloads to Azure
To manage Azure subscriptions and billing
To configure DNS settings in Azure
Which Azure Migrate tool is used to perform an assessment of on-premises SQL Server databases?
Azure Migrate: Server Assessment
Azure Migrate: Database Assessment
Azure Migrate: Web App Assessment
Azure Migrate: Data Box
What are the four migration strategies mentioned in the document?
Rehost, Refactor, Rearchitect, and Rebuild
Rehost, Refactor, Rearchitect, and Rebuild
Redesign, Refactor, Rebuild, and Retire
Rehost, Refactor, Rebuild, and Reuse
Which migration strategy is often referred to as a lift-and-shift migration?
Rehost
Refactor
Rearchitect
Rebuild
What is the purpose of the Azure Migrate: Server Migration tool?
To monitor the health of Azure resources
To migrate physical Windows servers and on-premises VMs to Azure
To manage Azure Active Directory
To configure virtual networks in Azure
Which Azure Migrate component helps in discovering application components and creating a Dockerfile for containerization?
Azure Migrate: App Service Migration
Azure Migrate: App Containerization
Azure Migrate: Database Migration
Azure Migrate: Web App Migration
What is the first step in performing a server assessment using Azure Migrate?
Create assessments
Discover machines
Perform data replication
Migrate workloads
What does the Storage Migration Service help you do?
Monitor storage usage in Azure
Transfer server data and identities to a new server
Manage virtual networks
Configure Azure security policies
Which of the following is a requirement for the orchestrator server in the Storage Migration Service?
Running Windows Server 2012 or newer
Installed with 2 CPU cores and 2 GB of memory
Must be part of a separate Active Directory domain
Running Linux (Samba)
What does the Azure Migrate: Server Assessment tool do after discovering machines?
Automatically migrates the machines to Azure
Assesses the environment's readiness for migration to Azure
Configures virtual networks for the machines
Manages the health of the machines
What tool can be used to analyze the performance effects that applications and services have on a Windows Server computer?
Event Viewer
Resource Monitor
Performance Monitor
Reliability Monitor
Which Performance Monitor counter measures the percentage of time the disk was busy during the sample interval?
PhysicalDisk\Avg. Disk Queue Length
PhysicalDisk% Disk Time
Memory\Pages per Second
Processor% Processor Time
What does the Memory\Pages per Second counter measure?
The rate at which pages are read from or written to the disk to resolve hard page faults
The percentage of time the processor spends running a non-idle thread
The number of threads in the processor queue
The length of the output packet queue in packets
What is the primary function of Reliability Monitor in Windows Server?
To monitor network traffic
To review the reliability and problem history of the server
To configure firewall rules
To manage DNS settings
Which Windows Server tool helps predict future capacity issues?
Event Viewer
Resource Monitor
System Insights
Server Manager
What type of data does a Data Collector Set NOT collect in Performance Monitor?
Performance counters
Event trace data
System configuration information
Network configuration data
What is a common use case for implementing event log subscriptions in Windows Server?
To collect events from multiple servers and forward them to a centralized server
To monitor CPU usage on a single server
To manage Active Directory replication
To configure DNS settings
Which Windows PowerShell cmdlet is used to install System Insights?
Install-WindowsFeature -Name System-Insights
Add-WindowsFeature -Name System-Insights -IncludeManagementTools
Enable-WindowsOptionalFeature -FeatureName System-Insights
Install-WindowsFeature -FeatureName System-Insights
What does the Network Interface\Bytes Total/Sec counter measure?
The length of the output packet queue in packets
The rate at which bytes are sent and received over each network adapter
The percentage of time the disk was busy during the sample interval
The number of threads in the processor queue
Which log type in Event Viewer stores events from a single application or component?
Security log
System log
Application log
Setup log
What are the three main capabilities of Azure Monitor?
Monitoring, querying logs, and alerting
Configuration management, monitoring, and security
Network management, security, and backup
Which agent is required to monitor Azure VMs with Azure Monitor?
Azure Active Directory Agent
Log Analytics Agent
Dependency Agent
Network Watcher Agent
What is the primary function of Azure Monitor VM Insights?
To provide a predefined curated monitoring experience with little configuration
To configure virtual networks in Azure
To manage Azure subscriptions and billing
To backup VMs to Azure storage
Which of the following tools can be used to query and analyze logs in Azure Monitor?
Azure Stream Analytics
Metrics Explorer
Azure Blob Storage
Azure Event Hubs
What must be done before you can use Azure Monitor to monitor a VM?
Install the Dependency Agent
Configure DNS settings
Create a virtual network
Set up a backup policy
Which Azure Monitor feature allows you to store and analyze near real-time and historical data?
Log Analytics
Azure Stream Analytics
Azure Data Factory
Azure Synapse Analytics
What kind of data can be collected by enabling boot diagnostics for an Azure VM?
Application logs
Performance metrics
Screenshots of the VM from the hypervisor
Network traffic logs
Which metric is NOT typically monitored in Azure Monitor for VMs?
CPU Utilization %
Available Memory
Logical Disk IOPS
User Login Attempts
What type of alerts can Azure Monitor configure?
Only email notifications
Notifications via SMS, email, and automated remediation actions
Notifications via SMS and firewall rule updates
Only automated remediation actions
What is the purpose of configuring a Log Analytics workspace in Azure Monitor?
To create virtual networks
To manage Azure subscriptions
To define the scope of data collection, analysis, and visualization
To backup Azure VMs
