01. You have a Microsoft Sentinel deployment and 100 Azure Arc-enabled on-premises servers. All the Azure Arc-enabled resources are in the same resource group. You need to onboard the servers to Microsoft Sentinel. The solution must minimize administrative effort.
What should you use to onboard the servers to Microsoft Sentinel?
a) Azure Automation
b) Azure Policy
c) Azure virtual machine extensions
d) Microsoft Defender for Cloud
02. You have 200 Azure virtual machines. You create a recovery plan in Azure Site Recovery to fail over all the virtual machines to an Azure region. The plan has three manual actions.
You need to replace one of the manual actions with an automated process. What should you use?
a) an Azure Desired State Configuration (DSC) virtual machine extension
b) an Azure Automation runbook
c) an Azure PowerShell function
d) a Custom Script Extension on the virtual machines
03. You have 100 Azure virtual machines that run Windows Server. The virtual machines are onboarded to Microsoft Defender for Cloud.
You need to shut down a virtual machine automatically if Microsoft Defender for Cloud generates the "Antimalware disabled in the virtual machine" alert for the virtual machine.
What should you use in Microsoft Defender for Cloud?
a) adaptive network hardening
b) a workbook
c) a security policy
d) a logic app
04. You have a failover cluster named Cluster1 that has the following configurations:
- Number of nodes: 6
- Quorum: Dynamic quorum
- Witness: File share, Dynamic witness
What is the maximum number of nodes that can fail simultaneously while maintaining quorum?
a) 1
b) 2
c) 3
d) 4
e) 5
05. You have 10 servers that run Windows Server in a workgroup. You need to configure the servers to encrypt all the network traffic between the servers. The solution must be as secure as possible.
Which authentication method should you configure in a connection security rule?
a) NTLMv2
b) pre-shared key
c) Kerberos V5
d) computer certificate
06. You have an Azure subscription that has Microsoft Defender for Cloud enabled. You have 50 Azure virtual machines that run Windows Server. You need to ensure that any security exploits detected on the virtual machines are forwarded to Defender for Cloud.
Which extension should you enable on the virtual machines?
a) Vulnerability assessment for machines
b) Microsoft Dependency agent
c) Log Analytics agent for Azure VMs
d) Guest Configuration agent
07. You have an Azure virtual machine named VM1 that runs Windows Server. You plan to deploy a new line-of-business (LOB) application to VM1. You need to ensure that the application can create child processes. What should you configure on VM1?
a) Microsoft Defender Credential Guard
b) Microsoft Defender Application Control
c) Microsoft Defender SmartScreen
d) Exploit protection
08. You are evaluating the technical requirements tor Cluster2. What is the minimum number of Azure Site Recovery Providers that you should install?
a) 4
b) 1
c) 12
d) 16
09. You have an Azure virtual machine named VM1 that runs Windows Server. You need to encrypt the contents of the disks on VM1 by using Azure Disk Encryption.
What is a prerequisite for implementing Azure Disk Encryption?
a) Customer Lockbox for Microsoft Azure
b) an Azure key vault
c) a BitLocker recovery key
d) data-link layer encryption in Azure
10. You have a server that runs Windows Server. The server is configured to encrypt all incoming traffic by using a connection security rule. You need to ensure that Server1 can respond to the unencrypted tracert commands initiated from computers on the same network.
What should you do from Windows Defender Firewall with Advanced Security?
a) From the IPsec Settings, configure IPsec defaults.
b) Create a new custom outbound rule that allows ICMPv4 protocol connections for all profiles.
c) Change the Firewall state of the Private profile to Off.
d) From the IPsec Settings, configure IPsec exemptions.
The purpose of this Sample Question Set is to provide you with information about the Microsoft Configuring Windows Server Hybrid Advanced Services exam. These sample questions will make you very familiar with both the type and the difficulty level of the questions on the AZ-801 certification test. To get familiar with real exam environment, we suggest you try our Sample Microsoft Configuring Windows Server Hybrid Advanced Services Certification Practice Exam. This sample practice exam gives you the feeling of reality and is a clue to the questions asked in the actual Microsoft Certified - Windows Server Hybrid Administrator Associate certification exam.