What does this exam cover?

Advanced Windows Server hybrid services.

You have an on-premises network and an Azure virtual network. You establish a Site-to-Site VPN connection from the on-premises network to the Azure virtual network, but the connection frequently disconnects. You need to debug the IPsec tunnel from Azure. Which Azure VPN Gateway diagnostic log should you review?

Correct Answer: IKEDiagnosticLog

You need to meet technical requirements for Share1. What should you use?

Correct Answer: Storage Migration Service

You have two servers named Server1 and Server2 that run Windows Server. Both servers have the Hyper-V server role installed. Server1 hosts three virtual machines named VM1, VM2, and VM3. The virtual machines replicate to Server2. Server1 experiences a hardware failure. You need to bring VM1, VM2, and VM3 back online as soon as possible. From the Hyper-V Manager console on Server2, what should you run for each virtual machine?

Correct Answer: Unplanned Failover

You have an Azure virtual machine named VM1 that has the Web Server (IIS) server role installed. VM1 hosts a critical line-of-business (LOB) application. After the security team at your company deploys a new security baseline to VM1, users begin reporting that the application is unresponsive. You suspect that the security baseline has caused networking issues. You need to perform a network trace on VM1. What should you do?

Correct Answer: From the Azure portal, configure the Performance diagnostics settings for VM1.

You need to back up Server 4 to meet the technical requirements. What should you do first?

Correct Answer: Install the Microsoft Azure Recovery Services (MARS) agent.

You have an on-premises server that runs Windows Server and has the Web Server (IIS) server role installed. The server hosts a web app that connects to an on- premises Microsoft SQL Server database. You plan to migrate the web app to an Azure App Services web app. The database will remain on-premises. You need to ensure that the migrated web app can access the database. What should you configure in Azure?

Correct Answer: a Hybrid Connection

You have an Azure virtual machine named VM1. Crash dumps for a process named Process1 are enabled for VM1. When process1.exe on VM1 crashes, a technician must access the memory dump files on the virtual machine. The technician must be prevented from accessing the virtual machine. To what should you provide the technician access?

Correct Answer: an Azure Blob Storage container

You are remediating the firewall security risks to meet the security requirements. What should you configure to reduce the risks?

Correct Answer: a Group Policy Object (GPO)

You need to meet the technical requirements for Cluster3. What should you include in the solution?

Correct Answer: Add a failover cluster role.

You are planning the data share migration to support the on-premises migration plan. What should you use to perform the migration?

Correct Answer: Storage Migration Service

You have two file servers named Server1 and Server2 that run Windows Server. Server1 contains a shared folder named Data. Data contains 10 TB of data. You plan to decommission Server1. You need to migrate the files from Data to a new shared folder on Server2. The solution must meet the following requirements: ✑ Ensure that share, file, and folder permissions are copied. ✑ After the initial copy occurs, ensure that changes in \\Server1\Data can be synced to the destination without initiating a full copy. ✑ Minimize administrative effort. What should you use?

Correct Answer: Storage Migration Service

You are planning the deployment of Microsoft Sentinel. Which type of Microsoft Sentinel data connector should you use to meet the security requirements?

Correct Answer: Microsoft Defender for Identity

You plan to deploy the Azure Monitor agent to 100 on-premises servers that run Windows Server. Which parameters should you provide when you install the agent?

Correct Answer: the ID and the key of an Azure Log Analytics workspace

Your company uses Storage Spaces Direct. You need to view the available storage in a Storage Space Direct storage pool. What should you use?

Correct Answer: Failover Cluster Manager

You have an Azure virtual machine named VM1 that runs Windows Server. You plan to deploy a new line-of-business (LOB) application to VM1. You need to ensure that the application can create child processes. What should you configure on VM1?

Correct Answer: Exploit protection

You have three Azure virtual machines named VM1, VM2, and VM3 that host a multitier application. You plan to implement Azure Site Recovery. You need to ensure that VM1, VM2, and VM3 fail over as a group. What should you configure?

Correct Answer: a recovery plan

You have five Azure virtual machines. You need to collect performance data and Windows Event logs from the virtual machines. The data collected must be sent to an Azure Storage account. What should you install on the virtual machines?

Correct Answer: the Azure Diagnostics extension

You have an Azure virtual machine named VM1. You install an application on VM1, and then restart the virtual machine. After the restart, you get the following error message: `Boot failure. Reboot and Select proper Boot Device or Insert Boot Media in selected Boot Device.` You need to mount the operating system disk offline from VM1 to a temporary virtual machine to troubleshoot the issue. Which command should you run in Azure CLI?

Correct Answer: az vm repair create

You have a Site-to-Site VPN between an on-premises network and an Azure VPN gateway. BGP is disabled for the Site-to-Site VPN. You have an Azure virtual network named Vnet1 that contains a subnet named Subnet1. Subnet1 contains a virtual machine named Server1. You can connect to Server1 from the on-premises network. You extend the address space of Vnet1. You add a subnet named Subnet2 to Vnet1. Subnet2 uses the extended address space. You deploy an Azure virtual machine named Server2 to Subnet2. You cannot connect to Server2 from the on-premises network. Server1 can connect to Server2. You need to ensure that you can connect to Subnet2 from the on-premises network. What should you do?

Correct Answer: Update the routing information on the on-premises routers.

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant by using password hash synchronization. You have a Microsoft 365 subscription. All devices are hybrid Azure AD-joined. Users report that they must enter their password manually when accessing Microsoft 365 applications. You need to reduce the number of times the users are prompted for their password when they access Microsoft 365 and Azure services. What should you do?

Correct Answer: From Azure AD Connect, enable single sign-on (SSO).

You have two Azure virtual machines that run Windows Server. You plan to create a failover cluster that will host the virtual machines. You need to configure an Azure Storage account that will be used by the cluster as a cloud witness. The solution must maximize resiliency. Which type of redundancy should you configure for the storage account?

Correct Answer: Zone-redundant storage (ZRS)

You have an Azure subscription that has Microsoft Defender for Cloud enabled. You have 50 Azure virtual machines that run Windows Server. You need to ensure that any security exploits detected on the virtual machines are forwarded to Defender for Cloud. Which extension should you enable on the virtual machines?

Correct Answer: Vulnerability assessment for machines

You have 200 Azure virtual machines. You create a recovery plan in Azure Site Recovery to fail over all the virtual machines to an Azure region. The plan has three manual actions. You need to replace one of the manual actions with an automated process. What should you use?

Correct Answer: an Azure Automation runbook

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains three domain controllers named DC1, DC2, and DC3. You connect a Microsoft Defender for Identity instance to the domain. You need to onboard all the domain controllers to Defender for Identity. What should you run on the domain controllers?

Correct Answer: Azure ATP Sensor Setup.exe

You have 10 servers that run Windows Server in a workgroup. You need to configure the servers to encrypt all the network traffic between the servers. The solution must be as secure as possible. Which authentication method should you configure in a connection security rule?

Correct Answer: computer certificate

You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed. You have a Hyper-V failover cluster named Cluster1. All servers are members of the same domain. You need to ensure that you use Hyper-V Replica with Kerberos authentication on the default port to replicate virtual machines from Cluster1 to Server1. What should you do on Server1?

Correct Answer: From Windows Defender Firewall with Advanced Security, enable the Hyper-V Replica HTTP Listener (TCP-In) rule.

Welcome to awslagi.com – Sharing AWS, Google Cloud, Microsoft Azure IT Exams. It's free for all!

Configuring Windows Server Hybrid Advanced Services

Configure Windows Server hybrid advanced services securely.

4.8★★★★★(383 ratings)

16,139 studentsIntermediate

Build advanced hybrid skills for Windows Server environments that extend beyond core administration. The exam emphasizes identity, security, and service configuration across on-premises and cloud-connected infrastructures. This certification supports professionals responsible for complex hybrid systems. It helps you deliver resilient, secure server services while aligning with modern cloud practices.

What you'll learn

Configure advanced hybrid services- Support identity and security- Manage server integration- Improve hybrid resilience- Operate enterprise services

AZ-801

Lectures2

Quizzes0

Duration30 week

Students16,139

$20.00

📢 Unlock Full Access to Success!

"The content displayed here is a promotional preview and contains only 50% of the actual exam database. To access the complete set of updated questions, please upgrade to the Full Version."

👉 Click the button and follow the instructions to secure your full access immediately!