DOWNLOAD the newest TestPassKing AZ-801 PDF dumps from Cloud Storage for free: https://drive.google.com/open?id=1Oi3NeV7IsvWCwjFfH6oK37NXwRswhf8f
With the help of AZ-801 study materials, you can conduct targeted review on the topics which to be tested before the exam, and then you no longer have to worry about the problems that you may encounter a question that you are not familiar with during the exam. With AZ-801 study materials, you will not need to purchase any other review materials. We have hired professional IT staff to maintain AZ-801 Study Materials and our team of experts also constantly updates and renew the question bank according to changes in the syllabus.
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Secure Windows Server on-premises and hybrid infrastructures | 25–30% | - Secure Windows Server storage
|
| Topic 2: Monitor and troubleshoot Windows Server environments | 20–25% | - Manage updates and compliance
|
| Topic 3: Implement disaster recovery | 10–15% | - Back up and restore Windows Server
|
| Topic 4: Migrate servers and workloads | 20–25% | - Migrate file servers and data
|
| Topic 5: Implement and manage Windows Server high availability | 10–15% | - Manage cluster workloads
|
>> AZ-801 Excellect Pass Rate <<
Why do most people choose TestPassKing? Because TestPassKing could bring great convenience and applicable. It is well known that TestPassKing provide excellent Microsoft AZ-801 exam certification materials. Many candidates do not have the confidence to win Microsoft AZ-801 Certification Exam, so you have to have TestPassKing Microsoft AZ-801 exam training materials. With it, you will be brimming with confidence, fully to do the exam preparation.
NEW QUESTION # 133
You have an Azure virtual machine named VM1 that runs Windows Server.
When you attempt to install the Azure Performance Diagnostics extension on VM I, the installation fails.
You need to identify the cause of the installation failure.
What are two possible ways to achieve the goal? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
Answer: C,D
Explanation:
Topic 2, Fabrikam inc
Existing Environment
Identity Infrastructure
Fabrikam has an Active Directory Domain Services (AD DS) forest that syncs with an Azure Active Directory (Azure AD) tenant. The AD DS forest contains two domains named corp.fabrikam.com and europe.fabrikam.com.
Chicago Office On-Premises Servers
The office in Chicago contains on-premises servers that run Windows Server 2016 as shown in the following table.
All the servers in the Chicago office are in the corp.fabrikam.com domain.
All the virtual machines in the Chicago office are hosted on HV1 and HV2. HV1 and HV2 are nodes in a failover cluster named Cluster1.
WEB1 and WEB2 run an Internet Information Services (IIS) website. Internet users connect to the website by using a URL of https://www.fabrikam.com.
All the users in the Chicago office run an application that connects to a UNC path of \\Fileserver1\Data.
Paris On-Premises Servers
The office in Paris contains a physical server named dc2.europe.fabrikam.com that runs Windows Server 2016 and is a domain controller for the europe.fabrikam.com domain.
Network Infrastructure
The networks in both the Chicago and Paris offices have local internet connections. The Chicago and Paris offices are connected by using VPN connections.
The client computers in the Chicago office get IP addresses from DHCP1.
Security Risks
Fabrikam identifies the following security risks:
Some accounts connect to AD DS resources by using insecure protocols such as NTLMv1, SMB1, and unsigned LDAP.
Servers have Windows Defender Firewall enabled. Server administrators sometimes modify firewall rules and allow risky connections.
Requirements
Security Requirements
Fabrikam identifies the following security requirements:
Prevent server administrators from configuring Windows Defender Firewalls rules.
Encrypt all the data disks on the servers by using BitLocker Drive Encryption (BitLocker).
Ensure that only authorized applications can be installed or run on the servers in the forest.
Implement Microsoft Sentinel as a reporting solution to identify all connections to the domain controllers that use insecure protocols.
On-Premises Migration Plan
Fabrikam plans to migrate all the existing servers and identifies the following migration requirements:
Move the APP1 and APP2 virtual machines in the Chicago office to a new Hyper-V failover cluster named Cluster2 that will run Windows Server 2022.
Cluster2 will contain two new nodes named HV3 and HV4.
All virtual machine files will be stored on a Cluster Shared Volume (CSV).
Migrate Archive1 to a new failover cluster named Cluster3 that will run Windows Server 2022.
Cluster3 will contain two physical nodes named Node1 and Node2.
The file shares on Cluster3 will be a failover cluster role in active-passive mode.
Migrate all users, groups, and client computers from europe.fabrikam.com to corp.fabrikam.com.
The migration will be performed by using the Active Directory Migration Tool (ADMT).
A computer named ADMTcomputer will be deployed to the corp.fabrikam.com domain to run ADMT migration procedures.
User accounts will retain their existing password.
Migrate the data share from Fileserver1 to a new server named Fileserver2 that will run Windows Server 2022. After the migration, the data share must be accessible by using the existing UNC path.
Azure Migration Plan
Fabrikam plans to migrate some resources to Azure and identifies the following migration requirements:
Create an Azure subscription named Sub1.
Create an Azure virtual network named Vnet1.
Use ExpressRoute to connect the Paris and Chicago offices to Vnet1.
License all servers for Microsoft Defender for servers.
Migrate APP3 and APP4 to Azure.
Migrate the www.fabrikam.com website to an Azure App Service web app named WebApp1.
Decommission WEB1 and WEB2.
DHCP Migration Plan
Fabrikam plans to replace DHCP1 with a new server named DHCP2 and identifies the following migration requirements:
Ensure that DHCP2 provides the same IP addresses that are currently available from DHCP1.
Prevent DHCP1 from servicing clients once services are enabled on DHCP2.
Ensure that the existing leases and reservations are migrated.
NEW QUESTION # 134
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.
You need to migrate App1 to a Docker image on Server2.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the coned order.
Answer:
Explanation:
Explanation:
NEW QUESTION # 135
Hotspot Question
You have an Azure subscription that contains an Azure key vault named Vault1.
You deploy Azure Disk Encryption.
You configure Vault1 to support Azure Disk Encryption.
You need to ensure that you can encrypt Azure Disk Encryption artifacts before they are written to Vault1. The solution must provide the highest level of encryption.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: key
Create and configure a key vault for Azure Disk Encryption on a Windows VM Set up a key encryption key (KEK) If you want to use a key encryption key (KEK) for an additional layer of security for encryption keys, add a KEK to your key vault. When a key encryption key is specified, Azure Disk Encryption uses that key to wrap the encryption secrets before writing to Key Vault.
Use the Azure CLI az keyvault key create command to generate a new KEK and store it in your key vault.
az keyvault key create --name "myKEK" --vault-name "<your-unique-keyvault-name>" --kty RSA -
-size 4096
Box 2: RSA-HSM
For 4096-bit encryption choose RSA-HSM.
For maximum key security: Always use an HSM (like EC-HSM or RSA-HSM) to protect your keys, regardless of the algorithm you choose.
Reference:
https://learn.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-key-vault
https://learn.microsoft.com/en-us/azure/key-vault/keys/about-keys
NEW QUESTION # 136
You have an on-premises server named Setver1 that runs Windows Server 2022 Standard.
You have an Azure subscription that contains the virtual machines shown in the following table.
The subscription contains a Microsoft Sentinel instance named Sentinel1 in the Central US Azure region. You need to implement the Windows Firewall connector. Which servers can send Windows Firewall logs to Sentinel1?
Answer: C
NEW QUESTION # 137
You have a Storage Spaces Direct cluster named Cluster1 that contains multiple nodes.
You have a firmware update for the hard disks attached to each node.
You create a configuration file named FileLxm1 for the update.
You need to automate the rollout of the firmware update to the nodes of Cluster1. The solution must minimize downtime of the workloads hosted in Cluster1.
How should you complete the PowerShell commands? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 138
......
"TestPassKing" created a demo version for customer satisfaction so candidates can evaluate the AZ-801 exam questions before purchasing. Also, "TestPassKing" has made this Microsoft AZ-801 practice exam material budget-friendly with many benefits that make it the best choice. Our team of experts who designed this AZ-801 Exam Questions assures that whoever prepares with it adequately, there is no doubt of failure and they will pass the Microsoft CERTIFICATION EXAM on the first attempt. Purchase our "TestPassKing" study material now and get free updates for up to 1 year.
Exam AZ-801 Voucher: https://www.testpassking.com/AZ-801-exam-testking-pass.html
DOWNLOAD the newest TestPassKing AZ-801 PDF dumps from Cloud Storage for free: https://drive.google.com/open?id=1Oi3NeV7IsvWCwjFfH6oK37NXwRswhf8f