Free Microsoft AZ-801 Practice Questions & Answers 2026 Part3

You have an on-premises Hyper- V deployment that hosts multiple virtual machines. You have an Azure subscription that contains an Azure Migrate project named Project1. You plan to migrate the virtual machines to Azure by using Project1.You need to discover all the Hyper-V hosts and virtual machines running in your environment. The solution must minimize administrative effort. What should you do first?

You have an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server.You need to prevent the registration of specific COM objects on Server1.What should you use?

You have an Azure virtual machine named VM1 that runs Windows Server. You plan to deploy a new line-of-business (LOB) application to VM1. You need to ensure that the application can create child processes. What should you configure on VM1?

You have a three-node failover cluster.

You have an Azure subscription that has Microsoft Defender for Cloud enabled.You have 50 Azure virtual machines that run Windows Server.You need to ensure that any security exploits detected on the virtual machines are forwarded to Defender for Cloud.Which extension should you enable on the virtual machines?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have a server named Server1 that runs Windows Server.You need to ensure that only specific applications can modify the data in protected folders on Server1.Solution: From Virus & threat protection, you configure Tamper Protection.Does this meet the goal?

You have 10 servers that run Windows Server in a workgroup.You need to configure the servers to encrypt all the network traffic between the servers. The solution must be as secure as possible.Which authentication method should you configure in a connection security rule?

You are planning the migration of Archive1 to support the on - premises migration plan. What is the minimum number of IP addresses required for the node and cluster roles on Cluster3?

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that hosts an app named App1. App1 uses Active Directory authentication.You have a Microsoft Entra tenant that contains a user named User1.You deploy Microsoft Entra Connect sync and configure password synchronization.User1 fails to authenticate to App1.You need to ensure that User1can authenticate to App1.What should you do?

You have an Azure virtual machine named VM1 that runs Windows Server.You need to encrypt the contents of the disks on VM1 by using Azure Disk Encryption.What is a prerequisite for implementing Azure Disk Encryption?

You have a Windows Server 2022 Remote Desktop Services deployment that includes the servers shown in the following table.You need to upgrade Remote Desktop Services deployment to Windows Server 2025.Which Server must you upgrade first?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an on-premises server named Server1 that runs Windows Server.You have a Microsoft Sentinel instance.You add the Windows Firewall data connector in Microsoft Sentinel.You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1.Solution: You install the Log Analytics agent on Server1.Does this meet the goal?

You have a server named Server1 that runs Windows Server.You install a custom app named App1 that is accessed by using TCP port 52310.Users report that they cannot access App1.You confirm that App1 is running on Server1.You need to ensure that the users can access App1. The solution must only provide access to App1 on Server1.What should you do in Windows Defender Firewall with Advanced Security?

You establish synchronization between an AD DS and Azure AD environments. Users whose accounts are synced were able to sign in, but none of them could access cloud resources. What could be the problem?

You have an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server.You need to prevent the registration of specific COM objects on Server1.What should you use?

You have an on-premises server named Server1 that runs Windows Server.You have an Azure subscription.You need to onboard Server1 to Microsoft Defender for Cloud.What should you install on Server1?

You have a server that runs Windows Server. The server is configured to encrypt all incoming traffic by using a connection security rule.You need to ensure that Server1 can respond to the unencrypted tracert commands initiated from computers on the same network.What should you do from Windows Defender Firewall with Advanced Security?

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two servers named Server1 and Server2 that run WindowsServer.You need to ensure that you can use the Computer Management console to manage Server2. The solution must use the principle of least privilege.Which two Windows Defender Firewall with Advanced Security rules should you enable on Server2? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

You have an on-premises server named Server1 that runs Windows Server 2022 Standard.You have an Azure subscription that contains the virtual machines shown in the following table.The subscription contains a Microsoft Sentinel instance named Sentinel1 in the Central US Azure region.You need to implement the Windows Firewall connector.Which servers can send Windows Firewall logs to Sentinel1?

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a file server named Server 1 that hosts multiple shared folders. You have an Azure subscription. You need to migrate the files stored on Server! to Azure by using an Azure Data Box gateway. To which storage services can you migrate the files?

You are planning the data share migration to support the on-premises migration plan.What should you use to perform the migration?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have a server named Server1 that runs Windows Server.You need to ensure that only specific applications can modify the data in protected folders on Server1.Solution: From App & browser control, you configure Reputation-based protection.Does this meet the goal?

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that hosts an app named App1. App1 uses Active Directory authentication.You have a Microsoft Entra tenant that contains a user named User1.You deploy Microsoft Entra Connect sync and configure password synchronization.User1 fails to authenticate to App1.You need to ensure that User1can authenticate to App1.What should you do?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have a server named Server1 that runs Windows Server.You need to ensure that only specific applications can modify the data in protected folders on Server1.Solution: From App & browser control, you configure the Exploit protection settings.Does this meet the goal?

You have an Azure virtual machine named VM1 that runs Windows Server.You plan to deploy a new line-of-business (LOB) application to VM1.You need to ensure that the application can create child processes.What should you configure on VM1?

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains a user named User1.You deploy a read-only domain controller (RODC) named RODC1.You need to ensure that User1 is a local administrator on RODC1. The solution must use the principle of least privilege.What should you use?

You have an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server.You need to prevent the registration of specific COM objects on Server1.What should you use?

You have an Azure subscription that has Microsoft Defender for Cloud enabled. You have 50 Azure virtual machines that run Windows Server. You need to ensure that any security exploits detected on the virtual machines are forwarded to Defender for Cloud. Which extension should you enable on the virtual machines?

You have 500 on-premises servers that run Windows Server.You have an Azure subscription that contains a Log Analytics workspace named Workspace1.You plan to use VM insights in Azure Monitor to monitor the on-premises servers.You need to onboard the servers to Azure Arc by using the template script. The solution must meet the following requirements:Follow the principle of least privilege.Minimize administrative effort.What should you do first?

You have a server that runs Windows Server. The server is configured to encrypt all incoming traffic by using a connection security rule.You need to ensure that Server1 can respond to the unencrypted tracert commands initiated from computers on the same network.What should you do from Windows Defender Firewall with Advanced Security?

You have an Azure virtual machine named VM1 that runs Windows Server.You plan to deploy a new line-of-business (LOB) application to VM1.You need to ensure that the application can create child processes.What should you configure on VM1?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have a failover cluster named Cluster1 that hosts an application named App1.The General tab in App1 Properties is shown in the General exhibit. (Click the General tab.)The Failover tab in App1 Properties is shown in the Failover exhibit. (Click the Failover tab.)Server1 shuts down unexpectedly.You need to ensure that when you start Server1, App1 continues to run on Server2.Solution: From the General settings, you move Server2 up.Does this meet the goal?

You have an Azure virtual machine named VM1 that runs Windows Server.The operating system on VM1 fails to fully initialize its network stack, and you cannot establish a network connection.You need to establish an interactive shell session.What should you use?

You have a server that runs Windows Server 2025 Standard and has the Hyper-V role installed.

Your on-premises network is connected to Azure. You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. You need to identify the latency between the on-premises network and VM1. Which Azure Network Watcher settings should you use?

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a file Server named Server1 that hosts multiple shared folders.You have an Azure subscription.You need to migrate the files stored on Server1 to Azure by using an Azure Data Box gateway.To which storage services can you migrate the files?

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains a user named User1. You deploy a read-only domain controller (RODC) named RODC1. You need to ensure that User1 is a local administrator on RODC1. The solution must use the principle of least privilege. What should you use?

You have a failover cluster named Cluster1 that has the following configurations: - Number of nodes: 6 - Quorum: Dynamic quorum - Witness: File share, Dynamic witness What is the maximum number of nodes that can fail simultaneously while maintaining quorum?

You have a server named Server1 that runs Windows Server.You install a custom app named App1 that is accessed by using TCP port 52310.Users report that they cannot access App1.You confirm that App1 is running on Server1.You need to ensure that the users can access App1. The solution must only provide access to App1 on Server1.What should you do in Windows Defender Firewall with Advanced Security?