Microsoft AZ-801 Configuring Windows Server Hybrid Advanced Services Free Practice Test — 30 Questions

Question 1

In a hybrid network environment, a company has multiple DNS servers configured to handle internal and external queries. The network administrator needs to ensure that queries for specific external domains are forwarded to designated external DNS servers while all other queries are resolved internally. Which configuration should the administrator implement to achieve this?

Accepted Answer

Conditional forwarders for the specific external domains

Question 2

In a Windows Server environment, you are tasked with automating the process of creating user accounts in Active Directory using PowerShell. You need to write a script that not only creates the user accounts but also assigns them to specific groups based on their department. The script should take a CSV file as input, where each row contains the user\'s name, department, and email address. Which of the following approaches best describes how to structure your PowerShell script to achieve this?

Accepted Answer

Use the `Import-Csv` cmdlet to read the CSV file, then loop through each entry to create a user with `New-ADUser`, and use `Add-ADGroupMember` to assign the user to the appropriate group based on the department field.

Question 3

In a healthcare organization, a new electronic health record (EHR) system is being implemented. The organization must ensure compliance with the Health Insurance Portability and Accountability Act (HIPAA) regulations, particularly concerning the privacy and security of patient information. The IT department is tasked with determining the most effective method for encrypting patient data both at rest and in transit. Which approach should the IT department prioritize to ensure maximum compliance with HIPAA standards while also considering the potential risks associated with data breaches?

Accepted Answer

Implementing AES (Advanced Encryption Standard) with a 256-bit key for data at rest and TLS (Transport Layer Security) for data in transit.

Question 4

In a hybrid cloud environment, a company is looking to enhance its security posture by implementing a multi-layered security strategy. They are considering several recommendations to protect their on-premises and cloud resources. Which of the following strategies would be the most effective in ensuring data integrity and confidentiality while also providing robust access control?

Accepted Answer

Implementing a Zero Trust architecture that requires continuous verification of user identities and device health before granting access to resources.

Question 5

A company is planning to implement a new file server that will utilize Storage Spaces to manage its storage pools. The IT administrator needs to configure the file server to ensure high availability and optimal performance. The storage pool will consist of 10 physical disks, each with a capacity of 2 TB. The administrator wants to use a two-way mirror for redundancy. How much usable storage will be available in the storage pool after configuration?

Accepted Answer

10 TB

Question 6

In a corporate environment, a network administrator is tasked with configuring DNS zones for a new branch office. The branch office will have its own internal DNS server that needs to resolve names for both internal resources and external websites. The administrator decides to implement a split-horizon DNS configuration. Which of the following statements best describes the implications of this configuration on DNS zone management and resolution?

Accepted Answer

The internal DNS server will maintain separate zones for internal and external resources, allowing for different records for the same domain name based on the source of the DNS query.

Question 7

A network administrator is tasked with designing a subnetting scheme for a corporate network that requires at least 500 usable IP addresses for a department. The organization has been allocated the IP address range of 192.168.1.0/24. What subnet mask should the administrator use to meet the department\'s requirements while ensuring efficient use of IP addresses?

Accepted Answer

255.255.254.0

Question 8

In a hybrid cloud environment, a company is experiencing intermittent connectivity issues between its on-premises data center and its Azure resources. The IT team suspects that the problem may be related to the configuration of their VPN gateway. They have configured a Site-to-Site VPN using IKEv2, but they are unsure about the implications of the MTU (Maximum Transmission Unit) settings on their network performance. What is the most effective approach to troubleshoot and resolve the connectivity issues related to MTU settings in this scenario?

Accepted Answer

Adjust the MTU size on the VPN gateway to a lower value, such as 1400 bytes, to accommodate the overhead introduced by the VPN encapsulation.

Question 9

A company is monitoring the performance of its hybrid cloud environment, which includes both on-premises and Azure resources. They have set up Azure Monitor to collect metrics and logs from various resources. The IT team wants to analyze the average CPU utilization of their virtual machines (VMs) over the past week to identify any performance bottlenecks. If the CPU utilization data for the VMs over the last seven days is as follows: Day 1: 60%, Day 2: 70%, Day 3: 80%, Day 4: 75%, Day 5: 65%, Day 6: 90%, Day 7: 85%, what is the average CPU utilization for the week?

Accepted Answer

0.75

Question 10

In a Windows Server environment, you are tasked with automating the process of creating user accounts in Active Directory using PowerShell. You need to write a script that not only creates the user accounts but also assigns them to specific groups based on their department. Given the following requirements: each user must have a unique username, a default password, and be added to a group that corresponds to their department (e.g., \"Sales\", \"HR\", \"IT\"). If the department is not recognized, the script should log an error message. Which of the following PowerShell cmdlets and constructs would best achieve this automation while ensuring error handling and group assignment?

Accepted Answer

`New-ADUser -Name $name -SamAccountName $username -UserPrincipalName "$username@domain.com" -Password (ConvertTo-SecureString "DefaultPassword" -AsPlainText -Force) -Path "OU=Users,DC=domain,DC=com"; Add-ADGroupMember -Identity $group -Members $username; if (-not (Get-ADGroup -Filter {Name -eq $group})) { Write-Host "Error: Department not recognized." }`

Question 11

In a cloud environment, you are tasked with configuring Network Security Groups (NSGs) to manage inbound and outbound traffic for a web application hosted on Azure. The application requires HTTP traffic on port 80 and HTTPS traffic on port 443. Additionally, you need to ensure that only specific IP addresses from your corporate network can access the management interface on port 8080. Given the following NSG rules, which configuration will effectively secure the application while allowing necessary access?

Accepted Answer

Allow inbound traffic on ports 80 and 443 from any source, and allow inbound traffic on port 8080 from specific IP addresses only.

Question 12

A company is planning to implement Azure ExpressRoute to enhance its network connectivity between its on-premises infrastructure and Azure. They need to ensure that their ExpressRoute circuit can handle a peak bandwidth requirement of 1 Gbps. The company is considering two options: a Standard circuit and a Premium circuit. The Standard circuit offers a maximum bandwidth of 1 Gbps, while the Premium circuit can support up to 10 Gbps and provides additional features such as global reach and more virtual network connections. If the company anticipates future growth that may require an increase in bandwidth to 5 Gbps within the next two years, which option should they choose to ensure scalability and cost-effectiveness?

Accepted Answer

Premium circuit

Question 13

In a hybrid environment where an organization has both on-premises Active Directory and Azure Active Directory, a network administrator is tasked with establishing a trust relationship between the two directories to facilitate seamless authentication for users accessing resources across both environments. Which of the following configurations would best support this requirement while ensuring security and efficiency in user authentication?

Accepted Answer

Implementing a federated trust using Active Directory Federation Services (AD FS) to allow users to authenticate with their on-premises credentials when accessing Azure resources.

Question 14

A company is planning to implement Azure ExpressRoute to establish a private connection between their on-premises infrastructure and Azure. They need to ensure that their ExpressRoute circuit meets specific bandwidth requirements for their applications, which include high-volume data transfers and low-latency access to Azure services. If the company anticipates a peak bandwidth requirement of 1 Gbps and wants to provision their ExpressRoute circuit with a 50% overhead to accommodate future growth, what should be the minimum bandwidth of the ExpressRoute circuit they should provision?

Accepted Answer

1.5 Gbps

Question 15

In a healthcare organization, compliance with the Health Insurance Portability and Accountability Act (HIPAA) is critical for protecting patient information. The organization is conducting a risk assessment to identify vulnerabilities in its electronic health record (EHR) system. During this assessment, they discover that certain user accounts have excessive permissions that allow access to sensitive patient data beyond what is necessary for their roles. What is the most appropriate compliance standard or principle that the organization should apply to address this issue?

Accepted Answer

Principle of Least Privilege

Question 16

A company has implemented Conditional Access Policies to enhance security for its cloud applications. The IT administrator wants to ensure that only users who meet specific criteria can access sensitive data. They decide to create a policy that requires multi-factor authentication (MFA) for users accessing the application from outside the corporate network. Additionally, they want to restrict access based on the user\'s device compliance status. Which of the following configurations would best achieve this goal while ensuring that users who are on the corporate network can access the application without additional authentication steps?

Accepted Answer

Require MFA for all users accessing the application from outside the corporate network and enforce device compliance checks for all devices, regardless of location.

Question 17

A company has implemented a hybrid cloud environment where critical applications are hosted on both on-premises servers and Azure. During a routine maintenance window, a failure occurs in the on-premises data center, necessitating a failover to Azure. After the issue is resolved, the company needs to perform a failback to restore operations to the on-premises environment. What are the key considerations and steps that should be taken during the failback process to ensure data integrity and minimal downtime?

Accepted Answer

Validate data consistency, ensure application compatibility, and perform a phased migration back to on-premises servers.

Question 18

In a scenario where a company is planning to migrate its on-premises Active Directory to Azure Active Directory (Azure AD), which Microsoft documentation resource would be most beneficial for understanding the prerequisites and steps involved in this hybrid identity solution?

Accepted Answer

Azure Active Directory Connect documentation

Question 19

A company has deployed multiple Azure resources across different regions and wants to ensure that they can monitor the performance and health of these resources effectively. They are particularly interested in tracking metrics such as CPU usage, memory consumption, and network traffic. The company also wants to set up alerts that notify the operations team when certain thresholds are exceeded. Which Azure Monitor feature should they implement to achieve this comprehensive monitoring and alerting strategy?

Accepted Answer

Azure Monitor Metrics

Question 20

A company is experiencing performance issues with its web application due to high traffic volumes. They decide to implement a load balancing solution to distribute incoming requests across multiple servers. The application is hosted on three servers, each capable of handling a maximum of 200 requests per second. If the average incoming traffic is 450 requests per second, what is the maximum percentage of requests that can be handled by the load balancer without causing any server to exceed its capacity?

Accepted Answer

0.75

Question 21

In a hybrid cloud environment, you are tasked with configuring VNet peering between two Azure virtual networks, VNet1 and VNet2, located in different regions. VNet1 has a CIDR block of 10.0.0.0/16, while VNet2 has a CIDR block of 10.1.0.0/16. You need to ensure that resources in both VNets can communicate with each other without any restrictions. Additionally, you want to implement a scenario where VNet1 can access a specific service in VNet2, which is hosted on a subnet with a CIDR block of 10.1.1.0/24. What configuration steps must you take to achieve this, considering the implications of address space overlap and routing?

Accepted Answer

Create a VNet peering connection between VNet1 and VNet2, ensuring that both VNets have non-overlapping address spaces and enable the "Allow forwarded traffic" option in the peering settings.

Question 22

A company is implementing a new security policy to enhance its compliance with the General Data Protection Regulation (GDPR). The policy includes measures for data encryption, access control, and regular audits. During a risk assessment, the security team identifies that sensitive customer data is stored in an unencrypted format on a cloud server. What is the most effective immediate action the company should take to align with GDPR requirements and mitigate the risk of data breaches?

Accepted Answer

Implement encryption for the sensitive customer data stored on the cloud server.

Question 23

A company has implemented a backup policy that includes daily incremental backups and weekly full backups. The organization needs to ensure that it can restore its data to any point in time within the last 30 days. If the company has a total of 100 GB of data and the incremental backups typically capture 5% of the data changes daily, how much storage space will be required for the backups over a 30-day period, assuming that the full backup is 100 GB and that the incremental backups are stored for 30 days?

Accepted Answer

700 GB

Question 24

A company is planning to deploy a new Windows Server environment that will support both on-premises and cloud-based applications. They need to ensure that their Active Directory (AD) is configured correctly to facilitate hybrid identity management. Which of the following configurations would best support this requirement while ensuring that users can authenticate seamlessly across both environments?

Accepted Answer

Implement Azure Active Directory Connect to synchronize on-premises AD with Azure AD, enabling single sign-on (SSO) capabilities.

Question 25

A company is planning to migrate its on-premises infrastructure to a hybrid cloud environment. They currently have a Windows Server environment with multiple virtual machines (VMs) running various applications. The IT team needs to assess the current on-premises environment to determine the best approach for migration. Which of the following assessments should the team prioritize to ensure a successful migration strategy?

Accepted Answer

Conducting a comprehensive inventory of all hardware and software assets, including their configurations and dependencies.

Question 26

In a large organization, the IT department is implementing a new change management process to enhance the efficiency of software updates across multiple departments. The team has decided to document each change request, including the rationale, impact analysis, and rollback procedures. During a review meeting, a team member suggests that the documentation should also include a section on stakeholder communication strategies. How would you evaluate the importance of including stakeholder communication in the change management documentation?

Accepted Answer

Including stakeholder communication strategies is crucial as it ensures that all affected parties are informed and can provide feedback, which can lead to smoother implementation and acceptance of changes.

Question 27

A company is planning to implement a hybrid cloud solution to enhance its data management capabilities. They need to ensure that their on-premises Windows Server environment can seamlessly integrate with Azure services. As part of this integration, they are considering the use of Azure Arc to manage their resources. Which of the following best describes the primary benefit of using Azure Arc in this scenario?

Accepted Answer

It allows for unified management of both on-premises and cloud resources through a single control plane.

Question 28

A company has implemented Windows Server Backup to protect its critical data. The backup strategy includes full backups every Sunday and differential backups every Wednesday. If the full backup size is 200 GB and the differential backup size is 50 GB, how much total storage space will be required for backups over a four-week period, assuming no data changes occur between backups? Additionally, consider that the company wants to retain the last two full backups and the last three differential backups. What is the minimum storage requirement for the backup strategy?

Accepted Answer

600 GB

Question 29

A company is experiencing performance issues with its hybrid cloud environment, where on-premises servers are integrated with Azure services. The IT administrator needs to monitor the performance metrics of both environments to identify bottlenecks. Which approach should the administrator take to effectively monitor and manage the performance of the hybrid environment?

Accepted Answer

Implement Azure Monitor to collect and analyze performance metrics from both on-premises and Azure resources, and configure alerts for specific thresholds.

Question 30

In a hybrid environment where Azure AD Connect is implemented, a company needs to synchronize its on-premises Active Directory with Azure Active Directory. The IT administrator is tasked with ensuring that only specific organizational units (OUs) are synchronized to Azure AD to maintain a clean and manageable directory. The administrator must also consider the implications of filtering and the potential impact on user authentication and access to cloud resources. Which approach should the administrator take to achieve this goal while ensuring minimal disruption to existing services?

Accepted Answer

Configure Azure AD Connect to use OU filtering to specify which OUs to synchronize.

Microsoft AZ-801 Configuring Windows Server Hybrid Advanced Services Free Practice Test — 30 Questions

A lot more is already mapped out

About the Microsoft AZ-801 Configuring Windows Server Hybrid Advanced Services Certification