View Full Microsoft AZ-801 Exam Dumps and Practice Test Dumps

 

Question 181. Which Active Directory feature allows administrators to control replication based on the physical network structure?

1. Global Catalog
2. Active Directory Sites and Services
3. Group Policy Management
4. Active Directory Administrative Center

Correct Answer: 2. Active Directory Sites and Services

Explanation:

Active Directory Sites and Services allows administrators to represent the physical network topology within Active Directory. Sites are normally associated with IP subnets and help domain controllers determine which resources are geographically or logically close to clients and other domain controllers. Site links define how replication occurs between different sites and can be configured with costs and schedules. This helps reduce unnecessary replication traffic across slower or expensive network connections. The Global Catalog provides directory search capabilities, while Group Policy Management handles administrative policies. Therefore, Active Directory Sites and Services is the appropriate feature for managing replication according to the physical network structure.

Question 182. Which Active Directory component provides a partial, searchable copy of objects from all domains in a forest?

1. Domain Controller
2. Read-Only Domain Controller
3. Global Catalog
4. SYSVOL

Correct Answer: 3. Global Catalog

Explanation:

The Global Catalog is a distributed Active Directory data repository that contains a partial replica of objects from every domain in an Active Directory forest. It includes enough attributes to support forest-wide searches and helps users locate resources without needing to know which domain contains the object. Global Catalog servers are also important for logon processes involving universal groups. A standard domain controller maintains a full replica of its own domain, while an RODC maintains a read-only copy. SYSVOL stores important domain files such as Group Policy templates and scripts. Therefore, the Global Catalog is the correct component.

Question 183. An administrator needs to allow users from multiple domains to be assigned permissions to resources. Which group scope is most appropriate?

1. Universal
2. Domain Local
3. Global
4. Local

Correct Answer: 1. Universal

Explanation:

Universal groups are designed for environments containing multiple Active Directory domains within the same forest. Members of a universal group can come from different domains, and the universal group can be assigned permissions to resources throughout the forest. This makes universal groups useful for organizing users across domain boundaries when centralized membership is required. Global groups are generally used to contain members from their own domain, while domain local groups are primarily used for assigning permissions to resources in their own domain. Understanding group scope is important when designing Active Directory access models because the wrong scope can make administration unnecessarily complex.

Question 184. What is the primary purpose of delegating control in Active Directory?

1. To remove all administrator accounts
2. To disable replication between domain controllers
3. To replace Group Policy
4. To assign specific administrative permissions without granting full domain administrator rights

Correct Answer: 4. To assign specific administrative permissions without granting full domain administrator rights

Explanation:

Delegation of control in Active Directory allows administrators to grant specific permissions to users or groups without giving them complete administrative authority over the domain. For example, an organization may delegate the ability to reset passwords, create user accounts, or manage specific organizational units to a help-desk group. This follows the principle of least privilege because administrators receive only the permissions required for their responsibilities. Delegation can be configured through Active Directory Users and Computers and the Delegation of Control Wizard. It does not replace Group Policy or disable replication. Proper delegation improves security and simplifies administrative responsibilities.

Question 185. Which DNS configuration allows DNS records to be stored and replicated through Active Directory?

1. Standard primary zone
2. Active Directory-integrated zone
3. Secondary zone
4. Stub zone

Correct Answer: 2. Active Directory-integrated zone

Explanation:

An Active Directory-integrated DNS zone stores DNS zone information directly within Active Directory rather than relying on a separate zone database. DNS information can then be replicated using Active Directory replication mechanisms. This provides several benefits, including improved integration with domain controllers, secure dynamic updates, and multiple writable DNS servers within the environment. A standard primary zone traditionally has a writable DNS database on a primary server, while a secondary zone contains a read-only copy. Stub zones contain limited records used to locate authoritative DNS servers. For an Active Directory environment requiring integrated DNS management and replication, an AD-integrated zone is appropriate.

Question 186. A client subnet cannot directly reach a DHCP server located on another IP subnet. Which component should be configured to forward DHCP requests?

1. DHCP relay agent
2. DNS forwarder
3. Global Catalog
4. SMB witness

Correct Answer: 1. DHCP relay agent

Explanation:

A DHCP relay agent allows DHCP clients and DHCP servers to communicate when they are located on different IP subnets. DHCP clients initially use broadcast traffic to locate a DHCP server, but routers normally do not forward these broadcasts. A DHCP relay agent receives the client request and forwards it to the configured DHCP server, allowing centralized DHCP services to support multiple network segments. DNS forwarding serves a different purpose by forwarding DNS queries to another DNS server. A Global Catalog is an Active Directory service, while an SMB witness supports highly available file services. Therefore, a DHCP relay agent is the correct solution for forwarding DHCP requests across routed networks.

Question 187. Which DHCP feature ensures that a specific device consistently receives the same IP address based on its MAC address?

1. DHCP scope exclusion
2. DHCP reservation
3. DHCP relay
4. DHCP superscope

Correct Answer: 2. DHCP reservation

Explanation:

A DHCP reservation associates a specific IP address with a client’s MAC address. When the device requests an address from the DHCP server, the reservation ensures that the same configured IP address is assigned to that device, provided the reservation remains valid and the address is available. This is useful for devices such as printers, servers, network appliances, and other systems that need predictable addressing while still being centrally managed through DHCP. Scope exclusions prevent certain addresses from being leased, while relay agents forward DHCP traffic between subnets. A superscope groups multiple scopes together. Therefore, a DHCP reservation provides the required consistent address assignment.

Question 188. An organization needs two DHCP servers to provide continuous DHCP service if one server becomes unavailable. Which feature should be configured?

1. DHCP relay
2. DHCP reservation
3. DHCP failover
4. DHCP superscope

Correct Answer: 3. DHCP failover

Explanation:

DHCP failover allows two DHCP servers to share responsibility for servicing DHCP clients and maintaining lease information. It is designed to improve availability by allowing clients to continue receiving DHCP services when one server becomes unavailable. Windows Server DHCP failover can operate using modes such as load balance or hot standby, depending on the desired deployment model. DHCP reservations address predictable IP assignments but do not provide server redundancy. DHCP relay forwards DHCP messages between subnets, while superscopes combine multiple scopes on a DHCP server. Therefore, DHCP failover is the appropriate feature when continuous DHCP service is required across two servers.

Question 189. A user has both share permissions and NTFS permissions on a file server. Which permissions determine access when the user accesses the file through an SMB share?

1. Only NTFS permissions
2. Only share permissions
3. The most restrictive combination of share and NTFS permissions
4. The most permissive combination of share and NTFS permissions

Correct Answer: 3. The most restrictive combination of share and NTFS permissions

Explanation:

When a user accesses a file through an SMB share, both share permissions and NTFS permissions can affect the resulting access. The effective permission is generally the most restrictive combination of the two permission sets. For example, if share permissions allow Read access but NTFS permissions allow Modify access, the user effectively receives only Read access through the share. NTFS permissions continue to apply when users access files locally. Understanding the difference between share and NTFS permissions is important when troubleshooting file access problems. Administrators should design permissions carefully and avoid granting broader access than users actually require.

Question 190. Which SMB feature allows multiple network connections to be used simultaneously for a single SMB session?

1. SMB Multichannel
2. SMB Signing
3. SMB Encryption
4. SMB Witness

Correct Answer: 1. SMB Multichannel

Explanation:

SMB Multichannel allows SMB to establish multiple network connections between a client and server when multiple suitable network interfaces or paths are available. This can increase throughput and provide greater network resiliency because traffic can use multiple connections simultaneously. SMB Multichannel is especially useful on servers with multiple network adapters and can work with technologies such as SMB Direct. SMB signing provides integrity protection, while SMB encryption protects SMB traffic from being read by unauthorized parties. SMB Witness helps clients receive information about highly available SMB resources. Therefore, SMB Multichannel is the feature designed to use multiple network connections for SMB communication.

Question 191. Which Windows Server feature provides continuously available SMB file shares in a failover cluster?

1. File Server Resource Manager
2. Scale-Out File Server
3. Windows Server Backup
4. DFS Replication

Correct Answer: 2. Scale-Out File Server

Explanation:

Scale-Out File Server, or SOFS, is designed to provide continuously available file shares for applications and workloads in a Windows Server failover cluster. It allows multiple cluster nodes to provide access to the same storage while supporting highly available SMB file services. SOFS is particularly useful for workloads such as Hyper-V and SQL Server that require reliable file-based storage. FSRM provides file management capabilities such as quotas and screening, while DFS Replication replicates files between servers or folders. Windows Server Backup protects data through backup and recovery operations. Therefore, Scale-Out File Server is the appropriate feature for continuously available clustered SMB shares.

Question 192. Which Storage Spaces resiliency type can tolerate a single disk failure while maintaining access to data?

1. Simple
2. Parity
3. Two-way mirror
4. Thin provisioning

Correct Answer: 3. Two-way mirror

Explanation:

A two-way mirror storage space maintains two copies of data across different physical disks. This allows the storage space to continue operating if one physical disk fails, because another copy of the data remains available. It provides redundancy while generally offering better write performance than parity-based configurations. A simple space provides no redundancy, so a disk failure can result in data loss. Parity provides a different form of redundancy and is commonly useful for capacity-efficient storage scenarios, while thin provisioning controls how storage capacity is allocated rather than defining a specific redundancy method. Therefore, two-way mirror is the appropriate resiliency type for tolerating one disk failure.

Question 193. An administrator needs to replicate data synchronously between two Windows Server volumes. Which technology should be used?

1. DFS Namespaces
2. Storage Replica
3. Data Deduplication
4. FSRM

Correct Answer: 2. Storage Replica

Explanation:

Storage Replica provides block-level replication between servers or clusters and supports synchronous replication when the environment meets the required network and storage conditions. With synchronous replication, changes are written to both the source and destination before the operation is considered complete, helping maintain closely synchronized copies of data. This makes Storage Replica useful for disaster recovery and business continuity scenarios where minimal data loss is required. DFS Namespaces provides a logical namespace rather than block-level replication. Data Deduplication reduces redundant data, while FSRM manages files and storage policies. Therefore, Storage Replica is the appropriate Windows Server technology for synchronous volume replication.

Question 194. Which Azure service can assess on-premises servers and provide migration readiness and sizing information?

1. Azure Migrate
2. Azure Policy
3. Azure DNS
4. Azure Storage Explorer

Correct Answer: 1. Azure Migrate

Explanation:

Azure Migrate provides tools for discovering, assessing, and planning the migration of on-premises workloads to Azure. An assessment can collect information about server configuration, utilization, dependencies, and performance characteristics to help determine migration readiness and appropriate Azure sizing. This information can be used to identify potential compatibility issues and estimate resource requirements before migration. Azure Policy is primarily used to enforce organizational governance requirements, while Azure DNS provides DNS services and Storage Explorer is a management tool for Azure storage resources. Therefore, Azure Migrate is the service designed specifically for assessing on-premises workloads before migration.

Question 195. Which Azure service can provide centralized monitoring and alerting for Windows Server performance data?

1. Azure Files
2. Azure DNS
3. Azure Monitor
4. Azure Bastion

Correct Answer: 3. Azure Monitor

Explanation:

Azure Monitor provides centralized monitoring capabilities for Azure and connected infrastructure, including Windows Server environments. It can collect metrics, logs, and other monitoring data and can be configured to generate alerts when defined conditions occur. When Windows Servers are connected appropriately, administrators can use Azure Monitor capabilities to observe performance and operational information from a centralized location. Azure Files provides cloud file shares, Azure DNS provides DNS hosting and resolution services, and Azure Bastion provides secure remote access to virtual machines through the Azure portal. Therefore, Azure Monitor is the appropriate service for centralized monitoring and alerting of server performance data.

Question 196. Which Windows Server tool provides browser-based management of servers without requiring the administrator to use a traditional desktop interface on the managed server?

1. Windows Admin Center
2. Disk Cleanup
3. Task Manager
4. Registry Editor

Correct Answer: 1. Windows Admin Center

Explanation:

Windows Admin Center is a browser-based management platform designed for administering Windows Server environments. It provides tools for managing servers, virtual machines, storage, networking, certificates, updates, events, and other administrative tasks through a web-based interface. This is particularly useful when managing Server Core installations because administrators do not need to rely on a full graphical desktop experience on the managed server. Task Manager and Registry Editor are local administrative utilities, while Disk Cleanup focuses on removing unnecessary files. Windows Admin Center can also manage multiple servers and integrate with Azure services. Therefore, Windows Admin Center is the correct tool for browser-based Windows Server administration.

Question 197. An administrator needs to manage a Server Core installation remotely by using PowerShell commands. Which technology should be used?

1. DHCP
2. WinRM and PowerShell Remoting
3. DFS Namespace
4. FSRM

Correct Answer: 2. WinRM and PowerShell Remoting

Explanation:

PowerShell Remoting allows administrators to execute PowerShell commands and manage Windows Server systems remotely. It relies on Windows Remote Management, or WinRM, as the underlying management protocol. This is particularly valuable for Server Core installations because Server Core does not provide the traditional graphical desktop interface available in Desktop Experience installations. Administrators can use commands such as Enter-PSSession or Invoke-Command to perform remote administration. DHCP manages network address assignment, DFS Namespaces provides logical file paths, and FSRM manages file server resources. Therefore, WinRM combined with PowerShell Remoting is the appropriate technology for remotely administering a Server Core server through PowerShell.

Question 198. Which Group Policy feature allows different user policies to be applied based on the computer where the user signs in?

1. Security filtering
2. Block Inheritance
3. Loopback processing
4. WMI repository

Correct Answer: 3. Loopback processing

Explanation:

Group Policy loopback processing allows user configuration settings to be determined by the computer configuration rather than only by the user’s organizational unit. This is useful in scenarios such as shared computers, terminal servers, kiosks, and other systems where users may require different policies depending on the computer they are using. Loopback processing can operate in Merge or Replace mode. Security filtering controls which users or computers receive a GPO, while Block Inheritance affects the inheritance of policies from parent containers. Therefore, loopback processing is the Group Policy feature specifically designed to apply user settings based on the computer involved.

Question 199. Which failover cluster component can provide an additional vote to help determine cluster quorum?

1. Cluster witness
2. Cluster shared volume
3. SMB Multichannel
4. DFS Namespace

Correct Answer: 1. Cluster witness

Explanation:

A cluster witness provides an additional vote that can help a Windows Server failover cluster maintain quorum. Depending on the cluster configuration, the witness can be a disk witness, file share witness, or cloud witness. Quorum prevents multiple parts of a cluster from operating independently in a split-brain condition. The witness therefore plays an important role in maintaining cluster availability during node failures or communication problems. A Cluster Shared Volume provides shared storage access for clustered workloads, while SMB Multichannel improves SMB network connectivity. DFS Namespace provides a logical namespace for file resources. Therefore, a cluster witness is the appropriate component for helping establish quorum.

Question 200. Which Hyper-V feature allows a virtual machine to be moved between Hyper-V hosts without significant service interruption?

1. Hyper-V Replica
2. Virtual Switch
3. Live Migration
4. Checkpoint

Correct Answer: 3. Live Migration

Explanation:

Hyper-V Live Migration allows a running virtual machine to be moved from one Hyper-V host to another with minimal interruption to the workload. During the migration, Hyper-V transfers the virtual machine’s memory and execution state to the destination host while the workload continues running. Once the destination is ready, the VM is switched over with only a brief interruption. Live Migration is useful for maintenance, load balancing, and infrastructure management without requiring the virtual machine to be shut down. Hyper-V Replica is primarily designed for asynchronous disaster recovery replication, while checkpoints capture VM state for testing or recovery scenarios. Therefore, Live Migration is the correct feature for moving a running VM between hosts with minimal downtime.