View Full Microsoft AZ-801 Exam Dumps and Practice Test Dumps

 

Question 361. Which Active Directory tool displays the replication topology and connection objects between domain controllers?

1. Active Directory Sites and Services
2. FSRM
3. DHCP Manager
4. DNS Manager

Correct Answer: 1. Active Directory Sites and Services

Explanation:

Active Directory Sites and Services provides administrators with a graphical representation of the directory topology, including sites, subnets, site links, and connection objects between domain controllers. Administrators can use this console to understand how domain controllers are connected and how replication is organized across the network. Correct site and site-link configuration is especially important in environments with multiple physical locations because it helps control replication traffic and assists clients in locating appropriate domain controllers. FSRM manages file-server policies, DHCP Manager manages DHCP configuration, and DNS Manager manages DNS zones and records. Therefore, Active Directory Sites and Services is the appropriate tool for examining replication topology and connection objects.

Question 362. Which Active Directory object defines the replication connection between two sites?

1. Subnet
2. Site link
3. Organizational unit
4. Security group

Correct Answer: 2. Site link

Explanation:

A site link represents a logical connection between two or more Active Directory sites and is used to define how replication should occur between those sites. Administrators can configure properties such as cost and replication schedule to influence how Active Directory selects replication paths. Site links are particularly important when an organization has geographically separated locations connected through WAN links. A subnet identifies a network range and associates it with a site, while an OU organizes directory objects and a security group controls access or membership. Therefore, when administrators need to define the logical replication relationship between sites, a site link is the appropriate Active Directory object.

Question 363. Which Active Directory feature helps clients locate domain controllers based on their IP subnet?

1. Fine-Grained Password Policy
2. Active Directory Recycle Bin
3. Active Directory Sites and Services
4. Group Policy Management

Correct Answer: 3. Active Directory Sites and Services

Explanation:

Active Directory Sites and Services uses configured subnets to associate client IP addresses with specific Active Directory sites. Once a client is associated with a site, Active Directory can use site information to help the client locate an appropriate domain controller. This can reduce authentication traffic across WAN connections and improve directory-service efficiency in distributed environments. Administrators should configure the organization’s IP subnets accurately and associate them with the appropriate sites. Fine-grained password policies control password settings, Active Directory Recycle Bin supports object recovery, and Group Policy Management handles GPO administration. Therefore, AD Sites and Services provides the functionality needed for subnet-based domain-controller location.

Question 364. Which DNS record is commonly used to identify an Active Directory domain controller providing LDAP service?

1. MX
2. PTR
3. SRV
4. CNAME

Correct Answer: 3. SRV

Explanation:

SRV records allow DNS clients to locate specific network services, including services provided by Active Directory domain controllers. Active Directory relies heavily on SRV records to advertise services such as LDAP and Kerberos. When a domain-joined computer needs to locate a domain controller, DNS service-location records help identify suitable servers and the services they provide. MX records are used to identify mail exchange servers, PTR records support reverse DNS resolution, and CNAME records create hostname aliases. Therefore, when the requirement is to identify a domain controller that provides LDAP service, the SRV record type is the appropriate choice.

Question 365. Which Windows Server service provides time synchronization for domain-joined computers?

1. Windows Time
2. DHCP Server
3. DNS Server
4. DFS Replication

Correct Answer: 1. Windows Time

Explanation:

The Windows Time service, also known as W32Time, provides time synchronization capabilities across Windows systems. Accurate time is particularly important in Active Directory environments because Kerberos authentication relies on clocks being sufficiently synchronized between clients, servers, and domain controllers. In a typical domain hierarchy, computers obtain time information through the Active Directory time hierarchy, ultimately relying on an appropriate authoritative source. DHCP can provide network configuration, DNS resolves names, and DFS Replication synchronizes files. Therefore, Windows Time is the service responsible for maintaining synchronized system clocks across Windows Server and domain-joined environments.

Question 366. Which Active Directory domain controller normally serves as the authoritative time source for the domain?

1. RID Master
2. Infrastructure Master
3. PDC Emulator
4. Schema Master

Correct Answer: 3. PDC Emulator

Explanation:

The PDC Emulator FSMO role performs several important functions in an Active Directory domain, including serving as the preferred authoritative time source within the domain hierarchy. Accurate time is essential because Kerberos authentication can fail when clocks differ beyond the allowed tolerance. The PDC Emulator at the forest-root domain is typically configured to synchronize with an external or authoritative time source, while other domain controllers and domain members synchronize through the domain hierarchy. The RID Master allocates RID pools, the Infrastructure Master manages certain cross-domain references, and the Schema Master controls forest-wide schema modifications. Therefore, the PDC Emulator is the FSMO role associated with authoritative domain time synchronization.

Question 367. Which Windows Server feature can detect storage consumption and generate notifications when a quota threshold is reached?

1. File Server Resource Manager
2. DFS Namespace
3. Storage Replica
4. DNS Server

Correct Answer: 1. File Server Resource Manager

Explanation:

File Server Resource Manager provides quota-management capabilities that allow administrators to monitor and control storage consumption. Quota templates can define limits and notification thresholds, and FSRM can generate notifications when configured thresholds are reached. Notifications can be used to alert administrators or users that storage usage is approaching or exceeding an expected level. FSRM also provides file screening, classification, and storage-reporting capabilities. DFS Namespace organizes access to distributed shares, Storage Replica replicates storage volumes, and DNS Server handles name resolution. Therefore, when administrators need to detect storage usage and generate quota-related notifications, File Server Resource Manager is the appropriate Windows Server technology.

Question 368. Which FSRM quota type prevents additional data from being stored after the configured limit is reached?

1. Soft quota
2. Hard quota
3. Classification rule
4. File screen

Correct Answer: 2. Hard quota

Explanation:

A hard quota places an enforced limit on the amount of storage that can be consumed within the configured scope. Once the quota is reached, additional data cannot normally be written until sufficient space becomes available or the quota is increased. This makes hard quotas useful when administrators need to ensure that a folder or volume does not exceed a defined storage allocation. A soft quota primarily monitors usage and can generate notifications without necessarily preventing additional data from being stored. Classification rules identify files according to configured properties, while file screens control file types. Therefore, a hard quota is the FSRM configuration used when storage consumption must be actively restricted.

Question 369. Which Windows Server technology can reduce the amount of storage required for multiple similar files?

1. DHCP Failover
2. Data Deduplication
3. DFS Namespace
4. Group Policy

Correct Answer: 2. Data Deduplication

Explanation:

Data Deduplication reduces storage consumption by identifying redundant blocks of data and storing only the required unique content while maintaining references that allow applications and users to access their original files normally. This can be particularly effective on file servers where many files contain repeated or identical data. The technology operates transparently to users and can help organizations make better use of available disk capacity. DHCP Failover provides redundancy for DHCP services, DFS Namespace creates a logical namespace for distributed file shares, and Group Policy manages configuration settings. Therefore, Data Deduplication is the Windows Server technology designed to reduce storage requirements caused by duplicate data.

Question 370. Which storage technology replicates data at the block level between servers?

1. Storage Replica
2. DFS Namespace
3. FSRM
4. SMB Compression

Correct Answer: 1. Storage Replica

Explanation:

Storage Replica provides block-level replication between storage volumes and can be used for disaster recovery and other high-availability scenarios. Because replication occurs at the block level, applications and file systems do not need to understand the replication process directly. Depending on the configuration, Storage Replica supports synchronous or asynchronous replication. Synchronous replication provides stronger consistency between source and destination but generally requires appropriate network characteristics, while asynchronous replication can be used across longer distances or higher-latency connections. DFS Namespace only provides a logical access path, FSRM manages file-server policies, and SMB Compression reduces network traffic. Therefore, Storage Replica is the appropriate technology for block-level storage replication.

Question 371. Which Hyper-V Replica operation permanently moves a workload to the replica server during a controlled maintenance event?

1. Test failover
2. Planned failover
3. Checkpoint
4. Export

Correct Answer: 2. Planned failover

Explanation:

A planned failover in Hyper-V Replica is designed for controlled situations where an administrator intentionally moves a workload from the primary Hyper-V server to its replica. It can be used during planned maintenance or other situations where the administrator wants to switch operations in an organized manner. A planned failover is different from a test failover, which is intended to validate recovery without permanently changing production operations. Checkpoints provide point-in-time virtual machine states, while Export creates a portable copy of a virtual machine. Therefore, when the requirement is to intentionally transfer workload operations to the replica server during a controlled event, planned failover is the appropriate Hyper-V Replica operation.

Question 372. Which Hyper-V Replica operation allows administrators to verify recovery without interrupting the primary virtual machine?

1. Planned failover
2. Test failover
3. Live Migration
4. Storage Migration

Correct Answer: 2. Test failover

Explanation:

A Hyper-V Replica test failover allows administrators to create and start a test copy of a replicated virtual machine while leaving the primary production virtual machine operating normally. This provides an opportunity to validate recovery procedures, inspect the replicated workload, and confirm that applications can start successfully. Administrators should ensure that the test environment does not create conflicts with production networking or services. Planned failover is used for controlled workload switching, Live Migration moves a running virtual machine between supported Hyper-V hosts, and Storage Migration moves virtual machine storage. Therefore, test failover is the appropriate operation for validating disaster recovery without interrupting the production virtual machine.

Question 373. Which Hyper-V virtual switch type allows virtual machines to communicate with physical devices and external networks?

1. Private
2. Internal
3. External
4. Isolated

Correct Answer: 3. External

Explanation:

An External Hyper-V virtual switch connects virtual machines to the physical network through a physical network adapter on the Hyper-V host. This allows virtual machines to communicate with physical computers, network services, and external networks according to the network configuration. An Internal switch provides communication between virtual machines and the host but does not directly connect virtual machines to the physical network. A Private switch limits communication to virtual machines using that switch. Therefore, when virtual machines need connectivity to physical devices or external networks, an External Hyper-V virtual switch is the appropriate configuration.

Question 374. Which Hyper-V virtual switch type allows communication only between virtual machines connected to that switch?

1. External
2. Internal
3. Private
4. NAT

Correct Answer: 3. Private

Explanation:

A Private Hyper-V virtual switch provides network communication exclusively between virtual machines connected to that switch. The Hyper-V host itself does not participate in communication through a private switch, and the virtual machines do not receive direct connectivity to the physical network. This makes private switches useful for isolated test environments and workloads that need communication with other virtual machines without host or external network access. An Internal switch allows communication between virtual machines and the host, while an External switch connects virtual machines to a physical network. Therefore, the Private switch is the correct choice when communication must remain limited to participating virtual machines.

Question 375. Which failover cluster component provides an additional vote to help maintain quorum when cluster nodes are unavailable?

1. Witness
2. Virtual switch
3. DNS zone
4. Storage pool

Correct Answer: 1. Witness

Explanation:

A failover cluster witness provides an additional vote that can help the cluster maintain quorum when some nodes are unavailable. Depending on the cluster configuration, the witness can be a disk witness, file share witness, or cloud witness. The purpose is to provide an additional voting mechanism that helps the cluster determine whether enough members are available to continue operating. Proper quorum configuration is important for avoiding split-brain conditions and maintaining predictable cluster behavior. A virtual switch provides network connectivity, a DNS zone provides name-resolution information, and a storage pool manages storage resources. Therefore, a witness is the cluster component that can provide an additional quorum vote.

Question 376. Which Windows Server failover cluster witness type uses an Azure Storage account to provide quorum information?

1. File Share Witness
2. Disk Witness
3. Cloud Witness
4. Node Majority

Correct Answer: 3. Cloud Witness

Explanation:

A Cloud Witness uses an Azure Storage account as a quorum witness for a Windows Server failover cluster. It can be particularly useful when organizations do not want to deploy a separate file-server witness or shared disk at another location. The cluster uses the cloud-based witness to participate in quorum voting and help determine whether sufficient cluster members are available to keep services running. A File Share Witness uses a network file share, while a Disk Witness uses a shared disk resource. Node Majority relies only on cluster nodes. Therefore, Cloud Witness is the appropriate witness type when Azure Storage is used to provide the additional quorum vote.

Question 377. Which Windows Server feature allows administrators to manage servers through a browser without installing the traditional MMC consoles locally?

1. Windows Admin Center
2. Windows Server Backup
3. Disk Management
4. Event Viewer

Correct Answer: 1. Windows Admin Center

Explanation:

Windows Admin Center provides a browser-based management experience for Windows Server and supported infrastructure. Administrators can use it to manage servers, failover clusters, virtual machines, storage, networking, certificates, services, firewall configuration, and other system components. It provides a modern alternative to relying exclusively on individual MMC consoles and command-line tools. Windows Server Backup focuses on recovery operations, Disk Management handles local storage configuration, and Event Viewer focuses on reviewing system and application logs. Therefore, when the requirement is to manage Windows Server through a centralized web-based interface, Windows Admin Center is the appropriate solution.

Question 378. Which Azure service can apply governance policies to Azure Arc-enabled servers?

1. Azure Migrate
2. Azure Policy
3. Azure Files
4. Azure DNS

Correct Answer: 2. Azure Policy

Explanation:

Azure Policy provides governance capabilities that can be used to evaluate and enforce organizational requirements across supported Azure resources and Azure Arc-enabled resources. With Azure Arc, eligible on-premises and other supported servers can be represented and managed through Azure, allowing organizations to apply governance practices beyond resources physically hosted in Azure. Policies can evaluate resource configuration and, depending on the policy and assignment, help maintain organizational standards. Azure Migrate focuses on migration assessment and planning, Azure Files provides managed cloud file shares, and Azure DNS provides DNS services. Therefore, Azure Policy is the appropriate Azure service for applying governance policies to supported Azure Arc-enabled servers.

Question 379. Which Azure service provides centralized log collection and query capabilities for monitoring connected servers?

1. Azure Storage
2. Azure Policy
3. Azure Monitor
4. Azure DNS

Correct Answer: 3. Azure Monitor

Explanation:

Azure Monitor provides monitoring capabilities for Azure resources and supported connected environments, including log collection, metrics, alerts, and analysis. When appropriately configured, connected servers can send monitoring information to Azure services such as Log Analytics, allowing administrators to query and analyze collected data. This can help identify performance issues, operational events, and other conditions across distributed infrastructure. Azure Storage provides storage services, Azure Policy handles governance and compliance, and Azure DNS provides domain-name resolution. Therefore, Azure Monitor is the appropriate service when administrators need centralized monitoring and log-analysis capabilities for supported servers and infrastructure.

Question 380. Which Windows Server feature provides centralized management of installed server roles and features from one interface?

1. Server Manager
2. FSRM
3. DNS Manager
4. Diskpart

Correct Answer: 1. Server Manager

Explanation:

Server Manager is a Windows Server management interface that allows administrators to manage local and remote servers and work with server roles and features from a centralized console. Administrators can use it to add or remove roles and features, review server status, access management tools, and organize multiple Windows Server systems for administration. FSRM focuses specifically on file-server storage policies, DNS Manager manages DNS infrastructure, and Diskpart provides command-line storage-management capabilities. Therefore, when the requirement is centralized administration of installed Windows Server roles and features through a graphical interface, Server Manager is the appropriate tool.