View Full Microsoft AZ-801 Exam Dumps and Practice Test Dumps

 

Question 241. Which Active Directory component stores information about the structure of objects and their attributes?

1. Global Catalog
2. Active Directory Schema
3. SYSVOL
4. DNS Zone

Correct Answer: 2. Active Directory Schema

Explanation:

The Active Directory Schema defines the structure of objects that can exist within an Active Directory environment and the attributes associated with those objects. For example, the schema defines classes such as users, computers, and groups and specifies which attributes those objects can contain. The schema applies to the entire forest, so changes to it must be carefully planned and replicated throughout the environment. The Global Catalog contains a partial replica of directory objects for searching, while SYSVOL stores Group Policy and related files. DNS zones store name-resolution information. Therefore, the Active Directory Schema is responsible for defining directory object structure and attributes.

Question 242. Which FSMO role controls changes to the Active Directory schema?

1. RID Master
2. PDC Emulator
3. Schema Master
4. Infrastructure Master

Correct Answer: 3. Schema Master

Explanation:

The Schema Master is the forest-wide FSMO role responsible for controlling updates to the Active Directory schema. Because the schema defines the structure of objects and attributes throughout the forest, changes must be carefully controlled to prevent conflicting modifications. Only the domain controller holding the Schema Master role can directly modify the schema, although schema information is replicated to other domain controllers after changes are made. The RID Master manages relative identifier allocation, the PDC Emulator performs several important domain operations including time synchronization, and the Infrastructure Master manages certain cross-domain object references. Therefore, Schema Master is the correct FSMO role for schema changes.

Question 243. Which Active Directory FSMO role is responsible for adding or removing domains in an Active Directory forest?

1. Domain Naming Master
2. Schema Master
3. RID Master
4. PDC Emulator

Correct Answer: 1. Domain Naming Master

Explanation:

The Domain Naming Master is a forest-wide FSMO role responsible for changes to the domain namespace within an Active Directory forest. It helps control operations such as adding or removing domains and application partitions. Because these operations affect the forest structure, the role ensures that changes are coordinated appropriately. The Schema Master controls modifications to the Active Directory schema, while the RID Master allocates pools of relative identifiers to domain controllers. The PDC Emulator handles several domain-level operations, including time synchronization and password-change processing. Therefore, when an administrator needs to add or remove a domain from the forest, the Domain Naming Master is the relevant FSMO role.

Question 244. Which Active Directory feature allows a branch-office domain controller to store only selected credentials locally?

1. Global Catalog
2. Read-Only Domain Controller
3. Domain Naming Master
4. Universal Group

Correct Answer: 2. Read-Only Domain Controller

Explanation:

A Read-Only Domain Controller, or RODC, is designed for environments where physical security may be weaker, such as branch offices. An RODC maintains a read-only copy of the Active Directory database and can use a password replication policy to determine which user or computer credentials may be cached locally. By limiting credential caching, organizations can reduce the amount of sensitive authentication information stored at remote locations. RODCs can also provide local authentication and directory services while reducing the security exposure associated with a writable domain controller. Therefore, the RODC is the appropriate Active Directory feature for branch offices requiring controlled credential caching.

Question 245. Which Windows Server feature can create a centralized policy that prevents users from storing certain file types?

1. FSRM File Screening
2. Storage Replica
3. DFS Namespace
4. Storage Spaces

Correct Answer: 1. FSRM File Screening

Explanation:

File Server Resource Manager File Screening allows administrators to control which types of files users can store on designated folders or volumes. Administrators can use predefined or custom file groups to identify prohibited file extensions and configure active or passive file screens. An active screen can block users from saving files that match the configured criteria, while notifications and reports can help administrators monitor policy violations. Storage Replica provides data replication, DFS Namespace provides logical paths to shared resources, and Storage Spaces manages storage pools and resiliency. Therefore, FSRM File Screening is the appropriate feature when the requirement is to prevent specific file types from being stored.

Question 246. Which FSRM feature limits the amount of storage that can be consumed by a folder?

1. File Classification
2. File Screening
3. Quota Management
4. Storage Reports

Correct Answer: 3. Quota Management

Explanation:

FSRM Quota Management allows administrators to limit the amount of disk space that can be consumed by a folder or volume. Administrators can create hard quotas, which prevent additional data from being stored after the configured limit is reached, or soft quotas, which allow continued storage while generating notifications when thresholds are exceeded. Quota templates can also simplify administration by allowing the same settings to be applied consistently to multiple folders. File Screening controls file types, File Classification assigns classification properties, and Storage Reports provide information about storage usage. Therefore, Quota Management is the appropriate FSRM feature for controlling the amount of storage consumed.

Question 247. Which SMB feature is designed to improve performance by using RDMA-capable network adapters?

1. SMB Encryption
2. SMB Direct
3. SMB Signing
4. SMB Witness

Correct Answer: 2. SMB Direct

Explanation:

SMB Direct enables SMB traffic to use Remote Direct Memory Access, or RDMA, capable network adapters. RDMA allows data to move efficiently between systems while reducing CPU overhead and latency compared with conventional network communication. SMB Direct is especially useful in high-performance environments such as Hyper-V storage, clustered file servers, and other workloads that require fast network storage access. SMB Encryption protects confidentiality, SMB Signing helps provide message integrity, and SMB Witness supports highly available SMB resources. Therefore, SMB Direct is the SMB technology specifically designed to take advantage of RDMA-capable network adapters for improved performance.

Question 248. Which Windows Server feature provides a centralized method for managing disk quotas and file screens?

1. File Server Resource Manager
2. Active Directory Sites and Services
3. Hyper-V Manager
4. DHCP Server

Correct Answer: 1. File Server Resource Manager

Explanation:

File Server Resource Manager, or FSRM, provides centralized file and storage management capabilities on Windows Server. Administrators can use FSRM to configure quotas, file screening, storage reports, and file classification policies. These features help organizations control how storage is consumed and identify or restrict unwanted file content. Active Directory Sites and Services manages directory topology and replication, Hyper-V Manager administers virtual machines, and DHCP Server provides automatic network configuration. FSRM can also use templates to simplify consistent policy deployment across multiple folders or servers. Therefore, FSRM is the appropriate Windows Server feature for centrally managing disk quotas and file screening.

Question 249. Which Windows Server technology provides block-level synchronous replication between volumes?

1. DFS Replication
2. Storage Replica
3. Azure File Sync
4. Data Deduplication

Correct Answer: 2. Storage Replica

Explanation:

Storage Replica provides block-level replication between storage volumes and supports synchronous replication when the required infrastructure and network conditions are met. Synchronous replication ensures that writes are replicated to the destination before the operation is considered complete, helping maintain a closely synchronized copy of the data. This makes Storage Replica useful for disaster recovery and business continuity scenarios where minimizing data loss is important. DFS Replication operates at the file level, Azure File Sync synchronizes files with Azure file shares, and Data Deduplication reduces redundant storage. Therefore, Storage Replica is the Windows Server technology designed for block-level volume replication.

Question 250. Which Hyper-V feature allows administrators to configure multiple recovery points for a replicated virtual machine?

1. Hyper-V Replica extended replication
2. Hyper-V Virtual Switch
3. Hyper-V Live Migration
4. Hyper-V Enhanced Session Mode

Correct Answer: 1. Hyper-V Replica extended replication

Explanation:

Hyper-V Replica supports extended replication, which allows a replica virtual machine to be replicated from a primary replica server to an extended replica server. This provides an additional layer of disaster recovery by maintaining another copy at a separate location. Hyper-V Replica can also maintain recovery points so administrators can select an appropriate point in time during recovery, depending on the configured settings. Live Migration is intended for moving running VMs between hosts, while a virtual switch provides network connectivity. Enhanced Session Mode improves the interaction between administrators and virtual machines. Therefore, Hyper-V Replica with extended replication is the appropriate technology for additional recovery protection.

Question 251. Which Windows Server feature can move workloads from an older server to a newer server while preserving supported configuration and data?

1. Storage Spaces
2. Windows Server Migration Tools
3. SMB Signing
4. DHCP Relay

Correct Answer: 2. Windows Server Migration Tools

Explanation:

Windows Server Migration Tools provide a framework for migrating certain roles, settings, shares, and data from an existing Windows Server installation to another server. They can simplify the transition when organizations replace older hardware or upgrade server infrastructure. Migration procedures vary by server role, and administrators should verify that the specific role and operating system versions are supported before starting the process. Storage Spaces manages storage resources, SMB Signing protects SMB message integrity, and DHCP Relay forwards DHCP traffic between networks. Therefore, Windows Server Migration Tools are the appropriate technology when the goal is to transfer supported server roles and configuration to a newer server.

Question 252. Which Windows Server service provides automatic synchronization of the system clock across domain members?

1. Windows Time service
2. DHCP Server
3. DNS Server
4. DFS Replication

Correct Answer: 1. Windows Time service

Explanation:

The Windows Time service, also known as W32Time, provides time synchronization for Windows systems. In an Active Directory domain, time synchronization follows a hierarchy so that domain members can maintain sufficiently consistent clocks. Accurate time is especially important for Kerberos authentication because authentication tickets depend on timestamps. The PDC Emulator at the root of the domain time hierarchy normally synchronizes with a reliable external time source, while other domain members synchronize through the domain hierarchy. DHCP provides IP configuration, DNS provides name resolution, and DFS Replication synchronizes files. Therefore, the Windows Time service is responsible for system clock synchronization.

Question 253. Which Azure service allows administrators to define and enforce organizational compliance policies across resources?

1. Azure Migrate
2. Azure Monitor
3. Azure Policy
4. Azure Files

Correct Answer: 3. Azure Policy

Explanation:

Azure Policy allows organizations to create and enforce rules that evaluate Azure resources against defined organizational requirements. Policies can help enforce standards such as permitted resource types, locations, configurations, or security-related settings. Policy assignments can be applied at appropriate management scopes, and compliance information can be reviewed to identify resources that do not meet requirements. Azure Monitor focuses on monitoring and alerts, Azure Migrate supports migration assessment and planning, and Azure Files provides managed cloud file shares. Therefore, Azure Policy is the appropriate Azure service for enforcing organizational governance and compliance requirements across resources.

Question 254. Which Azure service provides centralized log collection and analysis for monitored resources?

1. Azure DNS
2. Log Analytics
3. Azure Files
4. Azure Bastion

Correct Answer: 2. Log Analytics

Explanation:

Log Analytics provides a workspace-based environment for collecting, storing, querying, and analyzing log data from supported resources and services. Administrators can use Kusto Query Language, or KQL, to search and analyze collected data, identify patterns, and troubleshoot operational issues. Log Analytics is closely integrated with Azure Monitor and can serve as a central location for monitoring data. Azure DNS provides DNS services, Azure Files provides cloud file storage, and Azure Bastion provides secure browser-based RDP and SSH access to virtual machines. Therefore, Log Analytics is the appropriate service when centralized collection and analysis of monitoring logs is required.

Question 255. Which Windows Server feature can detect and remove duplicate files or data blocks on a volume according to configured schedules?

1. DFS Namespace
2. Data Deduplication
3. Group Policy
4. Windows Admin Center

Correct Answer: 2. Data Deduplication

Explanation:

Windows Server Data Deduplication analyzes data on supported volumes and identifies duplicate blocks so that redundant information does not need to be stored multiple times. Deduplication jobs can be configured and scheduled to run according to the organization’s storage requirements. The process is designed to be transparent to applications and users, meaning files remain accessible through their normal paths. DFS Namespace provides a logical view of file shares, Group Policy manages configuration settings, and Windows Admin Center provides management capabilities rather than performing deduplication itself. Therefore, Data Deduplication is the appropriate Windows Server feature for reducing redundant data on supported volumes.

Question 256. Which Active Directory feature allows administrators to organize users and computers into containers for applying Group Policy?

1. Organizational Unit
2. Global Catalog
3. Site Link
4. Schema

Correct Answer: 1. Organizational Unit

Explanation:

An Organizational Unit, or OU, is an Active Directory container used to organize objects such as users, computers, and groups. OUs are particularly important for Group Policy because administrators can link GPOs to OUs so that appropriate configuration settings are applied to the objects they contain. OUs can also support administrative delegation by allowing specific administrators to manage objects within designated organizational boundaries. The Global Catalog provides forest-wide directory search capabilities, site links control intersite replication topology, and the schema defines directory object structure. Therefore, Organizational Units are the appropriate Active Directory containers for organizing objects and applying Group Policy.

Question 257. Which Windows Server feature allows administrators to view detailed operating system and application event information?

1. Performance Monitor
2. Event Viewer
3. Disk Management
4. Task Scheduler

Correct Answer: 2. Event Viewer

Explanation:

Event Viewer provides access to Windows event logs generated by the operating system, applications, security components, and various services. Administrators can use these logs to investigate errors, warnings, informational events, authentication activity, and service-related problems. Event Viewer includes logs such as Application, System, Security, and additional operational logs depending on the installed roles and features. Performance Monitor focuses on performance counters and system resource measurements, Disk Management manages disks and volumes, and Task Scheduler manages scheduled tasks. Therefore, Event Viewer is the appropriate administrative tool for reviewing detailed Windows operating system and application events.

Question 258. Which Windows Server feature allows administrators to create a backup schedule for selected files, folders, volumes, and system components?

1. Windows Server Backup
2. DFS Replication
3. SMB Direct
4. Storage Replica

Correct Answer: 1. Windows Server Backup

Explanation:

Windows Server Backup provides backup and recovery capabilities for Windows Server environments. Administrators can configure scheduled backups to protect selected volumes, files, folders, applications, and system components depending on the required recovery strategy. It can also be used for System State backup, which is particularly important when protecting domain controllers and Active Directory. DFS Replication synchronizes files between servers but is not a substitute for a backup strategy, while SMB Direct improves network performance and Storage Replica provides replication between storage systems. Therefore, Windows Server Backup is the appropriate feature for configuring scheduled server backups and supporting recovery operations.

Question 259. Which PowerShell cmdlet starts an interactive remote session with a Windows Server?

1. Get-PSSession
2. Invoke-Command
3. Enter-PSSession
4. New-PSSession

Correct Answer: 3. Enter-PSSession

Explanation:

Enter-PSSession starts an interactive PowerShell session with a remote computer, allowing an administrator to run commands directly in the remote system’s PowerShell environment. This is useful when an administrator needs to perform several related tasks interactively rather than executing a single command remotely. Invoke-Command is commonly used to execute commands or scripts remotely, while Get-PSSession retrieves information about existing sessions. New-PSSession creates a persistent remote session that can be used later with other commands. Therefore, Enter-PSSession is the appropriate cmdlet when an administrator needs an interactive PowerShell session on a remote Windows Server.

Question 260. Which Windows Server feature provides centralized administration of certificates and certificate authorities?

1. Active Directory Certificate Services
2. File Server Resource Manager
3. DHCP Server
4. DFS Replication

Correct Answer: 1. Active Directory Certificate Services

Explanation:

Active Directory Certificate Services, or AD CS, provides a framework for issuing and managing digital certificates within an organization. It can be used to deploy certificates for users, computers, servers, applications, and network services. Certificates can support authentication, encryption, digital signatures, and other security requirements. AD CS includes certificate authorities and related role services that help organizations establish and manage their internal public key infrastructure. FSRM manages file server resources, DHCP manages IP address assignment, and DFS Replication synchronizes files. Therefore, Active Directory Certificate Services is the appropriate Windows Server technology for centralized certificate issuance and management.