View Full Microsoft AZ-801 Exam Dumps and Practice Test Dumps

 

Question 81. Which FSMO role is responsible for assigning relative IDs when new security principals are created?

1. PDC Emulator
2. RID Master
3. Schema Master
4. Infrastructure Master

Correct Answer: 2. RID Master

Explanation:

The RID Master is the FSMO role responsible for allocating pools of relative identifiers (RIDs) to domain controllers. These RIDs are combined with the domain SID to create unique security identifiers (SIDs) for users, groups, and other security principals. Each domain controller receives a pool of RIDs so it can create objects without contacting the RID Master for every object creation request. When a domain controller begins running low on available RIDs, it requests another allocation from the RID Master. This role is therefore important for maintaining unique security identifiers throughout an Active Directory domain.

Question 82. Which Windows Server feature provides a domain controller that contains a read-only copy of the Active Directory database?

1. Read-Only Domain Controller (RODC)
2. Active Directory Federation Services
3. Active Directory Certificate Services
4. Windows Admin Center

Correct Answer: 1. Read-Only Domain Controller (RODC)

Explanation:

A Read-Only Domain Controller (RODC) maintains a read-only copy of the Active Directory database and is designed for environments where physical security or administrative control may be limited. RODCs are commonly deployed at branch offices where local infrastructure may not have the same security protections as a central datacenter. Password replication policies can restrict which user credentials are cached on the RODC. Because administrators cannot directly make changes to the directory database on an RODC, the configuration reduces certain risks associated with compromised branch-office servers while still providing authentication and directory services locally.

Question 83. An administrator needs to resolve names from another organization’s DNS namespace. Which DNS feature should be configured?

1. DNS scavenging
2. DNSSEC
3. Conditional forwarder
4. DNS delegation

Correct Answer: 3. Conditional forwarder

Explanation:

A conditional forwarder allows a DNS server to forward queries for a specific domain namespace to designated DNS servers. This is particularly useful when organizations need to resolve names belonging to another DNS domain without transferring or hosting that domain’s entire DNS zone. For example, if users in one organization frequently need to resolve names in a partner organization’s namespace, administrators can configure a conditional forwarder for that namespace and specify the partner DNS servers. This provides controlled name resolution while avoiding unnecessary recursive queries and maintaining clear separation between the participating DNS environments.

Question 84. Which DHCP feature allows two DHCP servers to provide highly available IP address assignment for the same scope?

1. DHCP relay
2. DHCP reservation
3. DHCP filtering
4. DHCP failover

Correct Answer: 4. DHCP failover

Explanation:

DHCP failover provides high availability for DHCP services by allowing two DHCP servers to share responsibility for servicing clients within a DHCP scope. Depending on the selected configuration, the servers can operate in load-balance mode or hot-standby mode. In load-balance mode, both servers actively service clients, while hot-standby mode uses one server primarily as the active server and the other as a backup. The servers synchronize lease information so that clients can continue receiving IP addresses if one DHCP server becomes unavailable. This improves availability and reduces dependence on a single DHCP server.

Question 85. Which feature allows administrators to manage Windows Server systems from a web-based interface without installing a full Remote Desktop session?

1. Windows Admin Center
2. Disk Cleanup
3. Windows Server Backup
4. Resource Monitor

Correct Answer: 1. Windows Admin Center

Explanation:

Windows Admin Center is a browser-based management platform designed for administering Windows Server environments. It provides tools for managing servers, virtual machines, storage, networking, certificates, firewall settings, services, events, and other administrative functions through a centralized web interface. Instead of relying exclusively on Remote Desktop sessions, administrators can perform many common management tasks directly from a browser. Windows Admin Center can also be integrated with Azure services for hybrid management scenarios. This makes it useful for organizations managing multiple Windows Server systems across datacenters, branch offices, and cloud-connected environments.

Question 86. Which Active Directory component stores information about objects such as users, computers, and groups?

1. SYSVOL
2. Active Directory database
3. DNS cache
4. DHCP database

Correct Answer: 2. Active Directory database

Explanation:

The Active Directory database, stored by default in the NTDS.dit file on a domain controller, contains information about directory objects such as users, computers, groups, organizational units, and their associated attributes. Domain controllers maintain copies of this database and use Active Directory replication to keep directory information synchronized between domain controllers. SYSVOL serves a different purpose by storing files related to Group Policy and logon scripts. DNS provides name-resolution services, while the DHCP database contains information related to dynamically assigned network addresses. Understanding these components is important when administering and troubleshooting Windows Server environments.

Question 87. A company wants to prevent users from copying files with specific extensions to a file server. Which FSRM feature should be used?

1. Storage Reports Management
2. File classification
3. File screening
4. Quota templates

Correct Answer: 3. File screening

Explanation:

File screening is a feature of File Server Resource Manager (FSRM) that allows administrators to control which types of files can be stored on selected folders. Administrators can create file screen groups based on file name patterns or extensions and configure active or passive screening. Active screening prevents users from saving prohibited file types, while passive screening allows the file but records the activity. For example, an administrator could create a screen that blocks executable files from being stored in a department’s shared folder. This helps organizations enforce file-storage policies and reduce unwanted or potentially risky content on file servers.

Question 88. Which FSRM feature limits the amount of storage that a folder can consume?

1. File screening
2. Classification management
3. Storage reports
4. Quotas

Correct Answer: 4. Quotas

Explanation:

FSRM quotas allow administrators to limit the amount of disk space that a folder or volume can consume. Quotas can be created directly for individual folders or through reusable quota templates. Administrators can configure thresholds that trigger notifications, reports, or other actions when storage usage reaches specific percentages. For example, a department folder could have a 10 GB quota with notifications configured at 85 percent and 95 percent usage. This provides administrators with an effective method for controlling storage growth and identifying folders that require cleanup or additional capacity before users encounter storage-related problems.

Question 89. Which SMB feature allows multiple network connections to be used simultaneously for a file transfer?

1. SMB Multichannel
2. SMB signing
3. SMB encryption
4. SMB leasing

Correct Answer: 1. SMB Multichannel

Explanation:

SMB Multichannel allows an SMB client and server to establish multiple network connections for a single SMB session. This can improve throughput and provide fault tolerance when multiple network interfaces or paths are available. SMB Multichannel can automatically detect suitable network interfaces and use them concurrently. It is especially beneficial on servers with multiple network adapters or environments that support technologies such as RSS or RDMA. If one network path becomes unavailable, other available paths can continue carrying traffic. This makes SMB Multichannel useful for improving both performance and resilience of Windows Server file-sharing environments.

Question 90. Which SMB feature provides encryption for SMB network traffic?

1. SMB signing
2. SMB encryption
3. SMB Multichannel
4. SMB Direct

Correct Answer: 2. SMB encryption

Explanation:

SMB encryption protects SMB data while it travels across the network by encrypting the SMB traffic between supported clients and servers. It is particularly useful when sensitive files are transferred across networks where administrators require stronger confidentiality protections. SMB signing serves a different purpose by helping verify message integrity and authenticity, but it does not provide the same confidentiality protection as encryption. SMB Multichannel improves network performance and resilience, while SMB Direct uses RDMA-capable networking for efficient data transfer. Administrators can configure SMB encryption according to server, share, and organizational security requirements.

Question 91. Which Windows Server technology is designed to provide synchronous or asynchronous replication between servers or clusters?

1. Storage Replica
2. DFS Namespace
3. FSRM
4. DHCP failover

Correct Answer: 1. Storage Replica

Explanation:

Storage Replica is a Windows Server technology that provides volume-level replication between servers or clusters. It supports synchronous replication when low-latency connectivity is available and administrators require zero data loss at the replication level during a planned failover. It also supports asynchronous replication for scenarios where greater geographic distance or higher network latency makes synchronous replication unsuitable. Storage Replica can be used for disaster recovery and business continuity scenarios by maintaining replicated copies of storage. Unlike DFS Replication, which focuses on file and folder replication, Storage Replica operates at the block level.

Question 92. Which Hyper-V feature maintains a replica virtual machine on another server for disaster recovery?

1. Live Migration
2. Storage Spaces Direct
3. Hyper-V Replica
4. Failover Clustering

Correct Answer: 3. Hyper-V Replica

Explanation:

Hyper-V Replica provides asynchronous replication of virtual machines from one Hyper-V server or cluster to another Hyper-V server or cluster. It is designed primarily for disaster recovery scenarios rather than continuous synchronous replication. Administrators can configure replication intervals and recovery points according to the environment’s requirements. If the primary server becomes unavailable, the replicated virtual machine can be started on the replica server. Hyper-V Replica can therefore provide an additional recovery option without requiring shared storage between the primary and replica environments. It is especially useful when organizations need disaster recovery across separate physical locations.

Question 93. Which Failover Clustering concept determines whether a cluster remains online when nodes or other resources fail?

1. Cluster quorum
2. SMB Direct
3. Dynamic DNS
4. Storage tiering

Correct Answer: 1. Cluster quorum

Explanation:

Cluster quorum determines whether a Windows Server failover cluster has enough votes to continue operating. Quorum is designed to prevent split-brain conditions in which different portions of a cluster independently believe they should remain active. Depending on the cluster configuration, voting members can include nodes and, where appropriate, a witness. The quorum model determines the number or combination of available votes required for the cluster to remain operational. Proper quorum configuration is particularly important for highly available workloads because it influences cluster behavior during node failures, network partitions, maintenance, and other infrastructure disruptions.

Question 94. Which Windows Server feature allows administrators to move a running virtual machine between Hyper-V hosts with minimal downtime?

1. Hyper-V Replica
2. Live Migration
3. Storage Replica
4. Windows Server Backup

Correct Answer: 2. Live Migration

Explanation:

Hyper-V Live Migration allows administrators to move a running virtual machine from one Hyper-V host to another while minimizing service interruption. It is commonly used for planned maintenance, workload balancing, hardware upgrades, and other operational tasks. Depending on the infrastructure configuration, Live Migration can operate with shared storage or with other supported storage arrangements. The virtual machine continues running while its memory and execution state are transferred to the destination host, after which the destination takes over operation. This capability helps administrators perform maintenance without requiring a traditional shutdown and restart of important virtualized workloads.

Question 95. Which Windows Server service is commonly used to synchronize system clocks within an Active Directory domain?

1. Windows Time service
2. Print Spooler
3. Task Scheduler
4. Windows Installer

Correct Answer: 1. Windows Time service

Explanation:

The Windows Time service, also known as W32Time, provides time synchronization for Windows systems. Accurate time is particularly important in Active Directory environments because authentication mechanisms such as Kerberos rely on clocks being reasonably synchronized between participating systems. In a typical domain hierarchy, domain members synchronize time through the domain structure, ultimately relying on the appropriate authoritative time source. Administrators can configure and troubleshoot Windows Time using tools such as w32tm. Maintaining accurate system time also helps with event correlation, certificate validation, logging, and troubleshooting distributed Windows Server environments.

Question 96. Which Azure service helps discover and assess on-premises servers before a migration to Azure?

1. Azure Monitor
2. Azure Backup
3. Azure Migrate
4. Azure DNS

Correct Answer: 3. Azure Migrate

Explanation:

Azure Migrate provides tools for discovering, assessing, and planning the migration of on-premises servers and workloads to Azure. Organizations can use it to gather information about existing workloads, evaluate dependencies, estimate resource requirements, and identify migration considerations. The assessment process can help administrators understand server utilization and compatibility before selecting an appropriate Azure target configuration. Azure Migrate supports migration planning as well as additional migration capabilities depending on the workload. This makes it a useful component of a structured migration project because administrators can collect information before moving production workloads and use the assessment results to plan the transition.

Question 97. Which Azure service extends Azure management capabilities to servers running outside Azure?

1. Azure Arc-enabled servers
2. Azure Files
3. Azure Load Balancer
4. Azure Front Door

Correct Answer: 1. Azure Arc-enabled servers

Explanation:

Azure Arc-enabled servers allow organizations to project non-Azure Windows and Linux servers into Azure management and governance experiences. These servers can remain in on-premises datacenters, other cloud providers, or other supported environments while being connected to Azure Arc. Depending on the configuration, administrators can use Azure capabilities for inventory, governance, policy, monitoring, and management. Azure Arc does not require the server to be physically hosted in Azure. This makes it useful for hybrid environments where organizations need consistent operational visibility and management across servers located in different infrastructures.

Question 98. Which Azure File Sync feature keeps frequently accessed files on a local Windows Server while moving less frequently accessed data to Azure Files?

1. Storage replication
2. Cloud tiering
3. SMB Multichannel
4. DFS Replication

Correct Answer: 2. Cloud tiering

Explanation:

Cloud tiering is an Azure File Sync feature that helps optimize local storage by keeping frequently accessed files available locally while allowing less frequently accessed files to be tiered to Azure Files. The local Windows Server maintains namespace information and can recall tiered files when users access them. Administrators can configure policies based on available local disk space or file age. This approach can reduce the amount of local storage required while preserving user access to the complete file namespace. Cloud tiering is therefore useful when organizations want to modernize file storage without immediately eliminating local file-server access.

Question 99. Which WSUS capability allows administrators to control which updates are approved for installation?

1. Update approvals
2. DHCP reservations
3. DNS forwarding
4. Storage quotas

Correct Answer: 1. Update approvals

Explanation:

WSUS update approvals allow administrators to control which updates are made available to computers managed by WSUS. Instead of allowing every available update to install immediately, administrators can review updates and approve them for specific computer groups. This supports controlled deployment and can help organizations test updates before making them broadly available. WSUS can organize computers into groups so that updates can be approved for testing systems first and then deployed to wider populations. This staged approach provides administrators with greater control over update management and helps align Windows Server and client patching with organizational maintenance procedures.

Question 100. Which Windows Server feature can create a system image that can be used to recover a server after a major failure?

1. Windows Admin Center
2. File Server Resource Manager
3. Windows Server Backup
4. DNS Manager

Correct Answer: 3. Windows Server Backup

Explanation:

Windows Server Backup provides backup and recovery capabilities for Windows Server systems. It can be used to create backups that include critical volumes, applications, system state, and other selected data depending on the backup configuration. A system-state backup is particularly important for recovering components such as Active Directory Domain Services on a domain controller. Administrators can configure scheduled backups and select appropriate storage destinations. During a serious server failure, available backups can be used as part of the recovery process. Regularly testing backups and documenting recovery procedures is also important because a backup is only useful if it can be successfully restored when needed.