Skip to main content
Use code minus20 for a $20 discount at checkout!

AZ-801 sample questions

5 questions from the AZ-801 question set, which has 281 in total. Try each one before opening the answer.

Question 1 Single answer Mix Questions
Case study Mix QuestionsAZ-801 Mix Questions IN THIS CASE STUDY

You have an on-premises server that runs Windows Server and has the Web Server (IIS) server role installed. The server hosts a web app that connects to an on-premises Microsoft SQL Server database.

You plan to migrate the web app to an Azure App Services web app. The database will remain on-premises.

You need to ensure that the migrated web app can access the database.

What should you configure in Azure?

  1. an Azure SQL managed instance

  2. an on-premises data gateway

  3. Azure Extended Network

  4. a Hybrid Connection

Show answer

Answer: D

Question 2 Single answer Mix Questions

Your company uses Storage Spaces Direct.

You need to view the available storage in a Storage Space Direct storage pool.

What should you use?

  1. File Server Resource Manager (FSRM)

  2. the Get-StorageSubsystem cmdlet

  3. Disk Management

  4. Windows Admin Center

Show answer

Answer: D

Question 3 Ordering Mix Questions

You have an Azure subscription that contains an Azure key vault named Vault1.

You plan to deploy a virtual machine named VM1 that will run Windows Server.

You need to enable encryption at host for VM1. The solution must use customer-managed keys.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Exhibit
  1. Create VM1 and associate the disks of the virtual machine with the disk encryption set.

  2. Assign the Virtual Machine Contributor role to the system-assigned managed identity of VM1.

  3. Enable a system-assigned identity on VM1.

  4. Create a disk encryption set and generate RSA keys.

  5. Grant Vault1 the managed identity permission for the disk encryption set.

Show answer

Correct order: C, D, E

Question 4 Single answer Mix Questions

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it as a result, these questions will not appear in the review screen.

You have an on-premises server named Server1 that runs Windows Server.

You have a Microsoft Sentinel instance.

You add the Windows Firewall data connector in Microsoft Sentine1.

You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1.

Solution: You install the Azure Connected Machine agent on Server1.

Does this meet the goal?

  1. Yes

  2. No

Show answer

Answer: B

Question 5 Multiple answer

You have a management group named MG1 that contains an Azure subscription named Sub1. Sub1 contains the resources shown in the following table.

You need to enable Microsoft Defender for Servers. From the Azure portal, on which two resources can you enable Defender for Servers? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Exhibit
  1. VM1

  2. Workspace1

  3. RG1

  4. VNet1

  5. Sub1

  6. MG1

Show answer

Answer: B, E

Back to AZ-801 formats and access options →

Scroll to Top