Microsoft AZ-801 Practice Exams
Last updated on Oct 01,2026- Exam Code: AZ-801
- Exam Name: Configuring Windows Server Hybrid Advanced Services
- Certification Provider: Microsoft
- Latest update: Oct 01,2026
HOTSPOT
The Default Domain Policy Group Policy Object (GPO) is shown in the GPO exhibit. (Click the GPO tab.)

The members of a group named Service Accounts are shown in the Group exhibit. (Click the Group tab.)

An organizational unit (OU) named ServiceAccounts is shown in the OU exhibit. (Click the OU tab.)

You create a Password Settings Object (PSO) as shown in the PSO exhibit. (Click the PSO tab.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Explanation:
Reference: https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/get-started/adac/introduction-to-active-directory-administrative-center-enhancements–level-100-#fine_grained_pswd_policy_mgmt
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an on-premises server named Server1 that runs Windows Server.
You have a Microsoft Sentinel instance.
You add the Windows Firewall data connector in Microsoft Sentinel.
You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1.
Solution; You enable event subscription on Server1.
Does this meet the goal?
- A . Yes
- B . No
You need to back up Server 4 to meet the technical requirements.
What should you do first?
- A . Deploy Microsoft Azure Backup Server (MABS).
- B . Configure Windows Server Backup.
- C . Install the Microsoft Azure Recovery Services (MARS) agent.
- D . Configure Storage Replica.
C
Explanation:
Reference: https://docs.microsoft.com/en-us/azure/backup/install-mars-agent
You have an Azure virtual machine named VM1 that has the Web Server (IIS) server role installed.
VM1 hosts a critical line-of-business (LOB) application.
After the security team at your company deploys a new security baseline to VM1, users begin reporting that the application is unresponsive.
You suspect that the security baseline has caused networking issues.
You need to perform a network trace on VM1.
What should you do?
- A . From VM1, run necscac.
- B . From Performance Monitor on VM1. create a Data Collector Set.
- C . From the Azure portal, configure the Diagnostics settings for VM1.
- D . From the Azure portal, configure the Performance diagnostics settings for VM1.
D
Explanation:
Reference: https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/performance-diagnostics
Your network contains an Active Directory Domain Services (AD DS) domain All domain members have Microsoft Defender Credential Guard with UEFI tock configured in the domain you deploy a server named Server1 that runs Windows Server. You disable Credential Guard on Server1. You need to ensure that Server1 is MOST subject to Credential Guard restrictions.
What should you do next?
- A . Run the Device Guard and Credential Guard hardware readiness tool
- B . Disable the Turn on Virtual nation Based Security group policy setting
- C . Run dism and specify the /Disable-Feature and /FeatureName:IsolatedUserMode parameters
You are evaluating the technical requirements tor Cluster2.
What is the minimum number of Azure Site Recovery Providers that you should install?
- A . 1
- B . 4
- C . 12
- D . 16
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The functional level of the forest is Windows Server 2012 R2. All domain controllers run Windows Server 2012 R2.
Sysvol replicates by using the File Replication Service (FRS).
You plan to replace the existing domain controllers with new domain controllers that will run Windows Server 2022.
You need to ensure that you can add the first domain controller that runs Windows Server 2022.
Solution: You run the Active Directory Migration Tool (ADMT).
Does this meet the goal?
- A . Yes
- B . No
You have a Storage Spaces Direct configuration that has persistent memory and contains the data volumes shown in the following table.

You plan to add data volumes to Storage Spaces Direct as shown in the following table.

On which volumes can you use direct access (DAX)?
- A . Volume3 only
- B . Volume4 only
- C . Volume1 and Volume3 only
- D . Volume2 and Volume4 only
- E . Volume3 and Volume4 only
A
Explanation:
DAX can only be used on one volume and the volume has to be NTFS. You could configure DAX on Volume1 (although that would require reformatting the volume) or Volume3. However, ‘Volume1 only’ isn’t an answer option so Volume3 is the correct answer.
‘Volume1 and Volume3’ is incorrect because of the single volume limitation.
Reference: https://docs.microsoft.com/en-us/windows-server/storage/storage-spaces/persistent-memory-
direct-access
You need to meet the technical requirements for User1.
To which group in contoso.com should you add User1?
- A . Domain Admins
- B . Account Operators
- C . Schema Admins
- D . Backup Operators
You have an on-premises server that runs Windows Server and has the Web Server (IIS) server role installed. The server hosts a web app that connects to an on-premises Microsoft SQL Server database.
You plan to migrate the web app to an Azure App Services web app. The database will remain on-premises.
You need to ensure that the migrated web app can access the database.
What should you configure in Azure?
- A . an Azure SQL managed instance
- B . an on-premises data gateway
- C . Azure Extended Network
- D . a Hybrid Connection
D
Explanation:
Reference: https://docs.microsoft.com/en-us/azure/app-service/app-service-hybrid-connections