Free Microsoft AZ-801 Exam Questions

Your network contains an Active Directory Domain Services (AD DS) forest. The forest functional level is Windows Server 2012 R2. The forest contains the domains shown in the following table.You create a user named Admin1.You need to ensure that Admin1 can add a new domain controller that runs Windows Server 2022 to the east.contoso.com domain. The solution must follow the principle of least privilege.To which groups should you add Admin1?

Your network contains an Active Directory Domain Services (AD DS) domain All domain members haveMicrosoft Defender Credential Guard with UEFI tock configured in the domain you deploy a server namedServer1 that runs Windows Server. You disable Credential Guard on Server1. You need to ensure that Server1is MOST subject to Credential Guard restrictions. What should you do next?

You have an Azure subscription that has Microsoft Defender for Cloud enabled.You have 50 Azure virtual machines that run Windows Server.You need to ensure that any security exploits detected on the virtual machines are forwarded to Defender forCloud.Which extension should you enable on the virtual machines?

Your network contains an Active Directory Domain Services (AD DS) domain All domain members haveMicrosoft Defender Credential Guard with UEFI tock configured in the domain you deploy a server namedServer1 that runs Windows Server. You disable Credential Guard on Server1. You need to ensure that Server1is MOST subject to Credential Guard restrictions. What should you do next?

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains a user named User1. You deploy a read-only domain controller (RODQ named RODC1 You need to ensure that User1 is a local administrator on RODC1. The solution must use the principle of least privilege. What should you use?