Overview of Configuring Windows Server Hybrid Advanced Services
The AZ-801 certification is an essential milestone in your Azure journey. Our practice tests simulate the real exam format, helping you build confidence and identify knowledge gaps. Review the detailed explanations provided after each question to deeply understand the underlying cloud concepts.
Sample AZ-801 Practice Questions
Question 1
In a scenario where you need to ensure that sensitive data on a Windows Server is protected against unauthorized access, which of the following should you implement to encrypt the drive and protect the encryption keys using hardware security modules (HSM)? A) Enable BitLocker with TPM and configure automatic recovery key storage. B) Install a third-party encryption software and configure it manually. C) Use Windows Storage Spaces with RAID 5 and enable encryption. D) Configure File History with encryption enabled.
- Enable BitLocker with TPM and configure automatic recovery key storage.
- Install a third-party encryption software and configure it manually.
- Use Windows Storage Spaces with RAID 5 and enable encryption.
- Configure File History with encryption enabled.
The correct answer is A. BitLocker with TPM and automatic recovery key storage provides hardware-based encryption and key protection, ensuring that the data is secure even if the server is compromised. Option B is not recommended as it involves third-party software, which may not provide the same level of security or integration with Windows features. Options C and D do not offer hardware-based encryption and key protection, making them less secure compared to BitLocker with TPM.
Question 2
Your organization requires a secure way to manage administrative tasks while minimizing the risk of privilege escalation. Which of the following should you implement to achieve this? A) Implement Just Enough Administration (JEA) with predefined roles and permissions. B) Use Group Policy to assign administrative rights to users. C) Enable Credential Guard and require virtualization-based security. D) Deploy a separate domain controller for administrative tasks.
- Implement Just Enough Administration (JEA) with predefined roles and permissions.
- Use Group Policy to assign administrative rights to users.
- Enable Credential Guard and require virtualization-based security.
- Deploy a separate domain controller for administrative tasks.
The correct answer is A. Just Enough Administration (JEA) allows you to define specific administrative tasks and permissions that users can perform, reducing the risk of privilege escalation. Option B does not provide fine-grained control over administrative tasks. Option C enhances security by protecting credentials but does not manage administrative tasks. Option D is not necessary for managing administrative tasks securely and can complicate network management.
Question 3
In a hybrid Active Directory environment, you need to secure a group of sensitive services running on Windows servers. Which of the following should you implement to ensure that these services can securely access shared resources without hard-coded credentials?
- Local user accounts
- Group Managed Service Accounts (gMSA)
- Standard managed service accounts
- Virtual machines with managed identities
Group Managed Service Accounts (gMSA) provide a way to run services under a managed service account that has its own dedicated credentials, which are automatically rotated. This ensures that services can securely access shared resources without the need for hard-coded credentials, thus improving security. Other options like local user accounts, standard managed service accounts, or virtual machines with managed identities do not offer the same level of security and credential management.
Use the interactive quiz engine above to answer these questions and hundreds more.