Smartly Prepare Exam with Free Online AZ-801 Practice Test

Note: This question is part of a series of questions that present the same scenario. Each question in the

series contains a unique solution that might meet the stated goals. Some question sets might have more

than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these

questions will not appear in the review screen.

Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.

com. The functional level of the forest is Windows Server 2012 R2. All domain controllers run Windows

Server 2012 R2.

Sysvol replicates by using the File Replication Service (FRS).

You plan to replace the existing domain controllers with new domain controllers that will run Windows

Server 2022.

You need to ensure that you can add the first domain controller that runs Windows Server 2022.

Solution: You run the Active Directory Migration Tool (ADMT).

Does this meet the goal?

You have 10 servers that run Windows Server in a workgroup.

You need to configure the servers to encrypt all the network traffic between the servers. The solution must be

as secure as possible.

Which authentication method should you configure in a connection security rule?

You have an Azure virtual machine named VM1 that runs Windows Server.

The operating system on VM1 fails to fully initialize its network stack, and you cannot establish a network

connection.

You need to establish an interactive shell session.

What should you use?

Your network contains an Active Directory Domain Services (AD DS) forest. The forest functional level is Windows Server 2012 R2. The forest contains the domains shown in the following table.

You create a user named Admin1.

You need to ensure that Admin1 can add a new domain controller that runs Windows Server 2022 to the east.

contoso.com domain. The solution must follow the principle of least privilege.

To which groups should you add Admin1?

Your network contains an Active Directory Domain Services (AD DS) domain All domain members have

Microsoft Defender Credential Guard with UEFI tock configured in the domain you deploy a server named

Server1 that runs Windows Server. You disable Credential Guard on Server1. You need to ensure that Server1

is MOST subject to Credential Guard restrictions. What should you do next?