Practice 2025 valid Microsoft AZ-801 free real questions, help you test AZ-801 knowledge points

The following AZ-801 questions are part of our Microsoft AZ-801 real exam questions full version. There are 158 in our AZ-801 full version. All of our AZ-801 real exam questions can guarantee you success in the first attempt. If you fail AZ-801 exam with our Microsoft AZ-801 real exam questions, you will get full payment fee refund. Want to practice and study full verion of AZ-801 real exam questions? Go now!

Get AZ-801 Full Version

Microsoft AZ-801 Exam Actual Questions

The questions for AZ-801 were last updated on Feb 21,2025 .

Viewing page 1 out of 4 pages.

Viewing questions 1 out of 20 questions

Question#1

You have an Azure subscription that has Microsoft Defender for Cloud enabled.
You have 50 Azure virtual machines that run Windows Server.
You need to ensure that any security exploits detected on the virtual machines are forwarded to Defender for Cloud.
Which extension should you enable on the virtual machines?

A. Vulnerability assessment for machines

B. Microsoft Dependency agent

C. Log Analytics agent for Azure VMs

D. Guest Configuration agent

Explanation:
Reference: https://docs.microsoft.com/en-us/azure/defender-for-cloud/deploy-vulnerability-assessment-vm

Question#2

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant by using password hash synchronization. You have a Microsoft 365 subscription.
All devices are hybrid Azure AD-joined.
Users report that they must enter their password manually when accessing Microsoft 365 applications.
You need to reduce the number of times the users are prompted for their password when they access
Microsoft 365 and Azure services.
What should you do?

A. In Azure AD, configure a Conditional Access policy for the Microsoft Office 365 applications.

B. In the DNS zone of the AD DS domain, create an Autodiscover record.

C. From Azure AD Connect, enable single sign-on (SSO).

D. From Azure AD Connect, configure pass-through authentication.

Explanation:
Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso-quick-start

Question#3

You have a Microsoft Sentinel deployment and 100 Azure Arc-enabled on-premises servers. All the Azure Arc enabled resources are in the same resource group.
You need to onboard the servers to Microsoft Sentinel. The solution must minimize administrative effort.
What should you use to onboard the servers to Microsoft Sentinel?

A. Azure Automation

B. Azure Policy

C. Azure virtual machine extensions

D. Microsoft Defender for Cloud

Explanation:
Reference: https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/manage/hybrid/server/best-practices/arcpolicies-mma

Question#4

You have 100 Azure virtual machines that run Windows Server. The virtual machines are onboarded to Microsoft Defender for Cloud.
You need to shut down a virtual machine automatically if Microsoft Defender for Cloud generates the "Antimalware disabled in the virtual machine" alert for the virtual machine.
What should you use in Microsoft Defender for Cloud?

A. a logic app

B. a workbook

C. a security policy

D. adaptive network hardening

Explanation:
Reference: https://docs.microsoft.com/en-us/azure/defender-for-cloud/managing-and-responding-alerts

Question#5

HOTSPOT
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.
The domain contains the organizational units (OUs) shown in the following table.

In the domain, you create the Group Policy Objects (GPOs) shown in the following table.

You need to implement IPsec authentication to ensure that only authenticated computer accounts can connect to the members in the domain. The solution must minimize administrative effort.
Which GPOs should you apply to the Domain Controllers OU and the Domain Servers OU? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.