Microsoft Certification
61 practice questions with correct answers and detailed explanations. Use this guide to review concepts before taking the practice exam.
The Microsoft Configuring Windows Server Hybrid Advanced Services (AZ-801) certification validates professional expertise in Microsoft technologies. This study guide covers all 61 practice questions from our AZ-801 practice test, complete with correct answers and explanations to help you understand each concept thoroughly.
Review each question and explanation below, then test yourself with the full interactive practice exam to measure your readiness.
You need to configure Azure Arc-enabled servers to report compliance data to Azure Policy. Which agent must be installed on the Windows Server machines?
The Azure Connected Machine agent (also called the hybrid runbook worker agent) is required to register and manage on-premises or cloud servers as Azure Arc-enabled servers before other agents can report compliance.
Your organization wants to implement Azure Update Management for patching Windows Server 2019 machines in a hybrid environment. What is the minimum configuration required?
Azure Update Management requires a Log Analytics workspace with the Update Management solution enabled and an Azure Automation account linked to that workspace. The Connected Machine agent enables on-premises servers to report to these services.
You are configuring Windows Admin Center to manage both on-premises and Azure VMs. Which of the following correctly describes the authentication model?
Windows Admin Center supports multiple authentication methods including local accounts, domain credentials, and smart cards over HTTPS. This flexibility allows it to manage diverse server environments in hybrid scenarios.
Your organization needs to implement Azure Automation State Configuration for Windows Servers. Which component is responsible for downloading and applying the DSC configuration?
The Local Configuration Manager (LCM) on each Windows Server node is responsible for pulling Desired State Configuration from the Azure Automation State Configuration pull server and applying it locally.
You need to troubleshoot Azure Arc connectivity issues on a Windows Server. Which command will show the current status of the Azure Connected Machine agent?
The 'azcmagent show' command displays the status and configuration of the Azure Connected Machine agent on the local machine, including connection status and resource information.
Your organization is implementing Azure File Sync to synchronize file shares between an on-premises Windows Server and Azure. What is the primary purpose of the Storage Sync Service?
The Storage Sync Service acts as an orchestration point that manages sync groups, which contain registered servers (cloud endpoints) and Azure file shares, coordinating synchronization between them.
You are configuring Azure Defender for Servers to protect Windows Server machines across your hybrid environment. Which agent provides threat detection capabilities?
Azure Defender for Servers uses the Microsoft Monitoring Agent (MMA) along with the Azure Defender extension to collect security telemetry and provide threat detection on hybrid servers.
Your organization wants to use Azure Policy Guest Configuration to audit Windows Server compliance. What happens if a machine fails a compliance check?
Azure Policy Guest Configuration assesses compliance and reports non-compliant status. If the policy is configured with 'deployIfNotExists' or remediation actions, those can be automatically applied; otherwise, it reports the status for manual action.
You need to configure a Windows Server to send custom logs to Azure Monitor. Which solution should you use?
The Log Analytics agent can be configured with custom log collection rules to ingest custom logs from Windows Server applications into Azure Monitor Log Analytics workspace.
Your organization is implementing Azure Stack HCI with Windows Server 2022. What is the primary hybrid benefit of this configuration?
Azure Stack HCI is a hyper-converged infrastructure solution that brings Azure services and management capabilities to on-premises data centers, enabling hybrid cloud scenarios with consistent operations.
You are configuring Windows Server Network Controller in a hybrid scenario. Which statement accurately describes its function?
Windows Server Network Controller provides centralized, programmable management of physical and virtual network infrastructure using a declarative model, enabling software-defined networking in hybrid environments.
Your organization needs to implement Storage Spaces Direct (S2D) across multiple Windows Server nodes. What is a critical requirement for cluster formation?
Storage Spaces Direct requires all nodes to have identical hardware to ensure predictable performance and reliability, and low-latency, high-bandwidth networking (typically 10 Gbps or higher) is essential for synchronous replication.
You are implementing Azure Automation runbooks for Windows Server patching. Which runbook type is best suited for executing PowerShell scripts on hybrid servers?
PowerShell runbooks executed on Hybrid Runbook Workers allow direct execution of PowerShell scripts on on-premises Windows Servers, making them ideal for patching and other administrative tasks in hybrid environments.
Your organization is configuring Azure Arc for servers across multiple cloud providers and on-premises locations. What is the primary advantage of this centralized approach?
Azure Arc enables centralized management and governance of servers across multiple locations (on-premises, AWS, GCP, etc.) through Azure, providing consistent visibility and policy enforcement.
You need to implement Change Tracking and Inventory on Windows Servers using Azure Automation. Which changes can be tracked by default?
Change Tracking and Inventory by default tracks registry changes, file and directory modifications, Windows service startup type changes, and software changes across Windows Servers.
Your organization is deploying Windows Server containers in an Azure Stack HCI environment. Which container orchestration platform is recommended for hybrid scenarios?
AKS on Azure Stack HCI provides Kubernetes orchestration for containers in a hybrid environment, allowing consistent container management between on-premises and Azure with the same Kubernetes experience.
You are implementing Azure Monitor for Windows Servers and need to collect performance metrics. What is the preferred method for hybrid servers?
The Azure Monitor Agent (AMA) with Data Collection Rules is the modern, preferred method for collecting performance metrics from both on-premises and Azure Windows Servers in a consistent manner.
Your organization needs to implement Azure Site Recovery for Windows Server virtual machines in a hybrid setup. What is the primary use case?
Azure Site Recovery provides disaster recovery capabilities by replicating Windows Server VMs from on-premises Hyper-V, VMware, or physical servers to Azure, or between Azure regions, enabling failover when needed.
You are configuring a Hybrid Runbook Worker on a Windows Server to execute Azure Automation runbooks locally. Which ports must be open for communication with Azure Automation?
Hybrid Runbook Workers communicate with Azure Automation service over port 443 (HTTPS) for secure, encrypted communication. This port must be open for the hybrid worker to receive runbooks and report execution status.
Your organization is implementing Azure Automation State Configuration DSC for compliance. What does 'Pending Reboot' status indicate?
'Pending Reboot' status means the DSC configuration was applied but the node needs to be rebooted to fully achieve the desired state. This is common after system configuration changes.
You need to implement Windows Server Shielded VMs in an Azure Stack HCI environment. What is the primary security benefit?
Windows Server Shielded VMs use virtual TPM, Secure Boot, and encryption to protect VM memory and disk, preventing unauthorized access even from compromised hosts or administrators.
Your organization is using Azure Migrate to assess Windows Servers for cloud readiness. Which assessment focuses on application dependency mapping?
Azure Migrate's dependency analysis feature (using Service Map data) identifies applications, running processes, and dependencies between servers, helping plan migration groups and avoid breaking dependencies.
You are configuring Windows Server Failover Clustering across multiple sites in a hybrid scenario. Which technology enables site-aware cluster placement?
Windows Server Failover Cluster stretch clustering with multiple sites, combined with appropriate replication technology (like Storage Replica or stretched storage), enables awareness of site location for intelligent workload placement.
Your organization needs to implement Windows Server Update Services (WSUS) in a hybrid environment coordinated with Azure. What is the recommended approach?
WSUS can be deployed on-premises to manage patching, and when combined with Azure Update Management, it provides integrated hybrid patch management with centralized reporting and compliance visibility.
You are implementing Azure Backup for Windows Servers in a hybrid environment. Which backup solution is optimized for application-aware backups?
Azure Backup provides application-aware backup solutions specifically optimized for SQL Server and Exchange running on Windows Servers, enabling consistent snapshots and granular recovery options at the application level.
Your organization is configuring Azure ExpressRoute for hybrid Windows Server connectivity. Which benefit is most relevant to server management traffic?
Azure ExpressRoute provides a dedicated, private connection to Azure with consistent latency and bandwidth, which is beneficial for reliable Windows Server management traffic and hybrid scenarios where performance is critical.
You need to implement Azure Arc-enabled servers to manage on-premises Windows Server machines. Which agent must be installed on each server to enable Azure Arc connectivity?
The Azure Connected Machine Agent is the core component that enables on-premises servers to connect to Azure Arc, allowing you to manage them as Azure resources.
Your organization is configuring Windows Admin Center for hybrid management. You need to ensure that multiple administrators can manage different groups of servers without interfering with each other's configurations. What feature should you implement?
Windows Admin Center supports RBAC with custom roles that allow you to define granular permissions for different administrators managing distinct server groups.
You are implementing Azure Update Manager for patching servers in a hybrid environment. Which of the following best describes the primary benefit of using Azure Update Manager over traditional WSUS?
Azure Update Manager provides unified patch management across hybrid environments, allowing you to manage updates for Azure VMs and on-premises servers from a single console.
Your organization requires encryption of data in transit when synchronizing configuration data between on-premises servers and Azure. Which protocol should you enforce at the network level?
HTTPS with TLS 1.2 or higher is the standard for securing data in transit between on-premises servers and Azure services, providing encryption and authentication.
You need to configure Azure Stack HCI for a hybrid deployment. What is the minimum number of servers required to create a stretched cluster for disaster recovery capabilities?
Azure Stack HCI stretched clusters require a minimum of four servers distributed across two sites to maintain quorum and provide disaster recovery capabilities.
You are troubleshooting Azure Arc agent connectivity issues on a Windows Server machine behind a corporate proxy. Which configuration file must you modify to enable proxy settings?
The azcmagent.conf file is used to configure proxy settings and other connectivity parameters for the Azure Connected Machine Agent.
Your organization is implementing Azure Automanage for Windows Server machines. Which of the following services are automatically enabled by Azure Automanage Best Practices profile?
Azure Automanage Best Practices profile automatically configures antimalware, monitoring, automation, and update management services for enrolled servers.
You need to implement Azure Policy to ensure all Windows Server machines in your hybrid environment have specific security settings enforced. Which type of policy definition would you use to audit non-compliant servers without enforcing changes?
Audit policies allow you to identify non-compliant resources without enforcing changes, providing visibility into compliance status before implementing mandatory policies.
You are configuring Storage Spaces Direct (S2D) on an Azure Stack HCI cluster. Which network bandwidth requirement must you meet for 10-node cluster nodes communicating between sites?
Azure Stack HCI with Storage Spaces Direct requires a minimum of 10 Gbps full-duplex connectivity between cluster nodes to ensure adequate bandwidth for replication and performance.
You need to configure Azure Hybrid Benefit for Windows Server licenses in your hybrid environment. Which of the following licensing scenarios qualifies for this benefit?
Azure Hybrid Benefit allows you to use Windows Server licenses with Software Assurance to reduce costs for both on-premises and Azure deployments.
Your organization is implementing a hybrid identity solution using Azure AD Connect. You need to synchronize Windows Server machine accounts for hybrid scenarios. Which synchronization option supports filtering to specific organizational units?
Custom installation of Azure AD Connect allows you to configure organizational unit (OU) filtering to control which objects are synchronized from on-premises Active Directory.
You are configuring Windows Server as a guest operating system on Azure Stack HCI. Which hypervisor technology is used to run virtual machines on Azure Stack HCI?
Azure Stack HCI uses Hyper-V as its hypervisor technology, combined with Storage Spaces Direct for storage management and clustering capabilities.
You need to implement Network Segmentation on Windows Server machines to meet compliance requirements. Which Windows Server feature provides microsegmentation capabilities in a hybrid environment?
Software-Defined Networking and Network Security Groups provide microsegmentation capabilities for hybrid environments, enabling fine-grained network traffic control.
Your organization wants to implement Azure Arc-enabled servers with guest configuration management. What type of PowerShell DSC configurations can you deploy through Azure Arc guest configuration?
Azure Arc guest configuration allows you to create custom PowerShell DSC configurations, package them, and deploy them as guest configuration policies across your hybrid servers.
You are implementing Azure Monitor for Windows Server machines in a hybrid environment. Which agent collects performance metrics and logs from on-premises servers?
The Log Analytics Agent (being deprecated) and the newer Azure Monitor Agent are used to collect performance metrics and logs from on-premises and Azure servers.
You need to configure Azure Site Recovery for Windows Server workloads to provide disaster recovery between on-premises and Azure. Which replication engine is used for initial full replication?
Azure Site Recovery uses the Mobility Service agent for initial full replication of Windows Server machines, followed by incremental replication to maintain synchronization.
Your organization requires implementing a managed identity for Azure Arc-enabled servers to authenticate to Azure resources without credentials. Which type of managed identity should you use?
System-assigned managed identities for Azure Arc-enabled servers allow automatic authentication to Azure services without managing credentials manually.
You are planning the deployment of Azure Stack HCI with cluster validation. Which critical validation step must pass before placing the cluster into production?
All cluster validation tests, including hardware, network, and storage tests, must pass completely to ensure the Azure Stack HCI cluster is supported and reliable.
You need to configure Windows Server Update Services (WSUS) in a hybrid environment where some servers are managed through Azure Update Manager. What is the recommended approach for update management?
Azure Update Manager provides unified patch management for hybrid environments, reducing the complexity and maintenance burden of WSUS deployments.
Your organization is configuring failover clustering on Windows Server for high availability. Which feature allows you to configure automatic failover between cluster nodes with minimal data loss?
Hyper-V Replica in conjunction with failover clustering provides continuous replication of virtual machines, enabling automatic failover with minimal RPO and RTO.
You are implementing Azure Automation for Windows Server management in a hybrid environment. Which type of runbooks can execute scripts on on-premises servers through a hybrid worker?
Hybrid runbook workers enable Azure Automation to execute PowerShell runbooks on on-premises servers, extending automation capabilities to hybrid environments.
You need to implement data encryption at rest for Windows Server machines using BitLocker in a hybrid environment managed by Azure. Which Azure service provides centralized key management for BitLocker keys?
Azure Key Vault provides centralized management of BitLocker recovery keys for Windows Server machines, enabling secure escrow and audit compliance.
Your organization is implementing Azure Arc-enabled Kubernetes on Windows Server containers. Which runtime environment is supported for running Windows containers in this scenario?
Azure Arc-enabled Kubernetes supports Windows container nodes using Kubernetes with the Windows container runtime (wcow) and compatible container runtimes.
You are configuring Windows Server Network Controller in a Software-Defined Networking (SDN) deployment. What is the minimum number of Network Controller nodes recommended for production deployments?
Production SDN deployments require a minimum of three Network Controller nodes to ensure high availability, fault tolerance, and data replication.
You need to configure Azure Sentinel for Windows Server security monitoring in a hybrid environment. Which agent collects Windows Security events and sends them to Azure Sentinel?
The Azure Monitor Agent and Log Analytics Agent collect Windows Security event logs from servers and forward them to Azure Sentinel for threat detection and analysis.
You need to configure Azure Arc-enabled servers to report compliance data to Azure Policy. Which agent must be installed on the on-premises Windows Server?
The Azure Connected Machine Agent is required to register on-premises servers with Azure Arc, enabling them to be managed by Azure services including Azure Policy compliance reporting.
Your organization uses Azure File Sync to synchronize files between an on-premises Windows Server and Azure. A user reports that a file is not syncing. What is the most likely cause if the file exceeds 100 GB in size?
While Azure File Sync does have limitations, the primary issue with large files not syncing is typically that they are locked by another process. Files locked for writing or exclusive access cannot be synced until released.
You are deploying Windows Server Update Services (WSUS) in a hybrid environment. Your organization wants to ensure that critical security updates are deployed to both on-premises and Azure-based servers. What should you configure?
Configuring a single upstream WSUS server synchronized to Microsoft Update with downstream replica servers at each location ensures consistent update deployment and reduced bandwidth consumption while maintaining centralized control.
You need to implement Azure Automation to manage on-premises Windows Server resources. Which authentication method is most secure for hybrid runbooks?
Azure Automation credential assets provide encrypted storage for sensitive information and are the recommended secure method for storing credentials used in hybrid runbooks, protecting them from unauthorized access.
Your Windows Server is registered with Azure Arc. You want to restrict which Azure services can manage the server. What Azure feature should you use?
Azure RBAC with custom roles allows you to grant granular permissions specifying which Azure services and users can manage Arc-enabled servers, providing the most precise access control.
You are configuring a hybrid disaster recovery solution using Azure Site Recovery. Your on-premises Windows Server needs to replicate to Azure. What is the primary prerequisite?
The Mobility Service agent must be installed on the on-premises server to capture disk changes and transmit replication data to Azure Site Recovery, making it essential for the replication process to function.
Your organization deploys Windows Admin Center in a hybrid environment. You need to manage both on-premises servers and Azure VMs from a single gateway. What networking requirement must be met?
Windows Admin Center requires network connectivity from the gateway to the servers it manages; this can be achieved through VPN, ExpressRoute, or other network connectivity solutions connecting on-premises and Azure environments.
You configure Azure Monitor for on-premises Windows Servers using the Log Analytics agent. A server stops sending heartbeat data to the workspace. What is the most likely cause?
The Log Analytics agent requires accurate system time synchronization to communicate successfully with Azure; significant time drift causes authentication failures and prevents heartbeat data transmission.
You need to implement Azure Key Vault integration with on-premises Windows Server applications. Which component should you deploy to retrieve secrets securely?
A Key Vault Proxy component running on-premises or in an Azure Automation Hybrid Worker allows on-premises applications to securely retrieve secrets from Azure Key Vault without storing credentials locally.
Your organization uses Azure Backup to protect on-premises Windows Server data. You need to recover a file that was accidentally deleted 30 days ago. What is the maximum retention period for instant restore points in the default configuration?
Azure Backup's default instant restore retention period for on-premises servers is 7 days; files deleted beyond this window require recovery from longer-term recovery points stored in the Recovery Services Vault.
You've reviewed all 61 questions. Take the interactive practice exam to simulate the real test environment.
▶ Start Practice Exam — Free