An Azure Windows Server 2022 VM is not responding to Remote Desktop connections. You have access to the Azure portal. What should you do first?

A Windows Server 2022 VM in Azure needs to securely access an on-premises SQL Server database. Which approach is recommended?

A company wants to configure Azure Site Recovery (ASR) to protect an on-premises Windows Server. What is required before enabling replication?

An Azure VM running Windows Server 2022 needs to securely retrieve secrets for an application. What is the best way to configure authentication?

A Windows Server 2022 failover cluster extends between an on-premises datacenter and Azure. You need to minimize downtime in case of a network outage between sites. What should you configure?

You need to implement Azure AD authentication for Windows Admin Center managing hybrid servers. What should you do first?

A Windows Server 2022 VM running in Azure needs to authenticate on-premises users using Active Directory. Which authentication method should be used to ensure seamless login without requiring users to enter credentials multiple times?

An Azure-based Windows Server 2022 VM needs secure remote management from on-premises. Which solution is best?

Your company requires on-premises Windows Server file shares to be accessible from multiple Azure Virtual Machines. What is the best approach?

You need to implement BitLocker encryption for Windows Server 2022 VMs in Azure. Which Azure feature should you use to manage encryption keys?

An Azure Virtual Machine running Windows Server 2022 needs to join an on-premises Active Directory domain. What is the best approach?

You need to configure DNS resolution for an Azure-based Windows Server that communicates with on-premises resources. What should you do?

Your company wants to use Azure Arc to manage on-premises Windows Servers. What is the minimum requirement for enrolling a server in Azure Arc?

You need to enable Just Enough Administration (JEA) on a Windows Server to limit administrative privileges. Which PowerShell module should you use?

A hybrid environment requires Windows Server 2022 failover clustering with Azure VMs. Which quorum type is recommended for ensuring high availability?

An on-premises Windows Server 2022 needs to securely communicate with an Azure-hosted web application. Which authentication method is the most secure and recommended?

Your organization wants to use Azure Update Management to centrally manage updates for Windows Server VMs running in Azure and on-premises. What is required to enable this capability?

You are configuring Azure Backup for an on-premises Windows Server. Which step must be completed before backups can be stored in Azure?

A Windows Server 2022 VM in Azure needs access to an on-premises file server. What is the best way to enable secure access while ensuring minimal latency?

You need to establish a secure VPN connection between an on-premises Windows Server and Azure. Which VPN type provides the most reliable and scalable solution for hybrid connectivity?

An on-premises Windows Server 2022 VM is experiencing performance issues after being migrated to Azure using Azure Migrate. Which tool should you use first to analyze and optimize VM performance?

You are configuring a Windows Server 2022 machine to act as a hybrid domain controller using Azure AD DS. What must be enabled to ensure seamless synchronization of on-premises identities?

You need to secure Azure AD Connect synchronization for an on-premises Windows Server Active Directory. Which security measure is least recommended?

You are configuring Windows Server failover clustering with nodes both on-premises and in Azure. What is the best quorum configuration for high availability?

You need to configure Kerberos delegation for an on-premises Windows Server that will act as a middle-tier application. Which type of delegation should you enable to ensure security while limiting access?

You need to implement Azure Site Recovery (ASR) for an on-premises Windows Server environment. Which of the following actions is mandatory before replicating virtual machines to Azure?

You are configuring a hybrid cloud solution with Azure Arc and need to ensure that an on-premises Windows Server can be managed from Azure. What is the first step you should take?

You have an on-premises server named Server1 that runs Windows Server and has the Hyper-V server role installed.
You have an Azure subscription.
You plan to back up Server1 to Azure by using Azure Backup.
Which two Azure Backup options require you to deploy Microsoft Azure Backup Server (MABS)? Each correct answer presents a complete solution.

Your company uses Storage Spaces Direct. You need to view the available storage in a Storage Space Direct storage pool. What should you use?

You have two Azure virtual machines that run Windows Server.
You plan to create a failover cluster that will host the virtual machines.
You need to configure an Azure Storage account that will be used by the cluster as a cloud witness. The solution must maximize resiliency.
Which type of redundancy should you configure for the storage account?

You have a Storage Spaces Direct configuration that has persistent memory and contains the data volumes shown in the following table.

You plan to add data volumes to Storage Spaces Direct as shown in the following table.

On which volumes can you use direct access (DAX)?

You have a management group named MG1 that contains an Azure subscription named Sub1. Sub1 contains the resources shown in the following table.

You need to enable Microsoft Defender for Servers.
From the Azure portal, on which two resources can you enable Defender for Servers? Each correct answer presents a complete solution.

You have a failover cluster named Cluster1 that has the following configurations:
✑ Number of nodes: 6
✑ Quorum: Dynamic quorum
✑ Witness: File share, Dynamic witness
What is the maximum number of nodes that can fail simultaneously while maintaining quorum?

You have an on-premises server named Server1 that runs Windows Server.
You have an Azure subscription.
You need to onboard Server1 to Microsoft Defender for Cloud.
What should you install on Server1?

You have an on-premises server named Server1 that runs Windows Server 2022 Standard. You have an Azure subscription that contains the virtual machines shown in the following table.

The subscription contains a Microsoft Sentinel instance named Sentinel1 in the Central US Azure region.
You need to implement the Windows Firewall connector.
Which servers can send Windows Firewall logs to Sentinel1?

Your network contains an Active Directory Domain Services (AD DS) forest. The forest functional level is Windows Server 2012 R2. The forest contains the domains shown in the following table.

You create a user named Admin1.
You need to ensure that Admin1 can add a new domain controller that runs Windows Server 2022 to the east.contoso.com domain. The solution must follow the principle of least privilege.
To which groups should you add Admin1?

You have an Azure subscription named Sub1 that contains a resource group named RG1. RG1 contains the resources shown in the following table.

Sub1 has Microsoft Defender for Servers enabled. You are assigned the Contributor role for Sub1.
You need to implement just-in-time (JIT) VM access for VM1.
What should you do first?

You have an Azure subscription that contains a user named User1 and the resources shown in the following table.

User1 has a computer named Computer1 that runs Windows 11. User1 works from home and establishes a Point-to-Site (P2S) connection to GW1 to access AppSvr1.
You deploy the resources shown in the following table.

User1 cannot access AppSvr2.
You need to ensure that User1 can access AppSvr2.
What should you do?

You have a server that runs Windows Server. The server is configured to encrypt all incoming traffic by using a connection security rule.
You need to ensure that Server1 can respond to the unencrypted tracert commands initiated from computers on the same network.
What should you do from Windows Defender Firewall with Advanced Security?

You have 10 servers that run Windows Server in a workgroup.
You need to configure the servers to encrypt all the network traffic between the servers. The solution must be as secure as possible.
Which authentication method should you configure in a connection security rule?

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant by using password hash synchronization.
You have a Microsoft 365 subscription.
All devices are hybrid Azure AD-joined.
Users report that they must enter their password manually when accessing Microsoft 365 applications.
You need to reduce the number of times the users are prompted for their password when they access Microsoft 365 and Azure services.
What should you do?

You have 100 Azure virtual machines that run Windows Server. The virtual machines are onboarded to Microsoft Defender for Cloud.
You need to shut down a virtual machine automatically if Microsoft Defender for Cloud generates the "Antimalware disabled in the virtual machine" alert for the virtual machine.
What should you use in Microsoft Defender for Cloud?

You have a server named Server1 that runs Windows Server.
You need to ensure that only specific applications can modify the data in protected folders on Server1.
Solution: From Virus & threat protection, you configure Tamper Protection
Does this meet the goal?

You have a server named Server1 that runs Windows Server.
You need to ensure that only specific applications can modify the data in protected folders on Server1.
Solution: From App & browser control, you configure Reputation-based protection.
Does this meet the goal?

You have an Azure virtual machine named VM1.
You enable Microsoft Defender SmartScreen on VM1.
You need to ensure that the SmartScreen messages displayed to users are logged.
What should you do?

You have an Azure virtual machine named VM1 that runs Windows Server.
You need to encrypt the contents of the disks on VM1 by using Azure Disk Encryption.
What is a prerequisite for implementing Azure Disk Encryption?

You have a Microsoft Sentinel deployment and 100 Azure Arc-enabled on-premises servers. All the Azure Arc-enabled resources are in the same resource group.
You need to onboard the servers to Microsoft Sentinel. The solution must minimize administrative effort.
What should you use to onboard the servers to Microsoft Sentinel?

You have an Azure subscription that has Microsoft Defender for Cloud enabled.
You have 50 Azure virtual machines that run Windows Server.
You need to ensure that any security exploits detected on the virtual machines are forwarded to Defender for Cloud.
Which extension should you enable on the virtual machines?

You have an Azure virtual machine named VM1 that runs Windows Server.
You plan to deploy a new line-of-business (LOB) application to VM1.
You need to ensure that the application can create child processes.
What should you configure on VM1?

You have a server named Server1 that runs Windows Server.
You need to ensure that only specific applications can modify the data in protected folders on Server1.
Solution: From Virus & threat protection, you configure Controlled folder access.
Does this meet the goal?

You have a server named Server1 that runs Windows Server.
You need to ensure that only specific applications can modify the data in protected folders on Server1.
Solution: From App & browser control, you configure the Exploit protection settings.
Does this meet the goal?