AZ-801 Exam Question 41
Drag and Drop Question
You have a server named Server1 that runs Windows Server and has the Web Server (IIS) server role installed. Server1 hosts an ASP.NET Core web app named WebApp1 and the app's source files.
You install Docker Enterprise Edition on Server1.
You need to ensure that you can deploy WebApp1 to an Azure App Service web app from the Azure Container Registry.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You have a server named Server1 that runs Windows Server and has the Web Server (IIS) server role installed. Server1 hosts an ASP.NET Core web app named WebApp1 and the app's source files.
You install Docker Enterprise Edition on Server1.
You need to ensure that you can deploy WebApp1 to an Azure App Service web app from the Azure Container Registry.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

AZ-801 Exam Question 42
You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server and uses Azure Disk Encryption.
You need to identify which Azure key vault stores the encryption keys for VM1. The solution must minimize administrative effort.
Which PowerShell cmdlet should you run?
You need to identify which Azure key vault stores the encryption keys for VM1. The solution must minimize administrative effort.
Which PowerShell cmdlet should you run?
AZ-801 Exam Question 43
Your network contains an Active Directory Domain Services (AD DS) domain that has a Windows Server 2012 R2 forest and domain functional level. The domain contains the domain controllers shown in the following table.

You need to ensure that you can deploy a new domain controller that runs Windows Server 2025.
The solution must minimize administrative effort.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point

You need to ensure that you can deploy a new domain controller that runs Windows Server 2025.
The solution must minimize administrative effort.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point
AZ-801 Exam Question 44
You have an Azure subscription.
Your on-premises network connects to Azure by using an Azure VPN gateway named VPN1.
You need to monitor the Azure gateway health probe for VPN1.
Which TCP port should you use?
Your on-premises network connects to Azure by using an Azure VPN gateway named VPN1.
You need to monitor the Azure gateway health probe for VPN1.
Which TCP port should you use?
AZ-801 Exam Question 45
Your network contains an Active Directory Domain Services (AD DS) domain. All domain members have Microsoft Defender Credential Guard with UEFI lock configured.
In the domain, you deploy a server named Server1 that runs Windows Server. You disable Credential Guard on Server1.
You need to ensure that Server1 is NOT subject to Credential Guard restrictions.
What should you do next?
In the domain, you deploy a server named Server1 that runs Windows Server. You disable Credential Guard on Server1.
You need to ensure that Server1 is NOT subject to Credential Guard restrictions.
What should you do next?

