Microsoft AZ-801: Configuring Windows Server Hybrid Advanced Services

Last checked October 22, 2026 against the official Microsoft exam page.

1. Question 1Secure Windows Server on-premises and hybrid infrastructures

   Which Windows feature stops unsigned or untrusted applications from running on a server by applying approved policy rules?

   1. ASmartScreen, which warns about downloaded files and websites but does not stop approved code from running on the server
   2. BWindows Defender Application Control, which allows only code that matches the approved policy rules to run
   3. CBitLocker, which encrypts disk volumes at rest and does not control which applications are allowed to run on the system
   4. DWindows Defender Firewall, which filters network traffic and does not control which code is allowed to execute on the server
   Show answer and explanationHide answer

   Correct answer: B

   Windows Defender Application Control enforces which code may run through policy. SmartScreen warns rather than blocks code, while BitLocker and the firewall protect data at rest and network traffic respectively.

2. Question 2Migrate servers and workloads

   Which tool transfers files, file shares and their security settings from an old server to a new one?

   1. AAzure Site Recovery, which replicates VMs for disaster recovery and does not transfer files and shares between servers
   2. BStorage Migration Service, which transfers files, shares and security settings and can cut over to the new server
   3. CWindows Server Backup, which creates backups on a local disk and does not migrate shares to a new server directly at all
   4. DDFS Replication, which keeps folders synchronised across servers but is not a complete migration tool for shares and their security
   Show answer and explanationHide answer

   Correct answer: B

   Storage Migration Service migrates files, shares and security settings and supports cut-over. Site Recovery, Windows Server Backup and DFS Replication do not complete that migration.

3. Question 3Implement and manage Windows Server high availability

   What is the purpose of a quorum in a Windows failover cluster?

   1. ATo assign IP addresses to the cluster nodes as they join the network through DHCP leases issued by the server
   2. BTo balance user logons across the cluster nodes, so that no single node is overloaded during the business hours each day
   3. CTo store the cluster's virtual machine images on shared storage for each node to read when it boots up after a restart
   4. DTo decide which set of nodes has enough votes to keep the cluster running, and to avoid split-brain conditions
   Show answer and explanationHide answer

   Correct answer: D

   Quorum determines which partition of nodes can continue, preventing split-brain. Logon balancing, image storage and address assignment are not quorum functions.

4. Question 4Monitor and troubleshoot Windows Server environments

   Which tool shows performance counters and manages Data Collector Sets on a Windows server?

   1. AAzure Site Recovery, which replicates workloads and does not show performance counters of the server for the team
   2. BThe Windows Admin Center backup page, which manages backup jobs and does not show performance counters for the server
   3. CStorage Migration Service, which moves files and does not show performance counters at any point during its operation
   4. DPerformance Monitor, which shows performance counters and manages Data Collector Sets
   Show answer and explanationHide answer

   Correct answer: D

   Performance Monitor shows counters and manages Data Collector Sets. Backup, migration and replication tools do not show performance counters.

5. Question 5Implement disaster recovery

   Which Azure service provides backup for Azure VMs, with recovery points stored in a vault?

   1. AAzure Backup with a Recovery Services vault, which stores recovery points for VMs and files
   2. BAzure Site Recovery alone, which replicates VMs for failover but is not the backup vault that holds VM recovery points
   3. CAzure Migrate, which assesses and migrates workloads and does not store backup recovery points for virtual machines
   4. DAzure Monitor, which collects metrics and logs and does not hold any backup recovery points for the virtual machines
   Show answer and explanationHide answer

   Correct answer: A

   Azure Backup with a Recovery Services vault stores VM recovery points. Site Recovery replicates for failover, and Migrate and Monitor serve other purposes.