You have two servers named Server1 and Server2 that run Windows Server and have the Hyper-V role installed.You plan to deploy Hyper-V Replica between Server1 and Server2. The deployment will use certificate based authentication.You need to configure the prerequisites for the Hyper-V Replica deployment.Which two actions should you perform on each server? Each correct answer presents part of the solution.Note: Each correct answer is worth one point.
Answer(s): C,E
[C] Set up the firewallTo allow replication between the primary and secondary servers, traffic must get through the Windows Firewall (or any other third-party firewalls). When you installed the Hyper-V role on the servers by default exceptions for HTTP (80) and HTTPS (443) are created. If you're using these standard ports, you'll just need to enable the rules:To enable the rules on a standalone host server:Open Windows Firewall with Advance Security and click Inbound Rules.To enable HTTP (Kerberos) authentication, right-click Hyper-V Replica HTTP Listener (TCP-In) > Enable Rule.*-> To enable HTTPS certificate-based authentication, right-click Hyper-V Replica HTTPS Listener (TCP-In) > Enable Rule.[E]For Hyper-V Replica with certificate-based authentication, both the primary and replica Hyper-V servers needF. 509 v3 certificates with Server and Client Authentication extended key usage (EKU), exported private keys, and the host's FQDN in the subject name, installed in the local computer's Personal store. You also need network connectivity, enabled firewall rules for HTTPS, and the root certificate must be trusted on both the primary and replica servers.Certificate RequirementsType: X.509 v3 certificate.Purpose (EKU): Must include both Server Authentication and Client Authentication.Subject Name: Must match the FQDN (Fully Qualified Domain Name) of the Hyper-V host.Private Key: Must be exportable for encryption of replication data.Installation: Installed in the local computer's Personal store on both the primary and replica servers.Trust Chain: The certificate must be signed by a trusted root certificate authority (internal or self-signed) and the root certificate must be installed in the Trusted Root Certification Authorities store on the corresponding server.
https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/manage/set-up-hyper-v-replica
You have an Azure subscription. The subscription contains virtual machines that run Windows Server as shown in the following table.You plan to implement Azure Site Recovery.Which virtual machines can be replicated by using Site Recovery?
Answer(s): C
[Not VM4]Confidential VMs don't support:Azure Backup*-> Azure Site RecoveryEtc.[VM3] For Trusted Launch VMsBoot integrity monitoring: Replication of Boot integrity monitoring state isn't supported. If you want to use it, enable it explicitly on the failed over virtual machine.It can be replicated, but you need to manually re-enable it again.Note:Azure Site Recovery fully supports replication, failover, and failback for both Windows and Linux Trusted Launch VMs under specific conditions.This means you can now enjoy the benefits of advanced security features without sacrificing disaster recovery capabilities.Supported Scenarios and Requirements [VM2]Supported VM Types* Windows Trusted Launch VMsFully supported across all Azure regions where ASR is available.Works with Secure Boot and vTPM enabled.Compatible with shared disk configurations and private endpoint vaults.Limitations and Known Issues* Boot Integrity MonitoringMust be re-enabled post-failover [VM3, but need to manually enable this feature again]* Etc.
https://learn.microsoft.com/en-us/azure/confidential-computing/confidential-vm-overview https://learn.microsoft.com/en-us/azure/site-recovery/concepts-trusted-vm https://www.azurepro.ae/azure-site-recovery-now-supports-trusted-launch-vms-heres-what-you-need-to-know/
HOTSPOT (Drag and Drop is not supported)You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server.You need to back up VM1 by using Azure Backup. The solution must minimize potential data loss.What is the minimum backup interval you can configure for a standard backup policy and an enhanced backup policy? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: Every 24 hoursStandard backup policyFor an Azure Windows Server VM using a Standard backup policy, the minimum backup interval is daily; Enhanced policies allow for hourly intervals down to 4 hours. The Standard policy provides a simpler backup schedule, supporting only daily and weekly options for recovery points.Box 2: Every 4 hoursEnhanced backup policyEnhanced policies allow for hourly intervals down to 4 hours.
https://learn.microsoft.com/en-us/azure/backup/backup-azure-vms-enhanced-policy
You have an Azure virtual machine named VM1 that runs Windows Server.You configure Azure Site Recovery replication for VM1.You need to perform a test failover on VM1.What should you use from the VM1 blade in the Azure portal?
In the Azure portal, you execute a test failover for Azure Site Recovery by navigating to your Recovery Services Vault, then to the Site Recovery section, and finally selecting either the Recovery Plans blade to test a plan, or the Replicated Items blade to test a single virtual machine (VM). For a recovery plan, you select the plan name and then the Test Failover button, while for a single VM, you select the VM in the Replicated Items list and then click the +Test Failover button.
https://learn.microsoft.com/en-us/azure/site-recovery/azure-to-azure-tutorial-dr-drill
HOTSPOT (Drag and Drop is not supported)You have an on-premises server named Server1 that runs Windows Server.You have an Azure subscription.You migrate Server1 to an Azure virtual machine named VM1.You need to configure a backup solution for VM1. The solution must provide recovery points.What should you do on VM1, and in which type of vault should you store the backups? To answer, elect the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
Box 1: Install the Windows Azure VM agent.On VM1You need a backup extension on the Azure VM Agent (or the agent itself if you're backing up files and folders with the MARS agent) for an Azure Windows Server virtual machine to perform backups, as it coordinates with the Volume Shadow Copy Service (VSS) to create snapshots and ensure application-consistent or file- consistent backups. If your VM was deployed from an Azure Marketplace image, the agent and extension are typically installed by default. If not, you will need to manually install the VM Agent or the MARS agent for file/ folder backups.Incorrect:* Install the Azure Connected Machine agent.* Install Windows Server BackupYou do not use the standard Windows Server Backup feature to create recovery points for an Azure Windows Server VM; instead, you use the Azure Backup service, which employs the Microsoft Azure Recovery Services (MARS) agent or a backup extension to create and manage recovery points directly within Azure. While Windows Server Backup can be used to back up a VM's contents from within the VM, Azure Backup is the managed, native service for protecting entire Azure VMs and managing their recovery points in Azure.Box 2: Recovery Services vaultVault typeTo configure backup and recovery points for an Azure Windows Server VM, first create a Recovery Services vault in the Azure portal. Next, apply a backup policy to define your backup schedule and retention and select the virtual machine you want to back up. Enable the backup process to start the initial backup, which creates the first recovery point. You can then monitor the backup job and use the recovery points in the vault to restore the VM or individual files when needed.
https://learn.microsoft.com/en-us/azure/backup/manage-recovery-points
Post your Comments and Discuss Microsoft AZ-801 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-801 content, but please register or login to continue.