그리고 Fast2test AZ-800 시험 문제집의 전체 버전을 클라우드 저장소에서 다운로드할 수 있습니다: https://drive.google.com/open?id=1Oeik9cXOe56k5mVHCm59reUg_EdvIMQj
Fast2test 는 아주 우수한 IT인증자료사이트입니다. 우리Fast2test에서 여러분은Microsoft AZ-800인증시험관련 스킬과시험자료를 얻을수 있습니다. 여러분은 우리Fast2test 사이트에서 제공하는Microsoft AZ-800관련자료의 일부분문제와답등 샘플을 무료로 다운받아 체험해볼 수 있습니다. 그리고Fast2test에서는Microsoft AZ-800자료구매 후 추후 업데이트되는 동시에 최신버전을 무료로 발송해드립니다. 우리는Microsoft AZ-800인증시험관련 모든 자료를 여러분들에서 제공할 것입니다. 우리의 IT전문 팀은 부단한 업계경험과 연구를 이용하여 정확하고 디테일 한 시험문제와 답으로 여러분을 어시스트 해드리겠습니다.
마이크로소프트 AZ-800, 즉 Administering Windows Server Hybrid Core Infrastructure 시험은 Windows Server Hybrid 인프라를 관리하는 데 필요한 기술에 중점을 둔 인증입니다. 이 인증은 Azure 서비스 연결 및 다른 웹 서비스와 통합하는 하이브리드 솔루션을 계획하고 관리하는 IT 전문가를 대상으로 합니다. AZ-800 시험은 일반적으로 Windows Server Hybrid 인프라를 배포, 관리 및 모니터링하는 데 필요한 기술을 다룹니다.
Fast2test는 유일하게 여러분이 원하는Microsoft인증AZ-800시험관련자료를 해결해드릴 수 잇는 사이트입니다. Fast2test에서 제공하는 자료로 응시는 문제없습니다, 여러분은 고득점으로 시험을 통과할 것입니다.
Microsoft AZ-800 인증 시험은 IT 전문가가 복잡한 하이브리드 인프라 관리에 대한 전문 지식을 보여주는 훌륭한 방법입니다. 그것은 업계에서 높은 가치가 있으며 경력 전망을 크게 향상시킬 수 있습니다. 이 인증을 추구하는 데 관심이 있다면 적절한 교육 및 연구 자료에 투자하고 하이브리드 환경 관리에 대한 실질적인 경험을 얻으십시오.
질문 # 182
You have an Active Directory Domain Services (AD DS) domain. The domain contains three servers named Server 1, Server2, and Server3 that run Windows Server.
You sign in to Server1 by using a domain account and start a remote PowerShell session to Server2. From the remote PowerShell session, you attempt to access a resource on Server3. but access to the resource is denied.
You need to ensure tha t your credentials are passed from Server1 to Server3. The solution must minimize administrative effort. What should you do?
정답：C
설명：
In the Administering Windows Server Hybrid Core Infrastructure material under Windows Remote Management/PowerShell Remoting and authentic ation, Microsoft describes the classic "second-hop" issue:
when you start a remote session to Server2 using Kerberos and then try to reach a resource on Server3 , " your delegated credentials are not forwarded by default ." The guide explains that Kerberos " d oes not allow delegation unless it is explicitly configured ," and the recommended domain-based solution is Kerberos constrained delegation (KCD) . With KCD you " permit a specific computer account to delegate a user's Kerberos credentials only to explicitly listed services ," for example allowing Server2 (the WinRM/HTTP endpoint you connect to) to delegate to CIFS on Server3 so file or other resource access succeeds during the second hop.
The docs contrast this with alternatives: CredSSP can work but " is broad er in exposure and requires enabling a less restrictive credential delegation mechanism ," while JEA limits what commands can be run and does not solve credential delegation . Selective authentication applies to forest trusts, and Enforce user logon restrict ions relates to KDC validation and is not a remedy for second-hop delegation . Because the requirement is to pass credentials from Server1 # Server2 # Server3 with minimal administrative touch and preserve security boundaries, configuring Kerberos constrain ed delegation on Server2's computer account for the target services on Server3 is the correct approach.
질문 # 183
Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three domains. Each domain contains 10 domain controllers.
You plan to store a DNS zone in a custom Active Directory partition.
You need to create the Active Directory partition for the zone. The partition must replicate to only four of the domain controllers.
What should you use?
정답：B
설명：
You can create DNS application directory partition to host DNS zone containing user account entries with the use of NTDSUTIL.EXE and DNSMGMT.MSC tools.
Note 1: You can also create a custom Active Directory partition by using the DnsCmd command.
Note 2: Implementing DNS Application Directory Partition
1. Login to the forest root domain controller using your forest root domain admin account or enterprise administrator account
2. Start the command prompt.
3. Type NTDSUTIL and hit enter
4. Type PARTITION MANAGEMENT and hit enter
5. Type CONNECTIONS and hit enter
6. Type CONNECT TO SERVER <forestRootDomainControllerFQDN> or
<childDomainDomainControllerFQDN> ex. CONNECT TO SERVER
DC01.AMRS.SYNERGIX.DS
1. Type QUIT
2. Type LIST to view all known naming contexts
3. Type CREATE NC DC=dnsADPUsers,DC=Local domainControllerFQDN ex. CONNECT TO SERVER DC01.AMRS.SYNERGIX.DS
1. Type LIST to view all previously known naming context and the newly created DC=dnsADPUsers,DC=Local naming context
2. Do NOT add another replica for the naming context DC=dnsADPUsers,DC=Local This DNS Application Directory Partition is for a special purpose DNS zone and we wish to avoid Active Directory Replication delays. A backup of this DNS zone's content can be maintained in a secondary DNS zone on any DNS server.
Reference:
https://synergixdesk.zendesk.com/hc/en-us/articles/202927548-Create-DNS-application- directory-partition-to-host-DNS-zone-containing-user-account-entries
질문 # 184
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.
The network contains the servers shown in the following table.
You plan to implement IP Address Management (IPAM).
You need to use the Group Policy based provisioning method for managed servers. The solution must support server discovery.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
정답：
설명：
Explanation
질문 # 185
Hotspot Question
You have a Hyper-V host named Server1 that is connected to a managed switch. The switch is connected to multiple VLANs.
On Server1, you configure a new virtual machine named VM1.
You need to configure VM1 to communicate with all the VLANs. Any network traffic that is not tagged must be directed to VLAN 20.
How should you complete the PowerShell command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
정답：
설명：
Explanation:
Box 1: Set-VMNetworkAdapterVlan
The Set-VMNetworkAdapterVlan cmdlet configures virtual LAN settings for the traffic through a virtual network adapter. Access, Trunk, Private VLAN (isolated, community, or promiscuous), and untagged are mutually exclusive.
Box 2: -Trunk -NativeVlanID 20
Specifies Trunk mode for the virtual machine network adapter. This parameter configures a tagged virtual port that passes all allowed VLANId tags to the VM adapter. Traffic with the NativeVLANId is passed untagged to the VM adapter. This parameter must be used in conjunction with parameters AllowedVlanIdList and NativeVlanId.
- NativeVlanId
Specifies the native virtual LAN identifier for a virtual machine network adapter. This parameter must be specified in conjunction with the switch parameter Trunk.
Reference:
https://learn.microsoft.com/en-us/powershell/module/hyper-v/set-vmnetworkadaptervlan
질문 # 186
You have the servers shown in the following tab
Served contains a virtual machine named VM1 that runs Windows Server. Server1 has an external switch named Switch"1. VM1 is connected to Switch1.
You provision containers on VM1.
You need to configure networking for VM1. The solution must meet the following requirements:
* Ensure that Server3 automatically assigns IP addresses to the containers.
* Ensure that the containers can communicate with Server2.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
정답：
설명：
Explanation:
질문 # 187
......
AZ-800최신버전 시험대비 공부자료: https://kr.fast2test.com/AZ-800-premium-file.html
참고: Fast2test에서 Google Drive로 공유하는 무료 2026 Microsoft AZ-800 시험 문제집이 있습니다: https://drive.google.com/open?id=1Oeik9cXOe56k5mVHCm59reUg_EdvIMQj