Die Microsoft AZ-802 Zertifizierungsprüfung ist eine der beliebten und wichtigen Prüfung in der IT-Branche. Wir haben die besten Lernhilfe und den besten Online-Service. Wir bieten den IT-Fachleuten eine Abkürzung. Die online Tests zur Microsoft AZ-802 Zertifizierungsprüfung von PrüfungFrage enthalten viele Prüfungsinhalte und Antworten, die Sie wollen. Wenn Sie die Simulationsprüfung von PrüfungFrage bestehen, dann finden Sie, dass PrüfungFrage bietet genau was, was Sie wollen und dass Sie sich gut auf die Microsoft AZ-802 Prüfung vorbereiten können.
| Section | Weight | Objectives |
|---|---|---|
| Secure Windows Server on-premises and hybrid infrastructures | 10% | - Implement security baselines and hardening - Configure Windows Defender and audit policies - Manage access control and permissions |
| Manage virtual machines and containers | 15% | - Deploy and manage Hyper-V virtual machines - Configure Azure Arc-enabled servers and VMs - Deploy and manage containers and Kubernetes on Windows Server |
| Manage storage and file services | 15% | - Integrate on-premises storage with Azure Storage - Configure file servers and shares - Implement Storage Spaces and Storage Spaces Direct - Configure data deduplication and replication |
| Implement high availability and disaster recovery | 5% | - Configure failover clustering - Perform server and workload migrations - Implement backup and recovery solutions - Monitor and troubleshoot Windows Server environments - Use Azure Site Recovery for hybrid workloads |
| Implement and manage an on-premises and hybrid networking infrastructure | 15% | - Configure software-defined networking - Implement hybrid network connectivity - Configure IP addressing, DNS, and DHCP - Secure network traffic in hybrid environments |
| Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments | 20% | - Implement and manage Group Policy Objects - Integrate AD DS with Azure AD and Azure Arc - Install and configure domain controllers - Manage FSMO roles and replication |
| Manage Windows Servers and workloads in a hybrid environment | 20% | - Manage updates and patches across hybrid servers - Deploy servers using Windows Admin Center and Azure Arc - Configure remote management and secure administration - Implement hybrid identity solutions |
>> AZ-802 Fragen Und Antworten <<
Das erfahrungsreiche Expertenteam von PrüfungFrage hat den effizienten Prüfungsfragen und Antworten zur Microsoft AZ-802 Zertifizierungsprüfung entwickelt, die geneignet für die Kandidaten ist. Die Produkte von PrüfungFrage sind von guter Qualität. Sie können sie als Simulationsprüfung vor der Microsoft AZ-802 Zertifizierungsprüfung benutzen und sich gut auf die Prüfung vorbereiten.
522. Frage
You have a user named User1 and the resources shown in the following table. User1 has a computer named Computer1 that runs Windows 11. User1 works from home and establishes a Point-to-Site (P2S) connection to GW1 to access AppSvr1. You deploy the resources shown in the following table. User1 cannot access AppSvr2. You need to ensure that User1 can access AppSvr2. What should you do? (Exhibits: resource tables for VNet1/AppSvr1/GW1 and the peered VNet2/AppSvr2.)
VNet1, AppSvr1, and GW1
VNet2 (peered) and AppSvr2
Antwort: B
Begründung:
A point-to-site VPN client profile embeds the address-space routes that existed in Azure at the moment the profile was generated and downloaded onto Computer1. When VNet2, hosting AppSvr2, is peered with VNet1 after User1 ' s VPN client profile was already configured and downloaded, the previously issued profile has no route entry for VNet2 ' s address space baked into it, so traffic aimed at AppSvr2 never gets forwarded across the existing tunnel even though the VNet peering itself is fully established and healthy on the Azure side. Microsoft ' s documented point-to-site troubleshooting guidance for exactly this symptom is to, if needed, reset the gateway and then download and reinstall the VPN client on the affected computer so it picks up a refreshed profile that includes routes for the newly peered network, which restores connectivity to AppSvr2 without requiring any changes to the peering configuration itself, to network security groups, or to Computer1 ' s local Windows Defender Firewall settings. Creating a route table on GatewaySubnet or adding a service endpoint to VNet2 would not address a client-side profile that is simply missing the newly peered address space, since the routing problem in this case lives in the already-downloaded client configuration rather than in Azure ' s own routing tables.
523. Frage
You have an administrative workstation named AdminPC in a workgroup.
AdminPC has existing entries in the WSMan TrustedHosts list.
You have a server named Server1 that has PowerShell remoting enabled and is teachable at an IP address of
172.16.10.20.
You need to create a remote Power Shell session from AdminPC to Seiver1. The solution must meet the following requirements:
* Preserve the existing TrustedHosts entries on AdminPC.
* Use the IP address of Server1 for the remote session.
How should you complete the script? To answer, select the appropriate options in the answer area. NOTE:
Each correct selection is worth one point.
Antwort:
Begründung:
Explanation:
$var2 = Get-Credential. Cmdlet: Set-Item.
Because AdminPC is in a workgroup rather than domain-joined, connecting by IP address to a server that PowerShell remoting cannot Kerberos-authenticate requires the target to first be added to the local WSMan client ' s TrustedHosts list, which is exactly what the provided line, applied against WSMan:
\localhost\Client\TrustedHosts, is doing with the value $var1 (the target ' s IP address); the cmdlet that both reads and writes a WS-Management configuration setting such as TrustedHosts through the WSMan:
PowerShell drive is Set-Item, whereas Export-Csv and Out-File only write data to files and Set-ItemProperty targets registry or filesystem item properties rather than the WSMan provider ' s configuration values, so Set- Item is the only one of the four options that correctly updates TrustedHosts. Using the -Concatenate switch together with -Force appends the new IP address onto whatever entries already exist in TrustedHosts rather than replacing the list outright, which is exactly how the requirement to preserve the existing TrustedHosts entries on AdminPC is satisfied. The remote session itself, established by New-PSSession -ComputerName
$server -Credential $var2, needs an explicit credential because a workgroup-to-workgroup or workgroup-to- IP connection cannot rely on the caller ' s domain identity; Get-Credential is the cmdlet that interactively prompts for and returns a PSCredential object suitable for that -Credential parameter, unlike Get-ADUser, Get-AzUserAssignedIdentity, or Get-LocalUser, none of which return a usable credential object.
524. Frage
You need to implement alerts for the domain controllers. The solution must meet the technical requirements.
What should you do on the domain controllers, and what should you create on Azure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Antwort:
Begründung:
Explanation:
On the domain controllers: Install the Azure Monitor agent. In Azure: Create an Azure Log Analytics workspace.
Centrally managing performance alerts in Azure for on-premises domain controllers is done by connecting those servers to Azure Monitor: the Azure Monitor agent is installed on each domain controller (onboarded to Azure Arc for non-Azure servers, or directly if they are Azure VMs) to collect performance counters and event data, and that telemetry is sent to an Azure Log Analytics workspace, which is the resource that stores the collected data and against which performance-based alert rules are then defined and centrally managed.
Creating a Data Collector Set in Performance Monitor and modifying the Performance Monitor Users group are both local, per-server administrative actions that never send any data to Azure and cannot support central, Azure-based alerting. An Azure SQL database, a Storage Sync Service, and an Azure Storage account are all Azure resources, but none of them is the telemetry store that Azure Monitor ' s alerting pipeline is built on -- only a Log Analytics workspace serves that role. Therefore, installing the Azure Monitor agent on the domain controllers and creating an Azure Log Analytics workspace are the two required actions.
525. Frage
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains 10 servers that run Windows Server. The servers have static IP addresses. You plan to use DHCP to assign IP addresses to the servers. You need to ensure that each server always receives the same IP address. Which type of identifier should you use to create a DHCP reservation for each server?
Antwort: B
Begründung:
A DHCP reservation permanently binds a specific IP address to a specific client so that the client receives the same address on every lease renewal, and Windows Server DHCP identifies the client for this binding by its network adapter ' s MAC (hardware) address, which is the unique Layer 2 identifier included in every DHCPDISCOVER/DHCPREQUEST message. This makes the MAC address the correct and only supported identifier type for a standard client reservation in Windows Server DHCP. A UUID (client identifier option) is used in certain scenarios such as PXE/network boot or specific DHCPv6 configurations (as a DUID), but it is not the mechanism used for ordinary IPv4 reservations on Windows Server DHCP. An FQDN or a NetBIOS name identifies a computer for name resolution purposes (DNS or WINS/NetBIOS) but is not part of the DHCP protocol ' s client identification handshake and cannot be used to key a reservation, since DHCP operates below and independently of the name-resolution layer, at the point where the client does not necessarily have a resolvable name yet. A MAC-address-based reservation is therefore the correct approach.
526. Frage
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. You are planning the deployment of DNS to a new network. You have three internal DNS servers as shown in the following exhibit (Server1/Montreal/10.
0.1.10/contoso.local, Server2/Toronto/10.0.2.10/east.contoso.local, Server3/Seattle/10.0.3.10/west.contoso.
local). The contoso.local zone contains zone delegations for east.contoso.local and west.contoso.local. All the DNS servers use root hints. You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts. Solution: On Server2, you create a conditional forwarder for west.
contoso.local. On Server3, you create a conditional forwarder for east.contoso.local. Does this meet the goal?
Server1 (Montreal, 10.0.1.10, contoso.local) / Server2 (Toronto, 10.0.2.10, east.contoso.local) / Server3 (Seattle, 10.0.3.10, west.contoso.local); contoso.local delegates east.contoso.local and west.contoso.local.
Antwort: A
Begründung:
This solution lets Server2 reach the sibling zone west.contoso.local (by forwarding to Server3) and lets Server3 reach the sibling zone east.contoso.local (by forwarding to Server2), but it never gives either server a way to resolve the parent zone, contoso.local, which is hosted only on Server1. Neither Server2 nor Server3 is configured with any forwarder, conditional or otherwise, that targets contoso.local or points at Server1 at all, so any query for a name that lives directly in the parent zone (as opposed to one of the two delegated child zones) has no resolution path from either server. Root hints, which both servers already use, only provide internet resolution and have no knowledge of the internal, non-public contoso.local namespace. Because the stated goal explicitly requires that all the DNS servers can resolve the names of all the internal namespaces - which includes the parent zone contoso.local, not just the two child zones - and this solution leaves that zone completely unreachable from Server2 and Server3, the solution does not meet the goal. A complete solution would need to additionally forward to Server1 for the contoso.local namespace itself.
527. Frage
......
Wir alle wissen, dass die Microsoft AZ-802 Zertifizierungsprüfung in der IT-Branche eine zentrale Position darstellt. Aber die Kernfrage ist, dass es schwer ist, ein Microsoft AZ-802 Zertifikat zu erhalten. Wir wissen genau, dass im Internet relevanten Prüfungsmaterialien von guter Qualität fehlen. Die Examsfragen und Antworten von PrüfungFrage können allen an den Zertifizierungsprüfungen teilnehmenden Prüflingen irgendwann die notwendigen Informationen liefern. Wir versprechen Ihnen, dass Sie Ihre Microsoft AZ-802 Zertifizierungsprüfung einmalig bestehen können.
AZ-802 Testantworten: https://www.pruefungfrage.de/AZ-802-dumps-deutsch.html