IT인증자격증은 국제적으로 승인받는 자격증이기에 많이 취득해두시면 취업이나 승진이나 이직이나 모두 편해집니다. 다른 사람이 없는 자격증을 내가 가지고 있다는것은 실력을 증명해주는 수단입니다. Microsoft인증 AZ-802시험은 널리 승인받는 자격증의 시험과목입니다. Microsoft인증 AZ-802덤프로Microsoft인증 AZ-802시험공부를 하시면 시험패스 난이도가 낮아지고 자격증 취득율이 높이 올라갑니다.자격증을 많이 취득하여 취업이나 승진의 문을 두드려 보시면 빈틈없이 닫힌 문도 활짝 열릴것입니다.
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments | 20% | - Integrate AD DS with Azure AD and Azure Arc - Implement and manage Group Policy Objects - Manage FSMO roles and replication - Install and configure domain controllers |
| Topic 2: Manage storage and file services | 15% | - Implement Storage Spaces and Storage Spaces Direct - Configure file servers and shares - Integrate on-premises storage with Azure Storage - Configure data deduplication and replication |
| Topic 3: Implement and manage an on-premises and hybrid networking infrastructure | 15% | - Implement hybrid network connectivity - Secure network traffic in hybrid environments - Configure IP addressing, DNS, and DHCP - Configure software-defined networking |
| Topic 4: Manage Windows Servers and workloads in a hybrid environment | 20% | - Deploy servers using Windows Admin Center and Azure Arc - Configure remote management and secure administration - Implement hybrid identity solutions - Manage updates and patches across hybrid servers |
| Topic 5: Secure Windows Server on-premises and hybrid infrastructures | 10% | - Manage access control and permissions - Implement security baselines and hardening - Configure Windows Defender and audit policies |
| Topic 6: Manage virtual machines and containers | 15% | - Configure Azure Arc-enabled servers and VMs - Deploy and manage containers and Kubernetes on Windows Server - Deploy and manage Hyper-V virtual machines |
| Topic 7: Implement high availability and disaster recovery | 5% | - Configure failover clustering - Use Azure Site Recovery for hybrid workloads - Implement backup and recovery solutions - Monitor and troubleshoot Windows Server environments - Perform server and workload migrations |
ExamPassdump의Microsoft AZ-802 인증시험덤프는 자주 업데이트 되고, 오래 되고 더 이상 사용 하지 않는 문제들은 바로 삭제해버리며 새로운 최신 문제들을 추가 합니다. 이는 응시자가 확실하고도 빠르게Microsoft AZ-802덤프를 마스터하고Microsoft AZ-802시험을 패스할수 있도록 하는 또 하나의 보장입니다. 매력만점Microsoft AZ-802덤프 강력 추천합니다.
질문 # 134
What should you implement for the deployment of DC3?
정답：B
설명：
DC3 is explicitly described as a domain controller named dc3.corp.fabrikam.com that will exist inside Vnet1, meaning it must be a genuine, writable domain controller for Fabrikam ' s existing corp.fabrikam.com AD DS forest, replicating with DC1 and DC2. The only way to run an actual domain controller for an existing on- premises forest inside Azure is to deploy a regular Azure virtual machine, place it on Vnet1, install the AD DS role on it, and promote it as an additional domain controller for corp.fabrikam.com. Microsoft Entra Domain Services is a fundamentally different, fully managed service: it creates its own separate, standalone managed domain and does not add a domain controller to, or replicate directly with, an existing on-premises forest, so it cannot be used to deploy " DC3 " as described. Microsoft Entra Application Proxy publishes on- premises web applications to external users and has nothing to do with domain controller placement. A Microsoft Entra administrative unit is a container used to scope administrative permissions over Microsoft Entra objects and is unrelated to deploying infrastructure. Therefore, an Azure virtual machine, promoted to a domain controller, is the correct implementation for DC3.
질문 # 135
Your network contains an on-premises Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.
For each server. Windows Defender Firewall is configured to allow only communication between servers on the same segment. Server! has the following connection security rule:
* Name: Rule1
* Rule type: Isolation
* Requirement: Require authentication for inbound connections and request authentication for outbound connections
* Authentication method: Computer (Kerberos V5)
* Profile: Domain. Private. Public
Server2 does not have any connection security rules.
Server3 has the following connection security rule:
* Name: Rute3
* Rule type: Server-to-server
* Endpoints:
o Computers in Endpoint 1:192.168.50/24
o Computers in Endpoint 2: 192.168.1.0/24
* Requirement Request authentication (or inbound and outbound connections
* Authentication method: Computer (Kerberos V5)
* Profile: Domain. Private. Public
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Exhibit
정답：
설명：
Explanation:
A connection security rule only adds an authentication (IPsec) requirement to traffic that a firewall rule already permits; it does not, by itself, open or expand what a firewall rule allows. Because each server ' s Windows Defender Firewall is configured to allow communication only between servers on the same network segment, Server1 and Server2 (both on 192.168.1.0/24) are already permitted to communicate, so Server1 ' s Isolation rule, which only requests (not requires) outbound authentication, does not block that traffic even without a matching rule on Server2. Server3 sits on a different segment (192.168.5.0/24) from both Server1 and Server2, and because the firewall ' s same-segment scope restriction governs whether traffic is allowed at all, neither Server2 ' s attempt to reach Server3 nor Server3 ' s attempt to reach Server1 succeeds, regardless of the Server-to-server connection security rule configured on Server3, since that rule can only add authentication to already-permitted traffic and cannot bypass the firewall ' s segment-based scope restriction.
질문 # 136
Your network contains an Active Directory Domain Services (AD DS) forest. You need to deploy a Storage Spaces Direct converged infrastructure. The solution must meet the following requirements: -- Use an Ethernet fabric. -- Eliminate the need for Data Center Bridging (DCB). Which Remote Direct Memory Access (RDMA) networking technology should you implement?
정답：C
설명：
iWARP (Internet Wide Area RDMA Protocol) implements RDMA on top of standard TCP/IP, which allows it to operate over an ordinary, lossy Ethernet fabric without requiring Data Center Bridging or Priority Flow Control to guarantee lossless delivery of RDMA traffic. This is fundamentally different from RoCE (RDMA over Converged Ethernet), in either its v1 or v2 form, both of which depend on a DCB-configured, lossless Ethernet fabric to operate reliably, since RoCE has no built-in congestion or loss-recovery mechanism of its own and instead relies on the underlying network to guarantee lossless delivery. InfiniBand is excluded outright because it is not an Ethernet-based fabric at all, and the requirement explicitly calls for an Ethernet fabric. Because the deployment must use Ethernet while specifically eliminating the DCB dependency that both RoCEv1 and RoCEv2 require, iWARP is the only RDMA technology among the options that satisfies both stated requirements simultaneously for the Storage Spaces Direct converged infrastructure deployment.
질문 # 137
You have an Azure virtual machine named VM1 that runs Windows Server. The disks on VM1 are protected by using Azure Disk Encryption.
You need to use PowerShell to disable disk encryption on the data disks attached to VM1.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Exhibit
정답：
설명：
Explanation:
The Disable-AzVMDiskEncryption cmdlet, part of the Az.Compute module, removes Azure Disk Encryption
' s protection from a VM ' s disks by uninstalling or reconfiguring the encryption extension, and its - VolumeType parameter accepts the values All, OS, or Data to scope exactly which class of disk the disable operation applies to. Specifying -VolumeType Data restricts the disable operation strictly to the data disks attached to VM1, leaving the OS disk ' s own BitLocker or DM-Crypt encryption state completely untouched, which precisely matches the requirement to disable encryption specifically on VM1 ' s data disks without affecting the operating system volume. The other candidate cmdlets shown, Disable-BitLocker, Set- AzVMDiskEncryptionExtension, and Set-AzVMDataDisk, either operate at the wrong layer, such as Disable- BitLocker acting inside the guest OS rather than through the Azure Resource Manager-level encryption extension, or perform the opposite or an unrelated operation, such as enabling encryption or attaching a data disk, so none of them accomplishes the specific disable-on-data-disks-only outcome the scenario calls for.
Running this cmdlet against VM1 also triggers a VM reboot as part of removing the encryption extension ' s configuration from the targeted data disks.
질문 # 138
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two servers named Server1 and Server2 and the users shown in the following table: User1 (Contoso\Administrators), User2 (Contoso\Remote Management Users), User3 (Server2\Administrators), User4 (Server2\Remote Management Users). Which users can establish a PowerShell remoting session from Server1 to Server2?
User group membership table
정답：B
설명：
Establishing a WinRM/PowerShell remoting session to Server2 requires membership in a group that actually has effect on Server2 specifically -- either Server2 ' s own local Administrators group or its own local Remote Management Users group. User3 (Server2\Administrators) and User4 (Server2\Remote Management Users) are both explicitly members of local groups scoped directly to Server2, so both directly qualify. User1 ' s membership in Contoso\Administrators -- the domain ' s built-in, domain-scoped Administrators group -- does not automatically translate into local administrator rights on an ordinary member server like Server2; only the Domain Admins (and Enterprise Admins) global groups receive that special, hardcoded automatic local- Administrators nesting at domain-join time, and the domain ' s own built-in " Administrators " group ' s automatic reach is effectively confined to domain controllers, which share a single AD database rather than maintaining separate local SAM databases the way member servers do. Similarly, User2 ' s membership in a domain group named " Contoso\Remote Management Users " has no automatic effect on Server2 ' s own local Remote Management Users group -- there is no such automatic domain-to-local nesting for that group, and no Group Policy Restricted Groups configuration binding the two is described. Consequently, only User3 and User4 -- the users whose group memberships are scoped directly to Server2 itself -- can establish a PowerShell remoting session from Server1 to Server2; User1 and User2 ' s domain-scoped group memberships confer no rights on Server2.
질문 # 139
......
ExamPassdump의 Microsoft AZ-802덤프로Microsoft AZ-802시험준비를 하면 시험패스는 간단한 일이라는걸 알게 될것입니다. Microsoft AZ-802덤프는 최근Microsoft AZ-802시험의 기출문제모음으로 되어있기에 적중율이 높습니다.시험에서 떨어지면 덤프비용 전액 환불해드리기에 우려없이 덤프를 주문하셔도 됩니다.
AZ-802퍼펙트 덤프문제: https://www.exampassdump.com/AZ-802_valid-braindumps.html