AZ-802問題集は一年間で無料更新サービスを提供することができ、AZ-802認定試験の合格に大変役に立ちます。そして、もしAZ-802問題集の更新版があれば、お客様にお送りいたします。AZ-802問題集は全面的かつわかりやすいです。あなたはAZ-802問題集をちゃんと覚えると、AZ-802試験に合格することは簡単です。では、試験を心配するより、今から行動しましょう。
| Section | Objectives |
|---|---|
| Secure Windows Server hybrid infrastructures | - Identity and access management
|
| Implement and manage high availability | - Failover clustering
|
| Disaster recovery and migration | - Migration scenarios
|
| Manage hybrid compute and virtualization | - Virtual machines
|
| Networking and storage infrastructure | - Networking
|
| Monitoring and troubleshooting | - System monitoring
|
AZ-802トレーニング資料を用意しました。 これらは、保証対象の専門的な練習資料です。 参考のために許容できる価格に加えて、3つのバージョンのすべての資料は、10年以上にわたってこの分野の専門家によって編集されています。 さらに、一連の利点があります。 したがって、AZ-802の実際のテストの重要性は言うまでもありません。 今すぐご注文いただいた場合、1年間無料の更新をお送りします。 これらのサプリメントはすべて、AZ-802模擬試験にも役立ちます。
質問 # 271
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation:
Signing in over Remote Desktop requires a user to hold the " Allow log on through Remote Desktop Services
" right and the " Access this computer from the network " right, and to be excluded from any matching Deny counterpart, since an explicit Deny always overrides an Allow granted through any other group membership.
User1 is a member of Group2 (granted the Remote Desktop Services logon right) but is also a member of Group4, which is explicitly denied " Access this computer from the network " on Server4 -- that network- access denial blocks the RDP connection outright regardless of the Everyone-based network-access Allow or the RDS logon right, so User1 is denied. User2 belongs only to Group2: Group2 grants the RDS logon right, User2 is covered by the Everyone-based network-access Allow, and User2 is not a member of either Group3 or Group4, so neither Deny applies and User2 can sign in successfully. User3 is a member of Group3, which is explicitly denied " Allow log on through Remote Desktop Services " on Server4 -- that denial blocks the RDP logon right itself, so User3 cannot sign in regardless of network-access rights (and User3 is also in Group4, which independently denies network access as well). Therefore, only User2 can successfully sign in to Server4 using Remote Desktop.
質問 # 272
You have an on-premises Hyper-V host named Server1. Server1 contains a virtual machine named VM1. You have a non-domain joined Hyper-V server named Server2 that is hosted in a remote location. You plan to replicate VM1 to Server2 by using Hyper-V Replica. You need to configure replication on Server1. Which authentication method can you use?
正解：D
解説：
Hyper-V Replica supports two authentication methods: Kerberos (integrated Windows authentication) over an unencrypted HTTP connection, which requires both the primary and replica servers to be domain-joined and mutually trusted, or certificate-based authentication over an encrypted HTTPS connection. Because Server2 is a non-domain-joined, remotely located Hyper-V host, Kerberos authentication is not available, so replication from Server1 must be configured to use certificate-based authentication, which also has the advantage of encrypting replication traffic in transit over the connection to the remote location. Setting this up requires issuing or importing a matching certificate on both Server1 and Server2, configuring the Replica server to accept HTTPS connections on the Hyper-V Replica listener, and specifying the certificate thumbprint when enabling replication for VM1, none of which is required for the simpler but domain-dependent Kerberos option. Because the certificates must chain to a mutually trusted root and Server2 is not part of the same AD DS forest, the certificates are typically issued by a third-party or shared internal certificate authority that both hosts already trust independently of any Active Directory relationship.
質問 # 273
Your network contains an Active Directory Domain Services (AD DS) domain.
The domain contains three servers named DHCP1, DHCP2, and DHCP3 that run Windows Server and have the DHCP Server role installed. The servers host IPv4 scopes only. Shared storage is unavailable.
Your company has a main datacenter that contains DHCP1 and DHCP2. The company has a disaster-recovery datacenter that contains DHCP3 and connects to the main datacenter by using a WAN link.
You have two scopes named Scope1 and Scope2.
You need to provide DHCP service continuity for the scopes. The solution must meet the following requirements:
* Scope1: DHCP3 must provide leases only if a DHCP server in the a main datacenter is unavailable.
* Scope2: DHCP! and DHCP2 must each lease from separate parts of the IP address range. DHCP2 must wait before responding to client computer requests.
How should you configure high availability for each scope? To answer, drag the appropriate configurations to the correct scopes. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation:
Scope1: DHCP failover in hot standby mode. Scope2: A split scope that uses delayed responses.
DHCP failover in hot standby mode designates one partner as active, normally answering all client requests for a scope, while the second partner remains passive and only begins leasing addresses once it detects the active partner is unavailable, which exactly matches Scope1 ' s requirement that DHCP3 (in the disaster- recovery site) leases addresses only when a main-datacenter server is down; hot standby is also the mode Microsoft recommends specifically for main-site-to-DR-site failover pairings, as opposed to load-balance mode, which splits live traffic between both partners simultaneously and is intended for two servers on the same local, low-latency network segment. Scope2 ' s requirement, that DHCP1 and DHCP2 each lease from separate parts of the address range with DHCP2 waiting before responding, describes the classic split-scope configuration, in which the address range is divided (commonly 80/20) between two independent, non- partnered DHCP servers, and a delay is configured on one server ' s scope options so it only replies to a DHCPDISCOVER broadcast if the other, undelayed server fails to respond first; this delayed-response split scope predates the failover feature and is still used when two DHCP servers should operate independently rather than as a coordinated failover pair. Neither scope ' s requirement matches a DHCP Server role in a failover cluster (which addresses a single server ' s own availability, not multi-server address partitioning) or a single server with exclusion ranges (only one server involved).
質問 # 274
Your network contains an Active Directory Domain Services (AD DS) domain.
You need to deploy a Storage Spaces Direct cluster. The solution must support dual parity.
What is the minimum and maximum number of nodes you can deploy to the cluster? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation:
Storage Spaces Direct requires a minimum of four servers before dual parity (also called mirror-accelerated parity when combined with a mirror tier) is even offered as a resiliency option for a volume. With only two servers, only two-way mirroring or nested resiliency is available, and with three servers only three-way mirroring is available, because dual parity ' s erasure-coding scheme needs at least four independent fault domains to tolerate the simultaneous loss of any two drives or servers safely while still being able to reconstruct data from parity information. Fewer than four nodes simply cannot provide the fault-domain diversity that dual parity ' s erasure coding depends on, which is why Microsoft ' s hardware requirements documentation calls out four servers as the hard floor for this specific resiliency type, distinct from the two- server floor for basic mirroring. On the upper end, a Storage Spaces Direct cluster built on Windows Server supports a maximum of 16 servers regardless of which resiliency type is used, since that is the documented ceiling for hyper-converged and disaggregated S2D deployments alike, driven by the practical limits of pool metadata and health-service scalability rather than by the specific resiliency type chosen for any individual volume.
質問 # 275
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. You implement a central store. You create a new Group Policy Object (GPO) named GPO1. When you attempt to edit GPO1, you see that the " Administrative Templates: Policy definitions (ADMX files) retrieved from the central store " node shows only two settings (far fewer than the normal full set of Administrative Template settings). You need to ensure that all settings are available. Solution: You copy the contents of the C:
\Windows\PolicyDefinitions folder to the central store. Does this meet the goal?
Group Policy Management Editor showing limited Administrative Templates settings
正解：A
解説：
The documented root cause of only a couple of Administrative Template settings appearing is that the Central Store ' s PolicyDefinitions folder currently holds only a small, incomplete set of custom ADMX/ADML files
-- the full default set of Windows ADMX/ADML files (covering the normal complete range of Administrative Template settings) was never copied into it. Microsoft ' s own troubleshooting guidance for the Central Store specifically documents the fix as populating the store with the complete ADMX/ADML file set (including the appropriate language subfolder, such as en-US) sourced from a client machine ' s local C:
\Windows\PolicyDefinitions folder, merging in any needed custom templates rather than leaving the store with only a partial set. Copying the contents of the local C:\Windows\PolicyDefinitions folder into the Central Store does exactly this: it adds the full default set of ADMX/ADML files that had been missing, so that when any administrator subsequently edits GPO1 (or any other GPO) from a machine pointed at the Central Store, the Group Policy Management Editor now finds and displays the complete range of Administrative Template settings, not just the couple of custom entries that existed before. Best practice is to source this copy from an up-to-date, current-OS machine to avoid missing newer template definitions, but as a general action this directly and correctly addresses the documented root cause. Therefore, this solution meets the goal.
質問 # 276
......
MicrosoftのAZ-802認定試験に合格するのは簡単なことではありませんか。PassTestのMicrosoftのAZ-802試験トレーニング資料を選ぶなら、一回で認定試験に合格するの可能性は高いです。PassTestのMicrosoftのAZ-802試験トレーニング資料は豊富な経験を持っているIT業種の専門家が長年の研究を通じて、作成したものです。その権威性が高いと言えます。PassTestを選ぶなら、絶対に後悔させません。
AZ-802模擬トレーリング: https://www.passtest.jp/Microsoft/AZ-802-shiken.html