Itexamdump는 응시자에게 있어서 시간이 정말 소중하다는 것을 잘 알고 있으므로 Microsoft AZ-802덤프를 자주 업데이트 하고, 오래 되고 더 이상 사용 하지 않는 문제들은 바로 삭제해버리며 새로운 최신 문제들을 추가 합니다. 이는 응시자가 확실하고도 빠르게Microsoft AZ-802덤프를 마스터하고Microsoft AZ-802시험을 패스할수 있도록 하는 또 하나의 보장입니다.
| Section | Weight | Objectives |
|---|---|---|
| Manage storage and file services | 15% | - Configure data deduplication and replication - Configure file servers and shares - Implement Storage Spaces and Storage Spaces Direct - Integrate on-premises storage with Azure Storage |
| Implement high availability and disaster recovery | 5% | - Implement backup and recovery solutions - Use Azure Site Recovery for hybrid workloads - Monitor and troubleshoot Windows Server environments - Perform server and workload migrations - Configure failover clustering |
| Manage Windows Servers and workloads in a hybrid environment | 20% | - Deploy servers using Windows Admin Center and Azure Arc - Manage updates and patches across hybrid servers - Configure remote management and secure administration - Implement hybrid identity solutions |
| Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments | 20% | - Integrate AD DS with Azure AD and Azure Arc - Implement and manage Group Policy Objects - Install and configure domain controllers - Manage FSMO roles and replication |
| Manage virtual machines and containers | 15% | - Configure Azure Arc-enabled servers and VMs - Deploy and manage containers and Kubernetes on Windows Server - Deploy and manage Hyper-V virtual machines |
| Secure Windows Server on-premises and hybrid infrastructures | 10% | - Configure Windows Defender and audit policies - Implement security baselines and hardening - Manage access control and permissions |
| Implement and manage an on-premises and hybrid networking infrastructure | 15% | - Secure network traffic in hybrid environments - Configure software-defined networking - Configure IP addressing, DNS, and DHCP - Implement hybrid network connectivity |
연구결과에 의하면Microsoft인증 AZ-802시험은 너무 어려워 시험패스율이 낮다고 합니다. Itexamdump의 Microsoft인증 AZ-802덤프와 만나면Microsoft인증 AZ-802시험에 두려움을 느끼지 않으셔도 됩니다. Itexamdump의 Microsoft인증 AZ-802덤프는 엘리트한 IT전문가들이 실제시험을 연구하여 정리해둔 퍼펙트한 시험대비 공부자료입니다. 저희 덤프만 공부하시면 시간도 절약하고 가격도 친근하며 시험준비로 인한 여러방면의 스트레스를 적게 받아Microsoft인증 AZ-802시험패스가 한결 쉬워집니다.
질문 # 87
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains three servers named Server1, Server2, and Server3 that run Windows Server. All the servers are on the same network and have network connectivity.
On Server1, Windows Defender Firewall has a connection security rule that has the following settings:
* Rule Type: Server-to-server
* Endpoint 1: Any IP address
* Endpoint 2: Any IP address
* Requirements: Require authentication for inbound connections and request authentication for outbound connections
* Authentication Method: Computer (Kerberos V5)
* Profile: Domain, Private, Public
* Name: Rule1
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
정답：
설명：
Explanation:
When Server1 establishes a network connection with Server2, the connection is encrypted: No. Server2 can establish a network connection with Server3: Yes. When Server3 establishes a network connection with Server1, the connection is encrypted: No.
Rule1 exists only on Server1 and is configured to require authentication for inbound connections while only requesting authentication for outbound connections, using Computer (Kerberos V5) as its authentication method, but it does not specify Require encryption anywhere in its settings. Requiring or requesting authentication in a connection security rule only causes IPsec to negotiate and verify the identity of the two endpoints; it does not turn on encryption for the resulting connection unless the rule, or the IPsec settings backing it, explicitly specifies that encryption itself is required. Because Rule1 authenticates but does not encrypt, both a connection Server1 establishes outbound to Server2 and a connection Server3 establishes inbound to Server1 are authenticated using Kerberos V5 but are still sent in clear text, making both of those encryption-related statements false. Server2 and Server3 have no connection security rule of their own configured at all, so nothing on either of those two servers restricts, requires, or even attempts to authenticate traffic directly between them, meaning Server2 is able to freely establish a network connection with Server3 without any authentication or encryption involved, making that statement true.
질문 # 88
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. You need to identify which server is the PDC emulator for the domain. Solution: From Active Directory Sites and Services, you right-click Default-First- Site-Name in the console tree, and then select Properties. Does this meet the goal?
정답：B
설명：
Active Directory Sites and Services is the console used to manage physical network topology objects - sites, subnets, site links, and the NTDS Settings/connection objects on individual server objects - and it has no interface for viewing or transferring any of the five FSMO roles. Right-clicking a site object such as Default- First-Site-Name and opening Properties surfaces only site-level configuration, such as the intersite topology generator ' s settings and general site description/location metadata; it does not display operations master role holders anywhere in that dialog. The domain-wide roles (PDC Emulator, RID Master, Infrastructure Master) are surfaced through Active Directory Users and Computers by right-clicking the domain and choosing Operations Masters, while the forest-wide roles (Schema Master, Domain Naming Master) are surfaced through the Active Directory Schema snap-in and Active Directory Domains and Trusts, respectively; command-line tools such as netdom query fsmo or ntdsutil ' s roles context provide the same information without a GUI. Because Sites and Services Properties for a site object exposes none of that role information, the proposed action cannot reveal which server holds the PDC Emulator role, and the solution fails to meet the stated goal.
질문 # 89
Your network contains an Active Directory Domain Services (AD DS) domain. All domain members have Microsoft Defender Credential Guard with UEFI lock configured in the domain. You deploy a server named Server1 that runs Windows Server. You disable Credential Guard on Server1. You need to ensure that Server1 is MOST subject to Credential Guard restrictions. What should you do next?
정답：B
설명：
Because a domain-wide Group Policy Object already enforces Credential Guard with UEFI lock across all domain members, that policy setting is authoritative and will simply reapply the enabled, UEFI-locked Credential Guard configuration to Server1 the moment Group Policy next refreshes, entirely regardless of whatever one-time local change was just made to disable it. For the currently disabled state on Server1 to actually persist rather than being silently overwritten at the next policy refresh, the governing Group Policy Object itself has to be updated so that its Turn On Virtualization Based Security setting is no longer configured to enforce Credential Guard for the organizational unit or scope that Server1 falls under; only changing the policy that controls this setting stops Group Policy from re-asserting Credential Guard on Server1. Running the Device Guard and Credential Guard hardware readiness tool only assesses hardware compatibility and makes no configuration changes at all, and running dism with the /Disable-Feature and
/FeatureName:IsolatedUserMode parameters only changes local machine state, which, exactly like the earlier local disable action, would simply be reverted the next time the domain-wide Group Policy setting reapplies to Server1.
질문 # 90
You have a file server that runs Windows Server and has the File Server Resource Manager role service installed. The server hosts a file share named D:\Shares\Contracts.
You need to configure File Server Resource Manager (FSRM). The solution must meet the following requirements:
* Prevent users from saving .mp3 and .mp4 files.
* Automatically set the DataUse value for contract files.
* Move files that have datause-Archive and have NOT been accessed for 365 days to a folder named D:
\Expired.
Which FSRM feature should you use for each requirement? To answer, drag the appropriate features to the correct requirements. Each feature may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
정답：
설명：
Explanation:
Block the restricted extensions: A file screen. Set the DataUse value: A file classification rule. Move stale archived files: A file management task.
A file screen is the FSRM feature that actively blocks users from saving files of specified extensions, such as .
mp3 and .mp4, into a monitored folder, either rejecting the save outright (active screening) or only logging
/notifying (passive screening), which directly matches the requirement to prevent users from saving those two file types into the Contracts share. A file classification rule automatically evaluates files against defined conditions (such as file location, content, or existing property values) on a schedule and assigns or updates a classification property, such as a custom DataUse property, without any user action, which is exactly the mechanism needed to automatically set the DataUse value for contract files as they are created or modified, something neither a file screen nor a quota can do since neither of those features write classification property values. A file management task is the FSRM feature that runs on a schedule against files matching a defined classification-property condition (here, DataUse=Archive) and a file-age condition (not accessed for 365 days) and then performs an action, such as moving those matching files to D:\Expired, which is precisely the automated move-based cleanup requirement described; access-denied assistance only customizes the end-user error experience when access is denied and has no file-classification or file-movement capability, and a storage report only produces informational output rather than performing any action.
질문 # 91
You need to meet the technical requirements for Server1. Which users can currently perform the required task?
정답：B
설명：
Promoting a member server to a domain controller in a specific domain requires membership in either the Enterprise Admins group (forest-wide rights) or the Domain Admins group of that target domain. Server1 is a member server in canada.contoso.com, and the requirement is to promote it to a domain controller in that same domain. Admin1 belongs to Contoso\Enterprise Admins, which has full administrative rights across every domain in the forest, including the right to install AD DS and promote a server anywhere in the forest, so Admin1 qualifies. Admin3 belongs to Canada\Domain Admins, the Domain Admins group of canada.
contoso.com itself, which grants full administrative control, including domain controller promotion, within that domain, so Admin3 also qualifies. Admin2, by contrast, is a member of Contoso\Domain Admins, the Domain Admins group of the contoso.com domain; Domain Admins rights are scoped to their own domain and do not extend into a child domain such as canada.contoso.com, so Admin2 cannot promote Server1.
User1 has only standard Domain Users membership and holds no administrative rights anywhere. Therefore, only Admin1 and Admin3 currently have sufficient rights, making option C correct.
질문 # 92
......
우리Itexamdump 는 많은IT전문가들로 구성되었습니다. 우리의 문제와 답들은 모두 엘리트한 전문가들이 만들어낸 만큼 시험문제의 적중률은 아주 높습니다. 거이 100%의 정확도를 자랑하고 있습니다. 아마 많은 유사한 사이트들도 많습니다. 이러한 사이트에서 학습가이드와 온라인서비스도 지원되고 있습니다만 우리Itexamdump는 이미 이러한 사이트를 뛰어넘은 실력으로 업계에서는 우리만의 이미지를 지키고 있습니다. 우리는 정확한 문제와답만 제공하고 또한 그 어느 사이트보다도 빠른 업데이트로 여러분의 인증시험을 안전하게 패스하도록합니다.Microsoft AZ-802인증시험을 응시하려는 분들은 저희 문제와 답으로 안심하시고 자신 있게 응시하시면 됩니다. 우리Itexamdump 는 여러분이 100%Microsoft AZ-802인증시험을 패스할 수 있다는 것을 보장합니다.
AZ-802높은 통과율 시험덤프공부: https://www.itexamdump.com/AZ-802.html