人生はさまざまな試しがある、人生の頂点にかからないけど、刺激のない生活に変化をもたらします。あなたは我々社の提供する質高いMicrosoft AZ-802問題集を使用して、試験に参加します。もし無事にAZ-802試験に合格したら、あなたはもっと自信になって、更なる勇気でやりたいことをしています。
| Section | Objectives |
|---|---|
| Topic 1: Hybrid infrastructure management | - Monitoring and update management
|
| Topic 2: Compute, storage, and virtualization | - Virtual machines and containers
|
| Topic 3: Networking and high availability | - High availability and disaster recovery
|
| Topic 4: Secure and manage Windows Server environments | - Identity and access management
|
有効的なMicrosoft AZ-802認定資格試験問題集を見つけられるのは資格試験にとって重要なのです。我々JpshikenのMicrosoft AZ-802試験問題と試験解答の正確さは、あなたの試験準備をより簡単にし、あなたが試験に高いポイントを得ることを保証します。Microsoft AZ-802資格試験に参加する意向があれば、当社のJpshikenから自分に相応しい受験対策解説集を選らんで、認定試験の学習教材として勉強します。
質問 # 448
You have an Azure subscription. The subscription contains multiple virtual machines that run Windows Server. You have the Azure virtual machine backup policies shown in the following table. You are evaluating automatically moving recovery points to the vault-archive tier. For which policies can you enable tiering?
(Exhibit: backup policies with their retention schedules.)
Azure VM backup policies and their retention schedules
正解：D
解説：
A recovery point becomes eligible for the vault-archive tier only when it is a monthly or yearly recovery point with sufficient age and remaining retention; daily and weekly recovery points can never be archived directly.
Policy2 defines a monthly retention of 6 months and Policy4 defines a monthly retention of 30 months, so both policies generate monthly recovery points that can qualify for archive tiering. Policy1 configures only weekly retention (56 weeks) with no monthly or yearly tier configured, and Policy3 configures only a daily retention of 180 days with no weekly or monthly tier, so neither policy ever produces a monthly or yearly recovery point and therefore neither has anything eligible to move to the archive tier. Enabling archive tiering on a policy without a qualifying monthly or yearly tier would have no effect, since there would never be a recovery point of the right type to move. Once tiering is enabled on Policy2 and Policy4, Azure Backup automatically moves eligible monthly recovery points to the lower-cost archive tier as they age past the configured threshold, and they must be rehydrated before a restore operation can use them.
質問 # 449
You have an on-premises server named Server1 and Microsoft Sentinel instance.
You plan to collect windows Defender Firewall events from Sever1 and analyze the event data by using Microsoft Sentinel.
What should you install on Server1, and which information should you provide during the instance? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation:
Install: The Azure Monitor agent. Provide: The Azure Log Analytics workspace ID and the workspace key.
Collecting Windows Firewall events from an on-premises server into Microsoft Sentinel is done through the Windows Firewall Events via AMA data connector, which relies on the Azure Monitor agent together with an associated data collection rule to actually gather and forward the firewall event log entries; the Azure Log Analytics gateway is only a proxy relay used by the legacy Log Analytics agent, and the Microsoft Azure Recovery Services (MARS) agent is entirely unrelated to event forwarding, since it exists purely for Azure Backup scenarios. When enrolling a server that is neither Azure-hosted nor already Arc-onboarded, the Azure Monitor agent ' s setup process needs the destination Log Analytics workspace ' s ID and its workspace, or primary, key so the installer knows which specific workspace to report collected data to and can authenticate itself to that workspace, which is the same credential pairing Microsoft documents across both its Azure Monitor agent and legacy Microsoft Monitoring Agent onboarding flows for standalone, non-Azure servers.
A storage account name and access key, a subscription ID paired with the Sentinel workspace ' s name, or a set of Azure AD credentials play no role whatsoever in pointing an on-premises monitoring agent at a specific Log Analytics workspace during installation.
質問 # 450
Your network contains an Active Directory Domain Services (AD DS) domain. You plan to protect high- privilege domain credentials by specifying the following:
* The lifetime of the Kerberos Ticket Granting Ticket (TGT)
* The conditions required for devices to request a TGT
What should you use, and what should you create? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Exhibit
正解：
解説：
Explanation:
Authentication policies, created and managed from the Active Directory Administrative Center ' s Authentication node, let an administrator set a maximum Kerberos ticket-granting-ticket lifetime for user, computer, or service accounts and define access-control conditions (device group membership or device claims) that a client must satisfy before a TGT is issued to it. This is distinct from an authentication policy silo, which groups accounts together to apply a shared policy rather than defining the TGT lifetime and device conditions itself. Because the requirement is specifically to set a TGT lifetime and device request conditions for high-privilege accounts, an authentication policy authored in ADAC is the object that implements both settings. Once the authentication policy is created, it is applied to the target high-privilege accounts (often through a policy silo membership for organizational grouping), and the domain controllers evaluate the policy
' s TGT lifetime and device claims during Kerberos authentication before issuing or renewing a ticket for those accounts.
質問 # 451
Your network contains an Active Directory Domain Services (AD DS) domain.
You need to deploy a Storage Spaces Direct cluster. The solution must support dual parity.
What is the minimum and maximum number of nodes you can deploy to the cluster? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation:
Storage Spaces Direct requires a minimum of four servers before dual parity (also called mirror-accelerated parity when combined with a mirror tier) is even offered as a resiliency option for a volume. With only two servers, only two-way mirroring or nested resiliency is available, and with three servers only three-way mirroring is available, because dual parity ' s erasure-coding scheme needs at least four independent fault domains to tolerate the simultaneous loss of any two drives or servers safely while still being able to reconstruct data from parity information. Fewer than four nodes simply cannot provide the fault-domain diversity that dual parity ' s erasure coding depends on, which is why Microsoft ' s hardware requirements documentation calls out four servers as the hard floor for this specific resiliency type, distinct from the two- server floor for basic mirroring. On the upper end, a Storage Spaces Direct cluster built on Windows Server supports a maximum of 16 servers regardless of which resiliency type is used, since that is the documented ceiling for hyper-converged and disaggregated S2D deployments alike, driven by the practical limits of pool metadata and health-service scalability rather than by the specific resiliency type chosen for any individual volume.
質問 # 452
Your network contains two Active Directory Domain Services (AD DS) forests named contoso.com and fabrikam.com. A two-way forest trust exists between the forests. Each forest contains a single domain. The domains contain the servers shown in the following table.
You need to configure resources based constrained delegation so that the users In contoso.com can use Windows Admin Center on Server) to connect to Server? How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation:
In the Administering Windows Server Hybrid Core Infrastructure guidance for Windows Admin Center (WAC) and Kerberos delegation, resource-based constrained delegation (RBCD) is configured on the resource's computer account , not on the client/gateway. The documentation explains that "resource-based constrained delegation is applied to the target service account; the target's msDS- AllowedToActOnBehalfOfOtherIdentity attribute contains the security principals (computers or service accounts) that are permitted to act on behalf of users." It further clarifies that "this model supports cross- domain and cross-forest scenarios when a trust exists; you specify the front-end computer (for example, a WAC gateway) from the trusted forest as an allowed principal on the resource computer in its own domain." For WAC, the gateway (Server1 in contoso.com ) must be allowed to delegate to the managed node (Server2 in fabrikam.com ). The study materials show the exact PowerShell interface: "Use Set-ADComputer with - PrincipalsAllowedToDelegateToAccount to populate the resource's allowed-to-act list." Therefore, the Identity parameter must reference the resource computer account (Server2 in fabrikam.com), and the PrincipalsAllowedToDelegateToAccount parameter must reference the gateway computer account (Server1 in contoso.com).
Hence the correct command is:
Set-ADComputer -Identity (Get-ADComputer server2.fabrikam.com) -
PrincipalsAllowedToDelegateToAccount (Get-ADComputer server1.contoso.com)
質問 # 453
......
ユーザーのオフライン読書を促進するために、AZ-802スタディブレインダンプは、特にユーザー向けのPDFモードを開発するために、破片の時間をより有効に活用して学習できます。このモードでは、ユーザーは学習教材内のAZ-802準備ガイドをダウンロードして印刷することができ、紙にメモを取るのが簡単で、記憶の弱いリンクがあり、すべてのユーザーが無制限の数の学習をダウンロードして大幅に改善できますAZ-802試験問題を使用したユーザーの効率。 AZ-802準備ガイドは、この点でユーザーの需要を満たすのに非常に役立ち、ユーザーが学習した内容を継続的に統合して良い環境で読み書きできるようにします。
AZ-802ダウンロード: https://www.jpshiken.com/AZ-802_shiken.html