It is proved that if you study with our AZ-802 exam questions for 20 to 30 hours, then you will be able to pass the AZ-802 exam with confidence. Because users only need to spend little hours on the AZ-802 quiz guide, our learning materials will help users to learn all the difficulties of the test site, to help users pass the qualifying examination and obtain the qualification certificate. If you think that time is important to you, try our AZ-802 Learning Materials and it will save you a lot of time.
| Section | Weight | Objectives |
|---|---|---|
| Secure Windows Server on-premises and hybrid infrastructures | 10% | - Manage access control and permissions - Configure Windows Defender and audit policies - Implement security baselines and hardening |
| Manage storage and file services | 15% | - Configure data deduplication and replication - Configure file servers and shares - Implement Storage Spaces and Storage Spaces Direct - Integrate on-premises storage with Azure Storage |
| Manage Windows Servers and workloads in a hybrid environment | 20% | - Implement hybrid identity solutions - Deploy servers using Windows Admin Center and Azure Arc - Manage updates and patches across hybrid servers - Configure remote management and secure administration |
| Manage virtual machines and containers | 15% | - Deploy and manage Hyper-V virtual machines - Configure Azure Arc-enabled servers and VMs - Deploy and manage containers and Kubernetes on Windows Server |
| Implement and manage an on-premises and hybrid networking infrastructure | 15% | - Configure IP addressing, DNS, and DHCP - Implement hybrid network connectivity - Secure network traffic in hybrid environments - Configure software-defined networking |
| Implement high availability and disaster recovery | 5% | - Use Azure Site Recovery for hybrid workloads - Monitor and troubleshoot Windows Server environments - Implement backup and recovery solutions - Perform server and workload migrations - Configure failover clustering |
| Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments | 20% | - Manage FSMO roles and replication - Install and configure domain controllers - Implement and manage Group Policy Objects - Integrate AD DS with Azure AD and Azure Arc |
You can get a reimbursement if you don't pass the Administering Windows Server. This means that you can take the Administering Windows Server (AZ-802) with confidence because you know you won't loose any money if you don't pass the Administering Windows Server (AZ-802) exam. This is a great way to ensure that you're investing in your future in the correct way with Microsoft AZ-802 exam questions.
NEW QUESTION # 48
Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.
You have an Azure subscription.
You plan to migrate the data on FS1 to Azure by using Azure Data Box Gateway.
You need to configure a Data Box Gateway virtual device.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Exhibit
Answer:
Explanation:
Explanation:
Deploying an Azure Data Box Gateway virtual device follows a fixed sequence: you first create the Data Box Gateway resource in the Azure portal, which generates the virtual device image and an activation key; you then download that virtual device image; next you use the downloaded image to create a virtual machine on the on-premises Hyper-V host (HV1); and finally you power on that VM and activate it against the Azure resource using the activation key, which brings the Data Box Gateway share online so FS1 ' s data can start being copied to it. Creating a Storage Sync Service, installing the Azure File Sync agent, or configuring Hyper-V Replica are unrelated Azure File Sync/replication actions that do not belong in this Data Box Gateway deployment, since Data Box Gateway is deployed and activated entirely as its own virtual appliance rather than as an agent layered onto an existing role or VM.
NEW QUESTION # 49
You have an on-premises server that runs Windows Server and contains a file share named Share1. You have an Azure subscription that contains an Azure Files share named azshare1 and an Azure File Sync instance named Sync1. Sync1 syncs Share1 with azshare1. You need to delete Sync1. Which four resources should you delete in sequence? To answer, move the appropriate resources from the list of resources to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
1. The cloud endpoint. 2. The server endpoint. 3. The sync group. 4. Sync1.
A Storage Sync Service (Sync1) cannot be deleted while it still contains an active sync group, and a sync group cannot be deleted while it still has a cloud endpoint or server endpoint attached to it, so the topology must be dismantled from the bottom up before the top-level Sync1 resource can be removed. The cloud endpoint (the link between the sync group and the Azure file share, azshare1) and the server endpoint (the link between the sync group and the on-premises path, Share1) are both direct children of the sync group and must both be removed before the now-empty sync group itself can be deleted; removing the cloud endpoint does not delete the underlying Azure file share azshare1 itself, only the sync association, so azshare1 does not need to be deleted at all to remove Sync1 and is correctly left out of the sequence. Once both endpoints are gone, the sync group has nothing left syncing through it and can be deleted, and once the Storage Sync Service has no remaining sync groups, Sync1 itself can finally be deleted. " The management group " is an unrelated Azure governance/organizational construct with no relationship to Storage Sync Service resources and plays no role in this sequence. Therefore, the correct order is: delete the cloud endpoint, delete the server endpoint, delete the sync group, and finally delete Sync1.
NEW QUESTION # 50
Your network contains two Active Directory Domain Services (AD DS) forests named contoso.com and adatum.com. A two-way external trust exists between contoso.com and adatum.com. The forests contain the servers shown in the following table: DC1 (contoso.com, hosts all FSMO roles), DC2 (adatum.com, hosts all FSMO roles), SRV1 (adatum.com, file server), SRV2 (adatum.com, file server). You need to ensure that users from contoso.com can access only shared resources hosted on SRV1. The solution must meet the following requirements: * Ensure that users from adatum.com can access the resources hosted in contoso.com (unrestricted, as today). * Prevent the contoso.com users from accessing any other resources in adatum.com.
What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Modify the trust on: DC2. Modify the permissions for the: Computer object of SRV1.
By default, an external trust grants every authenticated user in the trusted domain (contoso.com, from adatum.
com ' s perspective) the implicit right to attempt authentication against any computer in the trusting domain (adatum.com), with actual access then governed only by each resource ' s own ACLs -- there is no built-in restriction limiting which specific computers users can even attempt to authenticate against. Selective Authentication is the trust setting that changes this: once enabled on the trust from the perspective of the domain being accessed, authenticating users from the other side must be explicitly granted the " Allowed to Authenticate " permission on the specific computer object(s) they should be allowed to reach; without that permission, authentication is denied outright, regardless of any file/share-level permissions. Because the goal is to restrict contoso.com users specifically -- without restricting the reverse direction (adatum.com users accessing contoso.com resources, which must remain unrestricted) -- Selective Authentication must be enabled only on the adatum.com side of the trust, which is configured on DC2, the domain controller hosting the FSMO roles (and by extension the trust configuration) for adatum.com; enabling it on DC1 or on both would risk also restricting the other direction. Once Selective Authentication is enabled on that side, the " Allowed to Authenticate " permission must then be granted specifically on SRV1 ' s own computer object (not on DC1 ' s, and not merely on SRV1 ' s file shares, since Selective Authentication is enforced at the computer- object authentication level, before any share-level permission is even evaluated) for the relevant contoso.com users or groups.
NEW QUESTION # 51
You have on-premises servers that run Windows Server as shown in the following table.
You have an Azure file share named share1 that stores two files named File2.docx and File3.docx.
You create an Azure File Sync sync group that includes the following endpoints:
share
D:\Folder1 on Server1
D:\Datal on Server2
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Once a server endpoint is added to a sync group, Azure File Sync establishes the full namespace of the cloud endpoint on that server endpoint (as full files or as tiered placeholders, depending on the cloud tiering policy), and ordinary file operations such as creating or saving a file continue to work exactly like any local file operation - the sync engine reconciles the result afterward rather than blocking the write. Saving a file named File2.docx in D:\Folder1 on Server1 is therefore a normal, permitted operation even though a file of that name already exists in the cloud endpoint ' s namespace; the local write simply becomes the current version of that file, and Azure File Sync will sync the change (potentially generating a conflict copy only if the same file were edited concurrently from another endpoint at the same time). Creating File1.docx in D:
\Data1 on Server2 is likewise a completely ordinary create operation on a name that does not already exist anywhere in this sync group ' s namespace, and nothing in Azure File Sync restricts creating new files locally in a synced folder. Finally, because Server1 ' s D:\Folder1 is a server endpoint of the same sync group as the share1 cloud endpoint, every file present in share1 - including File3.docx - is projected into Server1 ' s namespace as part of normal sync group membership, whether as a fully cached file or, if it falls outside the cloud tiering policy ' s recency window, as a placeholder; either way, it will sync to and appear on Server1.
NEW QUESTION # 52
You have a server that runs Windows Server and hosts an app named App1. You need to prevent App1 from accessing external SMTP servers. The solution must meet the following requirements: - Minimize the impact on App1 ' s access to external HTTP servers. - Minimize the impact on other apps on the server. - Minimize administrative effort. What should you implement in Windows Defender Firewall?
Answer: E
Explanation:
A connection security/firewall rule that is scoped to the App1 executable and to outbound traffic blocks only the SMTP connections that App1 itself initiates, leaving App1 ' s outbound HTTP traffic and every other application on the server completely unaffected. Because the rule is bound to the program rather than to a port, it does not need to enumerate SMTP servers or ports system-wide, which keeps administrative effort low. An inbound rule would not affect the outbound connections App1 makes to external SMTP servers, and a port-based outbound rule would block port 25 for every process on the server, so a program-scoped outbound rule is the only option meeting all three stated requirements. Creating the rule with New- NetFirewallRule -Program (path to App1.exe) -Direction Outbound -Action Block, or the equivalent wizard steps in the console, is the simplest way to implement this without needing to track which ports or destination servers App1 ' s SMTP traffic uses.
NEW QUESTION # 53
......
Although it is not an easy thing for somebody to pass the exam, Real4exams can help aggressive people to achieve their goals. More qualified certification for our future employment has the effect to be reckoned with, only to have enough qualification certifications to prove their ability, can we win over rivals in the social competition. So the AZ-802 Certification has also become more and more important for all people. Because a lot of people long to improve themselves and get the decent job. In this circumstance, more and more people will ponder the question how to get the AZ-802 certification successfully in a short time.
AZ-802 Valid Practice Materials: https://www.real4exams.com/AZ-802_braindumps.html