Die Zuverlässigkeit basiert sich auf die hohe Qualität, deshalb ist unsere Microsoft AZ-802 vertrauenswürdig. Allein die mit einer Höhe von fast 100% Bestehensquote überzeugen Sie vielleicht nicht. Dann laden Sie bitte die kostenlose Demos der Microsoft AZ-802 herunter und probieren! Um verschiedene Gewohnheiten der Prüfungsteilnehmer anzupassen, bieten wir insgesamt 3 Versionen von Microsoft AZ-802. Nach den Informationenen über die Ermäßigung u.a. können Sie auf unserer Webseite online erkundigen.
| Section | Objectives |
|---|---|
| Networking and storage infrastructure | - Storage management
|
| Disaster recovery and migration | - Backup and restore
|
| Monitoring and troubleshooting | - System monitoring
|
| Manage hybrid compute and virtualization | - Containers
|
| Secure Windows Server hybrid infrastructures | - Identity and access management
|
| Implement and manage high availability | - Load balancing and redundancy
|
>> AZ-802 Kostenlos Downloden <<
Die Forschungsmaterialien haben gezeigt, dass es schwierig ist, die Microsoft AZ-802 Zertifizierungsprüfung zu bestehen. Unser DeutschPrüfung hat erfahrungsreiche IT-Experten, die durch harte Arbeit die neuesten Schulungsunterlagen zur Microsoft AZ-802 Zertifizierungsprüfung bearbeitet haben. Unser DeutschPrüfung hat die besten Ressourcen, die Ihnen beim Bestehen der Microsoft AZ-802 Prüfung helfen. Sie enthalten sowohl Fragen, als auch Antworten. Sie brauchen sich nicht so viel Mühe dafür auszugeben und können trotzdem eine hohe Note in der Prüfung bekommen. Wählen Sie doch die Schulungsunterlagen zur Microsoft AZ-802 Zertifizierungsprüfung, die Ihnen sehr helfen können.
317. Frage
What should you implement for the deployment of DC3?
Antwort: C
Begründung:
DC3 is explicitly described as a domain controller named dc3.corp.fabrikam.com that will exist inside Vnet1, meaning it must be a genuine, writable domain controller for Fabrikam ' s existing corp.fabrikam.com AD DS forest, replicating with DC1 and DC2. The only way to run an actual domain controller for an existing on- premises forest inside Azure is to deploy a regular Azure virtual machine, place it on Vnet1, install the AD DS role on it, and promote it as an additional domain controller for corp.fabrikam.com. Microsoft Entra Domain Services is a fundamentally different, fully managed service: it creates its own separate, standalone managed domain and does not add a domain controller to, or replicate directly with, an existing on-premises forest, so it cannot be used to deploy " DC3 " as described. Microsoft Entra Application Proxy publishes on- premises web applications to external users and has nothing to do with domain controller placement. A Microsoft Entra administrative unit is a container used to scope administrative permissions over Microsoft Entra objects and is unrelated to deploying infrastructure. Therefore, an Azure virtual machine, promoted to a domain controller, is the correct implementation for DC3.
Topic 1, Case Study 2: Fabrikam, Inc.
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
Overview: Fabrikam, Inc. is a manufacturing company that has a main office in New York and a branch office in Seattle.
On-Premises Servers: The on-premises network contains the servers shown in the exhibit below. DC1 hosts all the operations master roles. WEB1 and WEB2 run an Internet Information Services (IIS) web app named Webapp1.
On-premises servers
On-Premises Network: The New York and Seattle offices are connected by using redundant WAN links. The client computers in each office get IP addresses from their local DHCP server. DHCP1 contains a scope named Scope1 that has addresses for the New York office. DHCP2 contains a scope named Scope2 that has addresses for the Seattle office.
Group Policy Objects (GPOs): The corp.fabrikam.com domain contains the organizational units (OUs) and custom Group Policy Objects (GPOs) shown in the exhibit below.
OUs and GPOs
Planned Changes: Fabrikam identifies the following planned changes:
- Create a single Azure subscription named Sub1 that will contain a single Azure virtual network named Vnet1.
- Replace the WAN links between the Seattle and New York offices by using Azure Virtual WAN and ExpressRoute. Both on-premises offices will be connected to Vnet1 by using ExpressRoute.
- Create three Azure file shares named newyorkfiles, seattlefiles, and companyfiles.
- Create a domain controller named dc3.corp.fabrikam.com in Vnet1.
- Deploy an Azure Virtual Desktop host pool to Vnet1. The Azure Virtual Desktop session hosts will be hybrid Microsoft Entra joined.
- License all servers for Microsoft Defender for Servers.
- Use Azure Policy to enforce configuration management policies on the servers in Azure and on-premises.
Security Requirements: Fabrikam identifies the following security requirements:
- Apply GPO4 to the Azure Virtual Desktop session hosts. Ensure that Azure Virtual Desktop user sessions lock after being idle for 10 minutes. Users must be able to control the lockout time manually from their client computer.
- Ensure that server administrators request approval before they can establish a Remote Desktop connection to an Azure virtual machine. If the request is approved, the connection must be established within two hours.
- Prevent user passwords from containing all or part of words that are based on the company name, such as Fab, fabrikam, or fabr1k.
- Ensure that all instances of Webapp1 use the same service account. The password of the service account must change automatically every 30 days.
- Prevent domain controllers from directly contacting hosts on the internet.
File Sharing Requirements: You need to configure the synchronization of Azure files to meet the following requirements:
- Ensure that seattlefiles syncs to FS2.
- Ensure that newyorkfiles syncs to FS1.
- Ensure that companyfiles syncs to both FS1 and FS2.
318. Frage
You have a failover cluster named Cluster1 that contains three nodes. You plan to add two file server cluster roles named File1 and File2 to Cluster1. File1 will use the File Server for general use role. File2 will use the Scale-Out File Server for application data role. What is the maximum number of nodes for File1 and File2 that can concurrently serve client connections? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Antwort:
Begründung:
Explanation:
File1: 1. File2: 3.
A File Server for general use cluster role runs in an active-passive configuration: only the single node that currently owns the role can service client connections at any given time, so File1 is limited to one active node at most, regardless of how many total nodes Cluster1 has. A Scale-Out File Server for application data role, by contrast, is purpose-built for continuous availability and allows every node in the cluster to simultaneously own and serve the same shares concurrently over SMB Transparent Failover, so File2 can use all three nodes in Cluster1 at once to serve client connections. This distinction is fundamental to selecting the correct file server role for a given workload: general-use file shares favor the simplicity of standard active-passive failover, while application workloads such as Hyper-V over SMB or SQL Server database files benefit from the scale-out role ' s concurrent, multi-node access pattern and higher aggregate throughput. Therefore, File1 tops out at 1 node while File2 can use all 3 nodes concurrently.
319. Frage
You have an Azure virtual machine named VM1 that runs Windows Server and has the following configuration: size D2s_v4; operating system disk 127-GiB standard SSD; data disk 128-GiB standard SSD; virtual machine generation Gen 2. You plan to perform the following changes to VM1: change the virtual machine size to D4s_v4; detach the data disk; add a new standard SSD. Which changes require downtime for VM1?
Antwort: A
Begründung:
Changing a running VM ' s size (SKU) generally requires Azure to move the VM to hardware that supports the target size and reallocate its compute resources, which means the VM must be stopped (deallocated) before the resize is applied and then started again on the new size; this makes a size change from D2s_v4 to D4s_v4 an operation that requires downtime. By contrast, data disks in Azure can be hot-added and hot- removed from a running VM: detaching an existing data disk and attaching a new managed disk are both online operations that Azure supports without stopping the VM, because they only change the VM ' s storage attachment configuration rather than its compute allocation. Because detaching the data disk and adding a new standard SSD can each be completed while VM1 keeps running, neither of those two actions requires downtime, which rules out every answer option that includes them. Only the virtual machine size change forces a stop/start cycle, so ' changing the virtual machine size only ' is the set of changes that requires downtime for VM1. This distinction - compute/SKU changes needing a restart versus storage attach/detach operations being available online - is a key operational planning point when scheduling maintenance windows for production VMs.
320. Frage
Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains the servers shown in the following table.
Server 1 hosts the DNS zone tor contoso.com. The General tab of the eontoso.com properties is configured as shown in the following exhibit.
Server3 hosts the DNS zone for east.contoso.com and is configured as shown in the following exhibit.
for each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Antwort:
Begründung:
Explanation:
A secondary DNS zone for contoso.com can be added to Server3: Yes. If you add a DNS record to contoso.
com, the record will replicate to Server2: Yes. If you add a DNS record to east.contoso.com, the record will replicate to Server1: Yes.
A secondary (non-Active-Directory-integrated) DNS zone is simply a read-only, zone-transfer-based copy, and any DNS server -- regardless of forest, domain, or replication-scope considerations for the zone it ' s copying -- can host one, provided zone transfers are permitted from a source server hosting the zone; there is nothing about Server3 hosting east.contoso.com that prevents it from also hosting a secondary copy of contoso.com. The contoso.com zone ' s Active Directory-integrated replication scope is set to " all DNS servers in this domain, " meaning its data replicates through the DomainDnsZones partition to every domain controller running DNS within the contoso.com domain specifically; Server2, being a DNS server within that same domain, receives this replication, so a new record added to contoso.com does reach it. The east.contoso.
com zone ' s replication scope, by contrast, is set to " all DNS servers in this forest, " meaning its data replicates through the forest-wide ForestDnsZones partition to every DNS server across the entire forest, in any domain -- including Server1, a DNS server in the forest root domain, contoso.com. Because east.contoso.
com ' s scope explicitly spans the whole forest rather than being confined to its own domain, a record added there does reach Server1, even though Server1 sits in a different domain than the zone itself.
321. Frage
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains servers that run Windows Server 2022.
You have a Storage Spaces Direct cluster named SSCIuster1 that contains two physical nodes named Node!
and Node2. Node! and Node2 host highly available virtual machines.
You plan to perform an in-place upgrade to Windows Server 2025 on Node1 You need to ensure that the virtual machines remain running during the upgrade.
Which four actions should you perform in sequence on Node1? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Antwort:
Begründung:
Explanation:
To keep the highly available virtual machines running while a single Storage Spaces Direct node undergoes an in-place operating system upgrade, the node must first be drained of its clustered roles and its storage placed into maintenance mode using Suspend-ClusterNode with the -Drain parameter together with the storage maintenance mode setting, which together live-migrate the running virtual machines off Node1 onto Node2 and stop Node1 from participating in storage I/O for the duration of the upgrade. Only once Node1 has been fully drained of its clustered workloads and isolated from storage traffic should the in-place upgrade to Windows Server 2025 actually be performed on that node, since attempting the OS upgrade while the node is still actively hosting VMs or participating in storage I/O would risk both workload disruption and storage inconsistency. After the operating system upgrade completes successfully, the node is taken back out of storage maintenance mode so it can resume participating in the Storage Spaces Direct pool ' s I/O operations, and finally Resume-ClusterNode is run to return Node1 to active participation in the cluster so it can once again host clustered roles and receive virtual machines back through live migration. This four-step sequence, drain and enter storage maintenance mode, upgrade, exit storage maintenance mode, resume, mirrors Microsoft ' s documented procedure for safely updating an individual node in a Storage Spaces Direct cluster without workload downtime.
322. Frage
......
Die Ausbildungsmaterialien zur Microsoft AZ-802 Zertifizierungsprüfung aus DeutschPrüfung enthalten Testfragen und Antworten. Diese Materialien sind von unserer Berufsgruppe aus erfahrenen IT-Experten untersucht und erforscht, deren Autorität zweifellos ist. Sie können auf unserer Webseite einige kostenlosen Testaufgaben und Antworten als Probe herunterladen. Nachdem Sie unsere Ausbildungsmaterialien zur Microsoft AZ-802 Zertifizierungsprüfung gekauft haben, werden wir Ihnen einjähriger Aktualisierung kostenlos anbieten.
AZ-802 Prüfungs: https://www.deutschpruefung.com/AZ-802-deutsch-pruefungsfragen.html