DumpsFree is working on providing most helpful the real test questions answer in certification exams many years especially for AZ-802. It provide 100% real test exam materials to help you clear exam surely. If you find some mistakes in other sites, you will know how the important the site have certain power. Choosing good Microsoft AZ-802 Exam Materials, we will be your only option.
| Section | Objectives |
|---|---|
| Topic 1: Compute, storage, and virtualization | - Storage and file services
|
| Topic 2: Secure and manage Windows Server environments | - Security and compliance
|
| Topic 3: Hybrid infrastructure management | - Monitoring and update management
|
| Topic 4: Networking and high availability | - High availability and disaster recovery
|
>> Vce Microsoft AZ-802 Free <<
Are you still worried about your coming AZ-802 exam and have no idea what to do? Are you too busy to study with all the books and other broad exam materials which will take you a long time to prapare for your exam? You can just choose to buy our AZ-802 Exam Questions which have settle all these problems for you. And our pass rate of the AZ-802 study materials is high as 98% to 100%. Hence they are your real ally for establishing your career pathway and get your potential attested.
NEW QUESTION # 146
You have a Windows server named Server1. You add two 4-TB hard drives named Disk1 and Disk2 to Server1. You need to format the drives. The solution must meet the following requirements: * Disk1 must support disk level quotas. * Disk2 must support Data Deduplication. Which type of file system should you use for each drive? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Disk1: NTFS only. Disk2: NTFS only.
Disk-level (NTFS) quotas are an NTFS-specific feature with no ReFS or exFAT equivalent, so a volume that must support disk quotas has to be formatted NTFS -- there is no alternative file system choice for Disk1.
Data Deduplication has historically been an NTFS-only feature, and while Microsoft did extend Data Deduplication support to ReFS starting with Windows Server 2019, that ReFS Dedup capability is specifically documented and supported in the context of Storage Spaces Direct clustered volumes (mirror or parity resiliency) -- it is not a general capability available on an arbitrary standalone server ' s locally attached disk the way it is described here (a plain server with two newly added hard drives, no clustering or Storage Spaces Direct mentioned). For a standalone server like Server1 formatting a local data disk for Data Deduplication, NTFS remains the applicable and supported choice; ReFS Dedup would only become relevant if these disks were part of a Storage Spaces Direct deployment. exFAT supports neither quotas nor Data Deduplication, and plain ReFS without the Storage Spaces Direct context does not support Data Deduplication either. Therefore, both Disk1 and Disk2 should be formatted NTFS to meet their respective requirements in this standalone-server scenario.
NEW QUESTION # 147
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a server named Server1 that runs Windows Server. You need to ensure that only specific applications can modify the data in protected folders on Server1. Solution: From App & browser control, you configure Reputation-based protection. Does this meet the goal?
Answer: A
Explanation:
Reputation-based protection, found under App & browser control in Windows Security, governs Microsoft Defender SmartScreen ' s checks of applications, files, and websites based on their reputation before they are permitted to run or be downloaded. It is designed to block or warn about untrusted or malicious code and content, not to restrict which already-installed, already-trusted applications are permitted to modify files inside specific designated folders. Limiting write access to protected folders so that only explicitly approved applications can modify their contents is the specific job of Controlled folder access, which is configured under Virus & threat protection, Ransomware protection, and lets an administrator add trusted applications to an allowed list while blocking every other process from writing to the protected folders. Because Reputation- based protection addresses a fundamentally different threat model, evaluating whether software should be allowed to execute at all rather than whether an already-running application can write to a specific folder, configuring it does not achieve the goal of restricting folder modification to specific applications, so this solution does not meet the goal.
NEW QUESTION # 148
You have an Azure subscription. Your on-premises network connects to Azure by using an Azure VPN gateway named VPN1. You need to monitor the Azure gateway health probe for VPN1. Which TCP port should you use?
Answer: E
Explanation:
Azure virtual network gateways expose an internal health probe on TCP port 8081 that Azure infrastructure uses to verify that the gateway instance is healthy; this port is documented as part of gateway troubleshooting and must not be blocked for the gateway to be monitored and managed correctly. Ports such as 443, 1723, and
3389 are associated with HTTPS, PPTP VPN, and RDP respectively, and 65500 falls outside the actual health- probe port used by the gateway manager, so none of those apply to monitoring the VPN gateway ' s own health probe. If a network security group, on-premises firewall, or custom routing rule blocks port 8081 to the gateway subnet, Azure ' s platform health checks fail even though the VPN tunnel itself may still be passing traffic, which is why this specific port must be excluded from any traffic filtering applied to the GatewaySubnet. Microsoft ' s troubleshooting guidance for Site-to-Site VPN connectivity issues explicitly calls out verifying that port 8081 is reachable to the gateway ' s private IP addresses as an early diagnostic step, since a blocked health probe can itself trigger gateway failover behavior unrelated to the underlying tunnel configuration.
NEW QUESTION # 149
You need to ensure that VM3 meets the technical requirement. What should you install first?
Answer: C
Explanation:
The requirement is that VMs must be configured to enable per-folder quotas. VM3 already has the File and Storage Services role installed, but native NTFS quotas only apply per volume and per user; they cannot restrict the amount of data stored inside an individual folder. File Server Resource Manager (FSRM) is the Windows Server feature that adds true folder-level quota management, letting an administrator define hard or soft quota limits (and quota templates) scoped to specific folders rather than entire volumes, which is exactly the granularity the requirement calls for. Enhanced Storage is an unrelated feature that supports certain storage devices with enhanced storage access (IEEE 1667), Windows Standards-Based Storage Management provides SMI-S/WMI-based management of storage arrays and has nothing to do with folder-level quotas, and the iSNS Server service is used for discovery of iSCSI targets and initiators on a network, also unrelated to quota enforcement. None of those three alternatives provide any per-folder capacity restriction capability, so installing FSRM is the necessary first step before per-folder quotas can be configured on VM3.
Topic 4, Case Study 4: Fabrikam, Inc.
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
Overview: Fabrikam, Inc. is a manufacturing company that has a main office in Chicago and a branch office in Paris.
Existing Environment -- Identity Infrastructure: Fabrikam has an Active Directory Domain Services (AD DS) forest that syncs with a Microsoft Entra ID tenant. The AD DS forest contains two domains named corp.
fabrikam.com and europe.fabrikam.com.
Chicago Office On-Premises Servers: The office in Chicago contains on-premises servers that run Windows Server 2016 as shown in the following table.
Chicago office on-premises servers
All the servers in the Chicago office are in the corp.fabrikam.com domain.
All the virtual machines in the Chicago office are hosted on HV1 and HV2. HV1 and HV2 are nodes in a failover cluster named Cluster1.
WEB1 and WEB2 run an Internet Information Services (IIS) website. Internet users connect to the website by using a URL of https://www.fabrikam.com.
All the users in the Chicago office run an application that connects to a UNC path of \\Fileserver1\Data.
Paris On-Premises Servers: The office in Paris contains a physical server named dc2.europe.fabrikam.com that runs Windows Server 2016 and is a domain controller for the europe.fabrikam.com domain.
Network Infrastructure: The networks in both the Chicago and Paris offices have local internet connections.
The Chicago and Paris offices are connected by using VPN connections. The client computers in the Chicago office get IP addresses from DHCP1.
Security Risks: Fabrikam identifies the following security risks:
-- Some accounts connect to AD DS resources by using insecure protocols such as NTLMv1, SMB1, and unsigned LDAP.
-- Servers have Windows Defender Firewall enabled. Server administrators sometimes modify firewall rules and allow risky connections.
Requirements -- Security Requirements: Fabrikam identifies the following security requirements:
-- Prevent server administrators from configuring Windows Defender Firewall rules.
-- Encrypt all the data disks on the servers by using BitLocker Drive Encryption (BitLocker).
-- Ensure that only authorized applications can be installed or run on the servers in the forest.
-- Implement Microsoft Sentinel as a reporting solution to identify all connections to the domain controllers that use insecure protocols.
On-Premises Migration Plan: Fabrikam plans to migrate all the existing servers and identifies the following migration requirements:
-- Move the APP1 and APP2 virtual machines in the Chicago office to a new Hyper-V failover cluster named Cluster2 that will run Windows Server 2022. Cluster2 will contain two new nodes named HV3 and HV4. All virtual machine files will be stored on a Cluster Shared Volume (CSV).
-- Migrate Archive1 to a new failover cluster named Cluster3 that will run Windows Server 2022. Cluster3 will contain two physical nodes named Node1 and Node2. The file shares on Cluster3 will be a failover cluster role in active-passive mode.
-- Migrate all users, groups, and client computers from europe.fabrikam.com to corp.fabrikam.com. User accounts will retain their existing password.
-- Migrate the data share from Fileserver1 to a new server named Fileserver2 that will run Windows Server
2022. After the migration, the data share must be accessible by using the existing UNC path.
Azure Migration Plan: Fabrikam plans to migrate some resources to Azure and identifies the following migration requirements:
-- Create an Azure subscription named Sub1 and an Azure virtual network named Vnet1. Use ExpressRoute to connect the Paris and Chicago offices to Vnet1.
-- License all servers for Microsoft Defender for Servers.
-- Migrate APP3 and APP4 to Azure.
-- Migrate the www.fabrikam.com website to an Azure App Service web app named WebApp1, then decommission WEB1 and WEB2.
DHCP Migration Plan: Fabrikam plans to replace DHCP1 with a new server named DHCP2 and identifies the following migration requirements:
-- Ensure that DHCP2 provides the same IP addresses that are currently available from DHCP1.
-- Prevent DHCP1 from servicing clients once services are enabled on DHCP2.
-- Ensure that the existing leases and reservations are migrated.
NEW QUESTION # 150
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains two servers named Server1 and Server2. Server1 contains a disk named Disk2. Disk2 contains a folder named UserData. UserData is shared to the Domain Users group. Disk2 is configured for deduplication. Server1 is protected by using Azure Backup. Server1 fails. You connect Disk2 to Server2. You need to ensure that you can access all the files on Disk2 as quickly as possible. What should you do?
Answer: C
Explanation:
When a volume has Data Deduplication enabled, the files it contains are not stored as ordinary contiguous data; unique data chunks are stored once in a chunk store and files are represented as reparse points that reference those chunks, with a filter driver reconstructing the original file content on the fly whenever it is opened. That reconstruction only works on a server where the Data Deduplication feature (and its filter driver) is installed; without it, the operating system cannot correctly interpret the deduplicated reparse points, and files can appear zero-byte, corrupted, or simply inaccessible even though the underlying chunk data is intact on the disk. Because Disk2 was deduplicated on Server1 and has now been physically connected to Server2, the fastest path to full, correct access to every file on Disk2 is to install the Data Deduplication server role
/feature on Server2, after which Windows recognizes and properly serves the deduplicated volume exactly as it did on Server1 - no data movement or restore is required, since the data itself already arrived with the disk. Creating a storage pool is unrelated to reading an existing, already-provisioned basic or dynamic disk ' s deduplicated content. Restoring files from Azure Backup would work eventually but is far slower than simply reading the disk that is already physically attached and intact. Installing the File Server Resource Manager role manages quotas and file classification and has no bearing on the ability to read deduplicated data.
NEW QUESTION # 151
......
As we all know, it is difficult for you to prepare a AZ-802 exam by yourself. You will feel confused about some difficult knowledge. Now, you are fortunate enough to purchase our AZ-802 study questions. Our study materials are compiled by professional experts. They have researched the annual Real AZ-802 Exam for many years. So once you buy our study materials, you will save a lot of troubles.
AZ-802 Valid Test Topics: https://www.dumpsfree.com/AZ-802-valid-exam.html