この機会を歓迎したいとお約束します。学習ツールとしてAZ-802テスト問題を選択すると、試験のために勉強して自己規律を養うことができます。AZ-802最新の質問は多様な教育方法を採用します。 AZ-802学習問題集で学習します。 AZ-802試験の質問はAZ-802試験に合格するのに役立ち、AZ-802練習エンジンを気に入っていただけることを願っています。
| Section | Objectives |
|---|---|
| Monitoring and troubleshooting | - System monitoring
|
| Manage hybrid compute and virtualization | - Containers
|
| Disaster recovery and migration | - Backup and restore
|
| Secure Windows Server hybrid infrastructures | - Security configuration
|
| Networking and storage infrastructure | - Networking
|
| Implement and manage high availability | - Load balancing and redundancy
|
AZ-802トレーニング資料を用意しました。 これらは、保証対象の専門的な練習資料です。 参考のために許容できる価格に加えて、3つのバージョンのすべての資料は、10年以上にわたってこの分野の専門家によって編集されています。 さらに、一連の利点があります。 したがって、AZ-802の実際のテストの重要性は言うまでもありません。 今すぐご注文いただいた場合、1年間無料の更新をお送りします。 これらのサプリメントはすべて、AZ-802模擬試験にも役立ちます。
質問 # 46
You have an Active Directory Domain Services (AD DS) domain that contains 1,000 users.
The domain has the following password requirements:
The minimum password length must be 12 characters.
Passwords must expire in 90 days.
Passwords must be complex.
You need to ensure that members of a security team have passwords that meet the following requirements:
The minimum password length must be 16 characters.
Passwords must expire in 60 days.
Passwords must be complex.
The solution must minimize the impact on users who are NOT members of the security team.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer Area:
正解：
解説：
Explanation:
Implement: Fine-grained password policies
By using: Active Directory Administrative Center
Fine-grained password policies enable administrators to apply different password and account lockout requirements to selected users or global security groups within an Active Directory domain.
The security team requires stricter password settings than the existing domain policy. Administrators can create a Password Settings Object (PSO) specifying a minimum password length of 16 characters, maximum password age of 60 days, and password complexity enforcement.
Using Active Directory Administrative Center, create the PSO in the Password Settings Container and assign it to a global security group containing the security team members.
Other domain users continue receiving their existing password requirements of 12 characters and 90-day expiration.
Group Policy password settings linked to organizational units cannot provide equivalent fine-grained domain account policies.
Therefore, fine-grained password policies configured through Active Directory Administrative Center satisfy the requirements.
質問 # 47
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table. Server1 contains the printers shown in the following table. You plan to use Print Management to migrate the printers to Server2. Which printers can be migrated and retain their current configuration? (Exhibits: servers table and printers table.)
Servers
Printers on Server1
正解：A
解説：
The Print Management migration wizard, built on printbrm.exe, documents that local bus printers, meaning printers connected through ports such as LPT or a locally attached USB-style port, are shown and processed during the backup step of the migration but are not successfully migrated to a working configuration on the destination server, because the physical port itself does not exist or map meaningfully on Server2. Printer1, connected through LPT1, and Printer2, connected through the similarly local, non-network Port1, both fall into this unsupported local-bus category and cannot be relied on to retain a working configuration after the move to Server2. Printer3, connected through a standard TCP/IP port pointing at a specific network address, is a fully network-addressable print queue whose port definition is meaningful on any print server, including Server2, so it migrates cleanly with its driver, queue settings, and configuration intact. Printer4, which uses the built-in FILE: port to print to a file rather than to physical hardware, is a virtual, hardware-independent port that is present identically on every Windows print server, so it too migrates without issue. Because printer drivers, queue settings, and port/configuration details only transfer meaningfully for ports that exist and behave identically on the target server, only Printer3 and Printer4 retain their current configuration after migrating to Server2.
質問 # 48
Your network contains a Microsoft Entra Domain Services domain named sk230128outlook.onmicrosoft.
com. The domain contains a server named Server1 that runs Windows Server. You have the users shown in the following table: User1 (Domain user in the AADDC Users organizational unit (OU)), User2 (Local user on Server1), User3 (Domain user in an organizational unit (OU) named OU1). The domain contains the Group Policy Objects (GPOs) shown in the following exhibit: Default Domain Policy (linked at the domain root); AADDC Computers GPO (linked to the AADDC Computers OU, which contains Server1 ' s computer object); AADDC Users GPO (linked to the AADDC Users OU); GPO1 (linked to OU1). The minimum password length for each GPO is configured per a reference table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
User account/OU table
Group Policy Management tree
正解：
解説：
Explanation:
If User1 changes their password, the new password must have at least 10 characters: No. If User2 changes their password, the new password must have at least seven characters: Yes. If User3 changes their password, the new password must have at least 13 characters: No.
Account policy settings (password policy, account lockout policy, and Kerberos policy) for domain user accounts are always sourced exclusively from the GPO linked at the domain root (here, Default Domain Policy) -- a fundamental AD DS rule that holds true even in a Microsoft Entra Domain Services managed domain. A GPO linked to an OU that contains user objects, such as the AADDC Users GPO (linked to the AADDC Users OU) or GPO1 (linked to OU1), never overrides or supplements the domain account policy for domain user accounts, no matter what minimum password length that OU-linked GPO itself specifies; OU- linked Account Policy settings instead affect only the local Security Accounts Manager (SAM) policy of computer objects that live in that OU, governing local (non-domain) accounts on those machines. User1 and User3 are both domain user accounts (in the AADDC Users OU and OU1, respectively), so both are governed solely by whatever minimum password length Default Domain Policy specifies -- not by the AADDC Users GPO or GPO1 ' s own settings -- meaning statements checking against those OU-linked GPOs ' specific thresholds (10 and 13 characters) are false. User2, however, is a local account on Server1, and Server1 ' s computer object resides in the AADDC Computers OU, so the AADDC Computers GPO ' s account policy setting does legitimately govern User2 ' s local password requirement, matching the seven-character threshold in that statement.
質問 # 49
You have a Storage Spaces Direct cluster named Cluster1 that contains multiple nodes.
You have a firmware update for the hard disks attached to each node.
You create a configuration file named FileLxm1 for the update.
You need to automate the rollout of the firmware update to the nodes of Cluster1. The solution must minimize downtime of the workloads hosted in Cluster1.
How should you complete the PowerShell commands? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Exhibit
正解：
解説：
Explanation:
Automating a Storage Spaces Direct firmware or driver rollout is done by pointing the clustered storage subsystem at a components manifest file that describes the supported firmware/driver versions, then letting Storage Spaces Direct orchestrate the update across nodes with the workload kept online. Get- StorageSubSystem retrieves the clustered storage subsystem object for Cluster1, and piping it to Set- StorageSetting with the System.Storage.SupportedComponents.Document parameter registers File1.xml as that manifest, which is the documented mechanism for automating a rolling, low-downtime firmware update.
The other cmdlets shown (Get-StorageFirmwareInformation, Get-StorageEnclosureVendorData, Set- StorageProvider, Set-StorageHealthSetting) either only report information or configure unrelated settings and would not register the manifest or trigger the orchestrated rollout that keeps virtual machines and other workloads running while each node ' s disks are updated in turn. Once the manifest is registered, Storage Spaces Direct automatically sequences the firmware update node by node, draining and updating one node ' s drives at a time so cluster resources continue to run on the remaining nodes throughout the rollout.
質問 # 50
Your network contains an Active Directory Domain Services (AD DS) domain. All domain members have Microsoft Defender Credential Guard with UEFI lock configured in the domain. You deploy a server named Server1 that runs Windows Server. You disable Credential Guard on Server1. You need to ensure that Server1 is MOST subject to Credential Guard restrictions. What should you do next?
正解：C
解説：
Because a domain-wide Group Policy Object already enforces Credential Guard with UEFI lock across all domain members, that policy setting is authoritative and will simply reapply the enabled, UEFI-locked Credential Guard configuration to Server1 the moment Group Policy next refreshes, entirely regardless of whatever one-time local change was just made to disable it. For the currently disabled state on Server1 to actually persist rather than being silently overwritten at the next policy refresh, the governing Group Policy Object itself has to be updated so that its Turn On Virtualization Based Security setting is no longer configured to enforce Credential Guard for the organizational unit or scope that Server1 falls under; only changing the policy that controls this setting stops Group Policy from re-asserting Credential Guard on Server1. Running the Device Guard and Credential Guard hardware readiness tool only assesses hardware compatibility and makes no configuration changes at all, and running dism with the /Disable-Feature and
/FeatureName:IsolatedUserMode parameters only changes local machine state, which, exactly like the earlier local disable action, would simply be reverted the next time the domain-wide Group Policy setting reapplies to Server1.
質問 # 51
......
It-PassportsはMicrosoftのAZ-802試験の最新の問題集を提供するの専門的なサイトです。MicrosoftのAZ-802問題集はAZ-802に関する問題をほとんど含まれます。私たちのMicrosoftのAZ-802問題集を使うのは君のベストな選択です。It-Passportsは君の試験を最も早い時間で合格できる。学習教材がどんな問題があっても、あるいは君の試験を失敗したら、私たちは全額返金するのを保証いたします。
AZ-802勉強方法: https://www.it-passports.com/AZ-802.html