Our Microsoft AZ-802 exam questions are designed to provide you with the most realistic AZ-802 experience possible. Each question is accompanied by an accurate answer, prepared by our team of experts. We also offer free Microsoft AZ-802 Exam Questions updates for 1 year after purchase, as well as a free AZ-802 practice exam questions demo before purchase.
| Section | Objectives |
|---|---|
| Topic 1: Disaster recovery and migration | - Backup and restore
|
| Topic 2: Networking and storage infrastructure | - Storage management
|
| Topic 3: Monitoring and troubleshooting | - System monitoring
|
| Topic 4: Implement and manage high availability | - Failover clustering
|
| Topic 5: Secure Windows Server hybrid infrastructures | - Identity and access management
|
| Topic 6: Manage hybrid compute and virtualization | - Virtual machines
|
The TestPassKing experts regularly add these changes in the TestPassKing AZ-802 exam dumps questions so that you do not miss a single AZ-802 exam update. With the purchasing of TestPassKing AZ-802 exam practice questions you get an opportunity to get free TestPassKing AZ-802 Exam Dumps questions updates for up to 1 year from the date of TestPassKing AZ-802 exam questions purchase.
NEW QUESTION # 311
You have an Azure subscription. The subscription contains 40 virtual machines that run Windows Server and are in a resource group named RG1. The virtual machines restart every Sunday from 2:00 AM to 4:00 AM during maintenance. The restarts trigger metric alert rules that send email and SMS notifications. You need to prevent notifications during the maintenance window without changing the alert rule conditions. The solution must apply to all the alerts from RG1 and allow notifications outside the maintenance window. What should you configure?
Answer: A
Explanation:
An alert processing rule is the Azure Monitor feature purpose-built to suppress notifications for a defined time window without touching the underlying alert rules that detect the condition: it can be scoped to a resource group such as RG1 so it automatically covers every alert fired by any resource within it, including alerts added later, and it can be configured with a recurring schedule, such as every Sunday from 2:00 AM to 4:00 AM, so notifications are suppressed only during that window and resume automatically outside it, exactly matching both stated requirements. Creating a new metric alert rule does nothing to stop the existing rules from firing and notifying, since the restarts still trigger the original conditions; it would only add another rule alongside the ones already causing noise. A dynamic threshold changes how a metric alert rule calculates its own trigger condition based on historical patterns, which is itself a change to the alert rule ' s condition, something the requirement explicitly disallows, and dynamic thresholds are not guaranteed to adapt in one week to a new, recurring maintenance pattern. A service health alert rule monitors Azure platform incidents and planned maintenance to Azure services themselves, not the customer ' s own virtual machine restarts, and would not intercept or suppress the metric alert notifications already configured for RG1 ' s VMs. An alert processing rule is therefore the only option that satisfies both the scope and the non-destructive, schedule- based suppression requirements.
NEW QUESTION # 312
Your network contains an Active Directory Domain Services (AD DS) domain. All domain members have Microsoft Defender Credential Guard with UEFI lock configured in the domain. You deploy a server named Server1 that runs Windows Server. You disable Credential Guard on Server1. You need to ensure that Server1 is MOST subject to Credential Guard restrictions. What should you do next?
Answer: C
Explanation:
Because a domain-wide Group Policy Object already enforces Credential Guard with UEFI lock across all domain members, that policy setting is authoritative and will simply reapply the enabled, UEFI-locked Credential Guard configuration to Server1 the moment Group Policy next refreshes, entirely regardless of whatever one-time local change was just made to disable it. For the currently disabled state on Server1 to actually persist rather than being silently overwritten at the next policy refresh, the governing Group Policy Object itself has to be updated so that its Turn On Virtualization Based Security setting is no longer configured to enforce Credential Guard for the organizational unit or scope that Server1 falls under; only changing the policy that controls this setting stops Group Policy from re-asserting Credential Guard on Server1. Running the Device Guard and Credential Guard hardware readiness tool only assesses hardware compatibility and makes no configuration changes at all, and running dism with the /Disable-Feature and
/FeatureName:IsolatedUserMode parameters only changes local machine state, which, exactly like the earlier local disable action, would simply be reverted the next time the domain-wide Group Policy setting reapplies to Server1.
NEW QUESTION # 313
You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server.
The network interface for VM1 is disabled in the operating system.
You need to enable the network interface by using the Azure Serial Console.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Once connected to the VM through Azure Serial Console, the documented recovery command for a disabled network interface is netsh, using the interface context and the set interface subcommand together with admin=enabled to re-enable the named adapter. This is exactly the command Microsoft ' s troubleshooting guide for a disabled NIC on a Windows VM specifies, typically run first as netsh interface show interface to confirm the exact adapter name (such as " Ethernet " ) before targeting it in the enable command, since supplying the wrong interface name would silently fail to fix the actual disabled adapter. The other tools offered, WinMgmt.exe and wmic.exe, are WMI-related utilities that do not expose a documented, direct command for toggling a network adapter ' s administrative state in this way, and ipconfig.exe only displays or renews IP configuration rather than enabling a disabled interface, so none of them are the correct substitute for netsh in this recovery scenario. No VM restart is required afterward, and RDP connectivity is restored as soon as the adapter reports as connected again, letting normal remote management resume without any further Serial Console intervention.
NEW QUESTION # 314
You have an Azure virtual machine named VM1 that runs Windows Server. You need to perform the following tasks on VM1:
* Configure Windows Defender Firewall to allow Remote Desktop connections.
* Configure where to store the logs of the virtual machine console.
Which two settings should you use? To answer, select the settings in the answer area. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
On an Azure VM, Remote Desktop connectivity problems caused by a Windows Defender Firewall rule that no longer allows inbound RDP traffic are repaired from the VM ' s Help > Reset password blade. Selecting Reset configuration only runs the VM Access Agent extension, which re-enables the Remote Desktop service and creates (or restores) the Windows Defender Firewall rule permitting inbound connections on TCP port
3389, without requiring an existing RDP session or direct console access to the VM. The Serial console blade, by contrast, only provides out-of-band access to the Windows Special Administration Console (SAC) over the hypervisor channel; it does not itself modify any firewall rule, and while an administrator could type netsh commands there manually, Serial console is not the setting that configures the firewall. The location where the serial console ' s text output and the VM ' s boot screenshots are persisted to a storage account is configured separately, on the Boot diagnostics blade, not on the general Diagnostic settings blade, which instead routes platform metrics and Activity Log entries to destinations such as Log Analytics or Event Hubs and plays no role in storing VM console output. Boot diagnostics must be enabled with a linked storage account before the Serial console feature becomes usable, since both the console output stream and the periodic boot screenshots are written through that same storage configuration.
NEW QUESTION # 315
You have 100 Azure virtual machines that run Windows Server. The virtual machines are onboarded to Microsoft Defender for Cloud. You need to shut down a virtual machine automatically if Microsoft Defender for Cloud generates the " Antimalware disabled in the virtual machine " alert for the virtual machine. What should you use in Microsoft Defender for Cloud?
Answer: D
Explanation:
Microsoft Defender for Cloud ' s Workflow automation feature lets an administrator configure a trigger based on a specific security alert -- such as " Antimalware disabled in the virtual machine " -- a recommendation, or a regulatory compliance change, that automatically invokes an Azure Logic App when that trigger condition occurs. The Logic App can then execute whatever remediation steps are defined in its workflow, including calling the Azure Resource Manager / Compute API to shut the affected virtual machine down, providing fully automated, alert-driven response without requiring manual intervention from an administrator. A workbook only visualizes and reports on data and cannot take remediation action. A security policy defines which security recommendations and standards apply to a scope of resources but does not execute response actions when an alert fires. Adaptive network hardening only generates recommendations to tighten network security group rules and has no relationship to antimalware alerts or virtual machine shutdown actions.
Therefore, configuring workflow automation to trigger a logic app is the correct approach.
NEW QUESTION # 316
......
After you used TestPassKing Microsoft AZ-802 Dumps, you still fail in AZ-802 test and then you will get FULL REFUND. This is TestPassKing's commitment to all candidates. What's more, the excellent dumps can stand the test rather than just talk about it. TestPassKing test dumps can completely stand the test of time. TestPassKing present accomplishment results from practice of all candidates. Because it is right and reliable, after a long time, TestPassKing exam dumps are becoming increasingly popular.
Latest AZ-802 Exam Discount: https://www.testpassking.com/AZ-802-exam-testking-pass.html