It is not hard to find that there are many different kinds of products in the education market now. It may be difficult for users to determine the best way to fit in the complex choices. We can tell you with confidence that the AZ-802 practice materials are superior in all respects to similar products. First, users can have a free trial of AZ-802 test prep, to help users better understand the AZ-802 Study Guide. If the user discovers that the product is not appropriate for him, the user can choose another type of learning material. Respect the user's choice, will not impose the user must purchase the AZ-802 practice materials. We can meet all the requirements of the user as much as possible, to help users better pass the qualifying exams.
| Section | Weight | Objectives |
|---|---|---|
| Manage virtual machines and containers | 15% | - Deploy and manage Hyper-V virtual machines - Configure Azure Arc-enabled servers and VMs - Deploy and manage containers and Kubernetes on Windows Server |
| Implement high availability and disaster recovery | 5% | - Implement backup and recovery solutions - Use Azure Site Recovery for hybrid workloads - Monitor and troubleshoot Windows Server environments - Perform server and workload migrations - Configure failover clustering |
| Manage Windows Servers and workloads in a hybrid environment | 20% | - Manage updates and patches across hybrid servers - Configure remote management and secure administration - Implement hybrid identity solutions - Deploy servers using Windows Admin Center and Azure Arc |
| Implement and manage an on-premises and hybrid networking infrastructure | 15% | - Configure IP addressing, DNS, and DHCP - Implement hybrid network connectivity - Secure network traffic in hybrid environments - Configure software-defined networking |
| Secure Windows Server on-premises and hybrid infrastructures | 10% | - Manage access control and permissions - Configure Windows Defender and audit policies - Implement security baselines and hardening |
| Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments | 20% | - Install and configure domain controllers - Implement and manage Group Policy Objects - Manage FSMO roles and replication - Integrate AD DS with Azure AD and Azure Arc |
| Manage storage and file services | 15% | - Configure file servers and shares - Configure data deduplication and replication - Implement Storage Spaces and Storage Spaces Direct - Integrate on-premises storage with Azure Storage |
all of our Microsoft AZ-802 exam questions follow the latest exam pattern. We have included only relevant and to-the-point Microsoft AZ-802 exam questions for the Administering Windows Server exam preparation. You do not need to waste time preparing for the exam with extra or irrelevant outdated Microsoft AZ-802 exam questions. Employers in multinational companies do not want people who have passed the AZ-802 Exam but do not understand the Microsoft AZ-802 exam topics in depth. Our Microsoft Certified Professionals make sure that AZ-802 exam questions cover all core exam topics, allowing you to better understand the important exam topics.
NEW QUESTION # 480
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named DHCP1 that runs Windows Server and has the DHCP Server role installed. DHCP1 has a static IPv4 address of 10.10.10.5/24. DHCP1 is authorized in AD DS and contains an active scope for a subnet of
10.10.20.0/24. Client computers on the 10.10.20.0/24 subnet receive APIPA addresses. You verify that the DHCP Server service is running, and the scope has available IP addresses. You need to ensure that the computers on 10.10.20.0/24 can obtain IPv4 address leases from DHCP1. What should you do?
Answer: D
Explanation:
Client computers falling back to APIPA (169.254.x.x) addresses means their DHCPDISCOVER broadcasts are never reaching DHCP1 at all, which is expected here because DHCP1 ' s own network interface sits on the
10.10.10.0/24 subnet while the scope it is meant to service, 10.10.20.0/24, is a different subnet; DHCP discovery broadcasts do not cross router/subnet boundaries by default, and there is no indication that a DHCP relay agent (or an RFC 1542-compliant router configured to forward BOOTP/DHCP broadcasts) exists to carry those broadcasts from the 10.10.20.0/24 subnet across to DHCP1. Configuring a DHCP relay agent, typically on a router interface or a member server physically present on the 10.10.20.0/24 subnet and pointed at DHCP1 ' s IP address, converts the client broadcasts into unicast packets addressed directly to DHCP1, letting the existing, already-active, already-available scope actually receive and answer the requests, which is the only change needed since the scope, authorization, and service status are all already confirmed correct.
Running Add-DhcpServerInDC would attempt to (re-)register a server as authorized in AD DS, which is already true and unrelated to this symptom. Creating an exclusion range would shrink the address pool, not fix broadcast delivery, and adding a DHCP server security group has no effect on whether client broadcasts can reach the server across a subnet boundary.
NEW QUESTION # 481
You have the resources shown in the following table. Your on-premises network is connected to VNet1 by using a Site-to-Site VPN. The network traffic sent from Server1 fails to reach VM1. You need to review the contents of the network traffic sent from Server1 to VM1. What should you do first? (Exhibit: resources table.)
Resources
Answer: C
Explanation:
Reviewing the actual contents of packets exchanged between two endpoints, rather than just connection metadata like source and destination addresses or allow/deny outcomes, calls for a packet-capture capability positioned at the point where the traffic actually originates, which in this scenario is the on-premises server, Server1, rather than anywhere inside Azure. NSG flow logs on NSG1 only record 5-tuple flow information and allow or deny decisions for traffic crossing that network security group in Azure, and enabling Windows Firewall logging directly on Server1 similarly records connection attempts and firewall decisions rather than the actual packet contents, so neither option satisfies the stated requirement to inspect what is inside the traffic. Server2 already has Windows Admin Center installed and can manage Server1 remotely without needing a separate WAC installation on Server1 itself, and Windows Admin Center ' s Packet Monitoring extension, built on the built-in pktmon utility, can capture traffic leaving Server1 toward VM1 and, once exported, fully decode it for inspection. Azure Network Watcher ' s packet capture feature, by comparison, is implemented as an extension that runs on an Azure virtual machine and cannot be pointed at an on-premises server like Server1 at all, making it unusable for capturing traffic at its actual on-premises source in this scenario.
NEW QUESTION # 482
You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with a Microsoft Entra tenant. You deploy an app that adds custom attributes to the domain. From Azure Cloud Shell, you discover that you cannot query the custom attributes of users. You need to ensure that the custom attributes are available in Microsoft Entra ID. Which task should you perform from Microsoft Entra Connect first?
Answer: D
Explanation:
When an application extends the on-premises AD DS schema by adding new custom attributes after Microsoft Entra Connect has already been installed and configured, the sync engine ' s local, cached copy of the AD schema (used to populate the attribute-selection lists for sync rules and attribute mappings) does not automatically become aware of the newly added attributes. Microsoft Entra Connect provides a " Refresh directory schema " task, run from the Microsoft Entra Connect wizard, specifically to re-read the current AD DS schema and update the sync engine ' s local metadata so that the newly introduced custom attributes become visible and selectable for synchronization rules and attribute-flow configuration. Only after this refresh has completed can an administrator configure a rule (via directory extension attribute sync, or a custom sync rule) that actually flows the new attributes to Microsoft Entra ID, at which point they would finally be queryable from Azure Cloud Shell (for example, via Microsoft Graph). " Configure device options " pertains to device registration/writeback settings, not attribute sync. " Customize synchronization options " is used to reconfigure existing sync features (such as enabling or changing which optional features are active) and, without a preceding schema refresh, still would not expose attributes the sync engine ' s cached schema doesn ' t yet know about. " Manage federation " configures AD FS/federation trust settings and is unrelated to attribute synchronization. Therefore, the first task to perform is to refresh the directory schema.
NEW QUESTION # 483
Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.
com. You have an Azure virtual network named VNet1 that is connected to the on-premises network by using a Site-to-Site (S2S) VPN. VNet1 contains a domain-joined virtual machine named VM1 that hosts an application named App1. App1 uses Kerberos authentication and updates objects in AD DS. An Azure Firewall filters communication from VM1 to the domain controllers in contoso.com. You need to deploy domain controllers to VNet1. The solution must support the requirements of VM1 and provide domain controller redundancy in Azure. What should you deploy?
Answer: A
Explanation:
App1 ' s requirement to update objects in AD DS as part of its Kerberos-authenticated operation rules out any deployment built solely on read-only domain controllers (RODCs), because an RODC holds a read-only copy of the AD DS database and cannot accept or process write operations, such as the object updates App1 performs or password changes tied to Kerberos ticket processing; only a writable domain controller can service those requests, immediately eliminating both RODC-based options regardless of how they are made redundant. Between the two writable-DC options, deploying the two writable domain controller virtual machines across availability zones provides genuine redundancy within the same Azure region and VNet, keeping both DCs on the same low-latency virtual network VM1 already reaches through the Azure Firewall, so a zone failure still leaves a writable, reachable DC online for App1; placing the two writable DCs in physically distinct Azure regions instead would require extending VNet1 ' s connectivity (and the Azure Firewall ' s filtering) across regions and introduces materially higher replication latency between the two DCs, which the scenario ' s single-VNet, single-firewall design does not call for or support. Deploying two writable domain controller virtual machines across availability zones therefore both satisfies VM1 ' s write requirement and provides the requested redundancy with the least architectural disruption.
NEW QUESTION # 484
You need to configure the Group Policy settings to ensure that the Azure Virtual Desktop session hosts meet the security requirements. What should you configure?
Answer: B
Explanation:
GPO4 is already linked to the VirtualDesktops OU, which contains the Azure Virtual Desktop session host computer accounts, so it is correctly targeted at the right computers. The requirement is that the idle lockout behavior configured in GPO4 must apply to whichever user is signed in to a session host, and that the user must still be able to adjust the lockout time manually from their own client, which means the relevant setting is a per-user configuration item rather than a strict, non-negotiable computer policy. By default, user- configuration settings inside a GPO apply based on the OU containing the user account, not the computer the user signs in to; Fabrikam ' s users are located in the AllUsers OU, which is governed by GPO1, not GPO4.
Group Policy Loopback Processing, enabled in GPO4 and set to Merge (to allow the client-side adjustment) or Replace, forces the user-configuration portion of GPO4 to apply to any user who logs on to a computer in the VirtualDesktops OU, regardless of where that user ' s own account resides. Security filtering and the Enforced property both affect who a GPO applies to or its precedence in conflicts, but neither one makes a GPO ' s user-side settings follow the computer instead of the user, so loopback processing in GPO4 is correct.
NEW QUESTION # 485
......
As we have become the leader in this career and our experts have studying the AZ-802 exam braindumps for many years and know every detail about this subjest. So our AZ-802 simulating exam is definitely making your review more durable. To add up your interests and simplify some difficult points, our experts try their best to design our AZ-802 Study Material and help you understand the learning guide better.
AZ-802 Valid Exam Objectives: https://www.actualpdf.com/AZ-802_exam-dumps.html