Die Kandidaten können die Schulungsunterlagen zur Microsoft AZ-802 Zertifizierungsprüfung von Zertpruefung in einer Simulationsumgebung lernen. Sie können die Prüfungssorte und die Testzeit kontrollieren. In Zertpruefung können Sie sich ohne Druck und Stress gut auf die Microsoft AZ-802 Prüfung vorbereiten. Zugleich können Sie auch einige häufige Fehler vermeiden. So werden Sie mehr Selbstbewusstsein in der Microsoft AZ-802 Prüfung haben. In der realen Prüfung können Sie Ihre Erfahrungen wiederholen, um Erfolg in der Prüfung zu erzielen.
| Section | Objectives |
|---|---|
| Topic 1: Manage hybrid compute and virtualization | - Containers
|
| Topic 2: Disaster recovery and migration | - Migration scenarios
|
| Topic 3: Secure Windows Server hybrid infrastructures | - Security configuration
|
| Topic 4: Implement and manage high availability | - Load balancing and redundancy
|
| Topic 5: Networking and storage infrastructure | - Networking
|
| Topic 6: Monitoring and troubleshooting | - System monitoring
|
Die Qualität muss sich bawähren, was die Microsoft AZ-802 von uns Zertpruefung Ihnen genau garantieren können, weil wir immer die Test-Bank aktualisieren. Die fachliche Erklärungen der Antworten von unserer professionellen Gruppe machen unsere Produkte der Schlüssel des Bestehens der Microsoft AZ-802. Die Versprechung „volle Rückerstattung bei der Durchfall„ ist auch Motivation für unser Team. Wir wollen für Sie die Prüfungsunterlagen der Microsoft AZ-802 immer verbessern. Innerhalb einem Jahr nach Ihrem Kauf, können Sie die neuesten Unterlagen der Microsoft AZ-802 weiter genießen ohne zusätzliche Gebühren.
54. Frage
You have an Azure virtual machine named VM1 that runs Windows Server. You need to configure the management of VM1 to meet the following requirements: require administrators to request access to VM1 before establishing a Remote Desktop connection; limit access to VM1 from specific source IP addresses; limit access to VM1 to a specific management port. What should you configure?
Antwort: C
Begründung:
The three requirements together describe just-in-time (JIT) VM access: administrators must request approval before an RDP connection is allowed, and once granted, access is restricted to specific source IP addresses and to a specific management port. JIT VM access is a capability of Microsoft Defender for Cloud (under the Defender for Servers plan); it dynamically locks down inbound rules on the VM ' s network security group and only opens the specified port, for the specified source IP addresses, for a limited time after an access request is approved. A network security group alone can restrict traffic by port and source IP, but it has no request-and-approval workflow or automatic time-limited opening/closing behavior - it only enforces whatever rules are already statically configured; it is really the mechanism JIT manipulates, not the solution that provides the request-approval layer. Microsoft Entra Privileged Identity Management manages time- bound elevation for Entra ID and Azure RBAC roles, not network-level port access. Azure Front Door is a global HTTP/HTTPS load balancer and application delivery service, unrelated to RDP access control.
Microsoft Defender for Cloud is therefore the correct configuration target.
55. Frage
Technical requirements: Promote a new server named DC4 that runs Windows Server 2022 to a domain controller. Replicate the virtual machines from Cluster2 to an Azure Recovery Services vault. Centrally manage performance alerts in Azure for all the domain controllers. Ensure that User1 can recover objects from the Active Directory Recycle Bin. Migrate Share1 to Server2, including all the share and folder permissions. Back up Server4 and all data to an Azure Recovery Services vault. Use Hyper-V Replica to protect the virtual machines in Cluster3. Implement BitLocker Drive Encryption (BitLocker) on Server4.
Whenever possible, use the principle of least privilege. You need to meet the technical requirements for Cluster3. What should you include in the solution?
Antwort: A
Begründung:
Using Hyper-V Replica within a clustered Hyper-V environment such as Cluster3 requires deploying the Hyper-V Replica Broker, which itself runs as a clustered role on the failover cluster; without the Broker, replication cannot follow a protected virtual machine if it live-migrates between Cluster3 ' s nodes, since there would be no single, cluster-aware endpoint tracking which node currently owns each VM ' s replication state.
Adding a failover cluster role is exactly how the Hyper-V Replica Broker is deployed onto Cluster3, satisfying the requirement to use Hyper-V Replica to protect Cluster3 ' s virtual machines. Enabling integration services on the virtual machines addresses guest-OS-to-host integration (time synchronization, heartbeat, and similar) rather than providing any replication capability. Adding a generic Windows Server server role does not, by itself, install or configure the Hyper-V Replica Broker -- the Broker must specifically be added as a clustered role through Failover Cluster Manager. Configuring a fault domain for the cluster is not a real Windows Server failover clustering concept and does not provide Hyper-V Replica capability.
Therefore, adding a failover cluster role (the Hyper-V Replica Broker) is the correct solution for Cluster3.
56. Frage
You have an Azure subscription that contains a network security group (NSG) named NSG1 and a virtual network named VNet1. NSG1 contains only default security rules. VNet1 contains the subnets shown in the following table.
The subscription contains virtual machines that run Windows Server as shown in the following table.
You configure just-in-time (JIT) VM access as shown in the following exhibit.
for each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point
Exhibit
Exhibit
Antwort:
Begründung:
Explanation:
Statement 1: No. Statement 2: Yes. Statement 3: No.
Just-in-time VM access is configured only for VM1, and it governs inbound connections to VM1, not outbound connections VM1 initiates toward other machines, so a Remote Desktop session from VM1 to VM3 is unaffected by VM1 ' s JIT policy and is not subject to a three-hour cutoff. For the port 3389 rule on VM1, the Allowed source IPs are restricted to specific CIDR ranges, but that setting only determines which source addresses are eligible to be granted access when a request is made; it does not exempt any source, including VM3 ' s 192.168.10.0/24 range, from having to submit a just-in-time access request first. Since Defender for Cloud always requires an approved request before it opens the port, both VM2 and VM3 must request access before they can RDP to VM1, even though only requests originating from the configured CIDR ranges will be eligible for approval. VM2 ' s subnet (172.16.0.0/24) falls outside both allowed CIDR ranges, so even a submitted request from VM2 would ultimately be rejected, but the requirement to request access first still applies uniformly regardless of source address.
57. Frage
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two servers named Server1 and Server2 that run Windows Server.
On Server1, you create an event subscription named Subscription! that retrieves events from Server2. The Query Filter settings (or Subscription! are configured as shown in the following exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Subscription1 Query Filter settings
Antwort:
Begründung:
Explanation:
Statement 1: No. Statement 2: No. Statement 3: Yes.
The query filter on Subscription1 only includes the Warning and Information event levels (Critical, Error, and Verbose are unchecked) and only pulls from the Application, Security, and Setup logs, so Critical events, including any that occur in the System log, are excluded outright, making statement 1 No. Subscription1 is explicitly defined to retrieve events from Server2, not from Server1 itself, so events generated locally on Server1 ' s own Setup log are never in scope for this subscription regardless of level, making statement 2 No.
Information-level events written to the Application log on Server2 match both the selected event levels and the selected logs and originate from the correct source computer, so they are collected and forwarded to Server1, making statement 3 Yes. An event has to satisfy all three filter dimensions at once, level, log, and source computer, to be forwarded into View1, and evaluating each statement against those three dimensions independently is what resolves this HOTSPOT correctly.
58. Frage
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.
You need to perform the following tasks:
* Createasnapshotofcontoso.com.
* Expose the snapshot as a read-only AD DS instance.
What should you use for each task? To answer, drag the appropriate tools to the correct tasks. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Exhibit
Antwort:
Begründung:
Explanation:
Ntdsutil.exe is the built-in tool used to create and manage Active Directory Domain Services snapshots, which are point-in-time, volume-shadow-copy-based captures of the AD database that can be taken without stopping the domain controller. Dsamain.exe then mounts one of those snapshots and exposes its contents as a read-only LDAP directory on a separate port, letting an administrator browse, compare, or recover objects from the earlier point in time without performing an authoritative restore. This snapshot-and-mount workflow is the standard low-impact way to inspect prior AD DS state for recovery purposes. Active Directory Administrative Center and Active Directory Users and Computers can browse and compare objects once dsamain.exe has exposed the snapshot as an LDAP endpoint, but neither tool creates the snapshot itself or mounts it as a directory instance, which is why ntdsutil.exe and dsamain.exe are the two tools that must be matched to these specific tasks. Dsmgmt.exe, the fifth tool in the list, is used for different administrative operations such as managing FSMO role seizure or DSRM password resets, and plays no part in the snapshot creation or exposure workflow being tested here.
59. Frage
......
Sie können Prüfungsfragen und Antworten zur Microsoft AZ-802 Zertifizierungsprüfung teilweise umsonst als Probe herunterladen. Sobald Sie Zertpruefung wählen, würden wir alles tun, um Ihnen bei der Prüfung zu helfen. Wenn Sie später finden, dass die von uns gebotenen Microsoft AZ-802 Prüfungsfragen und Antworten den echten Prüfungsfragen und Antworten nicht entsprechen und Sie somit die Prüfung nicht bestehen, dann erstatten wir Ihnen die an uns geleisteten Zahlung.
AZ-802 Lerntipps: https://www.zertpruefung.de/AZ-802_exam.html