To save the clients' time, we send the products in the form of mails to the clients in 5-10 minutes after they purchase our AZ-802 practice guide and we simplify the information to let the client only need dozens of hours to learn and prepare for the test. To help the clients solve the problems which occur in the process of using our AZ-802 Guide materials, the clients can consult about the issues about our study materials at any time. So we can say that our AZ-802 training materials are people-oriented and place the clients’ experiences in the prominent position.
| Section | Objectives |
|---|---|
| Networking and high availability | - Networking infrastructure
|
| Compute, storage, and virtualization | - Storage and file services
|
| Secure and manage Windows Server environments | - Identity and access management
|
| Hybrid infrastructure management | - Azure integration
|
The ExamcollectionPass is a leading platform that has been assisting the Microsoft AZ-802 exam candidates for many years. Over this long time period countless AZ-802 exam candidates have passed their Microsoft AZ-802 Exam. They got success in Administering Windows Server exam with flying colors and did a job in top world companies.
NEW QUESTION # 122
You have a file server named Server1 that runs Windows Server and contains the volumes shown in the following table. On which volumes can you use BitLocker Drive Encryption (BitLocker), and on which volumes can you use disk quotas? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Volumes on Server1
Answer:
Explanation:
Explanation:
BitLocker: C, D, and E. Disk quotas: C and D only.
Server1 has three volumes: C and D are formatted NTFS, and E is formatted ReFS. BitLocker Drive Encryption supports encrypting NTFS, FAT16/32, exFAT, and ReFS volumes, so it can be enabled on all three volumes regardless of whether they use NTFS or ReFS; there is no BitLocker restriction that excludes ReFS. Disk quotas, by contrast, are an NTFS-specific feature built into the NTFS file system driver to track and limit per-user storage consumption on a volume; ReFS does not implement the same per-user quota tracking mechanism that classic NTFS disk quotas rely on, so disk quotas cannot be configured on volume E.
Because C and D are both NTFS, disk quotas can be enabled on both of them. It is a common point of confusion to assume that any feature available on NTFS is automatically available on ReFS, or vice versa, since both are modern Microsoft-supported file systems, but they diverge specifically on this legacy per-user quota capability. Therefore, BitLocker applies to C, D, and E, while disk quotas apply only to C and D.
NEW QUESTION # 123
You have an Active Directory Domain Services (AD DS) forest that has the Active Directory Recycle Bin enabled. The forest contains a user named User1. User1 is accidentally deleted. You need to restore User1 from the Active Directory Recycle Bin. What should you use?
Answer: B
Explanation:
With the Active Directory Recycle Bin enabled, deleted objects retain their attributes and can be restored, and Active Directory Administrative Center is the graphical tool that exposes the Deleted Objects container and a Restore (or Restore To) action for recovering them, including User1. Active Directory Users and Computers does not expose the Deleted Objects container by default and has no restore functionality, and Sites and Services or Domains and Trusts are unrelated to object recovery. ADAC is therefore the tool to use for a straightforward Recycle Bin restore of a deleted user. From ADAC, an administrator navigates to the Deleted Objects container in the domain, selects User1, and chooses Restore to return the account to its original location with its original attributes and group memberships intact, avoiding the more involved authoritative- restore or tombstone-reanimation procedures required when the Recycle Bin is not enabled. The same restore operation can also be performed with the Restore-ADObject PowerShell cmdlet once the object ' s deleted- object GUID is identified, which is a useful alternative when scripting bulk recoveries rather than restoring a single account interactively through ADAC.
NEW QUESTION # 124
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server. Server1 has volume C: (OperatingSystem, unencrypted) and volume D: (Data, fully encrypted with BitLocker, KeyProtector currently Password and RecoveryPassword).
You need to add the computer account of Server1 as a key protector for volume D so that Server1 can automatically unlock the volume without a signed-in user. How should you complete the command? To answer, select the appropriate options in the answer area.
BitLocker status for volumes C and D
Answer:
Explanation:
Explanation:
Cmdlet: Add-BitLockerKeyProtector -MountPoint D: -ADAccountOrGroupProtector CONTOSO\Server1$ - Service.
The -ADAccountOrGroupProtector parameter of Add-BitLockerKeyProtector adds an Active Directory account or group as a key protector for a BitLocker-protected volume, and this protector type can only be applied to a data volume, not an operating system volume, which is consistent with the scenario targeting the D: data volume rather than the C: operating system volume shown as unencrypted in the exhibit. Pairing - ADAccountOrGroupProtector with the -Service switch specifically tells BitLocker that the AD object being added as a protector is the computer ' s own service, or machine, account, expressed in the form DOMAIN\ComputerName$, which is what lets Server1 automatically unlock the volume on its own using its computer account credentials without requiring any signed-in user to enter a password or PIN. The second dropdown correctly resolves to -Service rather than -TPMandPinProtector or - TPMandPinAndStartupKeyProtector, since neither of those protector types is meant to be combined with an AD account or group protector, and neither one authenticates using a computer account the way -Service does.
NEW QUESTION # 125
You have a server that runs Windows Server 2022 and has the network adapters shown in the following table:
LAN1 (Vendor1, 1 Gbps, RDMA: No), LAN2 (Vendor2, 25 Gbps, RDMA: Yes), LAN3 (Vendor3, 25 Gbps, RDMA: Yes), LAN4 (Vendor4, 1 Gbps, RDMA: No). You need to configure NIC teaming for LAN2 and LAN3. The solution must support Dynamic Virtual Machine Multi-Queue (d.VMMQ). What should you use?
Network adapter table
Answer: B
Explanation:
Switch Embedded Teaming (SET) is the only Windows Server NIC teaming technology that preserves each member adapter ' s RDMA capability and supports Dynamic VMMQ, because SET is implemented as an integrated capability of the Hyper-V virtual switch itself rather than as a separate teaming driver layered underneath it; this integration lets SET-teamed adapters continue to expose RDMA and advanced offloads such as d.VMMQ to the virtual switch and its VMQ/VMMQ queue allocation logic. The legacy NIC Teaming feature -- also called load balancing and failover (LBFO), which includes both static teaming mode and LACP teaming mode as configuration options -- sits below the virtual switch as a separate intermediate driver and explicitly does not support RDMA passthrough or Dynamic VMMQ on its member adapters; teaming LAN2 and LAN3 (both RDMA-capable, 25 Gbps adapters) with classic LBFO would strip their RDMA capability entirely, defeating both the RDMA benefit and the d.VMMQ requirement. Since LAN2 and LAN3 are both RDMA-capable adapters and the requirement explicitly calls for Dynamic VMMQ support, Switch Embedded Teaming is the only option among those listed that meets the requirement; static teaming mode and LACP teaming mode are simply LBFO configuration variants and share the same RDMA/d.VMMQ incompatibility.
NEW QUESTION # 126
You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with a Microsoft Entra ID tenant. Group writeback is enabled in Microsoft Entra Connect. The AD DS domain contains a server named Server1. Server1 contains a shared folder named share1. You have an Azure Storage account named storage2 that uses Microsoft Entra ID-based access control. The storage2 account contains a share named share2. You need to create a security group that meets the following requirements: can contain users from the AD DS domain; can be used to authorize user access to share1 and share2. What should you do?
Answer: A
Explanation:
Azure Files ' Microsoft Entra ID Kerberos authentication for a storage account share currently requires that the security group placed on the share ' s access control list be a Microsoft Entra security group with assigned membership; groups with dynamic membership rules are not supported for this purpose, and a Microsoft 365 group is a different kind of object that is likewise not a supported security principal for this access-control scenario. Creating the group in the Microsoft Entra tenant as a standard security group with assigned membership therefore satisfies the share2 requirement directly. Because Group writeback is already enabled in Microsoft Entra Connect, a cloud-created Microsoft Entra security group (with assigned, not dynamic, membership - writeback also does not support dynamic groups) is written back down into the on-premises AD DS domain as a corresponding group object, which is what allows it to be used in an NTFS or share permission entry on share1 and to contain (or be evaluated against) users whose accounts live in the on- premises AD DS domain. Creating the group directly in the on-premises AD DS domain (option A) would satisfy share1 but would not automatically exist as a Microsoft Entra security group usable for storage2 ' s Entra-ID-based access control unless synced up, which is not how writeback operates (writeback is one- directional, cloud to on-premises). Creating the group in the Entra tenant with assigned membership is therefore the single action that satisfies both requirements.
NEW QUESTION # 127
......
It is acknowledged that there are numerous AZ-802 learning questions for candidates for the exam, however, it is impossible for you to summarize all of the key points in so many materials by yourself. But since you have clicked into this website for AZ-802 practice materials you need not to worry about that at all because our company is especially here for you to solve this problem. We have a lot of regular customers for a long-term cooperation now since they have understood how useful and effective our AZ-802 Actual Exam is. So will you!
AZ-802 Exam Dumps Free: https://www.examcollectionpass.com/Microsoft/AZ-802-practice-exam-dumps.html