CertShikenは全面的な国際IT認証試験問題集を提供して、９９％の合格率を作れるというものです。弊社のAZ-802問題集への勉強を通して、あなたは試験に関する専門知識を習得できるばかりでなく、仕事での能力を高めることができます。弊社のMicrosoftのAZ-802問題集を利用して力の限りまで勉強して、合格しやすいです。万が一失敗したら、弊社は全額返金を承諾いたします。
| Section | Objectives |
|---|---|
| Hybrid infrastructure management | - Azure integration
|
| Networking and high availability | - High availability and disaster recovery
|
| Secure and manage Windows Server environments | - Security and compliance
|
| Compute, storage, and virtualization | - Storage and file services
|
AZ-802試験はMicrosoftのひとつの認証試験でIT業界でとても歓迎があって、ますます多くの人がAZ-802「Administering Windows Server」認証試験に申し込んですがその認証試験が簡単に合格できません。準備することが時間と労力がかかります。でも、CertShikenは君の多くの貴重な時間とエネルギーを節約することを助けることができます。
質問 # 185
Technical requirements: Promote a new server named DC4 that runs Windows Server 2022 to a domain controller. Replicate the virtual machines from Cluster2 to an Azure Recovery Services vault. Centrally manage performance alerts in Azure for all the domain controllers. Ensure that User1 can recover objects from the Active Directory Recycle Bin. Migrate Share1 to Server2, including all the share and folder permissions. Back up Server4 and all data to an Azure Recovery Services vault. Use Hyper-V Replica to protect the virtual machines in Cluster3. Implement BitLocker Drive Encryption (BitLocker) on Server4.
Whenever possible, use the principle of least privilege. You need to meet the technical requirements for User1. To which group in contoso.com should you add User1?
正解：B
解説：
Restoring deleted objects from the Active Directory Recycle Bin requires permission to view and restore objects inside the forest ' s Deleted Objects container, and by default that container ' s access control list denies access to everyone except the SYSTEM account and members of Domain Admins (and Enterprise Admins at the forest root) -- no delegation to any other built-in group exists out of the box. Among the four groups offered, only Domain Admins carries this permission by default, since Account Operators (which can manage most user, group, and computer objects but has no special access to the hidden Deleted Objects container), Schema Admins (which governs schema modifications, not object restoration), and Backup Operators (which can back up and restore files and the system state, but not perform an online Active Directory Recycle Bin object restore through the Active Directory Administrative Center) all lack the needed access. The case study ' s general instruction to use the principle of least privilege where possible does not change this outcome here, since none of the three lower-privileged alternatives actually has the required capability by default -- Domain Admins is not merely the most convenient choice but the only one of the four that functionally works. Therefore, User1 must be added to Domain Admins to be able to recover objects from the Active Directory Recycle Bin.
質問 # 186
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a domain controller named DC1 and a member server named Server1. Users cannot sign in to Server1 by using domain credentials and receive the following error message: The trust relationship between this workstation and the primary domain failed. You need to restore domain authentication on Server1 without removing Server1 from the domain.
Solution: From Server1, you run Set-ADAccountPassword -Identity " Server1$ " -Reset. Does this meet the goal?
正解：A
解説：
A broken trust relationship exists because the computer account password Server1 has stored locally no longer matches the password value AD DS holds for the Server1$ computer account, and repairing the secure channel requires both sides of that shared secret to be resynchronized to the same value. Set- ADAccountPassword -Identity " Server1$ " -Reset changes only the AD DS side of that shared secret: it sets a new password value on the computer account object as stored in the directory, but it has no mechanism to also update the local secret Server1 itself has cached, since Set-ADAccountPassword is an Active Directory module cmdlet that operates purely against the directory over LDAP/Kerberos and never touches a computer ' s local machine-account secret store. After running this cmdlet, the two sides of the secure channel are now mismatched in the opposite direction from before (AD DS has the new password, Server1 still has the old one), which does not restore the trust relationship at all and can, in practice, leave the account in exactly the same broken state or worse. Restoring the secure channel properly requires a cmdlet or tool that updates both sides together, such as Test-ComputerSecureChannel -Repair or Reset-ComputerMachinePassword run from Server1 itself, neither of which this solution uses, so this solution does not meet the goal.
質問 # 187
You have a failover cluster named FC1 that contains two nodes named Server1 and Server2. FC1 is configured to use a file share witness. You plan to configure FC1 to use a cloud witness. You need to configure Azure Storage accounts for the cloud witness. Which storage account type and authorization method should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation:
Storage account type: Standard. Authentication method: Access key.
A cloud witness for a Windows Server failover cluster requires an Azure Standard general-purpose storage account; premium storage account types (premium block blobs, premium file shares, premium page blobs) are explicitly not supported for this purpose, since the cloud witness feature is documented against the standard general-purpose account type only. Authentication to the storage account for the cloud witness is performed using the storage account ' s access key (primary or secondary); the cluster internally converts this key into a Shared Access Signature (SAS) token for secure storage rather than storing the raw key, but the authentication method the administrator actually configures and provides is the access key itself. A shared access signature is not directly entered as the configured authentication method (it is generated internally from the key), and system-assigned or user-assigned managed identity in Microsoft Entra ID is a newer capability introduced separately in later Windows Server releases rather than the option documented as the standard, baseline authentication method for cloud witness. Therefore, a Standard storage account together with access-key authentication is the correct configuration.
質問 # 188
Which two languages can you use for Task1? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
正解：A、C
解説：
Task1 is an Azure Automation runbook, and Azure Automation supports a specific, limited set of runbook types: PowerShell (and PowerShell Workflow), Python, and Graphical runbooks (which are authored visually rather than in a scripting language). Of the listed options, PowerShell and Python are the two genuine scripting languages Azure Automation lets you author a runbook in directly, making them the two correct answers. Java and JavaScript are not supported runbook languages in Azure Automation; JavaScript is used elsewhere in Azure (for example, in Azure Functions or Logic Apps custom code), but not for Automation runbooks. Bicep is a domain-specific language for declaratively defining Azure infrastructure as code (compiling down to ARM templates) and has no role as an executable runbook language; you would not write a Task1 runbook in Bicep, since runbooks execute imperative logic rather than declare resource deployments.
Therefore, Python and PowerShell are the two languages available for Task1.
質問 # 189
You have an administrative workstation named AdminPC in a workgroup.
AdminPC has existing entries in the WSMan TrustedHosts list.
You have a server named Server1 that has PowerShell remoting enabled and is teachable at an IP address of
172.16.10.20.
You need to create a remote Power Shell session from AdminPC to Seiver1. The solution must meet the following requirements:
* Preserve the existing TrustedHosts entries on AdminPC.
* Use the IP address of Server1 for the remote session.
How should you complete the script? To answer, select the appropriate options in the answer area. NOTE:
Each correct selection is worth one point.
正解：
解説：
Explanation:
$var2 = Get-Credential. Cmdlet: Set-Item.
Because AdminPC is in a workgroup rather than domain-joined, connecting by IP address to a server that PowerShell remoting cannot Kerberos-authenticate requires the target to first be added to the local WSMan client ' s TrustedHosts list, which is exactly what the provided line, applied against WSMan:
\localhost\Client\TrustedHosts, is doing with the value $var1 (the target ' s IP address); the cmdlet that both reads and writes a WS-Management configuration setting such as TrustedHosts through the WSMan:
PowerShell drive is Set-Item, whereas Export-Csv and Out-File only write data to files and Set-ItemProperty targets registry or filesystem item properties rather than the WSMan provider ' s configuration values, so Set- Item is the only one of the four options that correctly updates TrustedHosts. Using the -Concatenate switch together with -Force appends the new IP address onto whatever entries already exist in TrustedHosts rather than replacing the list outright, which is exactly how the requirement to preserve the existing TrustedHosts entries on AdminPC is satisfied. The remote session itself, established by New-PSSession -ComputerName
$server -Credential $var2, needs an explicit credential because a workgroup-to-workgroup or workgroup-to- IP connection cannot rely on the caller ' s domain identity; Get-Credential is the cmdlet that interactively prompts for and returns a PSCredential object suitable for that -Credential parameter, unlike Get-ADUser, Get-AzUserAssignedIdentity, or Get-LocalUser, none of which return a usable credential object.
質問 # 190
......
Administering Windows Serverが提供するAZ-802準備トレントは、時間と労力を節約します。確認と準備に必要な時間は比較的わずかです。結局のところ、オフィスワーカーでも学生でも、AZ-802試験の準備をする多くの人々は忙しいです。しかし、当社が提供するAZ-802テスト準備は精巧にコンパイルされており、高品質のAZ-802学習教材を学習して提供するための時間とエネルギーが少なくて済み、AZ-802試験に集中できます。これにより、最も多くの情報を習得でき、時間とエネルギーを最小限に抑えることができます。
AZ-802資格認証攻略: https://www.certshiken.com/AZ-802-shiken.html