Once you have selected the AZ-802 study materials, please add them to your cart. Then when you finish browsing our web pages, you can directly come to the shopping cart page and submit your orders of the AZ-802 study materials. Our payment system will soon start to work. Then certain money will soon be deducted from your credit card to pay for the AZ-802 study materials. The whole payment process only lasts a few seconds as long as there has money in your credit card. Then our system will soon deal with your orders according to the sequence of payment. Usually, you will receive the AZ-802 Study Materials no more than five minutes. Then you can begin your new learning journey of our study materials. All in all, our payment system and delivery system are highly efficient.
| Section | Objectives |
|---|---|
| Networking and high availability | - High availability and disaster recovery
|
| Secure and manage Windows Server environments | - Security and compliance
|
| Compute, storage, and virtualization | - Virtual machines and containers
|
| Hybrid infrastructure management | - Azure integration
|
One year of free Microsoft AZ-802 test questions updates are included in the SnowPro Core Certification test AZ-802 quiz package. This means that if any changes are made to the Administering Windows Server (AZ-802) exam, you will be able to obtain the updated Microsoft AZ-802 Test Questions preparation immediately. This is a great method to keep up to date on the latest Administering Windows Server (AZ-802) questions information and ensure you pass the Administering Windows Server (AZ-802) with ease.
NEW QUESTION # 322
You have a server named Server1 that runs Windows Server and contains two volumes named C and D.
You connect a disk to Server 1 that is encrypted by using BitLocker and contains a volume named E.
You need to ensure that after a restart, the data on volume E can be accessed without providing a password or a recovery key.
Which three actions should you perform on Server1 in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
1. Install the BitLocker Drive Encryption feature. 2. Encrypt volume C. 3. Turn on auto-unlock.
Automatic unlocking of a BitLocker-protected fixed data drive is a feature of the core BitLocker Drive Encryption feature (Enable-BitLockerAutoUnlock) and has one hard prerequisite: the operating system volume on that computer must also be protected by BitLocker, because the auto-unlock key for the data volume is itself secured against the encrypted OS volume. Since Server1 ' s OS volume (C) is not stated to be encrypted, it must be encrypted first. BitLocker Network Unlock is an unrelated feature that unlocks operating system volumes over the network during startup in a WDS/DHCP environment - it plays no role in unlocking a fixed data drive and is not a prerequisite for Enable-BitLockerAutoUnlock. The correct sequence is therefore to add the BitLocker Drive Encryption feature, encrypt the OS volume (C), and then turn on auto- unlock for volume E, after which subsequent restarts will mount and unlock volume E automatically without any password or recovery key prompt.
NEW QUESTION # 323
You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. You enable Microsoft Defender for Servers Plan 2. You need to implement File Integrity Monitoring (FIM). What should you create first?
Answer: B
Explanation:
File Integrity Monitoring in Microsoft Defender for Cloud, even in its current implementation that is built on top of Microsoft Defender for Endpoint for subscriptions using Defender for Servers Plan 2, still stores the file and registry baseline data and the change events it detects inside a Log Analytics workspace, which an administrator selects or newly creates as part of the process of turning FIM on for a given set of resources.
That Log Analytics workspace must already exist before File Integrity Monitoring ' s monitoring rules and file or registry key entities can be enabled and configured for VM1, making it the essential first prerequisite artifact in this workflow. A data collection rule is a separate Azure Monitor construct used to route telemetry to a destination but is not itself the storage location FIM writes its baseline and change data into, a private endpoint is used to secure network access to a resource such as a storage account or key vault rather than to store FIM data, and a storage account is not the destination FIM ' s current architecture uses at all. Because the Log Analytics workspace is the specific prerequisite resource that File Integrity Monitoring ' s configuration step depends on existing first, creating it is the correct first action to take before implementing FIM on VM1.
NEW QUESTION # 324
You have an on-premises virtual machine named VM1 that runs Windows Server. You have an Azure subscription. You plan to use an Azure Site Recovery replication policy to replicate VM1 to Azure. You need to ensure that changes on VM1 are replicated as often as possible. To what should you set the Copy frequency setting for the policy?
Answer: B
Explanation:
Azure Site Recovery ' s replication policy for protecting on-premises Hyper-V virtual machines by replicating them to Azure is built on top of the underlying Hyper-V Replica engine, and the Copy frequency setting exposed in that replication policy offers only a small, fixed set of selectable intervals rather than an arbitrary custom value, with the shortest of those available intervals being 30 seconds. Selecting 30 seconds for the Copy frequency setting therefore configures the replication policy to send VM1 ' s changed data to Azure as frequently as the underlying platform allows, which produces the smallest achievable recovery point interval and the least amount of potential data loss in the event of a failover, directly satisfying the requirement to replicate changes as often as possible. Values shorter than 30 seconds, such as 15 seconds, are not among the set of supported choices for this setting at all, since the Hyper-V Replica engine underlying this replication policy was not designed to support sub-30-second replication cycles, and the 1-minute and 5-minute options, while valid selectable choices, both replicate less frequently than the 30-second option and would therefore not satisfy the requirement to minimize the interval between replication cycles as much as the platform supports.
NEW QUESTION # 325
Your on-premises network contains an Active Directory Domain Services (AD DS) domain.
The domain contains four servers named Server1, Server2. Server3. and Server4 that run Windows Server.
You configure the connection security rules shown in the following table.
Server4 does NOT have any connection security rules applied.
With which servers can Server1 and Server2 establish communication after the connection security rules are applied? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Exhibit
Answer:
Explanation:
Explanation:
In a Windows Defender Firewall connection security rule, ' request ' authentication is opportunistic: the computer attempts IPsec authentication but falls back to unauthenticated communication if the peer cannot negotiate it, so a host whose outbound setting is ' request ' (Server1) can always reach any peer, authenticated or not, including Server4, which has no connection security rule at all. ' Require ' authentication, by contrast, only succeeds when the peer is capable of responding to the IKE negotiation at all, regardless of whether that peer ' s own policy is set to request or require; it fails outright against a peer with no IPsec policy configured.
Server1 ' s rule requests authentication both ways, so it can reach Server2, Server3, and Server4 without restriction. Server2 requires authentication for outbound connections, so its outbound traffic succeeds against Server1 and Server3 (both of which support IPsec negotiation) but is blocked toward Server4, which has no rule to negotiate with, making ' Server1 and Server3 only ' the correct outcome for Server2.
NEW QUESTION # 326
You have five Azure virtual machines. You need to collect performance data and Windows Event logs from the virtual machines. The data collected must be sent to an Azure Storage account. What should you install on the virtual machines?
Answer: D
Explanation:
The Azure Diagnostics extension for Windows is the component specifically designed to collect performance counters and Windows Event Log entries from a virtual machine and write that collected data directly into tables and blobs inside a specified Azure Storage account, which is precisely the destination the requirement calls for. The Azure Monitor Agent, by contrast, sends the data it collects through Data Collection Rules only to destinations such as a Log Analytics workspace, Azure Monitor Metrics, Azure Data Explorer, or Microsoft Fabric; it has no Data Collection Rule destination that writes straight into a general-purpose Storage account, so it cannot satisfy this specific requirement even though it is the more modern monitoring agent overall. The Azure Connected Machine agent onboards non-Azure servers to Azure Arc and has no data- collection role of its own, the Dependency agent supports VM Insights process-and-dependency mapping rather than performance counters or event logs, and the Telegraf agent is used to feed Linux VM Insights metrics rather than to write Windows performance and event data to Storage. Therefore, installing the Azure Diagnostics extension is the correct action.
NEW QUESTION # 327
......
The price for AZ-802 training materials is reasonable, and no matter you are a student at school or an employee in the company, you can afford it. Besides, AZ-802 exam materials are high quality and accuracy, for we have a professional team to collect and research the latest information for the exam. In addition, AZ-802 Exam Braindumps cover most of knowledge points for the exam, and you can master most of the knowledge through learning. We offer you free update for 365 days after purchasing, and the update version for AZ-802 training materials will be sent to your email automatically.
AZ-802 Test Price: https://www.itexamdownload.com/AZ-802-valid-questions.html