Our PDF version is a printable document of exam questions which are real and updated. We have included original Administering Windows Server questions in this format so that can you get ready for the exam quickly by just memorizing them. This format of Administering Windows Server (AZ-802) test questions is also usable on smart devices such as laptops, tablets, and smartphones.
| Section | Objectives |
|---|---|
| Topic 1: Compute, storage, and virtualization | - Virtual machines and containers
|
| Topic 2: Secure and manage Windows Server environments | - Identity and access management
|
| Topic 3: Hybrid infrastructure management | - Monitoring and update management
|
| Topic 4: Networking and high availability | - High availability and disaster recovery
|
>> Microsoft AZ-802 Exam Questions Pdf <<
The pas rate is 98.95% for the AZ-802 exam torrent, and you can pass the exam if you choose us. The AZ-802 exam dumps we recommend to you are the latest information we have, with that you can know the information of the exam center timely. Furthermore, with skilled professionals to revise the AZ-802 Questions and answers, the quality is high. And we offer you free update for 365 days, therefore you can get update version timely, and the update version will be sent to your email address automatically.
NEW QUESTION # 433
You have an on-premises Hyper-V host named Server1. Server1 contains a virtual machine named VM1. You have a non-domain joined Hyper-V server named Server2 that is hosted in a remote location. You plan to replicate VM1 to Server2 by using Hyper-V Replica. You need to configure replication on Server1. Which authentication method can you use?
Answer: B
Explanation:
Hyper-V Replica supports two authentication methods: Kerberos (integrated Windows authentication) over an unencrypted HTTP connection, which requires both the primary and replica servers to be domain-joined and mutually trusted, or certificate-based authentication over an encrypted HTTPS connection. Because Server2 is a non-domain-joined, remotely located Hyper-V host, Kerberos authentication is not available, so replication from Server1 must be configured to use certificate-based authentication, which also has the advantage of encrypting replication traffic in transit over the connection to the remote location. Setting this up requires issuing or importing a matching certificate on both Server1 and Server2, configuring the Replica server to accept HTTPS connections on the Hyper-V Replica listener, and specifying the certificate thumbprint when enabling replication for VM1, none of which is required for the simpler but domain-dependent Kerberos option. Because the certificates must chain to a mutually trusted root and Server2 is not part of the same AD DS forest, the certificates are typically issued by a third-party or shared internal certificate authority that both hosts already trust independently of any Active Directory relationship.
NEW QUESTION # 434
Your network contains an Active Directory Domain Services (AD DS) domain. You need to configure a ticket-granting ticket (TGT) lifetime for specific user and computer accounts. The solution must meet the following requirements: -- Minimize the impact on the other user and computer accounts in the domain. -- Minimize administrative effort. What should you configure?
Answer: B
Explanation:
Authentication policies, applied through an authentication policy silo, let an administrator set a custom Kerberos ticket-granting-ticket lifetime, along with other authentication restrictions, for a specific, explicitly scoped set of user and computer accounts, without needing to modify the Default Domain Policy or any Group Policy Object that would apply more broadly across the domain. Because only accounts placed into the silo are affected, every other account in the domain continues to use its existing default Kerberos ticket lifetime, which directly satisfies the requirement to minimize impact on other accounts, and because authentication policies and silos are configured through Active Directory Administrative Center with a guided interface, they also satisfy the requirement to minimize administrative effort compared to more manual or broadly scoped alternatives. A standard password policy or a fine-grained password policy governs password complexity, history, and account lockout settings rather than Kerberos ticket-granting-ticket lifetimes, so neither one can accomplish this requirement at all. A Dynamic Access Control policy governs claims-based conditional access to file server resources based on user and device attributes, which is an entirely different mechanism unrelated to Kerberos ticket lifetime, so an authentication policy and authentication policy silo is the only listed option that correctly and efficiently meets both stated requirements.
NEW QUESTION # 435
You need to implement an availability solution for DHCP that meets the requirements. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Answer: B,D
Explanation:
DHCP1 (New York, Scope1) and DHCP2 (Seattle, Scope2) currently serve only their own local office. To make DHCP highly available across both offices, the modern, supported approach is DHCP Failover, configured per scope (option E), which replicates lease information between DHCP1 and DHCP2 in either load-balance or hot-standby mode so that either server can service either scope ' s clients if its partner becomes unavailable. However, DHCP Failover alone only helps if a client ' s DHCP broadcast can actually reach the surviving partner server across the WAN; broadcasts do not cross routed office boundaries on their own. Configuring a DHCP relay agent on the router (or another relay-capable device) in each office (option B) forwards DHCPDISCOVER broadcasts from local clients to the remote partner server whenever the local DHCP server is down, allowing failover to actually take effect for clients in either office. The legacy split- scope technique of manually carving off a percentage of the other scope ' s addresses (options A and C) is the older, pre-failover workaround and is unnecessary once DHCP Failover is used; there is also no DHCP cluster role delivered through Windows Failover Clustering (option D), since DHCP achieves high availability through Failover mode, not a clustered role.
NEW QUESTION # 436
You are planning the implementation of Cluster2 to support the on-premises migration plan. You need to ensure that the disks on Cluster2 meet the security requirements. In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
1. Add a disk resource to the cluster. 2. Create a Cluster Shared Volume (CSV). 3. Put the disk in maintenance mode. 4. Enable BitLocker on the volume. 5. Update the BitLockerProtectorInfo property of the volume.
BitLocker can only be enabled on a Cluster Shared Volume disk while that disk is taken offline to cluster I/O, so the CSV must exist and be placed into maintenance mode before encryption can be applied. The supported sequence begins by adding the disk resource to the cluster and converting it into a Cluster Shared Volume, since BitLocker-on-CSV support requires the disk to already be a CSV rather than a plain cluster disk. The disk is then put into maintenance mode, which takes it offline to the other cluster nodes so it can be safely encrypted without a node attempting to access it mid-operation. With the CSV disk offline in maintenance mode, BitLocker is enabled on the volume. Finally, the volume ' s BitLockerProtectorInfo property is updated so that Failover Clustering registers the unlock protector, allowing the volume to automatically unlock on every cluster node once maintenance mode ends and the CSV is brought back online. Performing these steps out of order either fails outright -- BitLocker cannot be enabled on a CSV disk that is still online and actively used by the cluster -- or leaves the other cluster nodes unable to bring the encrypted volume back online afterward, since they would lack the registered unlock protector. Therefore, the correct order is: add the disk resource, create the CSV, put the disk in maintenance mode, enable BitLocker, and update BitLockerProtectorInfo.
NEW QUESTION # 437
You have a server named Server1 that runs Windows Server. The disks on Server1 are configured as shown in the following exhibit: Disk 0 (System Reserved + C: NTFS), Disk 1 (Data D: NTFS), Disk 2 (Data E:
exFAT). You need to convert volume E to ReFS. The solution must meet the following requirements: * Preserve the existing data on volume E. * Minimize administrative effort. What should you do first?
Disk Management showing Disk 0-2 and volume E as exFAT
Answer: C
Explanation:
Unlike the FAT-to-NTFS conversion path, which has an in-place, non-destructive conversion tool (convert.
exe) that preserves existing files, there is no equivalent in-place conversion utility for changing an existing volume ' s file system to ReFS: a volume must be reformatted as ReFS, which destroys all data currently on that volume. Because the requirement is explicitly to preserve the existing data on volume E while still ending up with an ReFS volume, the necessary first step is to back up the data currently on volume E to another location, so that after the volume is reformatted as ReFS, the data can be restored onto it. Taking Disk 2 offline is not needed to perform a backup and does not by itself help preserve data through a reformat.
Converting Disk 2 to a dynamic disk changes the disk ' s partitioning type but has no bearing on the volume ' s file system or on data preservation, and ReFS conversion does not require a dynamic disk. Running convert.
exe is specifically the FAT/FAT32-to-NTFS in-place conversion tool; it does not support converting a volume to ReFS at all, so it cannot be used here regardless of order. Therefore, backing up the data on volume E is the necessary first action, after which the volume can be reformatted as ReFS and the backed-up data restored.
NEW QUESTION # 438
......
With the Microsoft AZ-802 certification exam you can do your job nicely and quickly. You should keep in mind that the Microsoft AZ-802 certification exam is a valuable credential and will play an important role in your career advancement. With the right Microsoft AZ-802 Exam Preparation, commitment and dedication you can make this challenge easy and quick.
Free AZ-802 Practice: https://www.exams4collection.com/AZ-802-latest-braindumps.html