Under the leadership of a professional team, we have created the most efficient learning AZ-802 training guide for our users. Our users use their achievements to prove that we can get the most practical knowledge in the shortest time. AZ-802 exam questions are tested by many users and you can rest assured. If you want to spend the least time to achieve your goals, AZ-802 Learning Materials are definitely your best choice. You can really try it we will never let you down!
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Secure Windows Server on-premises and hybrid infrastructures | 10% | - Configure Windows Defender and audit policies - Implement security baselines and hardening - Manage access control and permissions |
| Topic 2: Implement and manage an on-premises and hybrid networking infrastructure | 15% | - Configure IP addressing, DNS, and DHCP - Implement hybrid network connectivity - Secure network traffic in hybrid environments - Configure software-defined networking |
| Topic 3: Manage storage and file services | 15% | - Configure data deduplication and replication - Integrate on-premises storage with Azure Storage - Configure file servers and shares - Implement Storage Spaces and Storage Spaces Direct |
| Topic 4: Manage Windows Servers and workloads in a hybrid environment | 20% | - Configure remote management and secure administration - Implement hybrid identity solutions - Deploy servers using Windows Admin Center and Azure Arc - Manage updates and patches across hybrid servers |
| Topic 5: Implement high availability and disaster recovery | 5% | - Implement backup and recovery solutions - Perform server and workload migrations - Configure failover clustering - Monitor and troubleshoot Windows Server environments - Use Azure Site Recovery for hybrid workloads |
| Topic 6: Manage virtual machines and containers | 15% | - Configure Azure Arc-enabled servers and VMs - Deploy and manage containers and Kubernetes on Windows Server - Deploy and manage Hyper-V virtual machines |
| Topic 7: Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments | 20% | - Integrate AD DS with Azure AD and Azure Arc - Implement and manage Group Policy Objects - Install and configure domain controllers - Manage FSMO roles and replication |
>> AZ-802 Free Sample Questions <<
In order to remain competitive in the market, our company has been keeping researching and developing of the new AZ-802 exam questions. We are focused on offering the most comprehensive AZ-802 study materials which cover all official tests. Now, we have launched some popular AZ-802 training prep to meet your demands. And you will find the quality of the AZ-802 learning quiz is the first-class and it is very convenient to download it.
NEW QUESTION # 364
Your network contains two Active Directory forests and a domain trust as shown in the following exhibit:
contoso.com forest contains a child domain east.contoso.com (automatic parent-child trust); a separate domain trust named adatum.com exists, configured as Type External, Direction One-way outgoing (outgoing from east.contoso.com to adatum.com), Outgoing trust authentication level Domain-wide authentication. The network contains the users User1 (adatum.com), User2 (contoso.com), and User3 (east.contoso.com), and the shares Share1 (in adatum.com), Share2 (in contoso.com), and Share3 (in east.contoso.com). For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
contoso.com (parent-child trust) east.contoso.com; east.contoso.com --external, one-way outgoing domain trust-- > adatum.com.
User1: adatum.com. User2: contoso.com. User3: east.contoso.com.
Answer:
Explanation:
Explanation:
User1 can be assigned permissions for Share3: Yes. User2 can be assigned permissions for Share1: No. User3 can be assigned permissions for Share1: No.
The external trust here is configured on east.contoso.com, directed one-way outgoing toward adatum.com; an outgoing trust means the domain that owns the trust (east.contoso.com) trusts the named target domain (adatum.com), which allows security principals from the trusted domain, adatum.com, to be granted access to resources in the trusting domain, east.contoso.com - but grants nothing in the reverse direction, and, being an external (not forest) trust, it is non-transitive and does not extend to any other domain such as the contoso.
com root. User1 belongs to adatum.com, the trusted domain, and Share3 sits in east.contoso.com, the trusting domain, so User1 can indeed be assigned permissions for Share3 - that is precisely what an outgoing trust from east.contoso.com to adatum.com enables. User2 belongs to contoso.com, the forest root, which is not a party to this external trust at all (the trust exists only on east.contoso.com, and external trusts don ' t extend automatically to a parent domain), so there is no path allowing User2 into adatum.com ' s Share1. User3 belongs to east.contoso.com itself, but the trust direction only lets adatum.com principals reach into east.
contoso.com, not the reverse; east.contoso.com does not trust adatum.com as a resource domain from its own users ' perspective, so User3 likewise cannot be assigned permissions for Share1.
NEW QUESTION # 365
You have three servers named Server1, Server2, and Server3 that run Windows Server. The servers have the Hyper-V server role installed and are configured in a Storage Spaces Direct cluster named Cluster1. Cluster1 hosts a virtual machine named VM1 that has Windows Admin Center installed. You manage all servers and clusters by using Windows Admin Center. You purchase an Azure subscription. You need to configure email alerts in Azure Monitor for the following: -- Disk Capacity Utilization Over 80% for 10 Minutes -- Any critical alert in the cluster system event log -- Memory Utilization over 95% for 10 minutes -- Heartbeat fewer than 5 beats for 5 Minutes -- CPU Utilization over 85% for 10 Minutes -- Any health service faults for the cluster The solution must use the minimum amount of administrative effort. What should you do?
Answer: C
Explanation:
Windows Admin Center includes a built-in Azure Monitor integration tool, reached under Tools > Azure Monitor for a connected cluster, that registers the connection with Azure, provisions the underlying Log Analytics workspace, deploys the monitoring agent to every cluster node, and exposes a predefined set of alert rules covering exactly this scenario ' s requirements: CPU utilization over 85% for 10 minutes, disk capacity over roughly 80 to 85% for 10 minutes, memory utilization thresholds, heartbeat loss, cluster critical events, and health service faults. Because the administrator already manages every server and cluster through Windows Admin Center on a daily basis, launching this wizard from the existing console and onboarding Cluster1 directly through it is the lowest-effort path available, since it avoids standing up a separate manual Azure Arc onboarding project or installing agents by hand. Configuring Azure Monitor and onboarding Cluster1 through Azure Arc from the Azure portal accomplishes something similar but requires more manual configuration outside the tool the administrator already uses, and manually installing the Microsoft Monitoring Agent on each of the three nodes individually is explicitly the higher-effort approach that the Windows Admin Center wizard is designed to eliminate.
NEW QUESTION # 366
Your network contains the segments shown in the following table.
You have servers that run Windows Server and are configured as shown in the following table.
You deploy a server named Server4 that runs Windows Server and has a static IP address of 172.16.1.1. You connect Server4 to Segment1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Server1 can successfully ping Server2 by using the name of Server2: No. Server2 can successfully ping Server3 by using the IP address of Server3: No. Running ipconfig /all on Server4 will display an IP address from the 169.254.0.0/16 IPv4 address space: No.
A host decides whether a destination is local by comparing the destination IP against its own subnet mask; if the destination falls outside its own subnet, the host forwards through its default gateway, and if within its own subnet, it uses ARP directly on the local segment. Server2 is physically cabled to Segment1 but has been configured with an IP address (172.16.2.2/24) that places it in the 172.16.2.0/24 network -- a subnet that is physically Segment2. When Server1 (172.16.1.10/24) resolves and pings Server2 ' s name, it gets back
172.16.2.2, which Server1 treats as a remote address (outside its own 172.16.1.0/24) and forwards to its gateway, 172.16.1.1; the router then forwards toward the 172.16.2.0/24 network (physically Segment2), where Server2 is not actually present, so the ping fails. Likewise, when Server2 (believing itself to be on
172.16.2.0/24) tries to reach Server3 (172.16.2.20), it thinks the destination is local and issues an ARP request on the wire it ' s actually attached to (Segment1); ARP requests never cross a router, so the request never reaches Server3 (physically on Segment2), and the ping fails. Server4 was given a static IP address (172.16.1.1); APIPA (169.254.0.0/16) is assigned only to interfaces configured for automatic (DHCP) addressing when no DHCP server responds -- a statically configured interface never receives an APIPA address regardless of any conflict, so ipconfig /all on Server4 will show its configured static address,
172.16.1.1 (which incidentally also collides with Segment1 ' s gateway address, a separate misconfiguration), not an APIPA address.
NEW QUESTION # 367
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. You implement a central store. You create a new Group Policy Object (GPO) named GPO1. When you attempt to edit GPO1, you see that the " Administrative Templates: Policy definitions (ADMX files) retrieved from the central store " node shows only two settings (far fewer than the normal full set of Administrative Template settings). You need to ensure that all settings are available. Solution: You copy the contents of the C:
\Windows\PolicyDefinitions folder to the central store. Does this meet the goal?
Group Policy Management Editor showing limited Administrative Templates settings
Answer: A
Explanation:
The documented root cause of only a couple of Administrative Template settings appearing is that the Central Store ' s PolicyDefinitions folder currently holds only a small, incomplete set of custom ADMX/ADML files
-- the full default set of Windows ADMX/ADML files (covering the normal complete range of Administrative Template settings) was never copied into it. Microsoft ' s own troubleshooting guidance for the Central Store specifically documents the fix as populating the store with the complete ADMX/ADML file set (including the appropriate language subfolder, such as en-US) sourced from a client machine ' s local C:
\Windows\PolicyDefinitions folder, merging in any needed custom templates rather than leaving the store with only a partial set. Copying the contents of the local C:\Windows\PolicyDefinitions folder into the Central Store does exactly this: it adds the full default set of ADMX/ADML files that had been missing, so that when any administrator subsequently edits GPO1 (or any other GPO) from a machine pointed at the Central Store, the Group Policy Management Editor now finds and displays the complete range of Administrative Template settings, not just the couple of custom entries that existed before. Best practice is to source this copy from an up-to-date, current-OS machine to avoid missing newer template definitions, but as a general action this directly and correctly addresses the documented root cause. Therefore, this solution meets the goal.
NEW QUESTION # 368
You have an Azure virtual machine named VM1 that runs Windows Server. You perform the following actions on VM1: create a folder named Folder1 on volume C; create a folder named Folder2 on volume D; add a new data disk to VM1 and create a new volume that is assigned drive letter E; install an app named App1 on volume E. You plan to resize VM1. Which objects will be present after you resize VM1?
Answer: C
Explanation:
Resizing an Azure virtual machine only changes its compute size (SKU) - the number of vCPUs, amount of memory, and supported features - and requires the VM to be stopped and restarted on new host hardware. It does not detach, reformat, or otherwise touch any of the VM ' s managed disks, whether that is the OS disk (volume C) or any attached data disks (volume D, and the newly added disk providing volume E). Because resizing never modifies disk content, Folder1 on volume C, Folder2 on volume D, the E volume itself, and App1 installed on that E volume are all untouched by the operation and remain exactly as they were. The only thing that can be lost across a resize is data held on a VM ' s temporary (ephemeral) local disk, which is not involved in this scenario since Folder1, Folder2, and App1 all live on persistent managed-disk volumes (C, D, and E), not on temporary storage. There is no mechanism by which resizing would selectively remove some folders or the installed app while preserving others, which rules out every option that keeps only a partial list.
Therefore, all four objects - Folder1, Folder2, App1, and volume E - are present after the resize.
NEW QUESTION # 369
......
Once you purchase our windows software of the AZ-802 training engine, you can enjoy unrestricted downloading and installation of our AZ-802 study guide. You need to reserve our installation packages of our AZ-802 learning guide in your flash disks. Then you can go to everywhere without carrying your computers. For it also supports the offline practice. And the best advantage of the software version is that it can simulate the real exam.
AZ-802 Exam Revision Plan: https://www.lead1pass.com/Microsoft/AZ-802-practice-exam-dumps.html