We here guarantee that we will never sell the personal information of our candidates. There is no need for you to worry about the individual privacy under our rigorous privacy AZ-802 actual test guide. As regards purchasing, our website and AZ-802 study files are absolutely safe and free of virus. For further consideration we will provide professional IT personnel to guide your installation and the use of our AZ-802 Exam Questions remotely. So you can buy our AZ-802 actual test guide without any misgivings. If you have any questions, please you contact us online through the email.
| Section | Objectives |
|---|---|
| Hybrid infrastructure management | - Monitoring and update management
|
| Networking and high availability | - Networking infrastructure
|
| Secure and manage Windows Server environments | - Identity and access management
|
| Compute, storage, and virtualization | - Virtual machines and containers
|
>> Interactive AZ-802 Practice Exam <<
TestPassed has formulated AZ-802 PDF questions for the convenience of Microsoft AZ-802 test takers. This format follows the content of the Microsoft AZ-802 examination. You can read Microsoft AZ-802 Exam Questions without the limitations of time and place. There is also a feature to print out Microsoft AZ-802 exam questions.
NEW QUESTION # 159
You have an Azure subscription. The subscription contains 40 virtual machines that run Windows Server and are in a resource group named RG1. The virtual machines restart every Sunday from 2:00 AM to 4:00 AM during maintenance. The restarts trigger metric alert rules that send email and SMS notifications. You need to prevent notifications during the maintenance window without changing the alert rule conditions. The solution must apply to all the alerts from RG1 and allow notifications outside the maintenance window. What should you configure?
Answer: A
Explanation:
An alert processing rule is the Azure Monitor feature purpose-built to suppress notifications for a defined time window without touching the underlying alert rules that detect the condition: it can be scoped to a resource group such as RG1 so it automatically covers every alert fired by any resource within it, including alerts added later, and it can be configured with a recurring schedule, such as every Sunday from 2:00 AM to 4:00 AM, so notifications are suppressed only during that window and resume automatically outside it, exactly matching both stated requirements. Creating a new metric alert rule does nothing to stop the existing rules from firing and notifying, since the restarts still trigger the original conditions; it would only add another rule alongside the ones already causing noise. A dynamic threshold changes how a metric alert rule calculates its own trigger condition based on historical patterns, which is itself a change to the alert rule ' s condition, something the requirement explicitly disallows, and dynamic thresholds are not guaranteed to adapt in one week to a new, recurring maintenance pattern. A service health alert rule monitors Azure platform incidents and planned maintenance to Azure services themselves, not the customer ' s own virtual machine restarts, and would not intercept or suppress the metric alert notifications already configured for RG1 ' s VMs. An alert processing rule is therefore the only option that satisfies both the scope and the non-destructive, schedule- based suppression requirements.
NEW QUESTION # 160
You have an Azure virtual machine named VM1 that runs Windows Server. You plan to deploy a new line-of- business (LOB) application to VM1. You need to ensure that the application can create child processes. What should you configure on VM1?
Answer: C
Explanation:
Exploit protection, managed through the Windows Security app ' s App & browser control page (or via Group Policy/PowerShell), includes a per-application mitigation setting called " Don ' t allow child processes, " which some baseline security configurations or third-party hardening templates enable by default to block a common living-off-the-land attack technique in which a compromised process spawns a malicious child process. If this mitigation is enabled and a legitimate line-of-business application legitimately needs to spawn a child process -- for example, to launch a helper utility, a reporting tool, or an embedded browser control -- an administrator must adjust that specific application ' s Exploit protection mitigation settings to exempt it from the child-process restriction. Microsoft Defender Credential Guard protects credential material rather than controlling process creation, Microsoft Defender Application Control enforces which executables and scripts are allowed to run at all rather than governing child-process spawning by an already-permitted application, and Microsoft Defender SmartScreen screens downloaded files and URLs for reputation rather than controlling process behavior. Therefore, Exploit protection is the setting to configure on VM1.
NEW QUESTION # 161
You have a server named Server1 that runs Windows Server. Server1 is configured to encrypt all incoming traffic by using a connection security rule. You need to ensure that Server1 can respond to the unencrypted tracert commands initiated from computers on the same network. What should you do from Windows Defender Firewall with Advanced Security?
Answer: D
Explanation:
When a connection security rule requires all incoming traffic to be encrypted via IPsec, protocols such as ICMP that are not themselves covered by an IPsec-aware connection security rule would otherwise be dropped by that encryption requirement, since they cannot participate in the IPsec negotiation the rule demands. Windows Defender Firewall with Advanced Security ' s IPsec Settings include an " IPsec exemptions " configuration that lets an administrator exclude specific traffic -- most commonly ICMP -- from the IPsec authentication and encryption requirement entirely, allowing Server1 to respond to unencrypted diagnostic traffic such as tracert (which relies on ICMP Echo/Time Exceeded messages) while every other type of traffic continues to be required to use encryption. Configuring general IPsec defaults changes the default algorithms and key exchange settings used for IPsec but does not exempt any traffic from the encryption requirement. Turning off the Private profile ' s firewall state would disable firewall protection broadly and is neither targeted nor appropriate. Creating a custom outbound rule for ICMPv4 addresses outbound traffic, not the inbound tracert responses the requirement is actually about. Therefore, configuring IPsec exemptions is the correct action.
NEW QUESTION # 162
You have an Azure virtual machine named VM1 that runs Windows Server. You need to ensure that administrators request access to VM1 before establishing a Remote Desktop connection. What should you configure?
Answer: B
Explanation:
Microsoft Defender for Cloud provides a Just-in-Time (JIT) VM access feature that is designed exactly for this scenario: instead of leaving management ports such as RDP (3389) or SSH (22) permanently open on a VM ' s network security group, JIT access locks those ports down by default and requires an administrator to explicitly request access for a limited time window and from a specified source IP range before Defender for Cloud temporarily opens an NSG rule to allow the connection; the rule is automatically reverted once the approved time window expires. This directly satisfies the requirement that administrators must request access to VM1 before establishing an RDP session. Azure Front Door is a global HTTP(S) load-balancing and application-delivery service for web workloads and has no concept of just-in-time access requests for RDP.
Azure AD (Microsoft Entra ID) Privileged Identity Management (PIM) provides just-in-time activation for Azure AD roles and Azure RBAC role assignments (for example, temporarily activating a Contributor role), but it does not gate network-level RDP connectivity to a VM by itself. A network security group (NSG) can restrict or block RDP access by rule, but a static NSG rule alone has no request/approval workflow -- it is the underlying object that JIT access temporarily and automatically modifies. Therefore, configuring Just-in-Time VM access in Microsoft Defender for Cloud is the correct solution.
NEW QUESTION # 163
You are planning the implementation of Cluster2 to support the on-premises migration plan. You need to ensure that the disks on Cluster2 meet the security requirements. In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
1. Add a disk resource to the cluster. 2. Create a Cluster Shared Volume (CSV). 3. Put the disk in maintenance mode. 4. Enable BitLocker on the volume. 5. Update the BitLockerProtectorInfo property of the volume.
BitLocker can only be enabled on a Cluster Shared Volume disk while that disk is taken offline to cluster I/O, so the CSV must exist and be placed into maintenance mode before encryption can be applied. The supported sequence begins by adding the disk resource to the cluster and converting it into a Cluster Shared Volume, since BitLocker-on-CSV support requires the disk to already be a CSV rather than a plain cluster disk. The disk is then put into maintenance mode, which takes it offline to the other cluster nodes so it can be safely encrypted without a node attempting to access it mid-operation. With the CSV disk offline in maintenance mode, BitLocker is enabled on the volume. Finally, the volume ' s BitLockerProtectorInfo property is updated so that Failover Clustering registers the unlock protector, allowing the volume to automatically unlock on every cluster node once maintenance mode ends and the CSV is brought back online. Performing these steps out of order either fails outright -- BitLocker cannot be enabled on a CSV disk that is still online and actively used by the cluster -- or leaves the other cluster nodes unable to bring the encrypted volume back online afterward, since they would lack the registered unlock protector. Therefore, the correct order is: add the disk resource, create the CSV, put the disk in maintenance mode, enable BitLocker, and update BitLockerProtectorInfo.
NEW QUESTION # 164
......
The TestPassed Free Microsoft AZ-802 Sample Questions, allow you to enjoy the process of buying risk-free. This is a version of the exercises, so you can see the quality of the questions, and the value before you decide to buy. We are confident that TestPassed the Microsoft AZ-802 sample enough you satisfied with the product. In order to ensure your rights and interests, TestPassed commitment examination by refund. Our aim is not just to make you pass the exam, we also hope you can become a true IT Certified Professional. Help you get consistent with your level of technology and technical posts, and you can relaxed into the IT white-collar workers to get high salary.
AZ-802 Training For Exam: https://www.testpassed.com/AZ-802-still-valid-exam.html