The Microsoft AZ-802 certification exam is one of the best credentials in the modern Microsoft world. The Administering Windows Server (AZ-802) certification offers a unique opportunity for beginners or experienced professionals to demonstrate their expertise and knowledge with an industry-recognized certificate. With the Administering Windows Server (AZ-802) exam dumps, you can not only validate your skill set but also get solid proof of your proven expertise and knowledge.
| Section | Objectives |
|---|---|
| Topic 1: Monitoring and troubleshooting | - Diagnostics
|
| Topic 2: Manage hybrid compute and virtualization | - Virtual machines
|
| Topic 3: Secure Windows Server hybrid infrastructures | - Security configuration
|
| Topic 4: Disaster recovery and migration | - Migration scenarios
|
| Topic 5: Networking and storage infrastructure | - Storage management
|
| Topic 6: Implement and manage high availability | - Failover clustering
|
You will receive a registration code and download instructions via email. We will be happy to assist you with any questions regarding our products. Our Administering Windows Server (AZ-802) practice exam software helps to prepare applicants to practice time management, problem-solving, and all other tasks on the standardized exam and lets them check their scores. The Administering Windows Server (AZ-802) practice test results help students to evaluate their performance and determine their readiness without difficulty.
NEW QUESTION # 28
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two servers named Server1 and Server2 that run Windows Server. You need to ensure that you can use the Computer Management console to manage Server2. The solution must use the principle of least privilege.
Which two Windows Defender Firewall with Advanced Security rules should you enable on Server2? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Answer: A,D
Explanation:
Establishing a remote Computer Management console session relies on DCOM to make the initial connection to the target computer, so the COM+ Network Access (DCOM-In) firewall rule must be enabled on Server2 to allow that initial DCOM connection through. Separately, enabling the full Remote Event Log Management rule group -- which opens the RPC endpoint mapper port, a fixed RPC port, and the associated named pipe -- is documented by Microsoft as sufficient to let most of the Computer Management console ' s sub-snap-ins (Shared Folders, Local Users and Groups, Device Manager, and others) connect successfully even though they lack a dedicated firewall rule group of their own. Enabling only these two rule groups therefore lets the console connect end-to-end while opening the fewest possible firewall rules, consistent with least privilege, rather than enabling broader rule groups such as the full Windows Management Instrumentation (WMI) group or the full COM+ Remote Administration group, both of which open considerably more surface area than is actually needed for this task. Therefore, the COM+ Network Access (DCOM-In) rule and the Remote Event Log Management rule group are the two correct answers.
NEW QUESTION # 29
You have two servers named Server1 and Server2 that run Windows Server and have the Hyper-V role installed. You plan to deploy Hyper-V Replica between Server1 and Server2. The deployment will use certificate-based authentication. You need to configure the prerequisites for the Hyper-V Replica deployment.
Which two actions should you perform on each server? Each correct answer presents part of the solution.
Answer: C,E
Explanation:
Certificate-based (mutual-TLS) authentication for Hyper-V Replica listens for replication traffic over HTTPS, so each host must have the Hyper-V Replica HTTPS Listener (TCP-In) firewall rule enabled to accept incoming connections; the HTTP listener rule is only used for Kerberos-based authentication and doesn ' t apply here. Each host also needs a valid computer (machine) certificate installed - one that has both Server and Client Authentication EKUs, an associated private key, a subject name matching the host ' s FQDN, and a chain to a trusted root - because this is what replaces Active Directory Kerberos trust between the primary and Replica servers. A user certificate would not satisfy the machine-to-machine authentication that Hyper-V Replica performs, and creating a self-signed certificate on each host independently would not establish the shared trust chain both hosts need to validate each other ' s certificate during the replication handshake. Once both prerequisites are in place on Server1 and Server2, the Enable-VMReplication and Set-VMHost - HttpsCertificateThumbprint cmdlets (or the equivalent Hyper-V Manager wizard) can reference the installed computer certificate to complete the certificate-based replication setup.
NEW QUESTION # 30
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the servers shown in the following table: Server1 (DFS Namespaces), Server2 (DFS Replication), Server3 (DFS Namespaces, DFS Replication), Server4 (None). You need to create a Distributed File System (DFS) namespace that will contain the following: * A domain-based namespace named \\contoso.
com\Public * A folder named Finance Which servers can you configure as folder targets for the Finance folder?
Server DFS role table
Answer: A
Explanation:
A DFS folder target is simply the UNC path to an actual shared folder that holds the content a DFS folder should point to; adding a folder target only requires that the target server be hosting a standard SMB file share reachable at that UNC path -- it does not require the target server to have the DFS Namespaces role service or the DFS Replication role service installed at all. Those DFS role services are needed for functions such as hosting/managing namespace servers (DFS Namespaces) or replicating folder content between multiple targets (DFS Replication), but a plain file server with no DFS roles installed whatsoever can still serve perfectly well as a folder target, as long as it exposes a shared folder for the Finance data. Given this, the roles listed for Server1 (DFS Namespaces), Server2 (DFS Replication), Server3 (both), and Server4 (none) are all, in effect, irrelevant to eligibility as a folder target -- none of them are disqualified by lacking a particular DFS role, including Server4, which has no DFS role installed at all but can still host a plain SMB share. Therefore, any of the four servers can be configured as a folder target for the Finance folder, provided each has (or is given) an appropriate shared folder, making the correct answer Server1, Server2, Server3, and Server4.
NEW QUESTION # 31
You have three servers named Host1, Host2, and VM1 that run Windows Server. Host1 and Host2 have the Hyper-V server role installed. VM1 is a virtual machine hosted on Host1. You configure VM1 to replicate to Host2 by using Hyper-V Replica. Which types of failovers can you perform on VM1 on each host? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
VM1 on Host1: Planned Failover only. VM1 on Host2: Test Failover and Failover only.
Hyper-V Replica exposes different failover actions depending on whether an administrator is working from the primary host or the replica host. On Host1, the primary server where VM1 actually runs, only a Planned Failover can be initiated, because a planned failover requires the source VM to be shut down cleanly and its final changes replicated before control transfers to the replica -- an operation that is only meaningful and available from the currently-running primary copy; ordinary (unplanned) Failover and Test Failover are actions performed against a replica virtual machine, not the primary, so neither is available on Host1. On Host2, the replica server, the available actions are Test Failover, which brings up an isolated, temporary copy of the replica VM for verification purposes without disrupting ongoing replication, and (unplanned) Failover, used to bring the replica online for real when the primary is unreachable; Planned Failover is not offered on Host2 because that operation is scoped specifically to the currently-running primary copy on Host1, not to the passive replica. This split of available actions by role is a deliberate safeguard against accidentally initiating a graceful failover from what is meant to be a passive, standby replica.
NEW QUESTION # 32
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table. Server1 contains the printers shown in the following table. You plan to use Print Management to migrate the printers to Server2. Which printers can be migrated and retain their current configuration? (Exhibits: servers table and printers table.)
Servers
Printers on Server1
Answer: A
Explanation:
The Print Management migration wizard, built on printbrm.exe, documents that local bus printers, meaning printers connected through ports such as LPT or a locally attached USB-style port, are shown and processed during the backup step of the migration but are not successfully migrated to a working configuration on the destination server, because the physical port itself does not exist or map meaningfully on Server2. Printer1, connected through LPT1, and Printer2, connected through the similarly local, non-network Port1, both fall into this unsupported local-bus category and cannot be relied on to retain a working configuration after the move to Server2. Printer3, connected through a standard TCP/IP port pointing at a specific network address, is a fully network-addressable print queue whose port definition is meaningful on any print server, including Server2, so it migrates cleanly with its driver, queue settings, and configuration intact. Printer4, which uses the built-in FILE: port to print to a file rather than to physical hardware, is a virtual, hardware-independent port that is present identically on every Windows print server, so it too migrates without issue. Because printer drivers, queue settings, and port/configuration details only transfer meaningfully for ports that exist and behave identically on the target server, only Printer3 and Printer4 retain their current configuration after migrating to Server2.
NEW QUESTION # 33
......
Passing the AZ-802 exam means you might get the chance of higher salary, greater social state and satisfying promotion chance. Once your professional AZ-802 ability is acknowledged by authority, you master the rapidly developing information technology. With so many advantages, why donβt you choose our reliable AZ-802 actual exam guide, for broader future and better life? So our high efficiency AZ-802 Torrent question can be your best study partner. Only 20 to 30 hours study can help you acquire proficiency in the exam. And during preparing for AZ-802 exam you can demonstrate your skills flexibly with your learning experiences.
Reliable AZ-802 Exam Pattern: https://www.exam4docs.com/AZ-802-study-questions.html