We all know that it is not easy to prepare the AZ-802 exam; there are thousands of candidates to compete with you. So it is a fierce competition. If you want to win out in the exam, you need the professional study materials to guide you. Our AZ-802 Study Materials are confident to ensure that you will acquire the certificate. And the pass rate of our AZ-802 practice guide is high to 98% to 100%.
| Section | Objectives |
|---|---|
| Implement and manage high availability | - Failover clustering
|
| Monitoring and troubleshooting | - System monitoring
|
| Manage hybrid compute and virtualization | - Virtual machines
|
| Secure Windows Server hybrid infrastructures | - Security configuration
|
| Disaster recovery and migration | - Backup and restore
|
| Networking and storage infrastructure | - Networking
|
Our AZ-802 real exam applies to all types of candidates. Buying a set of the AZ-802 learning materials is not difficult, but it is difficult to buy one that is suitable for you. For example, some learning materials can really help students get high scores, but they usually require users to have a lot of study time, which is difficult for office workers. With our AZ-802 study questions for 20 to 30 hours, then you can be confident to pass the exam for sure.
NEW QUESTION # 263
You have a Storage Spaces Direct cluster named Cluster1 that contains multiple nodes.
You have a firmware update for the hard disks attached to each node.
You create a configuration file named FileLxm1 for the update.
You need to automate the rollout of the firmware update to the nodes of Cluster1. The solution must minimize downtime of the workloads hosted in Cluster1.
How should you complete the PowerShell commands? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Exhibit
Answer:
Explanation:
Explanation:
Automating a Storage Spaces Direct firmware or driver rollout is done by pointing the clustered storage subsystem at a components manifest file that describes the supported firmware/driver versions, then letting Storage Spaces Direct orchestrate the update across nodes with the workload kept online. Get- StorageSubSystem retrieves the clustered storage subsystem object for Cluster1, and piping it to Set- StorageSetting with the System.Storage.SupportedComponents.Document parameter registers File1.xml as that manifest, which is the documented mechanism for automating a rolling, low-downtime firmware update.
The other cmdlets shown (Get-StorageFirmwareInformation, Get-StorageEnclosureVendorData, Set- StorageProvider, Set-StorageHealthSetting) either only report information or configure unrelated settings and would not register the manifest or trigger the orchestrated rollout that keeps virtual machines and other workloads running while each node ' s disks are updated in turn. Once the manifest is registered, Storage Spaces Direct automatically sequences the firmware update node by node, draining and updating one node ' s drives at a time so cluster resources continue to run on the remaining nodes throughout the rollout.
NEW QUESTION # 264
Your network contains two Active Directory Domain Services (AD DS) forests named contoso.com and fabrikam.com. A two-way forest trust exists between the forests. Each forest contains a single domain. The domains contain the servers shown in the following table.
You need to configure resources based constrained delegation so that the users In contoso.com can use Windows Admin Center on Server) to connect to Server? How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
In the Administering Windows Server Hybrid Core Infrastructure guidance for Windows Admin Center (WAC) and Kerberos delegation, resource-based constrained delegation (RBCD) is configured on the resource's computer account , not on the client/gateway. The documentation explains that "resource-based constrained delegation is applied to the target service account; the target's msDS- AllowedToActOnBehalfOfOtherIdentity attribute contains the security principals (computers or service accounts) that are permitted to act on behalf of users." It further clarifies that "this model supports cross- domain and cross-forest scenarios when a trust exists; you specify the front-end computer (for example, a WAC gateway) from the trusted forest as an allowed principal on the resource computer in its own domain." For WAC, the gateway (Server1 in contoso.com ) must be allowed to delegate to the managed node (Server2 in fabrikam.com ). The study materials show the exact PowerShell interface: "Use Set-ADComputer with - PrincipalsAllowedToDelegateToAccount to populate the resource's allowed-to-act list." Therefore, the Identity parameter must reference the resource computer account (Server2 in fabrikam.com), and the PrincipalsAllowedToDelegateToAccount parameter must reference the gateway computer account (Server1 in contoso.com).
Hence the correct command is:
Set-ADComputer -Identity (Get-ADComputer server2.fabrikam.com) -
PrincipalsAllowedToDelegateToAccount (Get-ADComputer server1.contoso.com)
NEW QUESTION # 265
You have two Azure virtual networks named Vnet1 and Vnet2. You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN. You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit; Vnet2 uses the remote gateway. You discover that Client1 cannot communicate with Vnet2. You need to ensure that Client1 can communicate with Vnet2. Solution: You enable BGP on the gateway of Vnet1. Does this meet the goal?
Answer: A
Explanation:
Enabling BGP on the Vnet1 gateway does not address why Client1 cannot reach Vnet2. Route propagation to a P2S client over a peered virtual network with gateway transit already occurs once the peering and gateway- transit settings are configured; BGP is only needed for more advanced dynamic-routing scenarios, such as multi-hop transitive routing or exchanging routes with an on-premises network, not for a basic P2S client to learn routes into a peered virtual network. The actual missing step in this scenario is that Client1 ' s VPN client configuration package must be re-downloaded and reinstalled so that the client picks up the new routes that became available once the peering and gateway transit were configured. Because Client1 was already connected before the peering was established, its existing configuration package does not contain the routing information needed to reach Vnet2, and no amount of gateway-side BGP configuration changes that fact for an already-provisioned client package. Since enabling BGP does not resolve the underlying cause of the connectivity failure, this solution does not meet the stated goal.
NEW QUESTION # 266
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. You need to identify which server is the PDC emulator for the domain. Solution: From Active Directory Sites and Services, you right-click Default-First- Site-Name in the console tree, and then select Properties. Does this meet the goal?
Answer: A
Explanation:
Active Directory Sites and Services is the console used to manage physical network topology objects - sites, subnets, site links, and the NTDS Settings/connection objects on individual server objects - and it has no interface for viewing or transferring any of the five FSMO roles. Right-clicking a site object such as Default- First-Site-Name and opening Properties surfaces only site-level configuration, such as the intersite topology generator ' s settings and general site description/location metadata; it does not display operations master role holders anywhere in that dialog. The domain-wide roles (PDC Emulator, RID Master, Infrastructure Master) are surfaced through Active Directory Users and Computers by right-clicking the domain and choosing Operations Masters, while the forest-wide roles (Schema Master, Domain Naming Master) are surfaced through the Active Directory Schema snap-in and Active Directory Domains and Trusts, respectively; command-line tools such as netdom query fsmo or ntdsutil ' s roles context provide the same information without a GUI. Because Sites and Services Properties for a site object exposes none of that role information, the proposed action cannot reveal which server holds the PDC Emulator role, and the solution fails to meet the stated goal.
NEW QUESTION # 267
You need to ensure that VM3 meets the technical requirement. What should you install first?
Answer: A
Explanation:
The requirement is that VMs must be configured to enable per-folder quotas. VM3 already has the File and Storage Services role installed, but native NTFS quotas only apply per volume and per user; they cannot restrict the amount of data stored inside an individual folder. File Server Resource Manager (FSRM) is the Windows Server feature that adds true folder-level quota management, letting an administrator define hard or soft quota limits (and quota templates) scoped to specific folders rather than entire volumes, which is exactly the granularity the requirement calls for. Enhanced Storage is an unrelated feature that supports certain storage devices with enhanced storage access (IEEE 1667), Windows Standards-Based Storage Management provides SMI-S/WMI-based management of storage arrays and has nothing to do with folder-level quotas, and the iSNS Server service is used for discovery of iSCSI targets and initiators on a network, also unrelated to quota enforcement. None of those three alternatives provide any per-folder capacity restriction capability, so installing FSRM is the necessary first step before per-folder quotas can be configured on VM3.
Topic 4, Case Study 4: Fabrikam, Inc.
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
Overview: Fabrikam, Inc. is a manufacturing company that has a main office in Chicago and a branch office in Paris.
Existing Environment -- Identity Infrastructure: Fabrikam has an Active Directory Domain Services (AD DS) forest that syncs with a Microsoft Entra ID tenant. The AD DS forest contains two domains named corp.
fabrikam.com and europe.fabrikam.com.
Chicago Office On-Premises Servers: The office in Chicago contains on-premises servers that run Windows Server 2016 as shown in the following table.
Chicago office on-premises servers
All the servers in the Chicago office are in the corp.fabrikam.com domain.
All the virtual machines in the Chicago office are hosted on HV1 and HV2. HV1 and HV2 are nodes in a failover cluster named Cluster1.
WEB1 and WEB2 run an Internet Information Services (IIS) website. Internet users connect to the website by using a URL of https://www.fabrikam.com.
All the users in the Chicago office run an application that connects to a UNC path of \\Fileserver1\Data.
Paris On-Premises Servers: The office in Paris contains a physical server named dc2.europe.fabrikam.com that runs Windows Server 2016 and is a domain controller for the europe.fabrikam.com domain.
Network Infrastructure: The networks in both the Chicago and Paris offices have local internet connections.
The Chicago and Paris offices are connected by using VPN connections. The client computers in the Chicago office get IP addresses from DHCP1.
Security Risks: Fabrikam identifies the following security risks:
-- Some accounts connect to AD DS resources by using insecure protocols such as NTLMv1, SMB1, and unsigned LDAP.
-- Servers have Windows Defender Firewall enabled. Server administrators sometimes modify firewall rules and allow risky connections.
Requirements -- Security Requirements: Fabrikam identifies the following security requirements:
-- Prevent server administrators from configuring Windows Defender Firewall rules.
-- Encrypt all the data disks on the servers by using BitLocker Drive Encryption (BitLocker).
-- Ensure that only authorized applications can be installed or run on the servers in the forest.
-- Implement Microsoft Sentinel as a reporting solution to identify all connections to the domain controllers that use insecure protocols.
On-Premises Migration Plan: Fabrikam plans to migrate all the existing servers and identifies the following migration requirements:
-- Move the APP1 and APP2 virtual machines in the Chicago office to a new Hyper-V failover cluster named Cluster2 that will run Windows Server 2022. Cluster2 will contain two new nodes named HV3 and HV4. All virtual machine files will be stored on a Cluster Shared Volume (CSV).
-- Migrate Archive1 to a new failover cluster named Cluster3 that will run Windows Server 2022. Cluster3 will contain two physical nodes named Node1 and Node2. The file shares on Cluster3 will be a failover cluster role in active-passive mode.
-- Migrate all users, groups, and client computers from europe.fabrikam.com to corp.fabrikam.com. User accounts will retain their existing password.
-- Migrate the data share from Fileserver1 to a new server named Fileserver2 that will run Windows Server
2022. After the migration, the data share must be accessible by using the existing UNC path.
Azure Migration Plan: Fabrikam plans to migrate some resources to Azure and identifies the following migration requirements:
-- Create an Azure subscription named Sub1 and an Azure virtual network named Vnet1. Use ExpressRoute to connect the Paris and Chicago offices to Vnet1.
-- License all servers for Microsoft Defender for Servers.
-- Migrate APP3 and APP4 to Azure.
-- Migrate the www.fabrikam.com website to an Azure App Service web app named WebApp1, then decommission WEB1 and WEB2.
DHCP Migration Plan: Fabrikam plans to replace DHCP1 with a new server named DHCP2 and identifies the following migration requirements:
-- Ensure that DHCP2 provides the same IP addresses that are currently available from DHCP1.
-- Prevent DHCP1 from servicing clients once services are enabled on DHCP2.
-- Ensure that the existing leases and reservations are migrated.
NEW QUESTION # 268
......
Our AZ-802 exam Braindumps are available in PDF, software, and online three modes, which allowing you to switch learning materials on paper, on your phone or on your computer, and to study anywhere and anytime. And in any version of AZ-802 practice materials, the number of downloads and the number of people used at the same time are not limited. You can practice repeatedly for the same set of AZ-802 Questions and continue to consolidate important knowledge points.
AZ-802 Interactive Practice Exam: https://www.preppdf.com/Microsoft/AZ-802-prepaway-exam-dumps.html