Microsoft AZ-802 ist eine der wichtigsten Zertifizierungsprüfungen. Im ITZert bearbeiten die IT-Experten durch ihre langjährige Erfahrungen und professionellen IT-Know-how Lernmaterialien, um den Kandidaten zu helfen, die AZ-802 Zertifizierung erfolgreich zu bestehen. Mit den Lernmaterialien von ITZert können Sie 100% die Microsoft AZ-802 Prüfung bestehen. Außerdem bieten wir Ihnen auch einen einjährigen kostenlosen Update-Service.
| Section | Objectives |
|---|---|
| Topic 1: Monitoring and troubleshooting | - System monitoring
|
| Topic 2: Secure Windows Server hybrid infrastructures | - Identity and access management
|
| Topic 3: Implement and manage high availability | - Load balancing and redundancy
|
| Topic 4: Disaster recovery and migration | - Backup and restore
|
| Topic 5: Networking and storage infrastructure | - Storage management
|
| Topic 6: Manage hybrid compute and virtualization | - Containers
|
Möchten Sie die nur mit die Hälfte Zeit und Energie bestehen? Dann wählen Sie ITZert. Nach mehrjährigen Bemühungen ist die Bestehensquote von der Webseite ITZert in der ganzen Welt am höchsten. Wenn Sie die Genauigkeit der Fragenkataloge zur Microsoft AZ-802 Zertifizierungsprüfung aus ITZert prüfen möchten, können Sie ein paar Exam Fragen auf der Webseite ITZert herunterladen, damit bastätigen Sie Ihre Wahl.
277. Frage
You have a server named Server1 that runs Windows Server and contains a file share named Share1. You need to prevent users from storing MP4 files in Share1. The solution must ensure that the users can store other types of files in the share. What should you configure on Server1?
Antwort: A
Begründung:
File screens, a feature of File Server Resource Manager (FSRM), are specifically designed to control the types of files that users can save into a given folder or share by matching against file screen templates or groups defined by file extension (a file group such as " Video Files " would include .mp4, .avi, .mov, and so on). An active file screen set to block a particular file group prevents any file matching that extension pattern from being saved into the screened folder, while allowing all other file types to be saved normally -- exactly matching the requirement to block only MP4 files while still permitting other file types in Share1. File Management Tasks, also part of FSRM, automate actions (such as file expiration or custom commands) against files matching a condition on a schedule; they are used for lifecycle/cleanup automation, not for actively blocking a file type from being written in the first place. NTFS Quotas control the total amount of storage space a user or folder can consume, with no awareness of file type or extension, so they cannot selectively block one file type while allowing others. NTFS permissions control access (read, write, modify, and so on) to files and folders based on security principals, not based on the file ' s type or extension, so they cannot be used to block only .mp4 files. Because the requirement is specifically to block one file type by extension while permitting all others, file screens are the correct FSRM feature to configure on Server1.
278. Frage
You have on-premises Windows devices. You have an Azure subscription that contains a virtual network named VNet1. You need to create a Site-to-Site (S2S) VPN between the on-premises network and VNet1.
Which three resources should you create? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Antwort: A,B,C
Begründung:
A Site-to-Site VPN in Azure requires three specific resources working together: a virtual network gateway, which is the actual Azure-side VPN gateway deployed into a dedicated gateway subnet of VNet1 and terminates the VPN tunnel from the Azure side; a local network gateway, which is an Azure resource representing the on-premises side of the connection -- it records the on-premises VPN device ' s public IP address and the on-premises address space(s) that need to be reachable through the tunnel; and a VPN connection resource, which ties the virtual network gateway and the local network gateway together with a shared key (or certificate-based configuration) to actually establish and describe the IPsec/IKE tunnel between them. A network security group filters traffic on subnets or NICs and plays no role in establishing the VPN tunnel itself. An Azure NAT gateway provides outbound-only source NAT for a subnet and is unrelated to Site-to-Site VPN connectivity. An Azure Route Server enables dynamic route exchange with network virtual appliances via BGP and is not a required component for a basic S2S VPN setup. Therefore, the three resources required are the VPN connection, the virtual network gateway, and the local network gateway.
279. Frage
You need to implement the planned change for the Azure DNS Private Resolver. Which private DNS zones can you use for name resolution?
Antwort: C
Begründung:
Private1 is deployed with its inbound endpoint in VNet1, and an Azure DNS Private Resolver inbound endpoint can resolve only private DNS zones that are virtual-network-linked to the same virtual network where the resolver itself sits; it cannot resolve a zone just because it exists in the same subscription, or because that zone happens to be linked to a different, unrelated virtual network. Per the private DNS zone table, Zone1.com is linked to VNet1, Zone2.com is linked to VNet2, and Zone3.com has no virtual network link at all. Because Private1 ' s inbound endpoint lives in VNet1, only Zone1.com, the zone actually linked to VNet1, can be resolved through it. Zone2.com cannot be resolved by Private1 because it is linked only to VNet2, a separate virtual network with no stated peering or additional resolver configuration connecting it to VNet1; and Zone3.com cannot be resolved by any resolver in any virtual network because it has no virtual network link whatsoever, meaning no virtual network can consult it through the normal Azure-provided DNS resolution path. Extending resolution to Zone2.com would require either a separate resolver deployed in VNet2, or peering combined with a forwarding ruleset and outbound endpoint, neither of which is described as being configured here. Therefore only Zone1.com can currently be resolved.
280. Frage
Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains the users shown in the following table: User1 (Enterprise Admins group), User2 (Domain Users group). You have a workgroup server named Server1 that runs Windows Server and contains the local users shown in the following table: User3 (Administrators group), User4 (Users group). You promote Server1 to the first domain controller in a new child domain named east.contoso.com. Which users can sign in to Server1 locally?
Forest user group membership table
Server1 local user group membership table
Antwort: D
Begründung:
When a standalone (workgroup) server is promoted to become the FIRST domain controller of a brand-new domain, its existing local SAM accounts are not simply discarded as they would be if the server instead joined an already-existing domain; with no pre-existing domain database to join, the local SAM becomes the seed for the new domain ' s Active Directory database, and local user accounts are converted into domain accounts, carrying forward their prior local group memberships in equivalent form. Because User3 was a member of the local Administrators group before promotion, User3 becomes administrator-equivalent in the new east.
contoso.com domain, granting the default " Allow log on locally " right on that domain ' s own domain controllers. User4, previously only in the local Users group, becomes an ordinary domain user with no special local-logon right on a DC. Domain controllers, by default, grant " Allow log on locally " only to privileged groups such as Administrators, Account Operators, Backup Operators, Print Operators, and Server Operators
-- not to ordinary Domain Users. User1, a member of the forest-wide Enterprise Admins group, is administrator-equivalent everywhere in the forest, including the new DC, so User1 can log on locally. User2, a plain Domain Users member, has no such right. Therefore, only User1 and User3 can sign in to Server1 locally.
281. Frage
Your network contains a multi-site Active Directory Domain Services (AD DS) forest. Each Active Directory site is connected by using manually configured site links and automatically generated connections. You need to minimize the convergence time for changes to Active Directory. What should you do?
Antwort: A
Begründung:
By default, replication between sites waits for a scheduled interval and does not immediately notify partner domain controllers when a change occurs, which is the main source of intersite convergence delay; intra-site replication, by contrast, uses change notification and typically converges within seconds. The site link ' s options attribute contains a bit flag that controls whether intersite change notification is enabled for that link; turning it on causes a source domain controller to notify its intersite replication partners of a change almost immediately, similar to intra-site behavior, rather than waiting for the next scheduled replication cycle, which directly minimizes convergence time. Modifying site link costs changes which path the Knowledge Consistency Checker prefers when multiple routes exist, affecting topology efficiency but not how quickly a given link propagates a change once it ' s used. Modifying the replication schedule adjusts the windows during which replication over a link is permitted to occur at all, and while a more frequent schedule can reduce worst-case latency somewhat, it does not eliminate the fundamental polling-interval delay the way change notification does. A site link bridge only affects whether transitivity is assumed between site links for cost calculation and has no bearing on notification behavior. Enabling change notification via the options attribute is therefore the correct answer.
282. Frage
......
Nun ist die Microsoft AZ-802 Zertifizierungsprüfung eine beliebte Prüfung in der IT-Branche. Viele IT-Fachleute wollen das Microsoft AZ-802 Zertfikat erhalten. So ist die Microsoft AZ-802 Zertifizierungsprüfung eine beliebte Prüfung. Das Microsoft AZ-802 Zertfikat ist sehr hilfreich, um Ihre Arbeit in der IT-Industrie zu verbessern und Ihr Gehalt zu erhöhen und Ihrem Leben eine zuverlässige Garantie zu geben.
AZ-802 PDF Demo: https://www.itzert.com/AZ-802_valid-braindumps.html