AZ-802準備資料のガイダンスの下で、さまざまな学生に合わせた試験の焦点を提供し、例と図およびIT専門家を追加することで長くて退屈な参考書を簡素化できるため、より生産的かつ効率的になることができます変更できない問題を回避するために、AZ-802ガイドトレントを毎日更新します。そして、あなたはあなたの日常生活の中で自分自身のために時刻表やto-soリストを設定する方法についてAZ-802研究急流を勉強することができます。したがって、AZ-802学習教材の学習過程で喜びを見つけます。
| Section | Weight | Objectives |
|---|---|---|
| Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments | 20% | - Implement and manage Group Policy Objects - Integrate AD DS with Azure AD and Azure Arc - Manage FSMO roles and replication - Install and configure domain controllers |
| Secure Windows Server on-premises and hybrid infrastructures | 10% | - Implement security baselines and hardening - Configure Windows Defender and audit policies - Manage access control and permissions |
| Manage Windows Servers and workloads in a hybrid environment | 20% | - Implement hybrid identity solutions - Manage updates and patches across hybrid servers - Configure remote management and secure administration - Deploy servers using Windows Admin Center and Azure Arc |
| Manage storage and file services | 15% | - Configure file servers and shares - Implement Storage Spaces and Storage Spaces Direct - Configure data deduplication and replication - Integrate on-premises storage with Azure Storage |
| Implement high availability and disaster recovery | 5% | - Perform server and workload migrations - Configure failover clustering - Monitor and troubleshoot Windows Server environments - Implement backup and recovery solutions - Use Azure Site Recovery for hybrid workloads |
| Implement and manage an on-premises and hybrid networking infrastructure | 15% | - Configure IP addressing, DNS, and DHCP - Secure network traffic in hybrid environments - Configure software-defined networking - Implement hybrid network connectivity |
| Manage virtual machines and containers | 15% | - Deploy and manage containers and Kubernetes on Windows Server - Deploy and manage Hyper-V virtual machines - Configure Azure Arc-enabled servers and VMs |
Fast2testのトレーニング資料はあなたが試験の準備をしている知識をテストできて、一定の時間にあなたのパフォーマンスを評価することもできますから、あなたの成績と弱点を指示して、弱い点を改善して差し上げます。Fast2testのMicrosoftのAZ-802試験トレーニング資料はさまざまなコアロジックのテーマを紹介します。そうしたら知識を習得するだけでなく、色々な技術と科目も理解できます。我々のトレーニング資料は実践の検証に合格したもので、資料の問題集が全面的で、価格が手頃ということを保証します。
質問 # 56
You have an on-premises server that runs Windows Server and has the Web Server (IIS) server role installed.
The server hosts a web app that connects to an on-premises Microsoft SQL Server database. You plan to migrate the web app to an Azure App Services web app. The database will remain on-premises. You need to ensure that the migrated web app can access the database. What should you configure in Azure?
正解：A
解説：
Hybrid Connections in Azure App Service establish an outbound-initiated, TCP-level tunnel from an on- premises network to a specific host and port, which lets a migrated web app running in App Service reach an on-premises resource such as a SQL Server instance without requiring any inbound firewall changes or a full site-to-site VPN. An Azure SQL managed instance would require actually migrating the database into Azure, which this scenario explicitly rules out since the database is staying on-premises. An on-premises data gateway is the connectivity mechanism used by services such as Power BI, Logic Apps, and Power Automate, not by App Service web apps reaching a database directly, and Azure Extended Network addresses extending an on-premises IP address range into Azure for lift-and-shift virtual machine scenarios, which is unrelated to this app-to-database connectivity pattern. Hybrid Connections is the App Service-native feature purpose-built for exactly this need -- letting a cloud-hosted web app reach a specific on-premises endpoint -- so configuring a Hybrid Connection is the correct action.
質問 # 57
You plan to deploy the Azure Monitor agent to 100 on-premises servers that run Windows Server. Which parameters should you provide when you install the agent?
正解：A
解説：
The Azure Monitor Agent cannot be deployed to a non-Azure, on-premises Windows Server until that server has first been onboarded as an Azure Arc-enabled server; the agent is then installed and managed as an Azure Arc VM extension, with its actual data destinations configured afterward through separate Data Collection Rules. For onboarding a large fleet such as 100 on-premises servers at once, Microsoft ' s documented at-scale method is to run the Connected Machine agent installation script non-interactively, authenticating using an Azure service principal ' s client (application) ID and client secret, which avoids requiring 100 separate interactive sign-ins to complete the onboarding. A Log Analytics workspace ID and key were the credentials used by the legacy, now-retired Log Analytics agent, but the current Azure Monitor Agent does not accept a workspace ID or key at install time at all; a storage account name and access key, and a connection string for an Azure SQL database, play no role whatsoever in either Arc onboarding or Azure Monitor Agent installation. Therefore, the client ID and secret of an Azure service principal are the parameters that should be provided.
質問 # 58
Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains a hub site and 20 branch sites. The hub site contains two writable domain controllers named DC1 and DC2. Each branch site contains one writable domain controller. AD DS replication uses manually created connection objects in a mesh topology. DC2 has a repeated NTDS Replication 2094 warning and DCDIAG Active Directory Replication error 8461. DC1 has no replication backlog. Name resolution, network connectivity, and authentication between the sites are successful. You need to reduce replication delays and remediate the replication warnings and errors. The solution must minimize administrative effort. What should you do?
正解：D
解説：
A hand-built mesh of manually created connection objects across a hub site and 20 branch sites produces an enormous number of direct replication links, which is both unnecessary for a topology this size and a common root cause of NTDS Replication event ID 2094 (a DC has not replicated with a partner for an extended period, often because a manual link is stale or unreachable in the way the KCC expects) and DCDIAG replication error 8461 (a domain controller cannot reach or has an inconsistent view of a designated replication partner).
The Knowledge Consistency Checker (KCC) is designed to automatically generate and continuously optimize a minimal, efficient spanning topology across every site link in the forest, adapting to changes and failures without administrator involvement, but the KCC will not remove or override connection objects that were created manually, so as long as the manual mesh remains in place it keeps forcing replication down inefficient, error-prone paths. Deleting the manual connection objects hands topology generation back to the KCC, which will rebuild an efficient set of connections automatically, resolving the stale/unreachable-partner warnings and errors while requiring no ongoing administrative effort, unlike recreating more manual connections or adjusting the Enterprise Domain Controllers group membership (irrelevant to topology) or recreating site links (which govern cost/schedule between sites, not the per-DC connection objects that are actually causing the errors).
質問 # 59
You have an Active Directory Domain Services (AD DS) domain. The domain contains three servers named Server1, Server2, and Server3 that run Windows Server. You sign in to Server1 by using a domain account and start a remote PowerShell session to Server2. From the remote PowerShell session, you attempt to access a resource on Server3, but access to the resource is denied. You need to ensure that your credentials are passed from Server1 to Server3. The solution must minimize administrative effort. What should you do?
正解：A
解説：
This scenario is the classic Kerberos " double-hop " problem: when you sign in to Server1 and use PowerShell remoting to reach Server2, your credentials are used to authenticate that first hop, but by default Server2 does not receive a copy of your credentials that it can pass onward to a third machine (Server3) on your behalf, so the connection to Server3 falls back to the anonymous/network identity of Server2 itself and access is denied.
Kerberos constrained delegation solves exactly this problem: it explicitly authorizes Server2 to obtain and present Kerberos service tickets on the user ' s behalf to specified services on Server3 (or to any service, with resource-based constrained delegation configured on Server3), letting the user ' s original credentials flow through the second hop, and requires only a one-time delegation configuration rather than any change to how users connect. Just Enough Administration (JEA) restricts what commands a remote user can run in a constrained PowerShell endpoint; it does not solve credential delegation across hops. Selective authentication is a forest/domain trust setting controlling which security principals from a trusting domain can authenticate to resources in another domain across a trust; it is unrelated to the double-hop problem within a single domain. Disabling " Enforce user logon restrictions " only removes a KDC ticket-validation check performed at logon and does not enable multi-hop credential delegation. Therefore, configuring Kerberos constrained delegation on Server2 (to delegate to the target service on Server3) is the solution that minimizes administrative effort while fixing the credential pass-through problem.
質問 # 60
You have an Azure subscription and on-premises Arc-enabled Windows servers.
You need to create an Azure Machine Configuration package.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
正解：
解説：
Explanation:
Create a PS1 file: Author the Desired State Configuration (DSC) logic within a PowerShell script (.ps1) defining the settings to audit or enforce.
Generate a MOF file: Compile the DSC configuration block from the .ps1 script to generate a Managed Object Format (.mof) file.
Generate a ZIP file: Run the New-GuestConfigurationPackage cmdlet to package the compiled .mof along with required modules and metaconfig into a distributable .zip archive artifact.
質問 # 61
......
Fast2testのMicrosoftのAZ-802「Administering Windows Server」トレーニング資料を利用したら、初めて試験を受けるあなたでも一回で試験に合格できることを保証します。Fast2testのMicrosoftのAZ-802トレーニング資料を利用しても合格しないのなら、我々は全額で返金することができます。あなたに他の同じ値段の製品を無料に送って差し上げます。
AZ-802日本語試験対策: https://jp.fast2test.com/AZ-802-premium-file.html