The Microsoft AZ-802 web-based practice test software is very user-friendly and simple to use. It is accessible on all browsers (Chrome, Firefox, MS Edge, Safari, Opera, etc). It will save your progress and give a report of your mistakes which will surely be beneficial for your overall AZ-802 Exam Preparation.
| Section | Objectives |
|---|---|
| Topic 1: Monitoring and troubleshooting | - System monitoring
|
| Topic 2: Networking and storage infrastructure | - Networking
|
| Topic 3: Manage hybrid compute and virtualization | - Virtual machines
|
| Topic 4: Secure Windows Server hybrid infrastructures | - Security configuration
|
| Topic 5: Disaster recovery and migration | - Backup and restore
|
| Topic 6: Implement and manage high availability | - Load balancing and redundancy
|
Our exam dumps are created by our professional IT trainers who are specialized in the Microsoft real dumps for many years and they know the key points of test well. So we can ensure you the accuracy and valid of AZ-802 dump pdf. Before you buy, you can download the free trial of AZ-802 Exam Cram. If you have any problems in the course of purchasing or downloading the AZ-802 certification dumps you can contact us anytime.
NEW QUESTION # 140
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two servers named Server1 and Server2 that run Windows Server You need to use connection security rules to control the connections between Server1 and Server2. The solution must meet the following requirements:
* IPsec protection for Server1 and Server2 must be limited.
* Traffic between Server1 and Server2 must be authenticated and encrypted.
* Server2 must accept traffic from Server1 only if Server2 is authenticated by using IPsec.
How should you configure the connection security rules? To answer, select the appropriate options in the answe1 area.
NOTE: Each correct selection is worth one point
Answer:
Explanation:
Explanation:
Type of IPsec rule: Server-to-server rule. Firewall rule on Server2: Inbound port rule: Allow the connection if it is secure.
A server-to-server connection security rule protects traffic exchanged between two specific, explicitly defined endpoints, which is exactly the ' limited ' scope required here, since it applies only between Server1 and Server2 rather than isolating an entire domain or zone of the network the way an isolation rule would (isolation rules are built for domain- or network-wide policies restricting communication to only domain- joined or otherwise trusted computers, a much broader scope than two named servers). An authentication exemption rule only carves out exceptions from IPsec requirements for specified traffic or hosts and would not itself provide the authenticated, encrypted protection the scenario requires; a tunnel rule protects traffic between two gateway computers on behalf of other hosts behind them, which does not match a direct server- to-server relationship. Once the server-to-server connection security rule is defined to require authentication and encryption for traffic between the two servers, Server2 additionally needs an inbound firewall rule of type
' Allow the connection if it is secure, ' which permits inbound traffic from Server1 only when it arrives already authenticated and protected by the negotiated IPsec security association; a plain ' Allow the connection ' rule would accept the traffic regardless of whether it was secured, and outbound or predefined rule types do not enforce the requirement that Server2 accept Server1 ' s traffic only when it is IPsec- authenticated.
NEW QUESTION # 141
Your network contains an Active Directory Domain Services (AD DS) domain.
The domain contains three servers named DHCP1, DHCP2, and DHCP3 that run Windows Server and have the DHCP Server role installed. The servers host IPv4 scopes only. Shared storage is unavailable.
Your company has a main datacenter that contains DHCP1 and DHCP2. The company has a disaster-recovery datacenter that contains DHCP3 and connects to the main datacenter by using a WAN link.
You have two scopes named Scope1 and Scope2.
You need to provide DHCP service continuity for the scopes. The solution must meet the following requirements:
* Scope1: DHCP3 must provide leases only if a DHCP server in the a main datacenter is unavailable.
* Scope2: DHCP! and DHCP2 must each lease from separate parts of the IP address range. DHCP2 must wait before responding to client computer requests.
How should you configure high availability for each scope? To answer, drag the appropriate configurations to the correct scopes. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Scope1: DHCP failover in hot standby mode. Scope2: A split scope that uses delayed responses.
DHCP failover in hot standby mode designates one partner as active, normally answering all client requests for a scope, while the second partner remains passive and only begins leasing addresses once it detects the active partner is unavailable, which exactly matches Scope1 ' s requirement that DHCP3 (in the disaster- recovery site) leases addresses only when a main-datacenter server is down; hot standby is also the mode Microsoft recommends specifically for main-site-to-DR-site failover pairings, as opposed to load-balance mode, which splits live traffic between both partners simultaneously and is intended for two servers on the same local, low-latency network segment. Scope2 ' s requirement, that DHCP1 and DHCP2 each lease from separate parts of the address range with DHCP2 waiting before responding, describes the classic split-scope configuration, in which the address range is divided (commonly 80/20) between two independent, non- partnered DHCP servers, and a delay is configured on one server ' s scope options so it only replies to a DHCPDISCOVER broadcast if the other, undelayed server fails to respond first; this delayed-response split scope predates the failover feature and is still used when two DHCP servers should operate independently rather than as a coordinated failover pair. Neither scope ' s requirement matches a DHCP Server role in a failover cluster (which addresses a single server ' s own availability, not multi-server address partitioning) or a single server with exclusion ranges (only one server involved).
NEW QUESTION # 142
You have a server named Server1 that runs Windows Server. You need to ensure that only specific applications can modify the data in protected folders on Server1. Solution: From App & browser control, you configure the Reputation-based protection. Does this meet the goal?
Answer: B
Explanation:
Restricting which applications are allowed to modify data inside a set of designated protected folders is specifically the job of Controlled folder access, a ransomware-protection feature configured under Virus & threat protection settings in Microsoft Defender Antivirus, which maintains an allow-list of trusted applications permitted to write to those protected folders while blocking every other process from doing so.
Reputation-based protection, by contrast, is found under App & browser control and works through Microsoft Defender SmartScreen, evaluating the reputation of downloaded files, apps, and sites and warning about or blocking ones considered potentially malicious based on reputation data; it has no mechanism whatsoever for restricting which applications can write to a specific folder on the file system, since folder-level write access simply isn ' t within its scope of protection. Because Reputation-based protection governs a completely different aspect of endpoint security -- reputation-based screening of downloaded content rather than folder- level application allow-listing -- configuring it does nothing to address the stated requirement, and only Controlled folder access under Virus & threat protection actually meets this specific goal. Therefore, configuring Reputation-based protection does not meet the goal.
NEW QUESTION # 143
Your network contains an Active Director/ Domain Services {AD DS) domain named contoso.com. The domain contains two sites named Site1 and Site2 and servers that run Windows Server and are configured as shown in the following table.
The domain contains a group named Group1 that contains Server3.
RODC1 has the Password Replication Policy shown in the following exhibit.
Exhibit
Exhibit
Exhibit
Exhibit
Answer:
Explanation:
Explanation:
An RODC only caches (replicates) the password of a security principal that is explicitly permitted by its Password Replication Policy - in the exhibit, only members of the built-in Allowed RODC Password Replication Group and the custom Group1 are set to Allow, while Administrators, Account Operators, Backup Operators, Server Operators, and the Denied RODC Password Replication Group are all set to Deny.
A user who is not covered by an Allow entry authenticates through pass-through validation to a writable DC and never has credentials cached on the RODC, so User1 ' s credentials are not stored on RODC1, making statement 1 No. Because Server3 sits in Site2 alongside RODC1 and is a member of Group1 (an Allow entry), a user whose credentials are already cached there can still authenticate locally through RODC1 even if WAN connectivity to Site1 ' s writable domain controllers is lost, which is why User2 can sign in successfully during the outage, making statement 2 Yes. Interactive local sign-in to the RODC console itself is governed separately by the RODC ' s Administrator Role Separation (local Administrators group), not by the Password Replication Policy, and nothing in the scenario grants User3 that local logon right, so statement 3 is No.
NEW QUESTION # 144
You have a Hyper-V host named HV1 that contains a virtual machine named VM1. HV1 supports nested visualization. VM1 is connected to an external virtual switch.
You plan to install the Hyper-V server role on VM1.
You need to prepare VM1 to host nested virtual machines. The solution must meet the following requirements:
* Enable VM1 to run Hyper-V.
* Enable nested virtual machines to communicate on the physical LAN.
How should you configure VM1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Processor configuration: Expose virtualization extensions. Network configuration: Enable MAC address spoofing.
Nested virtualization, running the Hyper-V role inside a VM so that VM itself can host further, nested virtual machines, requires the parent VM ' s virtual processor to expose the hardware virtualization extensions (Intel VT-x/EPT or AMD-V equivalents) that the guest hypervisor inside VM1 needs to create and run its own nested VMs; this is enabled with the -ExposeVirtualizationExtensions $true parameter on Set-VMProcessor, and without it, VM1 ' s own attempt to enable Hyper-V would fail because the guest OS would detect no hardware virtualization support at all. Increasing the number of virtual processors or enabling processor compatibility mode (which is for live-migrating between hosts with different CPU generations) do nothing to expose the extensions nested virtualization depends on. On the networking side, nested VMs inside VM1 use their own, further-virtualized MAC addresses that VM1 ' s own virtual network adapter did not originally advertise to HV1 ' s external switch; unless MAC address spoofing is enabled on VM1 ' s virtual network adapter, HV1 ' s virtual switch will drop outbound frames from those nested VM MAC addresses as spoofed traffic, silently blocking their connectivity to the physical LAN. Enabling NIC Teaming, Router Guard, or port mirroring on VM1 ' s adapter address entirely different scenarios (link aggregation, rogue DHCP/router protection, and traffic monitoring, respectively) and would not allow nested VMs ' distinct MAC addresses to reach the physical network.
NEW QUESTION # 145
......
Our AZ-802 training materials are compiled by professional experts. All the necessary points have been mentioned in our AZ-802 practice engine particularly. About some tough questions or important points, they left notes under them. Besides, our experts will concern about changes happened in AZ-802 study prep all the time. Provided you have a strong determination, as well as the help of our AZ-802 learning guide, you can have success absolutely.
Reliable AZ-802 Dumps Sheet: https://www.pdf4test.com/AZ-802-dump-torrent.html