We have three versions of our AZ-802 study materials, and they are PDF version, software version and online version. With the PDF version, you can print our materials onto paper and learn our AZ-802 study materials in a more handy way as you can take notes whenever you want to, and you can mark out whatever you need to review later. With the software version, you are allowed to install our AZ-802 study materials in all computers that operate in windows system. Besides, the software version can simulate the real test environment, which is favorable for people to better adapt to the examination atmosphere. With the online version, you can study the AZ-802 Study Materials wherever you like, and you still have access to the materials even if there is no internet available on the premise that you have studied the AZ-802 study materials online once before.
| Section | Objectives |
|---|---|
| Topic 1: Secure and manage Windows Server environments | - Security and compliance
|
| Topic 2: Hybrid infrastructure management | - Monitoring and update management
|
| Topic 3: Networking and high availability | - Networking infrastructure
|
| Topic 4: Compute, storage, and virtualization | - Storage and file services
|
>> Microsoft AZ-802 Reliable Exam Cram <<
To effectively getting ready for Microsoft AZ-802 test, do you know what tools are worth using? Let me tell you. Exam4Free Microsoft AZ-802 pdf dumps are the most credible. The exam dumps is rare certification training materials which are researched by IT elite. Exam4Free AZ-802 braindump has a high hit rate. 100% sail through your exam. This is because IT experts can master the question point well, so that all questions the candidates may come across in the actual test are included in Exam4Free exam dumps. Is it amazing? But it is true. After you use our dumps, you will believe what I am saying.
NEW QUESTION # 495
You have an Azure subscription. The subscription contains 40 virtual machines that run Windows Server and are in a resource group named RG1. The virtual machines restart every Sunday from 2:00 AM to 4:00 AM during maintenance. The restarts trigger metric alert rules that send email and SMS notifications. You need to prevent notifications during the maintenance window without changing the alert rule conditions. The solution must apply to all the alerts from RG1 and allow notifications outside the maintenance window. What should you configure?
Answer: D
Explanation:
An alert processing rule is the Azure Monitor feature purpose-built to suppress notifications for a defined time window without touching the underlying alert rules that detect the condition: it can be scoped to a resource group such as RG1 so it automatically covers every alert fired by any resource within it, including alerts added later, and it can be configured with a recurring schedule, such as every Sunday from 2:00 AM to 4:00 AM, so notifications are suppressed only during that window and resume automatically outside it, exactly matching both stated requirements. Creating a new metric alert rule does nothing to stop the existing rules from firing and notifying, since the restarts still trigger the original conditions; it would only add another rule alongside the ones already causing noise. A dynamic threshold changes how a metric alert rule calculates its own trigger condition based on historical patterns, which is itself a change to the alert rule ' s condition, something the requirement explicitly disallows, and dynamic thresholds are not guaranteed to adapt in one week to a new, recurring maintenance pattern. A service health alert rule monitors Azure platform incidents and planned maintenance to Azure services themselves, not the customer ' s own virtual machine restarts, and would not intercept or suppress the metric alert notifications already configured for RG1 ' s VMs. An alert processing rule is therefore the only option that satisfies both the scope and the non-destructive, schedule- based suppression requirements.
NEW QUESTION # 496
You are planning the DHCP1 migration to support the DHCP migration plan. Which two PowerShell cmdlets should you run on DHCP1, and which two PowerShell cmdlets should you run on DHCP2? To answer, drag the appropriate cmdlets to the correct servers. Each cmdlet may be used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
DHCP1: Export-DhcpServer, Remove-DhcpServerInDC. DHCP2: Add-DhcpServerInDC, Import- DhcpServer.
Migrating a DHCP server ' s configuration together with its existing leases and reservations by PowerShell follows an export/unauthorize-then-authorize/import pattern across the two servers. On the source server, DHCP1, Export-DhcpServer captures the existing scopes, options, leases, and reservations into a migration file, which is what allows the existing leases and reservations to actually carry over to the replacement server.
Remove-DhcpServerInDC is then run on DHCP1 to unauthorize it in Active Directory, which is what prevents DHCP1 from continuing to service client requests once DHCP2 is brought online, satisfying that specific migration requirement. On the target server, DHCP2, Add-DhcpServerInDC authorizes the new server in AD DS so it is permitted to lease addresses on the network, and Import-DhcpServer then applies the configuration file exported from DHCP1, causing DHCP2 to hand out the same address ranges as DHCP1 along with the existing leases and reservations that were captured during export. Add-DhcpServerv4Scope and Remove-DhcpServerv4Scope only create or delete an individual scope ' s address range and do not export, import, or preserve any existing lease or reservation data, so neither is part of this migration sequence.
Therefore, DHCP1 requires Export-DhcpServer and Remove-DhcpServerInDC, while DHCP2 requires Add- DhcpServerInDC and Import-DhcpServer.
NEW QUESTION # 497
You need to ensure that VM3 meets the technical requirement. What should you install first?
Answer: A
Explanation:
The requirement is that VMs must be configured to enable per-folder quotas. VM3 already has the File and Storage Services role installed, but native NTFS quotas only apply per volume and per user; they cannot restrict the amount of data stored inside an individual folder. File Server Resource Manager (FSRM) is the Windows Server feature that adds true folder-level quota management, letting an administrator define hard or soft quota limits (and quota templates) scoped to specific folders rather than entire volumes, which is exactly the granularity the requirement calls for. Enhanced Storage is an unrelated feature that supports certain storage devices with enhanced storage access (IEEE 1667), Windows Standards-Based Storage Management provides SMI-S/WMI-based management of storage arrays and has nothing to do with folder-level quotas, and the iSNS Server service is used for discovery of iSCSI targets and initiators on a network, also unrelated to quota enforcement. None of those three alternatives provide any per-folder capacity restriction capability, so installing FSRM is the necessary first step before per-folder quotas can be configured on VM3.
Topic 4, Case Study 4: Fabrikam, Inc.
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
Overview: Fabrikam, Inc. is a manufacturing company that has a main office in Chicago and a branch office in Paris.
Existing Environment -- Identity Infrastructure: Fabrikam has an Active Directory Domain Services (AD DS) forest that syncs with a Microsoft Entra ID tenant. The AD DS forest contains two domains named corp.
fabrikam.com and europe.fabrikam.com.
Chicago Office On-Premises Servers: The office in Chicago contains on-premises servers that run Windows Server 2016 as shown in the following table.
Chicago office on-premises servers
All the servers in the Chicago office are in the corp.fabrikam.com domain.
All the virtual machines in the Chicago office are hosted on HV1 and HV2. HV1 and HV2 are nodes in a failover cluster named Cluster1.
WEB1 and WEB2 run an Internet Information Services (IIS) website. Internet users connect to the website by using a URL of https://www.fabrikam.com.
All the users in the Chicago office run an application that connects to a UNC path of \\Fileserver1\Data.
Paris On-Premises Servers: The office in Paris contains a physical server named dc2.europe.fabrikam.com that runs Windows Server 2016 and is a domain controller for the europe.fabrikam.com domain.
Network Infrastructure: The networks in both the Chicago and Paris offices have local internet connections.
The Chicago and Paris offices are connected by using VPN connections. The client computers in the Chicago office get IP addresses from DHCP1.
Security Risks: Fabrikam identifies the following security risks:
-- Some accounts connect to AD DS resources by using insecure protocols such as NTLMv1, SMB1, and unsigned LDAP.
-- Servers have Windows Defender Firewall enabled. Server administrators sometimes modify firewall rules and allow risky connections.
Requirements -- Security Requirements: Fabrikam identifies the following security requirements:
-- Prevent server administrators from configuring Windows Defender Firewall rules.
-- Encrypt all the data disks on the servers by using BitLocker Drive Encryption (BitLocker).
-- Ensure that only authorized applications can be installed or run on the servers in the forest.
-- Implement Microsoft Sentinel as a reporting solution to identify all connections to the domain controllers that use insecure protocols.
On-Premises Migration Plan: Fabrikam plans to migrate all the existing servers and identifies the following migration requirements:
-- Move the APP1 and APP2 virtual machines in the Chicago office to a new Hyper-V failover cluster named Cluster2 that will run Windows Server 2022. Cluster2 will contain two new nodes named HV3 and HV4. All virtual machine files will be stored on a Cluster Shared Volume (CSV).
-- Migrate Archive1 to a new failover cluster named Cluster3 that will run Windows Server 2022. Cluster3 will contain two physical nodes named Node1 and Node2. The file shares on Cluster3 will be a failover cluster role in active-passive mode.
-- Migrate all users, groups, and client computers from europe.fabrikam.com to corp.fabrikam.com. User accounts will retain their existing password.
-- Migrate the data share from Fileserver1 to a new server named Fileserver2 that will run Windows Server
2022. After the migration, the data share must be accessible by using the existing UNC path.
Azure Migration Plan: Fabrikam plans to migrate some resources to Azure and identifies the following migration requirements:
-- Create an Azure subscription named Sub1 and an Azure virtual network named Vnet1. Use ExpressRoute to connect the Paris and Chicago offices to Vnet1.
-- License all servers for Microsoft Defender for Servers.
-- Migrate APP3 and APP4 to Azure.
-- Migrate the www.fabrikam.com website to an Azure App Service web app named WebApp1, then decommission WEB1 and WEB2.
DHCP Migration Plan: Fabrikam plans to replace DHCP1 with a new server named DHCP2 and identifies the following migration requirements:
-- Ensure that DHCP2 provides the same IP addresses that are currently available from DHCP1.
-- Prevent DHCP1 from servicing clients once services are enabled on DHCP2.
-- Ensure that the existing leases and reservations are migrated.
NEW QUESTION # 498
You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with a Microsoft Entra tenant. You deploy an app that adds custom attributes to the domain. From Azure Cloud Shell, you discover that you cannot query the custom attributes of users. You need to ensure that the custom attributes are available in Microsoft Entra ID. Which task should you perform from Microsoft Entra Connect first?
Answer: D
Explanation:
When an application extends the on-premises AD DS schema by adding new custom attributes after Microsoft Entra Connect has already been installed and configured, the sync engine ' s local, cached copy of the AD schema (used to populate the attribute-selection lists for sync rules and attribute mappings) does not automatically become aware of the newly added attributes. Microsoft Entra Connect provides a " Refresh directory schema " task, run from the Microsoft Entra Connect wizard, specifically to re-read the current AD DS schema and update the sync engine ' s local metadata so that the newly introduced custom attributes become visible and selectable for synchronization rules and attribute-flow configuration. Only after this refresh has completed can an administrator configure a rule (via directory extension attribute sync, or a custom sync rule) that actually flows the new attributes to Microsoft Entra ID, at which point they would finally be queryable from Azure Cloud Shell (for example, via Microsoft Graph). " Configure device options " pertains to device registration/writeback settings, not attribute sync. " Customize synchronization options " is used to reconfigure existing sync features (such as enabling or changing which optional features are active) and, without a preceding schema refresh, still would not expose attributes the sync engine ' s cached schema doesn ' t yet know about. " Manage federation " configures AD FS/federation trust settings and is unrelated to attribute synchronization. Therefore, the first task to perform is to refresh the directory schema.
NEW QUESTION # 499
You need to meet the technical requirements for the site links. Which users can perform the required task?
Answer: C
Explanation:
Site, subnet, and site-link objects are stored in the Configuration partition, which replicates to every domain controller in the forest but is administratively owned by the forest root domain. By default, only members of Enterprise Admins and members of the Domain Admins group of the forest root domain (contoso.com in this forest) have permissions to modify objects in the Configuration container, including editing a site link ' s replication schedule. Admin1 is a member of Contoso\Enterprise Admins and therefore has forest-wide rights over the Configuration partition. Admin2 is a member of Contoso\Domain Admins; because contoso.com is the forest root domain, this group also carries default rights over the Configuration and Schema partitions.
Admin3, however, is a member of Canada\Domain Admins, the Domain Admins group of the canada.contoso.
com child domain, which has no inherent rights over the Configuration partition. Consequently, to change the replication schedule on all site links to 30 minutes, only Admin1 and Admin2 currently have the necessary permissions, making option C the correct answer.
Topic 3, Case Study 3: A. Datum CorporationThis is a case study.
Case studies are not timed separately. You can use as much exam
time as you would like to complete each case. However, there may be
additional case studies and sections on this exam. You must manage
your time to ensure that you are able to complete all questions
included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
Overview: A. Datum Corporation is a manufacturing company that has a main office in Seattle and two branch offices in Los Angeles and Montreal. A. Datum recently partnered with a company named Fabrikam, Inc. Fabrikam is a manufacturing company that has a main office in Boston and a branch office in Orlando.
Both companies intend to collaborate on several joint projects.
The on-premises network of A. Datum contains an Active Directory Domain Services (AD DS) forest named adatum.com. The forest contains two domains named adatum.com and east.adatum.com, and the domain controllers shown in the exhibit below.
Domain controllers
The on-premises network of Fabrikam contains an AD DS forest named fabrikam.com. The forest contains two domains named fabrikam.com and south.fabrikam.com. The fabrikam.com domain contains an organizational unit (OU) named Marketing.
The adatum.com domain contains the servers shown in the exhibit below.
Servers
HyperV1 contains the virtual machines shown in the exhibit below. All the virtual machines on HyperV1 have only the default management tools installed.
HyperV1 virtual machines
SSPace1 contains the Storage Spaces virtual disks shown in the exhibit below.
SSPace1 virtual disks
A Datum has an Azure subscription that contains a Microsoft Entra tenant. Microsoft Entra Connect is configured to sync the adatum.com forest with Microsoft Entra ID. The subscription contains the virtual networks shown in the exhibit below.
Virtual networks
The subscription contains the Azure private DNS zones shown in the exhibit below.
Private DNS zones
The subscription contains the virtual machines shown in the exhibit below. All the servers are in a workgroup.
The subscription contains a storage account named storage1 that has a file share named share1.
Azure virtual machines
Planned Changes: A. Datum plans to implement the following changes:
- Sync Data1 to share1.
- Configure an Azure runbook named Task1.
- Enable Microsoft Entra users to sign in to Server1.
- Create an Azure DNS Private Resolver that has the following configuration: Name: Private1; Region: West US; Virtual network: VNet1; Inbound endpoint: SubnetB.
- Enable users in the adatum.com domain to access the resources in the south.fabrikam.com domain.
Technical Requirements: A. Datum identifies the following technical requirements:
- The data on SSPace1 must be available always.
- DC2 must become the schema master if DC1 fails.
- VMs must be configured to enable per-folder quotas.
- Trusts must allow access to only the required resources.
- The users in the Marketing OU must have access to storage1.
- Azure Automanage must be used on all supported Azure virtual machines.
- A direct SSH session must be used to manage all the supported virtual machines on HyperV1.
NEW QUESTION # 500
......
Exam4Free guarantees that if you use the product, you will pass the exam on your first try. Its primary goal is to save students time and money, not just conduct a business transaction. Candidates can take advantage of the free trials to evaluate the quality and standard of the AZ-802 Dumps before making a purchase. With the right Administering Windows Server (AZ-802) study material and support team passing the examination at first attempt is an achievable goal.
Latest AZ-802 Real Test: https://www.exam4free.com/AZ-802-valid-dumps.html