多種多様なユーザーのニーズを促進するために、AZ-802スタディガイドでは、現在最高の適用率を持つ3つのモデル（PDF、ソフトウェア、オンライン）を開発しました。別の名前のオンラインモードは、学習教材のアプリです。ブラウザ上のユーザー端末が、この学習モデルの教材をシミュレートするAZ-802によって適用されたアプリケーションを実現できる限り、Webブラウザーに基づいて開発されます、ユーザーはアプリのリンクを開くだけで済み、AZ-802学習教材の方法で学習コンテンツをリアルタイムですばやく開くことができます。
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Secure Windows Server on-premises and hybrid infrastructures | 10% | - Implement security baselines and hardening - Manage access control and permissions - Configure Windows Defender and audit policies |
| Topic 2: Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments | 20% | - Install and configure domain controllers - Integrate AD DS with Azure AD and Azure Arc - Manage FSMO roles and replication - Implement and manage Group Policy Objects |
| Topic 3: Manage storage and file services | 15% | - Integrate on-premises storage with Azure Storage - Configure data deduplication and replication - Implement Storage Spaces and Storage Spaces Direct - Configure file servers and shares |
| Topic 4: Manage virtual machines and containers | 15% | - Configure Azure Arc-enabled servers and VMs - Deploy and manage containers and Kubernetes on Windows Server - Deploy and manage Hyper-V virtual machines |
| Topic 5: Implement and manage an on-premises and hybrid networking infrastructure | 15% | - Implement hybrid network connectivity - Configure IP addressing, DNS, and DHCP - Secure network traffic in hybrid environments - Configure software-defined networking |
| Topic 6: Implement high availability and disaster recovery | 5% | - Monitor and troubleshoot Windows Server environments - Use Azure Site Recovery for hybrid workloads - Perform server and workload migrations - Configure failover clustering - Implement backup and recovery solutions |
| Topic 7: Manage Windows Servers and workloads in a hybrid environment | 20% | - Manage updates and patches across hybrid servers - Deploy servers using Windows Admin Center and Azure Arc - Implement hybrid identity solutions - Configure remote management and secure administration |
PassTest当社の専門家は、Microsoft AZ-802の試験概要に従って教科書を書き直し、すべての重要な問題を収集し、重要なメモを作成して、集中的にレビューできるようにしました。 専門家は、例、図、その他の方法を通じて、すべての不可解な知識ポイントの信頼できる解釈も実施しました。 AZ-802学習教材で使用される表現は非常に理解しやすいです。 業界の新人であっても、専門知識を非常に簡単に理解できます。 AZ-802トレーニングトレント：Administering Windows Serverは、準備に最適な学習ガイドです。
質問 # 266
Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains the servers shown in the following table.
Server 1 hosts the DNS zone tor contoso.com. The General tab of the eontoso.com properties is configured as shown in the following exhibit.
Server3 hosts the DNS zone for east.contoso.com and is configured as shown in the following exhibit.
for each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation:
A secondary DNS zone for contoso.com can be added to Server3: Yes. If you add a DNS record to contoso.
com, the record will replicate to Server2: Yes. If you add a DNS record to east.contoso.com, the record will replicate to Server1: Yes.
A secondary (non-Active-Directory-integrated) DNS zone is simply a read-only, zone-transfer-based copy, and any DNS server -- regardless of forest, domain, or replication-scope considerations for the zone it ' s copying -- can host one, provided zone transfers are permitted from a source server hosting the zone; there is nothing about Server3 hosting east.contoso.com that prevents it from also hosting a secondary copy of contoso.com. The contoso.com zone ' s Active Directory-integrated replication scope is set to " all DNS servers in this domain, " meaning its data replicates through the DomainDnsZones partition to every domain controller running DNS within the contoso.com domain specifically; Server2, being a DNS server within that same domain, receives this replication, so a new record added to contoso.com does reach it. The east.contoso.
com zone ' s replication scope, by contrast, is set to " all DNS servers in this forest, " meaning its data replicates through the forest-wide ForestDnsZones partition to every DNS server across the entire forest, in any domain -- including Server1, a DNS server in the forest root domain, contoso.com. Because east.contoso.
com ' s scope explicitly spans the whole forest rather than being confined to its own domain, a record added there does reach Server1, even though Server1 sits in a different domain than the zone itself.
質問 # 267
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains domain controllers that run Windows Server 2019 and are configured as shown in the following table. You plan to run the adprep /domainprep command. Which domain controller should be available for the command to complete?
Domain controllers and FSMO role table
正解：E
解説：
Running adprep /domainprep requires that the domain controller currently holding the Infrastructure Master operations master role be online and reachable during the operation, because the domainprep step updates security descriptors, access control entries, and permissions on domain-wide objects that depend on coordination through that specific FSMO role holder; if the Infrastructure Master is offline, the domainprep portion of the adprep process cannot complete successfully. The exhibit shows that among the five domain controllers, DC5 is the one that holds the Infrastructure Master role, so DC5 specifically must be available and reachable on the network for adprep /domainprep to run to completion. The Schema Master role, held by DC4 in this exhibit, is the role holder that must be online for the separate adprep /forestprep command instead, since forestprep applies schema extensions that require the Schema Master, not the Infrastructure Master; that is a different role and a different adprep sub-command from the one described in this scenario.
The PDC emulator, RID master, and Domain naming master roles held by DC1, DC2, and DC3 respectively are not the specific role that adprep /domainprep depends on being online, so none of those three domain controllers is the correct answer here.
質問 # 268
You have an on-premises Active Directory Domain Services (AD DS) domain that contains the resources shown in the following table.
The domain contains the domain controllers shown in the following table.
You configure a site link between Site1 and Site2 and set the replication interval to 20 minutes.
At 10:00 AM, connectivity between Site1 and Site2 fails.
Administrators perform the actions shown in the following table.
At 10:30 AM, connectivity between Site1 and Site2 is restored.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth dim point
Exhibit
Exhibit
Exhibit
正解：
解説：
Explanation:
At 11:30 AM, User1 and User2 are members of Group1: No. At 11:30 AM, the phone number of User2 is 333-
333: Yes. At 11:30 AM, User3 is deleted: No.
Group membership is stored as a linked, multivalued attribute, so DC2 ' s removal of User1 from Group1 and DC1 ' s addition of User2 to Group1 modify two different values and merge without conflict once the 10:00 to
10:30 network partition heals. By 11:30 AM, well past the 20-minute replication interval, Group1 has fully converged across both sites to contain only User2, so the claim that both User1 and User2 are members of Group1 is false. For the single-valued telephone-number attribute, Active Directory resolves a genuine write conflict by comparing each domain controller ' s local originating-write version number for that attribute, using the timestamp only as a tiebreaker when the version numbers are equal; because DC1 wrote User2 ' s phone number twice during the outage, first to 222-222 and then to 333-333, while DC2 wrote it only once, to
444-444, DC1 ' s attribute carries the higher version number and wins the conflict regardless of DC2 ' s later wall-clock timestamp, so User2 ' s phone number converges everywhere to 333-333. For User3, DC1 moved the object into OU1 while DC2, still seeing OU1 as empty from its own perspective, deleted OU1 during the same outage window; when these two conflicting changes replicate together, Active Directory detects that User3 has become orphaned by its parent container ' s deletion and relocates the object into the domain ' s LostAndFound container rather than deleting it outright, so User3 still exists, just not in its original location, at 11:30 AM.
質問 # 269
Your network contains a single domain Active Directory Domain Services (AD DS) forest named contoso.
com. The forest contains a single Active Directory site.
You plan to deploy a read only domain controller (RODC) to a new datacenter on a server named Server1. A user named User1 is a member of the local Administrators group on Server1.
You need to recommend a deployment plan that meets the following requirements:
Ensures that a user named User1 can perform the RODC installation on Server1 Ensures that you can control the AD DS replication schedule to the Server1 Ensures that Server1 is in a new site named RemoteSite1 Uses the principle of least privilege Which three actions should you recommend performing in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
正解：
解説：
Explanation:
1. Create a site and a subnet (RemoteSite1, associated with the datacenter ' s IP subnet). 2. Create a site link (connecting RemoteSite1 to the existing site, with the desired schedule/cost). 3. Pre-create an RODC account (delegating its installation to User1).
Because Server1 must end up in a brand-new site, the plan must begin by creating that site along with a subnet object mapped to the datacenter ' s IP range and associated with the new site, which is exactly what places Server1 in RemoteSite1 once it is promoted there. Next, to be able to control the replication schedule between RemoteSite1 and the rest of the forest, an administrator must create a dedicated site link, since replication timing, frequency, and cost between sites are properties of the site link object, not of the sites themselves; without an explicit site link (or by relying only on a shared default link), that granular scheduling control would not exist for this specific site pair. Finally, to satisfy least privilege while still letting User1 - a mere local administrator on Server1, not a domain administrator - complete the RODC promotion, the recommended practice is to pre-create (stage) the RODC computer account in advance and explicitly delegate the installation to User1 during that staging process. This lets User1 attach Server1 to the pre-created account and finish the promotion locally without ever needing domain-wide administrative rights. Running the AD DS installation wizard directly as a non-delegated local admin would fail without domain credentials, and adding User1 to the Contoso\Administrators (Domain Admins) group would grant far more access than necessary, violating least privilege. The correct order is: create the site and subnet, create the site link, then pre-create the RODC account.
質問 # 270
You have a Hyper-V failover cluster named Ousted. Cluster1 contains a virtual machine named VM1 that runs Windows Server. VM1 contains a Windows service named Service1.
You need to ensure that Cluster1 performs a recovery action if Service1 fails.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation:
Failover Clustering ' s virtual machine monitoring feature (available from Failover Cluster Manager or the Add-ClusterVMMonitoredItem cmdlet) lets a cluster watch a specific Windows service running inside a guest VM and take VM-level recovery action, such as restarting or live migrating the VM, once the service is deemed to have failed. This mechanism escalates only after the service ' s own local recovery attempts have been exhausted, so the monitored service inside VM1 should keep its standard Service Control Manager Recovery tab set to Restart the Service; this lets the guest OS attempt its own recovery first, and only when the service keeps failing does the cluster step in and perform its configured VM recovery action. This two-tier design avoids unnecessarily restarting or migrating the whole VM for a transient service failure that the guest OS can resolve on its own, while still giving the cluster a safety net for a service that never recovers on its own.
質問 # 271
......
最新のMicrosoft AZ-802スタディガイドが作成されていることをご注意ください。 これらの試験教材は高い合格率です。 AZ-802学習ガイドは、今後の試験に最適な支援になると確信しています。 「ノーパス全額返金」を保証します。 過去の失敗について落ち込んでいて、有効なAZ-802学習ガイドを探したいと思う場合は、間違いなく100％合格として試験資料に返信することをお勧めします。 私たちのAZ-802学習ガイドに対する何千もの候補者の選択があなたの賢明な決定です。
AZ-802復習テキスト: https://www.passtest.jp/Microsoft/AZ-802-shiken.html