あなたはこのような人々の一人ですか。さまざまな資料とトレーニング授業を前にして、どれを選ぶか本当に困っているのです。もしそうだったら、これ以上困ることはないです。Fast2testはあなたにとって最も正確な選択ですから。我々はあなたに試験問題と解答に含まれている全面的な試験資料を提供することができます。Fast2testの解答は最も正確な解釈ですから、あなたがより良い知識を身につけることに助けになれます。Fast2testを利用したら、MicrosoftのAZ-802認定試験に受かることを信じています。それも我々が全てのお客様に対する約束です。
| Section | Objectives |
|---|---|
| Secure and manage Windows Server environments | - Security and compliance
|
| Hybrid infrastructure management | - Monitoring and update management
|
| Compute, storage, and virtualization | - Virtual machines and containers
|
| Networking and high availability | - High availability and disaster recovery
|
弊社はお客様の皆様の利益を保証するために、あなたに高いクオリティのサービスを提供できて努力しています。今まで、弊社のFast2testのAZ-802問題集はそのスローガンに沿って協力します。弊社の信頼できるAZ-802問題集を使用したお客様はほとんど試験に合格しました。
質問 # 148
Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains the groups shown in the following table: Group11 (Domain local, contoso.com), Group12 (Global, contoso.com), Group13 (Global, contoso.com), Group14 (Universal, contoso.com), Group21 (Universal, east.contoso.com).
You need to implement a group nesting strategy. Which groups can be added as members of Group12, and which groups can be added as members of Group21? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Group scope/domain table
正解：
解説：
Explanation:
Group12 (Global, contoso.com) can have as members: Group13 only. Group21 (Universal, east.contoso.com) can have as members: Group12, Group13, and Group14 only.
Active Directory ' s group-scope nesting rules are strict and well-defined: a Global-scope group can contain only user/computer accounts and other Global-scope groups from its own, same domain -- it can never contain a Universal-scope or Domain-local-scope group, regardless of domain. Group12 is Global (contoso.
com), so among the listed candidates, only Group13 (also Global, also contoso.com) is eligible; Group11 is disqualified because it is Domain-local scope, and Group14 is disqualified because it is Universal scope -- Global groups cannot absorb Universal-scope members under any circumstance, even within the same domain. A Universal-scope group, by contrast, can contain accounts, other Universal groups from any domain in the forest, and Global groups from any domain in the forest (but never a Domain-local group). Group21 is Universal (east.contoso.com), so Group12 and Group13 (both Global, in contoso.com, a different domain -- which is fine, since Universal-group membership is forest-wide) are eligible, and Group14 (Universal, contoso.com) is also eligible, since Universal groups may contain other Universal groups from anywhere in the forest. Only Group11 (Domain-local scope) is excluded from Group21 ' s membership, since a Domain- local group can never be nested inside anything except another Domain-local group in its own domain.
質問 # 149
You plan to deploy an Azure virtual machine that will run Windows Server. The virtual machine will host an Active Directory Domain Services (AD DS) domain controller and a drive named F: on a new virtual disk.
You need to configure storage for the virtual machine. The solution must meet the following requirements:
maximize resiliency for AD DS; prevent accidental data loss. How should you configure the storage? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation:
Volume for the AD DS database: F. Caching configuration for the volume that hosts the database: NONE.
Microsoft ' s guidance for running AD DS domain controllers on Azure virtual machines is explicit that the NTDS database and logs should be placed on a dedicated data disk rather than the OS disk (C:) or the VM ' s temporary disk (D:). The OS disk mixes the database with the operating system and is not sized or managed for this purpose, and the temporary disk is local, ephemeral storage on the physical host that provides no durability at all - its contents can be lost during routine platform maintenance, a host failure, or a resize
/reallocation, which is completely incompatible with maximizing resiliency for a domain controller ' s database. A separate managed data disk, mounted as F:, is backed by durable, replicated Azure Storage and is the disk that should host the AD DS database, giving the required resiliency. Separately, Azure lets you configure host caching (None, Read, or Read/write) on a managed data disk; for a disk hosting a transactional, write-sensitive database like the AD DS Extensible Storage Engine database, Microsoft explicitly documents that host caching must be set to None. Read or Read/write caching risks acknowledging writes to the VM before they are guaranteed to be durably committed to the underlying storage, which for a database like NTDS.dit can result in inconsistency or accidental data loss if a cache flush is interrupted. Setting caching to None ensures every write is fully committed, directly satisfying the requirement to prevent accidental data loss.
質問 # 150
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains 10 servers that run Windows Server. The servers have static IP addresses. You plan to use DHCP to assign IP addresses to the servers. You need to ensure that each server always receives the same IP address. Which type of identifier should you use to create a DHCP reservation for each server?
正解：C
解説：
A DHCP reservation permanently binds a specific IP address to a specific client so that the client receives the same address on every lease renewal, and Windows Server DHCP identifies the client for this binding by its network adapter ' s MAC (hardware) address, which is the unique Layer 2 identifier included in every DHCPDISCOVER/DHCPREQUEST message. This makes the MAC address the correct and only supported identifier type for a standard client reservation in Windows Server DHCP. A UUID (client identifier option) is used in certain scenarios such as PXE/network boot or specific DHCPv6 configurations (as a DUID), but it is not the mechanism used for ordinary IPv4 reservations on Windows Server DHCP. An FQDN or a NetBIOS name identifies a computer for name resolution purposes (DNS or WINS/NetBIOS) but is not part of the DHCP protocol ' s client identification handshake and cannot be used to key a reservation, since DHCP operates below and independently of the name-resolution layer, at the point where the client does not necessarily have a resolvable name yet. A MAC-address-based reservation is therefore the correct approach.
質問 # 151
You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. You build an app named App1. You need to configure continuous integration and continuous deployment (CI/CD) of App1 to VM1. What should you create first?
正解：B
解説：
Answer-key correction: The source marked the answer as C (an Azure Automation account). Microsoft ' s documented CI/CD-to-VM workflow (Azure Pipelines deployment groups) has no role for an Automation account; every pipeline, deployment group, and release definition lives inside an Azure DevOps project, which in turn requires an Azure DevOps organization to exist first. Corrected answer: D.
Continuous integration and continuous deployment to an Azure VM running Windows Server is typically implemented using Azure Pipelines with a deployment group that targets the VM directly (for example, deploying a web app to IIS via a Deployment Group agent installed on VM1). Every object involved in that workflow - the build (CI) pipeline that produces artifacts from App1 ' s source, the release (CD) pipeline, and the deployment group registration for VM1 itself - is created and lives inside a project, and a project in turn exists only inside an Azure DevOps organization; none of those pieces can be created before an organization (and a project within it) exists. Creating the Azure DevOps organization is therefore the necessary first step, ahead of configuring the build pipeline, registering VM1 in a deployment group, or setting up the release pipeline that finally deploys App1 to it. A managed identity might later be relevant for VM1 to authenticate to some other Azure resource, but it is not a prerequisite for setting up CI/CD itself. An App Service Environment is a dedicated hosting environment for Azure App Service (a PaaS offering) and has no role in deploying to an existing IaaS virtual machine. An Azure Automation account is used for runbook automation, Desired State Configuration, and update management, and plays no documented part in the Azure Pipelines deployment-group workflow used to CI/CD an app onto a VM.
質問 # 152
You create a new Azure subscription.
You plan to deploy Azure Active Directory Domain Services (Azure AD DS) and Azure virtual machines.
The virtual machines will be joined to Azure AD DS.
You need to deploy Active Directory Domain Services (AD DS) to ensure that the virtual machines can be deployed and joined to Azure AD DS.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
正解：
解説：
Explanation:
Reference:
The Administering Windows Server Hybrid Core Infrastructure guidance for deploying Azure Active Directory Domain Services (Azure AD DS) in a new subscription is explicit about the required sequence.
First, you prepare networking: "Before you enable Azure AD DS, create or select an Azure virtual network and subnet that will host the managed domain." Next, you provision the managed domain: "Enable Azure AD DS into the chosen virtual network/subnet; the service deploys managed domain controllers and exposes domain IP addresses." Finally, you update DNS for the VNet so VMs can locate the domain: "After the managed domain is provisioned, configure the virtual network DNS servers to the IP addresses of the Azure AD DS domain controllers so that virtual machines can resolve the domain and join it." The course also clarifies what you do not do with Azure AD DS: "Azure AD DS is a managed domain; you do not install the AD DS role or run the AD DS installation wizard on your own VMs." And: "Azure AD Connect is only required when synchronizing identities from an on-premises AD; it isn't required for a cloud- only deployment of Azure AD DS." Therefore, the correct sequence to ensure VMs can be deployed and joined to Azure AD DS is:
Create an Azure virtual network,
Create an Azure AD DS instance (into that VNet/subnet),
Modify the VNet DNS settings to point to the managed domain IPs.
質問 # 153
......
君はまだMicrosoftのAZ-802認証試験を通じての大きい難度が悩んでいますか？ 君はまだMicrosoft AZ-802認証試験に合格するために寝食を忘れて頑張って復習しますか？ 早くてMicrosoft AZ-802認証試験を通りたいですか？Fast2testを選択しましょう！Fast2testはきみのIT夢に向かって力になりますよ。Fast2testは多種なIT認証試験を受ける方を正確な資料を提供者でございます。弊社の無料なサンプルを遠慮なくダウンロードしてください。
AZ-802難易度受験料: https://jp.fast2test.com/AZ-802-premium-file.html