The simulation of the actual Microsoft AZ-802 test helps you feel the real AZ-802 exam scenario, so you don't face anxiety while giving the final examination. You can even access your last test results, which help to realize your mistakes and try to avoid them while taking the Microsoft AZ-802 Certification test.
| Section | Objectives |
|---|---|
| Topic 1: Hybrid infrastructure management | - Azure integration
|
| Topic 2: Secure and manage Windows Server environments | - Security and compliance
|
| Topic 3: Compute, storage, and virtualization | - Virtual machines and containers
|
| Topic 4: Networking and high availability | - High availability and disaster recovery
|
>> Reliable AZ-802 Test Bootcamp <<
To make sure you have all the practice you need, our AZ-802 practice test also includes numerous opportunities for you to put your skills to the AZ-802 test. Our Microsoft AZ-802 practice exams simulate the real thing, so you can experience the pressure and environment of the actual Administering Windows Server (AZ-802) test before the day arrives. You'll receive detailed feedback on your performance, so you know what areas to focus on and improve. At the Dumpcollection, we're committed to your success and believe in the effectiveness of our AZ-802 exam dumps.
NEW QUESTION # 422
You have the resources shown in the following table. Your on-premises network is connected to VNet1 by using a Site-to-Site VPN. The network traffic sent from Server1 fails to reach VM1. You need to review the contents of the network traffic sent from Server1 to VM1. What should you do first? (Exhibit: resources table.)
Resources
Answer: A
Explanation:
Reviewing the actual contents of packets exchanged between two endpoints, rather than just connection metadata like source and destination addresses or allow/deny outcomes, calls for a packet-capture capability positioned at the point where the traffic actually originates, which in this scenario is the on-premises server, Server1, rather than anywhere inside Azure. NSG flow logs on NSG1 only record 5-tuple flow information and allow or deny decisions for traffic crossing that network security group in Azure, and enabling Windows Firewall logging directly on Server1 similarly records connection attempts and firewall decisions rather than the actual packet contents, so neither option satisfies the stated requirement to inspect what is inside the traffic. Server2 already has Windows Admin Center installed and can manage Server1 remotely without needing a separate WAC installation on Server1 itself, and Windows Admin Center ' s Packet Monitoring extension, built on the built-in pktmon utility, can capture traffic leaving Server1 toward VM1 and, once exported, fully decode it for inspection. Azure Network Watcher ' s packet capture feature, by comparison, is implemented as an extension that runs on an Azure virtual machine and cannot be pointed at an on-premises server like Server1 at all, making it unusable for capturing traffic at its actual on-premises source in this scenario.
NEW QUESTION # 423
You have an on-premises server named Server1 that runs Windows Server and has the Hyper-V server role installed. Server1 hosts a virtual machine named VM1 that runs Windows Server.
You need to protect VM1 by using Azure Site Recovery. The solution must use Azure as the disaster recovery site.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
Setting up disaster recovery for an on-premises Hyper-V virtual machine to Azure begins by creating a Recovery Services vault in the Azure portal, since this vault is the container resource that will hold all of the replication configuration, recovery points, and site information for the protected virtual machines going forward. Within that vault, the next step is to create a Hyper-V site, which is the logical construct in Azure Site Recovery that represents the on-premises Hyper-V environment, in this case the environment containing Server1 and VM1, and groups together the Hyper-V hosts that will be registered to it. After the Hyper-V site exists, the Azure Site Recovery Provider, along with the accompanying Microsoft Azure Recovery Services agent, is downloaded from the vault and installed directly on the Hyper-V host itself, Server1, which registers that host with the Hyper-V site just created and establishes the communication channel it needs to talk to the Recovery Services vault in Azure. Only after the provider is installed and Server1 is registered can the target environment settings, meaning which Azure network, storage accounts, and other Azure resources VM1 will actually use once it fails over, be configured in the vault, and this configuration must happen before replication itself can be enabled for VM1, matching the documented order of operations for setting up Hyper- V-to-Azure disaster recovery.
NEW QUESTION # 424
Which three actions should you perform in sequence to meet the security requirements for Webapp1? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
1. Create the KDS root key in AD DS. 2. Create a group managed service account (gMSA) in Active Directory. 3. Configure the IIS application pool (on WEB1 and WEB2) to run as the gMSA via a specified user account.
The requirement is that every instance of Webapp1 (running on both WEB1 and WEB2) uses the same identity, and that identity ' s password rotates automatically every 30 days, without any administrator manually resetting it. A standalone managed service account (sMSA) is tied to a single computer and cannot be shared across WEB1 and WEB2, so it does not meet the requirement. A group managed service account (gMSA) is designed exactly for this scenario: one AD-managed identity that multiple servers can use simultaneously, with the Key Distribution Service automatically rotating its password (by default every 30 days) without needing manual intervention or downtime. Before any gMSA can be created in the forest, a one- time prerequisite must exist: the KDS root key, which the Key Distribution Service uses to generate and later recompute the gMSA ' s password material. So the correct order is to first create the KDS root key, then create the gMSA object in Active Directory, and finally configure the IIS application pool on each web server to run as that gMSA using the " specified user account " identity option (entered as domain\gMSA$ with no password required, since the password is centrally managed). Creating a system- or user-assigned managed identity in Microsoft Entra ID does not apply here, since Webapp1 runs on IIS on domain-joined VMs, not as an Azure PaaS resource.
Topic 3, Case Study 3: A Datum CorporationThis is a case study.
Case studies are not timed separately. You can use as much exam
time as you would like to complete each case. However, there may be
additional case studies and sections on this exam. You must manage
your time to ensure that you are able to complete all questions
included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
Overview: A Datum Corporation is a manufacturing company that has a main office in Seattle and two branch offices in Los Angeles and Montreal. A. Datum recently partnered with a company named Fabrikam, Inc. Fabrikam is a manufacturing company that has a main office in Boston and a branch office in Orlando.
Both companies intend to collaborate on several joint projects.
The on-premises network of A Datum contains an Active Directory Domain Services (AD DS) forest named adatum.com. The forest contains two domains named adatum.com and east.adatum.com, and the domain controllers shown in the exhibit below.
Domain controllers
The on-premises network of Fabrikam contains an AD DS forest named fabrikam.com. The forest contains two domains named fabrikam.com and south.fabrikam.com. The fabrikam.com domain contains an organizational unit (OU) named Marketing.
The adatum.com domain contains the servers shown in the exhibit below.
Servers
HyperV1 contains the virtual machines shown in the exhibit below. All the virtual machines on HyperV1 have only the default management tools installed.
HyperV1 virtual machines
SSPace1 contains the Storage Spaces virtual disks shown in the exhibit below.
SSPace1 virtual disks
A Datum has an Azure subscription that contains a Microsoft Entra tenant. Microsoft Entra Connect is configured to sync the adatum.com forest with Microsoft Entra ID. The subscription contains the virtual networks shown in the exhibit below.
Virtual networks
The subscription contains the Azure private DNS zones shown in the exhibit below.
Private DNS zones
The subscription contains the virtual machines shown in the exhibit below. All the servers are in a workgroup.
The subscription contains a storage account named storage1 that has a file share named share1.
Azure virtual machines
Planned Changes: A Datum plans to implement the following changes:
- Sync Data1 to share1.
- Configure an Azure runbook named Task1.
- Enable Microsoft Entra users to sign in to Server1.
- Create an Azure DNS Private Resolver that has the following configuration: Name: Private1; Region: West US; Virtual network: VNet1; Inbound endpoint: SubnetB.
- Enable users in the adatum.com domain to access the resources in the south.fabrikam.com domain.
Technical Requirements: A Datum identifies the following technical requirements:
- The data on SSPace1 must be available always.
- DC2 must become the schema master if DC1 fails.
- VMs must be configured to enable per-folder quotas.
- Trusts must allow access to only the required resources.
- The users in the Marketing OU must have access to storage1.
- Azure Automanage must be used on all supported Azure virtual machines.
- A direct SSH session must be used to manage all the supported virtual machines on HyperV1.
NEW QUESTION # 425
You have a server named Host1 that has the Hyper-V server role installed. Host1 hosts a virtual machine named VM1. You have a management server named Server1 that runs Windows Server. You remotely manage Host1 from Server1 by using Hyper-V Manager. You need to ensure that you can access a USB hard drive connected to Server1 when you connect to VM1 by using Virtual Machine Connection. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Answer: C,D
Explanation:
Redirecting a local device such as a USB hard drive that is physically connected to the client computer (Server1) into a Virtual Machine Connection session requires Enhanced Session Mode, which upgrades the VMConnect session to use RDP-based redirection channels instead of a raw console attach; a basic session has no device-redirection capability at all, so switching to a basic session (option C) would remove USB redirection rather than enable it. Enhanced Session Mode must first be allowed at the host level, which is configured in Hyper-V Settings on Host1 under the Enhanced Session Mode Policy setting. Once Enhanced Session Mode is permitted by the host, the actual redirection of a specific local resource, such as a drive, printer, or supported Plug and Play device, is selected per-connection from the Virtual Machine Connection client itself by expanding Show Options and choosing the local resources tab, where the USB hard drive can be selected for redirection into the session. Attaching a virtual hard disk or rescanning disks in Disk Management on Host1 would only be relevant if you were trying to present the physical drive as a native Hyper-V virtual hard disk to the VM, which is a different (and here, unnecessary) approach; the requirement specifically calls for Virtual Machine Connection-based redirection, achieved through options A and D.
NEW QUESTION # 426
Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest is the forest root and contains a child domain named east.contoso.com. In the contoso.com domain, you create two users named Admin1 and Admin2. You need to ensure that the users can perform the following tasks:
Admin1 can create and manage Active Directory sites; Admin2 can deploy a domain controller to the east.
contoso.com domain. The solution must use the principle of least privilege. To which group should you add each user? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Admin1: Contoso\Domain Admins. Admin2: East\Domain Admins.
Site, subnet, and site-link objects live in the Configuration partition, and by default rights over that partition are held by Enterprise Admins and by the Domain Admins group of the forest root domain - here, contoso.
com is explicitly the forest root, so Contoso\Domain Admins already has the rights Admin1 needs to create and manage sites, without requiring the broader, forest-wide Enterprise Admins membership; adding Admin1 there instead would grant far more than necessary and violate least privilege. Promoting a new domain controller into a specific domain requires either Enterprise Admins (forest-wide) or membership in the Domain Admins group of that target domain specifically. Since Admin2 only needs to deploy a domain controller into east.contoso.com, the least-privileged sufficient group is East\Domain Admins, the Domain Admins group of that child domain itself, rather than Enterprise Admins, which would additionally grant rights over contoso.com and every other domain in the forest. Contoso\Administrators and East\Administrators are local administrative groups scoped to built-in server administration and do not carry AD DS object-level management rights, so neither satisfies either requirement.
NEW QUESTION # 427
......
Latest AZ-802 exam torrent contains examples and diagrams to illustrate points and necessary notes under difficult points. Remember and practice what AZ-802 quiz guides contain will be enough to cope with the exam this time. When dealing with the similar exam in this area, our former customers order the second even the third time with compulsion and confidence. That can be all ascribed to the efficiency of our AZ-802 Quiz guides. On our word of honor, these AZ-802 test prep will help you who are devoid of efficient practice materials urgently.
Test AZ-802 Questions Answers: https://www.dumpcollection.com/AZ-802_braindumps.html