Microsoft AZ-802인증은 아주 중요한 인증시험중의 하나입니다. ITDumpsKR의 베터랑의 전문가들이 오랜 풍부한 경험과 IT지식으로 만들어낸 IT관연인증시험 자격증자료들입니다. 이런 자료들은 여러분이Microsoft인증시험중의AZ-802시험을 안전하게 패스하도록 도와줍니다. ITDumpsKR에서 제공하는 덤프들은 모두 100%통과 율을 보장하며 그리고 일년무료 업뎃을 제공합니다
| Section | Objectives |
|---|---|
| Secure and manage Windows Server environments | - Security and compliance
|
| Networking and high availability | - High availability and disaster recovery
|
| Hybrid infrastructure management | - Azure integration
|
| Compute, storage, and virtualization | - Virtual machines and containers
|
어떻게 하면 가장 편하고 수월하게 Microsoft AZ-802시험을 패스할수 있을가요? 그 답은 바로 ITDumpsKR에서 찾아볼수 있습니다. Microsoft AZ-802덤프로 시험에 도전해보지 않으실래요? ITDumpsKR는 당신을 위해Microsoft AZ-802덤프로Microsoft AZ-802인증시험이라는 높은 벽을 순식간에 무너뜨립니다.
질문 # 217
You are planning the implementation of Azure Arc to support the planned changes. You need to configure the environment to support configuration management policies. What should you do?
정답：A
설명：
Fabrikam ' s plan is to use Azure Policy to enforce configuration management policies across both its Azure and on-premises servers. Azure Policy ' s guest configuration capability, which evaluates and can remediate in-guest settings, only works against a server that is registered as an Azure resource. For an on-premises or non-Azure server, that registration is achieved by deploying the Azure Connected Machine agent, which onboards the machine as an Azure Arc-enabled server, gives it an Azure resource ID, and makes it a valid target for Azure Policy assignments, including guest configuration policies, in exactly the same way an Azure VM would be. Hybrid joining servers to Microsoft Entra ID affects identity and device management (such as Conditional Access) but does not make a server a valid Azure Policy target. A hybrid runbook worker lets Azure Automation runbooks execute on-premises but is unrelated to Azure Policy enforcement. The Azure Monitor agent collects telemetry into Log Analytics and Azure Monitor but does not register the server as an Arc resource or enable policy assignment on its own; it is typically deployed after Arc onboarding, not instead of it. Deploying the Azure Connected Machine agent is therefore the correct first step.
Topic 2, Case Study 1: Contoso, Ltd.
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
AD DS Environment: The network contains an on-premises Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains two domains named contoso.com and canada.contoso.com.
The forest contains the domain controllers shown in the exhibit below. All the domain controllers are global catalog servers.
Domain controllers
Server Infrastructure: The network contains the servers shown in the exhibit below. A server named Server4 runs Windows Server and is in a workgroup. Windows Firewall on Server4 uses the private profile. Server2 hosts three virtual machines named VM1, VM2, and VM3. VM3 is a file server that stores data in the volumes shown in the exhibit below.
Servers
VM3 volumes
Group Policies: The contoso.com domain has the Group Policy Objects (GPOs) shown in the exhibit below.
GPOs
Existing Identities: The forest contains the users shown in the exhibit below. The forest also contains the groups shown in the exhibit below.
Users
Groups
Current Problems: When an administrator signs in to the console of VM2 by using Virtual Machine Connection, and then disconnects from the session without signing out, another administrator can connect to the console session as the currently signed-in user.
Requirements: Contoso identifies the following technical requirements:
- Change the replication schedule for all site links to 30 minutes.
- Promote Server1 to a domain controller in canada.contoso.com.
- Install and authorize Server3 as a DHCP server.
- Ensure that User1 can manage the membership of all the groups in Contoso\OU3.
- Ensure that you can manage Server4 from Server1 by using PowerShell remoting.
- Ensure that you can run virtual machines on VM1.
- Force users to provide credentials when they connect to VM2.
- On VM3, ensure that Data Deduplication on all eligible volumes is possible.
질문 # 218
You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. A network interface named NI1 is assigned to VM1. The Ethernet adapter on VM1 is disabled. You need to use the Azure portal to enable the adapter. What should you use from the portal?
정답：D
설명：
When a Windows VM ' s network adapter is disabled inside the guest operating system, standard remote- management channels such as RDP become unavailable because the adapter that would carry that traffic is itself switched off, so the Azure-recommended portal-based fix is to use the Diagnostic settings blade for VM1 to turn on boot diagnostics if it is not already enabled. Boot diagnostics is in turn a prerequisite for the Serial Console feature, found under Support + troubleshooting on the VM ' s blade, which gives an administrator a SAC or CMD session directly into the VM ' s console over the hypervisor ' s serial channel rather than over the network, so it works even without any functioning network connectivity. From that Serial Console session, commands such as netsh interface set interface admin=enabled can be run against the disabled adapter to re-enable it, after which normal network access and RDP are restored. The IP configurations blade for NI1 only manages the Azure Resource Manager representation of the network interface, such as its private IP address assignment, and has no visibility into or control over the guest operating system ' s adapter enable/disable state, while neither Configuration settings nor Reset password addresses a disabled network adapter at all, making Diagnostic settings the correct starting point in the portal for this scenario.
질문 # 219
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. After you answer a question in this section, you will NOT be able to return to it. Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. You need to identify which server is the PDC emulator for the domain. Solution:
From Active Directory Domains and Trusts, you right-click Active Directory Domains and Trusts in the console tree, and then select Operations Master. Does this meet the goal?
정답：B
설명：
Each Active Directory MMC snap-in only exposes the specific FSMO role or roles that fall within its area of responsibility. Active Directory Domains and Trusts manages forest-level trust relationships and domain
/forest functional levels, and the single Operations Master dialog it provides - reached by right-clicking the root node of the console - shows only the Domain Naming Master, which is a forest-wide role responsible for adding or removing domains from the forest. It does not show the PDC Emulator, the RID Master, or the Infrastructure Master, all of which are domain-wide roles surfaced instead through Active Directory Users and Computers by right-clicking the domain object and selecting Operations Masters, then viewing the PDC tab specifically. Because the proposed action opens the Operations Master dialog from Active Directory Domains and Trusts rather than from Active Directory Users and Computers, it will report only the Domain Naming Master and gives no information about who holds the PDC Emulator role. Since the stated goal is specifically to identify the PDC Emulator, and this console cannot show that role under any circumstance, the solution does not meet the goal.
질문 # 220
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The functional level of the forest and the domain is Windows Server 2012 R2. The domain contains the domain controllers shown in the following table.
You need to raise the forest functional level to Windows Server 2016. The solution must meet the following requirements:
* Ensure that there are three domain controllers after you raises the level.
* Minimize how long the FSMO roles are unavailable.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Exhibit
정답：
설명：
Explanation:
1. Move the FSMO roles to DC2. 2. Upgrade DC1. 3. Raise the domain and forest functional level.
Raising the forest functional level to Windows Server 2016 requires every domain controller in the forest to be running Windows Server 2016 or later. DC3 already runs Windows Server 2019, which already qualifies, so DC1, running Windows Server 2012 R2, is the only domain controller that actually blocks the level raise.
Because DC1 currently holds all the FSMO roles and the requirement is to minimize how long those roles are unavailable while still ending up with three domain controllers, the correct approach is to first transfer the FSMO roles to DC2, which already runs a qualifying operating system and requires no downtime-inducing upgrade to receive them. Only after the roles have moved off DC1 is DC1 upgraded in place to a version meeting the Windows Server 2016 minimum, and once all three domain controllers qualify, the domain and forest functional level can finally be raised. This sequence keeps all three existing domain controllers in place
-- avoiding the need to deploy and later decommission an additional DC -- while the FSMO roles are unavailable only for the brief transfer itself rather than for the entire OS upgrade window on DC1.
질문 # 221
Your network contains an Active Directory Domain Services (AD DS) domain. You plan to use Active Directory Administrative Center to create a new user named User1. Which two attributes are required to create User1? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
정답：A,D
설명：
When you create a new user object through Active Directory Administrative Center (ADAC), the Create User dialog enforces exactly two attributes as mandatory before the object can be saved: the user ' s SamAccountName logon name (the pre-Windows 2000 logon name, unique within the domain) and the Full name field, which ADAC uses to derive the object ' s display name and Common Name (CN) in the directory.
Neither a password nor a UPN logon name is strictly mandatory at creation time in the ADAC UI: you can create a disabled account without setting a password immediately (though a password will be required before the account can be enabled and used to log on), and the UPN logon name is optional -- if left blank, AD DS can still construct an implicit UPN from the SamAccountName and the domain ' s UPN suffix. Profile path and First name are optional descriptive/administrative attributes that have no bearing on whether the object can be created; they can be added or edited at any time after the account exists. Therefore, the only two attributes ADAC treats as required to successfully create User1 are the SamAccountName logon name and the Full name, matching options C and D. This distinction matters operationally because bulk-provisioning scripts or delegated helpdesk staff using ADAC must supply at minimum these two values, while other fields such as password can be deferred to a later step in the account lifecycle (for example, when the account is enabled for first use).
질문 # 222
......
ITDumpsKR는 여러분이 원하는 최신 최고버전의 Microsoft 인증AZ-802덤프를 제공합니다. Microsoft 인증AZ-802덤프는 IT업계전문가들이 끊임없는 노력과 지금까지의 경험으로 연구하여 만들어낸 제일 정확한 시험문제와 답들로 만들어졌습니다. ITDumpsKR의 문제집으로 여러분은 충분히 안전이 시험을 패스하실 수 있습니다. 우리 ITDumpsKR 의 문제집들은 모두 100%합격율을 자랑하며 ITDumpsKR의 제품을 구매하였다면 Microsoft 인증AZ-802시험패스와 자격증 취득은 근심하지 않으셔도 됩니다. 여러분은 IT업계에서 또 한층 업그레이드 될것입니다.
AZ-802최고품질 덤프공부자료: https://www.itdumpskr.com/AZ-802-exam.html