The Microsoft AZ-802 topics or syllabus are updated with the passage of time. To pass the Microsoft AZ-802 exam you have to know these topics. The Microsoft AZ-802 certification exam trainers always work on these topics and add their appropriate Microsoft AZ-802 exam questions and answers in the AZ-802 exam dumps. These latest Administering Windows Server AZ-802 exam topics are added in all Microsoft AZ-802 exam questions formats. You also get the opportunity to download the latest AZ-802 PDF Questions and practice tests up to three months from the date of Microsoft AZ-802 exam dumps purchase. So rest assured that with Microsoft AZ-802 real dumps you will not miss even a single Microsoft AZ-802 exam questions in the final exam. Now take the best decision of your career and enroll in Administering Windows Server AZ-802 certification exam and start this journey with Administering Windows Server AZ-802 practice test questions.
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Implement high availability and disaster recovery | 5% | - Use Azure Site Recovery for hybrid workloads - Perform server and workload migrations - Implement backup and recovery solutions - Configure failover clustering - Monitor and troubleshoot Windows Server environments |
| Topic 2: Manage Windows Servers and workloads in a hybrid environment | 20% | - Configure remote management and secure administration - Manage updates and patches across hybrid servers - Deploy servers using Windows Admin Center and Azure Arc - Implement hybrid identity solutions |
| Topic 3: Manage virtual machines and containers | 15% | - Configure Azure Arc-enabled servers and VMs - Deploy and manage Hyper-V virtual machines - Deploy and manage containers and Kubernetes on Windows Server |
| Topic 4: Manage storage and file services | 15% | - Integrate on-premises storage with Azure Storage - Configure data deduplication and replication - Implement Storage Spaces and Storage Spaces Direct - Configure file servers and shares |
| Topic 5: Implement and manage an on-premises and hybrid networking infrastructure | 15% | - Configure IP addressing, DNS, and DHCP - Implement hybrid network connectivity - Configure software-defined networking - Secure network traffic in hybrid environments |
| Topic 6: Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments | 20% | - Manage FSMO roles and replication - Integrate AD DS with Azure AD and Azure Arc - Implement and manage Group Policy Objects - Install and configure domain controllers |
| Topic 7: Secure Windows Server on-premises and hybrid infrastructures | 10% | - Manage access control and permissions - Configure Windows Defender and audit policies - Implement security baselines and hardening |
Many people worry about buying electronic products on Internet, like our AZ-802 preparation quiz, we must emphasize that our AZ-802 simulating materials are absolutely safe without viruses, if there is any doubt about this after the pre-sale, we provide remote online guidance installation of our AZ-802 Exam Practice. It is worth noticing that some people who do not use professional anti-virus software will mistakenly report the virus.
NEW QUESTION # 38
You have the servers shown in the following table.
You plan to migrate file shares from Server1 to Server2.
You need to deploy the Storage Migration Service and the Storage Migration Service extension.
On which server should you install each component? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
The Storage Migration Service role (the orchestrator that manages the migration) requires an orchestrator server running Windows Server 2019 or later, and Microsoft explicitly recommends using the destination server as the orchestrator when only a single server is being migrated. Server2 is the only server in the table that meets this requirement (Windows Server 2025) - Server1 and Server3 both run Windows Server 2016, which does not qualify as an orchestrator. The Storage Migration Service tool (the Windows Admin Center extension used to drive the migration) runs on whichever machine is running the latest Windows Admin Center, which for a simple one-server migration is most naturally the same orchestrator/destination machine, Server2. Neither component has a Desktop Experience requirement, so the servers ' Install option (Server Core vs. Desktop Experience) is not a differentiator here - only the OS version requirement is, and both components can therefore be installed together on the single qualifying server.
NEW QUESTION # 39
Which three actions should you perform in sequence to meet the security requirements for Webapp1? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
1. Create the KDS root key in AD DS. 2. Create a group managed service account (gMSA) in Active Directory. 3. Configure the IIS application pool (on WEB1 and WEB2) to run as the gMSA via a specified user account.
The requirement is that every instance of Webapp1 (running on both WEB1 and WEB2) uses the same identity, and that identity ' s password rotates automatically every 30 days, without any administrator manually resetting it. A standalone managed service account (sMSA) is tied to a single computer and cannot be shared across WEB1 and WEB2, so it does not meet the requirement. A group managed service account (gMSA) is designed exactly for this scenario: one AD-managed identity that multiple servers can use simultaneously, with the Key Distribution Service automatically rotating its password (by default every 30 days) without needing manual intervention or downtime. Before any gMSA can be created in the forest, a one- time prerequisite must exist: the KDS root key, which the Key Distribution Service uses to generate and later recompute the gMSA ' s password material. So the correct order is to first create the KDS root key, then create the gMSA object in Active Directory, and finally configure the IIS application pool on each web server to run as that gMSA using the " specified user account " identity option (entered as domain\gMSA$ with no password required, since the password is centrally managed). Creating a system- or user-assigned managed identity in Microsoft Entra ID does not apply here, since Webapp1 runs on IIS on domain-joined VMs, not as an Azure PaaS resource.
Topic 3, Case Study 3: A Datum CorporationThis is a case study.
Case studies are not timed separately. You can use as much exam
time as you would like to complete each case. However, there may be
additional case studies and sections on this exam. You must manage
your time to ensure that you are able to complete all questions
included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
Overview: A Datum Corporation is a manufacturing company that has a main office in Seattle and two branch offices in Los Angeles and Montreal. A. Datum recently partnered with a company named Fabrikam, Inc. Fabrikam is a manufacturing company that has a main office in Boston and a branch office in Orlando.
Both companies intend to collaborate on several joint projects.
The on-premises network of A Datum contains an Active Directory Domain Services (AD DS) forest named adatum.com. The forest contains two domains named adatum.com and east.adatum.com, and the domain controllers shown in the exhibit below.
Domain controllers
The on-premises network of Fabrikam contains an AD DS forest named fabrikam.com. The forest contains two domains named fabrikam.com and south.fabrikam.com. The fabrikam.com domain contains an organizational unit (OU) named Marketing.
The adatum.com domain contains the servers shown in the exhibit below.
Servers
HyperV1 contains the virtual machines shown in the exhibit below. All the virtual machines on HyperV1 have only the default management tools installed.
HyperV1 virtual machines
SSPace1 contains the Storage Spaces virtual disks shown in the exhibit below.
SSPace1 virtual disks
A Datum has an Azure subscription that contains a Microsoft Entra tenant. Microsoft Entra Connect is configured to sync the adatum.com forest with Microsoft Entra ID. The subscription contains the virtual networks shown in the exhibit below.
Virtual networks
The subscription contains the Azure private DNS zones shown in the exhibit below.
Private DNS zones
The subscription contains the virtual machines shown in the exhibit below. All the servers are in a workgroup.
The subscription contains a storage account named storage1 that has a file share named share1.
Azure virtual machines
Planned Changes: A Datum plans to implement the following changes:
- Sync Data1 to share1.
- Configure an Azure runbook named Task1.
- Enable Microsoft Entra users to sign in to Server1.
- Create an Azure DNS Private Resolver that has the following configuration: Name: Private1; Region: West US; Virtual network: VNet1; Inbound endpoint: SubnetB.
- Enable users in the adatum.com domain to access the resources in the south.fabrikam.com domain.
Technical Requirements: A Datum identifies the following technical requirements:
- The data on SSPace1 must be available always.
- DC2 must become the schema master if DC1 fails.
- VMs must be configured to enable per-folder quotas.
- Trusts must allow access to only the required resources.
- The users in the Marketing OU must have access to storage1.
- Azure Automanage must be used on all supported Azure virtual machines.
- A direct SSH session must be used to manage all the supported virtual machines on HyperV1.
NEW QUESTION # 40
You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server.
You need to encrypt the disks connected to VM1 by using Azure Disk Encryption. The solution must use a key encryption key (KEK).
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Exhibit
Answer:
Explanation:
Explanation:
Using a key encryption key with Azure Disk Encryption requires the supporting key vault infrastructure to exist before the disk encryption VM extension is ever enabled, so the documented sequence begins with creating the Azure key vault that will store the KEK, using New-AzKeyVault, optionally with - EnabledForDiskEncryption set for the Microsoft Entra application-based access model that some Azure Disk Encryption configurations still use. Add-AzKeyVaultKey is then run against that newly created vault to generate the actual key encryption key inside it, producing the key ' s versioned key identifier URL, which is what Azure Disk Encryption will later use to wrap, or encrypt, the BitLocker or DM-Crypt encryption secret rather than storing that secret in the clear. Finally, Set-AzVMDiskEncryptionExtension is run against VM1, passing in the key vault ' s resource information along with the KEK ' s key URL and key encryption algorithm, so the extension both encrypts the disks and stores the resulting encryption secret in the vault protected by that key, completing the full KEK-based encryption workflow in the correct dependency order:
vault first, then key, then the extension that consumes both.
NEW QUESTION # 41
Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.
com. The domain contains three servers that run Windows Server and have the Hyper-V server role installed.
Each server has a Switch Embedded Teaming (SET) team. You need to verify that Remote Direct Memory Access (RDMA) and all the required Windows Server settings are configured properly on each server. What should you use?
Answer: C
Explanation:
RDMA over Converged Ethernet (RoCE), which is what SET-teamed adapters typically use to carry RDMA traffic, depends on Data Center Bridging (DCB) being correctly configured end to end, including matching priority flow control (PFC) and traffic class settings between the server ' s network adapters and the physical switches. The Validate-Dcb cmdlet, part of the DcbQos PowerShell module, is the Microsoft-documented tool specifically built to check that DCB and the associated RDMA prerequisites are configured consistently and correctly on a host, and it is the standard troubleshooting step recommended before placing SET-teamed, RDMA-capable adapters into production, particularly ahead of building a Storage Spaces Direct or Hyper-V failover cluster on top of them. Server Manager provides only general role and feature management with no DCB/RDMA validation capability. Get-NetAdapter reports basic adapter status and properties (link state, speed) but does not validate DCB policy correctness. Failover Cluster Manager manages a cluster ' s resources and validates general cluster configuration through the Validate a Configuration Wizard, but the granular DCB
/RDMA settings check that this scenario calls for is performed with Validate-Dcb, independent of whether a cluster has even been created yet.
NEW QUESTION # 42
Your network contains an on-premises Active Directory Domain Services (AD DS) forest named contoso.
com. The forest contains three domain controllers that have the DNS Server role installed and host an Active Directory-integrated zone for contoso.com. The DNS servers use existing forwarders for internet name resolution. You have a partner company that owns a DNS namespace named fabrikam.com and provides DNS servers at IP addresses 172.16.10.10 and 172.16.10.11 over a Site-to-Site (S2S) VPN. You need to configure the DNS servers in the contoso.com forest. The solution must meet the following requirements: - Send queries for fabrikam.com to the partner company ' s DNS servers. - Continue to use the existing forwarders for other external namespaces. - Apply the configuration to all the current and future DNS servers on the domain controllers in contoso.com. What should you do?
Answer: A
Explanation:
A conditional forwarder routes queries for one specific namespace, here fabrikam.com, to designated DNS servers, leaving the server ' s regular forwarders configuration untouched for every other external name, so it satisfies both the namespace-specific redirection requirement and the requirement to keep using the existing forwarders for all other external lookups; a plain (unconditional) forwarders change would instead redirect every external query, breaking general internet resolution. The requirement to apply the configuration to all current and future DNS servers on the domain controllers in contoso.com is the deciding factor between the two kinds of conditional forwarders: an Active Directory-integrated conditional forwarder is stored in and replicated through an AD DS application directory partition, so creating it once causes it to automatically propagate to every DNS server hosted on a domain controller in the forest today and to any new DNS server promoted later, with no additional configuration step required. A locally stored conditional forwarder exists only in that one server ' s own configuration and must be manually recreated on every other DNS server, and again on any future DNS server, failing the ' future DNS servers ' requirement. Root hints only govern the fallback used when no forwarder answers, are not scoped to a specific namespace, and would not deterministically send fabrikam.com queries to the partner ' s servers over the S2S VPN.
NEW QUESTION # 43
......
The software boosts varied self-learning and self-assessment functions to check the results of the learning. The software can help the learners find the weak links and deal with them. Our AZ-802 exam torrent boosts timing function and the function to stimulate the exam. Our product sets the timer to stimulate the exam to adjust the speed and keep alert. Our AZ-802 study questions have simplified the complicated notions and add the instances, the stimulation and the diagrams to explain any hard-to-explain contents.
AZ-802 Test Centres: https://www.premiumvcedump.com/Microsoft/valid-AZ-802-premium-vce-exam-dumps.html