Additionally, all operating systems also support this format. The third format is the desktop AZ-802 Practice Exam software. It is ideal for users who prefer offline Administering Windows Server (AZ-802) exam practice. This format is supported by Windows computers and laptops. You can easily install this software in your system to use it anytime to prepare for the examination.
| Section | Objectives |
|---|---|
| Secure Windows Server hybrid infrastructures | - Identity and access management
|
| Manage hybrid compute and virtualization | - Containers
|
| Networking and storage infrastructure | - Networking
|
| Disaster recovery and migration | - Migration scenarios
|
| Implement and manage high availability | - Load balancing and redundancy
|
| Monitoring and troubleshooting | - System monitoring
|
>> AZ-802 New Soft Simulations <<
For your satisfaction, TrainingDump provides you the facility of free AZ-802 brain dumps demo. You can easily download them from our website and examine their quality and usefulness. Compare them with AZ-802 brain dumps and others available with you. You will find these amazing AZ-802 test dumps highly compatible with your needs as well as quite in line with the Real AZ-802 Exam Questions. TrainingDump AZ-802 exam dumps promise you an outstanding exam success with an assurance of 100% money refund, if its dumps fail to help you pass the exam with flying colors.
NEW QUESTION # 423
You are planning the migration of APP3 and APP4 to support the Azure migration plan. What should you do on Cluster1 and in Azure before you perform the migration? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
On Cluster1: Import the Azure Migrate appliance. In Azure: Create an Azure Migrate project.
APP3 and APP4 run as virtual machines on the on-premises Cluster1 Hyper-V failover cluster, so migrating them to Azure uses the Azure Migrate: Server Migration workflow for Hyper-V. That workflow requires an Azure Migrate project to first be created in Azure, since the project is the container that organizes the migration effort, tracks discovered and assessed machines, and holds the configuration for the subsequent discovery and replication work. On the Cluster1 side, the Azure Migrate appliance -- a purpose-built VM or OVA image supplied by Azure Migrate specifically for Hyper-V environments -- must be imported (deployed) onto the Hyper-V host or cluster, where it discovers the VMs running there and orchestrates their replication into Azure. Configuring an Azure Network Adapter, creating a Point-to-Site VPN connection to Vnet1, installing the Azure File Sync agent, and installing the Windows Server Migration Tools are all unrelated actions that do not perform Hyper-V VM discovery or replication for an Azure Migrate project.
Similarly, creating a premium block blob storage account, a private endpoint, or a VPN gateway in Azure are not the resource that Azure Migrate itself requires to begin a migration project -- an Azure Migrate project is.
Therefore, importing the Azure Migrate appliance onto Cluster1 and creating an Azure Migrate project in Azure are the two required preparatory actions.
NEW QUESTION # 424
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a server named Server1 that runs Windows Server. You need to ensure that only specific applications can modify the data in protected folders on Server1. Solution: From App & browser control, you configure the Exploit protection settings. Does this meet the goal?
Answer: B
Explanation:
Exploit protection, found under App & browser control in the Windows Security app, applies system-wide and per-application mitigations against memory-corruption and code-execution exploit techniques, such as Data Execution Prevention (DEP), Address Space Layout Randomization (ASLR), Control Flow Guard, and restrictions on child-process creation or Win32k system call use. These mitigations harden individual applications against being exploited by malicious code that tries to hijack their execution flow; they do not govern, allow-list, or restrict which applications are permitted to modify files inside specific protected folders, and Exploit protection has no concept of a " protected folder " at all. Configuring Exploit protection therefore has no effect whatsoever on which applications can write to the protected folders described in the requirement, regardless of how its individual mitigation settings are tuned for Server1. Only Controlled folder access, configured from Virus & threat protection > Manage ransomware protection rather than from App & browser control, provides that specific folder-level application allow-listing capability. Therefore, configuring the Exploit protection settings does not meet the goal.
NEW QUESTION # 425
You have an on-premises datacenter named DC1. You have an Azure subscription that contains the resources shown in the following table: VNet1 (Virtual network), contoso.com (Azure Private DNS zone, linked to VNet1), Server1 (Virtual machine -- runs Windows Server, connects to VNet1, has the DNS Server role installed, resolves names for contoso.com by using a conditional forwarder), ER1 (ExpressRoute circuit, connects DC1 and VNet1). You plan to perform the following actions: * Provision an Azure DNS Private Resolver named PR1 on VNet1. * Migrate Server1 to the on-premises datacenter. You need to ensure that once Server1 is migrated to the datacenter, the server can resolve names for entries created in contoso.com.
What should you do?
Azure resource table
Answer: B
Explanation:
An Azure Private DNS zone such as contoso.com is only directly resolvable by resources inside a virtual network it is linked to; once Server1 is migrated out of VNet1 to the on-premises datacenter, it loses that direct resolution path and needs a route back into Azure to reach the private zone ' s records. An Azure DNS Private Resolver ' s inbound endpoint is specifically designed to provide an IP address inside the VNet that on- premises DNS infrastructure (reachable via the existing ExpressRoute circuit, ER1) can send queries to for names in the linked private zone. Since Server1 already runs the DNS Server role and already has a conditional forwarder configured for contoso.com (previously usable while Server1 was inside the VNet), the necessary follow-up action after migration is to modify that existing conditional forwarder so it points at PR1 ' s inbound endpoint IP address, letting Server1 continue resolving contoso.com entries by forwarding those specific queries over ER1 into Azure. Creating a secondary zone on Server1 would not work, since Azure Private DNS zones do not support zone transfers (AXFR/IXFR) at all. Creating an outbound endpoint on PR1, or a DNS forwarding ruleset associated with an outbound endpoint, are both mechanisms for resolving external (for example, on-premises) namespaces from within Azure -- the opposite direction of what ' s needed here, which is on-premises resolution of an Azure-hosted private zone. Therefore, modifying Server1 ' s conditional forwarder for contoso.com to target PR1 ' s inbound endpoint is the correct action.
NEW QUESTION # 426
DC1 fails.
You need to meet the technical requirements for the schema master.
Yourunntdsutil.exe.
Which five commands should you run in sequence? To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the correct order?
Answer:
Explanation:
Explanation:
1. roles 2. connections 3. connect to server dc2.adatum.com 4. quit 5. seize schema master Because DC1 has failed and cannot gracefully transfer the schema master role, DC2 must forcibly seize it using ntdsutil.exe. From the initial ntdsutil prompt, the first command is roles, which enters the Role Management submenu where FSMO role transfers and seizures are performed. From within that submenu, the command connections opens the Connections submenu, which is required before you can bind ntdsutil to a specific target domain controller. Inside the Connections submenu, connect to server dc2.adatum.com establishes the bind to DC2, the domain controller that will actually take over the schema master role. The quit command then exits the Connections submenu and returns to the Role Management submenu while keeping the established connection to DC2 active. Finally, seize schema master, executed from the Role Management submenu while bound to DC2, forces DC2 to take ownership of the schema master role even though DC1 (the previous holder) is offline and cannot be contacted to confirm the transfer. The unused command in the list, metadata cleanup, is a separate, later step used to remove the failed DC1 ' s leftover directory metadata once its roles have been reassigned; it is not part of seizing the schema master role itself, so it is correctly left out of this five-step sequence.
Topic 4, Case Study 4: Fabrikam, Inc.
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
Overview: Fabrikam, Inc. is a manufacturing company that has a main office in Chicago and a branch office in Paris.
Existing Environment -- Identity Infrastructure: Fabrikam has an Active Directory Domain Services (AD DS) forest that syncs with a Microsoft Entra ID tenant. The AD DS forest contains two domains named corp.
fabrikam.com and europe.fabrikam.com.
Chicago Office On-Premises Servers: The office in Chicago contains on-premises servers that run Windows Server 2016 as shown in the following table.
Chicago office on-premises servers
All the servers in the Chicago office are in the corp.fabrikam.com domain.
All the virtual machines in the Chicago office are hosted on HV1 and HV2. HV1 and HV2 are nodes in a failover cluster named Cluster1.
WEB1 and WEB2 run an Internet Information Services (IIS) website. Internet users connect to the website by using a URL of https://www.fabrikam.com.
All the users in the Chicago office run an application that connects to a UNC path of \\Fileserver1\Data.
Paris On-Premises Servers: The office in Paris contains a physical server named dc2.europe.fabrikam.com that runs Windows Server 2016 and is a domain controller for the europe.fabrikam.com domain.
Network Infrastructure: The networks in both the Chicago and Paris offices have local internet connections.
The Chicago and Paris offices are connected by using VPN connections. The client computers in the Chicago office get IP addresses from DHCP1.
Security Risks: Fabrikam identifies the following security risks:
-- Some accounts connect to AD DS resources by using insecure protocols such as NTLMv1, SMB1, and unsigned LDAP.
-- Servers have Windows Defender Firewall enabled. Server administrators sometimes modify firewall rules and allow risky connections.
Requirements -- Security Requirements: Fabrikam identifies the following security requirements:
-- Prevent server administrators from configuring Windows Defender Firewall rules.
-- Encrypt all the data disks on the servers by using BitLocker Drive Encryption (BitLocker).
-- Ensure that only authorized applications can be installed or run on the servers in the forest.
-- Implement Microsoft Sentinel as a reporting solution to identify all connections to the domain controllers that use insecure protocols.
On-Premises Migration Plan: Fabrikam plans to migrate all the existing servers and identifies the following migration requirements:
-- Move the APP1 and APP2 virtual machines in the Chicago office to a new Hyper-V failover cluster named Cluster2 that will run Windows Server 2022. Cluster2 will contain two new nodes named HV3 and HV4. All virtual machine files will be stored on a Cluster Shared Volume (CSV).
-- Migrate Archive1 to a new failover cluster named Cluster3 that will run Windows Server 2022. Cluster3 will contain two physical nodes named Node1 and Node2. The file shares on Cluster3 will be a failover cluster role in active-passive mode.
-- Migrate all users, groups, and client computers from europe.fabrikam.com to corp.fabrikam.com. User accounts will retain their existing password.
-- Migrate the data share from Fileserver1 to a new server named Fileserver2 that will run Windows Server
2022. After the migration, the data share must be accessible by using the existing UNC path.
Azure Migration Plan: Fabrikam plans to migrate some resources to Azure and identifies the following migration requirements:
-- Create an Azure subscription named Sub1 and an Azure virtual network named Vnet1. Use ExpressRoute to connect the Paris and Chicago offices to Vnet1.
-- License all servers for Microsoft Defender for Servers.
-- Migrate APP3 and APP4 to Azure.
-- Migrate the www.fabrikam.com website to an Azure App Service web app named WebApp1, then decommission WEB1 and WEB2.
DHCP Migration Plan: Fabrikam plans to replace DHCP1 with a new server named DHCP2 and identifies the following migration requirements:
-- Ensure that DHCP2 provides the same IP addresses that are currently available from DHCP1.
-- Prevent DHCP1 from servicing clients once services are enabled on DHCP2.
-- Ensure that the existing leases and reservations are migrated.
NEW QUESTION # 427
You have an on-premises virtual machine named VM1 that runs Windows Server. You have an Azure subscription. You plan to use an Azure Site Recovery replication policy to replicate VM1 to Azure. You need to ensure that changes on VM1 are replicated as often as possible. To what should you set the Copy frequency setting for the policy?
Answer: C
Explanation:
Azure Site Recovery ' s replication policy for protecting on-premises Hyper-V virtual machines by replicating them to Azure is built on top of the underlying Hyper-V Replica engine, and the Copy frequency setting exposed in that replication policy offers only a small, fixed set of selectable intervals rather than an arbitrary custom value, with the shortest of those available intervals being 30 seconds. Selecting 30 seconds for the Copy frequency setting therefore configures the replication policy to send VM1 ' s changed data to Azure as frequently as the underlying platform allows, which produces the smallest achievable recovery point interval and the least amount of potential data loss in the event of a failover, directly satisfying the requirement to replicate changes as often as possible. Values shorter than 30 seconds, such as 15 seconds, are not among the set of supported choices for this setting at all, since the Hyper-V Replica engine underlying this replication policy was not designed to support sub-30-second replication cycles, and the 1-minute and 5-minute options, while valid selectable choices, both replicate less frequently than the 30-second option and would therefore not satisfy the requirement to minimize the interval between replication cycles as much as the platform supports.
NEW QUESTION # 428
......
Failure in the AZ-802 test of the Administering Windows Server credential leads to loss of time and money. Therefore preparing with Administering Windows Server actual test questions matters a lot to save time and money. The prep material of TrainingDump comes in three different formats so that users with different study styles can prepare with ease. We have made this Administering Windows Server product after taking feedback of experts so that applicants can prepare for the Microsoft AZ-802 Exam successfully.
AZ-802 New Practice Questions: https://www.trainingdump.com/Microsoft/AZ-802-practice-exam-dumps.html