現在でMicrosoftのAZ-802試験を受かることができます。CertShikenにMicrosoftのAZ-802試験のフルバージョンがありますから、最新のMicrosoftのAZ-802のトレーニング資料をあちこち探す必要がないです。CertShikenを利用したら、あなたはもう最も良いMicrosoftのAZ-802のトレーニング資料を見つけたのです。弊社の質問と解答を安心にご利用ください。あなたはきっとMicrosoftのAZ-802試験に合格できますから。
| Section | Objectives |
|---|---|
| Hybrid infrastructure management | - Azure integration
|
| Networking and high availability | - Networking infrastructure
|
| Secure and manage Windows Server environments | - Identity and access management
|
| Compute, storage, and virtualization | - Virtual machines and containers
|
CertShikenのMicrosoftのAZ-802問題集を選んだら、成功を選ぶのに等しいです。もしうちの学習教材を購入するなら、CertShikenは一年間で無料更新サービスを提供することができます。CertShikenのMicrosoftのAZ-802認定試験の合格率は１００パーセントになっています。不合格になる場合或いはMicrosoftのAZ-802問題集がどんな問題があれば、私たちは全額返金することを保証いたします。
質問 # 526
You have an Active Directory Domain Services (AD DS) forest that has the Active Directory Recycle Bin enabled. The forest contains a user named User1. User1 is accidentally deleted. You need to restore User1 from the Active Directory Recycle Bin. What should you use?
正解：D
解説：
With the Active Directory Recycle Bin enabled, deleted objects retain their attributes and can be restored, and Active Directory Administrative Center is the graphical tool that exposes the Deleted Objects container and a Restore (or Restore To) action for recovering them, including User1. Active Directory Users and Computers does not expose the Deleted Objects container by default and has no restore functionality, and Sites and Services or Domains and Trusts are unrelated to object recovery. ADAC is therefore the tool to use for a straightforward Recycle Bin restore of a deleted user. From ADAC, an administrator navigates to the Deleted Objects container in the domain, selects User1, and chooses Restore to return the account to its original location with its original attributes and group memberships intact, avoiding the more involved authoritative- restore or tombstone-reanimation procedures required when the Recycle Bin is not enabled. The same restore operation can also be performed with the Restore-ADObject PowerShell cmdlet once the object ' s deleted- object GUID is identified, which is a useful alternative when scripting bulk recoveries rather than restoring a single account interactively through ADAC.
質問 # 527
You need to configure the Group Policy settings to ensure that the Azure Virtual Desktop session hosts meet the security requirements. What should you configure?
正解：F
解説：
GPO4 is already linked to the VirtualDesktops OU, which contains the Azure Virtual Desktop session host computer accounts, so it is correctly targeted at the right computers. The requirement is that the idle lockout behavior configured in GPO4 must apply to whichever user is signed in to a session host, and that the user must still be able to adjust the lockout time manually from their own client, which means the relevant setting is a per-user configuration item rather than a strict, non-negotiable computer policy. By default, user- configuration settings inside a GPO apply based on the OU containing the user account, not the computer the user signs in to; Fabrikam ' s users are located in the AllUsers OU, which is governed by GPO1, not GPO4.
Group Policy Loopback Processing, enabled in GPO4 and set to Merge (to allow the client-side adjustment) or Replace, forces the user-configuration portion of GPO4 to apply to any user who logs on to a computer in the VirtualDesktops OU, regardless of where that user ' s own account resides. Security filtering and the Enforced property both affect who a GPO applies to or its precedence in conflicts, but neither one makes a GPO ' s user-side settings follow the computer instead of the user, so loopback processing in GPO4 is correct.
質問 # 528
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a group named Group1 and a server named Server1 that runs Windows Server.
Server1 has the File Server Resource Manager (FSRM) role service installed and contains a file share named Share1.
You need to configure Server1 to meet the following requirements:
* Prevent the members of Group1 from storing more than 10 GB of files on Share1.
* Ensure that the administrators of Server1 receive a regular email that lists duplicate files on Server1.
How should you configure Server1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation:
Prevent storage beyond 10 GB: Configure a hard quota
Regular duplicate-file email: Configure a storage report task
FSRM quotas can enforce storage limits at the folder level. A hard quota prevents additional files from being saved when the configured limit is reached, whereas a soft quota only tracks usage and generates notifications. Therefore, a 10-GB hard quota is required for Share1. For the reporting requirement, FSRM Storage Reports Management includes a Duplicate Files report and supports scheduled storage report tasks.
The task can be configured to run regularly and deliver the resulting report to administrator email addresses.
Microsoft documents that FSRM quotas can restrict space on a folder and that storage reports can be delivered directly to administrators by email. These two FSRM capabilities independently satisfy the capacity- enforcement and scheduled-reporting requirements. Microsoft Learn
質問 # 529
You have an Azure subscription that contains the virtual networks shown in the following table: VNet1 (Subnet11, Subnet12, West US), VNet2 (Subnet21, West US), VNet3 (Subnet31, Central US). You deploy a virtual machine named VM1 that runs Windows Server. VM1 is connected to Subnet11. You plan to add an additional network interface named NIC1 to VM1. To which subnets can NIC1 be attached?
Virtual network/subnet/region table
正解：E
解説：
All network interfaces attached to a single Azure VM must belong to the same virtual network as each other -- Azure does not permit a multi-NIC VM to have its NICs spread across different virtual networks, even if those networks are peered or located in the same region. NICs on the same VM can, however, be placed in different subnets within that one shared virtual network. Since VM1 ' s existing NIC is connected to Subnet11, which is part of VNet1, any additional NIC (NIC1) added to VM1 must also be created within VNet1 -- meaning it can be placed in either Subnet11 or Subnet12, both of which belong to VNet1. VNet2 ' s Subnet21, despite being in the same West US region as VNet1, is a separate virtual network and therefore not a valid target for a second NIC on VM1 (VNet peering enables routed connectivity between VNets, but it does not let a VM ' s NIC be provisioned inside a peered VNet ' s subnet). VNet3 ' s Subnet31 is both a different virtual network and a different region (Central US), making it even less eligible. Therefore, NIC1 can only be attached to Subnet11 or Subnet12, both within VM1 ' s existing virtual network, VNet1.
質問 # 530
You have a failover cluster named FC1 that contains two nodes named Server1 and Server2. FC1 is configured to use a file share witness. You plan to configure FC1 to use a cloud witness. You need to configure Azure Storage accounts for the cloud witness. Which storage account type and authorization method should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation:
Storage account type: Standard. Authentication method: Access key.
A cloud witness for a Windows Server failover cluster requires an Azure Standard general-purpose storage account; premium storage account types (premium block blobs, premium file shares, premium page blobs) are explicitly not supported for this purpose, since the cloud witness feature is documented against the standard general-purpose account type only. Authentication to the storage account for the cloud witness is performed using the storage account ' s access key (primary or secondary); the cluster internally converts this key into a Shared Access Signature (SAS) token for secure storage rather than storing the raw key, but the authentication method the administrator actually configures and provides is the access key itself. A shared access signature is not directly entered as the configured authentication method (it is generated internally from the key), and system-assigned or user-assigned managed identity in Microsoft Entra ID is a newer capability introduced separately in later Windows Server releases rather than the option documented as the standard, baseline authentication method for cloud witness. Therefore, a Standard storage account together with access-key authentication is the correct configuration.
質問 # 531
......
CertShikenは、Administering Windows Server試験に必要な人向けの安定した信頼できる試験問題プロバイダーです。 私たちは長い間市場に滞在し、成長してきました。AZ-802試験問題の優れた品質と高い合格率のため、私たちは常にここにいます。 安全な環境と効果的な製品については、数千人の候補者が私たちの研究の質問を選んでいます。なぜあなたは私たちCertShikenの研究の質問に挑戦してみてください。
AZ-802問題数: https://www.certshiken.com/AZ-802-shiken.html