ExamFragen haben ein riesiges Senior IT-Experten-Team. Sie nutzen ihre professionellen IT-Kenntnisse und reiche Erfahrung aus, um unterschiedliche Prüfungsfragen und Antworten zu bearbeiten, die Ihnen helfen, die Microsoft AZ-802 Zertifizierungsprüfung erfolgreich zu bestehen. In ExamFragen können Sie immer die geeigneten Ausbildungsmethoden herausfinden, die Ihnen helfen, die Microsoft AZ-802 Prüfung zu bestehen. Egal, welche Ausbildungsart Sie wählen, bietet ExamFragen einen einjährigen kostenlosen Update-Service. Die Informationsressourcen von ExamFragen sind sehr umfangreich und auch sehr genau. Bei der Auswahl ExamFragen können Sie ganz einfach die Microsoft AZ-802 Zertifizierungsprüfung bestehen.
| Section | Objectives |
|---|---|
| Hybrid infrastructure management | - Azure integration
|
| Networking and high availability | - High availability and disaster recovery
|
| Secure and manage Windows Server environments | - Identity and access management
|
| Compute, storage, and virtualization | - Virtual machines and containers
|
Allein die Versprechung ist nicht genug. Deswegen bieten wir ExamFragen den Kunden die allseitige und anspruchsvolle Service. Von der kostenfreien Probe vor dem Kauf der Microsoft AZ-802 Prüfungsunterlagen, bis zur einjährigen kostenfreien Aktualisierungsdienst nach dem Kauf. Wir werden Ihnen die vertrauenswürdige Hilfe für jede Vorbereitungsstufe der Microsoft AZ-802 Prüfung bieten. Falls Sie die Microsoft AZ-802 Prüfung nicht wunschgemäß bestehen, geben wir Ihnen volle Rückerstattung zurück, um Ihren finanziellen Verlust zu kompensieren.
32. Frage
What is the effective minimum password length for User1 and Admin1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Exhibit
Antwort:
Begründung:
Explanation:
User1: 9. Admin1: 8.
Fine-grained password policies delivered through Password Settings Objects (PSOs) take precedence over the domain-wide Default Domain Policy for any user they apply to. When more than one PSO would apply to the same user only through different group memberships (as opposed to one being linked directly to the user), the PSO with the lowest numeric precedence value wins. User1 is a member of both Group2 (targeted directly by PSO1, precedence 10, minimum password length 9) and Group4 (targeted directly by PSO2, precedence 20, minimum password length 11); since PSO1 ' s precedence value of 10 is lower than PSO2 ' s 20, PSO1 governs, giving User1 an effective minimum password length of 9. Admin1 is a member only of Domain Admins, which is not targeted by either PSO, so no fine-grained password policy applies. Admin1 is also in OU1, which has GPO1 linked to it with a minimum password length of 10, but Account Policy settings such as password policy configured in an OU-linked GPO never affect the effective password policy of domain user accounts -- only a GPO linked at the domain root can supply a fallback domain-wide default, and PSOs otherwise take precedence over that default. With no applicable PSO, Admin1 ' s effective policy falls back to the Default Domain Policy, whose minimum password length in this environment is 8.
Topic 6, Litware, Inc.
Litware, Inc. is a retail company that has a main office in San Francisco and branch offices across North America.
Litware manages an on-premises Windows Server environment arid integrates selected servers with Azure services.
Litware has an Azure subscription linked to a Microsoft Entra hybrid tenant.
Existing Environment
Active Directory Infrastructure
The network contains only two on-premises Active Directory Domain Services (AD DS) forests named litware.com and nwtraders.com as shown in the following exhibit.
Active Directory member servers
The forests contain member servers and 1,000 Windows devices.
The domains contain the servers shown in the following table.
BitLocker Drive Encryption (BitLocker) is enabled for all the servers. BitLocker recovery information is stored in AD DS.
The servers have the connection security rules shown in the following table.
Active Directory domain controllers
The domains contain the domain controllers shown in the following table.
Active Directory identities
The litware.com forest contains the users shown in the following table.
User2 has attached a removable disk named Disk1 to Host1 and has enabled BitLocker.
The forests contain the groups shown in the following table.
Virtualization configuration
HV1 has the virtual switches shown in the following table.
HV1 has five physical network adapters. Two adapters are bound to VSwitch4.
HV1 contains virtual machines that run Windows Server and have the DHCP Server role installed.
The virtual machines are configured as shown in the following table.
DNS configuration
The litware.com domain hosts the Active Directory-integrated DNS zones shown in the following table.
Azure subscription
The Azure subscription contains two resource groups named RG1 and RG2.
The Microsoft Entra tenant contains the identities shown in the following table.
All the identities have the Azure Connected Machine Onboarding role at scope RG2.
Requirements
Planned changes
Litware plans to implement the following changes:
# Deploy a virtual machine named VM5 that runs Windows Server, is connected to VSwitch3, and obtains an IPv4 address automatically.
# Create a DNS resource record named Record1 in zone1.litware.com and a DNS resource record named Record2 in zone2.litware.com.
# On Host1, add User2 to the local OpenSSH Users group and User3 to the local Administrators group.
# Deploy a domain controller named DC9 to the litware.com domain.
# Create a user named User5 in the litware.com domain.
# Onboard Host2 to Azure Arc as a resource in RG2.
# Move Disk1 from Host1 to Host2.
Technical requirements
Litware identifies the following technical requirements:
# The Azure Arc onboarding of Host2 must use automatic machine authentication for Azure sign-ins.
# The deployment of DC9 must minimize initial AD DS replication traffic across the network.
# HV1 must have the maximum possible number of external virtual switches.
# All solutions must follow the principle of least privilege.
# All solutions must minimize administrative effort.
# All solutions must minimize costs.
33. Frage
Your network contains two VLANs for client computers and one VLAN for a datacenter. Each VLAN is assigned an IPv4 subnet. Currently, all the client computers use static IP addresses. You plan to deploy a DHCP server to the VLAN in the datacenter. You need to use the DHCP server to provide IP configurations to all the client computers. What is the minimum number of scopes and DHCP relays you should create? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Antwort:
Begründung:
Explanation:
Scopes: 2. Relays: 2.
A DHCP scope corresponds to a single IP subnet, and the DHCP server must have one scope defined for each distinct client subnet it will service; since there are two separate client VLANs, each with its own IPv4 subnet, the server needs two scopes; the datacenter ' s own subnet does not need a scope because no client computers are located there. DHCP relies on broadcast traffic (DHCPDISCOVER) that routers do not forward between subnets by default, and the DHCP server itself sits in a third subnet (the datacenter VLAN), separate from both client VLANs. For each client VLAN ' s broadcast traffic to reach that remote DHCP server, a DHCP relay agent (or IP helper configuration) must be enabled on the router interface for that VLAN; because there are two client VLANs, each needing its own relay pointed at the DHCP server ' s address, two relay agents are required. The datacenter VLAN needs no relay of its own, since the DHCP server lives there directly and can hear local broadcasts natively (though there are no clients there to generate any). Therefore the minimum is two scopes and two relays.
34. Frage
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two servers named Server1 and Server2 that run Windows Server You need to use connection security rules to control the connections between Server1 and Server2. The solution must meet the following requirements:
* IPsec protection for Server1 and Server2 must be limited.
* Traffic between Server1 and Server2 must be authenticated and encrypted.
* Server2 must accept traffic from Server1 only if Server2 is authenticated by using IPsec.
How should you configure the connection security rules? To answer, select the appropriate options in the answe1 area.
NOTE: Each correct selection is worth one point
Antwort:
Begründung:
Explanation:
Type of IPsec rule: Server-to-server rule. Firewall rule on Server2: Inbound port rule: Allow the connection if it is secure.
A server-to-server connection security rule protects traffic exchanged between two specific, explicitly defined endpoints, which is exactly the ' limited ' scope required here, since it applies only between Server1 and Server2 rather than isolating an entire domain or zone of the network the way an isolation rule would (isolation rules are built for domain- or network-wide policies restricting communication to only domain- joined or otherwise trusted computers, a much broader scope than two named servers). An authentication exemption rule only carves out exceptions from IPsec requirements for specified traffic or hosts and would not itself provide the authenticated, encrypted protection the scenario requires; a tunnel rule protects traffic between two gateway computers on behalf of other hosts behind them, which does not match a direct server- to-server relationship. Once the server-to-server connection security rule is defined to require authentication and encryption for traffic between the two servers, Server2 additionally needs an inbound firewall rule of type
' Allow the connection if it is secure, ' which permits inbound traffic from Server1 only when it arrives already authenticated and protected by the negotiated IPsec security association; a plain ' Allow the connection ' rule would accept the traffic regardless of whether it was secured, and outbound or predefined rule types do not enforce the requirement that Server2 accept Server1 ' s traffic only when it is IPsec- authenticated.
35. Frage
Technical requirements: Promote a new server named DC4 that runs Windows Server 2022 to a domain controller. Replicate the virtual machines from Cluster2 to an Azure Recovery Services vault. Centrally manage performance alerts in Azure for all the domain controllers. Ensure that User1 can recover objects from the Active Directory Recycle Bin. Migrate Share1 to Server2, including all the share and folder permissions. Back up Server4 and all data to an Azure Recovery Services vault. Use Hyper-V Replica to protect the virtual machines in Cluster3. Implement BitLocker Drive Encryption (BitLocker) on Server4.
Whenever possible, use the principle of least privilege. You need to meet the technical requirements for User1. To which group in contoso.com should you add User1?
Antwort: C
Begründung:
Restoring deleted objects from the Active Directory Recycle Bin requires permission to view and restore objects inside the forest ' s Deleted Objects container, and by default that container ' s access control list denies access to everyone except the SYSTEM account and members of Domain Admins (and Enterprise Admins at the forest root) -- no delegation to any other built-in group exists out of the box. Among the four groups offered, only Domain Admins carries this permission by default, since Account Operators (which can manage most user, group, and computer objects but has no special access to the hidden Deleted Objects container), Schema Admins (which governs schema modifications, not object restoration), and Backup Operators (which can back up and restore files and the system state, but not perform an online Active Directory Recycle Bin object restore through the Active Directory Administrative Center) all lack the needed access. The case study ' s general instruction to use the principle of least privilege where possible does not change this outcome here, since none of the three lower-privileged alternatives actually has the required capability by default -- Domain Admins is not merely the most convenient choice but the only one of the four that functionally works. Therefore, User1 must be added to Domain Admins to be able to recover objects from the Active Directory Recycle Bin.
36. Frage
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two Hyper-V hosts named Server1 and Server2 that run Windows Server.
The Hyper-V hosts contain virtual machines that run Windows Server as shown in the following table:
* VM1 - Virtual machine configuration version 10.0 - Server1
* VM2 - Virtual machine configuration version 8.3 - Server1
* VM3 - Virtual machine configuration version 9.3 - Server2
* VM4 - Virtual machine configuration version 8.0 - Server2
You need to connect to the virtual machines by using PowerShell Direct.
To which virtual machines can you connect from each Hyper-V host? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Antwort:
Begründung:
Explanation:
Server1: VM1 and VM2
Server2: VM3 and VM4
PowerShell Direct lets an administrator run PowerShell inside a Windows VM directly from the Hyper-V host that owns that VM, without relying on network connectivity or WinRM configuration. Microsoft lists Windows Server 2016 or later for both host and guest and identifies virtual machine configuration version 6.2 as the minimum version supporting PowerShell Direct. Every VM in the table is above that minimum: VM1 is
10.0, VM2 is 8.3, VM3 is 9.3, and VM4 is 8.0. However, PowerShell Direct is local to the Hyper-V host; it is not a mechanism for connecting from one Hyper-V host to a VM running on another host. Therefore, Server1 can connect to VM1 and VM2, while Server2 can connect to VM3 and VM4.
37. Frage
......
Warum wählen viele ExamFragen? Weil er Bequemlichkeiten und Anwendbarkeit bringen. Das hat von der Praxis überprüft. Die Lernmaterialien zur Microsoft AZ-802 Zertifizierungsprüfung von ExamFragen ist den allen bekannt. Viele Kandidaten sind nicht selbstsicher, die Microsoft AZ-802 Zertifizierungsprüfung zu bestehen. Deshalb sollen Sie die Materialien zur Microsoft AZ-802 Zertifizierungsprüfung haben. Mit ihm können Sie mehr Selbstbewusstsein haben und sich gut auf die Prüfung vorbereiten.
AZ-802 Dumps Deutsch: https://www.examfragen.de/AZ-802-pruefung-fragen.html