It-Passports平時では、Microsoft専門試験の審査に数か月から1年かかることもありますが、AZ-802試験ガイドを使用すれば、試験の前に20〜30時間かけて復習し、AZ-802学習教材を使用すれば、 AZ-802学習資料にはすべての重要なテストポイントが既に含まれているため、他のレビュー資料は不要になります。 同時に、AZ-802学習教材は、復習するためのまったく新しい学習方法を提供します-演習の過程で知識を習得しましょう。 Administering Windows Server試験に簡単かつゆっくりと合格します。
| Section | Weight | Objectives |
|---|---|---|
| Implement and manage an on-premises and hybrid networking infrastructure | 15% | - Secure network traffic in hybrid environments - Configure IP addressing, DNS, and DHCP - Configure software-defined networking - Implement hybrid network connectivity |
| Manage Windows Servers and workloads in a hybrid environment | 20% | - Deploy servers using Windows Admin Center and Azure Arc - Manage updates and patches across hybrid servers - Configure remote management and secure administration - Implement hybrid identity solutions |
| Secure Windows Server on-premises and hybrid infrastructures | 10% | - Implement security baselines and hardening - Manage access control and permissions - Configure Windows Defender and audit policies |
| Manage storage and file services | 15% | - Configure file servers and shares - Integrate on-premises storage with Azure Storage - Configure data deduplication and replication - Implement Storage Spaces and Storage Spaces Direct |
| Implement high availability and disaster recovery | 5% | - Monitor and troubleshoot Windows Server environments - Perform server and workload migrations - Implement backup and recovery solutions - Use Azure Site Recovery for hybrid workloads - Configure failover clustering |
| Manage virtual machines and containers | 15% | - Deploy and manage Hyper-V virtual machines - Deploy and manage containers and Kubernetes on Windows Server - Configure Azure Arc-enabled servers and VMs |
| Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments | 20% | - Integrate AD DS with Azure AD and Azure Arc - Implement and manage Group Policy Objects - Install and configure domain controllers - Manage FSMO roles and replication |
It-PassportsのMicrosoftのAZ-802「Administering Windows Server」試験トレーニング資料はあなたがリスクフリー購入することを保証します。購入する前に、あなたはIt-Passportsが提供した無料な一部の問題と解答をダウンロードして使ってみることができます。It-Passportsの問題集の高品質とウェブのインタ—フェ—スが優しいことを見せます。それに、我々は一年間の無料更新サービスを提供します。失敗しましたら、当社は全額で返金して、あなたの利益を保障します。It-Passportsが提供した資料は実用性が高くて、絶対あなたに向いています。
質問 # 139
You have five file servers that run Windows Server. You need to block users from uploading video files that have the .mov extension to shared folders on the file servers. All other types of files must be allowed. The solution must minimize administrative effort. What should you create?
正解：A
解説：
A file screen is the File Server Resource Manager (FSRM) feature purpose-built to block files of a specific type, matched by file-group name pattern (such as *.mov), from being saved into a designated folder or volume, while allowing every other file type through; it can be defined once as a file screen template and then applied consistently across all five file servers with minimal effort, especially if FSRM is centrally managed.
Dynamic Access Control central access policies and central access rules operate at a much higher level of complexity, using claims-based conditional expressions (based on user, device, or resource properties) to control access to files and folders; they are designed for scenario-specific, attribute-driven authorization decisions, not simple extension-based upload blocking, and configuring them for this narrow requirement would take considerably more administrative effort than necessary. A data loss prevention (DLP) policy is a Microsoft Purview / Microsoft 365 concept for protecting sensitive information across cloud and endpoint locations; it is not a Windows Server file server feature and has no direct role in blocking a specific file extension from an on-premises SMB share. A file screen is therefore the simplest, correct, purpose-built solution.
質問 # 140
Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains a parent domain named contoso.com and a child domain named corp.contoso.com. Both domains contain domain controllers that have the DNS Server role installed. Some domain controllers in contoso.com do NOT have the DNS Server role installed. The DNS zone for contoso.com is Active Directory-integrated and uses secure dynamic updates. The zone replicates to all the DNS servers in the forest. You need to modify the zone to meet the following requirements: - Prevent the DNS servers in corp.contoso.com from receiving contoso.com zone data. - Minimize Active Directory replication traffic. What should you do?
正解：C
解説：
An Active Directory-integrated zone ' s replication scope controls exactly which set of domain controllers receive a copy of the zone data, and Windows Server offers four scopes: all DNS servers in the forest, all DNS servers in the domain, all domain controllers in the domain, or the domain controllers enumerated in a custom application directory partition. The current setting, all DNS servers in the forest, replicates contoso.
com ' s zone data to every DNS server anywhere in the forest, including the DNS servers hosted on domain controllers in the child domain corp.contoso.com, which is exactly the behavior that must be stopped.
Changing the replication scope to all the DNS servers on the domain controllers in the contoso.com domain confines replication strictly to DNS servers that are also domain controllers within contoso.com itself, which both excludes every DNS server in corp.contoso.com (satisfying the first requirement) and reduces the replication set from a forest-wide scope down to a single-domain scope, cutting unnecessary AD replication traffic (satisfying the second requirement). Scoping to all domain controllers in the domain would replicate to contoso.com DCs that lack the DNS Server role entirely, needlessly bloating those DCs with zone data they will never serve, which is worse than necessary for minimizing traffic. Converting to a secondary zone on each DC abandons AD-integration and its dynamic update and multi-master benefits, and scoping to all DNS servers in the forest is the current, over-broad configuration causing the problem.
質問 # 141
You have a Windows Server 2022 failover cluster named Cluster1 that contains the Cluster Shared Volumes (CSV) shown in the following table.
All the nodes in Cluster1 have BitLocker Drive Encryption (BitLocker) installed.
You need to use PowerShell to enable BitLocker on Volume1.
In which order should you run the commands? To answer, drag the appropriate commands to the correct order. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Exhibit
正解：
解説：
Explanation:
1. Get-ClusterSharedVolume -Name " Volume1 " | Suspend-ClusterResource. 2. Enable-BitLocker - MountPoint " C:\ClusterStorage\Volume1 " -RecoveryPasswordProtector. 3. $KeyProtectorID = (Get- BitlockerVolume -MountPoint " C:\ClusterStorage\Volume1 " ).KeyProtector. 4. Get-ClusterSharedVolume " Volume1 " | Set-ClusterParameter -Name BitLockerProtectorInfo -Value " $KeyProtectorID.
keyprotectorid:$KeyProtectorID.RecoveryPassword " -Create. 5. Get-ClusterSharedVolume -Name " Volume1 " | Resume-ClusterResource.
Microsoft ' s documented procedure for enabling BitLocker on a Cluster Shared Volume begins by suspending the CSV ' s cluster resource with Suspend-ClusterResource, which takes the volume into a maintenance state so that BitLocker can safely take ownership of and begin encrypting it without interference from ongoing cluster I/O. With the resource suspended, Enable-BitLocker is run against the volume ' s mount point using a recovery password protector, which starts the encryption process and generates a key protector.
The script then retrieves that key protector ' s ID by querying Get-BitlockerVolume and reading its KeyProtector property into a variable, since this ID, together with the recovery password, needs to be registered with the cluster itself. That information is registered by setting the BitLockerProtectorInfo cluster parameter on the CSV resource, using Set-ClusterParameter with the -Create switch, which is what allows every node in the cluster, not only the node that ran the commands, to automatically unlock the encrypted volume going forward. Only after this registration step is complete is the CSV resource resumed with Resume- ClusterResource, bringing Volume1 back online cluster-wide with BitLocker now protecting it.
質問 # 142
You have a server named Server1 that runs Windows Server.
You need to capture the SYN packets exchanged between Server1 and an IP address of 192.168.0.100. How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Exhibit
Exhibit
正解：
解説：
Explanation:
Pktmon, the built-in Windows packet monitor, lets you build a capture filter that narrows collection to a specific remote IP address with -i, a specific transport protocol with -t, and, for TCP, a specific set of TCP flags such as syn, ack, fin, rst, psh, or urg appended after the protocol. Combining -i 192.168.0.100 with -t tcp and the syn flag restricts the capture to just the SYN packets exchanged with that address, which is exactly what the scenario requires, and matches the documented pktmon filter add syntax. Message Analyzer is a discontinued Microsoft tool and netmon (Network Monitor) is likewise retired in favor of pktmon, so neither is the correct or currently supported choice for building this capture filter on a modern Windows Server installation. After the filter is added, running pktmon start --etw begins the capture, and the resulting .etl trace can be converted to text or a pcapng file for inspection in a packet analyzer, showing only the matching SYN packets exchanged with 192.168.0.100.
質問 # 143
Your company uses Storage Spaces Direct. You need to view the available storage in a Storage Spaces Direct storage pool. What should you use?
正解：D
解説：
Windows Admin Center provides a dedicated Storage, or Volumes, view for a Storage Spaces Direct cluster that shows total pool capacity, used capacity, and remaining available capacity at a glance, alongside the ability to drill down into individual volumes and the physical disks backing them, making it purpose-built for exactly this kind of at-a-glance capacity check on a clustered storage pool. Resource Monitor and System Configuration are both local, single-machine diagnostic tools with no awareness of a clustered, pooled storage resource spanning multiple nodes, so neither one can report on a Storage Spaces Direct pool ' s available capacity at all. There is also no cmdlet named exactly Get-StoragefileServer that reports pool capacity; the closest legitimate cmdlets, such as Get-StoragePool or Get-VirtualDisk, require additional scripting and calculation to derive a usable capacity figure rather than presenting it directly. Because Windows Admin Center is the only listed option that actually surfaces Storage Spaces Direct pool capacity information directly and without additional manual calculation, it is the correct tool to use here.
質問 # 144
......
実際、私たちはAZ-802試験参考書に関するサービスとお客様に対する忠実がずっと続いています。だから、AZ-802試験参考書に関連して、何か質問がありましたら、遠慮無く私たちとご連絡致します。私たちのサービスは２４時間で、短い時間で回答できます。 私たちのAZ-802試験参考書は、あなたがAZ-802試験に合格する前に最高のサービスを提供することを保証します。 これは確かに大きなチャンスです。絶対見逃さないです。
AZ-802日本語参考: https://www.it-passports.com/AZ-802.html