大量の時間と金銭をかかるのに比べて、正しい仕方は肝心なことです。もしあなたはMicrosoft AZ-802試験に準備しているなら、あんたのための整理される備考資料はあなたにとって最善のオプションです。我々の目標はあなたに試験にうまく合格させることです。弊社の誠意を信じてもらいたいし、Microsoft AZ-802試験2成功するのを祈って願います。
| Section | Objectives |
|---|---|
| Topic 1: Secure Windows Server hybrid infrastructures | - Identity and access management
|
| Topic 2: Implement and manage high availability | - Load balancing and redundancy
|
| Topic 3: Monitoring and troubleshooting | - System monitoring
|
| Topic 4: Manage hybrid compute and virtualization | - Containers
|
| Topic 5: Disaster recovery and migration | - Migration scenarios
|
| Topic 6: Networking and storage infrastructure | - Storage management
|
Japancertは市場でテストされたすべてのAZ-802浮き沈みを経験してきましたが、AZ-802試験問題は完全にプロフェッショナルになりました。Administering Windows Server 最後に明るい光がある限り、道路で起こった困難を回避することはありません。それはあなたが望む満足のいく結果です。 知識の理論とクイズの問題の練習の両方がAdministering Windows Server、試験に対処する際にあなたがより熟練するのに役立ちます。 当社の専門家は、AZ-802すべての有用なコンテンツを統合することにより、Microsoft試験の重要なポイントをトレーニング資料に抽出しました。
質問 # 472
You have a server that runs Windows Server. You plan to back up the server to an Azure Recovery Services vault once per week starting on the next Saturday. You need to schedule the weekly backup and perform the initial backup as soon as possible. In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.
Available actions and answer area
正解：
解説：
Explanation:
1. Download the Microsoft Azure Recovery Services (MARS) agent and the Vault Credentials file. 2. Run the Microsoft Azure Recovery Services Agent Setup Wizard. 3. Run the Register Server Wizard. 4. From Microsoft Azure Backup, run the Schedule Backup Wizard. 5. From Microsoft Azure Backup, run the Back Up Now Wizard.
Setting up scheduled backups to an Azure Recovery Services vault begins with downloading the MARS agent installer together with its matching Vault Credentials file, then running the Agent Setup Wizard to actually install the agent software on the server. The Register Server Wizard is run next, binding the server to the vault using the downloaded credentials, and only once registration is complete can the Schedule Backup Wizard be used to define the recurring weekly policy, satisfying the requirement to back up once per week starting the next Saturday. Because the requirement also calls for performing the initial backup as soon as possible rather than waiting for the first scheduled run to occur naturally, the administrator finishes by running the Back Up Now Wizard, which triggers an on-demand backup immediately using the just-created policy ' s retention settings. Performing these steps out of order is not possible, since each wizard depends on artifacts -- the credentials file, the installed agent, server registration, or the backup policy -- produced by the step before it.
質問 # 473
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a domain controller named DC1 and a member server named Server1. Users cannot sign in to Server1 by using domain credentials and receive the following error message: The trust relationship between this workstation and the primary domain failed. You need to restore domain authentication on Server1 without removing Server1 from the domain.
Solution: From Server1, you run Reset-ComputerMachinePassword -Server DC1. Does this meet the goal?
正解：B
解説：
Reset-ComputerMachinePassword is a PowerShell cmdlet designed specifically to reset a computer ' s domain account password directly against a specified domain controller, and when run locally on the affected computer itself, here Server1, targeting DC1 with -Server, it resets and resynchronizes the computer account ' s password on both sides of the secure channel: it generates a new password, writes it to the Server1$ computer account object on DC1, and simultaneously updates Server1 ' s own local machine-account secret to match, in a single coordinated operation. Because both the AD DS side and the local Server1 side of the shared secret end up holding the same new password value, the secure channel between Server1 and the domain is fully restored, resolving the trust relationship failed error. This is done without removing Server1 from the domain at any point, satisfying the stated constraint, and without changing any domain-wide or server-wide authentication policy setting. This cmdlet, along with Test-ComputerSecureChannel -Repair, is one of Microsoft ' s two documented, non-disruptive remediation methods for a broken computer secure channel, both of which succeed precisely because they update the password consistently on both the local computer and the domain controller rather than on only one side, unlike a solution that touches only the AD DS-stored value.
質問 # 474
Your network contains a multi-site Active Directory Domain Services (AD DS) forest. Each Active Directory site is connected by using manually configured site links and automatically generated connections. You need to minimize the convergence time for changes to Active Directory. What should you do?
正解：B
解説：
By default, replication between sites waits for a scheduled interval and does not immediately notify partner domain controllers when a change occurs, which is the main source of intersite convergence delay; intra-site replication, by contrast, uses change notification and typically converges within seconds. The site link ' s options attribute contains a bit flag that controls whether intersite change notification is enabled for that link; turning it on causes a source domain controller to notify its intersite replication partners of a change almost immediately, similar to intra-site behavior, rather than waiting for the next scheduled replication cycle, which directly minimizes convergence time. Modifying site link costs changes which path the Knowledge Consistency Checker prefers when multiple routes exist, affecting topology efficiency but not how quickly a given link propagates a change once it ' s used. Modifying the replication schedule adjusts the windows during which replication over a link is permitted to occur at all, and while a more frequent schedule can reduce worst-case latency somewhat, it does not eliminate the fundamental polling-interval delay the way change notification does. A site link bridge only affects whether transitivity is assumed between site links for cost calculation and has no bearing on notification behavior. Enabling change notification via the options attribute is therefore the correct answer.
質問 # 475
Your network contains an Active Directory Domain Services (AD DS) domain that has a Windows Server
2016 forest functional level. The domain contains a domain controller named DC1. You are troubleshooting SYSVOL replication issues on DC1. You need to stop the service responsible for SYSVOL replication.
Which service should you stop?
正解：C
解説：
Once a domain has moved beyond the legacy File Replication Service, which is mandatory well before a domain can reach a Windows Server 2016 forest functional level, since FRS-based SYSVOL replication was deprecated and migration to DFSR-based SYSVOL is required at much lower functional levels, SYSVOL contents such as Group Policy Objects and logon scripts are kept synchronized across domain controllers by the DFS Replication service instead. Stopping the DFS Replication service specifically on DC1 halts SYSVOL replication on that domain controller, so GPOs and logon scripts stored there stop pulling updates from, or pushing updates to, its replication partners, which is exactly the intended and reversible action for isolating or troubleshooting a suspected SYSVOL replication problem without shutting the domain controller down entirely. DS Role Server is not an actual Windows service name relevant here, and the Background Intelligent Transfer Service handles unrelated background download throttling for things like Windows Update, so neither one plays any part in SYSVOL replication. The File Replication Service itself is also not the correct answer, since it is no longer the service used once the domain has already been migrated to DFSR- based SYSVOL replication at this functional level.
質問 # 476
You have a Remote Desktop Services (RDS) farm deployment. Administrators connect to the farm by using Remote Desktop from domain-joined workstations on the internal network. You need to enable administrators to connect to the RDS farm by using Remote Desktop from the internet. The solution must prevent opening internal RDP ports to the internet. Which role should you add to the deployment?
正解：E
解説：
The RD Gateway role is specifically designed to let Remote Desktop clients on the internet connect securely to internal RDS session hosts (or other RDP-enabled servers) by tunneling RDP traffic inside an HTTPS (TLS-protected, port 443) connection, which means the only port that needs to be exposed to the internet is
443 on the RD Gateway server itself; internal RDP port 3389 never has to be opened to the internet on any session host or connection broker, since the gateway terminates the external HTTPS connection and relays the traffic internally, satisfying the requirement to keep internal RDP ports closed from the internet while still allowing full Remote Desktop connectivity for administrators working remotely. RD Connection Broker only manages session load balancing, reconnection, and directing users to the correct session collection within the farm, and has no role in securing or tunneling external connections. RD Virtualization Host supports personal
/pooled virtual desktop collections rather than remote access security, and RD Session Host simply hosts the actual RemoteApp programs and desktop sessions, again without any external-access security function. RD Web Access provides a browser-based portal for launching RemoteApp programs and desktops but still relies on an RD Gateway underneath to actually tunnel the RDP traffic securely from the internet, so RD Gateway is the role that directly satisfies the stated requirement.
質問 # 477
......
IT業種を選んだあなたは現状に自己満足することはきっとないですね。現在、どの業種の競争でも激しくなっていて、IT業種も例外ないですから、目標を立ったら勇気を持って目標を達成するために頑張るべきです。その中で、MicrosoftのAZ-802試験に受かることも競争力があるモードです。この試験に合格したら、あなたのITキャリアには明るい未来があるようになります。あなたを助けるために、我々のJapancertは真実かつ正確なトレーニング資料を提供します。Japancertを利用したら、あなたはきっと自分の理想を実現することができます。
AZ-802関連復習問題集: https://www.japancert.com/AZ-802.html