Fast2test 에서 제공해드리는 Microsoft인증AZ-802시험덤프자료를 구입하시면 퍼펙트한 구매후 서비스를 약속드립니다. Fast2test에서 제공해드리는 덤프는 IT업계 유명인사들이 자신들의 노하우와 경험을 토대로 하여 실제 출제되는 시험문제를 연구하여 제작한 최고품질의 덤프자료입니다. Microsoft인증AZ-802시험은Fast2test 표Microsoft인증AZ-802덤프자료로 시험준비를 하시면 시험패스는 아주 간단하게 할수 있습니다. 구매하기전 PDF버전 무료샘플을 다운받아 공부하세요.
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments | 20% | - Integrate AD DS with Azure AD and Azure Arc - Manage FSMO roles and replication - Implement and manage Group Policy Objects - Install and configure domain controllers |
| Topic 2: Manage Windows Servers and workloads in a hybrid environment | 20% | - Configure remote management and secure administration - Deploy servers using Windows Admin Center and Azure Arc - Manage updates and patches across hybrid servers - Implement hybrid identity solutions |
| Topic 3: Implement and manage an on-premises and hybrid networking infrastructure | 15% | - Implement hybrid network connectivity - Configure IP addressing, DNS, and DHCP - Secure network traffic in hybrid environments - Configure software-defined networking |
| Topic 4: Secure Windows Server on-premises and hybrid infrastructures | 10% | - Implement security baselines and hardening - Manage access control and permissions - Configure Windows Defender and audit policies |
| Topic 5: Implement high availability and disaster recovery | 5% | - Monitor and troubleshoot Windows Server environments - Implement backup and recovery solutions - Use Azure Site Recovery for hybrid workloads - Perform server and workload migrations - Configure failover clustering |
| Topic 6: Manage virtual machines and containers | 15% | - Configure Azure Arc-enabled servers and VMs - Deploy and manage Hyper-V virtual machines - Deploy and manage containers and Kubernetes on Windows Server |
| Topic 7: Manage storage and file services | 15% | - Integrate on-premises storage with Azure Storage - Configure data deduplication and replication - Configure file servers and shares - Implement Storage Spaces and Storage Spaces Direct |
Fast2test의 도움으로 여러분은 많은 시간과 돈을 들이지 않으셔도 혹은 여러학원등을 다니시지 않으셔도 우리 덤프로 안전하게 시험을 통과하실 수 있습니다.Microsoft AZ-802시험자료는 우리 Fast2test에서 실제시험에 의하여 만들어진 것입니다. 지금까지의 시험문제와 답과 시험문제분석 등입니다. Fast2test에서 제공하는Microsoft AZ-802시험자료의 문제와 답은 실제시험의 문제와 답과 아주 비슷합니다.
질문 # 498
You have an on-premises server named Server 1 that runs Windows Server.
You have an Azure subscription.
You migrate Server1 to an Azure virtual machine named VM1.
You need to configure a backup solution for VM1. The solution must provide recovery points.
What should you do on VM1, and in which type of vault should you store the backups? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Exhibit
정답：
설명：
Explanation:
Azure VM backup is delivered to a virtual machine through a backup extension that the Azure Backup service pushes down to the VM when a backup job runs, and that extension itself depends on the Windows Azure VM Agent already being installed and running on the guest operating system in order to be deployed and to communicate with the platform, so installing the Windows Azure VM Agent on VM1 is the necessary prerequisite step that enables Azure Backup to function on that machine at all. Recovery points for a full Azure infrastructure-as-a-service virtual machine, whether application-consistent or crash-consistent snapshots, are stored specifically in a Recovery Services vault, which remains the vault type used for whole- VM backup and restore scenarios in Azure Backup, as distinct from the newer Backup vault resource type that is used for other, more granular workloads such as Azure Disk backup or blob-level operational backup rather than for full VM recovery points. Installing Windows Server Backup or the Azure Connected Machine agent on VM1 would not enable Azure ' s native VM backup capability at all, since Windows Server Backup is a separate, unrelated in-guest backup tool and the Azure Connected Machine agent is used for onboarding non- Azure servers to Azure Arc rather than for enabling backup on an already-Azure VM, and neither Azure Key Vault nor a Backup vault provides the VM-level recovery point functionality that this scenario specifically calls for.
질문 # 499
You have two servers named Server1 and Server2 that run Windows Server. Both servers have the Hyper-V server role installed. Server1 hosts three virtual machines named VM1, VM2, and VM3. The virtual machines replicate to Server2. Server1 experiences a hardware failure. You need to bring VM1, VM2, and VM3 back online as soon as possible. From the Hyper-V Manager console on Server2, what should you run for each virtual machine?
정답：B
설명：
A Planned Failover in Hyper-V Replica requires the source (primary) virtual machine to be gracefully shut down and reachable so that any final, not-yet-replicated changes can be sent across before the role formally switches to the replica -- a precondition that cannot be met when the primary host itself has suffered a hardware failure and is unreachable. Because Server1 has failed and VM1, VM2, and VM3 cannot be contacted, gracefully shutting them down is impossible, ruling out Planned Failover as an option. Instead, the administrator must perform an Unplanned Failover from Hyper-V Manager on Server2, which brings each replica virtual machine online using whatever data was most recently replicated (and, if recovery points are configured, the most recent available recovery point) without requiring any action on, or connectivity to, the failed primary host. This is the recovery path specifically documented for unexpected primary-host outages, in direct contrast to Planned Failover, which is reserved for scheduled maintenance or controlled, orderly migrations where the primary is still running. " Start " merely powers on an existing VM without invoking replica failover logic, and " Move " performs a live or quick migration that requires the source host to be online, so neither applies here. Therefore, Unplanned Failover is the correct action for each virtual machine.
질문 # 500
You have an Azure subscription that contains the virtual machines shown in the following table. You plan to use Azure Site Recovery to replicate supported virtual machines to a secondary Azure region. Which virtual machines can be replicated by using Azure Site Recovery? (Exhibit: VMs with their security type and OS.)
Virtual machines with their security type and operating system
정답：A
설명：
Azure Site Recovery replication for Azure-to-Azure scenarios supports standard-security VMs (VM1, VM2) as well as trusted launch virtual machines running Windows Server, a capability that is generally available and documented specifically for Azure-to-Azure replication, which covers VM3. Confidential VMs such as VM4, however, rely on hardware-bound (vTPM/attestation-tied) OS disk encryption keys that are not part of Azure Site Recovery ' s supported replication scenarios, so a VM configured with the Confidential security type cannot currently be replicated using Azure Site Recovery. The Windows Server 2025 Datacenter: Azure Edition operating system itself is fully supported and is not the limiting factor for any of the four VMs; the security type of VM4 is what excludes it. If VM4 must still be protected for disaster recovery, an alternative such as Azure Backup for VM-level snapshots, or a guest-level replication tool that operates independently of the confidential computing attestation boundary, would need to be considered instead of Azure Site Recovery.
질문 # 501
Your network contains two Active Directory Domain Services (AD DS) forests named contoso.com and adatum.com. A two-way external trust exists between contoso.com and adatum.com. The forests contain the servers shown in the following table: DC1 (contoso.com, hosts all FSMO roles), DC2 (adatum.com, hosts all FSMO roles), SRV1 (adatum.com, file server), SRV2 (adatum.com, file server). You need to ensure that users from contoso.com can access only shared resources hosted on SRV1. The solution must meet the following requirements: * Ensure that users from adatum.com can access the resources hosted in contoso.com (unrestricted, as today). * Prevent the contoso.com users from accessing any other resources in adatum.com.
What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
정답：
설명：
Explanation:
Modify the trust on: DC2. Modify the permissions for the: Computer object of SRV1.
By default, an external trust grants every authenticated user in the trusted domain (contoso.com, from adatum.
com ' s perspective) the implicit right to attempt authentication against any computer in the trusting domain (adatum.com), with actual access then governed only by each resource ' s own ACLs -- there is no built-in restriction limiting which specific computers users can even attempt to authenticate against. Selective Authentication is the trust setting that changes this: once enabled on the trust from the perspective of the domain being accessed, authenticating users from the other side must be explicitly granted the " Allowed to Authenticate " permission on the specific computer object(s) they should be allowed to reach; without that permission, authentication is denied outright, regardless of any file/share-level permissions. Because the goal is to restrict contoso.com users specifically -- without restricting the reverse direction (adatum.com users accessing contoso.com resources, which must remain unrestricted) -- Selective Authentication must be enabled only on the adatum.com side of the trust, which is configured on DC2, the domain controller hosting the FSMO roles (and by extension the trust configuration) for adatum.com; enabling it on DC1 or on both would risk also restricting the other direction. Once Selective Authentication is enabled on that side, the " Allowed to Authenticate " permission must then be granted specifically on SRV1 ' s own computer object (not on DC1 ' s, and not merely on SRV1 ' s file shares, since Selective Authentication is enforced at the computer- object authentication level, before any share-level permission is even evaluated) for the relevant contoso.com users or groups.
질문 # 502
You have an Azure virtual machine named VM1 that runs Windows Server. You need to ensure that administrators request access to VM1 before establishing a Remote Desktop connection. What should you configure?
정답：A
설명：
Microsoft Defender for Cloud provides a Just-in-Time (JIT) VM access feature that is designed exactly for this scenario: instead of leaving management ports such as RDP (3389) or SSH (22) permanently open on a VM ' s network security group, JIT access locks those ports down by default and requires an administrator to explicitly request access for a limited time window and from a specified source IP range before Defender for Cloud temporarily opens an NSG rule to allow the connection; the rule is automatically reverted once the approved time window expires. This directly satisfies the requirement that administrators must request access to VM1 before establishing an RDP session. Azure Front Door is a global HTTP(S) load-balancing and application-delivery service for web workloads and has no concept of just-in-time access requests for RDP.
Azure AD (Microsoft Entra ID) Privileged Identity Management (PIM) provides just-in-time activation for Azure AD roles and Azure RBAC role assignments (for example, temporarily activating a Contributor role), but it does not gate network-level RDP connectivity to a VM by itself. A network security group (NSG) can restrict or block RDP access by rule, but a static NSG rule alone has no request/approval workflow -- it is the underlying object that JIT access temporarily and automatically modifies. Therefore, configuring Just-in-Time VM access in Microsoft Defender for Cloud is the correct solution.
질문 # 503
......
Fast2test에서는 IT인증시험에 관한 모든 덤프를 제공해드립니다. 우선 시험센터에서 정확한 시험코드를 확인하시고 그 코드와 동일한 코드로 되어있는 덤프를 구매하셔서 덤프에 있는 문제와 답을 기억하시면 시험을 쉽게 패스하실수 있습니다.AZ-802시험은 IT인증시험중에서 많은 인기를 가지고 있는 시험입니다.AZ-802시험을 패스하여 자격증을 취득하시면 취업이나 승진에 많은 가산점이 되어드릴것입니다.
AZ-802퍼펙트 덤프데모문제 다운: https://kr.fast2test.com/AZ-802-premium-file.html