Exam4Tests also offers you a demo version of the AZ-802 exam dumps. Often AZ-802 test takers run on a tight budget so they just can not risk wasting it on invalid Microsoft AZ-802 Study Materials. Thus Exam4Tests offers a demo version of Microsoft AZ-802 actual exam questions before buying it.
| Section | Objectives |
|---|---|
| Secure and manage Windows Server environments | - Security and compliance
|
| Networking and high availability | - Networking infrastructure
|
| Hybrid infrastructure management | - Monitoring and update management
|
| Compute, storage, and virtualization | - Virtual machines and containers
|
These Administering Windows Server (AZ-802) practice test questions also boost your confidence. If you have prepared well, tried all the Microsoft Administering Windows Server Certification Exams, and understood each concept clearly, there is minimal or no chance of failure. Desktop Practice exam software and web-based Administering Windows Server (AZ-802) practice test are available at Exam4Tests.
NEW QUESTION # 364
You have an Azure subscription that contains an Azure Files share named share1.
You need to ensure that users can view and restore previous versions of the files stored in share1.
The solution must minimize administrative effort.
What should you do?
Answer: D
Explanation:
Azure Files share snapshots provide read-only, point-in-time copies of files and directories stored within an Azure file share.
Snapshots allow users to recover previous versions of files following accidental modification, deletion, or corruption. For SMB file shares, users can access snapshots through the Previous Versions tab in Windows File Explorer, provided that the snapshots exist and the share is accessible.
Administrators can create snapshots through the Azure portal, Azure PowerShell, or Azure CLI. Snapshot creation can also be automated to maintain multiple recovery points.
Soft delete protects deleted file shares rather than providing ordinary file-version browsing. A Recovery Services vault supports managed backup and recovery but introduces additional backup configuration.
Storage-account point-in-time restore is not the direct mechanism for Azure Files previous versions.
Therefore, creating share snapshots meets the stated requirement.
NEW QUESTION # 365
You have a Windows Server Failover Cluster (WSFQ that has the following configurations:
* Name: App1
* Owner node: Node3
* Type: Generic Application
The General settings for App1 are shown in the General exhibit. (Click the General tab.) The Failover settings for App1 are shown in the Failover exhibit. (Click the Failover tab.) The Advanced Policies settings for App1 are shown in the Advanced Policies exhibit. (Click the Advanced Policies tab.) For each of the following statements, select Yes if the statement is true Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
You can move App1 to Node4 manually: No. If Node3 fails, App1 will fail over to Node2 automatically: No.
If App1 automatically fails over from Node3, App1 will fail back to Node3 automatically after Node3 is repaired: No.
App1 ' s General tab shows its Preferred Owners list contains only Node1 and Node2, checked in that priority order, with Node3 and Node4 both unchecked, and its Node field shows the role is currently running on Node2 rather than Node3. Because App1 is not actually running on Node3 at this moment, a failure of Node3 has no clustered workload on it to relocate, so it triggers no automatic failover to Node2 or to any other node; failover in Windows Server Failover Clustering only occurs when the node that is currently hosting a role fails, not when an unrelated node fails. Automatic failback always targets the highest-priority node that is checked in the role ' s Preferred Owners list on the General tab, never simply whichever node the role most recently happened to run on, and since Node3 is not checked as a Preferred Owner for App1 at all, App1 can never automatically fail back to Node3, even though the Failover tab shows Allow failback set to Immediately. Whether App1 can be moved to Node4 manually is governed separately by the Possible Owners list on the Advanced Policies tab, a setting distinct from Preferred Owners, and for this role that list excludes Node4 as a valid host, so a manual move to Node4 is not possible either.
NEW QUESTION # 366
You need to configure network communication between the Seattle and New York offices. The solution must meet the requirements. What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
On a Virtual WAN hub: An ExpressRoute gateway. In the offices: An ExpressRoute circuit connection.
Fabrikam ' s plan is to replace the existing WAN links between the New York and Seattle offices with Azure Virtual WAN and ExpressRoute, connecting both offices to Vnet1 through the Virtual WAN hub. Azure Virtual WAN uses its own hub-native ExpressRoute gateway object (distinct from the standalone virtual network gateway used when ExpressRoute is connected directly to a single VNet); this ExpressRoute gateway is deployed inside the Virtual WAN hub and is required before any ExpressRoute circuit can terminate into that hub. A standard virtual network gateway is used for VNet-to-VNet or VPN scenarios, not for Virtual WAN hub ExpressRoute termination, and an ExpressRoute circuit connection itself is the logical link resource, not something you deploy on the hub. At each office, connectivity into Microsoft ' s network is established through an ExpressRoute circuit connection provisioned with a connectivity provider, which then links, via Microsoft ' s backbone, into the ExpressRoute gateway in the Virtual WAN hub. A Site-to-Site VPN, an Azure application gateway (a web traffic load balancer), and an on-premises data gateway (used for Power Platform/Logic Apps connectors) are all unrelated to this ExpressRoute-based design.
NEW QUESTION # 367
You have a file server that runs Windows Server and has the File Server Resource Manager role service installed. The server hosts a file share named D:\Shares\Contracts.
You need to configure File Server Resource Manager (FSRM). The solution must meet the following requirements:
* Prevent users from saving .mp3 and .mp4 files.
* Automatically set the DataUse value for contract files.
* Move files that have datause-Archive and have NOT been accessed for 365 days to a folder named D:
\Expired.
Which FSRM feature should you use for each requirement? To answer, drag the appropriate features to the correct requirements. Each feature may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Block the restricted extensions: A file screen. Set the DataUse value: A file classification rule. Move stale archived files: A file management task.
A file screen is the FSRM feature that actively blocks users from saving files of specified extensions, such as .
mp3 and .mp4, into a monitored folder, either rejecting the save outright (active screening) or only logging
/notifying (passive screening), which directly matches the requirement to prevent users from saving those two file types into the Contracts share. A file classification rule automatically evaluates files against defined conditions (such as file location, content, or existing property values) on a schedule and assigns or updates a classification property, such as a custom DataUse property, without any user action, which is exactly the mechanism needed to automatically set the DataUse value for contract files as they are created or modified, something neither a file screen nor a quota can do since neither of those features write classification property values. A file management task is the FSRM feature that runs on a schedule against files matching a defined classification-property condition (here, DataUse=Archive) and a file-age condition (not accessed for 365 days) and then performs an action, such as moving those matching files to D:\Expired, which is precisely the automated move-based cleanup requirement described; access-denied assistance only customizes the end-user error experience when access is denied and has no file-classification or file-movement capability, and a storage report only produces informational output rather than performing any action.
NEW QUESTION # 368
You need to configure remote administration to meet the security requirements. What should you use?
Answer: B
Explanation:
The requirement states that server administrators must request approval before establishing a Remote Desktop connection to an Azure virtual machine, and that once approved, the connection must be established within a defined two-hour window. This request-approve-then-time-limited-access pattern for a specific management port on an Azure VM is precisely what just-in-time (JIT) VM access, a Microsoft Defender for Cloud capability, provides: it keeps the RDP/SSH management ports closed by default in the network security group, requires an explicit access request, and, once approved, opens the port only for a specified time window and only from the requester ' s source IP. Microsoft Entra Privileged Identity Management provides time-bound, approval-based elevation for Microsoft Entra and Azure RBAC roles, not for opening network ports to a VM, so it does not by itself control Remote Desktop network access. The Remote Desktop extension for Azure Cloud Services is a legacy classic-deployment feature unrelated to this scenario. Azure Bastion provides browser-based RDP/SSH without exposing public IPs but does not implement an approval workflow with a bounded connection window. JIT VM access is therefore the correct, purpose-built solution.
Topic 2, Case Study 1: Contoso, Ltd.
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
AD DS Environment: The network contains an on-premises Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains two domains named contoso.com and canada.contoso.com.
The forest contains the domain controllers shown in the exhibit below. All the domain controllers are global catalog servers.
Domain controllers
Server Infrastructure: The network contains the servers shown in the exhibit below. A server named Server4 runs Windows Server and is in a workgroup. Windows Firewall on Server4 uses the private profile. Server2 hosts three virtual machines named VM1, VM2, and VM3. VM3 is a file server that stores data in the volumes shown in the exhibit below.
Servers
VM3 volumes
Group Policies: The contoso.com domain has the Group Policy Objects (GPOs) shown in the exhibit below.
GPOs
Existing Identities: The forest contains the users shown in the exhibit below. The forest also contains the groups shown in the exhibit below.
Users
Groups
Current Problems: When an administrator signs in to the console of VM2 by using Virtual Machine Connection, and then disconnects from the session without signing out, another administrator can connect to the console session as the currently signed-in user.
Requirements: Contoso identifies the following technical requirements:
- Change the replication schedule for all site links to 30 minutes.
- Promote Server1 to a domain controller in canada.contoso.com.
- Install and authorize Server3 as a DHCP server.
- Ensure that User1 can manage the membership of all the groups in Contoso\OU3.
- Ensure that you can manage Server4 from Server1 by using PowerShell remoting.
- Ensure that you can run virtual machines on VM1.
- Force users to provide credentials when they connect to VM2.
- On VM3, ensure that Data Deduplication on all eligible volumes is possible.
NEW QUESTION # 369
......
Our AZ-802 practice braindumps not only apply to students, but also apply to office workers; not only apply to veterans in the workplace, but also apply to newly recruited newcomers. And our AZ-802 study materials use a very simple and understandable language, to ensure that all people can learn and understand. Besides, our AZ-802 Real Exam also allows you to avoid the boring of textbook reading, but let you master all the important knowledge in the process of doing exercises.
Authorized AZ-802 Pdf: https://www.exam4tests.com/AZ-802-valid-braindumps.html