Microsoft AZ-802 인증시험은 최근 가장 핫한 시험입니다. 인기가 높은 만큼Microsoft AZ-802시험을 패스하여 취득하게 되는 자격증의 가치가 높습니다. 이렇게 좋은 자격증을 취득하는데 있어서의 필수과목인Microsoft AZ-802시험을 어떻게 하면 한번에 패스할수 있을가요? 그 비결은 바로Itcertkr의 Microsoft AZ-802덤프를 주문하여 가장 빠른 시일내에 덤프를 마스터하여 시험을 패스하는것입니다.
| Section | Objectives |
|---|---|
| Hybrid infrastructure management | - Azure integration
|
| Secure and manage Windows Server environments | - Security and compliance
|
| Compute, storage, and virtualization | - Virtual machines and containers
|
| Networking and high availability | - High availability and disaster recovery
|
Itcertkr는 유일하게 여러분이 원하는Microsoft인증AZ-802시험관련자료를 해결해드릴 수 잇는 사이트입니다. Itcertkr에서 제공하는 자료로 응시는 문제없습니다, 여러분은 고득점으로 시험을 통과할 것입니다.
질문 # 261
You need to meet the technical requirements for Cluster2.
Which four actions should you perform in sequence before you can enable replication? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
정답：
설명：
Explanation:
1. Create an Azure Recovery Services vault. 2. Create a Hyper-V site. 3. Install and register Azure Site Recovery Providers. 4. Create and associate replication policies.
Setting up Azure Site Recovery for a Hyper-V cluster that is not managed by Virtual Machine Manager follows a fixed infrastructure-preparation order. An Azure Recovery Services vault must exist first, since it is the container that every later step registers against. A Hyper-V site is then created in that vault to represent the on-premises Hyper-V environment, because a Hyper-V host or cluster must belong to a site before its hosts can be registered against Azure Site Recovery. The Azure Site Recovery Provider is then installed on the Hyper-V hosts (Cluster2 ' s nodes) and registered to that site/vault, which is what actually connects the cluster nodes to Azure Site Recovery. Only once the hosts are registered can a replication policy be created and associated with the Hyper-V site, since a policy has nothing to attach to until the site and its registered hosts already exist. Installing Azure Connected Machine agents is unrelated to Hyper-V VM replication -- that agent is used for onboarding servers to Azure Arc -- and is not part of this workflow. Therefore, the correct order is: create the vault, create the Hyper-V site, install and register the Providers, and create and associate the replication policy.
질문 # 262
You have an Azure virtual machine named VM1. You enable Microsoft Defender SmartScreen on VM1. You need to ensure that the SmartScreen messages displayed to users are logged. What should you do?
정답：B
설명：
Microsoft Defender SmartScreen writes its notification and warning events to the Microsoft-Windows- SmartScreen/Debug event log, which is hidden by default in Event Viewer along with all other Analytic and Debug logs. An administrator must open Event Viewer, select View > Show Analytic and Debug Logs to reveal the hidden log category, and then explicitly enable that Debug log so the SmartScreen prompt events shown to users are actually captured and retained for later review; without enabling it, the events are generated in memory but not persisted or visible. Running WinRM quickconfig only configures the Windows Remote Management listener and has no relationship to SmartScreen logging. Modifying the Advanced Audit Policy Configuration settings governs security auditing categories such as logon events and object access, not SmartScreen ' s own debug telemetry. Configuring Virus & threat protection settings in the Windows Security app manages antivirus and ransomware protection features, not SmartScreen event logging. Therefore, enabling the Debug log in Event Viewer is the correct action.
질문 # 263
You have an Azure Active Directory Domain Services (Azure AD DS) domain named aadds.contoso.com.
You have an Azure virtual network named Vnet1. Vnet1 contains two virtual machines named VM1 and VM2 that run Windows Server. VMI and VM2 are joined to aadds.contoso.com.
You create a new Azure virtual network named Vnet2. You add a new server named VM3 to Vnet2.
When you attempt to join VM3 to aadds.contoso.com, you get an error message that the domain cannot be found.
You need to ensure that you can join VM3 toaadds.contoso.com.
정답：
설명：
Explanation:
Network configuration: Configure virtual network peering between Vnet1 and Vnet2. DNS configuration:
Add a custom DNS server to Vnet2.
Microsoft Entra Domain Services deploys its managed domain controllers into one specific virtual network -- Vnet1 in this scenario, where VM1 and VM2 already join successfully -- so a virtual machine in any other virtual network, such as Vnet2, first needs network-layer reachability to that VNet, which is established by configuring virtual network peering between Vnet1 and Vnet2. Peering alone does not fix name resolution, however, since Vnet2 by default still uses Azure-provided DNS, which has no knowledge of the managed domain; Microsoft ' s documented configuration for a peered VNet that needs to join the managed domain is to switch its DNS servers setting from Azure-provided DNS to custom DNS servers pointing at the managed domain ' s own domain controller IP addresses. That combination is exactly what lets VM3 both reach and correctly resolve aadds.contoso.com. Simply adding a subnet to Vnet1, or linking Vnet2 to an Azure private DNS zone, does not by itself give VM3 both a network path to the managed domain ' s virtual network and correct DNS resolution to its actual domain controllers, so neither of those alone would resolve the join failure VM3 is experiencing.
질문 # 264
You have a failover cluster named Cluster1 that hosts an application named App1. The General tab in App1 Properties is shown in the General exhibit. The Failover tab in App1 Properties is shown in the Failover exhibit. Server1 shuts down unexpectedly. You need to ensure that when you start Server1, App1 continues to run on Server2. Solution: From the General settings, you increase the priority of Server2 in the Preferred Owners list. Does this meet the goal?
정답：A
설명：
The Preferred Owners list on a clustered role ' s General tab only sets placement priority -- which node Failover Clustering tries first when the role needs to start or move -- it does not control whether a role automatically fails back to a node once that node returns to and rejoins the cluster. That failback behavior is governed exclusively by the separate Failback settings on the Failover tab, specifically the choice between Prevent failback and Allow failback, with Allow failback optionally restricted to a scheduled time window.
Reordering or increasing Server2 ' s priority within the Preferred Owners list on the General tab therefore does nothing to change whether App1 automatically fails back to Server1 once Server1 finishes restarting and rejoins the cluster; if Allow failback remains configured on the Failover tab, App1 could still move back to Server1 automatically regardless of how the Preferred Owners priorities are arranged. To actually guarantee App1 keeps running on Server2 after Server1 comes back online, the administrator needs to set Failback to Prevent failback on the Failover tab instead, so increasing Server2 ' s priority in the Preferred Owners list does not meet the stated goal.
질문 # 265
You have a Group Policy Object (GPO) named GPO1 that contains user settings only. You plan to apply GPO1 to a global security group named Group1. You link GPO1 to the domain, and you remove all the permissions granted to the Authenticated Users group. You need to configure permissions for GPO1 to meet the following requirements: GPO1 must apply only to the users in Group1; the solution must use the principle of least privilege. Which permissions should you grant to Group1 and the Domain Computers group? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
정답：
설명：
Explanation:
Group1: Apply group policy and Read. Domain Computers: Read only.
By default, Authenticated Users (which includes both user and computer accounts) is granted Read and Apply Group Policy on every new GPO, which is what lets any computer download and evaluate it and lets any signed-in user actually receive its settings; removing that default grant means both permissions must be explicitly re-established for exactly the principals that need them, and no more. Group1 contains the users who must actually receive GPO1 ' s user settings, so it needs both Read (to let the GPO be retrieved and evaluated at all) and Apply Group Policy (to let its settings actually take effect for those users); granting only one would leave the GPO unreadable, or readable but inert, for Group1 ' s members. Domain Computers is different: even though GPO1 contains only User Configuration settings, Group Policy processing on a computer still needs to enumerate and download every GPO linked to its scope in order to evaluate applicability (security filtering, WMI filters) before it can tell whether a given logged-on user should receive it. If Domain Computers has no Read permission at all, computers cannot process GPO1, which breaks correct evaluation for the very users in Group1 who sign in to those computers. Granting Domain Computers only Read - not Apply Group Policy, since GPO1 has no computer settings to apply and granting Apply would exceed least privilege - lets computers process the GPO correctly while ensuring only Group1 ' s members ever receive its settings.
질문 # 266
......
Itcertkr에서는 IT인증시험에 관한 모든 덤프를 제공해드립니다. 우선 시험센터에서 정확한 시험코드를 확인하시고 그 코드와 동일한 코드로 되어있는 덤프를 구매하셔서 덤프에 있는 문제와 답을 기억하시면 시험을 쉽게 패스하실수 있습니다.AZ-802시험은 IT인증시험중에서 많은 인기를 가지고 있는 시험입니다.AZ-802시험을 패스하여 자격증을 취득하시면 취업이나 승진에 많은 가산점이 되어드릴것입니다.
AZ-802최신버전 공부자료: https://www.itcertkr.com/AZ-802_exam.html