AZ-802資格認定は重要な課題になっていて、この資格認定書を所有している人は会社に得られる給料が高いです。我々AZ-802問題集を利用し、試験に参加しましょう。試験に成功したら、あなたの知識と能力を証明することができます。あなたはこれらのAZ-802資格認定を持つ人々の一員になれると、いい仕事を探させます。
| Section | Objectives |
|---|---|
| Topic 1: Hybrid infrastructure management | - Azure integration
|
| Topic 2: Secure and manage Windows Server environments | - Identity and access management
|
| Topic 3: Compute, storage, and virtualization | - Virtual machines and containers
|
| Topic 4: Networking and high availability | - High availability and disaster recovery
|
本当にAZ-802試験に合格するつもりなら、当社Microsoftのソフトウェアは迅速かつ便利な学習を提供し、最高の学習教材を取得し、試験の非常に良い準備をします。 AZ-802ガイド急流の内容は習得が容易であり、重要な情報を簡素化しました。さらに、AZ-802準備急流は、より重要な情報をより少ない質問と回答で伝えます。 AZ-802試験問題により、学習はリラックスして非常に効率的です。
質問 # 287
Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains 100 servers that run Windows Server and are Azure Arc-enabled. You have an Azure subscription.
You need to automatically change the password for the built-in local administrator account on each computer in the domain. The solution must meet the following requirements: the password must change automatically every 30 days; administrative effort must be minimized. What should you use?
正解：C
解説：
Windows Local Administrator Password Solution (Windows LAPS) is purpose-built to automatically randomize and rotate the password of a managed local account, such as the built-in local Administrator account, on a configurable schedule that includes a 30-day rotation interval, all with essentially no ongoing administrative effort once policy is applied. Because the 100 servers are already Azure Arc-enabled, Windows LAPS can be configured and enforced through Azure Policy against the Arc-enabled machine resources in addition to the traditional Group Policy path used for domain-joined, non-Arc computers, letting a single policy definition cover the whole hybrid estate with minimal ongoing effort. A Password Settings Object only governs domain user account password policy, such as complexity and expiration for AD DS user accounts, and has no effect whatsoever on local accounts on member servers. An Azure policy alone, without Windows LAPS, does not perform the actual password rotation; it can only audit or enforce that LAPS itself is deployed and configured correctly. Group managed service accounts are an entirely different mechanism designed to provide automatically managed passwords for services and scheduled tasks running under a shared identity, not for a computer ' s built-in local administrator account, so they cannot satisfy this requirement.
質問 # 288
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named DHCP1 that runs Windows Server and has the DHCP Server role installed. DHCP1 has a static IPv4 address of 10.10.10.5/24. DHCP1 is authorized in AD DS and contains an active scope for a subnet of
10.10.20.0/24. Client computers on the 10.10.20.0/24 subnet receive APIPA addresses. You verify that the DHCP Server service is running, and the scope has available IP addresses. You need to ensure that the computers on 10.10.20.0/24 can obtain IPv4 address leases from DHCP1. What should you do?
正解：B
解説：
Client computers falling back to APIPA (169.254.x.x) addresses means their DHCPDISCOVER broadcasts are never reaching DHCP1 at all, which is expected here because DHCP1 ' s own network interface sits on the
10.10.10.0/24 subnet while the scope it is meant to service, 10.10.20.0/24, is a different subnet; DHCP discovery broadcasts do not cross router/subnet boundaries by default, and there is no indication that a DHCP relay agent (or an RFC 1542-compliant router configured to forward BOOTP/DHCP broadcasts) exists to carry those broadcasts from the 10.10.20.0/24 subnet across to DHCP1. Configuring a DHCP relay agent, typically on a router interface or a member server physically present on the 10.10.20.0/24 subnet and pointed at DHCP1 ' s IP address, converts the client broadcasts into unicast packets addressed directly to DHCP1, letting the existing, already-active, already-available scope actually receive and answer the requests, which is the only change needed since the scope, authorization, and service status are all already confirmed correct.
Running Add-DhcpServerInDC would attempt to (re-)register a server as authorized in AD DS, which is already true and unrelated to this symptom. Creating an exclusion range would shrink the address pool, not fix broadcast delivery, and adding a DHCP server security group has no effect on whether client broadcasts can reach the server across a subnet boundary.
質問 # 289
You are planning the migration of Archive1 to support the on-premises migration plan. What is the minimum number of IP addresses required for the node and cluster roles on Cluster3?
正解：C
解説：
A Windows Server failover cluster requires a distinct IP address for each individual cluster node ' s network adapter, plus one additional IP address for the cluster ' s own network name resource -- the cluster access point that clients and management tools use to address the cluster as a single logical entity rather than any one specific node. Cluster3 will contain two physical nodes, Node1 and Node2, so at minimum one IP address is required for Node1 ' s network adapter and one for Node2 ' s network adapter. Beyond those two node-level addresses, the cluster core resource itself (the cluster name object and its associated IP address resource) requires one more address so that the cluster can be addressed and managed as a whole and so that any highly available roles hosted on the cluster (such as the file share role planned for Cluster3) can obtain the network identity they need to fail over between nodes. Adding these together -- one for Node1, one for Node2, and one for the cluster ' s own network name -- yields a minimum of three IP addresses required for Cluster3 ' s node and cluster roles. Fewer than three would leave either a node or the cluster itself without a usable network identity, and while additional IP addresses may be consumed by highly available roles later added to the cluster, three is the baseline minimum for the node and cluster roles themselves.
質問 # 290
You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed. You build Just Enough Administration (JEA) role capabilities and session configuration files. You need to limit which Hyper-V module cmdlets helpdesk users can use when administering Server1 remotely. How should you complete the PowerShell command? To answer, select the appropriate options in the answer area. NOTE:
Each correct selection is worth one point.
正解：
解説：
Explanation:
Register-PSSessionConfiguration -Path .\HyperVJeaConfig.pssc -Name ' HyperVJeaHelpDesk ' -Force Just Enough Administration constrains what a remote user can do in a PowerShell session by combining a role capabilities file (.psrc, which lists exactly which cmdlets, functions, and parameters a given role is allowed to use -- for example, a curated subset of the Hyper-V module ' s cmdlets) with a session configuration file (.pssc, generated by New-PSSessionConfigurationFile, which ties one or more role capabilities to security principals and session-wide restrictions). Once the .pssc file has been authored, it must be registered as an actual, connectable PowerShell endpoint on Server1 using Register- PSSessionConfiguration, specifying the .pssc file ' s path and a name for the resulting endpoint; -Force allows the registration to proceed even if a session configuration by that name already exists or the WinRM service needs restarting. Enter-PSSession simply starts an interactive remoting session against an existing endpoint and plays no role in creating or registering one. New-PSSessionConfigurationFile only creates the .pssc content -- it does not make the file usable as an actual session endpoint that remote users can connect to.
Registering the wrong file type, such as a .ps1 script or .psm1 module, would fail, since Register- PSSessionConfiguration ' s -Path parameter specifically expects a .pssc session configuration file. Therefore, the command must be Register-PSSessionConfiguration -Path .\HyperVJeaConfig.pssc -Name ' HyperVJeaHelpDesk ' -Force.
質問 # 291
You have an Azure subscription. The subscription contains a virtual machine named Server1 that runs Windows Server. You create a new Log Analytics workspace named Workspace1. You need to collect performance metrics for Server1 by using Azure Monitor. What should you do next?
正解：D
解説：
Collecting performance metrics from a Windows Server virtual machine through Azure Monitor now uses the Azure Monitor Agent, and the agent only starts sending data once it is associated with a data collection rule that specifies which performance counters to collect and which Log Analytics workspace to send them to.
Simply creating the workspace does not begin collection on its own, and options such as regenerating a workspace key, installing the Azure Connected Machine agent (used for Arc-enabling non-Azure servers), or configuring Windows Event Forwarding are unrelated to enabling AMA-based performance monitoring for an Azure VM, which already has the Azure Monitor Agent available as a VM extension without needing Arc onboarding. Creating and associating a DCR with Server1, specifying the performance counter set and the destination workspace, is the next required step, and once the DCR is linked the agent begins streaming the selected counters into Workspace1 for querying with KQL and for use in workbooks or alert rules.
質問 # 292
......
私たちのウェブサイトから見ると、AZ-802学習教材は3つのバージョンがあります。PDF、ソフトウェアとオンライン版です。PDF版は印刷できます。ソフトウェアとオンライン版はコンピュータで使用できます。コンピュータで学ぶことが難しい場合は、AZ-802学習教材の印刷資料で勉強できます。また、AZ-802学習教材の価格は合理的に設定されています。
AZ-802日本語版問題集: https://www.goshiken.com/Microsoft/AZ-802-mondaishu.html