CertShikenはIT認定試験を受験した多くの人々を助けました。また、受験生からいろいろな良い評価を得ています。CertShikenのAZ-802問題集の合格率が100%に達することも数え切れない受験生に証明された事実です。もし試験の準備をするために大変を感じているとしたら、ぜひCertShikenのAZ-802問題集を見逃さないでください。これは試験の準備をするために非常に効率的なツールですから。この問題集はあなたが少ない労力で最高の結果を取得することができます。
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Secure Windows Server on-premises and hybrid infrastructures | 10% | - Manage access control and permissions - Implement security baselines and hardening - Configure Windows Defender and audit policies |
| Topic 2: Manage Windows Servers and workloads in a hybrid environment | 20% | - Deploy servers using Windows Admin Center and Azure Arc - Manage updates and patches across hybrid servers - Implement hybrid identity solutions - Configure remote management and secure administration |
| Topic 3: Implement high availability and disaster recovery | 5% | - Perform server and workload migrations - Use Azure Site Recovery for hybrid workloads - Monitor and troubleshoot Windows Server environments - Configure failover clustering - Implement backup and recovery solutions |
| Topic 4: Manage virtual machines and containers | 15% | - Configure Azure Arc-enabled servers and VMs - Deploy and manage Hyper-V virtual machines - Deploy and manage containers and Kubernetes on Windows Server |
| Topic 5: Implement and manage an on-premises and hybrid networking infrastructure | 15% | - Configure software-defined networking - Implement hybrid network connectivity - Configure IP addressing, DNS, and DHCP - Secure network traffic in hybrid environments |
| Topic 6: Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments | 20% | - Integrate AD DS with Azure AD and Azure Arc - Install and configure domain controllers - Manage FSMO roles and replication - Implement and manage Group Policy Objects |
| Topic 7: Manage storage and file services | 15% | - Implement Storage Spaces and Storage Spaces Direct - Integrate on-premises storage with Azure Storage - Configure file servers and shares - Configure data deduplication and replication |
PayPalは、国際的なオンライン取引でより安全で世界中で使用されています。 すべての受験者がPayPalを介してAZ-802最新の試験問題集を購入できることを願っています。 PayPalは売り手が「品質第一、完全性管理」であることを要求していますが、製品とサービスがあなたが約束したものと異なる場合、PayPalは売り手のアカウントをブロックします。 ただし、PayPalはAZ-802の最新の試験問題集に追加の税金を支払って、売り手と買い手のアカウントが安全であることを保証できます。 SWREGには、知的財産税などの追加税がかかります。
質問 # 330
Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains the groups shown in the following table: Group11 (Domain local, contoso.com), Group12 (Global, contoso.com), Group13 (Global, contoso.com), Group14 (Universal, contoso.com), Group21 (Universal, east.contoso.com).
You need to implement a group nesting strategy. Which groups can be added as members of Group12, and which groups can be added as members of Group21? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Group scope/domain table
正解：
解説：
Explanation:
Group12 (Global, contoso.com) can have as members: Group13 only. Group21 (Universal, east.contoso.com) can have as members: Group12, Group13, and Group14 only.
Active Directory ' s group-scope nesting rules are strict and well-defined: a Global-scope group can contain only user/computer accounts and other Global-scope groups from its own, same domain -- it can never contain a Universal-scope or Domain-local-scope group, regardless of domain. Group12 is Global (contoso.
com), so among the listed candidates, only Group13 (also Global, also contoso.com) is eligible; Group11 is disqualified because it is Domain-local scope, and Group14 is disqualified because it is Universal scope -- Global groups cannot absorb Universal-scope members under any circumstance, even within the same domain. A Universal-scope group, by contrast, can contain accounts, other Universal groups from any domain in the forest, and Global groups from any domain in the forest (but never a Domain-local group). Group21 is Universal (east.contoso.com), so Group12 and Group13 (both Global, in contoso.com, a different domain -- which is fine, since Universal-group membership is forest-wide) are eligible, and Group14 (Universal, contoso.com) is also eligible, since Universal groups may contain other Universal groups from anywhere in the forest. Only Group11 (Domain-local scope) is excluded from Group21 ' s membership, since a Domain- local group can never be nested inside anything except another Domain-local group in its own domain.
質問 # 331
You have an on-premises virtual machine named VM1 that runs Windows Server. You have an Azure subscription. You plan to use an Azure Site Recovery replication policy to replicate VM1 to Azure. You need to ensure that changes on VM1 are replicated as often as possible. To what should you set the Copy frequency setting for the policy?
正解：A
解説：
Azure Site Recovery ' s replication policy for protecting on-premises Hyper-V virtual machines by replicating them to Azure is built on top of the underlying Hyper-V Replica engine, and the Copy frequency setting exposed in that replication policy offers only a small, fixed set of selectable intervals rather than an arbitrary custom value, with the shortest of those available intervals being 30 seconds. Selecting 30 seconds for the Copy frequency setting therefore configures the replication policy to send VM1 ' s changed data to Azure as frequently as the underlying platform allows, which produces the smallest achievable recovery point interval and the least amount of potential data loss in the event of a failover, directly satisfying the requirement to replicate changes as often as possible. Values shorter than 30 seconds, such as 15 seconds, are not among the set of supported choices for this setting at all, since the Hyper-V Replica engine underlying this replication policy was not designed to support sub-30-second replication cycles, and the 1-minute and 5-minute options, while valid selectable choices, both replicate less frequently than the 30-second option and would therefore not satisfy the requirement to minimize the interval between replication cycles as much as the platform supports.
質問 # 332
You have a Storage Spaces Direct configuration that has persistent memory and contains the data volumes shown in the following table: Volume1 (NTFS), Volume2 (ReFS). You plan to add data volumes to Storage Spaces Direct as shown in the following table: Volume3 (NTFS), Volume4 (ReFS). On which volumes can you use direct access (DAX)?
Existing data volumes
Planned data volumes
正解：C
解説：
Direct access (DAX) mode for persistent memory volumes in Storage Spaces Direct is supported only in combination with the NTFS file system; a persistent memory volume formatted with ReFS can only be used in block access mode, not DAX mode, regardless of when that volume was created. Volume1 and Volume3 are formatted with NTFS, while Volume2 and Volume4 are formatted with ReFS, so DAX is available on Volume1 and Volume3 and is not available on Volume2 or Volume4. Because file system type -- rather than whether a volume is part of the existing deployment or a newly planned addition -- is the determining factor for DAX eligibility, both the currently deployed NTFS volume (Volume1) and the newly planned NTFS volume (Volume3) qualify for DAX. This NTFS-only restriction for DAX, contrasted with block access mode
' s support for both NTFS and ReFS, is a core planning consideration whenever persistent memory is deployed with Storage Spaces Direct. Therefore, Volume1 and Volume3 only is the correct answer.
質問 # 333
You need to meet the technical requirements for the site links. Which users can perform the required task?
正解：B
解説：
Site, subnet, and site-link objects are stored in the Configuration partition, which replicates to every domain controller in the forest but is administratively owned by the forest root domain. By default, only members of Enterprise Admins and members of the Domain Admins group of the forest root domain (contoso.com in this forest) have permissions to modify objects in the Configuration container, including editing a site link ' s replication schedule. Admin1 is a member of Contoso\Enterprise Admins and therefore has forest-wide rights over the Configuration partition. Admin2 is a member of Contoso\Domain Admins; because contoso.com is the forest root domain, this group also carries default rights over the Configuration and Schema partitions.
Admin3, however, is a member of Canada\Domain Admins, the Domain Admins group of the canada.contoso.
com child domain, which has no inherent rights over the Configuration partition. Consequently, to change the replication schedule on all site links to 30 minutes, only Admin1 and Admin2 currently have the necessary permissions, making option C the correct answer.
Topic 1, Case Study 1: Contoso, Ltd.
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
AD DS Environment: The network contains an on-premises Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains two domains named contoso.com and canada.contoso.com.
The forest contains the domain controllers shown in the exhibit below. All the domain controllers are global catalog servers.
Domain controllers
Server Infrastructure: The network contains the servers shown in the exhibit below. A server named Server4 runs Windows Server and is in a workgroup. Windows Firewall on Server4 uses the private profile. Server2 hosts three virtual machines named VM1, VM2, and VM3. VM3 is a file server that stores data in the volumes shown in the exhibit below.
Servers
VM3 volumes
Group Policies: The contoso.com domain has the Group Policy Objects (GPOs) shown in the exhibit below.
GPOs
Existing Identities: The forest contains the users shown in the exhibit below. The forest also contains the groups shown in the exhibit below.
Users
Groups
Current Problems: When an administrator signs in to the console of VM2 by using Virtual Machine Connection, and then disconnects from the session without signing out, another administrator can connect to the console session as the currently signed-in user.
Requirements: Contoso identifies the following technical requirements:
- Change the replication schedule for all site links to 30 minutes.
- Promote Server1 to a domain controller in canada.contoso.com.
- Install and authorize Server3 as a DHCP server.
- Ensure that User1 can manage the membership of all the groups in Contoso\OU3.
- Ensure that you can manage Server4 from Server1 by using PowerShell remoting.
- Ensure that you can run virtual machines on VM1.
- Force users to provide credentials when they connect to VM2.
- On VM3, ensure that Data Deduplication on all eligible volumes is possible.
質問 # 334
You have an on-premises server that runs Windows Server and contains a file share named Share1. You have an Azure subscription that contains an Azure Files share named azshare1 and an Azure File Sync instance named Sync1. Sync1 syncs Share1 with azshare1. You need to delete Sync1. Which four resources should you delete in sequence? To answer, move the appropriate resources from the list of resources to the answer area and arrange them in the correct order.
正解：
解説：
Explanation:
1. The cloud endpoint. 2. The server endpoint. 3. The sync group. 4. Sync1.
A Storage Sync Service (Sync1) cannot be deleted while it still contains an active sync group, and a sync group cannot be deleted while it still has a cloud endpoint or server endpoint attached to it, so the topology must be dismantled from the bottom up before the top-level Sync1 resource can be removed. The cloud endpoint (the link between the sync group and the Azure file share, azshare1) and the server endpoint (the link between the sync group and the on-premises path, Share1) are both direct children of the sync group and must both be removed before the now-empty sync group itself can be deleted; removing the cloud endpoint does not delete the underlying Azure file share azshare1 itself, only the sync association, so azshare1 does not need to be deleted at all to remove Sync1 and is correctly left out of the sequence. Once both endpoints are gone, the sync group has nothing left syncing through it and can be deleted, and once the Storage Sync Service has no remaining sync groups, Sync1 itself can finally be deleted. " The management group " is an unrelated Azure governance/organizational construct with no relationship to Storage Sync Service resources and plays no role in this sequence. Therefore, the correct order is: delete the cloud endpoint, delete the server endpoint, delete the sync group, and finally delete Sync1.
質問 # 335
......
AZ-802の実際の試験の内容について科学的な取り決めを行いました。優れたAZ-802試験問題でAZ-802試験に合格できます。AZ-802の実際の試験の品質を確保するために、多くの努力をしました。私たちの会社は何百人もの専門家を雇うことに多額のお金を費やし、彼らは作品を書くためにチームを作りました。これらの専門家の資格は非常に高いです。 AZ-802学習ガイドに関する豊富な知識と豊富な経験があります。これらの専門家は、AZ-802の学習資料が公式に全員と面談するまでに多くの時間を費やしました。
AZ-802日本語受験教科書: https://www.certshiken.com/AZ-802-shiken.html