最新的Microsoft Administering Windows Server - AZ-802免費考試真題
問題1
You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server and has the following disks: * OS disk: Disk1 -- Size: 512 GiB, Free space: 260 GiB, Encryption: SSE with PMK, Storage type: Standard SSD * Data disk: Disk2 -- Size: 512 GiB, Free space: 45 GiB, Storage type: Standard HDD, Encryption: Platform-managed key You are planning a maintenance strategy for VM1.
You need to identify which task can be performed on Disk2 without causing downtime to VM1. What should you do on Disk2?
You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server and has the following disks: * OS disk: Disk1 -- Size: 512 GiB, Free space: 260 GiB, Encryption: SSE with PMK, Storage type: Standard SSD * Data disk: Disk2 -- Size: 512 GiB, Free space: 45 GiB, Storage type: Standard HDD, Encryption: Platform-managed key You are planning a maintenance strategy for VM1.
You need to identify which task can be performed on Disk2 without causing downtime to VM1. What should you do on Disk2?
正確答案: C
說明：（僅 PDFExamDumps 成員可見）
問題2
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the servers shown in the following table.
You need to migrate Site1 from Server 1 to Server2. The solution must meet the following requirements:
* Minimize how long it takes to perform the migration.
* Minimize administrative effort.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of cations to the answer area and arrange them in the correct order.
Exhibit
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the servers shown in the following table.
You need to migrate Site1 from Server 1 to Server2. The solution must meet the following requirements:
* Minimize how long it takes to perform the migration.
* Minimize administrative effort.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of cations to the answer area and arrange them in the correct order.
Exhibit
正確答案:
Explanation:
Migrating an IIS site with Web Deploy in the shortest time and with the least administrative effort is done by installing the Web Deployment Tool on the source server (Server1) and starting its remote agent service, msdepsvc, so the source can act as a remote sync endpoint. The actual synchronization is then triggered from the destination server (Server2) by running msdeploy.exe with the -verb:sync parameter, pulling Site1 ' s content and configuration directly from Server1 over the remote agent connection in a single pass, rather than exporting and importing packages manually. This is the standard remote-to-remote Web Deploy migration pattern for moving an IIS site between servers, and it avoids the intermediate package files and manual import steps that a packaged export/import approach would otherwise require, which is why it minimizes both migration time and administrative effort compared with alternatives such as the Windows Server Migration Tools feature. Running smigdeploy.exe on Server2 instead would only prepare that server for the unrelated general-purpose Windows Server Migration Tools workflow, which packages and transfers role/feature settings rather than syncing a live IIS site ' s content directly.
問題3
You have a server that runs Windows Server. You need to prevent the creation of SMB Direct connections.
Which cmdlet should you run?
You have a server that runs Windows Server. You need to prevent the creation of SMB Direct connections.
Which cmdlet should you run?
正確答案: B
說明：（僅 PDFExamDumps 成員可見）
問題4
Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a file server named Server1 that hosts multiple shared folders. You have an Azure subscription. You need to migrate the files stored on Server1 to Azure by using an Azure Data Box Gateway. To which storage services can you migrate the files?
Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a file server named Server1 that hosts multiple shared folders. You have an Azure subscription. You need to migrate the files stored on Server1 to Azure by using an Azure Data Box Gateway. To which storage services can you migrate the files?
正確答案: B
說明：（僅 PDFExamDumps 成員可見）
問題5
You have a server that runs Windows Server and hosts an app named App1. You need to prevent App1 from accessing external SMTP servers. The solution must meet the following requirements: - Minimize the impact on App1 ' s access to external HTTP servers. - Minimize the impact on other apps on the server. - Minimize administrative effort. What should you implement in Windows Defender Firewall?
You have a server that runs Windows Server and hosts an app named App1. You need to prevent App1 from accessing external SMTP servers. The solution must meet the following requirements: - Minimize the impact on App1 ' s access to external HTTP servers. - Minimize the impact on other apps on the server. - Minimize administrative effort. What should you implement in Windows Defender Firewall?
正確答案: E
說明：（僅 PDFExamDumps 成員可見）
問題6
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a server named Server1 that runs Windows Server 2022 and has the DHCP Server role. Server1 contains a single DHCP scope named Scope1. You deploy five printers to the network. You need to ensure that the printers are always assigned the same IP address. Solution: You create a DHCP reservation for each printer.
Does this meet the requirement?
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a server named Server1 that runs Windows Server 2022 and has the DHCP Server role. Server1 contains a single DHCP scope named Scope1. You deploy five printers to the network. You need to ensure that the printers are always assigned the same IP address. Solution: You create a DHCP reservation for each printer.
Does this meet the requirement?
正確答案: B
說明：（僅 PDFExamDumps 成員可見）
問題7
You have an on-premises Hyper-V deployment that hosts multiple virtual machines. You have an Azure subscription that contains an Azure Migrate project named Project1. You plan to migrate the virtual machines to Azure by using Project1. You need to discover all the Hyper-V hosts and virtual machines running in your environment. The solution must minimize administrative effort. What should you do first?
You have an on-premises Hyper-V deployment that hosts multiple virtual machines. You have an Azure subscription that contains an Azure Migrate project named Project1. You plan to migrate the virtual machines to Azure by using Project1. You need to discover all the Hyper-V hosts and virtual machines running in your environment. The solution must minimize administrative effort. What should you do first?
正確答案: D
說明：（僅 PDFExamDumps 成員可見）
問題8
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a domain controller named DC1 and a member server named Server1. Users cannot sign in to Server1 by using domain credentials and receive the following error message: The trust relationship between this workstation and the primary domain failed. You need to restore domain authentication on Server1 without removing Server1 from the domain.
Solution: From Server1, you run Add-Computer -DomainName contoso.com -Server DC1. Does this meet the goal?
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a domain controller named DC1 and a member server named Server1. Users cannot sign in to Server1 by using domain credentials and receive the following error message: The trust relationship between this workstation and the primary domain failed. You need to restore domain authentication on Server1 without removing Server1 from the domain.
Solution: From Server1, you run Add-Computer -DomainName contoso.com -Server DC1. Does this meet the goal?
正確答案: B
說明：（僅 PDFExamDumps 成員可見）
問題9
Your on-premises network contains a single-domain Active Directory Domain Services (AD DS) forest. You have a Microsoft Entra tenant named contoso.com. The AD DS forest syncs with the Microsoft Entra tenant by using Microsoft Entra Connect. You need to ensure that users in the forest that have a custom attribute of NoSync are excluded from synchronization. How should you configure the Microsoft Entra Connect cloudFiltered attribute, and which tool should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Your on-premises network contains a single-domain Active Directory Domain Services (AD DS) forest. You have a Microsoft Entra tenant named contoso.com. The AD DS forest syncs with the Microsoft Entra tenant by using Microsoft Entra Connect. You need to ensure that users in the forest that have a custom attribute of NoSync are excluded from synchronization. How should you configure the Microsoft Entra Connect cloudFiltered attribute, and which tool should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
正確答案:
Explanation:
Attribute: True; Tool: Synchronization Rules Editor
The cloudFiltered attribute is a Boolean flag in the Microsoft Entra Connect metaverse that determines whether an object is eligible for export to Microsoft Entra ID: when an object ' s cloudFiltered value is set to True, that object is excluded from being exported/synchronized to the cloud, regardless of whatever other attributes it has. To selectively exclude only the users who carry the custom attribute value NoSync, an administrator must author a custom inbound synchronization rule that scopes exactly those objects (using a scoping filter on the custom attribute equal to " NoSync " ) and then maps a constant value of True into the cloudFiltered attribute for objects that match that scope; objects that don ' t match the filter keep their default cloudFiltered value (False) and continue to sync normally. This kind of custom attribute-based scoping and attribute-flow authoring can only be done with the Synchronization Rules Editor, the tool specifically built for creating and editing inbound/outbound synchronization rules in Microsoft Entra Connect. ADSI Edit is a low- level raw LDAP-attribute editor for AD DS objects and has no concept of Microsoft Entra Connect synchronization rules or the metaverse. The Microsoft Entra Connect wizard configures top-level sync settings (such as which OUs or domains to include, filtering by OU, and basic feature toggles) but does not expose custom attribute-based scoping or attribute-flow rule authoring. Therefore, cloudFiltered must be set to True for matching objects, configured through the Synchronization Rules Editor.
問題10
Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server. Server1 has the Web Server (IIS) role installed and hosts a web app named App1. App1 uses Windows authentication. You have an Azure subscription. You plan to migrate App1 to Azure App Service. You need to ensure that App1 can support Windows authentication in App Service. What should you configure first?
Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server. Server1 has the Web Server (IIS) role installed and hosts a web app named App1. App1 uses Windows authentication. You have an Azure subscription. You plan to migrate App1 to Azure App Service. You need to ensure that App1 can support Windows authentication in App Service. What should you configure first?
正確答案: D
說明：（僅 PDFExamDumps 成員可見）
問題11
You have an on-premises Active Directory Domain Services (AD DS) domain that contains the resources shown in the following table.
The domain contains the domain controllers shown in the following table.
You configure a site link between Site1 and Site2 and set the replication interval to 20 minutes.
At 10:00 AM, connectivity between Site1 and Site2 fails.
Administrators perform the actions shown in the following table.
At 10:30 AM, connectivity between Site1 and Site2 is restored.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth dim point
Exhibit
Exhibit
Exhibit
You have an on-premises Active Directory Domain Services (AD DS) domain that contains the resources shown in the following table.
The domain contains the domain controllers shown in the following table.
You configure a site link between Site1 and Site2 and set the replication interval to 20 minutes.
At 10:00 AM, connectivity between Site1 and Site2 fails.
Administrators perform the actions shown in the following table.
At 10:30 AM, connectivity between Site1 and Site2 is restored.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth dim point
Exhibit
Exhibit
Exhibit
正確答案:
Explanation:
At 11:30 AM, User1 and User2 are members of Group1: No. At 11:30 AM, the phone number of User2 is 333-
333: Yes. At 11:30 AM, User3 is deleted: No.
Group membership is stored as a linked, multivalued attribute, so DC2 ' s removal of User1 from Group1 and DC1 ' s addition of User2 to Group1 modify two different values and merge without conflict once the 10:00 to
10:30 network partition heals. By 11:30 AM, well past the 20-minute replication interval, Group1 has fully converged across both sites to contain only User2, so the claim that both User1 and User2 are members of Group1 is false. For the single-valued telephone-number attribute, Active Directory resolves a genuine write conflict by comparing each domain controller ' s local originating-write version number for that attribute, using the timestamp only as a tiebreaker when the version numbers are equal; because DC1 wrote User2 ' s phone number twice during the outage, first to 222-222 and then to 333-333, while DC2 wrote it only once, to
444-444, DC1 ' s attribute carries the higher version number and wins the conflict regardless of DC2 ' s later wall-clock timestamp, so User2 ' s phone number converges everywhere to 333-333. For User3, DC1 moved the object into OU1 while DC2, still seeing OU1 as empty from its own perspective, deleted OU1 during the same outage window; when these two conflicting changes replicate together, Active Directory detects that User3 has become orphaned by its parent container ' s deletion and relocates the object into the domain ' s LostAndFound container rather than deleting it outright, so User3 still exists, just not in its original location, at 11:30 AM.
問題12
Technical requirements: Promote a new server named DC4 that runs Windows Server 2022 to a domain controller. Replicate the virtual machines from Cluster2 to an Azure Recovery Services vault. Centrally manage performance alerts in Azure for all the domain controllers. Ensure that User1 can recover objects from the Active Directory Recycle Bin. Migrate Share1 to Server2, including all the share and folder permissions. Back up Server4 and all data to an Azure Recovery Services vault. Use Hyper-V Replica to protect the virtual machines in Cluster3. Implement BitLocker Drive Encryption (BitLocker) on Server4.
Whenever possible, use the principle of least privilege. You need to meet the technical requirements for Share1. What should you use?
Technical requirements: Promote a new server named DC4 that runs Windows Server 2022 to a domain controller. Replicate the virtual machines from Cluster2 to an Azure Recovery Services vault. Centrally manage performance alerts in Azure for all the domain controllers. Ensure that User1 can recover objects from the Active Directory Recycle Bin. Migrate Share1 to Server2, including all the share and folder permissions. Back up Server4 and all data to an Azure Recovery Services vault. Use Hyper-V Replica to protect the virtual machines in Cluster3. Implement BitLocker Drive Encryption (BitLocker) on Server4.
Whenever possible, use the principle of least privilege. You need to meet the technical requirements for Share1. What should you use?
正確答案: B
說明：（僅 PDFExamDumps 成員可見）
問題13
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the domain controllers shown in the following exhibit: DC1 (holds schema master, infrastructure master, and domain naming master roles), DC2 (holds PDC emulator and RID master roles), DC3 (holds no FSMO roles).
You need to configure DC3 to be the authoritative time server for the domain. Which operations master role should you transfer to DC3, and which console should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the domain controllers shown in the following exhibit: DC1 (holds schema master, infrastructure master, and domain naming master roles), DC2 (holds PDC emulator and RID master roles), DC3 (holds no FSMO roles).
You need to configure DC3 to be the authoritative time server for the domain. Which operations master role should you transfer to DC3, and which console should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
正確答案:
Explanation:
The Windows Time service hierarchy in an AD DS domain is anchored to the PDC emulator by default: the PDC emulator of the domain is designated the domain ' s authoritative time source, every other domain controller in the domain synchronizes its clock from the PDC emulator (directly or transitively), and domain- joined clients ultimately trace their time back to it through the domain hierarchy. To make DC3 the domain ' s authoritative time server, the PDC emulator role itself must be moved to DC3, since authoritative time-server status follows the PDC emulator role holder rather than being an independently assignable setting. The other FSMO roles are unrelated to time authority: the domain naming master and schema master are forest-wide roles governing directory partition creation and schema changes, and the RID master issues relative ID pools for new security principals - none of these affect which DC anchors the domain ' s time hierarchy. The PDC emulator, RID master, and infrastructure master are domain-wide roles that are viewed and transferred through Active Directory Users and Computers, by right-clicking the domain node and selecting Operations Masters; the forest-wide roles are instead managed through Active Directory Domains and Trusts (domain naming master) and the Active Directory Schema snap-in (schema master), and Active Directory Sites and Services manages site topology, not FSMO roles at all. Transferring the PDC emulator role to DC3 using Active Directory Users and Computers is therefore correct.