Microsoft Administering Windows Server Hybrid Core Infrastructure - AZ-800무료 덤프문제 풀어보기
Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites ar e connected by using DEFAULTIPSITELINK.
You open a new branch office that contains only client computers.
You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1.
Solution: You configure the Try Next Closest Site Group Policy Object (GPO) setting in a GPO that is linked to Site1.
Does this meet the goal?
You open a new branch office that contains only client computers.
You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1.
Solution: You configure the Try Next Closest Site Group Policy Object (GPO) setting in a GPO that is linked to Site1.
Does this meet the goal?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
You have a server named Server 1 that runs Windows Server and has the Hyper-V server role installed.
Server1 hosts a v irtual machine named VM1. Server1 has an NV Me storage device that is assigned to VM1 by using Discrete Device Assignment.
You need to make the device available to the host.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Server1 hosts a v irtual machine named VM1. Server1 has an NV Me storage device that is assigned to VM1 by using Discrete Device Assignment.
You need to make the device available to the host.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
정답:
Explanation:
The Administering Windows Server Hybrid Core Infrastructure guidance for Hyper-V Discrete Device Assignment (DDA) explains that a PCIe/NVMe device passed through to a VM becomes detached from the host PnP stack and "owned" by the guest. To reclaim the device for the host you must first turn off the VM because " chan ges to DDA device assignments require the virtual machine to be in an Off state ." After the VM is stopped, you remove the association using Remove-VMAssignableDevice (the inverse of assigning with Add-VMAssignableDevice ). The device is then returned from t he VM's configuration. Next, you return the device to the host by calling Mount-VMHostAssignableDevice , which " re-attaches the PCI device to the host and makes it available to the host operating system ." Finally, because the host previously dis mounted the device to make it assignable, Windows on the host requires a PnP re-enable : use Device Manager (or a rescan) to enable the hardware so the host can use it again.
Therefore, the correct sequence to make the NVMe device available to Server1 is: stop VM1 , run Remove- VMAssignableDevice , run Mount-VMHostAssignableDevice , and then enable the device in Device Manager on the host.
Note: This question is part of a series of questions that present the same sce nario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are planning the deployment of DNS to a new network.
You have three internal DNS servers as shown in the following table.
The contoso.local zone contains zone delegations for east.conloso.local and west.contoso.local. All the DNS servers use root hints.
You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts.
Solution: On Server2 and Ser ver3, you configure a conditional forwarder for contoso.local.
Does this meet the goal?
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are planning the deployment of DNS to a new network.
You have three internal DNS servers as shown in the following table.
The contoso.local zone contains zone delegations for east.conloso.local and west.contoso.local. All the DNS servers use root hints.
You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts.
Solution: On Server2 and Ser ver3, you configure a conditional forwarder for contoso.local.
Does this meet the goal?
정답: A
설명: (Fast2test 회원만 볼 수 있음)
Your network contains an Active Directory Domain Services (AD DS) domain named adatum.com The domain contains a server named Server1 and the users shown In the following table.
Server1 contains a folder named D:\Folder1. The advanced security s ettings for Folder 1 are configured as shown in the Permissions exhibit. (Click the Permissions lab.)
Folder1 is shared by using the following configurations
Server1 contains a folder named D:\Folder1. The advanced security s ettings for Folder 1 are configured as shown in the Permissions exhibit. (Click the Permissions lab.)
Folder1 is shared by using the following configurations
정답:
Explanation:
User1 can read the files in Share1. Yes
User3 can delete files in Share1. No
If User2 connects to \Server1.adatum.com from File Explorer, (Share1 will be visible). Yes In Windows file sharing, effective access over SMB = the most restrictive result of Share permissions AND NTFS permissions . The AZ-800 materials emphasize that a user must have sufficient permission on both layers to perform an action. In Folder1, NTFS ACLs grant Group1 = Read , Group2 = Write , and no entry for Group3 . The share "Share1" grants Group1 = Change and Group3 = Full Control .
* User1 (Group1) : Share permission "Change" would allow modify over SMB, but NTFS grants only Rea d . Because the effective permission is the lower of the two, User1 is effectively Read and therefore can read the files.
* User3 (Group3) : Although the share grants Full Control , there is no NTFS entry for Group3 (inheritance is disabled), so NTFS denies acc ess. Without NTFS rights (e.g., Modify/Delete), delete is not possible .
* User2 (Group2) : NTFS grants Write , but there is no share permission for Group2, so User2 cannot access content through the share. However, the share's FolderEnumerationMode = Unrestricted (i.e., Access-Based Enumeration is off). As covered in the hybrid core guide, when ABE is disabled, users can see items even if they lack permissions. Thus, when User2 browses \Server1.adatum.com , Share1 is visible (opening it will result in A ccess Denied).
Therefore: Yes (User1 read), No (User3 delete), Yes (User2 sees Share1).
Your network contains an Active Directory Domain Services (AD DS) domain named adatum.com. The domain contains a server named Server1 and the users shown in the following table.
Server1 contains a folder named D:\Folder1. The advanced security settings for Folder1 are configured as shown in the Permissions exhibit. (Click the Permissions tab.)
Fold er1 is shared by using the following configurations:
The share permissions for Share1 are shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection i s worth one point.
Server1 contains a folder named D:\Folder1. The advanced security settings for Folder1 are configured as shown in the Permissions exhibit. (Click the Permissions tab.)
Fold er1 is shared by using the following configurations:
The share permissions for Share1 are shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection i s worth one point.
정답:
Explanation:
The course content for Administering W indows Server Hybrid Core Infrastructure explains the effective permission model for SMB shares: "Access to a shared folder is the most restrictive result of the Share permissions and the NTFS permissions . Share permissions control access over the network, while NTFS permissions control access to the file system itself. The effective permission is the intersection-users must have permission in both places." It also clarifies typical rights: "Read includes viewing and opening; Change
/Modify includes creating , changing, and deleting ; Full Control adds the ability to change permissions and take ownership." Applying this: User1 is in Group1 . Share1 grants Group1 = Change , and NTFS on D:\Folder1 grants Group1 = Read . The intersection is Read , so User1 can read fi les. User3 is in Group3 . Share1 grants Group3 = Full Control , but NTFS has no entry for Group3 (and no broader Allow that would include it).
Without NTFS Modify/Delete, User3 cannot delete .
Regarding visibility, the share was created with FolderEnumerationMode = Unrestricted . The training states: "With Unrestricted enumeration, the share (and items) are not hidden based on access; users may see the share even if they lack permissions, though access will be denied when opened. Access-Based e numeration hides items from users without permission." Therefore, when User2 (member of Group2 ) browses \\Server1 , Share1 will be listed , though opening it would rely on permissions.
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a user named User1 and the servers shown in the following table.
You need to ensure that User1 can manage only Scope1 and Scope3. What should you do?
You need to ensure that User1 can manage only Scope1 and Scope3. What should you do?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
You have a server named Server1 that runs Windows Server and contai ns a file share named Share1.
You need to prevent users from stoning MP4 files in Share1. The solution must ensure that the users can store other types of files in the share.
What should you configure on Server1?
You need to prevent users from stoning MP4 files in Share1. The solution must ensure that the users can store other types of files in the share.
What should you configure on Server1?
정답: A
설명: (Fast2test 회원만 볼 수 있음)
You need to meet technical requirements for HyperV1.
Which com mand should you run? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Which com mand should you run? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
정답:
Explanation:
You need to configure network communication between the Seattle and New York offices. The solution must meet the networking requirements.
What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct sel ection is worth one point.
What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct sel ection is worth one point.
정답:
Explanation:
The exam materials for Administering Windows Server Hybrid Core Infrastructure explain that when replacing private WAN links with Azure, Azure Virtual WAN (vWAN) can be used to centralize connectivity. For private connectivity, ExpressRoute integrates directly with a vWAN hub by deploying an ExpressRoute gateway in the hub. The gateway is the Azure resource that terminates ExpressRoute and enables hub-and-spoke routing to connected VNets (such as Vnet1 ). The guides emphasize: " In a Virtual WAN hub, use the ExpressRoute gateway to connect ExpressRoute circuits and propagate routes acro ss the hub to your virtual networks ." On-premises, each site (New York and Seattle) requires an ExpressRoute circuit connection provisioned via a connectivity provider. The circuit is the dedicated private connection from the customer edge to Microsoft's edge and is what the office sites actually use; it's then linked to the vWAN hub's ExpressRoute gateway. The same materials note that Site-to-Site VPN is an alternative transport but is not required when ExpressRoute is mandated. Likewise, Application Gateway is a Layer-7 load balancer for HTTP/S traffic, and on-premises data gateway relates to Power BI/Power Platform hybrid connectivity, neither of which establishes network transport between offices and Azure.
Therefore, to meet the requirement "connect both on-premises offices to Vnet1 by using ExpressRoute," configure an ExpressRoute gateway on the vWAN hub and ExpressRoute circuit connections in the offices.