Microsoft Configuring Windows Server Hybrid Advanced Services - AZ-801무료 덤프문제 풀어보기
Hotspot Question
You have two on-premises Hyper-V hosts named Server1 and Server2. Server1 hosts a virtual machine named VM1 that uses a static IP address. VM1 replicates to Server2 by using Hyper-V Replica.
You plan to perform a failover test for VM1.
You need to configure the Failover TCP/IP settings and the virtual switch for the failover.
Where should you configure the Failover TCP/IP settings, and where should you configure the virtual switch? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

You have two on-premises Hyper-V hosts named Server1 and Server2. Server1 hosts a virtual machine named VM1 that uses a static IP address. VM1 replicates to Server2 by using Hyper-V Replica.
You plan to perform a failover test for VM1.
You need to configure the Failover TCP/IP settings and the virtual switch for the failover.
Where should you configure the Failover TCP/IP settings, and where should you configure the virtual switch? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

정답:

Explanation:
Box 1: VM1 on Server2 only.
Configure the Failover TCP/IP settings that you want the Replica virtual machine to use in the event of a failover Issue Replica virtual machines configured with a static IP address should be configured to use a different IP address from their primary virtual machine counterpart in the event of failover.
Impact
Clients using the workload supported by the primary virtual machine might not be able to connect to the Replica virtual machine after a failover. Also, the primary virtual machine's original IP address will not be valid in the Replica virtual machine network topology. This impacts the following virtual machines:
<list of virtual machines>
Resolution
Use Hyper-V Manager to configure the IP address that the Replica virtual machine should use in the event of failover.
Box 2: Server1 only
You should configure the Hyper-V Virtual Switch on the Hyper-V host, not the virtual machine, using the Virtual Switch Manager in Hyper-V Manager to create and manage the switches that your virtual machines will connect to. The virtual switch acts as the network infrastructure layer, while the virtual machine connects to it via a virtual network adapter to access network resources.
Reference:
https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/best-practices-analyzer/configure-the-failover-tcpip-settings-that-you-want-the-replica-virtual-machine
Drag and Drop Question
Your network contains an Active Directory Domain Services (AD DS) domain.
You need to implement a solution that meets the following requirements:
- Ensures that the members of the Domain Admins group are allowed to
sign in only to domain controllers
- Ensures that the lifetime of Kerberos Ticket Granting Ticket (TGT)
for the members of the Domain Admins group is limited to one hour
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Your network contains an Active Directory Domain Services (AD DS) domain.
You need to implement a solution that meets the following requirements:
- Ensures that the members of the Domain Admins group are allowed to
sign in only to domain controllers
- Ensures that the lifetime of Kerberos Ticket Granting Ticket (TGT)
for the members of the Domain Admins group is limited to one hour
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

정답:

Explanation:
https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/manage/how-to-configure-protected-accounts
Case Study 2 - Contoso, Ltd
Overview
Contoso, Ltd. is a manufacturing company that has a main office in Seattle and branch offices in Los Angeles and Montreal.
Existing Environment
Active Directory Environment
Contoso has an on-premises Active Directory Domain Services (AD DS) domain named contoso.com that syncs with an Azure Active Directory (Azure AD) tenant. The AD DS domain contains the domain controllers shown in the following table.

Contoso recently purchased an Azure subscription.
The functional level of the forest is Windows Server 2012 R2. The functional level of the domain is Windows Server 2012. The forest has the Active Directory Recycle Bin enabled.
The contoso.com domain contains the users shown in the following table.

The contoso.com domain has the Group Policy Objects (GPOs) shown in the following table.

The contoso.com domain has the Password Settings Objects (PSOs) shown in the following table.

Server Infrastructure
The contoso.com domain contains servers that run Windows Server 2022 as shown in the following table.

By using Windows Firewall with Advanced Security, the servers have isolation connection security rules configured as shown in the following table.

Server4 has no connection security rules.
Server4 Configurations
Server4 has the effective Group Policy settings for user rights as shown in the following table.

Server4 has the disk configurations shown in the following exhibit.

Virtualization Infrastructure
The contoso.com domain has the Hyper-V failover clusters shown in the following table.

Technical Requirements
Contoso identifies the following technical requirements:
* Promote a new server named DC4 that runs to Windows Server 2022 to a domain controller.
* Replicate the virtual machines from Cluster2 to an Azure Recovery Services vault.
* Centrally manage performance alerts in Azure for all the domain controllers.
* Ensure that User1 can recover objects from the Active Directory Recycle Bin.
* Migrate Share1 to Server2, including all the share and folder permissions.
* Back up Server4 and all data to an Azure Recovery Services vault.
* Use Hyper-V Replica to protect the virtual machines in Cluster3.
* Implement BitLocker Drive Encryption (BitLocker) on Server4.
* Whenever possible, use the principle of least privilege.
You need to meet technical requirements for Share1.
What should you use?
Overview
Contoso, Ltd. is a manufacturing company that has a main office in Seattle and branch offices in Los Angeles and Montreal.
Existing Environment
Active Directory Environment
Contoso has an on-premises Active Directory Domain Services (AD DS) domain named contoso.com that syncs with an Azure Active Directory (Azure AD) tenant. The AD DS domain contains the domain controllers shown in the following table.

Contoso recently purchased an Azure subscription.
The functional level of the forest is Windows Server 2012 R2. The functional level of the domain is Windows Server 2012. The forest has the Active Directory Recycle Bin enabled.
The contoso.com domain contains the users shown in the following table.

The contoso.com domain has the Group Policy Objects (GPOs) shown in the following table.

The contoso.com domain has the Password Settings Objects (PSOs) shown in the following table.

Server Infrastructure
The contoso.com domain contains servers that run Windows Server 2022 as shown in the following table.

By using Windows Firewall with Advanced Security, the servers have isolation connection security rules configured as shown in the following table.

Server4 has no connection security rules.
Server4 Configurations
Server4 has the effective Group Policy settings for user rights as shown in the following table.

Server4 has the disk configurations shown in the following exhibit.

Virtualization Infrastructure
The contoso.com domain has the Hyper-V failover clusters shown in the following table.

Technical Requirements
Contoso identifies the following technical requirements:
* Promote a new server named DC4 that runs to Windows Server 2022 to a domain controller.
* Replicate the virtual machines from Cluster2 to an Azure Recovery Services vault.
* Centrally manage performance alerts in Azure for all the domain controllers.
* Ensure that User1 can recover objects from the Active Directory Recycle Bin.
* Migrate Share1 to Server2, including all the share and folder permissions.
* Back up Server4 and all data to an Azure Recovery Services vault.
* Use Hyper-V Replica to protect the virtual machines in Cluster3.
* Implement BitLocker Drive Encryption (BitLocker) on Server4.
* Whenever possible, use the principle of least privilege.
You need to meet technical requirements for Share1.
What should you use?
정답: A
설명: (Fast2test 회원만 볼 수 있음)
You have a failover cluster named Cluster1 that contains two Windows Server nodes named Server1 and Server2. Cluster1 hosts highly available Hyper-V virtual machines.
You have a member server named Server3 that runs Windows Server.
You need to implement Cluster-Aware Updating (CUA) on Cluster1 and configure Server3 to manage CUA. The solution must minimize administrative effort.
What should you install on Server3?
You have a member server named Server3 that runs Windows Server.
You need to implement Cluster-Aware Updating (CUA) on Cluster1 and configure Server3 to manage CUA. The solution must minimize administrative effort.
What should you install on Server3?
정답: C
설명: (Fast2test 회원만 볼 수 있음)
Hotspot Question
You have an Azure subscription that contains two virtual machines named VM1 and VM2. VM1 runs Windows Server. VM2 runs Ubuntu Linux.
You need to monitor VM1 and VM2 by using VM insights. The solution must meet the following requirements:
- Ensure that you can monitor the memory usage on VM1.
- Ensure that you run the Map feature on VM2.
The solution must minimize the number of agents required for each virtual machine.
Which agents are required on each virtual machine? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains two virtual machines named VM1 and VM2. VM1 runs Windows Server. VM2 runs Ubuntu Linux.
You need to monitor VM1 and VM2 by using VM insights. The solution must meet the following requirements:
- Ensure that you can monitor the memory usage on VM1.
- Ensure that you run the Map feature on VM2.
The solution must minimize the number of agents required for each virtual machine.
Which agents are required on each virtual machine? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

정답:

Explanation:
Box 1: The Azure Monitor agent only
Ensure that you can monitor the memory usage on VM1.
VM1 runs Windows Server.
VM guest data
VM guest data lets you analyze and troubleshoot the performance and operational efficiency of workloads running on your VMs. To monitor VM guest data, you need to install Azure Monitor Agent on the VM and set up a data collection rule (DCR). The VM Insights feature automatically installs Azure Monitor Agent on your VM and sets up a default data collection rule for quick and easy onboarding.
Box 2: The Azure Monitor agent only
Ensure that you run the Map feature on VM2.
VM2 runs Ubuntu Linux.
Azure Monitor, Use the Map feature of VM insights to understand application components In VM insights, you can view discovered application components on Windows and Linux virtual machines (VMs) that run in Azure or your environment. You can observe the VMs in two ways.
You can view a map directly from a VM. You can also view a map from Azure Monitor to see the components across groups of VMs.
Reference:
https://learn.microsoft.com/en-us/azure/virtual-machines/monitor-vm
https://learn.microsoft.com/en-us/azure/azure-monitor/vm/vminsights-dependency-agent
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that runs Windows Server.
You need to ensure that only specific applications can modify the data in protected folders on Server1.
Solution: From Virus & threat protection, you configure Controlled folder access.
Does this meet the goal?
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that runs Windows Server.
You need to ensure that only specific applications can modify the data in protected folders on Server1.
Solution: From Virus & threat protection, you configure Controlled folder access.
Does this meet the goal?
정답: A
설명: (Fast2test 회원만 볼 수 있음)
Your network contains an Active Directory Domain Services (AD DS) forest. The forest functional level is Windows Server 2012 R2. The forest contains the domains shown in the following table.

You create a user named Admin1.
You need to ensure that Admin1 can add a new domain controller that runs Windows Server
2022 to the east.contoso.com domain. The solution must follow the principle of least privilege.
To which groups should you add Admin1?

You create a user named Admin1.
You need to ensure that Admin1 can add a new domain controller that runs Windows Server
2022 to the east.contoso.com domain. The solution must follow the principle of least privilege.
To which groups should you add Admin1?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
Hotspot Question
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two domain controllers named DC1 and DC2 and the users shown in the following table.

You are planning a restore strategy for AD DS.
Which users can perform an authoritative restore on DC2, and what should the users run to perform the restore? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two domain controllers named DC1 and DC2 and the users shown in the following table.

You are planning a restore strategy for AD DS.
Which users can perform an authoritative restore on DC2, and what should the users run to perform the restore? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

정답:

Explanation:
Box 1: Contoso\User1 and DC2\Administrator only
* DC2 Administrator
A member of the Domain Administrators group can perform an authoritative restore on a domain controller in Active Directory Domain Services (AD DS). This process requires specific permissions, which are granted by default to users in the Domain Admins group, allowing them to restore Active Directory data and then mark it as authoritative so it replicates to other domain controllers in the forest.
* User1 - Yes
User1 is an Enterprise Admin.
An authoritative restore requires elevated privileges and is typically executed by a member of the Domain Admins or Enterprise Admins group, or at minimum, a user with the necessary permissions in Directory Services Restore Mode (DSRM).
* User2 - No
A member of the Backup Operators group in Active Directory can perform a restore of a domain controller, but they cannot perform an authoritative restore on their own.
Box 2: ntdsutil.exe
The command used to perform an authoritative restore of Active Directory is ntdsutil. You must first boot the domain controller into Directory Services Restore Mode (DSRM). Once in DSRM, you can launch ntdsutil.exe from the command prompt, activate the AD instance, and then type authoritative restore to initiate the process.
Reference:
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/cc732211(v=ws.11)
Drag and Drop Question
Your network contains an Active Directory Domain Services (AD DS) domain that has the Active Directory Recycle Bin enabled. The domain contains two domain controllers named DC1 and DC2. The system state of the domain controllers is backed up daily at 23:00 by using Windows Server Backup.
You have an organizational unit (OU) named ParisUsers that contains 1,000 users.
At 08:00, DC1 shuts down for hardware maintenance. The maintenance completes, but DC1 remains shut down.
At 09:00, an administrative error causes the manager attribute of each user in ParisUsers to be deleted.
You need to recover the user account details as quickly as possible. The solution must minimize data loss.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Your network contains an Active Directory Domain Services (AD DS) domain that has the Active Directory Recycle Bin enabled. The domain contains two domain controllers named DC1 and DC2. The system state of the domain controllers is backed up daily at 23:00 by using Windows Server Backup.
You have an organizational unit (OU) named ParisUsers that contains 1,000 users.
At 08:00, DC1 shuts down for hardware maintenance. The maintenance completes, but DC1 remains shut down.
At 09:00, an administrative error causes the manager attribute of each user in ParisUsers to be deleted.
You need to recover the user account details as quickly as possible. The solution must minimize data loss.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

정답:

Explanation:
https://www.itprotoday.com/active-directory/how-can-i-perform-authoritative-restoration-active-directory-ad-windows-server-2003
Hotspot Question
Your network contains an on-premises Active Directory Domain Services (AD DS) domain.

The domain contains the Hyper-V hosts shown in the following table.
Server1 has the Authorization and storage settings shown in the Server exhibit. (Click the Server1 tab.)

Server2 has the Authorization and storage settings shown in the Server2 exhibit. (Click the Server2 tab.)

Server3 has the Authorization and storage settings shown in the Server3 exhibit. (Click the Server3 tab.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Your network contains an on-premises Active Directory Domain Services (AD DS) domain.

The domain contains the Hyper-V hosts shown in the following table.
Server1 has the Authorization and storage settings shown in the Server exhibit. (Click the Server1 tab.)

Server2 has the Authorization and storage settings shown in the Server2 exhibit. (Click the Server2 tab.)

Server3 has the Authorization and storage settings shown in the Server3 exhibit. (Click the Server3 tab.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

정답:

Explanation:
Box 1: No
Server2 does not allow any server to replicate virtual machines to it.
Box 2: No
Server3 only allows replication from Server1.
Server1 only contains VM1.
Box 3: No
Server2 does not allow any server to replicate virtual machines to it.
Reference:
https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/best-practices-analyzer/a-replica-server-must-be-configured-to-accept-replication-requests