AZ-801 無料問題集「Microsoft Configuring Windows Server Hybrid Advanced Services」
You have an Azure subscription that contains an Azure key vault named Vault 1.
You deploy Azure Disk Encryption.
You configure Vault to support Azure Disk Encryption.
You need to ensure that you can encrypt Azure Disk Encryption artifacts before they are written to Vault 1.
The solution must provide the highest level of encryption.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Exhibit
Exhibit
You deploy Azure Disk Encryption.
You configure Vault to support Azure Disk Encryption.
You need to ensure that you can encrypt Azure Disk Encryption artifacts before they are written to Vault 1.
The solution must provide the highest level of encryption.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Exhibit
Exhibit
正解：
Explanation:
Detailed Explanation
Azure Disk Encryption artifacts (such as the BitLocker/DM-Crypt encryption keys) can be protected in Key Vault by a software-protected key or by a hardware-protected key. Choosing ' key ' (rather than ' certificate ' or ' secret ' ) creates a cryptographic key object that can be used as a key-encryption key to wrap the disk encryption secret before it is written to the vault. Specifying --kty RSA-HSM (as opposed to plain RSA) ensures the key material is generated and protected inside a FIPS 140-validated hardware security module rather than in software, which is the highest level of protection Key Vault offers for this purpose. This matches the completed command shown in the exhibit.
Official Reference
About Azure Key Vault keys - https://learn.microsoft.com/en-us/azure/key-vault/keys/about-keys
You have a cluster named Cluster! that contains two servers named Server! and Server2. Cluster1 has Storage Spaces Direct enabled. Cluster1 contains a virtual disk named Volume1 that is a 2-TB three-way mirror.
You discover that Volume! is full.
You connect a new 2-TB physical disk to each node of Cluster1.
You need to increase the size of Volume1. The solution must maintain resiliency.
How should you complete the script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Exhibit
Exhibit
You discover that Volume! is full.
You connect a new 2-TB physical disk to each node of Cluster1.
You need to increase the size of Volume1. The solution must maintain resiliency.
How should you complete the script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Exhibit
Exhibit
正解：
Explanation:
Detailed Explanation
Newly attached drives that have not yet joined a Storage Spaces Direct pool report CanPool = $True, while drives already claimed by the pool report CanPool = $False, so filtering on -CanPool $True correctly targets only the two new 2-TB disks for Add-PhysicalDisk. Once the pool ' s raw capacity has grown, Resize-Volume
-FileSystemLabel Volume1 is used to grow the existing three-way-mirrored volume to consume the newly available capacity while keeping its resiliency setting intact; among the offered sizes only 4 TB is larger than the current 2-TB volume, so it is the only value that actually increases Volume1 as required. This two-step approach (pool the new physical disks, then resize the volume) is the standard S2D capacity-expansion workflow and avoids rebuilding or recreating the volume.
Official Reference
Manage volumes in Storage Spaces Direct - https://learn.microsoft.com/en-us/windows-server/storage/storage-spaces/manage-volumes
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a group named Group1 and the member servers shown in the following table.
Server1 contains the printers shown in the following table.
You use Print Management to migrate the printers from Server1 to Server2.
Which migrated printers can print to file, and to which migrated printers can the members of Group1 print?
To answer, select the appropriate options in the answer area.
Exhibit
Exhibit
Exhibit
Exhibit
Server1 contains the printers shown in the following table.
You use Print Management to migrate the printers from Server1 to Server2.
Which migrated printers can print to file, and to which migrated printers can the members of Group1 print?
To answer, select the appropriate options in the answer area.
Exhibit
Exhibit
Exhibit
Exhibit
正解：
Explanation:
Detailed Explanation
Among Server1 ' s four printers, only Printer4 is configured to use the FILE: port (Print to File), so after migration it remains the only migrated printer that literally directs output to a file rather than to a physical or network destination; Printer1, Printer2, and Printer3 use an LPT port, a local port, and a Standard TCP/IP port respectively, none of which is a print-to-file port. Print Management ' s printer migration carries each printer ' s assigned permissions over along with the queue itself, and since Group1 already has print permission on all four printers on Server1, that permission is preserved for all four migrated printers on Server2, so Group1 members can print to Printer1, Printer2, Printer3, and Printer4.
Official Reference
Migrate a print server - https://learn.microsoft.com/en-us/windows-server/administration/windows-server- migration/migrate-print-server
You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server and an Azure key vault named Vault1. VM1 has a system-assigned managed identity enabled.
You need to enable Azure Disk Encryption for VM1. What should you do first?
You need to enable Azure Disk Encryption for VM1. What should you do first?
正解：B
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
You have a Windows Server failover cluster named Cluster1 that has a cloud witness and the nodes shown in the following table.
Cluster1 has the roles shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Exhibit
Exhibit
Cluster1 has the roles shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Exhibit
Exhibit
正解：
Explanation:
Detailed Explanation
FS1 (File Server for general use) can run on any node that has the File Server role installed; Node4 has that role, so even though its cluster vote has been administratively set to 0 for quorum purposes, it remains a valid failover target and FS1 moves to it automatically when Node3 fails. DFS1 (DFS Namespace Server) in this deployment is hosted within the Site1 fault domain (Node1 and Node2), so when it is running on Node2 and Node2 fails, it does not automatically extend its ownership across the fault domain boundary to Node3 in Site2. Because Site1 remains intact and, together with the cloud witness, continues to hold cluster quorum, DFS1 stays available on Site1 even if the entire Site2 fault domain (Node3 and Node4) goes offline.
Official Reference
Configure cluster fault domain awareness (sites) - https://learn.microsoft.com/en-us/windows-server
/failover-clustering/manage-affinity-fault-domains
Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains five servers that run Windows Server. The network also contains two workgroup servers that run Windows Server.
You need to implement a connection security rule between the member servers and the workgroup servers.
Which authentication method should you use?
You need to implement a connection security rule between the member servers and the workgroup servers.
Which authentication method should you use?
正解：D
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
You have an on-premises virtual machine named VM1 that runs Windows Server. You have an Azure subscription.
You plan to use an Azure Site Recovery replication policy to replicate VM1 to Azure. You need to ensure that changes on VM1 are replicated as often as possible. To what should you set the Copy frequency setting for the policy?
You plan to use an Azure Site Recovery replication policy to replicate VM1 to Azure. You need to ensure that changes on VM1 are replicated as often as possible. To what should you set the Copy frequency setting for the policy?
正解：A
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
You have an Azure subscription that contains an Azure Recovery Services vault.
You have an on-premises physical server that runs Windows Server.
You need to back up the server daily to Azure.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Exhibit
Exhibit
You have an on-premises physical server that runs Windows Server.
You need to back up the server daily to Azure.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Exhibit
Exhibit
正解：
Explanation:
Detailed Explanation
Backing up an on-premises physical Windows Server to an Azure Recovery Services vault follows a fixed order of operations: first, the administrator downloads the vault credentials file from the Recovery Services vault, which contains the information needed to authorize the server against that specific vault. Next, the MARS agent is installed on the server and, during setup, registered to the vault using that credentials file.
Only after registration is complete can a backup policy be created and a schedule configured, which is the final step that establishes the recurring daily backups. Performing the steps out of order-for example, trying to schedule a backup before the agent is installed and registered-is not possible because the backup schedule is configured from within the registered agent ' s console.
Official Reference
Tutorial: Back up Windows Server or Windows Client to Azure - https://learn.microsoft.com/en-us/azure
/backup/tutorial-backup-windows-server-to-azure
