Free Microsoft AZ-802 Exam Dumps Questions & Answers

You have a server named Server1 that has Windows Admin Center installed. The certificate used by Windows Admin Center was obtained from a certification authority (CA). The certificate expires. You need to replace the certificate. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Correct Answer:

Explanation:
1. Obtain and install a new certificate. 2. Copy the certificate thumbprint. 3. Run Windows Admin Center Setup and select Change.
When the certificate backing a Windows Admin Center gateway installation expires, the fix is to supply the gateway with a new certificate through its own Setup program rather than through IIS, because a standalone gateway installation binds its HTTPS listener itself (via the installer) rather than being hosted inside IIS; the IIS Manager certificate-binding option is a distractor that does not apply to this deployment model. The correct sequence starts by obtaining a new certificate from the CA and installing it into the local machine certificate store on Server1, exactly as would have been done for the original certificate. Once the new certificate is in the store, its thumbprint must be copied, because the Windows Admin Center Setup program asks for the certificate by thumbprint when reconfiguring the gateway. The final step is to re-run Windows Admin Center Setup and choose the Change option, which lets you supply the new certificate thumbprint and rebinds the gateway ' s HTTPS listener to it, without uninstalling the product. Repair only reinstalls existing files and settings and does not prompt for a new certificate, and Remove would uninstall Windows Admin Center entirely, losing its configuration, so neither is appropriate. Following obtain-and-install, copy- thumbprint, then Setup-Change replaces the certificate with minimal disruption.

You have a Hyper-V failover cluster named Cluster1 at a main datacenter. Cluster1 contains two nodes that have the Hyper-V server role installed. Cluster1 hosts 10 highly available virtual machines. You have a cluster named Cluster2 in a disaster recovery site. Cluster2 contains two nodes that have the Hyper-V server role installed. You plan to use Hyper-V Replica to replicate the virtual machines from Cluster1 to Cluster2.
What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Cluster role to create on Cluster2: Hyper-V Replica Broker. Replication target name to specify: The name of the Hyper-V Replica Broker.
When Hyper-V Replica is used with a clustered Hyper-V host as either the primary or the replica site, that cluster requires a Hyper-V Replica Broker role, because the broker abstracts away which specific physical node currently owns a given replicated virtual machine, keeping replication working correctly even as VMs live-migrate or fail over between nodes within the cluster. Before enabling replication, an administrator must create this Hyper-V Replica Broker role on Cluster2 and configure its replication settings, including the authentication method, the storage location for replica virtual machine files, and which primary servers are allowed to replicate to it. When subsequently configuring replication for the virtual machines on Cluster1, the destination (replica server) must be specified using the Hyper-V Replica Broker ' s own client access point name -- not the name of an individual physical node in Cluster2 -- because the broker, not any single node, is what tracks current VM ownership as virtual machines move between Cluster2 ' s nodes. Specifying an individual node name instead would break replication and failover as soon as a VM ' s ownership moved to a different node in Cluster2.

You have an Azure subscription. The subscription contains multiple virtual machines that run Windows Server. You have the Azure virtual machine backup policies shown in the following table. You are evaluating automatically moving recovery points to the vault-archive tier. For which policies can you enable tiering?
(Exhibit: backup policies with their retention schedules.)

Azure VM backup policies and their retention schedules

• A.Policy2 and Policy4 only
• B.Policy3 and Policy4 only
• C.Policy4 only
• D.Policy1, Policy2, Policy3, and Policy4

Your network contains an Active Directory Domain Services (AD DS) domain that has a Windows Server
2012 R2 forest and domain functional level. The domain contains the domain controllers shown in the following table. You need to ensure that you can deploy a new domain controller that runs Windows Server
2025. The solution must minimize administrative effort. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Domain controllers and operating systems table

• A.Remove DC2 and DC3.
• B.Remove DC1.
• C.Raise the forest and domain functional level to Windows Server 2025.
• D.Upgrade DC1, DC2, and DC3 to Windows Server 2025.
• E.Raise the forest and domain functional level to Windows Server 2016.

You need to configure network communication between the Seattle and New York offices. The solution must meet the requirements. What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
On a Virtual WAN hub: An ExpressRoute gateway. In the offices: An ExpressRoute circuit connection.
Fabrikam ' s plan is to replace the existing WAN links between the New York and Seattle offices with Azure Virtual WAN and ExpressRoute, connecting both offices to Vnet1 through the Virtual WAN hub. Azure Virtual WAN uses its own hub-native ExpressRoute gateway object (distinct from the standalone virtual network gateway used when ExpressRoute is connected directly to a single VNet); this ExpressRoute gateway is deployed inside the Virtual WAN hub and is required before any ExpressRoute circuit can terminate into that hub. A standard virtual network gateway is used for VNet-to-VNet or VPN scenarios, not for Virtual WAN hub ExpressRoute termination, and an ExpressRoute circuit connection itself is the logical link resource, not something you deploy on the hub. At each office, connectivity into Microsoft ' s network is established through an ExpressRoute circuit connection provisioned with a connectivity provider, which then links, via Microsoft ' s backbone, into the ExpressRoute gateway in the Virtual WAN hub. A Site-to-Site VPN, an Azure application gateway (a web traffic load balancer), and an on-premises data gateway (used for Power Platform/Logic Apps connectors) are all unrelated to this ExpressRoute-based design.