AZ-802 Practice Test 10 — 10 Questions

Question 1

You administer a Windows Server 2022 file server hosting critical engineering files. You need to configure File Server Resource Manager storage quotas to ensure that a specific engineering department folder cannot exceed 500 GB of capacity. When usage reaches 90 percent, you must ensure that users can still save files without immediate rejection, but administrative alerts are generated automatically. Which type of quota should you configure?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Soft quota with threshold notifications configured at the 90 percent level. A soft quota monitors capacity usage and generates administrative notifications when thresholds are reached without blocking users from writing new files. This contrasts with hard quotas, which actively deny write operations once the specified storage limit is breached, making soft quotas ideal for warning purposes.

Answer

Hard quota with event log logging and email notification triggers enabled

Answer

Dynamic Access Control storage threshold policy with automatic file purging

Answer

Distributed File System replication quota limiting background synchronization

Question 2

An administrator is implementing Azure File Sync to centralize file shares from several branch offices. The administrator notices that the local server's disk space is nearly full, despite enabling Cloud Tiering. Which setting should be adjusted to ensure the server maintains at least 20% free space at all times?

Accepted Answer

Volume Free Space policy. Cloud Tiering is a feature of Azure File Sync that caches frequently accessed files locally while tiering infrequent files to the cloud. The Volume Free Space policy is the primary mechanism to control local disk consumption. Correctly configuring this value ensures that the local server remains responsive and has enough capacity for new files before the next tiering cycle occurs.

Answer

Date policy

Answer

Bandwidth throttling

Answer

Sync group priority

Question 3

You are using the Storage Migration Service (SMS) to migrate data from an aging Windows Server 2012 R2 machine to a new Windows Server 2022 instance. During the cutover phase, what happens to the source server's identity and network configuration?

Accepted Answer

The destination server adopts the source's name and IP. The Storage Migration Service is designed to make migrations transparent to users and applications. The cutover phase is the most critical part of this process, as it handles the transition of the server's identity. Understanding how IP addresses and hostnames are transferred ensures that the administrator can plan for the brief downtime and successfully redirect all client traffic.

Answer

The source server is deleted from Active Directory

Answer

The destination server remains on its original IP address

Answer

A DFS Namespace is created to bridge the servers

Question 4

You are configuring Data Deduplication on a Windows Server 2022 file server that hosts various types of data. One volume is dedicated to storing virtual machine backup files. Which usage type should you select to maximize space savings for this specific data?

Accepted Answer

Virtualized Backup Server. Data Deduplication usage types apply specific settings tailored to the workload. The 'Virtualized Backup Server' type is optimized for backup applications and large files like VHDX. Using the correct type ensures the deduplication engine runs with the appropriate priority and uses the most effective chunking algorithms for the data.

Answer

General purpose file server

Answer

Virtual Desktop Infrastructure (VDI) server

Answer

Microsoft SQL Server

Question 5

You are using Azure Update Management to manage updates for both on-premises Windows Servers and Azure VMs. You need to ensure that a specific group of on-premises servers never receives a particular update that is known to cause application compatibility issues. How should you configure this in Azure Update Management?

Accepted Answer

Create an 'Excluded updates' list in the Update Deployment configuration.. Azure Update Management allows for granular control over update deployments through deployment schedules. When creating a deployment, you can specify excluded updates by their Knowledge Base (KB) ID. This ensures that even if an update is critical or security-related, it will not be installed on the targeted machines, preventing known compatibility problems.

Answer

Modify the local Registry on each server to block the KB ID.

Answer

Use a Group Policy Object (GPO) to disable the Windows Update service.

Answer

Uninstall the Log Analytics agent from the affected servers.

Question 6

A small branch office has five client computers running Windows 11. There is no server located at the branch. You want to implement BranchCache to reduce WAN traffic when users access files from the main office. Which mode should you use?

Accepted Answer

Distributed Cache mode. BranchCache can operate in two modes: Distributed Cache mode and Hosted Cache mode. In Distributed Cache mode, the cached content is distributed among the client computers themselves, eliminating the need for a local server. This is the ideal solution for small offices without dedicated infrastructure.

Answer

Hosted Cache mode

Answer

Synchronous mode

Answer

Transparent Caching

Question 7

You need to create a Group Managed Service Account (gMSA) for a new web application cluster running on Windows Server 2022. Which TWO prerequisites must be met before you can successfully create and use the gMSA in your Active Directory domain? (Select TWO)

Accepted Answer

The Active Directory schema must be updated to at least Windows Server 2012.. Creating a gMSA requires a specific environment setup. First, the Active Directory schema must be at least Windows Server 2012. Second, the Key Distribution Service (KDS) Root Key must be created to allow domain controllers to generate the passwords. These steps ensure that the automated password management system has the necessary foundation to operate.

Answer

Every server in the cluster must be running the Windows Insider preview build.

Answer

The Domain Functional Level must be set to Windows Server 2022.

Answer

An Azure AD Connect instance must be active and syncing to the cloud.

Question 8

You are planning the deployment of Shielded Virtual Machines in a Windows Server 2022 environment. You need to ensure that the Fabric Administrators cannot access the data within the VMs. Which component of the Host Guardian Service (HGS) is responsible for verifying that a Hyper-V host is authorized to run a Shielded VM?

Accepted Answer

The Attestation Service. The Host Guardian Service (HGS) is the central authority for Shielded VMs. The Attestation Service within HGS evaluates the health and identity of the Hyper-V host. If the host passes attestation, the HGS Key Protection Service then provides the keys necessary to start or migrate the Shielded VM, ensuring it only runs on trusted hardware.

Answer

The Key Protection Service

Answer

The Virtualization-based Security (VBS) engine

Answer

The TPM 2.0 Emulator

Question 9

Refer to the exhibit. An administrator is attempting to run a locally created, unsigned PowerShell script named 'Update-Config.ps1' on a Windows Server 2022. Based on the output of 'Get-ExecutionPolicy -List', what will happen when the administrator attempts to run the script in the current session?

Accepted Answer

The script will run successfully without any prompts.. PowerShell execution policies follow a specific order of precedence. In this exhibit, the 'Process' scope is set to 'Bypass', which takes precedence over the 'LocalMachine' scope's 'AllSigned' setting. When an execution policy is set to 'Bypass', nothing is blocked and there are no warnings or prompts, allowing unsigned scripts to execute freely.

Answer

The script will fail to run because the LocalMachine policy is set to AllSigned.

Answer

The script will prompt the user for confirmation before executing.

Answer

The script will only run if the administrator executes it from an elevated prompt.

Question 10

Refer to the exhibit. You are reviewing a partial Windows Defender Application Control (WDAC) policy XML file. You need to identify the behavior of this policy regarding the file 'untrusted.exe'. What will occur if a user attempts to run 'untrusted.exe'?

Accepted Answer

The file will be blocked regardless of its signature or version.. In WDAC policies, 'Deny' rules take absolute precedence over 'Allow' rules. Even if a file might otherwise be permitted by a broad allow rule or a signer rule, an explicit deny rule targeting the filename or hash will prevent the application from executing. This ensures that known malicious or unauthorized files can be strictly blocked regardless of other policy settings.

Answer

The file will be allowed because the 'Allow Signed' rule uses a wildcard for the FileName.

Answer

The file will be allowed if it is digitally signed by a trusted Windows publisher.

Answer

The file will be allowed but an audit event will be generated in the event log.