AZ-802 Practice Test 5 — 10 Questions

Question 1

You need to provide a secure method for on-premises administrators to manage Azure SQL databases without exposing the database to the public internet. You want to ensure that traffic from the on-premises network stays within the private network space. Which solution should you implement?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Azure Private Link with a Private Endpoint. Azure Private Link allows you to access Azure PaaS services over a private endpoint in your virtual network. When combined with a VPN or ExpressRoute, this extends the private connectivity to your on-premises environment. This setup ensures that traffic never traverses the public internet, satisfying strict security and compliance requirements.

Answer

Azure Service Endpoints

Answer

Azure Bastion

Answer

Azure Front Door

Question 2

You plan to implement Storage Replica between two Windows Server 2022 clusters in different cities. The network connection between the sites has a consistent round-trip latency of 20ms. Which replication mode should you implement to ensure application performance is not negatively impacted by storage writes?

Accepted Answer

Asynchronous replication. Storage Replica offers two modes: synchronous and asynchronous. Synchronous replication requires low latency (typically <5ms) because the application must wait for an acknowledgment from the destination before the write is completed. For high-latency connections, asynchronous replication is necessary to prevent storage I/O from becoming a performance bottleneck.

Answer

Synchronous replication

Answer

Block-level mirroring

Answer

DFS Replication

Question 3

An administrator is planning to enable Data Deduplication on a Windows Server 2022 file server. Which TWO of the following workloads are officially supported and typically see high savings from Data Deduplication? (Select TWO)

Accepted Answer

VDI deployment share (VHDs). Data Deduplication in Windows Server is designed for specific workloads where data redundancy is common. General-purpose file shares and Virtual Desktop Infrastructure (VDI) libraries are the primary targets for this technology. Understanding supported workloads prevents performance issues and ensures that the deduplication engine can effectively reduce storage footprints without impacting application stability or data integrity.

Answer

Live Microsoft SQL Server databases

Answer

Active Exchange Server databases

Answer

Encrypted volumes using BitLocker

Question 4

An organization uses Azure Files to store sensitive company data. They need to ensure that users can only access the files if they are authenticated via their on-premises Active Directory Domain Services (AD DS). Which technology should be implemented to support this?

Accepted Answer

AD DS Authentication for Azure Files. Azure Files supports several authentication methods for accessing file shares. For organizations with an existing on-premises footprint, integrating Azure Files with AD DS allows for a seamless user experience using standard Kerberos authentication. This allows the use of existing NTFS permissions (ACLs) to control access to files and folders within the cloud-hosted share.

Answer

Shared Access Signatures (SAS)

Answer

Azure AD DS Authentication

Answer

Storage Account Access Keys

Question 5

An administrator wants to provide secure file access to remote workers without requiring a traditional VPN. They decide to implement SMB over QUIC on a Windows Server 2022 Datacenter: Azure Edition file server. What is a requirement for the client side of this connection?

Accepted Answer

Windows 11 or Windows Server 2022. SMB over QUIC is a revolutionary feature that allows access to file shares over the internet using the QUIC protocol, which is inherently encrypted with TLS 1.3. This eliminates the need for a VPN for remote users. However, it has specific client-side requirements to ensure the security and protocol compatibility needed for this high-performance, secure tunneling technology.

Answer

Windows 10 Enterprise or Pro (Version 1809 or later)

Answer

A third-party VPN client

Answer

Active Directory Domain Join

Question 6

You are preparing to use the Storage Migration Service to migrate data from several Windows Server 2012 R2 servers. Which THREE components are essential parts of the Storage Migration Service architecture?

Accepted Answer

Orchestrator server. The Storage Migration Service consists of three main roles: the orchestrator that manages the process, the source servers where the data currently resides, and the destination servers that receive the data. Understanding these roles is critical for troubleshooting connectivity and permission issues during a large-scale migration project.

Answer

Azure Relay

Answer

iSCSI Target Server

Question 7

You are deploying a 4-node Azure Stack HCI cluster. You need to configure the networking to support Storage Spaces Direct (S2D) east-west traffic. Which TWO networking features are highly recommended by Microsoft to ensure low-latency and high-throughput storage communication? (Select TWO)

Accepted Answer

Remote Direct Memory Access (RDMA). Azure Stack HCI relies heavily on the network for storage traffic between nodes. To achieve the performance required for hyperconverged workloads, the network must support advanced features that offload processing and prevent congestion. RDMA and SET are the cornerstones of a modern, high-performance software-defined data center network on the Microsoft platform.

Answer

Network Address Translation (NAT)

Answer

Border Gateway Protocol (BGP)

Answer

802.11ax (Wi-Fi 6)

Question 8

You are deploying a new file server that will host Hyper-V virtual machine files. You want to take advantage of block cloning to improve the performance of checkpoint merging and VM cloning operations. Which file system should you use?

Accepted Answer

ReFS. The Resilient File System (ReFS) includes a feature called block cloning, which allows the file system to copy ranges of file blocks on behalf of an application as a low-cost metadata operation. This significantly accelerates Hyper-V operations like merging checkpoints, as data blocks are remapped rather than physically copied.

Answer

NTFS

Answer

FAT32

Answer

exFAT

Question 9

Refer to the exhibit. An administrator executes the PowerShell command shown to configure an iSCSI target. What is the effect of the -InitiatorId parameter in this command?

Accepted Answer

It defines which client can connect to the target.. In iSCSI configurations, security is maintained by specifying which clients (initiators) are allowed to connect to a specific target. The -InitiatorId parameter restricts access to the target so that only the device with the matching iSCSI Qualified Name (IQN) can discover and connect to the storage resources.

Answer

It sets the IQN of the local server.

Answer

It specifies the IP address of the target portal.

Answer

It creates a new virtual hard disk.

Question 10

You use File Server Resource Manager (FSRM) to manage a folder shared by the marketing department. You want to prevent users from saving more than 10GB of data in the folder. If they reach this limit, they must be blocked from adding new files. What should you configure?

Accepted Answer

Hard quota. File Server Resource Manager (FSRM) quotas allow administrators to limit the space consumed by a folder or volume. A 'Hard' quota is used when you want to strictly enforce the limit and prevent further writes, whereas a 'Soft' quota is used only for monitoring and notification purposes.

Answer

Soft quota

Answer

File screen

Answer

Storage report