AZ-802 Implement and Manage On-Prem and Hybrid Networking — 10 Questions

Question 1

Your organization is implementing Software Defined Networking (SDN) using Windows Server 2022. You need to deploy a Network Controller to manage your infrastructure. Which TWO of the following tasks are prerequisites for the Network Controller deployment?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Provision a REST-based SSL certificate for secure communication.. Deploying a Network Controller requires a REST-based SSL certificate for secure communication (HTTPS) and a DNS entry for the controller's FQDN to allow management clients and SDN components to resolve the controller's address. Hyper-V is not required on the controller itself, and iSCSI/IPsec are not standard prerequisites for the controller deployment.

Answer

Install the Hyper-V role on the Network Controller virtual machine.

Answer

Configure an iSCSI target for the Controller's virtual disk storage.

Answer

Disable IPsec on all nodes managed by the Network Controller.

Question 2

Refer to the exhibit. You are troubleshooting a performance issue on a Windows Server 2022 Hyper-V host. The administrator reports intermittent network latency. Based on the output, what is the most likely cause of the network degradation?

Accepted Answer

The virtual switch is experiencing receive buffer overflows.. The 'DiscardedPacketsReceived' counter in Hyper-V performance monitoring specifically tracks packets dropped by the virtual switch because the receive buffer is full. This occurs when the host's CPU or the virtual switch cannot process incoming traffic at the rate it is arriving, leading to buffer exhaustion. The explanation should explicitly state that this counter is the definitive indicator of buffer overflows in the virtual switch context.

Answer

The network adapter is currently running in half-duplex mode.

Answer

The server has reached its maximum transmission unit (MTU) limit.

Answer

The network cable is faulty and causing physical layer interference.

Question 3

Refer to the exhibit. You are configuring a storage-heavy workload on Windows Server 2022. You want to enable high-speed network transfers between the host and the storage array. Based on the output, what should you do to leverage the hardware capabilities?

Accepted Answer

Install the Data Center Bridging (DCB) feature.. While the adapter supports RoCEv2, simply 'configuring' it is not the full picture. To leverage RDMA/RoCEv2 in Windows Server 2022, you must install the Data Center Bridging (DCB) feature first, as RoCEv2 requires a lossless Ethernet fabric (PFC/ETS) which is managed by DCB. Option C is a prerequisite for Option B to function correctly in a RoCEv2 environment.

Answer

Enable the iSCSI target role on the server.

Answer

Configure the network adapter to use the RoCEv2 protocol.

Answer

Update the network adapter firmware to the latest version.

Question 4

You are configuring a Windows Server 2022 virtual machine on a Hyper-V host. You need to ensure that the virtual machine's network traffic is isolated from other VMs on the same physical host. Which feature should you use?

Accepted Answer

VLAN tagging. Configuring a VLAN ID on the virtual network adapter settings of the virtual machine allows you to segment and isolate network traffic from other VMs on the same Hyper-V host that belong to different VLANs.

Answer

Virtual Subnet ID

Answer

MAC address spoofing protection

Answer

Hyper-V virtual switch extension

Question 5

Refer to the exhibit. The administrator reports that the server can communicate with devices on the 10.10.10.0/24 subnet but cannot reach the internet. What is the most likely issue based on the provided output?

Accepted Answer

The gateway device is not routing traffic to the internet.. If the default gateway is configured (0.0.0.0/0 -> 10.10.10.1) and local traffic works, the most common issue for 'cannot reach the internet' when the gateway is reachable is a DNS configuration issue or a lack of NAT/Internet access on the gateway. However, option C is a 'black box' answer that blames the infrastructure rather than the server configuration. If the question implies the server is configured correctly, C is plausible, but the explanation mentions DNS as a potential issue, making D a strong contender.

Answer

The server has an incorrect subnet mask.

Answer

The default gateway route is missing.

Answer

The DNS server is unreachable.

Question 6

You are managing a Windows Server 2022 environment and need to implement DHCP Failover for high availability. Which THREE conditions must be met to successfully establish a failover relationship?

Accepted Answer

Both servers must be members of the same Active Directory domain.. DHCP Failover requires that both servers are members of the same Active Directory domain (or both are in a workgroup, but they must be in the same forest/domain context for authorization). Option A is a requirement. Option D is incorrect because Load Balance mode is only one of two possible modes; Hot Standby is also valid, so requiring Load Balance is false.

Answer

Both servers must have an identical DHCP scope configuration.

Answer

The servers must be configured to use Load Balance mode.

Question 7

You are setting up a Windows Server 2022 Data Center as a multi-tenant gateway. You need to provide high availability for the gateway services. Which feature should you implement?

Accepted Answer

Failover Clustering with a Shared VHDX. In Windows Server 2022, to provide high availability for a multi-tenant gateway (RRAS), you must install the Remote Access role and configure it within a Failover Cluster. 'Gateway Cluster' is a descriptive term, not the technical feature name.

Answer

Network Load Balancing (NLB) cluster

Answer

Gateway Cluster

Answer

Distributed File System (DFS) Replication

Question 8

You are deploying a new virtual machine on a Windows Server 2022 Hyper-V host. You want to ensure that the VM can communicate on the network without having its own dedicated physical network card. What should you configure?

Accepted Answer

A Virtual Switch. While 'A Virtual Switch' is the general category, the stem specifically asks for the VM to communicate on the network (implying external network access). An 'External' Virtual Switch is the specific configuration required to allow VMs to share a physical NIC to access the host's network. The current explanation mentions 'External' but the option A is generic.

Answer

A Private Virtual Switch

Answer

An Internal Virtual Switch

Answer

Network Adapter Teaming

Question 9

Refer to the exhibit showing a partial JSON configuration for an Azure DNS Private Resolver. A Windows Server administrator needs to configure on-premises DNS servers to resolve Azure resources. What is the most critical step to perform on the on-premises DNS server to utilize this configuration?

Accepted Answer

Create a Conditional Forwarder for the Azure zone pointing to 10.0.0.4.. The exhibit displays an Inbound Endpoint configuration for the Azure DNS Private Resolver, which provides a specific private IP address (10.0.0.4) within the VNet. To enable hybrid resolution, the on-premises DNS server must be told specifically which queries should be sent to this IP address to reach the Azure Private DNS zones.

Answer

Configure a Root Hint pointing to the 10.0.0.4 IP address.

Answer

Enable DNSSEC validation for the 10.0.0.4 IP address.

Answer

Add 10.0.0.4 as a secondary DNS server in the client IP settings.

Question 10

An organization plans to use Azure Extended Network to migrate virtual machines (VMs) from an on-premises data center to Azure while keeping their original IP addresses. Which TWO components are mandatory for this implementation?

Accepted Answer

An on-premises virtual machine running the Azure Extended Network tool.. Azure Extended Network requires a Windows Admin Center gateway to manage the extension and an on-premises virtual machine (the Azure Extended Network agent) to act as the local VXLAN tunnel endpoint. The explanation should explicitly state that these two components are the mandatory requirements for the solution.

Answer

An Azure Virtual Network Gateway with the Basic SKU.

Answer

An Azure ExpressRoute circuit with Global Reach enabled.

Answer

A public IP address assigned to every migrated VM.