AZ-802 Exam Preparation Material | Administering Windows Server

Overview
Contoso, Ltd. is a company that has a main office in Seattle and two branch offices in Los Angeles and Montreal.

Existing Environment
AD DS Environment
The network contains an on-premises Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains two domains named contoso.com and canada.contoso.com.

The forest contains the domain controllers shown in the following table.



All the domain controllers are global catalog servers.

Server Infrastructure
The network contains the servers shown in the following table.



A server named Server4 runs Windows Server and is in a workgroup. Windows Defender Firewall on Server4 uses the private profile.
Server2 hosts three virtual machines named VM1, VM2, and VM3.

VM3 is a file server that stores data in the volumes shown in the following table.




Group Policies
The contoso.com domain has the Group Policies Objects (GPOs) shown in the following table.




Existing Identities
The forest contains the users shown in the following table.




The forest contains the groups shown in the following table.




Current Problems
When an administrator signs in to the console of VM2 by using Virtual Machine Connection, and then disconnects from the session without signing out, another administrator can connect to the console session as the currently signed-in user.

Requirements
Technical Requirements
Contoso identifies the following technical requirements:
- Change the replication schedule for all site links to 30 minutes.
- Promote Server1 to a domain controller in canada.contoso.com.
- Install and authorize Server3 as a DHCP server.
- Ensure that User1 can manage the membership of all the groups in Contoso\OU3.
- Ensure that you can manage Server4 from Server1 by using PowerShell remoting.
- Ensure that you can run virtual machines on VM1.
- Force users to provide credentials when they connect to VM2.
- On VM3, enable Data Deduplication on all volumes that support the feature.

You need to meet the technical requirements for Server1.
Which users can currently perform the required tasks?

Your network contains an Active Directory Domain Services (AD DS) domain.
A Group Policy Object (GPO) named Security Baseline is linked to the domain. The link is configured as Enforced.
A GPO named Kiosk Baseline is linked to an organizational unit (OU) named Kiosks.
Client computers in the Kiosks OU receive Group Policy settings from the Security Baseline GPO.
You need to ensure that the computers in Kiosks receive settings from the Kiosk Baseline GPO. Security Baseline must continue to apply to other client computers in the domain.
What should you do?

You have a virtual machine named SRV1 that runs Windows Server and receives updates from a Windows Server Update Services (WSUS) server named WSUS1.
SRV1 is configured by Group Policy to scan WSUS1 for updates. SRV1 is in a computer group named Group1 that contains other servers.
SRV1 fails every update scan and logs the following entry in WindowsUpdate.log.
WS error: <detail><ErrorCode>InvalidParameters</ErrorCode><Message>parameters.InstalledNonleafUpdateIDs</Message> <Method>http://www.microsoft.com/SoftwareDistribution/S *FaiLED* [80244007] SyncUpdates_withRecovery failed
The other servers in Group1 scan successfully.
You need to restore update scanning for SRV1. The existing update approvals and computer group membership must remain unchanged.
What should you do?

HOTSPOT
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.
The domain contains a user named User1 and two global security groups named Group1 and Group2. User1 is a member of both groups.
A Group Policy Object (GPO) named GPO1 is linked to the domain. GPO1 contains the following User Configuration preference items.



For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.
After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.
The domain contains a domain controller named DC1 and a member server named Server1.
Users cannot sign in to Server1 by using domain credentials and receive the following error message.
The trust relationship between this workstation and the primary domain failed.
You need to restore domain authentication on Server1 without removing Server1 from the domain.
Solution: From Server1, you run Reset-ComputerMachinePassword -Server DC1.
Does this meet the goal?