AZ-802 practice test

Deploying and managing domain controllers locally and in Azure, read-only controllers and their account security, the single-master roles and their failures, trusts across domains and forests, sites and replication, users, groups and service accounts across multi-domain and multi-forest environments, and managing servers through domain Group Policy including preferences.

Windows Admin Center on premises and through the portal, remote management with PowerShell including the double-hop problem and constrained administration, remote shell and desktop access, Azure Arc for enrolling servers, device configuration and extensions on machines outside Azure, update management and automation runbooks.

Hyper-V hosts and guests: session modes, remote management, nested virtualisation, memory, integration services, device assignment and graphics partitioning, checkpoints, high availability, virtual hard disks, network adapters, teaming, switches and replication, and Windows Server machines in Azure covering storage, sizing and scale sets, availability sets and zones, just-in-time access and network configuration.

Name resolution integrated with the directory, zones and records, forwarding and conditional forwarding, resolution across a hybrid estate, resolution policies and security extensions, and addressing through the server role with scopes, reservations, high availability and the troubleshooting that hybrid addressing needs.

Azure file shares and their permissions, file synchronisation and its monitoring, migrating distributed file shares into it, Windows Server shares with resource management and the distributed file system, the newer share protocols and their settings, disks and volumes, storage spaces including the direct and replica forms, deduplication, direct memory access, quality of service, file system choice, network block storage, and drive encryption with its recovery.

Hardening the operating system through exploit protection, application control, credential protection and reputation filtering, security baselines and configuration, the local administrator password solution, server protection and the firewall with its connection rules, and securing the directory itself: password policy, protected users, hardened and restricted controllers, account and administrative group options, delegation and authentication protocols.

Performance monitoring and collector sets, alerting through the management centre, server insights, event logs, data collection rules and alerts in Azure Monitor, virtual machine insights, and the diagnosis half: connectivity, name resolution, updates, time, performance, extensions, encryption and storage, plus directory recovery through the recycle bin, restore mode and shared volume repair, and replication, Kerberos, secure channel and trust failures.