Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ800-801)

Administering Windows Server Hybrid Core Infrastructure (AZ-800T00)

Module 1: Introduction to AD DS

• Define AD DS
• Define users, groups, and computers
• Define AD DS forests and domains
• Define OUs
• Manage objects and their properties in AD DS

Module 2: Manage AD DS domain controllers and FSMO roles

• Deploy AD DS domain controllers
• Maintain AD DS domain controllers
• Manage the AD DS Global Catalog role
• Manage AD DS operations masters
• Manage AD DS schema

Module 3: Implement Group Policy Objects

• Define GPOs
• Implement GPO scope and inheritance
• Define domain-based GPOs
• Create and configure a domain-based GPO
• Define GPO storage
• Define administrative templates

Module 4: Manage advanced features of AD DS

• Create trust relationships
• Implement ESAE forests
• Monitor and troubleshoot AD DS
• Create custom AD DS partitions

Module 5: Implement hybrid identity with Windows Server

• Select an Azure Active Directory integration model
• Plan for Azure Active Directory integration
• Prepare on-premises Active Directory for directory synchronization
• Install and configure directory synchronization with Azure Active Directory Connect
• Implement Seamless Single Sign-On
• Enable Azure Active Directory login in for Windows VM in Azure
• Describe Azure Active Directory Domain Services
• Implement and configure Azure Active Directory Domain Services
• Manage Windows Server 2019 in an Azure Active Directory Domain Services environment
• Create and configure an Azure Active Directory Domain Services instance
• Join a Windows Server VM to a managed domain

Module 6: Deploy and manage Azure IaaS Active Directory domain controllers in Azure

• Select an option to implement directory and identity services using Active Directory Domain Services in Azure
• Deploy and configure Active Directory Domain Services domain controllers in Azure VMs
• Install a replica Active Directory domain controller in an Azure VM
• Install a new Active Directory forest on an Azure VNet

Module 7: Perform Windows Server secure administration

• Define least privilege administration
• Implement delegated privileges
• Use privileged access workstations
• Use jump servers

Module 8: Describe Windows Server administration tools

• Explore Windows Admin Center
• Use Server Manager
• List Remote Server Administration Tools
• Use Windows PowerShell
• Use Windows PowerShell to remotely administer a server

Module 9: Perform post-installation configuration of Windows Server

• List the available post-installation configuration tools
• Configure Server Core using Sconfig
• Use DSC to configure Windows Server
• Perform post-installation configuration with Windows Admin Center
• Configure a server with answer files

Module 10: Just Enough Administration in Windows Server

• Explain the concept of Just Enough Administration (JEA)
• Define role capabilities for a JEA endpoint
• Create a session configuration file to register a JEA endpoint
• Describe how JEA endpoints work to limit access to a PowerShell session
• Create and connect to a JEA endpoint
• Demonstration: Connect to a JEA endpoint

Module 11: Administer and manage Windows Server IaaS Virtual Machine remotely

• Select the appropriate remote administration tool
• Manage Windows Virtual Machines with Azure Bastion
• Create an Azure Bastion host
• Configure just-in-time administration

Module 12: Manage hybrid workloads with Azure Arc

• Describe Azure Arc
• Onboard Windows Server instances
• Connect hybrid machines to Azure from the Azure portal
• Use Azure Arc to manage Windows Server instances
• Restrict access with RBAC

Module 13: Configure and manage Hyper-V

• Define Hyper-V
• Define Hyper-V Manager
• Configure Hyper-V hosts using best practices
• Configure Hyper-V networking
• Assess advanced Hyper-V networking features
• Define nested virtualization

Module 14: Configure and manage Hyper-V virtual machines

• List the virtual machine configuration versions
• List the virtual machine generation versions
• List available VHD formats and types
• Create and configure VMs
• Determine storage options for VMs
• Define shared VHDs and VHD Sets
• Implement guest clusters using shared VHDX

Module 15: Secure Hyper-V workloads

• Define guarded fabric
• Define the Host Guardian Service
• Explore TPM-trusted attestation
• Define KPS
• Determine key features of shielded VMs
• Compare encryption-supported and shielded VMs in a guarded fabric
• Implement a shielded VM

Module 16: Run containers on Windows Server

• Define containers
• List the differences between containers and VMs
• Define Windows Server and Hyper-V containers and isolation modes
• Explore Docker
• Prepare a Windows Server 2019 host for container deployment
• Security, Storage, and Networking with Windows containers

Module 17: Orchestrate containers on Windows Server using Kubernetes

• Define orchestration
• Define Kubernetes
• Deploy Kubernetes resources
• Create a Kubernetes cluster on Windows
• Define Azure Arc
• Connect an Azure Arc-enabled Kubernetes cluster to Azure Arc

Module 18: Plan and deploy Windows Server IaaS Virtual Machines

• Describe Azure compute
• Describe Virtual Machine storage
• Deploy Azure Virtual Machines
• Create a windows Virtual Machine using the portal
• Create a windows Virtual Machine using Azure CLI
• Deploy Azure Virtual Machines using templates

Module 19: Customize Windows Server IaaS Virtual Machine images

• Create a generalized image
• Create a new Virtual Machine from a managed image
• Create a managed image of a generalized virtual machine in Azure
• Create a Virtual Machine from a managed image
• Implement Azure Image Builder
• Create a windows Virtual Machine using Azure Image Builder template
• Create a Windows Virtual Machine with Azure Image Builder using PowerShell

Module 20: Automate the configuration of Windows Server IaaS Virtual Machines

• Describe Azure Automation
• Implement Azure Automation with DSC
• Remediate noncompliant servers
• Describe Custom Script Extensions
• Configure a Virtual Machine by using DSC

Module 21: Deploy and manage DHCP

• Use DHCP to simplify IP configuration
• Install and configure the DHCP role
• Configure DHCP options
• Configure DHCP scopes
• Select DHCP high availability options
• Implement DHCP Failover

Module 22: Implement Windows Server DNS

• Explore the DNS architecture
• Work with DNS zones and records
• Install and configure the DNS role
• Implement DNS forwarding

Module 23: Implement IP Address Management

• Define IP Address Management
• Deploy IP Address Management
• Administer IP Address Management
• Configure IP Address Management options
• Manage DNS zones with IP Address Management
• Manage DHCP servers with IP Address Management
• Use IP Address Management to manage IP addressing

Module 24: Implement remote access

• Examine the remote access options in Windows Server
• Select and set up VPNs
• Use NPS to create and enforce network access policies
• Plan and implement NPS
• Deploy a PKI for remote access
• Use WAP as a reverse web proxy

Module 25: Implement hybrid network infrastructure

• Describe Azure network topologies
• Implement Azure VPN options
• Create a route-based VPN gateway using the Azure portal
• Implement Azure ExpressRoute
• Configure Azure Virtual WAN
• Implement DNS in hybrid environments

Module 26: Implement DNS for Windows Server IaaS VMs

• Understand Azure DNS
• Implement Azure DNS
• Create an Azure DNS zone and record using the Azure portal
• Implement DNS with Azure IaaS virtual machines
• Implement split-horizon DNS in Azure
• Troubleshoot DNS

Module 27: Implement Windows Server IaaS VM IP addressing and routing

• Implement a virtual network
• Implement IaaS VM IP addressing
• Assign and manage IP addresses
• Configure a private IP address for a virtual machine using the Azure portal
• Create a virtual machine with a static public IP address using the Azure portal
• Implement IaaS virtual machine IP routing
• Implement IPv6 for Windows Server IaaS virtual machines

Module 28: Manage Windows Server file servers

• Define the Windows Server file system
• List the benefits and uses of File Server Resource Manager
• Define SMB and its security considerations
• Configure SMB protocol
• Define Volume Shadow Copy Service

Module 29: Implement Storage Spaces and Storage Spaces Direct

• Define the Storage Spaces architecture and its components
• List the functionalities, benefits, and use cases of Storage Spaces
• Implement Storage Spaces
• List the functionalities, components, benefits, and use cases of Storage Spaces Direct
• Implement Storage Spaces Direct

Module 30: Implement Windows Server Data Deduplication

• Define the architecture, components, and functionality of Data Deduplication
• Define the use cases and interoperability of Data Deduplication
• Implement Data Deduplication
• Manage and maintain Data Deduplication

Module 31: Implement Windows Server iSCSI

• List the functionalities, components, and use cases of iSCSI
• List the considerations for implementing iSCSI
• Implement iSCSI
• Configure high availability for iSCSI

Module 32: Implement Windows Server Storage Replica

• List the functionalities and components of Storage Replica
• Examine the prerequisites for implementing Storage Replica
• Implement Storage Replica by using Windows Admin Center
• Implement Storage Replica by using Windows PowerShell

Module 33: Implement a hybrid file server infrastructure

• Describe Azure File services
• Configure Azure Files
• Configure connectivity to Azure Files
• Describe Azure File Sync
• Implement Azure File Sync
• Deploy Azure File Sync
• Deploy Azure File Sync 2
• Manage cloud tiering
• Migrate from DFSR to Azure File Sync

Configuring Windows Server Hybrid Advanced Services (AZ-801T00)

Module 1: Secure Windows Server user accounts

• Configure user account rights
• Protect user accounts with the Protected Users group
• Describe Windows Defender Credential Guard
• Block NTLM authentication
• Locate problematic accounts

Module 2: Hardening Windows Server

• Describe Local Password Administrator Solution
• Configure Privileged Access Workstations
• Secure domain controllers
• Analyze security configuration with Security Compliance Toolkit
• Secure SMB traffic

Module 3: Windows Server update management

• Explore Windows Update
• Outline Windows Server Update Services server deployment options
• Define Windows Server Update Services update management process
• Describe the process of Update Management

Module 4: Secure Windows Server DNS

• Implement split-horizon DNS
• Create DNS policies
• Implement DNS policies
• Secure Windows Server DNS
• Implement DNSSEC

Module 5: Implement Windows Server IaaS VM network security

• Implement network security groups and Windows IaaS VMs
• Implement adaptive network hardening
• Implement Azure Firewall and Windows IaaS VMs
• Implement Windows firewall with Windows Server IaaS VMs
• Choose the appropriate filtering solution
• Deploy and configure Azure firewall using the Azure portal
• Capture network traffic with network watcher
• Log network traffic to and from a VM using the Azure portal

Module 6: Audit the security of Windows Server IaaS Virtual Machines

• Describe Azure Security Center
• Enable Azure Security Center in hybrid environments
• Implement and assess security policies
• Protect your resources with Azure Security Center
• Implement Azure Sentinel

Module 7: Manage Azure updates

• Describe update management
• Enable update management
• Deploy updates
• View update assessments
• Manage updates for your Azure Virtual Machines

Module 8: Create and implement application allowlists with adaptive application control

• Describe adaptive application control
• Implement adaptive application control policies

Module 9: Configure BitLocker disk encryption for Windows IaaS Virtual Machines

• Describe Azure Disk Encryption and server-side encryption
• Configure Key Vault for Azure Disk Encryption
• Encrypt Azure IaaS Virtual Machine hard disks
• Back up and recover data from encrypted disks
• Create and encrypt a Windows Virtual Machine

Module 10: Implement change tracking and file integrity monitoring for Windows IaaS VMs

• Implement Change Tracking and Inventory
• Manage Change Tracking and Inventory
• Manage tracked files
• Implement File Integrity Monitoring
• Select and monitor entities
• Use File Integrity Monitoring

Module 11: Introduction to Cluster Shared Volumes

• Determine the functionality of Cluster Shared Volumes
• Explore the architecture and components of Cluster Shared Volumes
• Implement Cluster Shared Volumes

Module 12: Implement Windows Server failover clustering

• Define Windows Server failover clustering
• Plan Windows Server failover clustering
• Implement Windows Server failover clustering
• Manage Windows Server failover clustering
• Implement stretch clusters
• Define cluster sets

Module 13: Implement high availability of Windows Server VMs

• Select high-availability options for Hyper-V
• Consider network load balancing for Hyper-V VMs
• Implement Hyper-V VM live migration
• Implement Hyper-V VMs storage migration

Module 14: Implement Windows Server File Server high availability

• Explore the Windows Server File Server high-availability options
• Define Cluster Shared Volumes
• Implement Scale-Out File Server
• Implement Storage Replica

Module 15: Implement scale and high availability with Windows Server VM

• Describe virtual machine scale sets
• Implement scaling
• Implement load-balancing VMs
• Create a virtual machine scale set in the Azure portal
• Describe Azure Site Recovery
• Implement Azure Site Recovery

Module 16: Implement Hyper-V Replica

• Define Hyper-V Replica
• Plan for Hyper-V Replica
• Configure and implement Hyper-V Replica
• Define extended replication
• Define Azure Site Recovery
• Implement Site Recovery from on-premises site to Azure
• Implement Site Recovery from on-premises site to on-premises site

Module 17: Protect your on-premises infrastructure from disasters with Azure Site Recovery

• Azure Site Recovery overview
• Workloads supported for protection with Azure Site Recovery
• Run a disaster recovery drill
• Failover and failback

Module 18: Implement hybrid backup and recovery with Windows Server IaaS

• Describe Azure Backup
• Implement recovery vaults
• Implement Azure Backup policies
• Recover Windows IaaS Virtual Machines
• Perform file and folder recovery
• Perform backup and restore of on-premises workloads
• Manage Azure Virtual Machine backups with Azure Backup service

Module 19: Protect your Azure infrastructure with Azure Site Recovery

• What is Azure Site Recovery
• Prepare for disaster recovery with Azure Site Recovery
• Run a disaster recovery drill
• Failover and failback using Azure Site Recovery

Module 20: Protect your virtual machines by using Azure Backup

• Azure Backup features and scenarios
• Back up an Azure virtual machine by using Azure Backup
• Restore virtual machine data

Module 21: Active Directory Domain Services migration

• Examine upgrade vs. migration
• Upgrade a previous version of Active Directory Domain Services to Windows Server 2022
• Migrate to Active Directory Domain Services in Windows Server 2022 from a previous version
• Explore the Active Directory Migration Tool

Module 22: Migrate file server workloads using Storage Migration Service

• Storage Migration Service overview and usage scenarios
• Storage migration requirements
• Migrate a server with Storage migration
• Evaluate storage migration considerations

Module 23: Migrate Windows Server roles

• Describe the Windows Server Migration Tools
• Install the Migration Tools
• Migrate roles using the Migration Tools

Module 24: Migrate on-premises Windows Server instances to Azure IaaS virtual machines

• Plan your migration
• Describe Azure Migrate
• Perform server assessment
• Assess physical servers with Azure Migrate
• Migrate Windows Server workloads by using Azure Migrate

Module 25: Upgrade and migrate Windows Server IaaS virtual machines

• Describe Azure Migrate
• Migrate Windows Server workloads by using Azure Migrate
• Describe storage migration
• Migrate file servers by using Storage Migration Service

Module 26: Containerize and migrate ASP.NET applications to Azure App Service

• Azure Migrate App Containerization overview

Module 27: Monitor Windows Server performance

• Use Performance Monitor to identify performance problems
• Use Resource Monitor to review current resource usage
• Review reliability with Reliability Monitor
• Implement a performance monitoring methodology
• Use Data Collector Sets to analyze server performance
• Monitor network infrastructure services
• Monitor virtual machines running Windows Server
• Monitor performance with Windows Admin Center
• Use System Insights to help predict future capacity issues
• Optimize the performance of Windows Server

Module 28: Manage and monitor Windows Server event logs

• Describe Windows Server event logs
• Use Windows Admin Center to review logs
• Use Server Manager to review logs
• Use custom views
• Implement event log subscriptions

Module 29: Implement Windows Server auditing and diagnostics

• Describe basic auditing categories
• Describe advanced categories
• Log user access
• Enable setup and boot event collection

Module 30: Troubleshoot Active Directory

• Recover objects from the AD recycle bin
• Recover the AD DS database
• Recover SYSVOL
• Troubleshoot AD DS replication
• Troubleshoot hybrid authentication issues

Module 31: Monitor Windows Server IaaS Virtual Machines and hybrid instances

• Enable Azure Monitor for Virtual Machines
• Monitor an Azure Virtual Machine with Azure Monitor
• Enable Azure Monitor in hybrid scenarios
• Collect data from a Windows computer in a hybrid environment
• Integrate Azure Monitor with Microsoft Operations Manager

Module 32: Monitor the health of your Azure virtual machine by using Azure Metrics Explorer and metric alerts

• Monitor the health of the virtual machine
• View VM metrics
• Configure the Azure Diagnostics extension
• Diagnostic data case studies

Module 33: Monitor performance of virtual machines by using Azure Monitor VM Insights

• What are Azure Monitor Logs and Azure Monitor VM Insights?
• Build log queries by using the Kusto Query Language

Module 34: Troubleshoot on-premises and hybrid networking

• Diagnose DHCP problems
• Diagnose DNS problems
• Diagnose IP configuration issues
• Diagnose routing problems
• Use Packet Manager to help diagnose network problems
• Use Azure Network Watcher to help diagnose network problems

Module 35: Troubleshoot Windows Server Virtual Machines in Azure

• Troubleshoot VM deployment
• Troubleshoot VM startup
• Troubleshoot VM extensions
• Troubleshoot VM connectivity
• Troubleshoot VM performance
• Troubleshoot VM storage