Training plan
Administering Windows Server Hybrid Core Infrastructure (AZ-800T00)
Module 1: Introduction to AD DS
- Define AD DS
- Define users, groups, and computers
- Define AD DS forests and domains
- Define OUs
- Manage objects and their properties in AD DS
Module 2: Manage AD DS domain controllers and FSMO roles
- Deploy AD DS domain controllers
- Maintain AD DS domain controllers
- Manage the AD DS Global Catalog role
- Manage AD DS operations masters
- Manage AD DS schema
Module 3: Implement Group Policy Objects
- Define GPOs
- Implement GPO scope and inheritance
- Define domain-based GPOs
- Create and configure a domain-based GPO
- Define GPO storage
- Define administrative templates
Module 4: Manage advanced features of AD DS
- Create trust relationships
- Implement ESAE forests
- Monitor and troubleshoot AD DS
- Create custom AD DS partitions
Module 5: Implement hybrid identity with Windows Server
- Select an Azure Active Directory integration model
- Plan for Azure Active Directory integration
- Prepare on-premises Active Directory for directory synchronization
- Install and configure directory synchronization with Azure Active Directory Connect
- Implement Seamless Single Sign-On
- Enable Azure Active Directory login in for Windows VM in Azure
- Describe Azure Active Directory Domain Services
- Implement and configure Azure Active Directory Domain Services
- Manage Windows Server 2019 in an Azure Active Directory Domain Services environment
- Create and configure an Azure Active Directory Domain Services instance
- Join a Windows Server VM to a managed domain
Module 6: Deploy and manage Azure IaaS Active Directory domain controllers in Azure
- Select an option to implement directory and identity services using Active
- Directory Domain Services in Azure
- Deploy and configure Active Directory Domain Services domain controllers in Azure VMs
- Install a replica Active Directory domain controller in an Azure VM
- Install a new Active Directory forest on an Azure VNet
Module 7: Perform Windows Server secure administration
- Define least privilege administration
- Implement delegated privileges
- Use privileged access workstations
- Use jump servers
Module 8: Describe Windows Server administration tools
- Explore Windows Admin Center
- Use Server Manager
- List Remote Server Administration Tools
- Use Windows PowerShell
- Use Windows PowerShell to remotely administer a server
Module 9: Perform post-installation configuration of Windows Server
- List the available post-installation configuration tools
- Configure Server Core using Sconfig
- Use DSC to configure Windows Server
- Perform post-installation configuration with Windows Admin Center
- Configure a server with answer files
Module 10: Just Enough Administration in Windows Server
- Explain the concept of Just Enough Administration (JEA)
- Define role capabilities for a JEA endpoint
- Create a session configuration file to register a JEA endpoint
- Describe how JEA endpoints work to limit access to a PowerShell session
- Create and connect to a JEA endpoint
- Demonstration: Connect to a JEA endpoint
Module 11: Administer and manage Windows Server IaaS Virtual Machine remotely
- Select the appropriate remote administration tool
- Manage Windows Virtual Machines with Azure Bastion
- Create an Azure Bastion host
- Configure just-in-time administration
Module 12: Manage hybrid workloads with Azure Arc
- Describe Azure Arc
- Onboard Windows Server instances
- Connect hybrid machines to Azure from the Azure portal
- Use Azure Arc to manage Windows Server instances
- Restrict access with RBAC
Module 13: Configure and manage Hyper-V
- Define Hyper-V
- Define Hyper-V Manager
- Configure Hyper-V hosts using best practices
- Configure Hyper-V networking
- Assess advanced Hyper-V networking features
- Define nested virtualization
Module 14: Configure and manage Hyper-V virtual machines
- List the virtual machine configuration versions
- List the virtual machine generation versions
- List available VHD formats and types
- Create and configure VMs
- Determine storage options for VMs
- Define shared VHDs and VHD Sets
- Implement guest clusters using shared VHDX
Module 15: Secure Hyper-V workloads
- Define guarded fabric
- Define the Host Guardian Service
- Explore TPM-trusted attestation
- Define KPS
- Determine key features of shielded VMs
- Compare encryption-supported and shielded VMs in a guarded fabric
- Implement a shielded VM
Module 16: Run containers on Windows Server
- Define containers
- List the differences between containers and VMs
- Define Windows Server and Hyper-V containers and isolation modes
- Explore Docker
- Prepare a Windows Server 2019 host for container deployment
- Security, Storage, and Networking with Windows containers
Module 17: Orchestrate containers on Windows Server using Kubernetes
- Define orchestration
- Define Kubernetes
- Deploy Kubernetes resources
- Create a Kubernetes cluster on Windows
- Define Azure Arc
- Connect an Azure Arc-enabled Kubernetes cluster to Azure Arc
Module 18: Plan and deploy Windows Server IaaS Virtual Machines
- Describe Azure compute
- Describe Virtual Machine storage
- Deploy Azure Virtual Machines
- Create a windows Virtual Machine using the portal
- Create a windows Virtual Machine using Azure CLI
- Deploy Azure Virtual Machines using templates
Module 19: Customize Windows Server IaaS Virtual Machine images
- Create a generalized image
- Create a new Virtual Machine from a managed image
- Create a managed image of a generalized virtual machine in Azure
- Create a Virtual Machine from a managed image
- Implement Azure Image Builder
- Create a windows Virtual Machine using Azure Image Builder template
- Create a Windows Virtual Machine with Azure Image Builder using PowerShell
Module 20: Automate the configuration of Windows Server IaaS Virtual Machines
- Describe Azure Automation
- Implement Azure Automation with DSC
- Remediate noncompliant servers
- Describe Custom Script Extensions
- Configure a Virtual Machine by using DSC
Module 21: Deploy and manage DHCP
- Use DHCP to simplify IP configuration
- Install and configure the DHCP role
- Configure DHCP options
- Configure DHCP scopes
- Select DHCP high availability options
- Implement DHCP Failover
Module 22: Implement Windows Server DNS
- Explore the DNS architecture
- Work with DNS zones and records
- Install and configure the DNS role
- Implement DNS forwarding
Module 23: Implement IP Address Management
- Define IP Address Management
- Deploy IP Address Management
- Administer IP Address Management
- Configure IP Address Management options
- Manage DNS zones with IP Address Management
- Manage DHCP servers with IP Address Management
- Use IP Address Management to manage IP addressing
Module 24: Implement remote access
- Examine the remote access options in Windows Server
- Select and set up VPNs
- Use NPS to create and enforce network access policies
- Plan and implement NPS
- Deploy a PKI for remote access
- Use WAP as a reverse web proxy
Module 25: Implement hybrid network infrastructure
- Describe Azure network topologies
- Implement Azure VPN options
- Create a route-based VPN gateway using the Azure portal
- Implement Azure ExpressRoute
- Configure Azure Virtual WAN
- Implement DNS in hybrid environments
Module 26: Implement DNS for Windows Server IaaS VMs
- Understand Azure DNS
- Implement Azure DNS
- Create an Azure DNS zone and record using the Azure portal
- Implement DNS with Azure IaaS virtual machines
- Implement split-horizon DNS in Azure
Troubleshoot DNS
Module 27: Implement Windows Server IaaS VM IP addressing and routing
- Implement a virtual network
- Implement IaaS VM IP addressing
- Assign and manage IP addresses
- Configure a private IP address for a virtual machine using the Azure portal
- Create a virtual machine with a static public IP address using the Azure portal
- Implement IaaS virtual machine IP routing
- Implement IPv6 for Windows Server IaaS virtual machines
Module 28: Manage Windows Server file servers
- Define the Windows Server file system
- List the benefits and uses of File Server Resource Manager
- Define SMB and its security considerations
- Configure SMB protocol
- Define Volume Shadow Copy Service
Module 29: Implement Storage Spaces and Storage Spaces Direct
- Define the Storage Spaces architecture and its components
- List the functionalities, benefits, and use cases of Storage Spaces
- Implement Storage Spaces
- List the functionalities, components, benefits, and use cases of Storage Spaces Direct
- Implement Storage Spaces Direct
Module 30: Implement Windows Server Data Deduplication
- Define the architecture, components, and functionality of Data Deduplication
- Define the use cases and interoperability of Data Deduplication
- Implement Data Deduplication
- Manage and maintain Data Deduplication
Module 31: Implement Windows Server iSCSI
- List the functionalities, components, and use cases of iSCSI
- List the considerations for implementing iSCSI
- Implement iSCSI
- Configure high availability for iSCSI
Module 32: Implement Windows Server Storage Replica
- List the functionalities and components of Storage Replica
- Examine the prerequisites for implementing Storage Replica
- Implement Storage Replica by using Windows Admin Center
- Implement Storage Replica by using Windows PowerShell
Module 33: Implement a hybrid file server infrastructure
- Describe Azure File services
- Configure Azure Files
- Configure connectivity to Azure Files
- Describe Azure File Sync
- Implement Azure File Sync
- Deploy Azure File Sync
- Deploy Azure File Sync 2
- Manage cloud tiering
- Migrate from DFSR to Azure File Sync
Configuring Windows Server Hybrid Advanced Services (AZ-801T00)
Module 1: Secure Windows Server user accounts
- Configure user account rights
- Protect user accounts with the
- Protected Users group
- Describe Windows Defender Credential Guard
- Block NTLM authentication
- Locate problematic accounts
Module 2: Hardening Windows Server
- Describe Local Password Administrator Solution
- Configure Privileged Access Workstations
- Secure domain controllers
- Analyze security configuration with
- Security Compliance Toolkit
- Secure SMB traffic
Module 3: Windows Server update management
- Explore Windows Update
- Outline Windows Server Update
- Services server deployment options
- Define Windows Server Update
- Services update management process
- Describe the process of Update Management
Module 4: Secure Windows Server DNS
- Implement split-horizon DNS
- Create DNS policies
- Implement DNS policies
- Secure Windows Server DNS
- Implement DNSSEC
Module 5: Implement Windows Server IaaS VM network security
- Implement network security groups and Windows IaaS VMs
- Implement adaptive network hardening
- Implement Azure Firewall and Windows IaaS VMs
- Implement Windows firewall with Windows Server IaaS VMs
- Choose the appropriate filtering solution
- Deploy and configure Azure firewall using the Azure portal
- Capture network traffic with network watcher
- Log network traffic to and from a VM using the Azure portal
Module 6: Audit the security of Windows Server IaaS Virtual Machines
- Describe Azure Security Center
- Enable Azure Security Center in hybrid environments
- Implement and assess security policies
- Protect your resources with Azure Security Center
- Implement Azure Sentinel
Module 7: Manage Azure updates
- Describe update management
- Enable update management
- Deploy updates
- View update assessments
- Manage updates for your Azure Virtual Machines
Module 8: Create and implement application allowlists with adaptive application control
- Describe adaptive application control
- Implement adaptive application control policies
Module 9: Configure BitLocker disk encryption for Windows IaaS Virtual Machines
- Describe Azure Disk Encryption and server-side encryption
- Configure Key Vault for Azure Disk Encryption
- Encrypt Azure IaaS Virtual Machine hard disks
- Back up and recover data from encrypted disks
- Create and encrypt a Windows Virtual Machine
Module 10: Implement change tracking and file integrity monitoring for Windows IaaS VMs
- Implement Change Tracking and Inventory
- Manage Change Tracking and Inventory
- Manage tracked files
- Implement File Integrity Monitoring
- Select and monitor entities
- Use File Integrity Monitoring
Module 11: Introduction to Cluster Shared Volumes
- Determine the functionality of Cluster Shared Volumes
- Explore the architecture and components of Cluster Shared Volumes
- Implement Cluster Shared Volumes
Module 12: Implement Windows Server failover clustering
- Define Windows Server failover clustering
- Plan Windows Server failover clustering
- Implement Windows Server failover clustering
- Manage Windows Server failover clustering
- Implement stretch clusters
- Define cluster sets
Module 13: Implement high availability of Windows Server VMs
- Select high-availability options for Hyper-V
- Consider network load balancing for Hyper-V VMs
- Implement Hyper-V VM live migration
- Implement Hyper-V VMs storage migration
Module 14: Implement Windows Server File Server high availability
- Explore the Windows Server File Server high-availability options
- Define Cluster Shared Volumes
- Implement Scale-Out File Server
- Implement Storage Replica
Module 15: Implement scale and high availability with Windows Server VM
- Describe virtual machine scale sets
- Implement scaling
- Implement load-balancing VMs
- Create a virtual machine scale set in the Azure portal
- Describe Azure Site Recovery
- Implement Azure Site Recovery
Module 16: Implement Hyper-V Replica
- Define Hyper-V Replica
- Plan for Hyper-V Replica
- Configure and implement Hyper-V Replica
- Define extended replication
- Define Azure Site Recovery
- Implement Site Recovery from on-premises site to Azure
- Implement Site Recovery from on-premises site to on-premises site
Module 17: Protect your on-premises infrastructure from disasters with Azure Site Recovery
- Azure Site Recovery overview
- Workloads supported for protection with Azure Site Recovery
- Run a disaster recovery drill
- Failover and failback
Module 18: Implement hybrid backup and recovery with Windows Server IaaS
- Describe Azure Backup
- Implement recovery vaults
- Implement Azure Backup policies
- Recover Windows IaaS Virtual Machines
- Perform file and folder recovery
- Perform backup and restore of on-premises workloads
- Manage Azure Virtual Machine backups with Azure Backup service
Module 19: Protect your Azure infrastructure with Azure Site Recovery
- What is Azure Site Recovery
- Prepare for disaster recovery with Azure Site Recovery
- Run a disaster recovery drill
- Failover and failback using Azure Site Recovery
Module 20: Protect your virtual machines by using Azure Backup
- Azure Backup features and scenarios
- Back up an Azure virtual machine by using Azure Backup
- Restore virtual machine data
Module 21: Active Directory Domain Services migration
- Examine upgrade vs. migration
- Upgrade a previous version of Active Directory Domain Services to Windows Server 2022
- Migrate to Active Directory Domain Services in Windows Server 2022 from a previous version
- Explore the Active Directory Migration Tool
Module 22: Migrate file server workloads using Storage Migration Service
- Storage Migration Service overview and usage scenarios
- Storage migration requirements
- Migrate a server with Storage migration
- Evaluate storage migration considerations
Module 23: Migrate Windows Server roles
- Describe the Windows Server Migration Tools
- Install the Migration Tools
- Migrate roles using the Migration Tools
Module 24: Migrate on-premises Windows Server instances to Azure IaaS virtual machines
- Plan your migration
- Describe Azure Migrate
- Perform server assessment
- Assess physical servers with Azure Migrate
- Migrate Windows Server workloads by using Azure Migrate
Module 25: Upgrade and migrate Windows Server IaaS virtual machines
- Describe Azure Migrate
- Migrate Windows Server workloads by using Azure Migrate
- Describe storage migration
- Migrate file servers by using Storage Migration Service
Module 26: Containerize and migrate ASP.NET applications to Azure App Service
- Azure Migrate App Containerization overview
Module 27: Monitor Windows Server performance
- Use Performance Monitor to identify performance problems
- Use Resource Monitor to review current resource usage
- Review reliability with Reliability Monitor
- Implement a performance monitoring methodology
- Use Data Collector Sets to analyze server performance
- Monitor network infrastructure services
- Monitor virtual machines running Windows Server
- Monitor performance with Windows Admin Center
- Use System Insights to help predict future capacity issues
- Optimize the performance of Windows Server
Module 28: Manage and monitor Windows Server event logs
- Describe Windows Server event logs
- Use Windows Admin Center to review logs
- Use Server Manager to review logs
- Use custom views
- Implement event log subscriptions
Module 29: Implement Windows Server auditing and diagnostics
- Describe basic auditing categories
- Describe advanced categories
- Log user access
- Enable setup and boot event collection
Module 30: Troubleshoot Active Directory
- Recover objects from the AD recycle bin
- Recover the AD DS database
- Recover SYSVOL
- Troubleshoot AD DS replication
- Troubleshoot hybrid authentication issues
Module 31: Monitor Windows Server IaaS Virtual Machines and hybrid instances
- Enable Azure Monitor for Virtual Machines
- Monitor an Azure Virtual Machine with Azure Monitor
- Enable Azure Monitor in hybrid scenarios
- Collect data from a Windows computer in a hybrid environment
- Integrate Azure Monitor with Microsoft Operations Manager
Module 32: Monitor the health of your Azure virtual machine by using Azure Metrics Explorer and metric alerts
- Monitor the health of the virtual machine
- View VM metrics
- Configure the Azure Diagnostics extension
- Diagnostic data case studies
Module 33: Monitor performance of virtual machines by using Azure Monitor VM Insights
- What are Azure Monitor Logs and Azure Monitor VM Insights?
- Build log queries by using the Kusto Query Language
Module 34: Troubleshoot on-premises and hybrid networking
- Diagnose DHCP problems
- Diagnose DNS problems
- Diagnose IP configuration issues
- Diagnose routing problems
- Use Packet Manager to help diagnose network problems
- Use Azure Network Watcher to help diagnose network problems
Module 35: Troubleshoot Windows Server Virtual Machines in Azure
- Troubleshoot VM deployment
- Troubleshoot VM startup
- Troubleshoot VM extensions
- Troubleshoot VM connectivity
- Troubleshoot VM performance
- Troubleshoot VM storage
Recommended Prerequisite Knowledge
- Experience managing Windows Server operating systems and Windows Server workloads in on-site scenarios, including AD DS, DNS, DFS, Hyper-V, and file and storage services.
- Experience with common Windows Server management tools (implied in the first prerequisite).
- Basic knowledge of key Microsoft computing, storage, networking, and virtualization technologies (implied in the first prerequisite).
- Experience and understanding of basic networking technologies such as IP addressing, name resolution, and the DHCP (Dynamic Host Configuration Protocol).
- Experience working with and understanding Microsoft Hyper-V and basic server virtualization concepts.
- Awareness of basic security best practices.
- Basic understanding of security-related technologies (firewalls, encryption, multi-factor authentication, SIEM/SOAR).
- Basic knowledge of on-site resiliency for Windows Server-based computing and storage technologies (failover clustering, storage spaces).
- Basic experience in implementing and managing IaaS services in Microsoft Azure.
- Basic knowledge of Azure Active Directory.
- Practical experience with client operating systems such as Windows 10 or Windows 11.
- Basic experience with Windows PowerShell.
Credentials and certification
Exams features
- Codes: AZ-800 and AZ-801
- Titles: Administering Windows Server Hybrid Core Infrastructure and Configuring Windows Server Hybrid Advanced Services
- Duration: 120 minutes each
- Number of Questions: 40 to 60
- Question Format: Multiple choice, multiple response, scenario-based
- Passing Score: 700 out of 1000
- Cost: $0 (included in your training)
Exams topics
- Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments.
- Manage Windows Server servers and workloads in a hybrid environment.
- Manage virtual machines and containers.
- Implement and manage a local and hybrid network infrastructure.
- Manage storage and file services.
- Secure on-premises and hybrid Windows Server infrastructures.
- Implement and manage high availability for Windows Server.
- Implement disaster recovery.
- Migrate servers and workloads.
- Monitor Windows Server environments and troubleshoot associated issues.
Microsoft Certified: Windows Server Hybrid Administrator Associate Training (AZ-800/801)
The Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-800/801) training bundle is designed for IT professionals responsible for managing and securing hybrid infrastructures that combine on-premises Windows Server environments with Microsoft Azure. This dual-course bundle includes comprehensive training for both the AZ-800 and AZ-801 certifications, equipping participants with the expertise needed to manage hybrid environments efficiently.
This training offers hands-on experience with topics such as deploying and managing Active Directory, configuring hybrid networking, securing workloads, and optimizing server performance in a hybrid environment. By completing this training, participants are prepared to take both certification exams and gain the prestigious Windows Server Hybrid Administrator Associate credential.
Why Enroll in the Windows Server Hybrid Administrator Associate Training?
The shift toward hybrid infrastructures is growing, as organizations look for scalable, flexible, and secure solutions that combine on-premises and cloud environments. This training bundle provides the skills to navigate the challenges of hybrid administration, enabling IT professionals to ensure seamless integration, effective management, and enhanced security across all platforms.
Earning the Windows Server Hybrid Administrator Associate certification demonstrates your ability to manage complex infrastructures and positions you as a key asset in the evolving world of IT.
Key Skills Developed in the Training
Deploy and Manage Active Directory in Hybrid Environments
Learn how to deploy, configure, and integrate on-premises Active Directory with Azure Active Directory, ensuring seamless identity and access management.Configure and Secure Hybrid Networking
Master networking principles to connect on-premises infrastructure with Azure using VPNs, ExpressRoute, and hybrid DNS configurations.Implement Workload Security and Backup Strategies
Discover best practices for securing hybrid workloads using Azure Security Center, Windows Defender, and robust backup strategies.Optimize Server Performance and Monitoring
Utilize Azure Monitor and other tools to analyze server performance, configure advanced server settings, and resolve issues in hybrid environments.Migrate and Upgrade Windows Server
Explore techniques for migrating workloads to hybrid environments and upgrading Windows Server versions while maintaining security and performance.Manage Virtualization and High Availability
Learn to deploy and manage virtual machines, implement clustering, and ensure high availability in hybrid infrastructures.
Comprehensive, Instructor-Led Training for Hybrid Expertise
The AZ-800/801 training bundle is delivered by experienced Microsoft-certified instructors who provide practical insights, real-world scenarios, and hands-on exercises. Participants will develop the skills necessary to tackle hybrid administration challenges and prepare for both certification exams with confidence.
This dual-course format ensures a balanced approach to theoretical knowledge and practical implementation, making it ideal for professionals looking to advance their careers in hybrid infrastructure management.
Who Should Attend?
This training is perfect for:
- IT administrators and infrastructure engineers responsible for managing hybrid environments
- Professionals preparing for the Windows Server Hybrid Administrator Associate (AZ-800/801) certifications
- Cloud architects and consultants working on hybrid integration projects
- Organizations seeking to upskill their IT teams in hybrid server management
Gain Hybrid Management Expertise with Microsoft Certifications
The Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-800/801) training bundle prepares you to manage hybrid infrastructures with confidence and achieve dual certifications. Enroll today to advance your career and master the skills required for hybrid cloud and on-premises integration.
Frequently asked questions - Microsoft certified AZ-800 and AZ-801 trainings (FAQ)
What topics are covered in the AZ-800/801 training bundle?
This bundle includes topics such as hybrid Active Directory integration, hybrid networking configuration, workload security, server migration, and optimization of hybrid infrastructures.
Who should enroll in this training?
This course is ideal for IT administrators, cloud architects, and infrastructure engineers responsible for managing hybrid environments that combine on-premises and Azure solutions.
What prior knowledge is recommended for this training?
Participants should have experience managing Windows Server environments and a foundational understanding of Microsoft Azure services.
How does this training prepare for the AZ-800 and AZ-801 certifications?
The training is aligned with the objectives of both certification exams, providing the theoretical knowledge and practical skills needed for success.
What tools and technologies will be covered in this course?
The course covers Windows Server, Azure Active Directory, Azure Monitor, VPNs, ExpressRoute, and virtualization tools such as Hyper-V.
What career benefits does the Windows Server Hybrid Administrator Associate certification provide?
Earning this certification demonstrates expertise in hybrid infrastructure management, making you a valuable asset for organizations adopting hybrid and cloud-based solutions.
