MCSA

We take a look at the newly announced Windows Server Hybrid Administrator Associate certification, also known as the AZ-800 and AZ-801

Exams Required:

Exam AZ-800: Administering Windows Server Hybrid Core Infrastructure.

Exam AZ-801: Configuring Windows Server Hybrid Advanced Services.

Skills measured

• Deploy and manage AD DS in on-premises and cloud environments
• Manage Windows Servers and workloads in a hybrid environment
• Manage virtual machines and containers
• Implement and manage an on-premises and hybrid networking infrastructure
• Manage storage and file services
• Secure Windows Server on-premises and hybrid infrastructures
• Implement and manage Windows Server high availability
• Implement disaster recovery
• Migrate servers and workloads
• Monitor and troubleshoot Windows Server environments

Exam AZ-800: Administering Windows Server Hybrid Core Infrastructure

Introduction

1. High-level course overview
2. Set expectations

Lesson 1: Manage on-premises identity

1. Deploy and manage AD DS domain controllers
2. Configure and manage multi-site, multi-domain, and multi-forest environments
3. Create and manage AD DS security principals

Lesson 2: Manage hybrid identity

1. Implement and manage hybrid identities:
2. Windows Server AD DS
3. Azure AD
4. Azure AD DS

Lesson 3: Implement Group Policy

1. Manage Windows Server using Domain-based group policies:
2. Identify GPO infrastructure
3. Implement and apply GPOs
4. Troubleshoot the application of GPOs

Lesson 4: Manage servers

1. Manage Windows Servers in a hybrid environment
2. Manage Windows Servers and workloads by using Azure services

Lesson 5: Manage VMs and containers

1. Manage Hyper-V and guest virtual machines
2. Create and manage containers
3. Manage Azure virtual machines that run Windows Server

Lesson 6: Implement name resolution

1. Implement on-premises name resolution
2. Implement Azure name resolution

Lesson 7: Managing network infrastructure

1. Manage IP addressing in on-premises and hybrid scenarios
2. Implement on-premises and hybrid network connectivity

Lesson 8: Managing file services

1. Configure and manage Azure File Sync
2. Configure and Manage Windows Server File Shares
3. Configure Windows Server Storage

Exam AZ-801: Configuring Windows Server Hybrid Advanced Services: Introduction

Lesson 1: Secure Windows Server

1. Configure and manage exploit protection
2. Configure Windows Defender Application Control
3. Configure Windows Defender for Endpoint
4. Configure Windows Defender Credential Guard
5. Configure SmartScreen
6. Implement security by using Group Policies

Lesson 2: Secure a Hybrid AD Infrastructure

2.1 Configure password policies

2.2 Enable password block lists

2.3 Manage protected users

2.4 Manage account security on a RODC

2.5 Harden domain controllers

2.6 Configure authentication policy silos

Lesson 3: Secure Azure AD Identities

3.1 Restrict access to domain controllers

3.2 Configure account security

3.3 Manage AD built-in administrative groups

3.4 Manage AD delegation

3.5 Implement Microsoft Defender for Identity

Lesson 4: Manage Windows Server Security with Azure

4.1 Monitor servers by using Azure Sentinel

4.2 Identify server security issues by using Azure Security Center

Lesson 5: Secure Windows Server Networking

5.1 Manage Windows Defender Firewall

5.2 Implement domain isolation

5.3 Implement connection security rules

Lesson 6: Secure Windows Server Storage

6.1 Manage BitLocker Drive Encryption

6.2 Manage and recover encrypted volumes

6.3 Enable Azure Disk Encryption

6.4 Manage disk encryption keys for VMs

Lesson 7: Implement a Windows Server Failover Cluster

7.1 Implement a failover cluster

7.2 Create a Windows failover cluster

7.3 Stretch a cluster across datacenter or Azure regions

7.4 Configure storage for failover clustering

7.5 Modify quorum options

7.6 Configure network adapters for failover clustering

Lesson 8: Configure a Windows Server Failover Cluster

8.1 Configure cluster workload options

8.2 Configure cluster sets

8.3 Configure a Scale-Out File Server

8.4 Create an Azure witness

8.5 Configure a floating IP address for the cluster

8.6 Implement load balancing for the failover cluster

Lesson 9: Manage Failover Clustering

9.1 Implement cluster-aware updating

9.2 Recover a failed cluster node

9.3 Upgrade a node to Windows Server 2025

9.4 Fail over workloads between nodes

9.5 Install Windows updates on cluster nodes

9.6 Manage clusters using Windows Admin Center

Lesson 10: Implement Storage Spaces Direct

10.1 Create a failover cluster using Storage Spaces Direct

10.2 Upgrade a Storage Spaces Direct node

10.3 Implement networking for Storage Spaces Direct

10.4 Configure Storage Spaces Direct

Lesson 11: Manage Backup for Windows Server

11.1 Back up and restore to an Azure Recovery Services vault

11.2 Install and manage Azure Backup Server

11.3 Back up and recover using Azure Backup Server

11.4 Manage backups in Azure Recovery Services vault

11.5 Create a backup policy

Lesson 12: Manage Recovery for Windows Server

12.1 Configure backup for Azure VMs

12.2 Recover a VM using temporary snapshots

12.3 Recover VMs to new Azure virtual machines

12.4 Restore a VM

Lesson 13: Implement DR by Using Azure Site Recovery

13.1 Configure Azure Site Recovery networking

13.2 Configure Site Recovery for on-premises VMs

13.3 Configure a recovery plan

13.4 Configure Site Recovery for Azure VMs

13.5 Implement VM replication in Azure

13.6 Configure Azure Site Recovery policies

Lesson 14: Protect VMs by Using Hyper-V Replicas

14.1 Configure Hyper-V hosts for replication

14.2 Manage Hyper-V replica servers

14.3 Configure VM replication

14.4 Perform a failover

Lesson 15: Migrate Local Storage to Local Servers or Azure

15.1 Transfer data and share

15.2 Cut over to a new server by using Storage Migration Service

15.3 Use Storage Migration Service to migrate to Azure VMs

15.4 Migrate to Azure file shares

Lesson 16: Migrate On-Premises Servers to Azure

16.1 Deploy and configure the Azure Migrate appliance

16.2 Migrate VM workloads to Azure IaaS

16.3 Migrate physical workloads to Azure IaaS

16.4 Migrate by using Azure Migrate

Lesson 17: Migrate Workloads to Windows Server 2025

17.1 Migrate Internet Information Services (IIS)

17.2 Migrate Hyper-V hosts

17.3 Migrate RDS host servers

17.4 Migrate DHCP

17.5 Migrate print servers

Lesson 18: Migrate IIS Workloads to Azure

18.1 Migrate IIS workloads to Azure Web Apps

18.2 Migrate IIS workloads to containers

Lesson 19: Migrate AD DS to Windows Server 2025 AD DS

19.1 Migrate AD DS objects using Active Directory Migration Tool

19.2 Migrate to a new Active Directory forest

19.3 Upgrade an existing forest

Lesson 20: Monitor Windows Server by Using Native Tools

20.1 Monitor Windows Server by using Performance Monitor

20.2 Create and configure Data Collector Sets

20.3 Monitor servers by using Windows Admin Center

20.4 Monitor by using System Insights

20.5 Manage event logs

Lesson 21: Monitor Windows Server by Using Azure Services

21.1 Deploy Log Analytics agents

21.2 Collect performance counters to Azure

21.3 Create alerts

21.4 Monitor Azure VMs by using Azure Diagnostics extension

21.5 Monitor Azure VM performance by using VM Insights

Lesson 22: Troubleshoot Windows Server Hybrid Networking

22.1 Troubleshoot hybrid network connectivity

22.2 Troubleshoot on-premises connectivity

Lesson 23: Troubleshoot Windows Server VMs in Azure

23.1 Troubleshoot deployment failures

23.2 Troubleshoot booting failures

23.3 Troubleshoot VM performance issues

23.4 Troubleshoot VM extension issues

23.5 Troubleshoot disk encryption issues

23.6 Troubleshoot storage

23.7 Troubleshoot VM connection issues

Lesson 24: Troubleshoot Active Directory

24.1 Restore objects from AD Recycle Bin

24.2 Recover the AD database using Directory Services Restore Mode

24.3 Recover SYSVOL

24.4 Troubleshoot Active Directory replication

24.5 Troubleshoot hybrid authentication issues

24.6 Troubleshoot on-premises Active Directory