AZ-800 Study Guide: Administering Windows Server Hybrid Core Infrastructure
In this exam guide you’ll see which MS Learn modules map against exam functional groups and which docs.microsoft.com articles map against specific exam objective items for the AZ-800 Administering Windows Server Hybrid Core Infrastructure exam. This exam is required for the Windows Server Hybrid Administrator Associate certification.
The official objectives page is found here: https://docs.microsoft.com/en-us/learn/certifications/exams/az-800
The collection of all MS Learn modules that cover these exam objectives sorted into functional groups is here: AZ-800: Administering Windows Server Hybrid Core Infrastructure
Microsoft Press Exam Reference: Exam Ref Az-800 Administering Windows Server Hybrid Core Infrastructure
Interactive Lab Simulations: AZ-800 Interactive Labs
AZ-800 ILT GitHub Repository: https://github.com/MicrosoftLearning/AZ-800-Administering-Windows-Server-Hybrid-Core-Infrastructure
Pluralsight series on AZ-800: Administering Windows Server Hybrid Core Infrastructure
MeasureUp practice test for AZ-800: https://www.measureup.com/microsoft-practice-test-az-800-administering-windows-server-hybrid-core-in...
1. Deploy and Manage AD DS in On-premises and Cloud Environments (30-35%)
Exam Readiness Zone Prep Video: AZ-800 OD1 Overview
1.1 Deploy and manage AD DS domain controllers
· Deploy and manage domain controllers on-premises
· Deploy and manage domain controllers in Azure
o https://docs.microsoft.com/azure/architecture/reference-architectures/identity/adds-extend-domain
· Deploy RODCs
· Troubleshoot FSMO roles
o https://docs.microsoft.com/troubleshoot/windows-server/identity/fsmo-roles
1.2 Configure and manage multi-site, multi-domain, and multi-forest environments
· Configure and manage forest and domain trusts
o https://docs.microsoft.com/azure/active-directory-domain-services/tutorial-create-forest-trust
· Configure and manage AD DS sites
· Configure and manage AD DS replication
1.3 Create and manage AD DS security principals
· Create and manage AD DS users and groups
· Manage users and groups in multi-domain and multi-forest scenarios
· Implement group managed service accounts (gMSAs)
· Join Windows Servers to AD DS, Azure AD DS, and Azure AD
o https://docs.microsoft.com/windows-server/identity/ad-fs/deployment/join-a-computer-to-a-domain
o https://docs.microsoft.com/azure/active-directory-domain-services/join-windows-vm
1.4 Implement and Manage Hybrid Identities
· Implement Azure AD Connect
o https://docs.microsoft.com/azure/active-directory/hybrid/whatis-azure-ad-connect-v2
· Manage Azure AD Connect Synchronization
o https://docs.microsoft.com/azure/active-directory/hybrid/concept-azure-ad-connect-sync-architecture
· Implement Azure AD Connect cloud sync
o https://docs.microsoft.com/azure/active-directory/cloud-sync/what-is-cloud-sync
· Integrate Azure AD, AD DS and Azure AD Domain Services
o https://docs.microsoft.com/azure/architecture/reference-architectures/identity/azure-ad
· Manage Azure AD Domain Services
o https://docs.microsoft.com/azure/active-directory-domain-services/tutorial-create-instance
· Manage Azure AD Connect Health
o https://docs.microsoft.com/azure/active-directory/hybrid/whatis-azure-ad-connect
· Manage authentication in on-premises and hybrid environments
o https://docs.microsoft.com/azure/active-directory/hybrid/choose-ad-authn
· Configure and manage AD DS passwords
o https://docs.microsoft.com/azure/active-directory-domain-services/password-policy
1.5 Manage Windows Server by using domain-based Group Policies
· Implement Group Policy in AD DS
· Implement Group Policy Preferences in AD DS
o https://docs.microsoft.com/previous-versions/windows/desktop/policy/group-policy-preferences
· Implement Group Policy in Azure AD DS
o https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy
2. Manage Windows Servers and Workloads in a Hybrid Environment (10-15%)
Exam Readiness Zone Prep Video: AZ-800 OD2 Overview
2.1 Manage Windows Servers in a Hybrid environment
· Deploy a WAC Gateway Server
o https://docs.microsoft.com/windows-server/manage/windows-admin-center/azure/deploy-wac-in-azure
· Configure a target machine for WAC
o https://docs.microsoft.com/windows-server/manage/windows-admin-center/azure/manage-vm
· Configure PowerShell Remoting
· Configure CredSSP or Kerberos Delegation for 2nd Hop Remoting
· Configure JEA for PowerShell Remoting
o https://docs.microsoft.com/powershell/scripting/learn/remoting/jea/overview?view=powershell-7.1
2.2 Manage Windows Servers and workloads by using Azure services
· Manage Windows Servers by using Azure Arc
· https://docs.microsoft.com/azure/azure-arc/servers/onboard-windows-admin-center
· Assign Azure Policy Guest Configuration
· https://docs.microsoft.com/azure/azure-arc/servers/learn/tutorial-assign-policy-portal
· Deploy Azure services using Azure VM extensions on non-Azure machines
· https://docs.microsoft.com/azure/azure-arc/servers/learn/tutorial-enable-vm-insights
· Manage Updates for Windows machines
· https://docs.microsoft.com/azure/automation/update-management/overview
· Integrate Windows Servers with Log Analytics
· https://docs.microsoft.com/azure/azure-monitor/agents/log-analytics-agent#network-requirements
· Integrate Windows Servers with Microsoft Defender for Cloud (Azure Security Center)
· https://docs.microsoft.com/azure/architecture/hybrid/hybrid-security-monitoring
· Manage IaaS VMs in Azure that run Windows Server
· https://docs.microsoft.com/azure/virtual-machines/maintenance-and-updates
· Implement Azure Automation for hybrid workloads
· https://docs.microsoft.com/azure/architecture/hybrid/azure-automation-hybrid
· Create runbooks to automate tasks on target VMs
· https://docs.microsoft.com/azure/automation/automation-runbook-execution
· Implement Implement Azure Automation State Configuration (DSC) to prevent configuration drift in IaaS machines
· https://docs.microsoft.com/azure/virtual-machines/extensions/dsc-overview
· https://docs.microsoft.com/azure/virtual-machines/extensions/dsc-windows
· https://docs.microsoft.com/azure/virtual-machines/extensions/features-windows
3. Manage Virtual Machines and Containers (15-20%)
Exam Readiness Zone Prep Video: AZ-800 OD3 Overview
3.1 Manage Hyper-V and guest virtual machines
· Enable VM Enhanced Session Mode
· Manage VM using PowerShell Remoting, PowerShell Direct and HVC.exe
· Configure nested virtualization
o https://docs.microsoft.com/virtualization/hyper-v-on-windows/user-guide/nested-virtualization
· Configure VM Memory
· Configure Integration Services
· Configure Discrete Device Assignment
· Configure VM Resource Groups
o https://docs.microsoft.com/windows-server/virtualization/hyper-v/manage/manage-hyper-v-minroot-2016
· Configure VM CPU Groups
o https://docs.microsoft.com/windows-server/virtualization/hyper-v/manage/manage-hyper-v-cpugroups
· Configure hypervisor scheduling types
· Manage VM Checkpoints
· Implementing high availability for virtual machines
o https://docs.microsoft.com/windows-server/virtualization/hyper-v/manage/set-up-hyper-v-replica
· Manage VHD and VHDX files
· Configure Hyper V Network Adapter
· https://docs.microsoft.com/en-us/azure-stack/hci/concepts/host-network-requirements
· Configure NIC Teaming
o https://docs.microsoft.com/azure-stack/hci/concepts/host-network-requirements
o https://docs.microsoft.com/windows-server/networking/technologies/nic-teaming/nic-teaming
· Configure Hyper-V Switch
3.2 Create and manage containers
· Create Windows Server Container Images
o https://docs.microsoft.com/virtualization/windowscontainers/manage-containers/container-base-images
· Manage Windows Server Container Images
o https://docs.microsoft.com/virtualization/windowscontainers/deploy-containers/update-containers
· Configure Container Networking
o https://docs.microsoft.com/virtualization/windowscontainers/container-networking/architecture
· Manage container instances
o https://docs.microsoft.com/virtualization/windowscontainers/wac-tooling/wac-containers
3.3 Manage Azure Virtual Machines that run Windows Server
· Manage Data Disks
o https://docs.microsoft.com/azure/virtual-machines/windows/attach-managed-disk-portal
· Resize Azure VM
o https://docs.microsoft.com/azure/virtual-machines/windows/resize-vm
· Configure Continuous delivery for an Azure VM
o https://docs.microsoft.com/azure/architecture/solution-ideas/articles/cicd-for-azure-vms
· Configure connections to VMs
o https://docs.microsoft.com/azure/virtual-machines/windows/connect-logon
o https://docs.microsoft.com/azure/virtual-machines/windows/winrm
· Manage Azure VM network configuration
o https://docs.microsoft.com/azure/virtual-network/network-overview
4. Implement and Manage an On-premises and Hybrid Networking Infrastructure (15-20%)
Exam Readiness Zone Prep Video: AZ-800 OD4 Overview
4.1 Implement on-premises and hybrid name resolution
· Integrate DNS with AD DS
o https://docs.microsoft.com/windows-server/identity/ad-ds/plan/active-directory-integrated-dns-zones
· Create and Manage zones and records
· Configure DNS forwarding/conditional forwarding
· Integrate Windows Server DNS with Azure DNS private zones
o https://docs.microsoft.com/azure/dns/private-dns-scenarios
· Implement DNSSEC
4.2 Manage IP addressing in on-premises and hybrid scenarios
· Implement and manage IPAM
o https://docs.microsoft.com/windows-server/networking/technologies/ipam/ipam-top
· Implement and configure the DHCP server role (on-premises only)
· Resolve IP address issues in hybrid environments
· Create and manage scopes
· Create and manage IP reservations
· Implement DHCP High Availability
4.3 Implement on-premises and hybrid network connectivity
· Implement and manage the Remote Access role
· Implement and manage Azure Network Adapter
o https://docs.microsoft.com/azure/architecture/hybrid/azure-network-adapter
· Implement and manage Azure Extended Network
o https://docs.microsoft.com/windows-server/manage/windows-admin-center/azure/azure-extended-network
· Implement and manage Network Policy Server role
· Implement Web Application Proxy
· Implement Azure Relay
o https://docs.microsoft.com/azure/azure-relay/relay-what-is-it
· Implement Site to Site VPN
o https://docs.microsoft.com/azure/vpn-gateway/point-to-site-about
· Implement Azure Virtual WAN
o https://docs.microsoft.com/azure/virtual-wan/virtual-wan-about
· Implement Azure AD Application Proxy
o https://docs.microsoft.com/azure/active-directory/app-proxy/what-is-application-proxy
5. Manage Storage and File Services (15-20%)
Exam Readiness Zone Prep Video: AZ-800 OD5 Overview
5.1 Configure and manage Azure File Sync
· Create Azure File Sync Service
o https://docs.microsoft.com/azure/storage/file-sync/file-sync-deployment-guide
· Create Sync Groups
o https://docs.microsoft.com/azure/storage/file-sync/file-sync-modify-sync-topology
· Create Cloud Endpoints
o https://docs.microsoft.com/azure/storage/files/storage-how-to-create-file-share
· Register servers
o https://docs.microsoft.com/azure/storage/file-sync/file-sync-server-registration
· Create Server Endpoints
o https://docs.microsoft.com/azure/storage/file-sync/file-sync-server-endpoint-create
· Configure Cloud Tiering
o https://docs.microsoft.com/azure/storage/file-sync/file-sync-how-to-manage-tiered-files
· Monitor File Sync
o https://docs.microsoft.com/azure/storage/file-sync/file-sync-monitoring
· Migrate DFS to Azure File Sync
o https://docs.microsoft.com/azure/storage/files/files-manage-namespaces
5.2 Configure and Manage Windows Server File Shares
· Configure Windows Server file share access
o https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2003/cc784499(v=ws.10)
· Configuring File Screens
o https://docs.microsoft.com/windows-server/storage/fsrm/file-screening-management
· Configure FSRM quotas
o https://docs.microsoft.com/windows-server/storage/fsrm/quota-management
· Configure BranchCache
o https://docs.microsoft.com/windows-server/networking/branchcache/branchcache
· Implement and configure Distributed File System (DFS)
o https://docs.microsoft.com/windows-server/storage/dfs-namespaces/dfs-overview
o https://docs.microsoft.com/windows-server/storage/dfs-replication/dfsr-overview
5.3 Configure Windows Server Storage
· Configure disks and volumes
o https://docs.microsoft.com/windows-server/storage/disk-management/manage-disks
o https://docs.microsoft.com/windows-server/storage/disk-management/manage-basic-volumes
· Configure and manage Storage Spaces
o https://docs.microsoft.com/windows-server/storage/storage-spaces/overview
· Configure and manage Storage Replica
o https://docs.microsoft.com/windows-server/storage/storage-replica/storage-replica-overview
· Configure Data Deduplication
o https://docs.microsoft.com/windows-server/storage/data-deduplication/overview
· Configure SMB direct
o https://docs.microsoft.com/windows-server/storage/file-server/smb-direct
· Configure Storage QoS
o https://docs.microsoft.com/windows-server/storage/storage-qos/storage-qos-overview
· Configure File systems
o https://docs.microsoft.com/windows-server/storage/refs/refs-overview
o https://docs.microsoft.com/windows-server/storage/file-server/ntfs-overview
The following video provides an introductory overview of these objectives by Orin Thomas and Jeff Woolsey: