AZ-800 Study Guide: Administering Windows Server Hybrid Core Infrastructure

Published Sep 16 2021 10:01 AM 45.3K Views
Microsoft

AZ-800 Study Guide: Administering Windows Server Hybrid Core Infrastructure

az-800-Badge.pngWS-HAA-Badge.png

In this exam guide you’ll see which MS Learn modules map against exam functional groups and which docs.microsoft.com articles map against specific exam objective items for the AZ-800 Administering Windows Server Hybrid Core Infrastructure exam. This exam is required for the Windows Server Hybrid Administrator Associate certification.

 

The official objectives page is found here: https://docs.microsoft.com/en-us/learn/certifications/exams/az-800

The collection of all MS Learn modules that cover these exam objectives sorted into functional groups is here: AZ-800: Administering Windows Server Hybrid Core Infrastructure 

Microsoft Press Exam Reference: Exam Ref Az-800 Administering Windows Server Hybrid Core Infrastructure

Pluralsight series on AZ-800: Administering Windows Server Hybrid Core Infrastructure

MeasureUp practice test for AZ-800: https://www.measureup.com/microsoft-practice-test-az-800-administering-windows-server-hybrid-core-in...

1. Deploy and Manage AD DS in On-premises and Cloud Environments (30-35%)

1.1 Deploy and manage AD DS domain controllers         

·       Deploy and manage domain controllers on-premises     

o   https://docs.microsoft.com/windows-server/identity/ad-ds/deploy/install-active-directory-domain-serv...

o   https://docs.microsoft.com/windows-server/identity/ad-ds/deploy/install-a-new-windows-server-2012-ac...

o   https://docs.microsoft.com/windows-server/identity/ad-ds/deploy/what-s-new-in-active-directory-domai...

·       Deploy and manage domain controllers in Azure

o   https://docs.microsoft.com/azure/architecture/reference-architectures/identity/adds-extend-domain

·       Deploy RODCs  

o   https://docs.microsoft.com/windows-server/identity/ad-ds/deploy/rodc/install-a-windows-server-2012-a...

·       Troubleshoot FSMO roles           

o   https://docs.microsoft.com/troubleshoot/windows-server/identity/fsmo-roles

 

1.2 Configure and manage multi-site, multi-domain, and multi-forest environments  

·       Configure and manage forest and domain trusts

o   https://docs.microsoft.com/azure/active-directory-domain-services/tutorial-create-forest-trust

o   https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc771568...

·       Configure and manage AD DS sites         

o   https://docs.microsoft.com/windows-server/identity/ad-ds/plan/understanding-active-directory-site-to...

·       Configure and manage AD DS replication

o   https://docs.microsoft.com/windows-server/identity/ad-ds/get-started/replication/active-directory-re...

 

1.3 Create and manage AD DS security principals           

·       Create and manage AD DS users and groups       

o   https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc754661...

o   https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc771069...

·       Manage users and groups in multi-domain and multi-forest scenarios

o   https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc733001...

·       Implement group managed service accounts (gMSAs)

o   https://docs.microsoft.com/windows-server/security/group-managed-service-accounts/group-managed-serv...

·       Join Windows Servers to AD DS, Azure AD DS, and Azure AD

o   https://docs.microsoft.com/windows-server/identity/ad-fs/deployment/join-a-computer-to-a-domain

o   https://docs.microsoft.com/azure/active-directory-domain-services/join-windows-vm

 

1.4 Implement and Manage Hybrid Identities   

·       Implement Azure AD Connect   

o   https://docs.microsoft.com/azure/active-directory/hybrid/whatis-azure-ad-connect-v2

·       Manage Azure AD Connect Synchronization

o   https://docs.microsoft.com/azure/active-directory/hybrid/concept-azure-ad-connect-sync-architecture

·       Implement Azure AD Connect cloud sync            

o   https://docs.microsoft.com/azure/active-directory/cloud-sync/what-is-cloud-sync

·       Integrate Azure AD, AD DS and Azure AD Domain Services

o   https://docs.microsoft.com/azure/architecture/reference-architectures/identity/azure-ad

·       Manage Azure AD Domain Services        

o   https://docs.microsoft.com/azure/active-directory-domain-services/tutorial-create-instance

·       Manage Azure AD Connect Health          

o   https://docs.microsoft.com/azure/active-directory/hybrid/whatis-azure-ad-connect

·       Manage authentication in on-premises and hybrid environments

o   https://docs.microsoft.com/azure/active-directory/hybrid/choose-ad-authn

·       Configure and manage AD DS passwords            

o   https://docs.microsoft.com/azure/active-directory-domain-services/password-policy

 

1.5 Manage Windows Server by using domain-based Group Policies      

·       Implement Group Policy in AD DS           

o   https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/hh831791...

·       Implement Group Policy Preferences in AD DS   

o   https://docs.microsoft.com/previous-versions/windows/desktop/policy/group-policy-preferences

·       Implement Group Policy in Azure AD DS

o   https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy

 

2. Manage Windows Servers and Workloads in a Hybrid Environment (10-15%)        

2.1 Manage Windows Servers in a Hybrid environment

·       Deploy a WAC Gateway Server  

o   https://docs.microsoft.com/windows-server/manage/windows-admin-center/azure/deploy-wac-in-azure

·       Configure a target machine for WAC      

o   https://docs.microsoft.com/windows-server/manage/windows-admin-center/azure/manage-vm

·       Configure PowerShell Remoting

o   https://docs.microsoft.com/powershell/scripting/learn/remoting/running-remote-commands?view=powershe...

o   https://docs.microsoft.com/powershell/scripting/learn/remoting/powershell-remoting-faq?view=powershe...

·       Configure CredSSP or Kerberos Delegation for 2nd Hop Remoting

o   https://docs.microsoft.com/powershell/scripting/learn/remoting/ps-remoting-second-hop?view=powershel...

·       Configure JEA for PowerShell Remoting

o   https://docs.microsoft.com/powershell/scripting/learn/remoting/jea/overview?view=powershell-7.1

 

2.2 Manage Windows Servers and workloads by using Azure services   

·       Manage Windows Servers by using Azure Arc

·            https://docs.microsoft.com/azure/azure-arc/servers/onboard-windows-admin-center

·       Assign Azure Policy Guest Configuration

·            https://docs.microsoft.com/azure/azure-arc/servers/learn/tutorial-assign-policy-portal

·       Deploy Azure services using Azure VM extensions on non-Azure machines

·            https://docs.microsoft.com/azure/azure-arc/servers/learn/tutorial-enable-vm-insights

·       Manage Updates for Windows machines

·            https://docs.microsoft.com/azure/automation/update-management/overview

·       Integrate Windows Servers with Log Analytics    

·            https://docs.microsoft.com/azure/azure-monitor/agents/log-analytics-agent#network-requirements

·       Integrate Windows Servers with Microsoft Defender for Cloud (Azure Security Center)

·            https://docs.microsoft.com/azure/architecture/hybrid/hybrid-security-monitoring

·       Manage IaaS VMs in Azure that run Windows Server

·            https://docs.microsoft.com/azure/virtual-machines/maintenance-and-updates

·       Implement Azure Automation for hybrid workloads

·            https://docs.microsoft.com/azure/architecture/hybrid/azure-automation-hybrid

·       Create runbooks to automate tasks on target VMs

·            https://docs.microsoft.com/azure/automation/automation-runbook-execution

·       Implement Implement Azure Automation State Configuration (DSC) to prevent configuration drift in IaaS machines

·            https://docs.microsoft.com/azure/virtual-machines/extensions/dsc-overview

·            https://docs.microsoft.com/azure/virtual-machines/extensions/dsc-windows

·            https://docs.microsoft.com/azure/virtual-machines/extensions/features-windows

 

3. Manage Virtual Machines and Containers (15-20%)

3.1 Manage Hyper-V and guest virtual machines            

·       Enable VM Enhanced Session Mode       

o   https://docs.microsoft.com/windows-server/virtualization/hyper-v/learn-more/use-local-resources-on-h...

·       Manage VM using PowerShell Remoting, PowerShell Direct and HVC.exe

o   https://docs.microsoft.com/windows-server/virtualization/hyper-v/manage/manage-windows-virtual-machi...

o   https://techcommunity.microsoft.com/t5/itops-talk-blog/manage-hyper-v-vms-using-powershell-direct/bc...

·       Configure nested virtualization 

o   https://docs.microsoft.com/virtualization/hyper-v-on-windows/user-guide/nested-virtualization

·       Configure VM Memory 

o   https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/hh831766...

·       Configure Integration Services   

o   https://docs.microsoft.com/windows-server/virtualization/hyper-v/manage/manage-hyper-v-integration-s...

·       Configure Discrete Device Assignment   

o   https://docs.microsoft.com/windows-server/virtualization/hyper-v/deploy/deploying-graphics-devices-u...

o   https://docs.microsoft.com/windows-server/virtualization/hyper-v/plan/plan-for-deploying-devices-usi...

o   https://docs.microsoft.com/windows-server/virtualization/hyper-v/deploy/deploying-storage-devices-us...

·       Configure VM Resource Groups

o   https://docs.microsoft.com/windows-server/virtualization/hyper-v/manage/manage-hyper-v-minroot-2016

·       Configure VM CPU Groups         

o   https://docs.microsoft.com/windows-server/virtualization/hyper-v/manage/manage-hyper-v-cpugroups

·       Configure hypervisor scheduling types   

o   https://docs.microsoft.com/windows-server/virtualization/hyper-v/manage/manage-hyper-v-scheduler-typ...

o   https://docs.microsoft.com/windows-server/virtualization/hyper-v/manage/about-hyper-v-scheduler-type...

·       Manage VM Checkpoints            

o   https://docs.microsoft.com/windows-server/virtualization/hyper-v/manage/choose-between-standard-or-p...

o   https://docs.microsoft.com/windows-server/virtualization/hyper-v/manage/enable-or-disable-checkpoint...

·       Implementing high availability for virtual machines

o   https://docs.microsoft.com/windows-server/virtualization/hyper-v/manage/set-up-hyper-v-replica

o   https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn743844...

·       Manage VHD and VHDX files      

o   https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/hh831446...

·       Configure Hyper V Network Adapter

·            https://docs.microsoft.com/en-us/azure-stack/hci/concepts/host-network-requirements

·       Configure NIC Teaming 

o   https://docs.microsoft.com/azure-stack/hci/concepts/host-network-requirements

o   https://docs.microsoft.com/windows-server/networking/technologies/nic-teaming/nic-teaming

·       Configure Hyper-V Switch           

o   https://docs.microsoft.com/windows-server/virtualization/hyper-v-virtual-switch/hyper-v-virtual-swit...

 

3.2 Create and manage containers        

·       Create Windows Server Container Images

o   https://docs.microsoft.com/virtualization/windowscontainers/manage-containers/container-base-images

·       Manage Windows Server Container Images

o   https://docs.microsoft.com/virtualization/windowscontainers/deploy-containers/update-containers

·       Configure Container Networking

o   https://docs.microsoft.com/virtualization/windowscontainers/container-networking/architecture

·       Manage container instances

o   https://docs.microsoft.com/virtualization/windowscontainers/wac-tooling/wac-containers

 

3.3 Manage Azure Virtual Machines that run Windows Server  

·       Manage Data Disks

o   https://docs.microsoft.com/azure/virtual-machines/windows/attach-managed-disk-portal

·       Resize Azure VM

o   https://docs.microsoft.com/azure/virtual-machines/windows/resize-vm

·       Configure Continuous delivery for an Azure VM

o   https://docs.microsoft.com/azure/architecture/solution-ideas/articles/cicd-for-azure-vms

·       Configure connections to VMs

o   https://docs.microsoft.com/azure/virtual-machines/windows/connect-logon

o   https://docs.microsoft.com/azure/virtual-machines/windows/winrm

·       Manage Azure VM network configuration

o   https://docs.microsoft.com/azure/virtual-network/network-overview

4. Implement and Manage an On-premises and Hybrid Networking Infrastructure (15-20%)

4.1 Implement on-premises and hybrid name resolution            

·       Integrate DNS with AD DS

o   https://docs.microsoft.com/windows-server/identity/ad-ds/plan/active-directory-integrated-dns-zones

·       Create and Manage zones and records

o   https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc816891...

o   https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc816819...

·       Configure DNS forwarding/conditional forwarding

o   https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc816830...

o   https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc794735...

·       Integrate Windows Server DNS with Azure DNS private zones

o   https://docs.microsoft.com/azure/dns/private-dns-scenarios

·       Implement DNSSEC

o   https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj200221...

 

4.2 Manage IP addressing in on-premises and hybrid scenarios 

·       Implement and manage IPAM   

o   https://docs.microsoft.com/windows-server/networking/technologies/ipam/ipam-top

·       Implement and configure the DHCP server role (on-premises only)

o   https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/dd183630...

·       Resolve IP address issues in hybrid environments

o   https://support.microsoft.com/en-au/topic/fix-duplicate-ip-address-conflicts-on-a-dhcp-network-d6849...

·       Create and manage scopes        

o   https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/dd183624...

·       Create and manage IP reservations        

o   https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/dd183698...

·       Implement DHCP High Availability          

o   https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn338978...

 

4.3 Implement on-premises and hybrid network connectivity    

·       Implement and manage the Remote Access role

o   https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn636119...

·       Implement and manage Azure Network Adapter

o   https://docs.microsoft.com/azure/architecture/hybrid/azure-network-adapter

·       Implement and manage Azure Extended Network

o   https://docs.microsoft.com/windows-server/manage/windows-admin-center/azure/azure-extended-network

·       Implement and manage Network Policy Server role

o   https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/hh831683...

·       Implement Web Application Proxy

o   https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn584107...

·       Implement Azure Relay

o   https://docs.microsoft.com/azure/azure-relay/relay-what-is-it

·       Implement Site to Site VPN

o   https://docs.microsoft.com/azure/vpn-gateway/point-to-site-about

·       Implement Azure Virtual WAN

o   https://docs.microsoft.com/azure/virtual-wan/virtual-wan-about

·       Implement Azure AD Application Proxy

o   https://docs.microsoft.com/azure/active-directory/app-proxy/what-is-application-proxy

 

5. Manage Storage and File Services (15-20%)

5.1 Configure and manage Azure File Sync         

·       Create Azure File Sync Service   

o   https://docs.microsoft.com/azure/storage/file-sync/file-sync-deployment-guide

·       Create Sync Groups       

o   https://docs.microsoft.com/azure/storage/file-sync/file-sync-modify-sync-topology

·       Create Cloud Endpoints

o   https://docs.microsoft.com/azure/storage/files/storage-how-to-create-file-share

·       Register servers

o   https://docs.microsoft.com/azure/storage/file-sync/file-sync-server-registration

·       Create Server Endpoints             

o   https://docs.microsoft.com/azure/storage/file-sync/file-sync-server-endpoint-create

·       Configure Cloud Tiering

o   https://docs.microsoft.com/azure/storage/file-sync/file-sync-how-to-manage-tiered-files

·       Monitor File Sync           

o   https://docs.microsoft.com/azure/storage/file-sync/file-sync-monitoring

·       Migrate DFS to Azure File Sync  

o   https://docs.microsoft.com/azure/storage/files/files-manage-namespaces

 

5.2 Configure and Manage Windows Server File Shares

·       Configure Windows Server file share access        

o   https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2003/cc784499(v=ws.10)

·       Configuring File Screens

o   https://docs.microsoft.com/windows-server/storage/fsrm/file-screening-management

·       Configure FSRM quotas

o   https://docs.microsoft.com/windows-server/storage/fsrm/quota-management

·       Configure BranchCache

o   https://docs.microsoft.com/windows-server/networking/branchcache/branchcache

·       Implement and configure Distributed File System (DFS)

o   https://docs.microsoft.com/windows-server/storage/dfs-namespaces/dfs-overview

o   https://docs.microsoft.com/windows-server/storage/dfs-replication/dfsr-overview

 

5.3 Configure Windows Server Storage 

·       Configure disks and volumes

o   https://docs.microsoft.com/windows-server/storage/disk-management/manage-disks

o   https://docs.microsoft.com/windows-server/storage/disk-management/manage-basic-volumes

·       Configure and manage Storage Spaces

o   https://docs.microsoft.com/windows-server/storage/storage-spaces/overview

·       Configure  and manage Storage Replica 

o   https://docs.microsoft.com/windows-server/storage/storage-replica/storage-replica-overview

·       Configure Data Deduplication

o   https://docs.microsoft.com/windows-server/storage/data-deduplication/overview

·       Configure SMB direct

o   https://docs.microsoft.com/windows-server/storage/file-server/smb-direct

·       Configure Storage QoS  

o   https://docs.microsoft.com/windows-server/storage/storage-qos/storage-qos-overview

·       Configure File systems

o   https://docs.microsoft.com/windows-server/storage/refs/refs-overview

o   https://docs.microsoft.com/windows-server/storage/file-server/ntfs-overview

 

The following video provides an introductory overview of these objectives by Orin Thomas and Jeff Woolsey: 

 

15 Comments
Co-Authors
Version history
Last update:
‎Jul 12 2022 03:01 AM
Updated by: