In this exam guide you’ll see which MS Learn modules map against exam functional groups and which docs.microsoft.com articles map against specific exam objective items for the AZ-801 Configuring Windows Server Hybrid Advanced Services exam. This exam is required for the Windows Server Hybrid Administrator Associate certification.
The official objectives page is found here: https://docs.microsoft.com/en-us/learn/certifications/exams/az-801
The collection of all MS Learn modules that cover these exam objectives sorted into functional groups is here: AZ-801: Configuring Windows Server Hybrid Advanced Services
The Microsoft Press Exam Ref is here: Exam Ref Az-801 Configuring Windows Server Hybrid Advanced Services
AZ-801 Interactive Lab simulations: AZ-801 Interactive Labs.
AZ-801 ILT GitHub Repository: https://github.com/MicrosoftLearning/AZ-801-Configuring-Windows-Server-Hybrid-Advanced-Services
The Pluralsight courses associated with AZ 801 are here: https://www.pluralsight.com/paths/administering-windows-server-hybrid-advanced-services-az-801
The MeasureUp practice test associated with AZ 801 is here: https://www.measureup.com/microsoft-practice-test-az-801-configuring-windows-server-hybrid-advanced-...
Exam Readiness Zone video on AZ-801 OD1.
1.1 Secure Windows Server Operating System
· Configure and manage Exploit Protection
· Configure and Manage Windows Defender Application Control
· Configure and manage Windows Defender for Endpoint
· Configure and manage Windows Defender Credential Guard
· Configure SmartScreen
· Implement operating system security by using Group Policies
o https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-security-baselines
1.2 Secure a hybrid Active Directory infrastructure
· Configure Password policies
· Enable password block lists
· Manage protected users
· Manage account security on an RODC
· Harden Domain Controllers
· Configure authentication policies silos
· Restrict access to domain controllers
· Configure account security
· Manage AD built-in administrative groups
· Manage AD delegation
· Implement and manage Microsoft Defender for Identity
o https://docs.microsoft.com/en-us/defender-for-identity/what-is
1.3 Identify and remediate Windows Server security issues by using Azure Services
· Monitor on-premises servers and Azure IaaS VMs by using Azure Sentinel
o https://docs.microsoft.com/en-us/azure/sentinel/connect-windows-security-events
· Identify and remediate security issues on-premises servers and Azure IaaS VMs by using Azure Security Center
o https://docs.microsoft.com/en-us/azure/security-center/defender-for-servers-introduction
1.4 Secure Windows Server networking
· Manage Windows Defender Firewall
· Implement domain isolation
· Implement connection security rules
1.5 Secure Windows Server storage
· Manage Windows BitLocker Drive Encryption (BitLocker)
· Manage and recover encrypted volumes
· Enable storage encryption by using Azure Disk Encryption
o https://docs.microsoft.com/en-us/azure/security/fundamentals/encryption-models
· Manage disk encryption keys for IaaS virtual machines
o https://docs.microsoft.com/en-us/azure/security/fundamentals/azure-disk-encryption-vms-vmss
Exam Readiness Zone video on AZ-801 OD2.
2.1 Implement a Windows Server failover cluster
· Implement a failover cluster on-premises, hybrid, or cloud-only
· https://docs.microsoft.com/en-us/azure/virtual-machines/disks-shared
· https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-availability-sets
· Create a Windows Failover Cluster
· https://docs.microsoft.com/en-us/windows-server/failover-clustering/create-failover-cluster
· Stretch cluster across datacenter or Azure regions
· Configure storage for failover clustering
· https://docs.microsoft.com/en-us/windows-server/failover-clustering/clustering-requirements
· Modify quorum options
· https://docs.microsoft.com/en-us/windows-server/failover-clustering/manage-cluster-quorum
· Configure network adapters for failover clustering
· Configure cluster workload options
· https://docs.microsoft.com/en-us/windows-server/failover-clustering/failover-clustering-overview
· Configure cluster sets
· https://docs.microsoft.com/en-us/azure-stack/hci/deploy/cluster-set
· Configure Scale-Out File servers
· https://docs.microsoft.com/en-us/windows-server/failover-clustering/sofs-overview
· Create an Azure witness
· https://docs.microsoft.com/en-us/windows-server/failover-clustering/deploy-cloud-witness
· Configure a floating IP address for the cluster
· Implement load balancing for the failover cluster
· https://docs.microsoft.com/en-us/azure-stack/hci/manage/vm-load-balancing
2.2 Manage Failover Clustering
· Implement Cluster-Aware updating
o https://docs.microsoft.com/en-us/windows-server/failover-clustering/cluster-aware-updating
· Recover a failed cluster node
· Upgrade a node to Windows Server 2022
· Failover workloads between nodes
· Install Windows updates on cluster nodes
o https://docs.microsoft.com/en-us/windows-server/failover-clustering/cluster-aware-updating-options
· Manage failover clusters using Windows Admin Center
2.3 Implement and Manage Storage Spaces Direct
· Create failover cluster using Storage Spaces Direct
· Upgrade Storage Spaces Direct node
· Implement networking for Storage Spaces Direct
· Configure Storage Spaces Direct
o https://docs.microsoft.com/en-us/windows-server/storage/storage-spaces/deploy-storage-spaces-direct
Exam Readiness Zone video on AZ-801 OD3.
3.1 Manage Backup and Recovery for Windows Server
· Backup and restore files and folders to Azure Recovery Services Vault
o https://docs.microsoft.com/en-us/azure/backup/backup-windows-with-mars-agent
o https://docs.microsoft.com/en-us/azure/backup/backup-azure-restore-windows-server
· Install and manage Azure Backup Server
o https://docs.microsoft.com/en-us/azure/backup/backup-mabs-whats-new-mabs
o https://docs.microsoft.com/en-us/azure/backup/backup-azure-microsoft-azure-backup
· Backup and recover using Azure Backup Server
o https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-vms-prepare
· Manage backups in Azure Recovery Services Vault
o https://docs.microsoft.com/en-us/azure/backup/backup-instant-restore-capability
· Create Backup Policy
o https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-userestapi-createorupdatepolicy
· Configure Backup for Azure VM using the built-in back up agent
o https://docs.microsoft.com/en-us/azure/backup/backup-client-automation
· Recover VM using temporary snapshots
· Recover VMs to new Azure VMs
o https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms
· Restore a VM
o https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms
3.2 Implement disaster recovery by using Azure Site Recovery
· Configure Azure Site Recovery Networking
· Configure Site Recovery for on-premises VMs
o https://docs.microsoft.com/en-us/azure/site-recovery/hyper-v-vmm-network-mapping
· Configure a Recovery Plan
o https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-create-recovery-plans
· Configure Site Recovery for Azure VMs
o https://docs.microsoft.com/en-us/azure/site-recovery/azure-to-azure-about-networking
· Implement VM replication to secondary datacenter or Azure region
· Configure Azure Site Recovery policies
o https://docs.microsoft.com/en-us/azure/site-recovery/azure-to-azure-how-to-enable-policy
3.3 Protect virtual machines by using Hyper-V replicas
· Configure Hyper-V Hosts for replication
o https://docs.microsoft.com/en-us/windows-server/virtualization/hyper-v/manage/set-up-hyper-v-replica
· Manage Hyper-V replica servers
o https://docs.microsoft.com/en-us/windows-server/virtualization/hyper-v/manage/set-up-hyper-v-replica
· Configure VM Replication
o https://docs.microsoft.com/en-us/windows-server/virtualization/hyper-v/manage/set-up-hyper-v-replica
· Perform a Failover
Exam Readiness Zone video on AZ-801 OD4.
4.1 Migrate on-premises storage to on-premises servers or Azure
· Transfer data and share; and cutover to new server using SMS
o https://docs.microsoft.com/en-us/windows-server/storage/storage-migration-service/cutover
· Use Storage Migration Service to migrate to Azure VMs
o https://docs.microsoft.com/en-us/windows-server/storage/storage-migration-service/overview
· Migrate to Azure File shares
o https://docs.microsoft.com/en-us/azure/storage/files/storage-files-migration-overview
4.2 Migrate on-premises servers to Azure
· Deploy and configure Azure Migrate appliance
o https://docs.microsoft.com/en-us/azure/migrate/deploy-appliance-script
· Migrate VM workloads to Azure IaaS
o https://docs.microsoft.com/en-us/azure/migrate/tutorial-migrate-hyper-v
· Migrate physical workloads to Azure IaaS
o https://docs.microsoft.com/en-us/azure/migrate/how-to-set-up-appliance-physical
· Migrate by using Azure Migrate
o https://docs.microsoft.com/en-us/azure/migrate/how-to-migrate
4.3 Migrate workloads from previous versions to Windows Server 2022
· Migrate IIS
· Migrate Hyper-V hosts
· Migrate RDS Host servers
· Migrate DHCP
· Migrate Print Servers
4.4 Migrate IIS workloads to Azure
· Migrate IIS workloads to Azure Web Apps
o https://docs.microsoft.com/en-us/dotnet/azure/migration/app-service
· Migrate IIS workloads to containers
o https://docs.microsoft.com/en-us/virtualization/windowscontainers/quick-start/building-sample-app
4.5 Migrate an AD DS infrastructure to Windows Server 2022 AD DS
· Migrate AD DS objects, including users, groups and Group Policies using AD Migration Tool
· Migrate to a new Active directory forest
· Upgrade existing forest
o https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/upgrade-domain-controllers
Exam Readiness Zone video on AZ-801 OD5.
5.1 Monitor Windows Server by using Windows Server tools and Azure Services
· Monitor Windows Server by using Performance Monitor
o https://docs.microsoft.com/en-us/troubleshoot/windows-server/performance/performance-overview
· Create and configure Data Collector Sets
· Monitor servers and configure alerts by using Windows Admin Center
o https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/azure-monitor
· Monitor by using System Insights
o https://docs.microsoft.com/en-us/windows-server/manage/system-insights/overview
· Manage event logs
· Deploy Log Analytics agents
o https://docs.microsoft.com/en-us/azure/azure-monitor/agents/agent-windows
· Collect performance counters to Azure
o https://docs.microsoft.com/en-us/azure/azure-monitor/agents/data-collection-rule-overview
· Create alerts
o https://docs.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-log
· Monitor Azure VMs by using Azure diagnostics extension
o https://docs.microsoft.com/en-us/azure/azure-monitor/agents/diagnostics-extension-overview
· Monitor Azure VMs performance by using VM Insights
o https://docs.microsoft.com/en-us/azure/azure-monitor/vm/vminsights-overview
5.2 Troubleshoot Windows Server On-premises and hybrid Networking
· Troubleshoot hybrid network connectivity
· Troubleshoot on-premises connectivity
o https://docs.microsoft.com/en-us/troubleshoot/windows-server/networking/networking-overview
5.3 Troubleshoot Windows Server virtual machines in Azure
· Troubleshoot deployment failures
· Troubleshoot booting failures
o https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/boot-error-troubleshoot
· Troubleshoot VM performance issues
o https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/performance-diagnostics
· Troubleshoot VM extension issues
o https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/support-agent-extensions
· Troubleshoot disk encryption issues
o https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-overview
· Troubleshoot storage
· Troubleshoot VM Connection issues
o https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/cannot-connect-rdp-azure-vm
5.4 Troubleshoot Active Directory
· Restore objects from AD recycle bin
· Recover Active Directory database using Directory Services Restore mode
· Recover SYSVOL
· Troubleshoot Active Directory replication
· Troubleshoot Hybrid authentication issues
· Troubleshoot on-premises Active Directory
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.