Administering Windows Server Hybrid Core Infrastructure AZ-800 Practice Exam

The Microsoft Azure AZ-800: Administering Windows Server Hybrid Core Infrastructure exam validates your ability to manage and maintain Windows Server environments in a hybrid cloud configuration, which combines on-premises resources with Microsoft Azure cloud services. Earning this certification demonstrates your skills in integrating on-premises Active Directory with Azure Active Directory (Azure AD), managing virtual machines (VMs) across both environments, and implementing hybrid networking and storage solutions.

Who Should Take This Exam?

This exam is ideal for IT professionals responsible for administering Windows Server environments in hybrid cloud deployments. Here are some specific examples:

• Windows Server Administrators: Expanding their skillset to manage Windows Server in both on-premises and Azure cloud environments.
• Cloud Administrators: Specializing in integrating on-premises Windows Server with Microsoft Azure services.
• Hybrid IT Professionals: Working in organizations transitioning to a hybrid cloud model and seeking to optimize Windows Server management across both on-premises and Azure infrastructure.

Prerequisites

While there are no formal prerequisites for the exam, Microsoft recommends having experience with the following:

• Windows Server Administration: A solid understanding of Windows Server installation, configuration, and management.
• Active Directory: Familiarity with Active Directory concepts, including domain management, group policy, and user administration.
• Basic Cloud Concepts: An awareness of core cloud computing concepts and services, particularly those offered by Microsoft Azure.

Roles and Responsibilities

Earning the AZ-800 certification positions you for various roles focused on hybrid cloud administration, including:

• Hybrid Cloud Administrator: Managing and maintaining the integration between on-premises Windows Server environments and Microsoft Azure services.
• Windows Server Cloud Specialist: Specializing in deploying, configuring, and managing Windows Server workloads in a hybrid cloud environment.
• Cloud Architect (Windows Server Focus): Designing and implementing cloud architectures that leverage both on-premises Windows Server and Azure services for optimal resource utilization.

Exam Details

• Provider: Microsoft
• Format: Computer-based exam with multiple-choice and some scenario-based questions
• Number of Questions: Typically around 60 questions (subject to change)
• Duration: 120 minutes
• Passing Score: 70%

Course Outline

Domain 1 - Understand to Deploy and manage  Active Directory Domain Services (AD DS) in on-premises and cloud environments (30–35%)

1.1 Explaining deploying and managing AD DS domain controllers

• Learning deploying and managing domain controllers on-premises
• Learning deploying and managing domain controllers in Azure
• Learning deploying RODCs
• Learning troubleshooting FSMO roles

1.2 Explaining Configuring and managing multi-site, multi-domain, and multi-forest environments

• Learning configuring and managing forest and domain trusts
• Learning configuring and managing AD DS sites
• Learning configuring and managing AD DS replication

1.3 Explaining creating and managing AD DS security principals

• Learning creating and managing AD DS users and groups
• Learning managing users and groups in multi-domain and multi-forest scenarios
• Learning to implementing Group Managed Service Accounts (gMSAs)
• Learning to Join Windows Servers to AD DS, Microsoft Entra Domain Services, and Microsoft Entra ID

1.4 Explaining Implementing and managing hybrid identities

• Learning integrating Microsoft Entra ID, AD DS and Microsoft Entra Domain Services
• Learning implementing Microsoft Entra Connect
• Learning managing  Microsoft Entra Connect synchronization
• Learning implementing Microsoft Entra Connect cloud sync
• Learning managing Microsoft Entra Domain Services
• Learning managing Microsoft Entra Connect Health
• Learning managing authentication in on-premises and hybrid environments
• Learning configuring and managing AD DS passwords

1.5 Explaining managing Windows Server by using domain-based Group Policies

• Learning implementing Group Policy in AD DS
• Learning implementing Group Policy Preferences in AD DS
• Learning implementing Group Policy in Microsoft Entra Domain Services

Domain 2 - Understand managing Windows Servers and workloads in a hybrid environment (10–15%)

2.1 Explaining managing Windows Servers in a hybrid environment

• Learning deploying a Windows Admin Center Gateway server
• Learning configuring a target machine for Windows Admin Center
• Learning configuring PowerShell remoting
• Learning configuring CredSSP or Kerberos Delegation for 2nd Hop Remoting
• Learning configuring JEA for PowerShell remoting

2.2 Explaining managing Windows Servers and workloads by using Azure services

• Learning managing Windows Servers by using Azure Arc
• Learning creating and assigning Azure Policy that uses guest configuration extension
• Learning deploying Azure services using Azure VM extensions on non-Azure machines
• Learning managing updates for Windows machines
• Learning integrating Windows Servers with Log Analytics
• Learning integrating Windows Servers with Microsoft Defender for Cloud
• Learning managing IaaS VMs in Azure that run Windows Server
• Learning implementing Azure Automation for hybrid workloads
• Learning creating runbooks to automate tasks on target VMs
• Learning implementing Azure Automation State Configuration to prevent configuration drift in IaaS machines

Domain 3 - Understand managing virtual machines and containers (15–20%)

3.1 Explaining managing Hyper-V and guest virtual machinesLearning enabling VM Enhanced session mode

• Learning managing VM using PowerShell remoting, PowerShell Direct and SSH Direct for Linux VMs
• Learning configuring nested virtualization
• Learning configuring VM Memory
• Learning configuring integration services
• Learning configuring Discrete Device Assignment
• Learning configuring VM resource groups
• Learning configuring VM CPU groups
• Learning configuring hypervisor scheduling types
• Learning managing VM checkpoints
• Learning implementing high availability for virtual machines
• Learning managing VHD and VHDX files
• Learning configuring Hyper-V Network Adapter
• Learning configuring NIC Teaming
• Learning configuring Hyper-V Switch

3.2 Explaining creating and managing containers

• Learning creating Windows Server container images
• Learning managing Windows Server container images
• Learning configuring container networking
• Learning managing container instances

3.3 Explaining managing Azure Virtual Machines that run Windows Server

• Learning managing data disks
• Learning resizing Azure VM
• Learning configuring continuous delivery for an Azure VM
• Learning configuring connections to VMs
• Learning managing Azure VM network configuration

Domain 4 - Understand implementing and managing an on-premises and hybrid networking infrastructure (15–20%)

4.1 Explaining implementing on-premises and hybrid name resolution

• Learning integrating DNS with AD DS
• Learning creating and managing DNS zones and records
• Learning configuring DNS forwarding/conditional forwarding
• Learning integrating Windows Server DNS with Azure DNS private zones
• Learning implementing DNSSEC

4.2 Explaining managing IP addressing in on-premises and hybrid scenarios

• Learning implementing and managing IPAM
• Learning implementing and configuring the DHCP server role (on-premises only)
• Learning resolving IP address issues in hybrid environments
• Learning creating and managing DHCP scopes
• Learning creating and managing IP reservations
• Learning implementing DHCP high availability

4.3 Explaining implementing on-premises and hybrid network connectivity

• Learning implementing and managing the Remote Access role
• Learning implementing and managing Azure Network Adapter
• Learning implementing and managing Azure extended network
• Learning implementing and managing Network Policy Server role
• Learning implementing Web Application Proxy
• Learning implementing Azure Relay
• Learning implementing site-to-site VPN
• Learning implementing Azure Virtual WAN
• Learning implementing Microsoft Entra Application Proxy

Domain 5 - Understanding and Managing storage and file services (15–20%)

5.1 Explaining configuring and managing Azure File Sync

• Learning creating Azure File Sync Service
• Learning creating sync groups
• Learning creating cloud endpoints
• Learning registering servers
• Learning creating server endpoints
• Learning configuring cloud tiering
• Learning monitoring File Sync
• Learning migrating DFS to Azure File Sync

5.2 Explaining configuring and managing Windows Server file shares

• Learning configuring Windows Server file share access
• Learning configuring file screens
• Learning configuring FSRM quotas
• Learning configuring BranchCache
• Learning implementing and configuring Distributed File System (DFS)

5.3 Explaining configuring Windows Server storage

• Learning configuring disks and volumes
• Learning configuring and manage Storage Spaces
• Learning configuring and manage Storage Replica
• Learning configuring Data Deduplication
• Learning configuring SMB direct
• Learning configuring Storage QoS
• Learning configuring file systems