AZ-801T00-A: Configuring Windows Server Hybrid Advanced Services

Course Description

This course teaches IT Professionals to configure advanced Windows Server services using on-premises, hybrid, and cloud technologies. The course teaches IT Professionals how to leverage the hybrid capabilities of Azure, how to migrate virtual and physical server workloads to Azure IaaS, and how to secure Azure VMs running Windows Server. The course also teaches IT Professionals how to perform tasks related to high availability, troubleshooting, and disaster recovery. The course highlights administrative tools and technologies including Windows Admin Center, PowerShell, Azure Arc, Azure Automation Update Management, Microsoft Defender for Identity, Azure Security Center, Azure Migrate, and Azure Monitor.

Audience Profile

This four-day course is intended for Windows Server Hybrid Administrators who have experience working with Windows Server and want to extend the capabilities of their on-premises environments by combining on-premises and hybrid technologies. Windows Server Hybrid Administrators who already implement and manage on-premises core technologies want to secure and protect their environments, migrate virtual and physical workloads to Azure Iaas, enable a highly available, fully redundant environment, and perform monitoring and troubleshooting.

About this Course

Course Outline

Skills at a glance

Secure Windows Server on-premises and hybrid infrastructures (25–30%)
Implement and manage Windows Server high availability (10–15%)
Implement disaster recovery (10–15%)
Migrate servers and workloads (20–25%)
Monitor and troubleshoot Windows Server environments (20–25%)

Secure Windows Server on-premises and hybrid infrastructures (25–30%)

Secure Windows Server operating system

Configure and manage Exploit Protection
Configure and manage Windows Defender Application Control
Configure and manage Microsoft Defender for Servers
Configure and manage Windows Defender Credential Guard
Configure SmartScreen
Implement operating system security by using Group Policies

Secure a hybrid Active Directory infrastructure

Configure password policies
Enable password block lists
Manage protected users
Manage account security on an RODC
Harden domain controllers
Configure authentication policy silos
Restrict access to domain controllers
Configure account security
Manage AD built-in administrative groups
Manage AD delegation
Implement and manage Microsoft Defender for Identity

Identify and remediate Windows Server security issues by using Azure services

Monitor on-premises servers and Azure IaaS VMs by using Microsoft Sentinel
Identify and remediate security issues on-premises servers and Azure IaaS VMs by using Microsoft Defender for Cloud

Secure Windows Server networking

Manage Windows Defender Firewall
Implement domain isolation
Implement connection security rules

Secure Windows Server storage

Manage Windows BitLocker Drive Encryption (BitLocker)
Manage and recover encrypted volumes
Enable storage encryption by using Azure Disk Encryption
Manage disk encryption keys for IaaS virtual machines

Implement and Manage Windows Server high availability (10–15%)

Implement a Windows Server failover cluster

Implement a failover cluster on-premises, hybrid, or cloud-only
Create a Windows failover cluster
Implement a stretch cluster across datacenters or Azure regions
Configure storage for failover clustering
Modify quorum options
Configure network adapters for failover clustering
Configure cluster workload options
Configure cluster sets
Configure Scale-Out File servers
Create an Azure witness
Configure a floating IP address for the cluster
Implement load balancing for the failover cluster

Manage failover clustering

Implement cluster-aware updating
Recover a failed cluster node
Upgrade a node to Windows Server 2022
Failover workloads between nodes
Install Windows updates on cluster nodes
Manage failover clusters using Windows Admin Center

Implement and manage Storage Spaces Direct

Create a failover cluster using Storage Spaces Direct
Upgrade a Storage Spaces Direct node
Implement networking for Storage Spaces Direct
Configure Storage Spaces Direct

Implement disaster recovery (10–15%)

Manage backup and recovery for Windows Server

Back up and restore files and folders to Azure Recovery Services Vault
Install and manage Azure Backup Server
Back up and recover using Azure Backup Server
Manage backups in Azure Recovery Services Vault
Create a backup policy
Configure backup for Azure VM using the built-in backup agent
Recover VM using temporary snapshots
Recover VMs to new Azure VMs
Restore a VM

Implement disaster recovery by using Azure Site Recovery

Configure Azure Site Recovery networking
Configure Site Recovery for on-premises VMs
Configure a recovery plan
Configure Site Recovery for Azure VMs
Implement VM replication to secondary datacenter or Azure region
Configure Azure Site Recovery policies

Protect virtual machines by using Hyper-V replicas

Configure Hyper-V hosts for replication
Manage Hyper-V replica servers
Configure VM replication
Perform a failover

Migrate servers and workloads (20–25%)

Migrate on-premises storage to on-premises servers or Azure

Transfer data and share
Cut over to a new server by using Storage Migration Service (SMS)
Use Storage Migration Service to migrate to Azure VMs
Migrate to Azure file shares

Migrate on-premises servers to Azure

Deploy and configure Azure Migrate appliance
Migrate VM workloads to Azure IaaS
Migrate physical workloads to Azure IaaS
Migrate by using Azure Migrate

Migrate workloads from previous versions to Windows Server 2022

Migrate IIS
Migrate Hyper-V hosts
Migrate RDS host servers
Migrate DHCP
Migrate print servers

Migrate IIS workloads to Azure

Migrate IIS workloads to Azure Web Apps
Migrate IIS workloads to containers

Migrate an AD DS infrastructure to Windows Server 2022 AD DS

Migrate AD DS objects, including users, groups and Group Policies using AD Migration Tool
Migrate to a new Active Directory forest
Upgrade an existing forest

Monitor and troubleshoot Windows Server environments (20–25%)

Monitor Windows Server by using Windows Server tools and Azure services

Monitor Windows Server by using Performance Monitor
Create and configure Data Collector Sets
Monitor servers and configure alerts by using Windows Admin Center
Analyze Windows Server system data by using System Insights
Manage event logs
Deploy Azure Monitor agents
Collect performance counters to Azure
Create alerts
Monitor Azure VMs by using Azure diagnostics extension
Monitor Azure VMs performance by using VM Insights

Troubleshoot Windows Server on-premises and hybrid networking

Troubleshoot hybrid network connectivity
Troubleshoot on-premises connectivity

Troubleshoot Windows Server virtual machines in Azure

Troubleshoot deployment failures
Troubleshoot booting failures
Troubleshoot VM performance issues
Troubleshoot VM extension issues
Troubleshoot disk encryption issues
Troubleshoot storage
Troubleshoot VM connection issues

Troubleshoot Active Directory

Restore objects from AD recycle bin
Recover Active Directory database using Directory Services Restore mode
Recover SYSVOL
Troubleshoot Active Directory replication
Troubleshoot Hybrid authentication issues
Troubleshoot on-premises Active Directory