AZ-801T00: Configuring Windows Server Hybrid Advanced Services

• Secure Windows Server on-premises and hybrid infrastructures (25–30%)

• Implement and manage Windows Server high availability (10–15%)

• Implement disaster recovery (10–15%)

• Migrate servers and workloads (20–25%)

• Monitor and troubleshoot Windows Server environments (20–25%)

• Configure and manage Exploit Protection

• Configure and manage Windows Defender Application Control

• Configure and manage Microsoft Defender for Endpoint

• Configure and manage Windows Defender Credential Guard

• Configure SmartScreen

• Implement operating system security by using Group Policies

• Configure password policies

• Enable password block lists

• Manage protected users

• Manage account security on an RODC

• Harden domain controllers

• Configure authentication policy silos

• Restrict access to domain controllers

• Configure account security

• Manage AD built-in administrative groups

• Manage AD delegation

• Implement and manage Microsoft Defender for Identity

• Monitor on-premises servers and Azure IaaS VMs by using Microsoft Sentinel

• Identify and remediate security issues on-premises servers and Azure IaaS VMs by using Microsoft Defender for Cloud

• Manage Windows Defender Firewall

• Implement domain isolation

• Implement connection security rules

• Manage Windows BitLocker Drive Encryption (BitLocker)

• Manage and recover encrypted volumes

• Enable storage encryption by using Azure Disk Encryption

• Manage disk encryption keys for IaaS virtual machines

• Implement a failover cluster on-premises, hybrid, or cloud-only

• Create a Windows failover cluster

• Implement a stretch cluster across datacenters or Azure regions

• Configure storage for failover clustering

• Modify quorum options

• Configure network adapters for failover clustering

• Configure cluster workload options

• Configure cluster sets

• Configure Scale-Out File servers

• Create an Azure witness

• Configure a floating IP address for the cluster

• Implement load balancing for the failover cluster

• Implement cluster-aware updating

• Recover a failed cluster node

• Upgrade a node to Windows Server 2022

• Failover workloads between nodes

• Install Windows updates on cluster nodes

• Manage failover clusters using Windows Admin Center

• Create a failover cluster using Storage Spaces Direct

• Upgrade a Storage Spaces Direct node

• Implement networking for Storage Spaces Direct

• Configure Storage Spaces Direct

• Back up and restore files and folders to Azure Recovery Services Vault

• Install and manage Azure Backup Server

• Back up and recover using Azure Backup Server

• Manage backups in Azure Recovery Services Vault

• Create a backup policy

• Configure backup for Azure VM using the built-in backup agent

• Recover VM using temporary snapshots

• Recover VMs to new Azure VMs

• Restore a VM

• Configure Azure Site Recovery networking

• Configure Site Recovery for on-premises VMs

• Configure a recovery plan

• Configure Site Recovery for Azure VMs

• Implement VM replication to secondary datacenter or Azure region

• Configure Azure Site Recovery policies

• Configure Hyper-V hosts for replication

• Manage Hyper-V replica servers

• Configure VM replication

• Perform a failover

• Transfer data and share

• Cut over to a new server by using Storage Migration Service (SMS)

• Use Storage Migration Service to migrate to Azure VMs

• Migrate to Azure file shares

• Deploy and configure Azure Migrate appliance

• Migrate VM workloads to Azure IaaS

• Migrate physical workloads to Azure IaaS

• Migrate by using Azure Migrate

• Migrate IIS

• Migrate Hyper-V hosts

• Migrate RDS host servers

• Migrate DHCP

• Migrate print servers

• Migrate IIS workloads to Azure Web Apps

• Migrate IIS workloads to containers

• Migrate AD DS objects, including users, groups and Group Policies using AD Migration Tool

• Migrate to a new Active Directory forest

• Upgrade an existing forest

• Monitor Windows Server by using Performance Monitor

• Create and configure Data Collector Sets

• Monitor servers and configure alerts by using Windows Admin Center

• Analyze Windows Server system data by using System Insights

• Manage event logs

• Deploy Azure Monitor agents

• Collect performance counters to Azure

• Create alerts

• Monitor Azure VMs by using Azure diagnostics extension

• Monitor Azure VMs performance by using VM Insights

• Troubleshoot hybrid network connectivity

• Troubleshoot on-premises connectivity

• Troubleshoot deployment failures

• Troubleshoot booting failures

• Troubleshoot VM performance issues

• Troubleshoot VM extension issues

• Troubleshoot disk encryption issues

• Troubleshoot storage

• Troubleshoot VM connection issues

• Restore objects from AD recycle bin

• Recover Active Directory database using Directory Services Restore mode

• Recover SYSVOL

• Troubleshoot Active Directory replication

• Troubleshoot Hybrid authentication issues

• Troubleshoot on-premises Active Directory

Before attending this course, students must have:

• Experience with managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including AD DS, DNS, DFS, Hyper-V, and File and Storage Services

• Experience with common Windows Server management tools (implied in the first prerequisite).

• Basic knowledge of core Microsoft compute, storage, networking, and virtualization technologies (implied in the first prerequisite).

• Experience and an understanding of core networking technologies such as IP addressing, name resolution, and Dynamic Host Configuration Protocol (DHCP)

• Experience working with and an understanding of Microsoft Hyper-V and basic server virtualization concepts

• An awareness of basic security best practices

• Basic understanding of security-related technologies (firewalls, encryption, multi-factor authentication, SIEM/SOAR).

• Basic knowledge of on-premises resiliency Windows Server-based compute and storage technologies (Failover Clustering, Storage Spaces).

• Basic experience with implementing and managing IaaS services in Microsoft Azure

• Basic knowledge of Azure Active Directory

• Experience working hands-on with Windows client operating systems such as Windows 10 or Windows 11

• Basic experience with Windows PowerShell

An understanding of the following concepts as related to Windows Server technologies:

• High availability and disaster recovery
• Automation
• Monitoring
• Troubleshooting