AZ-800/AZ-801 : Microsoft Windows Server Hybrid Administrator Associate

Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-800 & AZ-801)

Overview

The Microsoft Certified: Windows Server Hybrid Administrator Associate certification validates your expertise in configuring, managing, and securing Windows Server workloads across on-premises, hybrid, and cloud environments. To earn this credential, candidates must pass two complementary exams: Exam AZ-800: Administering Windows Server Hybrid Core Infrastructure and Exam AZ-801: Configuring Windows Server Hybrid Advanced Services.

This certification program establishes your ability to integrate Windows Server environments with Microsoft Azure services, seamlessly bridging traditional data center operations with modern cloud management paradigms. It emphasizes core server operations, identity synchronization via Microsoft Entra ID, advanced compute and storage, high availability, disaster recovery, and robust hybrid security.

Benefits

• Industry-Recognized Credential: Demonstrates professional mastery of modern hybrid enterprise infrastructure to employers worldwide.
• Bridging On-Premises and Cloud: Validates in-depth knowledge of hybrid technologies, positioning you at the intersection of traditional system administration and Azure Cloud Architecture.
• Enhanced Career Mobility: Unlocks competitive opportunities for systems engineers, enterprise administrators, and cloud operations specialists.
• Operational Efficiency: Empowers professionals to automate routine administrative tasks using PowerShell, Windows Admin Center, and Azure management tooling.
• Security and Resilience Focus: Proves competence in implementing zero-trust security principles, advanced disaster recovery, and hybrid migration strategies.

Who should take this exam

• Windows Server Administrators seeking to modernize their skillset by managing hybrid resources.
• Enterprise Systems Engineers responsible for on-premises infrastructure and Azure integration.
• Hybrid Infrastructure Specialists tasked with migrating workloads, identity, and storage to the cloud.
• Network and Security Administrators responsible for hardening hybrid server environments, configuring firewalls, and managing disaster recovery.
• IT Professionals preparing for modern enterprise IT roles that demand both on-premises data center management and Azure governance expertise.

Prerequisites

• Practical experience with Windows Server operating systems (Windows Server 2016, 2019, 2022) in enterprise environments.
• Fundamental knowledge of Active Directory Domain Services (AD DS), DNS, DHCP, and group policy management.
• Hands-on familiarity with core Microsoft Azure IaaS services, including virtual networks, virtual machines, and storage accounts.
• Basic working understanding of PowerShell scripting and Windows Admin Center for centralized management.

Learning outcomes

• Deploy and manage Active Directory Domain Services (AD DS) in on-premises and hybrid environments.
• Implement and manage hybrid storage, file sync, and compute workloads using Azure Arc and Windows Admin Center.
• Configure and troubleshoot hybrid networking architectures including software-defined networking (SDN) and VPN connections.
• Administer Hyper-V and Azure Virtual Machines with high availability, clustering, and live migration.
• Secure Windows Server hybrid infrastructure against modern cyber threats through auditing, credential protection, and update management.
• Implement Azure Site Recovery, hybrid backup solutions, and advanced disaster recovery plans.

Career opportunities

• Hybrid Systems Administrator: Manage multi-site Windows Server deployments connected to cloud subscriptions.
• Windows Server Infrastructure Engineer: Architect, deploy, and maintain core on-premises and hybrid server platforms.
• Azure Infrastructure Specialist: Oversee hybrid identity, compute, and management tools across enterprise footprints.
• Systems Support Lead: Provide escalated engineering support for enterprise Active Directory, storage, and virtualization.
• Enterprise Migration Engineer: Plan and execute migrations of legacy Windows Server workloads into hybrid and native Azure environments.

Exam syllabus

AZ-800: Deploy and Manage Active Directory Domain Services (AD DS) in On-Premises and Hybrid Environments (30–35%)

• Deploy and manage AD DS domain controllers on-premises and in Microsoft Azure.
• Configure and manage multi-site, multi-domain, and multi-forest architectures.
• Implement hybrid identity synchronization using Microsoft Entra Connect (Azure AD Connect) and cloud sync.
• Manage AD DS objects, organizational units (OUs), security groups, and Group Policy Objects (GPOs).

AZ-800: Manage Windows Servers and Workloads in a Hybrid Environment (10–15%)

• Manage Windows Servers using Windows Admin Center, Server Manager, and PowerShell remoting.
• Onboard and manage hybrid server instances using Azure Arc-enabled servers.
• Implement and manage Azure Automation Update Management and hybrid runbooks.

AZ-800: Manage Virtual Machines and Containers (15–20%)

• Configure and administer Hyper-V VMs, virtual switches, and virtual hard disks.
• Deploy and manage containerized applications using Windows Server Containers and Docker.
• Provision, size, and maintain Azure IaaS virtual machines running Windows Server.

AZ-800: Implement and Manage an On-Premises and Hybrid Networking Infrastructure (15–20%)

• Implement and troubleshoot on-premises and hybrid IP addressing, DNS infrastructure, and DHCP scopes.
• Deploy and manage remote access solutions, including Azure Network Adapter and Point-to-Site/Site-to-Site VPNs.
• Configure hybrid network security, routing tables, and network security groups (NSGs).

AZ-800: Manage Storage and File Services (15–20%)

• Configure Storage Spaces, Storage Spaces Direct (S2D), and storage tiering.
• Implement Azure File Sync across multiple endpoints and on-premises file servers.
• Configure iSCSI target storage, SMB shares, and advanced file permissions.

AZ-801: Secure Windows Server On-Premises and Hybrid Infrastructures (25–30%)

• Secure Windows Server operating systems, local credentials, and administrative accounts with LAPS.
• Harden hybrid Active Directory and integrate security logging with Microsoft Sentinel and Microsoft Defender for Identity.
• Configure BitLocker, Windows Defender Credential Guard, and secure network communication protocols.

AZ-801: Implement and Manage Windows Server High Availability (10–15%)

• Implement and configure Failover Clustering for Hyper-V and enterprise file storage.
• Manage cluster storage, cluster shared volumes (CSV), and quorum configurations with Cloud Witness.
• Configure Network Load Balancing (NLB) and hyper-converged infrastructure deployments.

AZ-801: Implement Disaster Recovery (10–15%)

• Configure and execute backup and restore processes using Azure Backup and Windows Server Backup.
• Implement and test disaster recovery plans for on-premises workloads using Azure Site Recovery (ASR).
• Configure Hyper-V Replica for multi-site business continuity.

AZ-801: Migrate Servers and Workloads (20–25%)

• Migrate on-premises storage and file shares using the Storage Migration Service.
• Migrate on-premises workloads and physical/virtual machines to Azure using Azure Migrate.
• Transition AD DS, DHCP, and DNS services to modern Windows Server and Azure infrastructure.

AZ-801: Monitor and Troubleshoot Windows Server Environments (20–25%)

• Monitor hybrid system health and performance using Azure Monitor and Performance Monitor.
• Analyze event logs, troubleshoot connectivity, and resolve Active Directory replication failures.
• Diagnose and remediate storage degradation, cluster failover incidents, and high availability bottlenecks.