AZ-801T00 Configuring Windows Server Hybrid Advanced Services

1 – Implement Windows Server IaaS VM network security

• Implement network security groups and Windows IaaS VMs
• Implement adaptive network hardening
• Implement Azure Firewall and Windows IaaS VMs
• Implement Windows firewall with Windows Server IaaS VMs
• Choose the appropriate filtering solution
• Deploy and configure Azure firewall using the Azure portal
• Capture network traffic with network watcher
• Log network traffic to and from a VM using the Azure portal

2 – Audit the security of Windows Server IaaS Virtual Machines

• Describe Azure Security Center
• Enable Azure Security Center in hybrid environments
• Implement and assess security policies
• Protect your resources with Azure Security Center
• Implement Azure Sentinel

3 – Manage Azure updates

• Describe update management
• Enable update management
• Deploy updates
• View update assessments
• Manage updates for your Azure Virtual Machines

4 – Create and implement application allowlists with adaptive application control

• Describe adaptive application control
• Implement adaptive application control policies

5 – Configure BitLocker disk encryption for Windows IaaS Virtual Machines

• Describe Azure Disk Encryption and server-side encryption
• Configure Key Vault for Azure Disk Encryption
• Encrypt Azure IaaS Virtual Machine hard disks
• Back up and recover data from encrypted disks
• Create and encrypt a Windows Virtual Machine

6 – Implement change tracking and file integrity monitoring for Windows IaaS VMs

• Implement Change Tracking and Inventory
• Manage Change Tracking and Inventory
• Manage tracked files
• Implement File Integrity Monitoring
• Select and monitor entities
• Use File Integrity Monitoring

7 – Secure Windows Server DNS

• Implement split-horizon DNS
• Create DNS policies
• Implement DNS policies
• Secure Windows Server DNS
• Implement DNSSEC

8 – Secure Windows Server user accounts

• Configure user account rights
• Protect user accounts with the Protected Users group
• Describe Windows Defender Credential Guard
• Block NTLM authentication
• Locate problematic accounts

9 – Windows Server update management

• Explore Windows Update
• Outline Windows Server Update Services server deployment options
• Define Windows Server Update Services update management process
• Describe the process of Update Management

10 – Introduction to Cluster Shared Volumes

• Determine the functionality of Cluster Shared Volumes
• Explore the architecture and components of Cluster Shared Volumes
• Implement Cluster Shared Volumes

11 – Implement Windows Server failover clustering

• Define Windows Server failover clustering
• Plan Windows Server failover clustering
• Implement Windows Server failover clustering
• Manage Windows Server failover clustering
• Implement stretch clusters
• Define cluster sets

12 – Implement high availability of Windows Server VMs

• Select high-availability options for Hyper-V
• Consider network load balancing for Hyper-V VMs
• Implement Hyper-V VM live migration
• Implement Hyper-V VMs storage migration

13 – Implement Windows Server File Server high availability

• Explore the Windows Server File Server high-availability options
• Define Cluster Shared Volumes
• Implement Scale-Out File Server
• Implement Storage Replica

14 – Implement scale and high availability with Windows Server VM

• Describe virtual machine scale sets
• Implement scaling
• Implement load-balancing VMs
• Create a virtual machine scale set in the Azure portal
• Describe Azure Site Recovery
• Implement Azure Site Recovery

15 – Implement Hyper-V Replica

• Define Hyper-V Replica
• Plan for Hyper-V Replica
• Configure and implement Hyper-V Replica
• Define extended replication
• Define Azure Site Recovery
• Implement Site Recovery from on-premises site to Azure
• Implement Site Recovery from on-premises site to on-premises site

16 – Implement hybrid backup and recovery with Windows Server IaaS

• Describe Azure Backup
• Implement recovery vaults
• Implement Azure Backup policies
• Recover Windows IaaS Virtual Machines
• Perform file and folder recovery
• Perform backup and restore of on-premises workloads
• Manage Azure Virtual Machine backups with Azure Backup service

17 – Protect your on-premises infrastructure from disasters with Azure Site Recovery

• Azure Site Recovery overview
• Workloads supported for protection with Azure Site Recovery
• Run a disaster recovery drill
• Failover and failback

18 – Protect your Azure infrastructure with Azure Site Recovery

• What is Azure Site Recovery
• Prepare for disaster recovery with Azure Site Recovery
• Run a disaster recovery drill
• Failover and failback using Azure Site Recovery

19 – Protect your virtual machines by using Azure Backup

• Azure Backup features and scenarios
• Back up an Azure virtual machine by using Azure Backup
• Restore virtual machine data

20 – Migrate on-premises Windows Server instances to Azure IaaS virtual machines

• Plan your migration
• Describe Azure Migrate
• Perform server assessment
• Assess physical servers with Azure Migrate
• Migrate Windows Server workloads by using Azure Migrate

21 – Upgrade and migrate Windows Server IaaS virtual machines

• Describe Azure Migrate
• Migrate Windows Server workloads by using Azure Migrate
• Describe storage migration
• Migrate file servers by using Storage Migration Service

22 – Active Directory Domain Services migration

• Examine upgrade vs. migration
• Upgrade a previous version of Active Directory Domain Services to Windows Server 2022
• Migrate to Active Directory Domain Services in Windows Server 2022 from a previous version
• Explore the Active Directory Migration Tool

23 – Migrate file server workloads using Storage Migration Service

• Storage Migration Service overview and usage scenarios
• Storage migration requirements
• Migrate a server with Storage migration
• Evaluate storage migration considerations

24 – Migrate Windows Server roles

• Describe the Windows Server Migration Tools
• Install the Migration Tools
• Migrate roles using the Migration Tools

25 – Monitor Windows Server IaaS Virtual Machines and hybrid instances

• Enable Azure Monitor for Virtual Machines
• Monitor an Azure Virtual Machine with Azure Monitor
• Enable Azure Monitor in hybrid scenarios
• Collect data from a Windows computer in a hybrid environment
• Integrate Azure Monitor with Microsoft Operations Manager

26 – Monitor your Azure virtual machines with Azure Monitor

• Monitoring for Azure VMs
• Monitor VM host data
• Use Metrics Explorer to view detailed host metrics
• Collect client performance counters by using VM insights
• Collect VM client event logs

27 – Monitor Windows Server performance

• Use Performance Monitor to identify performance problems
• Use Resource Monitor to review current resource usage
• Review reliability with Reliability Monitor
• Implement a performance monitoring methodology
• Use Data Collector Sets to analyze server performance
• Monitor network infrastructure services
• Monitor virtual machines running Windows Server
• Monitor performance with Windows Admin Center
• Use System Insights to help predict future capacity issues
• Optimize the performance of Windows Server

28 – Manage and monitor Windows Server event logs

• Describe Windows Server event logs
• Use Windows Admin Center to review logs
• Use Server Manager to review logs
• Use custom views
• Implement event log subscriptions

29 – Implement Windows Server auditing and diagnostics

• Describe basic auditing categories
• Describe advanced categories
• Log user access
• Enable setup and boot event collection

30 – Troubleshoot on-premises and hybrid networking

• Diagnose DHCP problems
• Diagnose DNS problems
• Diagnose IP configuration issues
• Diagnose routing problems
• Use Packet Monitor to help diagnose network problems
• Use Azure Network Watcher to help diagnose network problems

31 – Troubleshoot Windows Server Virtual Machines in Azure

• Troubleshoot VM deployment
• Troubleshoot VM startup
• Troubleshoot VM extensions
• Troubleshoot VM connectivity
• Troubleshoot VM performance
• Troubleshoot VM storage

32 – Troubleshoot Active Directory

• Recover objects from the AD recycle bin
• Recover the AD DS database
• Recover SYSVOL
• Troubleshoot AD DS replication
• Troubleshoot hybrid authentication issues