AZ-800: Administering Windows Server Hybrid Core Infrastructure

Introduction to AD DS
Learn about the fundamentals of Active Directory Domain Services (AD DS) in Windows Server 2019, including forests, domains, sites, domain controllers, organizational units (OUs), users, and groups.

Lessons
•   Define AD DS
•   Define users, groups, and computers
•   Define AD DS forests and domains
•   Define OUs
•   Manage objects and their properties in AD DS

Manage AD DS domain controllers and FSMO roles
Learn about essential AD DS domain controllers management and maintenance tasks, including their deployment, backup and recovery, and schema management. Find out about design considerations for optimal number, roles, and location of domain controllers.

Lessons
•   Deploy AD DS domain controllers
•   Maintain AD DS domain controllers
•   Manage the AD DS Global Catalog role
•   Manage AD DS operations masters
•   Manage AD DS schema

Implement Group Policy Objects
Learn to implement Group Policy Objects (GPOs) in Active Directory Domain Services (AD DS) in Windows Server 2019.

Lessons
•   Define GPOs
•   Implement GPO scope and inheritance
•   Define domain-based GPOs
•   Create and configure a domain-based GPO
•   Define GPO storage
•   Define administrative templates

Manage advanced features of AD DS
Learn about advanced AD DS administration tasks, including creating trust relationships, implementing Enhanced Security Administrative Environment (ESAE) forests, monitoring and troubleshooting AD DS replication, and creating custom AD DS partitions.

Lessons
•   Create trust relationships
•   Implement ESAE forests
•   Monitor and troubleshoot AD DS
•   Create custom AD DS partitions

Implement hybrid identity with Windows Server
In this module, you’ll learn to configure an Azure environment so that Windows IaaS workloads requiring Active Directory are supported. You’ll also learn to integrate on-premises Active Directory Domain Services (AD DS) environment into Azure.

Lessons
•   Select a Microsoft Entra integration model
•   Plan for Microsoft Entra integration
•   Prepare on-premises Active Directory for directory synchronization
•   Install and configure directory synchronization with Microsoft Entra Connect
•   Implement Seamless Single Sign-On
•   Enable Microsoft Entra login in for Windows VM in Azure
•   Describe Microsoft Entra Domain Services
•   Implement and configure Microsoft Entra Domain Services
•   Manage Windows Server 2019 in a Microsoft Entra Domain Services environment
•   Create and configure a Microsoft Entra Domain Services instance
•   Join a Windows Server VM to a managed domain

Deploy and manage Azure IaaS Active Directory domain controllers in Azure
In this module, you’ll learn how to extend an existing Active Directory environment into Azure by placing IaaS VMs configured as domain controllers onto a specially configured Azure virtual network (VNet) subnet.

Lessons
•   Select an option to implement directory and identity services using Active •   Directory Domain Services in Azure
•   Deploy and configure Active Directory Domain Services domain controllers in Azure VMs
•   Install a replica Active Directory domain controller in an Azure VM
•   Install a new Active Directory forest on an Azure VNet

Perform Windows Server secure administration
Understand the principle of least privilege, know when to use privileged access workstations, and be able to identify built-in privileged accounts.

Lessons
•   Define least privilege administration
•   Implement delegated privileges
•   Use privileged access workstations
•   Use jump servers

Describe Windows Server administration tools
Select the most appropriate Windows Server administration tool for a given situation and learn how to use that tool.

Lessons
•   Explore Windows Admin Center
•   Use Server Manager
•   List Remote Server Administration Tools
•   Use Windows PowerShell
•   Use Windows PowerShell to remotely administer a server

Perform post-installation configuration of Windows Server
Learn to perform post-installation configuration of Windows Server by using several methods and tools.

Lessons
•   List the available post-installation configuration tools
•   Configure Server Core using Sconfig
•   Use DSC to configure Windows Server
•   Perform post-installation configuration with Windows Admin Center
•   Configure a server with answer files

Just Enough Administration in Windows Server
Streamline administration of Windows Server environments with Just Enough Administration (JEA). Limit privileged operations to a set of specified PowerShell cmdlets, parameters and variables, and limit which users can connect to JEA endpoints.

Lessons
•   Explain the concept of Just Enough Administration (JEA)
•   Define role capabilities for a JEA endpoint
•   Create a session configuration file to register a JEA endpoint
•   Describe how JEA endpoints work to limit access to a PowerShell session
•   Create and connect to a JEA endpoint
•   Demonstration: Connect to a JEA endpoint

Administer and manage Windows Server IaaS Virtual Machine remotely
You’ll be able to use suitable tools and techniques to manage Windows IaaS VMs remotely. You’ll also be able to restrict administrative connections to those VMs.

Lessons
•   Select the appropriate remote administration tool
•   Manage Windows Virtual Machines with Azure Bastion
•   Create an Azure Bastion host
•   Configure just-in-time administration

Manage hybrid workloads with Azure Arc
You’ll learn to describe Azure Arc, implement Azure Arc with on-premises server instances, deploy Azure policies with Azure Arc, and use role-based access control (RBAC) to restrict access to Log Analytics data.

Lessons
•   Describe Azure Arc
•   Onboard Windows Server instances
•   Connect hybrid machines to Azure from the Azure portal
•   Use Azure Arc to manage Windows Server instances
•   Restrict access with RBAC

Configure and manage Hyper-V
Learn about virtualization and the Microsoft Hyper-V role with Windows Server. Learn about best practices for preparing Hyper-V hosts, in addition to Hyper-V networking features and implementing nested virtualization.

Lessons
•   Define Hyper-V
•   Define Hyper-V Manager
•   Configure Hyper-V hosts using best practices
•   Configure Hyper-V networking
•   Assess advanced Hyper-V networking features
•   Define nested virtualization

Configure and manage Hyper-V virtual machines
Learn about configuring and managing Hyper-V virtual machines in Windows Server.

Lessons
•   List the virtual machine configuration versions
•   List the virtual machine generation versions
•   List available VHD formats and types
•   Create and configure VMs
•   Determine storage options for VMs
•   Define shared VHDs and VHD Sets
•   Implement guest clusters using shared VHDX

Secure Hyper-V workloads
Learn about securing Hyper-V workloads in Windows Server, installing and configuring the Host Guardian Service (HGS), the attestation modes available with the HGS, and the creation and deployment of shielded virtual machines (VMs).

Lessons
•   Define guarded fabric
•   Define the Host Guardian Service
•   Explore TPM-trusted attestation
•   Define KPS
•   Determine key features of shielded VMs
•   Compare encryption-supported and shielded VMs in a guarded fabric
•   Implement a shielded VM

Run containers on Windows Server
Learn about Windows Server and Hyper-V containers, associated isolation modes, running containers, and preparing the Windows Server host for running containerized workloads. Learn about Docker, preparing Windows Server for running container workloads, and managing containers.

Lessons
•   Define containers
•   List the differences between containers and VMs
•   Define Windows Server and Hyper-V containers and isolation modes
•   Explore Docker
•   Prepare a Windows Server 2019 host for container deployment
•   Security, Storage, and Networking with Windows containers

Orchestrate containers on Windows Server using Kubernetes
Learn about Kubernetes, containers, container orchestration, and Kubernetes orchestration in Windows Server 2019. Also learn the process for deploying a Kubernetes cluster on Windows and describe how to use Azure Arc for Kubernetes.

Lessons
•   Define orchestration
•   Define Kubernetes
•   Deploy Kubernetes resources
•   Create a Kubernetes cluster on Windows
•   Define Azure Arc
•   Connect an Azure Arc-enabled Kubernetes cluster to Azure Arc

Plan and deploy Windows Server IaaS Virtual Machines
You’ll be able to describe Azure compute and storage in relation to Azure VMs, and deploy Azure VMs by using the Azure portal, Azure CLI, or templates.

Lessons
•   Describe Azure compute
•   Describe Virtual Machine storage
•   Deploy Azure Virtual Machines
•   Create a windows Virtual Machine using the portal
•   Create a windows Virtual Machine using Azure CLI
•   Deploy Azure Virtual Machines using templates
•   Describe additional management optimization options

Customize Windows Server IaaS Virtual Machine images
You’ll be able to create new VMs from generalized images and use Azure Image Builder templates to create and manage images in Azure.

Lessons
•   Create a generalized image
•   Create a new Virtual Machine from a managed image
•   Create a managed image of a generalized virtual machine in Azure
•   Create a Virtual Machine from a managed image
•   Implement Azure Image Builder
•   Create a windows Virtual Machine using Azure Image Builder template
•   Create a Windows Virtual Machine with Azure Image Builder using PowerShell

Automate the configuration of Windows Server IaaS Virtual Machines
You’ll be able to deploy Desired State Configuration (DSC) extensions, implement those extensions to remediate noncompliant servers, and use custom script extension.

Lessons
•   Describe Azure Automation
•   Implement Azure Automation with DSC
•   Remediate noncompliant servers
•   Describe Custom Script Extensions
•   Configure a Virtual Machine by using DSC

Deploy and manage DHCP
Learn to implement automatic IP configuration with Dynamic Host Configuration Protocol (DHCP) in Windows Server 2019.

Lessons
•   Use DHCP to simplify IP configuration
•   Install and configure the DHCP role
•   Configure DHCP options
•   Configure DHCP scopes
•   Select DHCP high availability options
•   Implement DHCP Failover

Implement Windows Server DNS
Learn to deploy and configure name resolution with Windows Server DNS.

Lessons
•   Explore the DNS architecture
•   Work with DNS zones and records
•   Install and configure the DNS role
•   Implement DNS forwarding

Implement IP Address Management
Learn to implement IPAM to help manage your organization’s DHCP and DNS servers and to manage IP address space.

Lessons
•   Define IP Address Management
•   Deploy IP Address Management
•   Administer IP Address Management
•   Configure IP Address Management options
•   Manage DNS zones with IP Address Management
•   Manage DHCP servers with IP Address Management
•   Use IP Address Management to manage IP addressing

Implement remote access
Learn to enable remote access within your organization, and to publish your organization’s applications and websites by using Windows Server Web Application Proxy (WAP).

Lessons
•   Examine the remote access options in Windows Server
•   Select and set up VPNs
•   Use NPS to create and enforce network access policies
•   Plan and implement NPS
•   Deploy a PKI for remote access
•   Use WAP as a reverse web proxy

Implement hybrid network infrastructure
You learn to connect your on-premises environment to Azure, implement subnets and routing between your on-premises and cloud environments, and ensure that workloads in the cloud and on-premises perform DNS resolution to locate each other.

Lessons
•   Describe Azure network topologies
•   Implement Azure VPN options
•   Create a route-based VPN gateway using the Azure portal
•   Implement Azure ExpressRoute
•   Configure Azure Virtual WAN
•   Implement DNS in hybrid environments

Implement DNS for Windows Server IaaS VMs
In this module, you’ll learn to configure DNS for Windows Server IaaS VMs, choose the appropriate DNS solution for your organization’s needs, and run a DNS server in a Windows Server Azure IaaS VM.

Lessons
•   Understand Azure DNS
•   Implement Azure DNS
•   Create an Azure DNS zone and record using the Azure portal
•   Implement DNS with Azure IaaS virtual machines
•   Implement split-horizon DNS in Azure
•   Troubleshoot DNS

Implement Windows Server IaaS VM IP addressing and routing
In this module, you’ll learn how to manage Microsoft Azure virtual networks (VNets) and IP address configuration for Windows Server infrastructure as a service (IaaS) virtual machines (VM)s.

Lessons
•   Implement a virtual network
•   Implement IaaS VM IP addressing
•   Assign and manage IP addresses
•   Configure a private IP address for a virtual machine using the Azure portal
•   Create a virtual machine with a static public IP address using the Azure portal
•   Implement IaaS virtual machine IP routing
•   Implement IPv6 for Windows Server IaaS virtual machines

Manage Windows Server file servers
Learn about the core functionality of the Windows Server File Server role, and how to configure and manage that core functionality.

Lessons
•   Define the Windows Server file system
•   List the benefits and uses of File Server Resource Manager
•   Define SMB and its security considerations
•   Configure SMB protocol
•   Define Volume Shadow Copy Service

Implement Storage Spaces and Storage Spaces Direct
Learn about the core functionality, benefits, use cases, and implementation of Storage Spaces and Storage Spaces Direct in Windows Server 2019.

Lessons
•   Define the Storage Spaces architecture and its components
•   List the functionalities, benefits, and use cases of Storage Spaces
•   Implement Storage Spaces
•   List the functionalities, components, benefits, and use cases of Storage Spaces Direct
•   Implement Storage Spaces Direct

Implement Windows Server Data Deduplication
Learn about the core functionality, benefits, use cases, and implementation of Data Deduplication in Windows Server 2019.

Lessons
•   Define the architecture, components, and functionality of Data Deduplication
•   Define the use cases and interoperability of Data Deduplication
•   Implement Data Deduplication
•   Manage and maintain Data Deduplication

Implement Windows Server iSCSI
Learn about the core functionality, benefits, use cases, and implementation of Internet Small Computer Systems Interface (iSCSI) in Windows Server 2019.

Lessons
•   List the functionalities, components, and use cases of iSCSI
•   List the considerations for implementing iSCSI
•   Implement iSCSI
•   Configure high availability for iSCSI

Implement Windows Server Storage Replica
Learn about the core functionality, benefits, use cases, and implementation of Storage Replica in Windows Server 2019.

Lessons
•   List the functionalities and components of Storage Replica
•   Examine the prerequisites for implementing Storage Replica
•   Implement Storage Replica by using Windows Admin Center
•   Implement Storage Replica by using Windows PowerShell

Implement a hybrid file server infrastructure
In this module, you’ll learn to deploy Azure File Sync, migrate from DFS, and use Storage Migration Services to migrate file servers to Azure.

Lessons
•   Describe Azure File services
•   Configure Azure Files
•   Configure connectivity to Azure Files
•   Describe Azure File Sync
•   Implement Azure File Sync
•   Deploy Azure File Sync
•   Deploy Azure File Sync 2
•   Manage cloud tiering
•   Migrate from DFSR to Azure File Sync