Microsoft Windows Server Hybrid Administrator (AZ-800) Practice Test
This exam was retired on Wednesday, September 30, 2026.
Microsoft retires AZ-800 and AZ-801 on September 30, 2026 ('These exams will retire on September 30, 2026, at 5:00 PM Central Standard Time'). Each exam page lists only the other as a related exam; no successor has been announced.
Microsoft has not announced a direct replacement.
Source: learn.microsoft.comExplore the details of Microsoft Windows Server Hybrid Administrator (AZ-800) and review the exam update to find your next step.
Exam overview and details
The Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-800) certification validates the advanced technical skills required to deploy, manage, secure, and monitor Windows Server workloads in on-premises, hybrid, and Infrastructure-as-a-Service (IaaS) environments. This certification focuses on the critical integration points between traditional data centers and Azure, covering Windows Server administration, hybrid networking, identity services, and workload migration. Earning this credential demonstrates a professional's ability to implement and manage a cohesive hybrid infrastructure, a core competency for modern enterprises leveraging cloud scalability while maintaining on-premises investments. It positions holders as experts in bridging the gap between legacy systems and cloud-native services, making them invaluable assets in digital transformation initiatives. The certification is a direct response to industry demand for administrators who can operate seamlessly across both domains, ensuring security, compliance, and operational efficiency in complex hybrid architectures.
Sample Questions
Choose an answer and explore the explanation to see how practice works.
Blue Yonder Airlines is preparing an AZ-800 remediation wave for Boot diagnostics. An Azure VM stops during boot after a driver update. The network adapter never initializes, but operators need console screenshots and serial logs. The pilot includes Server 2019, Server 2022, and Windows Server 2025 where supported; a pilot group must keep working while the wider rollout is staged. Which option best satisfies the technical and operational requirement?
Fabrikam Manufacturing is preparing an AZ-800 remediation wave for Cloud witness. A two-node cluster spans two small sites and has no third physical site for a file share witness. Internet access to Azure Storage is available. The pilot includes Server 2019, Server 2022, and Windows Server 2025 where supported; the incident report includes unrelated printer and VPN tickets. Which option best satisfies the technical and operational requirement?
Blue Yonder Airlines is preparing an AZ-800 remediation wave for Windows LAPS. Server 2022 and Windows 11 endpoints need local admin password rotation, encrypted storage, and retrieval auditing. Some devices are cloud managed. The pilot includes Server 2019, Server 2022, and Windows Server 2025 where supported; the change window is limited to 45 minutes. Which option best satisfies the technical and operational requirement?
Fabrikam Manufacturing is preparing an AZ-800 remediation wave for Azure Bastion. Administrators need RDP and SSH access to Azure VMs, but security forbids public IP addresses on workload NICs. The pilot includes Server 2019, Server 2022, and Windows Server 2025 where supported; the change window is limited to 45 minutes. Which option best satisfies the technical and operational requirement?
Fourth Coffee is preparing an AZ-800 remediation wave for Storage Spaces Direct. Four Server 2022 nodes with local NVMe and SSD disks will host highly available Hyper-V storage without a SAN. The pilot includes Server 2019, Server 2022, and Windows Server 2025 where supported; the help desk must be able to reverse the change without rebuilding servers. Which option best satisfies the technical and operational requirement?
Career Opportunities & Salary
Exam insights and study advice
In today's evolving IT landscape, hybrid infrastructure is not an interim state but a permanent strategic architecture for the majority of enterprises. The AZ-800 certification provides tangible, industry-recognized proof of your ability to design, implement, and manage these critical environments. It signals to employers and peers that you possess the specialized, in-demand skills to optimize costs, enhance resilience, and enable business agility by effectively integrating Azure services with Windows Server. This credential directly correlates with career advancement opportunities, such as roles in cloud architecture, senior systems administration, and infrastructure engineering, while commanding a significant salary premium. Microsoft's certification hierarchy ensures it is a respected and trusted benchmark of practical, real-world competency.
What this exam covers
Use the published domain weights to plan your study. Practice results do not predict your certification exam score.
01Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments (30–35%)
Domain 1, Deploy and manage Active Directory Domain Services, organizes related decisions rather than isolated product facts. The current outline includes Deploy and manage domain controllers on-premises; Deploy and manage domain controllers in Azure; Deploy read-only domain controllers (RODCs). Practice by connecting the configuration or recommendation to prerequisites, downstream effects, evidence of success, and a safe correction when the expected result is not observed.
Topics
- Deploy and manage domain controllers on-premises
- Deploy and manage domain controllers in Azure
- Deploy read-only domain controllers (RODCs)
- Manage and troubleshoot flexible single master operation (FSMO) roles
- Configure and manage multi-site, multi-domain, and multi-forest environments
- Configure and manage forest and domain trusts
- Configure and manage AD DS sites
- Configure and manage AD DS replication
- Create and manage AD DS security principals
- Create and manage AD DS users and groups
- Manage users and groups in multi-domain and multi-forest scenarios
- Choose a service account type
- Implement service accounts
- Join Windows Servers to AD DS, Microsoft Entra Domain Services, and Microsoft Entra
- Implement and manage hybrid identities
- Integrate Microsoft Entra ID, AD DS and Microsoft Entra Domain Services
- Implement and manage Microsoft Entra Connect Sync
- Implement and manage Microsoft Entra Cloud Sync
- Implement and manage Microsoft Entra Domain Services
- Implement and manage Microsoft Entra Connect Health
- Manage authentication in on-premises and hybrid environments
- Enable staged rollout features
- Manage Windows Server by using domain-based Group Policies
- Implement Group Policy in AD DS
- Implement Group Policy Preferences in AD DS
- Implement Group Policy in Microsoft Entra Domain Services
Learning objectives
- Deploy and manage domain controllers on-premises
- Deploy and manage domain controllers in Azure
- Deploy read-only domain controllers (RODCs)
- Manage and troubleshoot flexible single master operation (FSMO) roles
- Configure and manage multi-site, multi-domain, and multi-forest environments
- Configure and manage forest and domain trusts
- Configure and manage AD DS sites
- Configure and manage AD DS replication
- Create and manage AD DS security principals
- Create and manage AD DS users and groups
- Manage users and groups in multi-domain and multi-forest scenarios
- Choose a service account type
- Implement service accounts
- Join Windows Servers to AD DS, Microsoft Entra Domain Services, and Microsoft Entra
- Implement and manage hybrid identities
- Integrate Microsoft Entra ID, AD DS and Microsoft Entra Domain Services
- Implement and manage Microsoft Entra Connect Sync
- Implement and manage Microsoft Entra Cloud Sync
- Implement and manage Microsoft Entra Domain Services
- Implement and manage Microsoft Entra Connect Health
- Manage authentication in on-premises and hybrid environments
- Enable staged rollout features
- Manage Windows Server by using domain-based Group Policies
- Implement Group Policy in AD DS
- Implement Group Policy Preferences in AD DS
- Implement Group Policy in Microsoft Entra Domain Services
02Implement and manage an on-premises and hybrid networking infrastructure (15–20%)
Domain 4, Implement and manage an on-premises and hybrid networking infrastructure, organizes related decisions rather than isolated product facts. The current outline includes Implement on-premises and hybrid name resolution; Integrate DNS with AD DS; Create and manage DNS zones and records. Practice by connecting the configuration or recommendation to prerequisites, downstream effects, evidence of success, and a safe correction when the expected result is not observed.
Topics
- Implement on-premises and hybrid name resolution
- Integrate DNS with AD DS
- Create and manage DNS zones and records
- Configure DNS forwarding and conditional forwarding
- Integrate Windows Server DNS with Azure Public DNS, Azure Private DNS, and Azure DNS Private Resolver
- Implement Windows Server DNS policies
- Implement Domain Name System Security Extensions (DNSSEC)
- Manage IP addressing in on-premises and hybrid scenarios
- Implement and manage IP Address Management (IPAM)
- Implement and configure the Dynamic Host Configuration protocol (DHCP) server role
- Resolve IP address issues in hybrid environments
- Create and manage DHCP scopes
- Create and manage IP reservations
- Implement DHCP high availability
- Implement on-premises and hybrid network connectivity
- Implement and manage the Remote Access role
- Implement and manage Azure Network Adapter
- Implement and manage Azure extended network
- Implement and manage the Network Policy and Access Services role
- Implement Web Application Proxy
- Implement site-to-site VPN
- Implement Azure Relay
- Implement Microsoft Entra Private Access
- Implement Microsoft Entra Application Proxy
Learning objectives
- Implement on-premises and hybrid name resolution
- Integrate DNS with AD DS
- Create and manage DNS zones and records
- Configure DNS forwarding and conditional forwarding
- Integrate Windows Server DNS with Azure Public DNS, Azure Private DNS, and Azure DNS Private Resolver
- Implement Windows Server DNS policies
- Implement Domain Name System Security Extensions (DNSSEC)
- Manage IP addressing in on-premises and hybrid scenarios
- Implement and manage IP Address Management (IPAM)
- Implement and configure the Dynamic Host Configuration protocol (DHCP) server role
- Resolve IP address issues in hybrid environments
- Create and manage DHCP scopes
- Create and manage IP reservations
- Implement DHCP high availability
- Implement on-premises and hybrid network connectivity
- Implement and manage the Remote Access role
- Implement and manage Azure Network Adapter
- Implement and manage Azure extended network
- Implement and manage the Network Policy and Access Services role
- Implement Web Application Proxy
- Implement site-to-site VPN
- Implement Azure Relay
- Implement Microsoft Entra Private Access
- Implement Microsoft Entra Application Proxy
03Manage storage and file services (15–20%)
Domain 5, Manage storage and file services, organizes related decisions rather than isolated product facts. The current outline includes Configure and manage Azure Files; Create and manage Azure File Shares; Manage permissions for Azure File Shares. Practice by connecting the configuration or recommendation to prerequisites, downstream effects, evidence of success, and a safe correction when the expected result is not observed.
Topics
- Configure and manage Azure Files
- Create and manage Azure File Shares
- Manage permissions for Azure File Shares
- Configure and manage Azure File Sync
- Monitor File Sync
- Migrate Distributed File System (DFS) to Azure File Sync
- Configure and manage Windows Server file shares
- Configure Windows Server file share access
- Configure file server resource manager (FSRM)
- Configure BranchCache
- Implement and configure Distributed File System (DFS)
- Configure and manage Server Message Block (SMB) over QUIC
- Configure and manage Server Message Block (SMB) options
- Configure Windows Server storage
- Configure disks and volumes
- Configure and manage Storage Spaces
- Configure and manage Storage Replica
- Configure Data Deduplication
- Configure Server Message Block (SMB) direct
- Configure Storage QoS
- Configure file systems
- Configure and manage iSCSI
Learning objectives
- Configure and manage Azure Files
- Create and manage Azure File Shares
- Manage permissions for Azure File Shares
- Configure and manage Azure File Sync
- Monitor File Sync
- Migrate Distributed File System (DFS) to Azure File Sync
- Configure and manage Windows Server file shares
- Configure Windows Server file share access
- Configure file server resource manager (FSRM)
- Configure BranchCache
- Implement and configure Distributed File System (DFS)
- Configure and manage Server Message Block (SMB) over QUIC
- Configure and manage Server Message Block (SMB) options
- Configure Windows Server storage
- Configure disks and volumes
- Configure and manage Storage Spaces
- Configure and manage Storage Replica
- Configure Data Deduplication
- Configure Server Message Block (SMB) direct
- Configure Storage QoS
- Configure file systems
- Configure and manage iSCSI
04Manage virtual machines and containers (15–20%)
Domain 3, Manage virtual machines and containers, organizes related decisions rather than isolated product facts. The current outline includes Manage Hyper-V and guest virtual machines; Enable Enhanced session mode; Manage VMs using PowerShell remoting, PowerShell Direct and Secure Shell (SSH) Direct for Linux VMs. Practice by connecting the configuration or recommendation to prerequisites, downstream effects, evidence of success, and a safe correction when the expected result is not observed.
Topics
- Manage Hyper-V and guest virtual machines
- Enable Enhanced session mode
- Manage VMs using PowerShell remoting, PowerShell Direct and Secure Shell (SSH) Direct for Linux VMs
- Enable nested virtualization
- Configure VM memory
- Configure integration services
- Configure Discrete Device Assignment
- Configure GPU partitioning
- Configure VM resource groups, CPU groups, and hypervisor scheduling types
- Manage VM checkpoints
- Implement high availability for Hyper-V virtual machines
- Manage Hyper-V virtual hard disks
- Configure Hyper-V Network Adapter
- Configure network interface card (NIC) Teaming on the Hyper-V host and virtual machine
- Configure Hyper-V Switch
- Configure a guarded fabric and shielded VMs
- Move secure virtual machines between Hyper-V hosts
- Create and manage containers
- Prepare Windows Server as a container host
- Configure Windows subsystem for Linux to support containers for running Linux
- Create Windows Server container images
- Manage Windows Server container images
- Configure container networking
- Manage container instances
- Configure Azure Kubernetes Service (AKS) on Windows Server
- Manage Windows Server virtual machines on Azure
- Manage storage for Windows Server virtual machines on Azure
- Manage capacity, including resizing and VM scale sets
- Manage availability sets and availability zones
- Configure and manage Just in Time (JIT) VM access and Azure Bastion
- Manage Azure VM network configuration
Learning objectives
- Manage Hyper-V and guest virtual machines
- Enable Enhanced session mode
- Manage VMs using PowerShell remoting, PowerShell Direct and Secure Shell (SSH) Direct for Linux VMs
- Enable nested virtualization
- Configure VM memory
- Configure integration services
- Configure Discrete Device Assignment
- Configure GPU partitioning
- Configure VM resource groups, CPU groups, and hypervisor scheduling types
- Manage VM checkpoints
- Implement high availability for Hyper-V virtual machines
- Manage Hyper-V virtual hard disks
- Configure Hyper-V Network Adapter
- Configure network interface card (NIC) Teaming on the Hyper-V host and virtual machine
- Configure Hyper-V Switch
- Configure a guarded fabric and shielded VMs
- Move secure virtual machines between Hyper-V hosts
- Create and manage containers
- Prepare Windows Server as a container host
- Configure Windows subsystem for Linux to support containers for running Linux
- Create Windows Server container images
- Manage Windows Server container images
- Configure container networking
- Manage container instances
- Configure Azure Kubernetes Service (AKS) on Windows Server
- Manage Windows Server virtual machines on Azure
- Manage storage for Windows Server virtual machines on Azure
- Manage capacity, including resizing and VM scale sets
- Manage availability sets and availability zones
- Configure and manage Just in Time (JIT) VM access and Azure Bastion
- Manage Azure VM network configuration
05Manage Windows Servers and workloads in a hybrid environment (10–15%)
Domain 2, Manage Windows Servers and workloads in a hybrid environment, organizes related decisions rather than isolated product facts. The current outline includes Configure remote management for Windows Servers in a hybrid environment; Implement Windows Admin Center on premises and in Azure; Configure PowerShell remoting, including second hop. Practice by connecting the configuration or recommendation to prerequisites, downstream effects, evidence of success, and a safe correction when the expected result is not observed.
Topics
- Configure remote management for Windows Servers in a hybrid environment
- Implement Windows Admin Center on premises and in Azure
- Configure PowerShell remoting, including second hop
- Configure Just Enough Administration (JEA) for PowerShell remoting
- Configure and manage remote SSH access
- Configure and manage Remote Desktop Protocol (RDP) access
- Manage Windows Servers and workloads by using Azure services
- Install the Azure Connected Machine Agent to support Azure Arc
- Implement Azure Machine Configuration
- Deploy Azure services using VM extensions on Azure Arc-enabled servers
- Manage updates by using Azure Update Manager
- Implement Azure Automation for hybrid workloads
- Create Azure Automation runbooks
Learning objectives
- Configure remote management for Windows Servers in a hybrid environment
- Implement Windows Admin Center on premises and in Azure
- Configure PowerShell remoting, including second hop
- Configure Just Enough Administration (JEA) for PowerShell remoting
- Configure and manage remote SSH access
- Configure and manage Remote Desktop Protocol (RDP) access
- Manage Windows Servers and workloads by using Azure services
- Install the Azure Connected Machine Agent to support Azure Arc
- Implement Azure Machine Configuration
- Deploy Azure services using VM extensions on Azure Arc-enabled servers
- Manage updates by using Azure Update Manager
- Implement Azure Automation for hybrid workloads
- Create Azure Automation runbooks