Exam AZ-801: Configuring Windows Server Hybrid Advanced Services, 2nd Edition (Video), 2nd Edition

Prep for the AZ-801 and learn Windows Server hybrid management, security, high availability, disaster recovery, and Azure integration.

Presently, there's great need for admins to be able to integrate Windows Server environments with Azure services and manage Windows Server in the on-premises networks, which is covered in this AZ-801 exam. There have also been feature updates for security, like Windows Defender Firewall, which makes this review of the exam more important for admins. Windows Server Hybrid Advanced Services extend on-premises workloads into Azure, ensuring high availability, security, and disaster recovery. The video  course covers failover clustering, Azure Arc, Microsoft Defender for Identity, Azure Site Recovery, and migration tools to help administrators modernize their infrastructure.

This course prepares IT professionals for Exam AZ-801, focusing on Windows Server hybrid administration. It covers securing, managing, and migrating Windows Server workloads in on-premises and Azure environments. The training includes hands-on demonstrations, real-world scenarios, and exam-specific guidance to ensure learners can apply concepts in production settings and pass the certification.

Skill Level:

• Intermediate to Advanced

Learn How To:

• Understand real-world hybrid demonstrations (Azure Arc, failover clustering, Defender for Identity, etc.)
• Integrate exam strategies, highlighting key configurations and likely test questions
• Prepare for the AZ-801 exam objectives
• Apply job-ready skillsnot just theory

Course requirement:

Pre-requisites:

• Familiarity with Active Directory, networking, & Azure basics

Who Should Take This Course:

Ideal after passing AZ-800 or equivalent.

Job roles:

• Windows Server administrator
• Systems administrator
• Network engineer
• Azure administrator
• Solutions architect

About Pearson Video Training:   

Pearson publishes expert-led video tutorials covering a wide selection of technology topics designed to teach you the skills you need to succeed. These professional and personal technology videos feature world-leading author instructors published by your trusted technology brands: Addison-Wesley, Cisco Press, Pearson IT Certification, Prentice Hall, Sams, and Que. Topics include IT Certification, Network Security, Cisco Technology, Programming, Web Development, Mobile Development, and more. Learn more about Pearson Video training at  http://www.informit.com/video.

Video Lessons are available for download for offline viewing within the streaming format. Look for the green arrow in each lesson.

Table of Contents

Lesson 1: Implement Core OS Security

1.1. Configure and manage Exploit Protection

1.2. Configure and manage Windows Defender Application Control

1.3. Configure and manage Windows Defender Credential Guard

1.4. Configure SmartScreen

1.5. Implement operating system security by using Group Policies

1.6. Manage Windows Server security baseline by using OSConfig

1.7 Configure Secured-core Server features for high-security workloads

 

Lesson 2: Secure Local Accounts and Passwords

2.1. Implement Windows Local Administrator Password Solution

2.2. Configure password policies

2.3. Implement Microsoft Entra Password Protection for AD DS

 

Lesson 3: Manage Protected Users and RODCs

3.1. Manage protected users

3.2. Manage account security on a Read-Only Domain Controller (RODC)

3.3. Harden domain controllers

 

Lesson 4: Configure Advanced Domain Security

4.1. Configure authentication policy silos

4.2. Restrict access to domain controllers

4.3. Configure security options for user accounts

4.4. Configure security options for built-in administrative groups

4.5. Manage AD delegation

4.6 Implement Just Enough Administration (JEA) and Just-In-Time (JIT) privileged access

 

Lesson 5: Monitor and Defend with Microsoft Security Tools

5.1. Implement and manage Microsoft Defender for Identity

5.2. Audit usage of and disable NTLM

5.3. Implement ingestion of Windows Server data into Microsoft Sentinel

5.4. Manage security for Windows Server by using Microsoft Defender for Cloud

5.5. Manage security for Windows Server by using Microsoft Defender for Servers

5.6 Implement hotpatching for Windows Server Azure Edition virtual machines

 

Lesson 6: Secure Windows Server Networking

6.1. Manage Windows Defender Firewall

6.2. Implement domain isolation

6.3. Implement connection security rules

6.4. Create and configure network security groups (NSGs) for Windows Server virtual machines on Azure

Lesson 7: Secure Storage with Encryption

7.1. Manage Windows BitLocker Drive Encryption

7.2. Enable storage encryption by using Azure Disk Encryption

7.3. Manage and recover encrypted volumes

7.4. Manage disk encryption keys for IaaS virtual machines

7.5 Configure File Server Resource Manager (FSRM) and Storage QoS for workload governance

Lesson 8: Implement Failover Clusters

8.1. Implement a failover cluster on-premises, hybrid, or cloud-only

8.2. Create a Windows failover cluster, including workgroup clusters

8.3. Implement a stretch cluster across datacenters or Azure regions, including Storage Spaces Direct (S2D) campus clusters

8.4. Configure storage for failover clustering

8.5. Modify quorum options

8.6. Configure network adapters for failover clustering

Lesson 9: Configure Advanced Cluster Features

9.1. Deploy and troubleshoot deployment, validation and cluster networking with Network ATC

9.2. Configure cluster workload options

9.3. Configure Scale-Out File servers

9.4. Configure an Azure witness

9.5. Configure a floating IP address for the cluster

Lesson 10: Manage and Maintain Clusters

10.1. Implement cluster-aware updating

10.2. Recover a failed cluster node

10.3. Upgrade failover cluster nodes

10.4. Failover workloads between nodes

10.5. Install Windows updates on cluster nodes

10.6. Use Windows Admin Center as the primary management tool for hybrid and cluster operations

Lesson 11: Implement Storage Spaces Direct

11.1. Upgrade an S2D node

11.2. Implement networking for S2D

11.3. Configure S2D

Lesson 12: Protect VMs with Hyper-V Replication

12.1. Configure Hyper-V hosts for replication

12.2. Manage Hyper-V replica servers

12.3. Configure VM replication

12.4. Perform a failover

Lesson 13: Implement Azure Backup

13.1. Backup and restore files and folders to Azure Recovery Services Vault

13.2. Deploy and manage Azure Backup Server

13.3. Backup and recover using Azure Backup Server

13.4. Manage backups in Azure Recovery Services Vault

13.5. Create an Azure Recovery Services vault backup policy

13.6 Implement ransomware-aware backup and recovery strategies, including immutable storage and recovery testing

Lesson 14: Backup and Recover Azure VMs  

14.1. Configure backup for Azure VM using the built-in backup agent

14.2. Recover a VM using instant recovery snapshots

14.3. Recover VMs to new Azure VMs

14.4. Restore a VM, including encrypted VMs

Lesson 15: Implement Azure Site Recovery

15.1. Configure Azure Site Recovery network mapping

15.2. Configure Site Recovery for on-premises servers

15.3. Configure a recovery plan in Azure Site Recovery

15.4. Configure Site Recovery for Azure VMs

15.5. Implement VM replication to secondary datacenter or Azure region

15.6. Configure Azure Site Recovery replication policies

Lesson 16: Migrate Storage Using SMS

16.1. Transfer files, file shares, and security configurations by using Storage Migration Service (SMS)

16.2. Cut over to a new server by using Storage Migration Service (SMS)

16.3. Use Storage Migration Service to migrate to Azure VMs

16.4. Migrate to Azure file shares

Lesson 17: Use Azure Migrate for Server Migration

17.1. Deploy and configure Azure Migrate appliance

17.2. Migrate VM workloads to Azure VMs

17.3. Migrate physical servers to Azure VMs

Lesson 18: Migrate Server Roles

18.1. Choose an appropriate migration method

18.2. Migrate IIS workloads and configurations

18.3. Migrate Hyper-V hosts

18.4. Migrate Remote Desktop Services (RDS) host servers

Lesson 19: Migrate Infrastructure Services

19.1. Migrate Dynamic Host Configuration Protocol (DHCP) servers

19.2. Migrate print servers

19.3. Migrate by using an in-place upgrade

Lesson 20: Migrate IIS Workloads to Azure

20.1. Assess IIS workloads by using Azure Migrate

20.2. Migrate IIS workloads to Azure Web Apps

20.3. Migrate IIS workloads to containers

20.4 Deploy Windows containers to Azure Kubernetes Service (AKS)

Lesson 21: Migrate Active Directory to Windows Server 2025

21.1. Choose an appropriate migration method

21.2. Implement a forest restructure

21.3. Migrate AD DS objects, including users, groups and Group Policies using AD Migration Tool

21.4. Migrate to a new Active Directory forest

21.5. Upgrade an existing forest, including setting functional levels

Lesson 22: Monitor Windows Server Performance

22.1. Monitor Windows Server by using Performance Monitor

22.2. Create and configure Data Collector Sets

22.3. Monitor servers and configure alerts by using Windows Admin Center

22.4. Analyze Windows Server system data by using System Insights

22.5. Manage event logs

Lesson 23: Monitor with Azure Services

23.1. Configure data collection rules for Azure Monitor

23.2. Create alerts

23.3. Monitor Azure VM performance by using VM Insights

23.4 Manage Windows Server resources with Azure Arc extensions and policies

23.5 Configure Azure Update Manager for hybrid patch orchestration

Lesson 24: Troubleshoot Core Services

24.1. Troubleshoot connectivity

24.2. Troubleshoot name resolution

24.3. Troubleshoot Windows Update

24.4. Troubleshoot Time Service

24.5. Troubleshoot deployment failures

24.6. Troubleshoot booting failures

Lesson 25: Troubleshoot Advanced Issues

25.1. Troubleshoot performance issues

25.2. Troubleshoot VM and Azure Arc extension issues

25.3. Troubleshoot disk encryption issues

25.4. Troubleshoot storage

25.5 Troubleshoot Azure Arc server extension issues

Lesson 26: Troubleshoot Active Directory

26.1. Restore objects from AD recycle bin

26.2. Recover Active Directory database using Directory Services Restore mode

26.3. Recover system volume (SYSVOL)

26.4. Troubleshoot Active Directory replication

26.5. Troubleshoot hybrid authentication and synchronization issues

26.6. Troubleshoot on-premises Active Directory

26.7 Troubleshoot hybrid identity synchronization with Microsoft Entra Connect

Course Summary

If you find an error, you can report it to us through our Submit errata page.