Configuring Windows Server Hybrid Advanced Services (AZ-801) Exam Blueprint

Configure and manage Exploit Protection; Configure and manage Windows Defender Application Control; Configure and manage Windows Defender Credential Guard; Configure SmartScreen; Implement operating system security by using Group Policies; Manage Windows Server security baseline by using OSConfig; Implement Windows Local Administrator Password Solution (Windows LAPS)

Configure password policies; Implement Microsoft Entra Password Protection for AD DS; Manage protected users; Manage account security on a Read-Only Domain controller (RODC); Harden domain controllers; Configure authentication policy silos; Restrict access to domain controllers; Configure security options for user accounts; Configure security options for built-in administrative groups; Manage AD delegation; Implement and manage Microsoft Defender for Identity; Audit usage of and disable NTLM; Identify and remediate Windows Server security issues by using Azure services

Manage Windows Defender Firewall; Implement domain isolation; Implement connection security rules; Create and configure network security groups (NSGs) for Windows Server virtual machines on Azure

Manage Windows BitLocker Drive Encryption; Enable storage encryption by using Azure Disk Encryption; Manage and recover encrypted volumes; Manage disk encryption keys for IaaS virtual machines

Implement a failover cluster on-premises, hybrid, or cloud-only; Create a Windows failover cluster, including workgroup clusters; Implement a stretch cluster across datacenters or Azure regions, including Storage Spaces Direct (S2D) campus clusters; Configure storage for failover clustering; Modify quorum options; Configure network adapters for failover clustering; Deploy host networking with Network ATC; Configure cluster workload options; Configure Scale-Out File servers; Configure an Azure witness; Configure a floating IP address for the cluster

Implement cluster-aware updating; Recover a failed cluster node; Upgrade failover cluster nodes; Failover workloads between nodes; Install Windows updates on cluster nodes; Manage failover clusters using Windows Admin Center

Upgrade an S2D node; Implement networking for S2D; Configure S2D

Back up and restore files and folders to Azure Recovery Services Vault; Deploy and manage Azure Backup Server; Back up and recover using Azure Backup Server; Manage backups in Azure Recovery Services Vault; Create an Azure Recovery Services vault backup policy; Configure backup for Azure VM using the built-in backup agent; Recover a VM using instant recovery snapshots; Recover VMs to new Azure VMs; Restore a VM, including encrypted VMs

Configure Azure Site Recovery network mapping; Configure Site Recovery for on-premises servers; Configure a recovery plan in Azure Site Recovery; Configure Site Recovery for Azure VMs; Implement VM replication to secondary datacenter or Azure region; Configure Azure Site Recovery replication policies; Protect virtual machines by using Hyper-V replicas; Configure Hyper-V hosts for replication; Manage Hyper-V replica servers; Configure VM replication; Perform a failover

Transfer files, file shares, and security configurations by using Storage Migration Service (SMS); Cut over to a new server by using Storage Migration Service (SMS); Use Storage Migration Service to migrate to Azure VMs; Migrate to Azure file shares

Deploy and configure Azure Migrate appliance; Migrate VM workloads to Azure VMs; Migrate physical servers to Azure VMs; Migrate workloads from previous Windows Server versions to the most current version; Choose an appropriate migration method; Migrate IIS workloads and configurations; Migrate Hyper-V hosts; Migrate Remote Desktop Services (RDS) host servers; Migrate Dynamic Host Configuration Protocol (DHCP) servers; Migrate print servers; Migrate by using an in-place upgrade

Assess IIS workloads by using Azure Migrate; Migrate IIS workloads to Azure Web Apps; Migrate IIS workloads to containers

Choose an appropriate migration method; Implement a forest restructure; Migrate AD DS objects, including users, groups and Group Policies using AD Migration Tool; Migrate to a new Active Directory forest; Upgrade an existing forest, including setting functional levels

Monitor Windows Server by using Performance Monitor; Create and configure Data Collector Sets; Monitor servers and configure alerts by using Windows Admin Center; Analyze Windows Server system data by using System Insights; Manage event logs; Configure data collection rules for Azure Monitor; Create alerts; Monitor Azure VM performance by using VM Insights

Troubleshoot connectivity; Troubleshoot name resolution; Troubleshoot Windows Update; Troubleshoot Time Service; Troubleshoot deployment failures; Troubleshoot booting failures; Troubleshoot performance issues; Troubleshoot VM and Azure Arc extension issues; Troubleshoot disk encryption issues; Troubleshoot storage; Troubleshoot Active Directory; Restore objects from AD recycle bin; Recover Active Directory database using Directory Services Restore mode; Recover system volume (SYSVOL); Troubleshoot Active Directory replication; Troubleshoot hybrid authentication and synchronization issues; Troubleshoot on-premises Active Directory