You landed here because AZ-801T00 is a replacement for the following:
WS-012T00: Windows Server 2019 Hybrid and Azure IaaS
Module 1: Secure Windows Server on-premises and hybrid infrastructures (Windows Server security / Implementing security solutions in hybrid scenarios)
In this module, learn to secure your on-premises Windows Server resources and your Azure IaaS workloads. Determine if those resources have any security vulnerabilities and remediate those potential security vulnerabilities.
Lessons
- Secure Windows Sever user accounts
- Hardening Windows Server
- Secure Windows Server DNS
- Windows Server Update Management
- Implement Windows Server IaaS VM network security.
- Audit the security of Windows Server IaaS Virtual Machines
- Manage Azure updates
- Configure BitLocker disk encryption for Windows IaaS Virtual Machines
Labs: Configuring security in Windows Server
- Configuring Windows Defender Credential Guard (On-Premise)
- Locating problematic accounts (On-Premise)
- Implementing LAPS Provisioning Azure VMs running Windows Server (On-Premise)
- Configuring Azure Security Center (Hybrid)
- Onboarding on-premises Windows Server into Azure Security Center (Hybrid)
- Verifying the hybrid capabilities of Azure Security Center (Hybrid)
- Configuring Windows Server 2019 security in Azure VMs (Hybrid)
After completing this module, students will be able to:
- Diagnose and remediate potential security vulnerabilities in Windows Server resources
- Harden the security configuration of the Windows Server operating system environment
- Deploy operating system updates to computers on a network by using Windows Server Update Services
- Secure Windows Server DNS to help protect the network name resolution infrastructure
- Implement DNS policies. Diagnose network security issues in Windows Server IaaS virtual machines
- Onboard Windows Server computers to Azure Security Center
- Deploy and manage updates for Azure VMs by enabling Azure Automation Update Management
- Configure Azure Disk Encryption for Windows IaaS virtual machines (VMs)
- Back up and recover encrypted data
Module 2: Implementing Windows Server high availability (Implementing high availability)
In this module, learn to implement high availability Windows Server virtual machine (VM) workloads with Hyper-V Replica, Windows Server Failover Clustering, and Windows Server File Server high availability.
Lessons
- Implement Windows Server failover clustering
- Implement high availability of Windows Server VMs
- Implement Windows Server File Server high availability
- Implement scale and high availability with Windows Server VMs
Labs: Implementing failover clustering
- Configuring iSCSI storage (On-Premise)
- Configuring a failover cluster (On-Premise)
- Deploying and configuring a highly available file server (Hybrid)
- Validating the deployment of the highly available file server (Hybrid)
After completing this module, students will be able to:
- Implement highly available Windows Server workloads using failover clustering.
- Describe Hyper-V VMs load balancing.
- Implement Hyper-V VMs live migration and Hyper-V VMs storage migration.
- Describe Windows Server File Server high availability options.
- Implement highly available storage volumes by using Clustered Share Volumes.
- Implement scaling for virtual machine scale sets and load-balanced VMs.
- Implement Azure Site Recovery.
Module 3: Implement disaster recovery in Windows Server on-premises and hybrid environments (Disaster recovery in Windows Server / Implementing recovery services in hybrid scenarios)
In this module, learn how to use Hyper-V Replica to provide an affordable BCDR solution for a virtual environment. Learn also how to implement Azure Site Recovery for on-premises scenarios and to protect your Azure infrastructure.
Lessons
- Implement Hyper-V Replica
- Protect your on-premises infrastructure from disasters with Azure Site Recovery
- Implement hybrid backup and recovery with Windows Server IaaS
- Protect your Azure infrastructure with Azure Site Recovery
- Protect your virtual machines by using Azure Backup
Labs: Implementing Hyper-V Replica and Windows Server Backup
- Implementing Hyper-V Replica (On-Premise)
- Implementing backup and restore with Windows Server Backup (On-Premise)
- Implementing the lab environment (Hybrid)
- Creating and configuring an Azure Site Recovery vault (Hybrid)
- Implementing Hyper-V VM protection by using Azure Site Recovery vault (Hybrid)
- Implementing Azure Backup (Hybrid)
After completing this module, students will be able to:
- Describe Hyper-V Replica, pre-requisites for its use, and its high-level architecture and components
- Describe Hyper-V Replica use cases and security considerations
- Configure Hyper-V Replica settings, health monitoring, and failover options
- Describe extended replication
- Replicate, failover, and failback virtual machines and physical servers with Azure Site Recovery
- Recover Windows Server IaaS virtual machines by using Azure Backup
- Use Azure Backup to help protect the data for on-premises servers and virtualized workloads
- Implement Recovery Vaults and Azure Backup policies
- Protect Azure VMs with Azure Site Recovery
- Run a disaster recovery drill to validate protection
- Failover and failback Azure virtual machines
Module 4: Migrate servers and workloads in on-premises and hybrid environments (Upgrade and migrate in Windows Server / Implementing migration in hybrid scenarios)
In this module, learn to migrate a workload running in Windows Server to an infrastructure as a service (IaaS) virtual machine (VM) and to Windows Server by using Windows Server migration tools or the Storage Migration Service.
Lessons
- Active Directory Domain Services migration
- Migrate file server workloads using Storage Migration Service
- Migrate Windows Server roles Migrate on-premises Windows Server instances to Azure IaaS virtual machines
- Upgrade and migrate Windows Server IaaS virtual machines
- Containerize and migrate ASP.NET applications to Azure App Service
Labs: Migrating Windows Server workloads to IaaS VMs
- Deploying AD DS domain controllers in Azure (On-Premise)
- Migrating file server shares by using Storage Migration Service (On-Premise)
- Implementing assessment and discovery of Hyper-V VMs using Azure Migrate (Hybrid)
- Implementing migration of Hyper-V workloads using Azure Migrate (Hybrid)
After completing this module, students will be able to:
- Compare upgrading an AD DS forest and migrating to a new AD DS forest
- Describe the Active Directory Migration Tool (ADMT)
- Identify the requirements and considerations for using Storage Migration Service
- Describe how to migrate a server with storage migration
- Use the Windows Server Migration Tools to migrate specific Windows Server roles
- Plan a migration strategy and choose the appropriate migration tools
- Perform server assessment and discovery using Azure Migrate
- Migrate Windows Server workloads to Azure VM workloads using Azure Migrate
- Explain how to migrate workloads using Windows Server Migration tools
- Migrate file servers by using the Storage Migration Service
- Discover and containerize ASP.NET applications running on Windows
- Migrate a containerized application to Azure App Service
Module 5: Monitor and troubleshoot Windows Server environments (Server and performance monitoring in Windows Server / Implementing operational monitoring in hybrid scenarios)
In this module, learn to use monitoring and troubleshooting tools, processes, and best practices to streamline app performance and availability of your Windows Server environment and your Windows Server IaaS VMs and hybrid instances.
Lessons
- Monitor Windows Server performance
- Manage and monitor Windows Server event logs
- Implement Windows Server auditing and diagnostics
- Troubleshoot Active Directory
- Monitor Windows Server IaaS Virtual Machines and hybrid instances
- Monitor the health of your Azure virtual machines by using Azure Metrics Explorer and metric alerts
- Monitor performance of virtual machines by using Azure Monitor VM Insights
- Troubleshoot on-premises and hybrid networking
- Troubleshoot Windows Server Virtual Machines in Azure
Labs: Monitoring and troubleshooting Windows Server
- Establishing a performance baseline (On-Premise)
- Identifying the source of a performance problem (On-Premise)
- Viewing and configuring centralized event logs Enabling Azure Monitor for virtual machines (Hybrid)
- Setting up a VM with boot diagnostics (Hybrid)
- Setting up a Log Analytics workspace and Azure Monitor VM Insights (Hybrid)
After completing this module, students will be able to:
- Explain the fundamentals of server performance tuning
- Use built-in tools in Windows Server to monitor server performance
- Use Server Manager and Windows Admin Center to review event logs
- Implement custom views
- Configure an event subscription
- Audit Windows Server events
- Configure Windows Server to record diagnostic information
- Recover the AD DS database and objects in AD DS
- Troubleshoot AD DS replication
- Troubleshoot hybrid authentication issues
- Implement Azure Monitor for IaaS VMs in Azure and in on-premises environments
- View VM metrics in Azure Metrics Explorer
- Use monitoring data to diagnose problems
- Evaluate Azure Monitor Logs and configure Azure Monitor VM Insights
- Configure a Log Analytics workspace
- Troubleshoot on-premises connectivity and hybrid network connectivity
- Troubleshoot AD DS service failures or degraded performance
- Recover deleted security objects and the AD DS database
- Troubleshoot hybrid authentication issues
This four-day course is intended for Windows Server Hybrid Administrators who have experience working with Windows Server and want to extend the capabilities of their on-premises environments by combining on-premises and hybrid technologies. Windows Server Hybrid Administrators who already implement and manage on-premises core technologies want to secure and protect their environments, migrate virtual and physical workloads to Azure IaaS, enable a highly available, fully redundant environment, and perform monitoring and troubleshooting.
Successful Windows Server Hybrid Administrators start this role with experience on operating systems, virtualization, cloud infrastructure, storage structures, and networking. They extend that knowledge to include:
- Experience with managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including AD DS, DFS, Hyper-V, and File and Storage Services
- Basic understanding of security-related technologies (firewalls, encryption, multi-factor authentication, SIEM/SOAR).
- An understanding of the following concepts related to Windows Server and hybrid technologies: High Availability and Disaster Recovery, automation, monitoring, and troubleshooting.
- An awareness of basic security best practices and a basic knowledge of Azure Active Director

