Configuring Windows Server Hybrid Advanced Services
AZ-801
Money Back Guarantee
98% Success Rate
Real Questions
1
Secure Windows Server on-premises and hybrid infrastructures 27.5%
1.1
Secure Windows Server operating system
7 subtopics1.1.1Configure and manage Exploit Protection
1.1.2Configure and manage Windows Defender Application Control
1.1.3Configure and manage Windows Defender Credential Guard
1.1.4Configure SmartScreen
1.1.5Implement operating system security by using Group Policies
1.1.6Manage Windows Server security baseline by using OSConfig
1.1.7Implement Windows Local Administrator Password Solution
Learning Objectives
- Secure Windows Server operating systems using built-in security features
- Implement application control and exploit protection
- Configure credential protection mechanisms
1.2
Secure a hybrid Active Directory infrastructure
11 subtopics1.2.1Configure password policies
1.2.2Implement Microsoft Entra Password Protection for AD DS
1.2.3Manage protected users
1.2.4Manage account security on a Read-Only Domain controller (RODC)
1.2.5Harden domain controllers
1.2.6Configure authentication policy silos
1.2.7Restrict access to domain controllers
1.2.8Configure security options for user accounts and built-in administrative groups
1.2.9Manage AD delegation
1.2.10Implement and manage Microsoft Defender for Identity
1.2.11Audit usage of and disable NTLM
Learning Objectives
- Secure hybrid Active Directory environments
- Implement advanced authentication controls
- Protect domain controllers and administrative accounts
1.3
Identify and remediate Windows Server security issues by using Azure services
3 subtopics1.3.1Implement ingestion of Windows Server data into Microsoft Sentinel
1.3.2Manage security for Windows Server by using Microsoft Defender for Cloud
1.3.3Manage security for Windows Server by using Microsoft Defender for Servers
Learning Objectives
- Integrate Windows Server security with Azure services
- Implement cloud-based security monitoring
- Respond to security threats using Azure tools
1.4
Secure Windows Server networking
4 subtopics1.4.1Manage Windows Defender Firewall
1.4.2Implement domain isolation
1.4.3Implement connection security rules
1.4.4Create and configure network security groups (NSGs) for Windows Server virtual machines on Azure
Learning Objectives
- Secure Windows Server network communications
- Implement network isolation and segmentation
- Configure Azure network security for Windows Server VMs
1.5
Secure Windows Server storage
4 subtopics1.5.1Manage Windows BitLocker Drive Encryption
1.5.2Enable storage encryption by using Azure Disk Encryption
1.5.3Manage and recover encrypted volumes
1.5.4Manage disk encryption keys for IaaS virtual machines
Learning Objectives
- Implement storage encryption for Windows Server
- Manage encryption keys and recovery
- Secure storage in hybrid environments
Domain Hands-on Skills
Configuring Windows Defender featuresImplementing AD security policiesManaging Azure security services
Common Mistakes to Avoid
- Misconfiguring authentication policies
- Incorrect NSG rule priorities
- Improper key management
2
Implement and manage Windows Server high availability 17.5%
3
Implement disaster recovery 12.5%
4
Migrate servers and workloads 22.5%
5