Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Microsoft
Exam Format
180 min
700
Associate
Registration
$165 USD
Pearson VUE or online proctoring
Validity
1 year
Pass renewal assessment on Microsoft Learn (free); Pass a higher-level exam in the same role; Earn a higher-level certification
AZ-801 Exam Topics and Domains
AZ-801 is organized into 5 weighted domains. Expect to work with Active Directory, Failover Clustering, Recovery Services Vault, Azure Site Recovery, and more.
1
Secure Windows Server on-premises and hybrid infrastructures
27.5%
Secure Windows Server operating system
Configure and manage Exploit ProtectionConfigure and manage Windows Defender Application ControlConfigure and manage Windows Defender Credential GuardConfigure SmartScreenImplement operating system security by using Group PoliciesManage Windows Server security baseline by using OSConfigImplement Windows Local Administrator Password Solution
- Secure Windows Server operating systems using built-in security features
- Implement application control and exploit protection
- Configure credential protection mechanisms
Secure a hybrid Active Directory infrastructure
Configure password policiesImplement Microsoft Entra Password Protection for AD DSManage protected usersManage account security on a Read-Only Domain controller (RODC)Harden domain controllersConfigure authentication policy silosRestrict access to domain controllersConfigure security options for user accounts and built-in administrative groupsManage AD delegationImplement and manage Microsoft Defender for IdentityAudit usage of and disable NTLM
- Secure hybrid Active Directory environments
- Implement advanced authentication controls
- Protect domain controllers and administrative accounts
Identify and remediate Windows Server security issues by using Azure services
Implement ingestion of Windows Server data into Microsoft SentinelManage security for Windows Server by using Microsoft Defender for CloudManage security for Windows Server by using Microsoft Defender for Servers
- Integrate Windows Server security with Azure services
- Implement cloud-based security monitoring
- Respond to security threats using Azure tools
Secure Windows Server networking
Manage Windows Defender FirewallImplement domain isolationImplement connection security rulesCreate and configure network security groups (NSGs) for Windows Server virtual machines on Azure
- Secure Windows Server network communications
- Implement network isolation and segmentation
- Configure Azure network security for Windows Server VMs
Secure Windows Server storage
Manage Windows BitLocker Drive EncryptionEnable storage encryption by using Azure Disk EncryptionManage and recover encrypted volumesManage disk encryption keys for IaaS virtual machines
- Implement storage encryption for Windows Server
- Manage encryption keys and recovery
- Secure storage in hybrid environments
2
Implement and manage Windows Server high availability
17.5%
Implement a Windows Server failover cluster
Implement a failover cluster on-premises, hybrid, or cloud-onlyCreate a Windows failover cluster, including workgroup clustersImplement a stretch cluster across datacenters or Azure regionsConfigure storage for failover clusteringModify quorum optionsConfigure network adapters for failover clusteringDeploy host networking with Network ATCConfigure cluster workload optionsConfigure Scale-Out File serversConfigure an Azure witnessConfigure a floating IP address for the cluster
- Design and implement failover clusters
- Configure cluster storage and networking
- Implement hybrid and cloud-based clustering solutions
Manage failover clustering
Implement cluster-aware updatingRecover a failed cluster nodeUpgrade failover cluster nodesFailover workloads between nodesInstall Windows updates on cluster nodesManage failover clusters using Windows Admin Center
- Maintain and manage failover clusters
- Perform cluster upgrades and updates
- Troubleshoot cluster issues
Implement and manage Storage Spaces Direct
Upgrade an S2D nodeImplement networking for S2DConfigure S2D
- Deploy and configure Storage Spaces Direct
- Manage S2D infrastructure
- Optimize S2D performance
3
Implement disaster recovery
12.5%
Manage backup and recovery for Windows Server
Back up and restore files and folders to Azure Recovery Services VaultDeploy and manage Azure Backup ServerBack up and recover using Azure Backup ServerManage backups in Azure Recovery Services VaultCreate an Azure Recovery Services vault backup policyConfigure backup for Azure VM using the built-in backup agentRecover a VM using instant recovery snapshotsRecover VMs to new Azure VMsRestore a VM, including encrypted VMs
- Implement Azure Backup solutions
- Configure backup policies and retention
- Perform recovery operations
Implement disaster recovery by using Azure Site Recovery
Configure Azure Site Recovery network mappingConfigure Site Recovery for on-premises serversConfigure a recovery plan in Azure Site RecoveryConfigure Site Recovery for Azure VMsImplement VM replication to secondary datacenter or Azure regionConfigure Azure Site Recovery replication policies
- Design disaster recovery solutions with ASR
- Configure replication and recovery plans
- Perform failover and failback operations
Protect virtual machines by using Hyper-V replicas
Configure Hyper-V hosts for replicationManage Hyper-V replica serversConfigure VM replicationPerform a failover
- Implement Hyper-V Replica for VM protection
- Configure replication between Hyper-V hosts
- Manage failover and recovery operations
4
Migrate servers and workloads
22.5%
Migrate on-premises storage to on-premises servers or Azure
Transfer files, file shares, and security configurations by using Storage Migration ServiceCut over to a new server by using Storage Migration ServiceUse Storage Migration Service to migrate to Azure VMsMigrate to Azure file shares
- Plan and execute storage migrations
- Use Storage Migration Service effectively
- Migrate storage to Azure services
Migrate on-premises servers by using Azure Migrate
Deploy and configure Azure Migrate applianceMigrate VM workloads to Azure VMsMigrate physical servers to Azure VMs
- Deploy Azure Migrate infrastructure
- Assess and migrate servers to Azure
- Optimize migrated workloads
Migrate workloads from previous Windows Server versions to the most current version
Choose an appropriate migration methodMigrate IIS workloads and configurationsMigrate Hyper-V hostsMigrate Remote Desktop Services (RDS) host serversMigrate Dynamic Host Configuration Protocol (DHCP) serversMigrate print serversMigrate by using an in-place upgrade
- Plan workload migrations
- Execute role-specific migrations
- Validate post-migration functionality
Migrate IIS workloads to Azure
Assess IIS workloads by using Azure MigrateMigrate IIS workloads to Azure Web AppsMigrate IIS workloads to containers
- Assess IIS workloads for cloud migration
- Migrate web applications to Azure
- Modernize applications with containers
Migrate an on-premises AD forest to Windows Server 2025
Choose an appropriate migration methodImplement a forest restructureMigrate AD DS objects using AD Migration ToolMigrate to a new Active Directory forestUpgrade an existing forest, including setting functional levels
- Plan Active Directory migrations
- Execute forest and domain migrations
- Upgrade AD infrastructure to Windows Server 2025
5
Monitor and troubleshoot Windows Server environments
17.5%
Monitor Windows Server by using Windows Server tools and Azure services
Monitor Windows Server by using Performance MonitorCreate and configure Data Collector SetsMonitor servers and configure alerts by using Windows Admin CenterAnalyze Windows Server system data by using System InsightsManage event logsConfigure data collection rules for Azure MonitorCreate alertsMonitor Azure VM performance by using VM Insights
- Implement comprehensive monitoring solutions
- Configure alerting and notifications
- Analyze performance data
Troubleshoot Windows Server issues
Troubleshoot connectivityTroubleshoot name resolutionTroubleshoot Windows UpdateTroubleshoot Time ServiceTroubleshoot deployment failuresTroubleshoot booting failuresTroubleshoot performance issuesTroubleshoot VM and Azure Arc extension issuesTroubleshoot disk encryption issuesTroubleshoot storage
- Diagnose and resolve server issues
- Use troubleshooting tools effectively
- Implement recovery procedures
Troubleshoot Active Directory
Restore objects from AD recycle binRecover Active Directory database using Directory Services Restore modeRecover system volume (SYSVOL)Troubleshoot Active Directory replicationTroubleshoot hybrid authentication and synchronization issuesTroubleshoot on-premises Active Directory
- Diagnose and resolve AD issues
- Perform AD recovery operations
- Maintain AD health and performance
How do I earn this certification?
Required Exams
- AZ-800 - Administering Windows Server Hybrid Core InfrastructureMeasures ability to deploy and manage AD DS, manage Windows Servers and workloads in hybrid environment, manage VMs and containers, implement and manage on-premises and hybrid networking, and manage storage and file services.
- AZ-801 - Configuring Windows Server Hybrid Advanced ServicesMeasures ability to secure Windows Server infrastructures, implement high availability, implement disaster recovery, migrate servers and workloads, and monitor and troubleshoot Windows Server environments.
Current Level
Windows Server Hybrid Administrator Associate
Entry Level
- Azure Fundamentals (AZ-900) Foundation knowledge of cloud services and Azure
- Microsoft 365 Fundamentals (MS-900) Basic understanding of Microsoft cloud services
Next Level
- Azure Solutions Architect Expert Design and implement solutions on Microsoft Azure
- Azure DevOps Engineer Expert Design and implement DevOps practices
- Microsoft 365 Enterprise Administrator Expert Manage Microsoft 365 enterprise deployments
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
The most effective way to prepare for AZ-801 is by using the PlanetCert Simulator to practice questions and review detailed explanations.
What's changed on this exam?
Current Status
- ACTIVE
- Last content update: 2025-06-17
- Announcement date: 2025-05-10
Updates
- Windows Server 2025 2025 Major update required for exam content • Release date: 2024-10-01
- Azure Arc 2.0 Enhanced hybrid management features added to exam • Release date: 2025-01-15
- Windows Admin Center 2025 New management capabilities tested • Release date: 2025-03-15
- Network ATC 1.0 New networking topic added to clustering domain • Release date: 2024-11-01
Who should take this exam?
This exam is typically taken by Windows Server Administrators and System Administrators.
- Several years of experience with Windows Server operating systems
- Experience with Windows Server workloads in on-premises and hybrid environments
- Experience with Azure services and Windows Server integration
- Knowledge of PowerShell and Windows Admin Center
- Understanding of virtualization, networking, and storage concepts