As more organizations adopt a hybrid IT model—combining on-premises infrastructure with cloud services—the demand for professionals who can manage both environments has grown rapidly. Microsoft AZ-800 exam, officially titled “Administering Windows Server Hybrid Core Infrastructure,” is designed to validate your ability to operate in this blended ecosystem.
Whether you are a Windows Server administrator looking to future-proof your career or an IT professional aiming to deepen your knowledge of hybrid networks, the AZ-800 is your gateway to becoming a Microsoft Certified: Windows Server Hybrid Administrator Associate.
But how do you prepare for an exam that spans virtualization, identity management, networking, storage, security, and Azure integration—all in one? This guide breaks it down step by step, helping you understand the exam structure, key skills required, top resources, and a practical study plan to help you succeed.
What is the Microsoft AZ-800 Exam?
The Microsoft AZ-800 exam is officially titled “Administering Windows Server Hybrid Core Infrastructure.” It is a role-based certification exam that focuses on managing Windows Server environments in a hybrid setup, where on-premises infrastructure integrates with Microsoft Azure services.
This exam is part of the requirements for earning the Microsoft Certified: Windows Server Hybrid Administrator Associate credential, which validates your skills in modern server administration, hybrid networking, storage configuration, virtualization, and identity services.
Who Should Take the AZ-800 Exam?
The AZ-800 exam is designed for:
- IT professionals who manage Windows Server workloads and hybrid infrastructure
- System administrators looking to expand their cloud and on-prem skills
- Hybrid infrastructure engineers who work with both physical data centres and Azure-based services
- Enterprise support professionals responsible for managing network services, virtualization, and user identities across environments
If your job involves Windows Server 2019 or 2022 and you are planning to extend or integrate services with Microsoft Azure, this exam is highly relevant.
Prerequisites and Recommended Experience
While there are no formal prerequisites, Microsoft recommends that candidates have:
- Hands-on experience with Windows Server (including administration tools and core services like DNS, DHCP, and Active Directory)
- Familiarity with virtualization technologies such as Hyper-V and failover clustering
- Understanding of hybrid cloud infrastructure, particularly Azure services, including Azure Arc, Azure AD, and Azure networking
- Experience managing networking, identity, and security across on-prem and cloud systems
Candidates who already work with Windows Server in enterprise environments—especially those transitioning toward hybrid cloud models—are best positioned for success.
Exam Structure and Details
The Microsoft AZ-800 Exam assesses your ability to administer core Windows Server workloads in hybrid environments, combining traditional infrastructure with Azure services. Understanding the structure of the exam is the first step toward effective preparation.
| Attribute | Details |
|---|---|
| Exam Code | AZ-800 |
| Full Title | Administering Windows Server Hybrid Core Infrastructure |
| Certification | Windows Server Hybrid Administrator Associate |
| Exam Format | Multiple-choice, multiple-response, case studies, drag-and-drop |
| Number of Questions | Approximately 40–60 |
| Duration | 120 minutes |
| Passing Score | 700 out of 1000 |
| Exam Fee | USD 165 (may vary by country) |
| Delivery Mode | Online (remote proctored) or at a certified test center |
| Provider | Pearson VUE |
Types of Questions You Can Expect
The exam features a variety of question formats to test both your conceptual knowledge and hands-on experience, including:
- Multiple-choice and multiple-select questions
- Scenario-based case studies
- Drag-and-drop configuration steps
- Matching items and command line syntax evaluations
The questions are designed to simulate real-world administrative tasks, so candidates should be comfortable configuring, troubleshooting, and managing both Windows Server and Azure-linked components.
Scoring and Result Timing
- You need to score 700 out of 1000 to pass
- Results are displayed immediately after you complete the exam
- You will receive a breakdown of your performance by skill area
Retake Policy
- If you fail, you can retake the exam after 24 hours
- A second failure requires a 14-day waiting period
- Each attempt requires a full exam fee payment
Having a clear understanding of the exam structure allows you to plan your preparation around question types, time limits, and scoring strategies.
Skills Measured in the AZ-800 Exam
The Microsoft AZ-800 Exam is designed to assess your ability to manage and administer Windows Server workloads in hybrid environments. This means you must demonstrate competence not only with on-premises Windows Server management but also with Azure services used to extend infrastructure capabilities.
Below are the core skill domains measured in the exam, based on Microsoft’s official exam outline.
Topic 1: Deploy and manage Azure Directory Domain Services (AD DS) in on-premises and cloud environments (30–35%)
Deploy and manage AD DS domain controllers
- deploy and manage domain controllers on-premises (Microsoft Documentation: Deploy and manage Azure IaaS Active Directory domain controllers in Azure)
- deploying and managing domain controllers in Azure (Microsoft Documentation: Deploy AD DS in an Azure virtual network)
- deploying read-only domain controllers (RODCs) (Microsoft Documentation: AD DS: Read-Only Domain Controllers)
- troubleshoot flexible single master operation (FSMO) roles (Microsoft Documentation: Active Directory FSMO roles in Windows)
Configure and manage multi-site, multi-domain, and multi-forest environments
- configuring and manage forest and domain trusts (Microsoft Documentation: How trust relationships work for resource forests in Azure Active Directory Domain Services)
- configure and manage AD DS sites (Microsoft Documentation: Create and configure an Azure Active Directory Domain Services managed domain)
- configure and manage AD DS replication (Microsoft Documentation: Active Directory Replication Concepts)
Create and manage AD DS security principals
- create and manage AD DS users and groups (Microsoft Documentation: Create and configure an Azure Active Directory Domain Services managed domain)
- manage users and groups in multi-domain and multi-forest scenarios (Microsoft Documentation: Multiple forests with AD DS and Azure AD)
- implement group managed service accounts (gMSAs) (Microsoft Documentation: Group Managed Service Accounts Overview)
- Join Windows Servers to AD DS, Microsoft Entra Domain Services, and Microsoft Entra
Implement and manage hybrid identities
- Integrate Microsoft Entra ID, AD DS and Microsoft Entra Domain Services
- implement Microsoft Entra Connect
- manage Microsoft Entra Connect Synchronization
- implement Microsoft Entra Connect cloud sync
- manage Microsoft Entra Domain Services
- managing Microsoft Entra Connect Health
- manage authentication in on-premises and hybrid environments (Microsoft Documentation: Microsoft 365 integration with on-premises environments)
- configure and manage AD DS passwords (Microsoft Documentation: Password and account lockout policies)
Manage Windows Server by using domain-based Group Policies
- implement Group Policy in AD DS (Microsoft Documentation: Administer Group Policy in an Azure Active Directory Domain Services managed domain)
- implementing Group Policy Preferences in AD DS (Microsoft Documentation: Group Policy Preferences)
- implement Group Policy in Microsoft Entra Domain Services
Topic 2: Manage Windows Servers and workloads in a hybrid environment (10–15%)
Manage Windows Servers in a hybrid environment
- deploy a Windows Admin Center Gateway server (Microsoft Documentation: Install Windows Admin Center)
- configure a target machine for Windows Admin Center Gateway server (Microsoft Documentation: Troubleshooting Windows Admin Center)
- configuring PowerShell Remoting (Microsoft Documentation: Enable-PSRemoting)
- configure Credential Security Support Provider protocol (CredSSP) or Kerberos Delegation for 2nd Hop Remoting (Microsoft Documentation: Making the second hop in PowerShell Remoting)
- configure Just Enough Administration (JEA) for PowerShell Remoting (Microsoft Documentation: Just Enough Administration)
Manage Windows Servers and workloads by using Azure services
- manage Windows Servers by using Azure Arc (Microsoft Documentation: What is Azure Arc-enabled servers?)
- Create and assign Azure Policy that uses guest configuration extension
- deploy Azure services using Azure VM extensions on non-Azure machines (Microsoft Documentation: Virtual machine extensions and features for Windows)
- manage updates for Windows machines (Microsoft Documentation: Update Management overview)
- integrate Windows Servers with Log Analytics (Microsoft Documentation: Install Log Analytics agent on Windows computers)
- Integrate Windows Servers with Microsoft Defender for Cloud
- manage IaaS VMs in Azure that run Windows Server (Microsoft Documentation: Administer and manage Windows Server IaaS Virtual Machine remotely)
- implement Azure Automation for hybrid workloads (Microsoft Documentation: Automation Hybrid Runbook Worker overview)
- create runbooks to automate tasks on target VMs (Microsoft Documentation: Manage runbooks in Azure Automation)
- Implement Azure Automation State Configuration to prevent configuration drift in IaaS machines (Microsoft Documentation: Azure Automation State Configuration overview)
Topic 3: Manage virtual machines and containers (15–20%)
Manage Hyper-V and guest virtual machines
- enable VM enhanced session mode (Microsoft Documentation: Enable enhanced console session in VMM)
- Manage VM using PowerShell remoting, PowerShell Direct and Secure Shell (SSH) Direct for Linux VMs
- configure nested virtualization (Microsoft Documentation: Run Hyper-V in a Virtual Machine with Nested Virtualization)
- configuring VM memory (Microsoft Documentation: Configure virtual machine settings in the VMM compute fabric)
- configure Integration Services (Microsoft Documentation: Install Integration Services (SSIS))
- configuring Discrete Device Assignment (Microsoft Documentation: Deploy graphics devices using Discrete Device Assignment)
- configure VM Resource Groups (Microsoft Documentation: Manage Azure Resource Manager resource groups by using the Azure portal)
- configuring VM CPU Groups (Microsoft Documentation: Virtual Machine Resource Controls)
- configure hypervisor scheduling types (Microsoft Documentation: Managing Hyper-V hypervisor scheduler types)
- manage VM Checkpoints (Microsoft Documentation: Enable or disable checkpoints)
- implement high availability for virtual machines (Microsoft Documentation: Availability options for Azure Virtual Machines)
- manage virtual hard disk (VHD) and virtual hard disk v2 (VHDX) files (Microsoft Documentation: Manage Virtual Hard Disks (VHD))
- configure Hyper-V network adapter (Microsoft Documentation: Create a virtual switch for Hyper-V virtual machines)
- configuring network interface card (NIC) Teaming (Microsoft Documentation: Create a new NIC Team on a host computer or VM)
- configure Hyper-V switch
Create and manage containers
- create Windows Server container images (Microsoft Documentation: Container Base Images)
- manage Windows Server container images
- configure Container networking (Microsoft Documentation: Windows container networking)
- managing container instances (Microsoft Documentation: What is Azure Container Instances?)
Manage Azure Virtual Machines that run Windows Server
- manage data disks (Microsoft Documentation: Introduction to Azure managed disks)
- resize Azure VM (Microsoft Documentation: Change the size of a virtual machine)
- configure connections to VMs (Microsoft Documentation: How to connect and sign on to an Azure virtual machine running Windows)
- manage Azure VM network configuration (Microsoft Documentation: Virtual networks and virtual machines in Azure)
Topic 4: Implement and manage an on-premises and hybrid networking infrastructure (15–20%)
Implement on-premises and hybrid name resolution
- integrate DNS with AD DS (Microsoft Documentation: DNS and AD DS)
- create and manage DNS zones and records (Microsoft Documentation: Overview of DNS zones and records)
- configure DNS forwarding/conditional forwarding (Microsoft Documentation: Forwarders and conditional forwarders resolution timeouts)
- integrate Windows Server DNS with Azure DNS private zones (Microsoft Documentation: Azure Private Endpoint DNS configuration)
- implement Domain Name System Security Extensions (DNSSEC) (Microsoft Documentation: Overview of DNSSEC)
Manage IP addressing in on-premises and hybrid scenarios
- implement and manage IP Address Management (IPAM) (Microsoft Documentation: IP Address Management (IPAM))
- implement and configure the Dynamic Host Configuration protocol (DHCP) server role (on-premises only) (Microsoft Documentation: How To Install and Configure a DHCP Server in a Workgroup)
- resolve IP address issues in hybrid environments (Microsoft Documentation: Troubleshoot migration issues in Exchange Server hybrid environment)
- create and manage DHCP scopes
- create and manage IP reservations (Microsoft Documentation: Managing IP Address Space)
- implementing DHCP high availability (Microsoft Documentation: Deploy DHCP Failover)
Implement on-premises and hybrid network connectivity
- implementing and managing the Remote Access role (Microsoft Documentation: Manage Remote Access)
- implement and manage Azure Network Adapter (Microsoft Documentation: Connect standalone servers by using Azure Network Adapter)
- implementing and managing Azure Extended Network (Microsoft Documentation: What is Azure Virtual Network?)
- implement and manage Network Policy Server role (Microsoft Documentation: Network Policy Server (NPS))
- implementing Web Application Proxy (Microsoft Documentation: Web Application Proxy in Windows Server)
- implement Azure Relay (Microsoft Documentation: What is Azure Relay?)
- implementing site-to-site VPN (Microsoft Documentation: Create a Site-to-Site connection in the Azure portal)
- implement Azure Virtual WAN (Microsoft Documentation: What is Azure Virtual WAN?)
- implement Microsoft Entra Application Proxy
Topic 5: Manage storage and file services (15–20%)
Configure and manage Azure File Sync
- create Azure File Sync service (Microsoft Documentation: Deploy Azure File Sync)
- creating sync groups
- create cloud endpoints (Microsoft Documentation: az storagesync sync-group cloud-endpoint)
- register servers (Microsoft Documentation: Register Servers)
- create server endpoints (Microsoft Documentation: Create a service endpoint)
- configure cloud tiering (Microsoft Documentation: Cloud tiering overview)
- monitor File Sync (Microsoft Documentation: Monitor Azure File Sync)
- Migrate Distributed File System (DFS) to Azure File Sync
Configure and manage Windows Server file shares
- configure Windows Server file share access (Microsoft Documentation: Overview of file sharing using the SMB 3 protocol in Windows Server)
- configuring file screens (Microsoft Documentation: Create a File Screen)
- configure file server resource manager (FSRM) quotas (Microsoft Documentation: File Server Resource Manager (FSRM) overview)
- configure BranchCache
- implement and configure Distributed File System (DFS) (Microsoft Documentation: Distributed File System (DFS) Functions)
Configure Windows Server storage
- configure disks and volumes (Microsoft Documentation: Overview of Disk Management)
- configuring and managing Storage Spaces (Microsoft Documentation: Deploy Storage Spaces Direct)
- configure and manage Storage Replica (Microsoft Documentation: Storage Replica overview)
- configuring Data Deduplication (Microsoft Documentation: Install and enable Data Deduplication)
- Configure Server Message Block (SMB) direct (Microsoft Documentation: SMB Direct)
- configuring Storage QoS (Microsoft Documentation: Storage Quality of Service)
- configure file systems (Microsoft Documentation: Deploy Network File System)
How Difficult is the AZ-800 Exam?
The Microsoft AZ-800 Exam is considered moderately to highly difficult, depending on your familiarity with both on-premises Windows Server administration and Azure-based hybrid infrastructure. What makes this exam uniquely challenging is its dual focus—you need to be confident working with legacy server environments as well as modern cloud technologies.
Let us break down the key reasons why some candidates find the exam demanding.
1. It Requires Hybrid Expertise
Most system administrators are either experienced in traditional Windows Server or cloud-based services—not always both. The AZ-800 exam tests your ability to integrate these environments using tools like:
- Windows Admin Center
- Azure Arc
- Azure Site Recovery
- Azure Backup
You will need to know how to deploy, monitor, secure, and troubleshoot in environments that span both local data centers and Azure cloud.
2. It Covers a Wide Range of Topics
From DNS and DHCP to virtualization, containerization, storage clustering, and Active Directory Certificate Services, the exam spans a broad spectrum of topics. Even experienced professionals may find some areas outside their day-to-day work, which increases the preparation burden.
3. Question Format Can Be Complex
Microsoft exams often include:
- Scenario-based questions
- Multi-step configuration problems
- Drag-and-drop task sequences
- Command-line (PowerShell) interpretations
These are not just fact-based questions—they test your ability to apply knowledge in a real-world context under time pressure.
4. Time Management is Crucial
With 40–60 questions in 120 minutes, you will have approximately 2 minutes per question. While that may seem manageable, case-based questions and multi-layered configurations can slow you down. Practicing under timed conditions is essential.
5. It Assumes Hands-On Experience
Unlike some certification exams that can be passed with reading alone, the AZ-800 assumes you have worked with:
- Windows Server 2019/2022
- Hyper-V and Failover Clustering
- Active Directory, Group Policy, and RBAC
- Azure Backup, Networking, and Identity Services
Without practical exposure to these tools, even well-prepared candidates may struggle.
Step-by-Step Study Guide for the AZ-800 Exam
Here is a comprehensive study guide for your success –
Week 1: Understand the Exam Structure and Set Up Your Lab
- Download the official AZ-800 skills outline.
- Review the four skill domains and note areas where you need more preparation.
- Set up your learning environment:
- Install Windows Server 2022 (evaluation version)
- Create an Azure Free Tier account
- Install Windows Admin Center on a management machine
- Set a study schedule: 1–2 hours daily for 6–8 weeks
Week 2: Manage Windows Servers in On-Premises and Hybrid Environments
Topics to Cover:
- Use Windows Admin Center to manage local and remote servers
- Deploy and configure Azure Arc for hybrid management
- Monitor server performance and manage updates
Hands-On Practice:
- Add a server to Windows Admin Center
- Connect a server to Azure Arc
- Configure performance monitoring tools
Resources:
- Microsoft Learn Module: Manage Windows Servers in a Hybrid Environment
- Practice documentation for Azure Arc and Admin Center
Week 3: Manage Virtual Machines and Containers
Topics to Cover:
- Install and configure Hyper-V
- Create and manage virtual machines
- Understand clustering and high availability concepts
- Deploy and manage Windows Containers
Hands-On Practice:
- Set up Hyper-V and create a VM
- Practice checkpoint management and live migration
- Explore container creation using Windows Server
Resources:
- Microsoft Learn Module: Manage Virtual Machines and Containers
- Official documentation on Hyper-V and failover clustering
Week 4: Implement and Manage On-Premises and Hybrid Networking
Topics to Cover:
- Configure DNS, DHCP, and IP addressing
- Set up VPN and hybrid network connectivity
- Apply network security rules and policies
Hands-On Practice:
- Install and configure DHCP and DNS roles
- Simulate a hybrid connection using Azure VPN Gateway
- Apply firewall rules and test network policies
Resources:
- Microsoft Learn Module: Implement On-Premises and Hybrid Networking
- Azure networking labs for VPNs and DNS
Week 5: Manage Storage and File Services
Topics to Cover:
- Configure Storage Spaces Direct
- Manage volumes, shares, and permissions
- Use Distributed File System (DFS) and deduplication
Hands-On Practice:
- Create SMB shares and configure NTFS permissions
- Set up DFS replication
- Enable storage deduplication and monitor results
Resources:
- Microsoft Learn Module: Manage Storage and File Services
- Microsoft documentation on Storage Spaces Direct
Week 6: Secure Windows Server Environments
Topics to Cover:
- Apply Group Policy for security settings
- Implement Just Enough Administration (JEA)
- Use Defender, BitLocker, and Windows security baselines
- Monitor server health and audit logs
Hands-On Practice:
- Create and test security-focused Group Policies
- Implement JEA for limited access scenarios
- Review Event Viewer logs and configure auditing policies
Resources:
- Microsoft Learn Module: Secure Windows Server Environments
- Microsoft Security Compliance Toolkit
Week 7: Review and Take Practice Tests
- Revisit difficult topics and revise using Microsoft Learn bookmarks
- Take two or more full-length timed practice exams from Skilr
- Analyze your mistakes and revisit related modules
- Focus on troubleshooting and configuration scenarios
Optional Week 8: Reinforce and Final Review
- Create a quick reference sheet for key PowerShell commands
- Revisit hands-on labs with a focus on weak areas
- Review performance monitoring, backups, and hybrid identity
| Category | Resource | Description |
|---|---|---|
| Official Guide | AZ-800 Skills Outline (Microsoft) | Covers all exam domains and objectives in detail |
| Free Learning | Microsoft Learn – AZ-800 Modules | Self-paced, interactive modules with labs and examples |
| Books | Exam Ref AZ-800 Administering Windows Server Hybrid Core Infrastructure (Microsoft Press) | Detailed explanations of exam topics, with chapter-end review questions |
| Practice Labs | Azure Free Tier Windows Server 2022 Evaluation ISO | Set up labs to practice server and hybrid administration tasks |
| Video Courses | Skilr | Structured video-based training aligned with AZ-800 content |
| Practice Tests | Skilr | Timed quizzes and mock exams to simulate the real exam experience |
| Discussion Forums | TechNet Forums Reddit: r/Azure | Community support, exam feedback, and preparation advice from past candidates |
Career Opportunities After Passing the AZ-800 Exam
Earning the Microsoft Certified: Windows Server Hybrid Administrator Associate credential by passing the AZ-800 (and AZ-801) exam opens up a wide range of career paths. This certification demonstrates your ability to manage hybrid infrastructures—making you a valuable asset in organizations transitioning from legacy systems to cloud-native environments.
Here are some of the most promising roles you can pursue:
1. Windows Server Administrator
Role Overview:
Responsible for installing, configuring, and maintaining Windows Server environments in data centers or hybrid cloud setups.
Key Skills:
Active Directory, Group Policy, Hyper-V, failover clustering, PowerShell
2. Hybrid Infrastructure Engineer
Role Overview:
Manages both on-premises and Azure-based systems. Ensures seamless integration, secure connectivity, and high availability across platforms.
Key Skills:
Azure Arc, Azure Site Recovery, Windows Admin Center, VPNs, DNS, DHCP
3. Systems Administrator (Cloud-Enabled)
Role Overview:
Handles daily operations, backups, patches, and performance tuning for cloud-connected server environments.
Key Skills:
Windows Server 2019/2022, Azure Backup, monitoring tools, virtual networking
4. Azure Systems Engineer
Role Overview:
Supports infrastructure migration, hybrid identity configuration, and the extension of on-premises workloads to Azure.
Key Skills:
Azure AD, Azure IaaS, RBAC, ARM templates, scripting (PowerShell, CLI)
5. IT Infrastructure Specialist
Role Overview:
Designs and maintains the full stack of infrastructure components, ensuring operational continuity in hybrid setups.
Key Skills:
Storage management, virtualization, system monitoring, patch automation, security hardening
6. Network and Systems Support Analyst
Role Overview:
Troubleshoots hybrid network and server issues, and provides support for infrastructure teams across distributed environments.
Key Skills:
Networking fundamentals, DNS/DHCP, IP routing, Active Directory, server roles
Industries Hiring for These Roles
- IT services and consulting
- Financial services and insurance
- Healthcare systems
- Government and public sector
- Manufacturing and retail enterprises
- Educational institutions with hybrid infrastructure
Why This Certification Matters
- Employers increasingly seek professionals who can bridge traditional and cloud technologies.
- Hybrid administrators are critical for secure migrations, disaster recovery setups, and hybrid identity models.
- This certification also sets the stage for more advanced Azure certifications, including AZ-104 and AZ-305.
Conclusion
The Microsoft AZ-800 Exam is not just another technical certification—it is a career gateway for IT professionals navigating the shift from traditional server administration to hybrid cloud infrastructure. As businesses increasingly adopt blended environments combining on-premises systems with Azure services, the demand for certified hybrid administrators is growing rapidly.
While the exam covers a broad and technically deep range of topics, success is achievable with the right preparation strategy, hands-on lab experience, and a strong understanding of both Windows Server and Azure fundamentals. Whether you aim to upgrade your skills, land a new role, or take the next step toward advanced Microsoft certifications, passing the AZ-800 can give your career the momentum it needs.
Start small, study smart, and build a strong foundation—because hybrid is the future, and this certification proves you are ready for it.
