
The Microsoft Exam AZ-800 is designed for IT professionals who are responsible for configuring, managing, and supporting Windows Server environments across on-premises, hybrid, and Infrastructure as a Service (IaaS) platforms. In the role of a Windows Server hybrid administrator, your core responsibilities include:
- Integrating Windows Server environments with Azure services
- Managing Windows Server workloads within on-premises infrastructures
- Administering and maintaining IaaS-based Windows Server deployments in Microsoft Azure
- Migrating and deploying workloads to the Azure cloud environment
Collaboration Across IT Roles
This role typically involves collaboration with professionals in various related domains, such as:
- Azure Administrators
- Enterprise Architects
- Microsoft 365 Administrators
- Network Engineers
Skills and Tasks Expected from Exam Candidates
Candidates for the AZ-800 exam are expected to demonstrate the ability to:
- Deploy, package, secure, update, and configure Windows Server workloads
- Implement and manage identity, security, compute, storage, networking, and monitoring solutions
- Ensure business continuity through high availability and disaster recovery implementations
- Utilize both on-premises and cloud-based tools and technologies effectively
Tools and Technologies Utilized
To succeed in this role, proficiency with the following tools and platforms is essential:
- Windows Admin Center
- PowerShell
- Azure Arc
- Azure Policy
- Azure Monitor
- Azure Update Manager
- Microsoft Defender for Identity
- Microsoft Defender for Cloud
- IaaS Virtual Machine (VM) Administration
Exam Details

To successfully pass the AZ-800 certification exam, candidates must achieve a minimum score of 700. The exam is available in multiple languages, including English, Japanese, Simplified Chinese, German, French, Spanish, and Brazilian Portuguese, allowing a diverse group of professionals to participate. Microsoft also accommodates individuals who use assistive technologies or require additional time or adjustments during the exam. These accommodations can be requested to ensure an inclusive and accessible testing experience.
Course Outline
The Microsoft AZ-800 exam covers the following topics:
Topic 1: Deploying and managing Azure Directory Domain Services (AD DS) in on-premises and cloud environments (30–35%)
Deploying and managing AD DS domain controllers
- deploying and managing domain controllers on-premises (MicrosoftDocumentation: Deploy and manage Azure IaaS Active Directory domain controllers in Azure)
- deploying and managing domain controllers in Azure (MicrosoftDocumentation: Deploy AD DS in an Azure virtual network)
- deploying read-only domain controllers (RODCs) (MicrosoftDocumentation: AD DS: Read-Only Domain Controllers)
- troubleshoot flexible single master operation (FSMO) roles (MicrosoftDocumentation: Active Directory FSMO roles in Windows)
Configuring and managing multi-site, multi-domain, and multi-forest environments
- configuring and manage forest and domain trusts (MicrosoftDocumentation: How trust relationships work for resource forests in Azure Active Directory Domain Services)
- configuring and managing AD DS sites (MicrosoftDocumentation: Create and configure an Azure Active Directory Domain Services managed domain)
- configuring and managing AD DS replication (MicrosoftDocumentation: Active Directory Replication Concepts)
Creating and managing AD DS security principals
- creating and managing AD DS users and groups (MicrosoftDocumentation: Create and configure an Azure Active Directory Domain Services managed domain)
- managing users and groups in multi-domain and multi-forest scenarios (MicrosoftDocumentation: Multiple forests with AD DS and Azure AD)
- implement group managed service accounts (gMSAs) (MicrosoftDocumentation: Group Managed Service Accounts Overview)
- Joining Windows Servers to AD DS, Microsoft Entra Domain Services, and Microsoft Entra
Implementing and managing hybrid identities
- Integrating Microsoft Entra ID, AD DS and Microsoft Entra Domain Services
- implementing Microsoft Entra Connect
- managing Microsoft Entra Connect Synchronization
- implementing Microsoft Entra Connect cloud sync
- managing Microsoft Entra Domain Services
- managing Microsoft Entra Connect Health
- managing authentication in on-premises and hybrid environments (MicrosoftDocumentation: Microsoft 365 integration with on-premises environments)
- configuring and managing AD DS passwords (MicrosoftDocumentation: Password and account lockout policies)
Managing Windows Server by using domain-based Group Policies
- implementing Group Policy in AD DS (MicrosoftDocumentation: Administer Group Policy in an Azure Active Directory Domain Services managed domain)
- implementing Group Policy Preferences in AD DS (MicrosoftDocumentation: Group Policy Preferences)
- implementing Group Policy in Microsoft Entra Domain Services
Topic 2: Managing Windows Servers and workloads in a hybrid environment (10–15%)
Managing Windows Servers in a hybrid environment
- deploying a Windows Admin Center Gateway server (MicrosoftDocumentation: Install Windows Admin Center)
- configuring a target machine for Windows Admin Center Gateway server (MicrosoftDocumentation: Troubleshooting Windows Admin Center)
- configuring PowerShell Remoting (MicrosoftDocumentation: Enable-PSRemoting)
- configuring Credential Security Support Provider protocol (CredSSP) or Kerberos Delegation for 2nd Hop Remoting (MicrosoftDocumentation: Making the second hop in PowerShell Remoting)
- configuring Just Enough Administration (JEA) for PowerShell Remoting (MicrosoftDocumentation: Just Enough Administration)
Managing Windows Servers and workloads by using Azure services
- managing Windows Servers by using Azure Arc (MicrosoftDocumentation: What is Azure Arc-enabled servers?)
- Create and assign Azure Policy that uses guest configuration extension
- deploy Azure services using Azure VM extensions on non-Azure machines (MicrosoftDocumentation: Virtual machine extensions and features for Windows)
- manage updates for Windows machines (MicrosoftDocumentation: Update Management overview)
- integrate Windows Servers with Log Analytics (MicrosoftDocumentation: Install Log Analytics agent on Windows computers)
- Integrate Windows Servers with Microsoft Defender for Cloud
- manage IaaS VMs in Azure that run Windows Server (MicrosoftDocumentation: Administer and manage Windows Server IaaS Virtual Machine remotely)
- implement Azure Automation for hybrid workloads (MicrosoftDocumentation: Automation Hybrid Runbook Worker overview)
- create runbooks to automate tasks on target VMs (MicrosoftDocumentation: Manage runbooks in Azure Automation)
- Implement Azure Automation State Configuration to prevent configuration drift in IaaS machines (MicrosoftDocumentation: Azure Automation State Configuration overview)
Topic 3: Managing virtual machines and containers (15–20%)
Managing Hyper-V and guest virtual machines
- enable VM enhanced session mode (MicrosoftDocumentation: Enable enhanced console session in VMM)
- Manage VM using PowerShell remoting, PowerShell Direct and Secure Shell (SSH) Direct for Linux VMs
- configure nested virtualization (MicrosoftDocumentation: Run Hyper-V in a Virtual Machine with Nested Virtualization)
- configuring VM memory (MicrosoftDocumentation: Configure virtual machine settings in the VMM compute fabric)
- configure Integration Services (MicrosoftDocumentation: Install Integration Services (SSIS))
- configuring Discrete Device Assignment (MicrosoftDocumentation: Deploy graphics devices using Discrete Device Assignment)
- configure VM Resource Groups (MicrosoftDocumentation: Manage Azure Resource Manager resource groups by using the Azure portal)
- configuring VM CPU Groups (MicrosoftDocumentation: Virtual Machine Resource Controls)
- configure hypervisor scheduling types (MicrosoftDocumentation: Managing Hyper-V hypervisor scheduler types)
- manage VM Checkpoints (MicrosoftDocumentation: Enable or disable checkpoints)
- implement high availability for virtual machines (MicrosoftDocumentation: Availability options for Azure Virtual Machines)
- manage virtual hard disk (VHD) and virtual hard disk v2 (VHDX) files (MicrosoftDocumentation: Manage Virtual Hard Disks (VHD))
- configure Hyper-V network adapter (MicrosoftDocumentation: Create a virtual switch for Hyper-V virtual machines)
- configuring network interface card (NIC) Teaming (MicrosoftDocumentation: Create a new NIC Team on a host computer or VM)
- configure Hyper-V switch
Create and manage containers
- create Windows Server container images (MicrosoftDocumentation: Container Base Images)
- manage Windows Server container images
- configure Container networking (MicrosoftDocumentation: Windows container networking)
- managing container instances (MicrosoftDocumentation: What is Azure Container Instances?)
Manage Azure Virtual Machines that run Windows Server
- manage data disks (MicrosoftDocumentation: Introduction to Azure managed disks)
- resize Azure VM (MicrosoftDocumentation: Change the size of a virtual machine)
- configure connections to VMs (MicrosoftDocumentation: How to connect and sign on to an Azure virtual machine running Windows)
- manage Azure VM network configuration (MicrosoftDocumentation: Virtual networks and virtual machines in Azure)
Topic 4: Implementing and managing an on-premises and hybrid networking infrastructure (15–20%)
Implement on-premises and hybrid name resolution
- integrate DNS with AD DS (MicrosoftDocumentation: DNS and AD DS)
- create and manage DNS zones and records (MicrosoftDocumentation: Overview of DNS zones and records)
- configure DNS forwarding/conditional forwarding (MicrosoftDocumentation: Forwarders and conditional forwarders resolution timeouts)
- integrate Windows Server DNS with Azure DNS private zones (MicrosoftDocumentation: Azure Private Endpoint DNS configuration)
- implement Domain Name System Security Extensions (DNSSEC) (MicrosoftDocumentation: Overview of DNSSEC)
Manage IP addressing in on-premises and hybrid scenarios
- implement and manage IP Address Management (IPAM) (MicrosoftDocumentation: IP Address Management (IPAM))
- implement and configure the Dynamic Host Configuration protocol (DHCP) server role (on-premises only) (MicrosoftDocumentation: How To Install and Configure a DHCP Server in a Workgroup)
- resolve IP address issues in hybrid environments (MicrosoftDocumentation: Troubleshoot migration issues in Exchange Server hybrid environment)
- create and manage DHCP scopes
- create and manage IP reservations (MicrosoftDocumentation: Managing IP Address Space)
- implementing DHCP high availability (MicrosoftDocumentation: Deploy DHCP Failover)
Implement on-premises and hybrid network connectivity
- implementing and managing the Remote Access role (MicrosoftDocumentation: Manage Remote Access)
- implement and manage Azure Network Adapter (MicrosoftDocumentation: Connect standalone servers by using Azure Network Adapter)
- implementing and managing Azure Extended Network (MicrosoftDocumentation: What is Azure Virtual Network?)
- implement and manage Network Policy Server role (MicrosoftDocumentation: Network Policy Server (NPS))
- implementing Web Application Proxy (MicrosoftDocumentation: Web Application Proxy in Windows Server)
- implement Azure Relay (MicrosoftDocumentation: What is Azure Relay?)
- implementing site-to-site VPN (MicrosoftDocumentation: Create a Site-to-Site connection in the Azure portal)
- implement Azure Virtual WAN (MicrosoftDocumentation: What is Azure Virtual WAN?)
- implement Microsoft Entra Application Proxy
Topic 5: Managing storage and file services (15–20%)
Configure and manage Azure File Sync
- create Azure File Sync service (MicrosoftDocumentation: Deploy Azure File Sync)
- creating sync groups
- create cloud endpoints (MicrosoftDocumentation: az storagesync sync-group cloud-endpoint)
- register servers (MicrosoftDocumentation: Register Servers)
- create server endpoints (MicrosoftDocumentation: Create a service endpoint)
- configure cloud tiering (MicrosoftDocumentation: Cloud tiering overview)
- monitor File Sync (MicrosoftDocumentation: Monitor Azure File Sync)
- Migrate Distributed File System (DFS) to Azure File Sync
Configure and manage Windows Server file shares
- configure Windows Server file share access (MicrosoftDocumentation: Overview of file sharing using the SMB 3 protocol in Windows Server)
- configuring file screens (MicrosoftDocumentation: Create a File Screen)
- configure file server resource manager (FSRM) quotas (MicrosoftDocumentation: File Server Resource Manager (FSRM) overview)
- configure BranchCache
- implement and configure Distributed File System (DFS) (MicrosoftDocumentation: Distributed File System (DFS) Functions)
Configure Windows Server storage
- configure disks and volumes (MicrosoftDocumentation: Overview of Disk Management)
- configuring and managing Storage Spaces (MicrosoftDocumentation: Deploy Storage Spaces Direct)
- configure and manage Storage Replica (MicrosoftDocumentation: Storage Replica overview)
- configuring Data Deduplication (MicrosoftDocumentation: Install and enable Data Deduplication)
- Configure Server Message Block (SMB) direct (MicrosoftDocumentation: SMB Direct)
- configuring Storage QoS (MicrosoftDocumentation: Storage Quality of Service)
- configure file systems (MicrosoftDocumentation: Deploy Network File System)
Microsoft AZ-800 Exam FAQs
Exam Policies
Microsoft Certification exam policies provide essential information regarding the exam process, including the delivery methods and the rules candidates must adhere to during the assessment or at authorized testing centers. These guidelines ensure a standardized and fair testing environment for all participants.
Retake Policy
Candidates who do not pass the exam on their first attempt must wait a minimum of 24 hours before retaking it. During this period, they can log into their certification dashboard to reschedule the exam. If a second attempt is unsuccessful, the waiting period increases to at least 14 days. This 14-day gap is also enforced between the third and fourth, as well as the fourth and fifth, attempts. Importantly, candidates are limited to a maximum of five exam attempts within a 12-month period, starting from the date of their first try.
Rescheduling and Cancellation Policy
Microsoft offers flexibility for candidates needing to change their exam appointments. Rescheduling or cancelling an exam at least six business days prior to the appointment incurs no fee. However, any changes made within five business days of the scheduled exam will result in a rescheduling or cancellation fee. If a candidate fails to appear for the exam or does not reschedule at least 24 hours in advance, the full exam fee will be forfeited. In some cases, Microsoft may temporarily waive these fees under specific conditions, such as for accessibility or emergency needs.
Microsoft AZ-800 Exam Study Guide

1. Understand the Exam Objectives
Before preparing for the AZ-800: Administering Windows Server Hybrid Core Infrastructure exam, it’s essential to have a clear understanding of the exam objectives. These objectives outline the core skills and knowledge areas that candidates are expected to master. They cover a broad range of topics, including managing Windows Server in on-premises, hybrid, and IaaS environments, integrating with Azure services, and implementing identity, security, compute, networking, and storage solutions. By thoroughly reviewing the official exam objectives, candidates can align their study efforts with the key areas tested, ensuring a more focused and effective preparation strategy.
2. Follow the Microsoft Learning Path
To enhance your preparation for the AZ-800 exam, it’s highly recommended to explore Microsoft’s official learning paths and training modules. These resources are structured by certified experts to align closely with the exam objectives and provide hands-on, scenario-based learning. The modules cover essential topics such as Windows Server administration, hybrid infrastructure management, Azure integration, and security best practices. Whether you’re studying independently or supplementing classroom instruction, following these guided learning paths ensures a comprehensive understanding of the required skills and helps build confidence for the certification exam. This includes:
- Deploying and managing identity infrastructure
- Managing Windows Servers and workloads in a hybrid environment
- Managing virtualization and containers in a hybrid environment
- Implementing and operating an on-premises and hybrid networking infrastructure
- Configuring storage and file services
3. Refer to Microsoft Docs for In-Depth Technical Guidance
Microsoft Docs is an essential resource for anyone preparing for the AZ-800 exam, offering comprehensive and up-to-date technical documentation directly from Microsoft. It provides detailed explanations, deployment guides, best practices, and configuration steps for managing Windows Server environments across on-premises, hybrid, and Azure platforms. Regularly consulting these documents ensures you’re learning in alignment with current Microsoft standards and gaining practical insights applicable to real-world scenarios.
4. Join Study Groups for Collaborative Learning
Participating in study groups can significantly enhance your AZ-800 exam preparation. Engaging with peers allows you to exchange ideas, clarify complex topics, and gain different perspectives on Windows Server administration and hybrid infrastructure concepts. These groups often share useful resources, study tips, and real-world experiences that can help deepen your understanding. Whether through online forums, community groups, or social media platforms, joining a study group fosters collaborative learning and keeps you motivated throughout your certification journey.
5. Take AZ-800 Practice Tests to Assess Your Readiness
Practice tests are a valuable tool for evaluating your knowledge and identifying areas that need improvement before taking the AZ-800 exam. They simulate the actual exam format and help you become familiar with the types of questions you may encounter. By regularly completing practice exams, you can track your progress, improve time management, and build confidence. Many platforms offer AZ-800 exam questions that reflect current exam objectives, making them an essential part of a well-rounded study plan.