Microsoft · AZ-801 · Associate
Configuring Windows Server Hybrid Advanced Services (AZ-801) — Practice Questions and Mock Exam
Practice real AZ-801 questions, never dumps. Alex explains every answer, and your readiness score tells you when you're ready to pass.
Checked against Microsoft · July 2026Current exam version
Overview
About the exam
The AZ-801 certification validates advanced skills in securing, managing, and monitoring Windows Server environments in hybrid configurations. It covers Windows Server security, high availability and disaster recovery, server migration using Azure Migrate, monitoring with Azure Monitor, and troubleshooting across on-premises and Azure environments. This is one of two exams required for the Windows Server Hybrid Administrator Associate certification.
This certification is designed for senior Windows Server administrators who secure and optimize hybrid infrastructure. Candidates should already have the core infrastructure skills validated by AZ-800 and need experience with advanced security hardening, failover clustering, Azure Site Recovery, and enterprise monitoring solutions.
Exam Domains
What's on the exam
The exam consists of 40–60 questions to be completed in approximately 100 minutes (100 minutes if labs are included). Question types include multiple-choice, multiple-select, drag-and-drop, and hot area formats. Questions emphasize security hardening, disaster recovery configurations, and migration planning. Expect scenarios that require combining Azure services like Azure Migrate and Azure Site Recovery with on-premises Windows Server.
Secure Windows Server OS (Exploit Protection, Windows Defender Application Control, Credential Guard, SmartScreen, Group Policies, OSConfig, Windows LAPS), secure hybrid Active Directory (password policies, Entra Password Protection, protected users, RODC security, Defender for Identity, NTLM), remediate security issues with Azure services (Sentinel, Defender for Cloud/Servers), secure networking (Windows Defender Firewall, domain isolation, connection security rules, NSGs), and secure storage (BitLocker, Azure Disk Encryption)
Implement Windows Server failover clusters (on-premises/hybrid/cloud, workgroup clusters, stretch clusters, S2D campus clusters, storage/quorum/network configuration, cluster-aware updating, Scale-Out File Servers, Azure witness), manage failover clustering (cluster-aware updating, node recovery/upgrade, workload failover, Windows Admin Center), and implement Storage Spaces Direct (S2D node upgrade, networking, configuration)
Manage backup and recovery for Windows Server (Azure Recovery Services Vault, Azure Backup Server, backup policies, VM recovery including encrypted VMs), implement disaster recovery with Azure Site Recovery (network mapping, on-premises/Azure VM configuration, recovery plans, replication), and protect VMs using Hyper-V replicas (host configuration, VM replication, failover)
Migrate on-premises storage (Storage Migration Service, Azure file shares), migrate servers using Azure Migrate (appliance deployment, VM/physical server migration), migrate workloads from previous Windows Server versions (IIS, Hyper-V hosts, RDS, DHCP, print servers, in-place upgrade), migrate IIS workloads to Azure (Azure Migrate assessment, Web Apps, containers), and migrate AD forest to Windows Server 2025 (forest restructure, AD Migration Tool)
Monitor using Windows Server tools and Azure services (Performance Monitor, Data Collector Sets, Windows Admin Center, System Insights, event logs, Azure Monitor DCRs/alerts, VM Insights), troubleshoot Windows Server issues (connectivity, name resolution, Windows Update, Time Service, deployment/booting failures, performance, VM/Arc extensions, disk encryption, storage), and troubleshoot Active Directory (AD recycle bin, DSRM, SYSVOL recovery, replication, hybrid auth/sync)
SourceMicrosoft study guide
Format
What to expect
Watch out
Where candidates struggle
This advanced exam assumes mastery of AZ-800 content. Candidates who haven't completed AZ-800 preparation first often lack the foundational knowledge needed for these more complex hybrid security and migration scenarios.
- 01Server Hardening — Not understanding Windows Server security baselines, credential guard, and advanced threat protection configurations.
- 02Failover Clustering — Struggling with Windows Server Failover Clustering quorum models, witness configurations, and cluster-aware updating.
- 03Azure Site Recovery — Confusing Azure Site Recovery vs Azure Backup and not knowing replication, failover, and failback procedures for hybrid DR.
- 04Migration Planning — Overlooking Azure Migrate assessment and migration tool capabilities for physical and virtual server migrations.
- 05Monitoring Integration — Not configuring Azure Monitor Agent, Log Analytics workspaces, and Windows Admin Center for comprehensive hybrid monitoring.
Details
Exam logistics
Delivered via Pearson VUE online or at testing centers. Available in English, Japanese, Chinese, Korean, French, German, and Spanish. The certification is valid for 1 year with a free renewal assessment on Microsoft Learn.
SourceMicrosoft exam page
Before you book the exam
Would you pass AZ-801 today?
Take the free readiness check. Answer real AZ-801 questions and get your readiness score across every domain.
Take the free readiness check20 questions · freeReach 80% readiness by exam day. Pass, or your money back.