AZ-801T00 Configuring Windows Server Hybrid Advanced Services
- Implement Windows Server IaaS VM Network Security
– Implement network security groups and Windows IaaS VMs
– Implement adaptive network hardening
– Implement Azure Firewall and Windows IaaS VMs
– Implement Windows Firewall with Windows Server IaaS VMs
– Choose the appropriate filtering solution
– Deploy and configure Azure Firewall using the Azure portal
– Capture network traffic with Network Watcher
– Log network traffic to and from a VM using the Azure portal
- Audit the Security of Windows Server IaaS Virtual Machines
– Describe Azure Security Center
– Enable Azure Security Center in hybrid environments
– Implement and assess security policies
– Protect your resources with Azure Security Center
– Implement Azure Sentinel
- Manage Azure Updates
– Describe update management
– Enable update management
– Deploy updates
– View update assessments
– Manage updates for your Azure Virtual Machines
- Create and Implement Application Allowlists with Adaptive Application Control
– Describe adaptive application control
– Implement adaptive application control policies
- Configure BitLocker Disk Encryption for Windows IaaS Virtual Machines
– Describe Azure Disk Encryption and server-side encryption
– Configure Key Vault for Azure Disk Encryption
– Encrypt Azure IaaS Virtual Machine hard disks
– Back up and recover data from encrypted disks
– Create and encrypt a Windows Virtual Machine
- Implement Change Tracking and File Integrity Monitoring for Windows IaaS VMs
– Implement Change Tracking and Inventory
– Manage Change Tracking and Inventory
– Manage tracked files
– Implement File Integrity Monitoring
– Select and monitor entities
– Use File Integrity Monitoring
- Secure Windows Server DNS
– Implement split-horizon DNS
– Create DNS policies
– Implement DNS policies
– Secure Windows Server DNS
– Implement DNSSEC
- Secure Windows Server User Accounts
– Configure user account rights
– Protect user accounts with the Protected Users group
– Describe Windows Defender Credential Guard
– Block NTLM authentication
– Locate problematic accounts
- Windows Server Update Management
– Explore Windows Update
– Outline Windows Server Update Services server deployment options
– Define Windows Server Update Services update management process
– Describe the process of Update Management
- Introduction to Cluster Shared Volumes
– Determine the functionality of Cluster Shared Volumes
– Explore the architecture and components of Cluster Shared Volumes
– Implement Cluster Shared Volumes
- Implement Windows Server Failover Clustering
– Define Windows Server failover clustering
– Plan Windows Server failover clustering
– Implement Windows Server failover clustering
– Manage Windows Server failover clustering
– Implement stretch clusters
– Define cluster sets
- Implement High Availability of Windows Server VMs
– Select high-availability options for Hyper-V
– Consider network load balancing for Hyper-V VMs
– Implement Hyper-V VM live migration
– Implement Hyper-V VMs storage migration
- Implement Windows Server File Server High Availability
– Explore the Windows Server File Server high-availability options
– Define Cluster Shared Volumes
– Implement Scale-Out File Server
– Implement Storage Replica
- Implement Scale and High Availability with Windows Server VM
– Describe virtual machine scale sets
– Implement scaling
– Implement load-balancing VMs
– Create a virtual machine scale set in the Azure portal
– Describe Azure Site Recovery
– Implement Azure Site Recovery
- Implement Hyper-V Replica
– Define Hyper-V Replica
– Plan for Hyper-V Replica
– Configure and implement Hyper-V Replica
– Define extended replication
– Define Azure Site Recovery
– Implement Site Recovery from on-premises site to Azure
– Implement Site Recovery from on-premises site to on-premises site
- Implement Hybrid Backup and Recovery with Windows Server IaaS
– Describe Azure Backup
– Implement recovery vaults
– Implement Azure Backup policies
– Recover Windows IaaS Virtual Machines
– Perform file and folder recovery
– Perform backup and restore of on-premises workloads
– Manage Azure Virtual Machine backups with Azure Backup service
- Protect Your On-Premises Infrastructure from Disasters with Azure Site Recovery
– Azure Site Recovery overview
– Workloads supported for protection with Azure Site Recovery
– Run a disaster recovery drill
– Failover and failback
- Protect Your Azure Infrastructure with Azure Site Recovery
– What is Azure Site Recovery
– Prepare for disaster recovery with Azure Site Recovery
– Run a disaster recovery drill
– Failover and failback using Azure Site Recovery
- Protect Your Virtual Machines by Using Azure Backup
– Azure Backup features and scenarios
– Back up an Azure virtual machine by using Azure Backup
– Restore virtual machine data
- Migrate On-Premises Windows Server Instances to Azure IaaS Virtual Machines
– Plan your migration
– Describe Azure Migrate
– Perform server assessment
– Assess physical servers with Azure Migrate
– Migrate Windows Server workloads by using Azure Migrate
- Upgrade and Migrate Windows Server IaaS Virtual Machines
– Describe Azure Migrate
– Migrate Windows Server workloads by using Azure Migrate
– Describe storage migration
– Migrate file servers by using Storage Migration Service
- Active Directory Domain Services Migration
– Examine upgrade vs. migration
– Upgrade a previous version of Active Directory Domain Services to Windows Server 2022
– Migrate to Active Directory Domain Services in Windows Server 2022 from a previous version
– Explore the Active Directory Migration Tool
- Migrate File Server Workloads Using Storage Migration Service
– Storage Migration Service overview and usage scenarios
– Storage migration requirements
– Migrate a server with Storage migration
– Evaluate storage migration considerations
- Migrate Windows Server Roles
– Describe the Windows Server Migration Tools
– Install the Migration Tools
– Migrate roles using the Migration Tools
- Monitor Windows Server IaaS Virtual Machines and Hybrid Instances
– Enable Azure Monitor for Virtual Machines
– Monitor an Azure Virtual Machine with Azure Monitor
– Enable Azure Monitor in hybrid scenarios
– Collect data from a Windows computer in a hybrid environment
– Integrate Azure Monitor with Microsoft Operations Manager
- Monitor Your Azure Virtual Machines with Azure Monitor
– Monitoring for Azure VMs
– Monitor VM host data
– Use Metrics Explorer to view detailed host metrics
– Collect client performance counters by using VM insights
– Collect VM client event logs
- Monitor Windows Server Performance
– Use Performance Monitor to identify performance problems
– Use Resource Monitor to review current resource usage
– Review reliability with Reliability Monitor
– Implement a performance monitoring methodology
– Use Data Collector Sets to analyze server performance
– Monitor network infrastructure services
– Monitor virtual machines running Windows Server
– Monitor performance with Windows Admin Center
– Use System Insights to help predict future capacity issues
– Optimize the performance of Windows Server
- Manage and Monitor Windows Server Event Logs
– Describe Windows Server event logs
– Use Windows Admin Center to review logs
– Use Server Manager to review logs
– Use custom views
– Implement event log subscriptions
- Implement Windows Server Auditing and Diagnostics
– Describe basic auditing categories
– Describe advanced categories
– Log user access
– Enable setup and boot event collection
- Troubleshoot On-Premises and Hybrid Networking
– Diagnose DHCP problems
– Diagnose DNS problems
– Diagnose IP configuration issues
– Diagnose routing problems
– Use Packet Monitor to help diagnose network problems
– Use Azure Network Watcher to help diagnose network problems
- Troubleshoot Windows Server Virtual Machines in Azure
– Troubleshoot VM deployment
– Troubleshoot VM startup
– Troubleshoot VM extensions
– Troubleshoot VM connectivity
– Troubleshoot VM performance
– Troubleshoot VM storage
- Troubleshoot Active Directory
– Recover objects from the AD recycle bin
– Recover the AD DS database
– Recover SYSVOL
– Troubleshoot AD DS replication
– Troubleshoot hybrid authentication issues