- Exam Overview
- How to Prepare
- Exam Blueprint & Skills Measured
- Practice & Preparation Materials
- 10 Realistic Demo Practice Questions & Answers
- Community Discussion & Study Group
- Detailed Topic Documentation Index
- Official Microsoft Learning Resources
Exam AZ-801 validates technical expertise in configuring advanced Windows Server hybrid services, including failover clustering, disaster recovery, migration, security, monitoring, and workload troubleshooting.
| Attribute | Specification |
|---|---|
| Exam Code | AZ-801 |
| Certification Name | Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-801) |
| Passing Score | 700 / 1000 (Scaled Score) |
| Official Portal | Microsoft Learn Credentials |
-
🔗 Review the Exam AZ-801 page for exam registration and other details:
Visit the Official Microsoft Exam Registration Page to review scheduling options via Pearson VUE. -
📚 Explore the Official Study Guide:
Review the official Microsoft study guide for an itemized breakdown of testable objectives. -
👥 Connect with Microsoft Training Services Partners:
Find authorized training partners worldwide at the Microsoft Training Services Partner Directory.
| Domain / Skill Area | Weighting |
|---|---|
| Secure Windows Server on-premises and hybrid infrastructures | 25–30% |
| Implement and manage Windows Server high availability | 10–15% |
| Implement disaster recovery | 10–15% |
| Migrate servers and workloads | 20–25% |
| Monitor and troubleshoot Windows Server environments | 20–25% |
For comprehensive practice tests, high-yield scenario questions, and full-length exam simulations, explore the dedicated practice resources for AZ-801.
Scenario / Question: You configure a 2-node Windows Server Failover Cluster across two branch offices. To prevent split-brain scenarios and maintain cluster quorum without dedicated physical storage at a third site, which quorum witness type should you configure?
- A) Cloud Witness (using an Azure Storage Account Blob container)
- B) Disk Witness on Node 1
- C) Disabling quorum
- D) Local USB drive
- Correct Answer: A
- Detailed Explanation: Cloud Witness uses lightweight Azure Blob Storage as an external arbitration witness for multi-site failover clusters without requiring a third physical data center.
Scenario / Question: You need to replicate a 10 TB storage volume between two server clusters located 500 kilometers apart over a WAN link with 25 ms latency. Which Storage Replica replication mode should you configure to prevent I/O blocking on the primary storage?
- A) Asynchronous Replication
- B) Synchronous Replication (Zero RPO)
- C) Robocopy scheduled task
- D) Daily tape backup
- Correct Answer: A
- Detailed Explanation: Asynchronous replication writes data to the primary storage and immediately acknowledges the write to the application, streaming changes to the secondary site without WAN latency penalties.
Scenario / Question: You need to migrate 20 on-premises Windows Server 2012 R2 file servers to Windows Server 2022 VMs in Azure, preserving all NTFS security permissions, share names, file attributes, and cutover IP configurations automatically. Which feature in Windows Admin Center is purpose-built for this?
- A) Storage Migration Service (SMS)
- B) Copy/Paste via File Explorer
- C) Robocopy batch file
- D) Azure File Sync without migration
- Correct Answer: A
- Detailed Explanation: Storage Migration Service (SMS) inventories source servers, transfers data/permissions, and cuts over network identities and IP/names seamlessly to destination servers.
Scenario / Question: Which advanced capability in Windows Server Azure Edition allows applying monthly security patches in memory without requiring a reboot of the production virtual machine?
- A) Hotpatching (Azure Automanage)
- B) Windows Update Ring
- C) Sysprep image replace
- D) Safe Mode boot
- Correct Answer: A
- Detailed Explanation: Hotpatching patches Windows Server code in memory without restarting the OS, maximizing workload availability.
Scenario / Question: Which cloud security solution deploys lightweight sensors on on-premises Active Directory Domain Controllers to detect advanced attacks like Pass-the-Hash, Golden Ticket, and reconnaissance activities in real time?
- A) Microsoft Defender for Identity
- B) Windows Defender Firewall
- C) Azure Network Watcher
- D) IIS Express
- Correct Answer: A
- Detailed Explanation: Microsoft Defender for Identity monitors Active Directory domain controller traffic and event logs to detect credential theft and lateral movement.
Scenario / Question: You are assessing 500 on-premises VMware virtual machines for migration to Azure IaaS. Which tool discovers VM configurations, estimates monthly Azure compute/storage costs, and checks Azure readiness?
- A) Azure Migrate: Discovery and Assessment
- B) Windows Performance Monitor
- C) Task Manager
- D) Event Viewer
- Correct Answer: A
- Detailed Explanation: Azure Migrate discovers VMware and Hyper-V environments, models dependency maps, and calculates performance-based sizing and cost estimates for Azure.
Scenario / Question: Which modern monitoring agent replaces the legacy Log Analytics Agent (MMA) and uses Data Collection Rules (DCR) to stream Windows Event Logs, Syslog, and performance counters to Azure Monitor?
- A) Azure Monitor Agent (AMA)
- B) Microsoft Monitoring Agent (MMA)
- C) SCOM Agent
- D) Network Watcher Extension
- Correct Answer: A
- Detailed Explanation: Azure Monitor Agent (AMA) uses centralized Data Collection Rules (DCR) to filter and collect specific security and performance telemetry for Azure and hybrid servers.
Scenario / Question: In a Windows Server Failover Cluster with Cluster Shared Volumes (CSV), what happens if a cluster node loses its direct SAN/Storage connection but maintains network communication with partner nodes?
- A) CSV automatically redirects storage I/O over the cluster network to another node connected to the storage (I/O Redirection mode)
- B) The VM instantly crashes
- C) The disk is formatted
- D) The node is permanently destroyed
- Correct Answer: A
- Detailed Explanation: CSV I/O redirection reroutes disk read/write requests across the internal cluster network through a healthy coordinator node if direct storage paths fail.
Scenario / Question: You need to allow helpdesk operators to restart the Print Spooler service on Windows Servers via PowerShell Remoting without granting them local Administrator privileges or access to any other PowerShell cmdlets. What should you configure?
- A) Just Enough Administration (JEA) with Role Capability and Session Configuration files
- B) Add helpdesk users to Domain Admins
- C) Grant Full Control on C:\Windows
- D) Disable PowerShell
- Correct Answer: A
- Detailed Explanation: Just Enough Administration (JEA) enforces role-based access over PowerShell Remoting, exposing only specific allowed cmdlets, parameters, and scripts to non-administrators.
Scenario / Question: Which Azure disaster recovery service replicates on-premises Hyper-V virtual machines to Azure storage and coordinates automated failover and test failovers during data center disasters?
- A) Azure Site Recovery (ASR)
- B) Azure File Sync
- C) Azure Cosmos DB
- D) Azure Traffic Manager
- Correct Answer: A
- Detailed Explanation: Azure Site Recovery (ASR) orchestrates continuous VM replication, health monitoring, failover drills, and production failover to Azure infrastructure.
Have questions regarding AZ-801 concepts, study plans, or exam strategies?
- 💬 Ask a question or start a topic: GitHub Discussions
- 🐛 Report corrections or suggest updates: GitHub Issues
- 🤝 Contribute: Open a Pull Request to share study notes, architecture diagrams, and review materials.
- 📘 01-secure-hybrid-infrastructure.md
- 📘 02-failover-clustering-and-ha.md
- 📘 03-disaster-recovery-and-backup.md
- 📘 04-workload-and-server-migration.md
- 📘 05-monitoring-and-troubleshooting.md
- 📘 06-azure-automanage-and-update.md
- 📘 07-official-resources-and-links.md
- 🌐 Microsoft Learn Certification Directory
- 🌐 Microsoft Learn Free Interactive Modules
- 🌐 Find a Microsoft Training Services Partner
This repository contains educational study notes, architecture summaries, and reference documentation compiled from publicly available official Microsoft Learn documentation. Microsoft, Azure, and Microsoft Entra are trademarks of the Microsoft group of companies.