Configuring Windows Server Hybrid Advanced Services

 

• Candidates for this exam are responsible for configuring and managing Windows Server on-premises, hybrid, and Infrastructure as a Service (IaaS) platform workloads. The Windows Server hybrid administrator is tasked with integrating Windows Server environments with Azure services and managing Windows Server in on-premises networks. This role manages and maintains Windows Server IaaS workloads in Azure as well as migrating and deploying workloads to Azure. This role typically collaborates with Azure administrators, enterprise architects, Microsoft 365 administrators, and network engineers.
• Candidates for this exam deploy, package, secure, update, and configure Windows Server workloads using on-premises, hybrid, and cloud technologies. This role implements and manages on-premises and hybrid solutions, such as identity, security, management, compute, networking, storage, monitoring, high availability, and disaster recovery. This role uses administrative tools and technologies such as Windows Admin Center, PowerShell, Azure Arc, Azure Policy, Azure Monitor, Azure Automation Update Management, Microsoft Defender for Identity, Microsoft Defender for Cloud, and IaaS VM administration.
• Candidates for this exam have several years of experience with Windows Server operating systems.

As an exam candidate, you should have extensive experience working with Windows Server operating systems, and expertise in implementing and managing on-premises and hybrid solutions. This experience should include performing tasks related to security, migration, monitoring, high availability, troubleshooting, and disaster recovery.
 

Secure Windows Server on-premises and hybrid infrastructures (25— 30%) Secure Windows Server operating system

• Configure and manage Exploit Protection
• Configure and manage Windows Defender Application Control
• Configure and manage Windows Defender for Endpoint
• Configure and manage Windows Defender Credential Guard
• Configure SmartScreen
• Implement operating system security by using Group Policies

Secure a hybrid Active Directory infrastructure

• Configure password policies
• Enable password block lists
• Manage protected users
• Manage account security on an RODC
• Harden domain controllers
• Configure authentication policies silos
• Restrict access to domain controllers
• Configure account security
• Manage AD built-in administrative groups
• Manage AD delegation
• Implement and manage Microsoft Defender for Identity

Identify and remediate Windows Server security issues by using Azure Services

• Monitor on-premises servers and Azure IaaS VMs by using Microsoft Sentinel
• Identify and remediate security issues on-premises servers and Azure IaaS VMs by using Microsoft Defender for Cloud

Secure Windows Server networking

• Manage Windows Defender Firewall
• Implement domain isolation
• Implement connection security rules

Secure Windows Server storage

• Manage Windows BitLocker Drive Encryption (BitLocker)
• Manage and recover encrypted volumes
• Enable storage encryption by using Azure Disk Encryption
• Manage disk encryption keys for IaaS virtual machines

Implement and manage Windows Server high availability (10—15%) Implement a Windows Server failover cluster

• Implement a failover cluster on-premises, hybrid, or cloud-only
• Create a Windows failover cluster
• Stretch cluster across datacenter or Azure regions
• Configure storage for failover clustering
• Modify quorum options
• Configure network adapters for failover clustering
• Configure cluster workload options
• Configure cluster sets
• Configure Scale-Out File servers
• Create an Azure witness
• Configure a floating IP address for the cluster
• Implement load balancing for the failover cluster

Manage failover clustering

• Implement cluster-aware updating
• Recover a failed cluster node
• Upgrade a node to Windows Server 2022
• Failover workloads between nodes
• Install Windows updates on cluster nodes
• Manage failover clusters using Windows Admin Center

Implement and manage Storage Spaces Direct

• Create a failover cluster using Storage Spaces Direct
• Upgrade a Storage Spaces Direct node
• Implement networking for Storage Spaces Direct
• Configure Storage Spaces Direct

Implement Disaster Recovery (10—15%) Manage backup and recovery for Windows Server

• Back up and restore files and folders to Azure Recovery Services Vault
• Install and manage Azure Backup Server
• Back up and recover using Azure Backup Server
• Manage backups in Azure Recovery Services Vault
• Create a backup policy
• Configure backup for Azure VM using the built-in backup agent
• Recover VM using temporary snapshots
• Recover VMs to new Azure VMs
• Restore a VM

Implement disaster recovery by using Azure Site Recovery

• Configure Azure Site Recovery networking
• Configure Site Recovery for on-premises VMs
• Configure a recovery plan
• Configure Site Recovery for Azure VMs
• Implement VM replication to secondary datacenter or Azure region
• Configure Azure Site Recovery policies

Protect virtual machines by using Hyper-V replicas

• Configure Hyper-V hosts for replication
• Manage Hyper-V replica servers
• Configure VM replication
• Perform a failover

Migrate Servers and Workloads (20—25%) Migrate on-premises storage to on-premises servers or Azure

• Transfer data and share
• Cut over to a new server by using Storage Migration Service (SMS)
• Use Storage Migration Service to migrate to Azure VMs
• Migrate to Azure file shares

Migrate on-premises servers to Azure

• Deploy and configure Azure Migrate appliance
• Migrate VM workloads to Azure IaaS
• Migrate physical workloads to Azure IaaS
• Migrate by using Azure Migrate

Migrate workloads from previous versions to Windows Server 2022

• Migrate IIS
• Migrate Hyper-V hosts
• Migrate RDS host servers
• Migrate DHCP
• Migrate print servers

Migrate IIS workloads to Azure

• Migrate IIS workloads to Azure Web Apps
• Migrate IIS workloads to containers

Migrate an AD DS infrastructure to Windows Server 2022 AD DS

• Migrate AD DS objects, including users, groups and Group Policies using AD Migration Tool
• Migrate to a new Active Directory forest
• Upgrade an existing forest

Monitor and Troubleshoot Windows Server Environments (20—25%) Monitor Windows Server by using Windows Server tools and Azure services

• Monitor Windows Server by using Performance Monitor
• Create and configure Data Collector Sets
• Monitor servers and configure alerts by using Windows Admin Center
• Monitor by using System Insights
• Manage event logs
• Deploy Azure Monitor agents
• Collect performance counters to Azure
• Create alerts
• Monitor Azure VMs by using Azure diagnostics extension
• Monitor Azure VMs performance by using VM Insights

Troubleshoot Windows Server on-premises and hybrid networking

• Troubleshoot hybrid network connectivity
• Troubleshoot on-premises connectivity

Troubleshoot Windows Server virtual machines in Azure

• Troubleshoot deployment failures
• Troubleshoot booting failures
• Troubleshoot VM performance issues
• Troubleshoot VM extension issues
• Troubleshoot disk encryption issues
• Troubleshoot storage
• Troubleshoot VM connection issues

Troubleshoot Active Directory

• Restore objects from AD recycle bin
• Recover Active Directory database using Directory Services Restore mode
• Recover SYSVOL
• Troubleshoot Active Directory replication
• Troubleshoot Hybrid authentication issues
• Troubleshoot on-premises Active Directory