AZ-800T00: Administering Windows Server Hybrid Core Infrastructure

Module 1: Introduction to AD DS

• Introduction
• Define Active Directory Domain Services (AD DS)
• Define Users, Groups, and Computers
• Define AD DS Forests and Domains
• Define Organizational Units (OUs)
• Manage Objects and Their Properties in AD DS
• Module Assessment
• Summary

Module 2: Manage AD DS domain controllers and FSMO roles

• Introduction
• Deploy AD DS Domain Controllers
• Maintain AD DS Domain Controllers
• Manage the AD DS Global Catalog Role
• Manage AD DS Operations Masters
• Manage AD DS Schema
• Module Assessment
• Summary

Module 3: Implement Group Policy Objects

• Introduction
• Define Group Policy Objects (GPOs)
• Implement GPO Scope and Inheritance
• Define Domain-Based GPOs
• Create and Configure a Domain-Based GPO
• Define GPO Storage
• Define Administrative Templates
• Module Assessment
• Summary

Module 4: Manage advanced features of AD DS

• Introduction
• Create Trust Relationships
• Implement ESAE Forests
• Monitor and Troubleshoot AD DS
• Create Custom AD DS Partitions
• Module Assessment
• Summary

Module 5: Implement hybrid identity with Windows Server

• Introduction
• Select a Microsoft Entra Integration Model
• Plan for Microsoft Entra Integration
• Prepare On-Premises Active Directory for Directory Synchronization
• Install and Configure Directory Synchronization with Microsoft Entra Connect
• Implement Seamless Single Sign-On
• Enable Microsoft Entra Login for Windows VM in Azure
• Knowledge Check
• Describe Microsoft Entra Domain Services
• Implement and Configure Microsoft Entra Domain Services
• Manage Windows Server in a Microsoft Entra Domain Services Environment
• Create and Configure a Microsoft Entra Domain Services Instance
• Join a Windows Server VM to a Managed Domain
• Module Assessment
• Summary

Module 6: Deploy and manage Azure IaaS Active Directory domain controllers in Azure

• Introduction
• Select an Option to Implement Directory and Identity Services Using Active Directory Domain Services in Azure
• Deploy and Configure Active Directory Domain Services Domain Controllers in Azure VMs
• Install a Replica Active Directory Domain Controller in an Azure VM
• Install a New Active Directory Forest on an Azure VNet
• Module Assessment
• Summary

Module 7: Perform Windows Server secure administration

• Introduction
• Define Least Privilege Administration
• Implement Delegated Privileges
• Use Privileged Access Workstations
• Use Jump Servers
• Module Assessment
• Summary

Module 8: Describe Windows Server administration tools

• Introduction
• Explore Windows Admin Center
• Use Server Manager
• List Remote Server Administration Tools
• Use Windows PowerShell
• Use Windows PowerShell to Remotely Administer a Server
• Module Assessment
• Summary

Module 9: Perform post-installation configuration of Windows Server

• Introduction
• List the Available Post-Installation Configuration Tools
• Configure Server Core Using Sconfig
• Use Desired State Configuration (DSC) to Configure Windows Server
• Perform Post-Installation Configuration with Windows Admin Center
• Configure a Server with Answer Files
• Module Assessment
• Summary

Module 10: Administer and manage Windows Server IaaS Virtual Machine remotely

• Introduction
• Select the Appropriate Remote Administration Tool
• Manage Windows Virtual Machines with Azure Bastion
• Create an Azure Bastion Host
• Configure Just-in-Time Administration
• Module Assessment
• Summary

Module 11: Manage hybrid workloads with Azure Arc

• Introduction
• Describe Azure Arc
• Onboard Windows Server Instances
• Connect Hybrid Machines to Azure from the Azure Portal
• Use Azure Arc to Manage Windows Server Instances
• Restrict Access with Role-Based Access Control (RBAC)
• Module Assessment
• Summary

Module 12: Optimizing IT operations and management with Azure Automanage

• Introduction
• Describe Concepts Around Azure Automanage Best Practices
• Enable Azure Automanage Best Practices
• Create and Assign a Custom Configuration Profile
• Extend Azure Automanage Across Non-Azure Infrastructure with Azure Arc
• Module Assessment
• Summary

Module 13: Just Enough Administration in Windows Server

• Introduction
• Explain the Concept of Just Enough Administration (JEA)
• Define Role Capabilities for a JEA Endpoint
• Create a Session Configuration File to Register a JEA Endpoint
• Describe How JEA Endpoints Work to Limit Access to a PowerShell Session
• Create and Connect to a JEA Endpoint
• Demonstration: Connect to a JEA Endpoint
• Module Assessment
• Summary and Resources

Module 14: Configure and manage Hyper-V

• Introduction
• Define Hyper-V
• Define Hyper-V Manager
• Configure Hyper-V Hosts Using Best Practices
• Configure Hyper-V Networking
• Assess Advanced Hyper-V Networking Features
• Define Nested Virtualization
• Module Assessment
• Summary

Module 15: Configure and manage Hyper-V virtual machines

• Introduction
• List the Virtual Machine Configuration Versions
• List the Virtual Machine Generation Versions
• List Available VHD Formats and Types
• Create and Configure VMs
• Determine Storage Options for VMs
• Define Shared VHDs and VHD Sets
• Implement Guest Clusters Using Shared VHDX
• Module Assessment
• Summary

Module 16: Secure Hyper-V workloads

• Introduction
• Define Guarded Fabric
• Define the Host Guardian Service (HGS)
• Explore TPM-Trusted Attestation
• Define Key Protection Service (KPS)
• Determine Key Features of Shielded VMs
• Compare Encryption-Supported VMs vs. Shielded VMs in a Guarded Fabric
• Implement a Shielded VM
• Module Assessment
• Summary

Module 17: Plan and deploy Windows Server IaaS Virtual Machines

• Introduction
• Describe Azure Compute
• Describe Virtual Machine Storage
• Deploy Azure Virtual Machines
• Create a Windows Virtual Machine Using the Portal
• Create a Windows Virtual Machine Using Azure CLI
• Deploy Azure Virtual Machines Using Templates
• Describe Additional Management Optimization Options
• Module Assessment
• Summary

Module 18: Customize Windows Server IaaS Virtual Machine images

• Introduction
• Create a Generalized Image
• Create a New Virtual Machine from a Managed Image
• Create a Managed Image of a Generalized Virtual Machine in Azure
• Create a Virtual Machine from a Managed Image
• Implement Azure Image Builder
• Create a Windows Virtual Machine Using Azure Image Builder Template
• Create a Windows Virtual Machine with Azure Image Builder Using PowerShell
• Module Assessment
• Summary

Module 19: Automate the configuration of Windows Server IaaS Virtual Machines

• Introduction
• Describe Azure Automation
• Implement Azure Automation with Desired State Configuration (DSC)
• Remediate Noncompliant Servers
• Describe Custom Script Extensions
• Configure a Virtual Machine Using DSC
• Module Assessment
• Summary

Module 20: Run containers on Windows Server

• Introduction
• Define Containers
• List the Differences Between Containers and VMs
• Define Windows Server and Hyper-V Containers and Isolation Modes
• Explore Docker
• Prepare a Windows Server 2019 Host for Container Deployment
• Security, Storage, and Networking with Windows Containers
• Module Assessment
• Summary

Module 21: Orchestrate containers on Windows Server using Kubernetes

• Introduction
• Define Orchestration
• Define Kubernetes
• Deploy Kubernetes Resources
• Create a Kubernetes Cluster on Windows
• Define Azure Arc
• Connect an Azure Arc-enabled Kubernetes Cluster to Azure Arc
• Module Assessment
• Summary

Module 22: Implement DNS for Windows Server IaaS VMs

• Introduction
• Understand Azure DNS
• Implement Azure DNS
• Create an Azure DNS Zone and Record Using the Azure Portal
• Implement DNS with Azure IaaS Virtual Machines
• Implement Split-Horizon DNS in Azure
• Troubleshoot DNS
• Module Assessment
• Summary

Module 23: Deploy and manage DHCP

• Introduction
• Use DHCP to Simplify IP Configuration
• Install and Configure the DHCP Role
• Configure DHCP Options
• Configure DHCP Scopes
• Select DHCP High Availability Options
• Implement DHCP Failover
• Module Assessment
• Summary

Module 24: Implement Windows Server DNS

• Introduction
• Explore the DNS Architecture
• Work with DNS Zones and Records
• Install and Configure the DNS Role
• Implement DNS Forwarding
• Module Assessment
• Summary

Module 25: Implement IP Address Management

• Introduction
• Define IP Address Management (IPAM)
• Deploy IP Address Management
• Administer IP Address Management
• Configure IP Address Management Options
• Manage DNS Zones with IP Address Management
• Manage DHCP Servers with IP Address Management
• Use IP Address Management to Manage IP Addressing
• Module assessment
• Summary

Module 26: Implement remote access

• Introduction
• Examine the remote access options in Windows Server
• Select and set up VPNs
• Use NPS to create and enforce network access policies
• Plan and implement NPS
• Deploy a PKI for remote access
• Use WAP as a reverse web proxy
• Module assessment
• Summary

Module 27: Implement hybrid network infrastructure

• Introduction
• Describe Azure network topologies
• Implement Azure VPN options
• Create a route-based VPN gateway using the Azure portal
• Implement Azure ExpressRoute
• Configure Azure Virtual WAN
• Implement DNS in hybrid environments
• Module assessment
• Summary

Module 28: Implement Windows Server IaaS VM IP addressing and routing

• Introduction
• Implement a virtual network
• Implement IaaS VM IP addressing
• Assign and manage IP addresses
• Configure a private IP address for a virtual machine using the Azure portal
• Create a virtual machine with a static public IP address using the Azure portal
• Implement IaaS virtual machine IP routing