AZ-802 Windows Server Hybrid Administrator study plan
AZ-802 Windows Server Hybrid Administrator · Give each week a clear focus.
8 weeks · About 7 hours per week
Deploy and manage Windows Server in hybrid environments
Map each objective in Domain 1 to a concrete lab task and rank them by your current confidence gap
Deploy a Windows Server 2025 evaluation VM and register it with Azure Arc, then verify the connected machine agent status in the portal
Configure Azure Update Manager to assess and patch the Arc-enabled server on a defined schedule
Document the hybrid deployment patterns you can articulate from memory versus those needing review
Your checkpoint
A one-page gap matrix listing every Domain 1 objective with a self-rated confidence score and the specific lab you will run for each
Deploy and manage Windows Server in hybrid environments & Implement and manage compute and virtualization in hybrid scenarios
Build a nested virtualization lab that runs at least two guest workloads on a Hyper-V host
Configure and validate a stretch cluster or Azure Site Recovery replication path for a guest workload
Compare scale-out versus scale-up options and justify a chosen compute design in writing
Troubleshoot one deliberately broken VM startup or live migration scenario to resolution
Your checkpoint
A working lab topology diagram plus a 200-word written justification of the compute and resiliency choices you made
Monitor, maintain, and secure Windows Server workloads in hybrid environments
Enable Azure Monitor Agent on the Arc-enabled server and collect at least three performance counter sets
Author two alert rules that fire on realistic thresholds and confirm each fires using a synthetic load
Configure Microsoft Defender for Cloud recommendations and remediate two findings
Draft an incident response runbook covering detection, triage, and containment for a compromised server
Your checkpoint
A screenshot-free written runbook with the alert names, thresholds, and remediation steps you validated in the lab
Monitor, maintain, and secure Windows Server workloads in hybrid environments & Implement and manage identity and access in hybrid scenarios
Configure Entra ID Connect or cloud sync in a lab tenant and verify password hash sync behavior
Implement conditional access policies that restrict administrative access to compliant or hybrid-joined devices
Enable and test Windows LAPS for local administrator password rotation on a domain-joined server
Audit privileged role assignments and remove at least one standing access assignment in favor of eligible access
Your checkpoint
An identity and security control checklist showing each control, its configuration state, and the test that proved it works
Implement and manage identity and access in hybrid scenarios & Implement and manage networking in hybrid scenarios
Deploy a hybrid DNS design where on-premises clients resolve Azure private zones and validate with nslookup from both sides
Configure Azure VPN Gateway or ExpressRoute-equivalent lab connectivity and confirm bidirectional routing
Implement Windows Server DNS policies or DNSSEC and test resolution behavior under each policy
Extend DHCP or IPAM into the hybrid network and document the address space plan
Your checkpoint
A network design document with the address space, DNS resolution flow, and the connectivity test results you captured
Implement and manage networking in hybrid scenarios & Implement and manage storage in hybrid scenarios
Configure Azure File Sync with cloud tiering and verify tiering behavior using a low volume free space threshold
Deploy a Storage Spaces Direct or Storage Replica configuration and measure replication health
Configure SMB over QUIC or SMB signing and encryption, then test access from a non-domain-joined client
Implement Azure Backup for an Arc-enabled server and perform a test file-level restore
Your checkpoint
A storage and networking validation report listing each configuration, the test performed, and the observed result
Implement and manage storage in hybrid scenarios & Implement and manage compute and virtualization in hybrid scenarios & Deploy and manage Windows Server in hybrid environments
Re-run two labs from weeks 1 through 6 without notes to confirm retention
Complete a timed 40-question mixed practice set and log every missed objective
Rebuild the weakest lab from scratch in under 45 minutes
Review all flagged objectives and close at least three of them with a fresh lab
Your checkpoint
A scored practice log with per-domain accuracy percentages and a ranked list of remaining weak objectives
Deploy and manage Windows Server in hybrid environments & Monitor, maintain, and secure Windows Server workloads in hybrid environments
Complete two full-length timed practice exams and record domain-level scores for each
Re-study only the objectives that scored below 70 percent and re-test them
Write out from memory the decision criteria for the most commonly confused design choices across all six domains
Simulate exam-day conditions with a final timed run and no reference material
Your checkpoint
A final readiness summary showing domain-by-domain practice scores, trend across attempts, and a go or delay recommendation
Milestones
Week 2: Can deploy an Arc-enabled server, register it, and apply an update schedule end to end without referring to documentation
Week 4: Can explain and demonstrate at least three identity controls that reduce standing administrative privilege in a hybrid environment
Week 6: Can design a hybrid network and storage solution on a whiteboard, including DNS flow, address space, and tiering behavior
Week 8: Scoring 80 percent or higher on two consecutive full-length timed practice exams with no domain below 70 percent