AZ-800 is a role-based Microsoft certification exam focused on the practical administration work needed to run Windows Server across on-premises and Azure environments.
The exam, Administering Windows Server Hybrid Core Infrastructure, is aimed at administrators who already understand Windows Server fundamentals and now need to prove they can manage identity, compute, networking, storage, monitoring, and hybrid integration. It is also one half of the Windows Server Hybrid Administrator Associate certification: candidates earn that credential by passing both AZ-800 and AZ-801, with AZ-801 covering more advanced hybrid services and operational scenarios.
A useful AZ-800 preparation plan therefore cannot rely on reading alone. The exam rewards candidates who can recognise a real administrative problem, choose the right Microsoft tool, and understand the consequences of a configuration choice. That means combining the official objectives, a small but realistic lab, PowerShell practice, Windows Admin Center workflows, and scenario-based review.
What AZ-800 measures
The official Microsoft AZ-800 exam page should be the starting point for every study plan because Microsoft updates exam objectives over time. Exam drift is real: a plan built from an old blog post or course outline can miss newer emphasis areas such as Azure Arc-enabled server management or changes in hybrid administration tooling. Before fixing a weekly schedule, candidates should compare their plan with the current Skills Measured outline from Microsoft and adjust time toward topics that have expanded.
At a high level, AZ-800 tests whether a candidate can administer Windows Server in environments that rarely fit neatly into one location. The work includes deploying and managing Active Directory Domain Services, configuring hybrid identity, managing Windows Server workloads in Azure, maintaining virtual machines, implementing file services, handling disaster recovery, and using tools such as PowerShell, Windows Admin Center, Azure Arc, Azure Monitor, and Azure Automation.
A common preparation mistake is to treat the exam as mainly an Azure exam. Azure matters, but candidates who over-index on cloud services often leave gaps in AD DS sites and replication, Read-Only Domain Controllers, DNS and DHCP, DFS Namespaces, DFS Replication, and file server migration. Those are the areas where scenario questions can expose whether someone has actually administered Windows Server or has only memorised service names.
How AZ-800 fits with AZ-801 and the certification path
AZ-800 and AZ-801 are closely related, but they are not interchangeable. AZ-800 is the better starting point for many Windows Server administrators because it covers the core infrastructure responsibilities that support later advanced work: identity, compute, storage, networking, and hybrid management. AZ-801 then moves deeper into advanced services, security, migration, monitoring, and recovery patterns.
That sequence is not mandatory, but it is practical. Administrators who are newer to Azure should usually begin with AZ-800 because it builds the vocabulary and operational baseline needed for AZ-801. Those who already manage hybrid estates may study both in parallel, but they should still separate lab tasks by objective so weak areas do not hide behind general experience. Readers planning the next step after AZ-800 can use the AZ-801 exam prep guide to understand how the advanced-services exam extends the same hybrid administration role.
Build a lab that reflects the exam
The strongest preparation environment is modest, repeatable, and safe to reset. A useful AZ-800 lab can run on a local Hyper-V host, including nested virtualisation where appropriate, with two domain controllers, one member server, and an Azure subscription used for hybrid services. The goal is not to reproduce an enterprise estate; it is to practise the decision points that appear in real administration work.
A sensible baseline includes two AD DS sites, replication between domain controllers, DNS, a member file server, a Hyper-V workload, Windows Admin Center, an Azure virtual network, at least one Azure VM, an Azure Arc-enabled server, and test backup or recovery services. Hybrid networking can be emulated with a point-to-site VPN or another low-cost lab connection rather than a production-style ExpressRoute design. When testing Azure resources, candidates should set budgets, stop unused virtual machines, and avoid storing production data or personal secrets in the lab.
The lab should be resettable. Hyper-V checkpoints, scripted build steps, and clear naming conventions allow candidates to break and rebuild AD DS, DFS, monitoring, and recovery tasks without spending most of their study time repairing the environment. This also supports better learning: repeating a configuration from a clean state exposes which steps are understood and which were completed by accident.
- Week one should establish AD DS, DNS, sites, replication, and a member server.
- Week two should add file services, DFS Namespaces, DFS Replication, and storage tasks.
- Week three should connect Azure services, including an Azure VM and Arc-enabled management.
- Week four should focus on monitoring, backup, disaster recovery, and timed scenario practice.
This four-stage structure is deliberately practical rather than elegant. It gives on-premises topics enough space before Azure is added, which helps avoid the common gap of knowing the Azure portal while being weak on the Windows Server behaviours that Azure extends.
Practise PowerShell and Windows Admin Center together
AZ-800 candidates should be comfortable with both command-line administration and graphical workflows. PowerShell helps with repeatability and troubleshooting, while Windows Admin Center is important for day-to-day hybrid management and for understanding how Microsoft expects administrators to manage servers without relying only on older MMC tools. A balanced plan pairs each scripted task with the equivalent Windows Admin Center workflow.
For AD DS preparation, candidates should practise creating and validating domain controllers, checking replication health, configuring sites and subnets, and understanding when an RODC is appropriate. The PowerShell emphasis should include ADDSDeployment and Active Directory replication cmdlets, while the graphical practice should include verifying health and configuration through familiar Windows Server tools and Windows Admin Center where supported.
The following example is suitable for a lab after Active Directory tools are installed. It checks replication status and lists site configuration so candidates can connect exam objectives with operational evidence.
Example — Check AD DS replication and site configuration
Get-ADReplicationPartnerMetadata -Target "corp.contoso.local" -Scope Domain |
Select-Object Server, Partner, LastReplicationSuccess, ConsecutiveReplicationFailures
Get-ADReplicationSite -Filter * |
Select-Object Name
Get-ADReplicationSubnet -Filter * |
Select-Object Name, Site
This does not configure the environment; it teaches candidates what healthy replication evidence looks like. After running it, the next step is to create a deliberate site or subnet mismatch in the lab, observe the symptoms, and then correct the topology.
File services deserve the same treatment. Candidates should configure shares, permissions, DFS Namespaces, DFS Replication, quotas where relevant, and migration scenarios. In Windows Admin Center, the Storage and Files tools help reinforce the administrative flow, while PowerShell makes it easier to rebuild the same configuration repeatedly. Readers who need a stronger foundation can use a dedicated PowerShell for Windows Server administrators refresher alongside the lab.
Use Azure Arc, monitoring, and recovery as operational topics
Azure Arc should be studied as a management extension for servers rather than as an abstract cloud feature. In the lab, candidates should onboard a non-Azure Windows Server, verify that it appears as an Arc-enabled server, and understand how policy, monitoring, and inventory visibility change once the server is connected. A separate walkthrough on Azure Arc onboarding can help when the mechanics need more attention than the AZ-800 study schedule allows.
Monitoring practice should include Windows Admin Center, Azure Monitor concepts, log collection, alerts, and the difference between observing a server and actually remediating a fault. The useful study question is not simply where a metric appears, but what an administrator should do next when a domain controller, file server, or hybrid connection shows degraded behaviour.
Disaster recovery and data protection should be handled with the same realism. Candidates should know when Azure Backup is appropriate, what Azure Site Recovery is designed to protect, and how failover planning differs from restoring files or system state. A focused guide to Azure Site Recovery patterns can support this part of the lab, but the exam preparation value comes from rehearsing the sequence: protect, test, fail over, validate, and document the recovery decision.
The following Azure PowerShell example shows the kind of resource-level fluency candidates should build before practising recovery workflows. It creates a Recovery Services vault in an existing resource group and sets the context for later backup or recovery configuration.
Example — Create a Recovery Services vault for lab recovery work
Connect-AzAccount
$resourceGroup = "rg-az800-lab"
$location = "uksouth"
$vaultName = "rsv-az800-hybrid-lab"
New-AzRecoveryServicesVault `
-Name $vaultName `
-ResourceGroupName $resourceGroup `
-Location $location
$vault = Get-AzRecoveryServicesVault `
-Name $vaultName `
-ResourceGroupName $resourceGroup
Set-AzRecoveryServicesVaultContext -Vault $vault
After creating the vault, candidates should verify the resource in the Azure portal, check that the intended region and resource group are correct, and remove lab resources when they are no longer needed. Cost control is part of responsible hybrid administration, especially when recovery services and virtual machines are being tested repeatedly.
Study hybrid identity as a set of trade-offs
Hybrid identity is one of the easiest areas to oversimplify. Candidates should understand Microsoft Entra Connect Sync concepts, staging mode, cutover planning, password hash synchronization, pass-through authentication, group writeback prerequisites, and the effect conditional access can have on older applications and protocols. The exam is unlikely to reward memorising product names without understanding operational consequences.
For example, password hash synchronization is often simpler to operate, while pass-through authentication changes dependency and availability considerations. Staging mode is useful when preparing a replacement sync server, but it is not the same as having two active sync engines making changes. These distinctions matter in scenario questions because the correct answer often depends on risk, administrative overhead, or continuity rather than on whether a feature exists.
Windows Admin Center is also worth rehearsing beyond basic server connection. Candidates should practise the extensions used for storage, updates, certificates, events, performance, and Azure hybrid integration. A dedicated Windows Admin Center essentials guide can help administrators who have mostly used Server Manager or MMC tools and need to become fluent with the newer management experience.
Prepare for networking questions with constraints in mind
Hybrid networking questions often test constraints rather than definitions. A candidate may need to decide whether a VPN is sufficient for a workload, whether name resolution is correctly configured across environments, how IP addressing affects routing, or what must be in place before Azure services can communicate with on-premises servers. These questions are easier when the lab has at least one deliberately constrained network path instead of a flat, overly permissive setup.
In practice, candidates should rehearse DNS resolution, routing tables, firewall rules, VPN client configuration, and the difference between private and public connectivity options. ExpressRoute may appear in planning scenarios, but most home labs will use VPN-style connectivity because it is more practical and lower cost. A comparison of VPN and ExpressRoute for hybrid networking can help candidates frame those design decisions without overbuilding the study environment.
Use scenario questions to learn exam thinking
Scenario practice should never rely on brain dumps or recalled exam items. That approach risks violating exam rules and usually produces shallow learning. Better practice questions are short, original scenarios that force a candidate to identify the requirement, eliminate tempting but unsuitable answers, and explain the administrative reason for the choice.
Consider a branch office that needs local authentication during WAN outages and contains no dedicated IT staff. A strong candidate should immediately think about whether an RODC fits the risk profile, what password caching means, and how AD DS sites affect authentication and replication. The rationale is more important than the answer label because it shows whether the candidate can connect security, availability, and administration.
Another useful scenario is a file server migration where users must retain access through a consistent namespace while data is moved in phases. That should lead candidates toward DFS Namespace planning, replication or migration sequencing, permissions, and cutover validation rather than a simple copy operation. This is where candidates who skipped DFS labs often struggle.
A third scenario could involve an on-premises server that must be governed and monitored from Azure without being migrated. The likely direction is Azure Arc-enabled server management, but the rationale should include prerequisites, connectivity, permissions, and what Arc does and does not provide. Good scenario review always asks, “What evidence would confirm this worked?” and “What would break if a prerequisite were missing?”
Plan the final two weeks before the exam
The final stage should be about tightening weak areas, not collecting more resources. A practical method is to complete repeated blocks of timed practice questions, review every uncertain answer, and then perform a lab task within the next day for each weak domain. This turns review into action while the mistake is still fresh.
Timeboxing matters because AZ-800 can include case-based and multi-step items that consume more time than expected. Candidates should practise reading the requirement first, identifying constraints, flagging uncertain items, and moving on when a question is taking too long. The goal is to avoid spending too much time on a single complex scenario while easier marks remain unanswered later in the exam.
Exam logistics should be checked early rather than the night before. Candidates should confirm the current Microsoft exam page, appointment format, identification requirements, online proctoring rules if used, and the latest retake policy. Microsoft can change exam details, objective wording, and delivery rules, so the official source should be treated as the final authority.
Where training can help
Self-study can work well for administrators who already have broad Windows Server experience and enough discipline to build a lab. Structured training becomes more useful when a candidate needs guided coverage of the objectives, instructor-led explanation of hybrid design choices, and labs that keep the preparation aligned with exam scope. The Readynez AZ-800 course is one option for candidates who want live training around Administering Windows Server Hybrid Core Infrastructure, but the value of any course should be judged by how well it reinforces hands-on administration rather than by how many slides it contains.
Some teams also need a broader Microsoft skills plan rather than one exam in isolation. In that case, the useful question is whether administrators need only AZ-800 preparation or ongoing access to related Microsoft training across Windows Server, Azure administration, security, and hybrid operations. Microsoft-focused training catalogues, including Microsoft training options and Unlimited Microsoft Training, can help team leads compare coverage without turning the exam plan into a long list of disconnected courses.
Applying the plan in practice
AZ-800 preparation is most effective when it mirrors the work of a hybrid administrator: build the environment, configure the service, verify the result, break it safely, and repair it with evidence. Candidates who treat the exam as a sequence of operational scenarios usually develop stronger judgment than those who only memorise feature descriptions.
A practical next step is to download the current Microsoft objectives, create the four-week lab schedule, and reserve time for PowerShell and Windows Admin Center practice in every domain. If guided preparation would shorten the path or help a team standardise its approach, Readynez can discuss suitable Microsoft training options through contact with the training team.
