AzureAssociateRetired · 30 September 2026
Exam AZ-801: Configuring Windows Server Hybrid Advanced Services
AZ-801
Part 2 of the Windows Server Hybrid Administrator Associate certification. AZ-800 and AZ-801 consolidate into AZ-802.
This exam is retired — no longer supported
This exam was retired on 30 September 2026 and can no longer be sat, so CertifyCloudx no longer offers practice questions or mock exams for it. The exam details and the official syllabus below are kept for reference.
Withdrawn — CertifyCloudx does not prepare candidates for this exam any more. What follows is the official exam guide, kept for reference.
What's on the exam
5 domains · 19 task statements, straight from the official exam guide (as of October 6, 2025).
- 1.1Secure Windows Server operating system
- Configure and manage Exploit Protection
- Configure and manage Windows Defender Application Control
- Configure and manage Windows Defender Credential Guard
- Configure SmartScreen
- Implement operating system security by using Group Policies
- Manage Windows Server security baseline by using OSConfig
- Implement Windows Local Administrator Password Solution (Windows LAPS)
- 1.2Secure a hybrid Active Directory infrastructure
- Configure password policies
- Implement Microsoft Entra Password Protection for AD DS
- Manage protected users
- Manage account security on a Read-Only Domain controller (RODC)
- Harden domain controllers
- Configure authentication policy silos
- Restrict access to domain controllers
- Configure security options for user accounts
- Configure security options for built-in administrative groups
- Manage AD delegation
- Implement and manage Microsoft Defender for Identity
- Audit usage of and disable NTLM
- 1.3Identify and remediate Windows Server security issues by using Azure services
- Implement ingestion of Windows Server data into Microsoft Sentinel
- Manage security for Windows Server by using Microsoft Defender for Cloud
- Manage security for Windows Server by using Microsoft Defender for Servers
- 1.4Secure Windows Server networking
- Manage Windows Defender Firewall
- Implement domain isolation
- Implement connection security rules
- Create and configure network security groups (NSGs) for Windows Server virtual machines on Azure
- 1.5Secure Windows Server storage
- Manage Windows BitLocker Drive Encryption
- Enable storage encryption by using Azure Disk Encryption
- Manage and recover encrypted volumes
- Manage disk encryption keys for IaaS virtual machines
Outline reproduced from the vendor's public exam guide for study reference.Official guide
