Microsoft Administering Windows Server Hybrid Core Infrastructure : AZ-800

  • Exam Code: Microsoft
  • Exam Name: Administering Windows Server Hybrid Core Infrastructure
  • Updated: Oct 30, 2026
  • Q & A: 342 Questions and Answers

PDF Version

PC Test Engine

Online Test Engine

Total Price: $59.99

About Microsoft Administering Windows Server Hybrid Core Infrastructure : Microsoft Exam

What makes a test torrent valid? Reliable questions, real simulation, honest service. The Microsoft Administering Windows Server Hybrid Core Infrastructure material at DumpsTests checks all three — 342 practice questions strong.

Microsoft AZ-800 Exam Syllabus Topics:
SectionWeightObjectives
Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments30-35%- Configure and manage forests and domain trusts
  • 1. Manage replication
  • 2. Configure and manage sites and subnets
  • 3. Configure and manage trusts
- Deploy and manage AD DS domain controllers
  • 1. Install and configure domain controllers
  • 2. Monitor and troubleshoot AD DS
  • 3. Implement service authentication and account policies
- Create and manage AD DS security principals
  • 1. Create and manage users and groups
  • 2. Manage default Active Directory container objects
  • 3. Delegate administrative tasks
- Manage Windows Server by using Group Policies
  • 1. Troubleshoot Group Policies
  • 2. Implement Group Policy settings and preferences
  • 3. Implement and manage Group Policy Objects (GPOs)
- Implement and manage hybrid identities
  • 1. Implement Azure AD Connect
  • 2. Manage Azure AD DS
  • 3. Manage Azure AD Connect
Manage storage and file services15-20%- Configure and manage Azure File Sync
  • 1. Create cloud endpoints
  • 2. Create Azure File Sync service
  • 3. Configure Azure File Sync
  • 4. Create server endpoints
  • 5. Register servers
  • 6. Create sync groups
- Configure and manage Windows Server file shares
  • 1. Configure and manage NFS
  • 2. Configure Windows Server file share access
  • 3. Configure and manage SMB
- Implement and manage Storage Spaces
  • 1. Implement Storage Spaces
  • 2. Implement Storage Spaces Direct
Manage Windows Servers and workloads in a hybrid environment10-15%- Manage Windows Servers and workloads by using Azure services
  • 1. Create and manage Azure VMs for Windows Server
  • 2. Manage Windows Servers by using Azure Arc
  • 3. Manage Windows Server updates by using Azure Update Management
- Configure and manage PowerShell Remoting
  • 1. Manage Windows Servers by using PowerShell Remoting
  • 2. Configure PowerShell Remoting
- Manage Windows Server and workloads by using Windows Admin Center
  • 1. Deploy and configure Windows Admin Center
  • 2. Manage servers and workloads by using Windows Admin Center
Manage virtual machines and containers15-20%- Create and manage containers
  • 1. Configure Windows Server container networking
  • 2. Manage Windows Server containers
- Manage Hyper-V and guest virtual machines
  • 1. Manage Hyper-V virtual machines
  • 2. Configure virtual machines
  • 3. Enable and configure Hyper-V
Implement and manage an on-premises and hybrid networking infrastructure15-20%- Implement on-premises and hybrid network connectivity
  • 1. Implement and manage Azure Network Adapter
  • 2. Implement and manage Azure Relay
  • 3. Implement and manage VPN and Remote Access
  • 4. Implement network connectivity for workloads
- Implement and manage IP Address Management (IPAM)
  • 1. Deploy and configure IPAM
  • 2. Manage IP address spaces by using IPAM
- Implement on-premises and hybrid name resolution
  • 1. Implement and manage DHCP
  • 2. Configure and manage DNS zones and records
  • 3. Implement and manage DNS servers

Microsoft Administering Windows Server Hybrid Core Infrastructure Exam FAQ — Valid Answers

The Microsoft Administering Windows Server Hybrid Core Infrastructure blueprint spans 5 domains — including Manage virtual machines and containers (15-20%), Manage Windows Servers and workloads in a hybrid environment (10-15%), Implement and manage an on-premises and hybrid networking infrastructure (15-20%). Spend your hours where the percentages are; the full outline above lists every subtopic.

$165 USD per attempt, 700 (on a scale of 1-1000) to pass. Retakes bill the full fee again, so make the first attempt the prepared one — rehearse with the 342 practice questions from DumpsTests until the mark is comfortably behind you.

120 minutes for 40-60 questions. Train the pace, don't guess it: the DumpsTests software and online engines simulate the real test scene and score your performance, so exam day holds no surprises.

Candidates should have extensive experience working with Windows Server operating systems, including experience with on-premises, hybrid, and cloud Windows Server administration. No specific prerequisite certification is required. Vendors adjust eligibility rules over time — verify the current requirements on the official page (official AZ-800 exam page) before registering.

Files first: payment triggers an automatic email within a minute — download on unlimited devices, and contact our round-the-clock team if nothing arrives within 2 hours (check spam). Failure is covered: take the corresponding AZ-800 exam within 60 days of purchase, and if you don't pass, email a scanned enrollment slip plus the official Score Report PDF within 2 days of the exam — we handle it quickly, with the full refund processed within 7 days. Exclusions: exams within 3 days of purchase, candidate names that don't match the payer, and free or expired products. You may instead exchange for two equal-value products free.

Yes — download the free Microsoft Administering Windows Server Hybrid Core Infrastructure demo and inspect real questions before paying. Your purchase then stays valid for 365 days with free updates throughout, renewable afterward at 50% off.

The Microsoft Administering Windows Server Hybrid Core Infrastructure is Microsoft's official exam for the Windows Server certification, at the Associate level. It validates practical, job-relevant skills — which is why employers shortlist certified candidates. Related credentials include Microsoft Certified: Windows Server Hybrid Administrator Associate.

Microsoft Administering Windows Server Hybrid Core Infrastructure Sample Questions:
Question #1

SIMULATION
You need to configure SRV1 as a DNS server. SRV1 must be able resolve names from the contoso.com domain by using DC1. All other names must be resolved by using the root hint servers.
To complete this task, sign in the required computer or computers.

Reveal Solution  Discussion  0

Correct Answer:

Phase 1: Create a secondary zone
Phase 2: Configure root hints
Phase 1: Create a secondary zone
Create a secondary zone
To create a secondary zone, select the relevant method and follow the steps.
Here's how to create a secondary look up zone using DNS Manager.
Step 1: From the Windows desktop, open the Start menu, select Windows Administrative Tools > DNS.
Step 2: In the console tree, connect to the DNS server [here Srv1] you wish to manage, expand the DNS server, right-click, then select New Zone.
Step 3: On the New Zone Wizard page, select Next.
Step 4: On the Zone Type page, select Secondary zone.
Step 5: On the Zone Name page, specify the name of the secondary zone. The name of the zone must match the name of the primary zone to replicate from. For example, south.contoso.com.
[Here: contoso.com]
Step 6: On the Master DNS Servers page, specify the IP addresses of one or more DNS servers that host copies of the primary zone. You need to ensure that the primary zone allows transfers to the DNS server hosting the secondary zone. For example, 172.23.90.124. [Here: dc1] Step 7: Select Finish on the Completing the New Zone Wizard.
Phase 2: Configure root hints
Root hints servers are used to help resolving DNS address information when the DNS server is unable to resolve the query locally from a hosted zone or the DNS server cache. Root hints name servers are populated by default in new installations.
You can edit the list of root name servers if required by navigating to the Root Hints tab of the DNS server properties dialog box or by using PowerShell.
Step 1: From the Windows desktop, open the Start menu, select Windows Administrative Tools > DNS.
Step 2: Select and hold (or right-click) your server, and then select Properties.
Step 3: Select the Root Hints tab, select the item to edit, and then select Edit.
Step 4: Enter the fully qualified domain name, then select Resolve. Verify the IP address, and if necessary edit the IP address.
Step 5: Select OK.
Review the updated root hint server in the list, when you're ready select OK. You'll notice the name server has a trailing dot (.).
Reference:
https://learn.microsoft.com/en-us/windows-server/networking/dns/manage-dns-zones
https://learn.microsoft.com/en-us/windows-server/networking/dns/quickstart-install-configure-dns-server

Question #2

Case Study 2 - Contoso, Ltd
Overview
Contoso, Ltd. is a company that has a main office in Seattle and two branch offices in Los Angeles and Montreal.
Existing Environment
AD DS Environment
The network contains an on premises Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains two domains named contoso.com and canada.contoso.com.
The forest contains the domain controllers shown in the following table.

All the domain controllers are global catalog servers.
Server infrastructure
The network contains the servers shown in the following table.

A server named Server4 runs Windows Server and is in a workgroup. Windows Firewall on Server4 uses the private profile.
Server2 hosts three virtual machines named VM1, VM2, and VM3.
VM3 is a file server that stores data in the volumes shown in the following table.

Group Policies
The contoso.com domain has the Group Policies Objects (GPOs) shown in the following table.

Existing Identities
The forest contains the users shown in the following table.

The forest contains the groups shown in the following table.

Current Problems
When an administrator signs in to the console of VM2 by using Virtual Machine Connection, and then disconnects from the session without signing out, another administrator can connect to the console session as the currently signed in user.
Requirements
Technical Requirements
Contoso identifies the following technical requirements:
* Change the replication schedule for all site links to 30 minutes.
* Promote Server1 to a domain controller in canada.contoso.com.
* Install and authorize Server3 as a DHCP server.
* Ensure that User1 can manage the membership of all the groups in Contoso\OU3.
* Ensure that you can manage Server4 from Server1 by using PowerShell remoting.
* Ensure that you can run virtual machines on VM1.
* Force users to provide credentials when they connect to VM2.
* On VM3, ensure that Data Deduplication on all volumes is possible.
Question
Hotspot Question
Which groups can you add to Group3 and Group5? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Reveal Solution  Discussion  0

Correct Answer:


Explanation:
Group 3 = Group 1, 2 4 and 5 only. Domain-Local groups can contain members from the "forest".
Group 5 = Group 4 only. Global groups can only contain Users, Computers and Global groups from the "same" domain.
https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups

Question #3

SIMULATION
You plan to create group managed service accounts (gMSAs).
You need to configure the domain to support the creation of gMSAs.
To complete this task, sign in the required computer or computers.

Reveal Solution  Discussion  0

Correct Answer:

Getting Started with Group Managed Service Accounts
Preparing the domain
Perform these steps to prepare the domain:
Step 1: Run ADPrep /domainPrep
You will then see:

Note: Active Directory Domain Service requirements
The Active Directory schema in the gMSA domain's forest needs to be updated to Windows Server 2012 to create a gMSA.
*-> You can update the schema by installing a domain controller that runs Windows Server 2012 or by running the version of adprep.exe from a computer running Windows Server 2012 . The object-version attribute value for the object CN=Schema,CN=Configuration,DC=Contoso,DC=Com must be 52.
Reference:
https://learn.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts
https://www.koolaid.info/dude-wheres-my-managed-service-accounts/

Question #4

Hotspot Question
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains two domain controllers named DC1 and DC2.
You plan to perform the following actions:
- Add two domain controllers named DC3 and DC4 to contoso.com.
- Configure DC3 as a domain controller and DC4 as a read-only domain
controller (RODC).
- Add a new child domain named east.contoso.com that will be hosted on
a domain controller named DC5.
You need to use the install from media (IFM) option, whenever possible.
What can you use to prepare the IFM data, and which domain controllers can be promoted by using the IFM option? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Reveal Solution  Discussion  0

Correct Answer:


Explanation:
Box 1: Ntdsutil.exe
Ntdsutil.exe is the command-line tool used to create Install from Media (IFM) data for Active Directory Domain Services (AD DS).
Box 2: DC3 and DC4 only
DC3 and DC4 can be promoted using the Install from Media (IFM) option.
IFM Capabilities
The Install from Media (IFM) feature in Active Directory Domain Services (AD DS) reduces the network traffic required to replicate the directory database during the promotion of a new domain controller. However, it operates under strict architectural constraints regarding domain and controller types:
DC3 (Standard Domain Controller): You can use ntdsutil to create standard IFM media from an existing domain controller in the same domain. This media can then be used to promote DC3 as an additional writable domain controller.
DC4 (Read-Only Domain Controller): ntdsutil allows the creation of a specialized RODC installation media. This makes it fully compatible with the IFM promotion process.
DC5 (Child Domain Controller): IFM cannot be used to create the very first domain controller of a completely new domain (such as a new child domain). The ntdsutil IFM media must be generated from an existing domain controller within the exact same domain that the new controller is joining.
Because the child domain does not exist yet, no installation media can be created for it.
Reference:
https://medium.com/technology-com/detecting-ntdsutil-usage-for-installation-media-creation-from-domain-controllers-01374d0a66d5

Question #5

Hotspot Question
Your network contains an Active Directory Domain Services (AD DS) domain named adatum.com. The domain contains a server named Server1 and the users shown in the following table.

Server1 contains a folder named D:\Folder1. The advanced security settings for Folder1 are configured as shown in the Permissions exhibit. (Click the Permissions tab.)

Folder1 is shared by using the following configurations:

The share permissions for Share1 are shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Reveal Solution  Discussion  0

Correct Answer:


Explanation:
To access files in a shared folder, you need to be granted permissions on the folder (NTFS permissions) AND permissions on the share. The most restrictive permission of the folder permissions and share permissions apply.
Box 1: Yes
Group1 has Read access to Folder1 and Change access to Share1. Therefore, User1 can read the files in Share1.
Box 2: No
Group3 has Full Control access to Share1. However, Group3 has no permissions configured Folder1. Therefore, User3 cannot access the files in Share1.
Box 3: Yes
Group2 has write permission to Folder1. However, Group2 has no permission on Share1.
Therefore, users in Group2 cannot access files in the shared folder.
Access Based Enumeration when enabled hides files and folders that users do not have permission to access. However, Access Based Enumeration is not enabled on Share1. This is indicated by the FolderEnumerationMode - Unrestricted setting. Therefore, the share will be visible to User2 even though User2 cannot access the shared folder.

Viewing page 1 out of 69 pages.
Viewing questions 1-5 out of 342 questions.

1%

What Clients Say About Us

I have used a few AZ-800 practice dumps but the ones at DumpsTests are the best so far. I recommend buying them.

Dempsey Dempsey       4 star  

You are the best!
Have passed AZ-800 exam.

Julian Julian       4.5 star  

The material was the essential component in me passing the Microsoft AZ-800 exam. I purchased it and then passed the exam with a good score. Thanks

Audrey Audrey       4.5 star  

I recently finished the AZ-800 exam and get the certification. I recommend it to you for your exam preparation.

Tracy Tracy       4 star  

DumpsTests AZ-800 dumps gave me what I was actually seeking a truly workable content that does not consume much time in preparing it. To tell you the truth, DumpsTests AZ-800

Walter Walter       4.5 star  

AZ-800 exam braindumps helped me pass the exam, and I will buy the preparation materials for you next time!

Allen Allen       4.5 star  

Just got full marks on this AZ-800 exam.

Basil Basil       4.5 star  

AZ-800 exam cram in DumpsTests is valid, and it helped me pass the exam just one time, I will buy exam barindumps form DumpsTests next time.

Tess Tess       5 star  

It is really a good AZ-800 guide I think, and thank you very much.

Joshua Joshua       5 star  

About 3 new questions missing.
About 93% are covered.

Debby Debby       4 star  

Thank you so much for making me pass AZ-800 exam, I have never seen a testing engine helping in such an extra ordinary way.

Neil Neil       4.5 star  

Wonderful, I passed my AZ-800 exam yesterday.

Mike Mike       4 star  

Zend AZ-800 exam is an important one in my career.

Raymond Raymond       4.5 star  

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Quality and Value

DumpsTests Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.

Tested and Approved

We are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.

Easy to Pass

If you prepare for the exams using our DumpsTests testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.

Try Before Buy

DumpsTests offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.