AZ-802 Windows Server Hybrid Administrator Study Guide

Exam Overview

The Microsoft Certified: Windows Server Hybrid Administrator Associate certification validates your ability to manage and administer both on-premises Windows Server environments and Azure services. It is designed for IT professionals who need to implement and maintain a hybrid infrastructure that integrates local data centers with Microsoft Azure.

Exam Domains

• Identity, Governance, and Security: Managing hybrid identity synchronization, conditional access policies, and security compliance across on-premises and cloud environments.
• Compute Infrastructure: Deploying and managing virtual machines, scale sets, and application services using Azure Arc-enabled servers and traditional Hyper-V clusters.
• Storage Solutions: Implementing hybrid storage strategies including Azure File Sync, SMB Direct, and backup solutions utilizing Azure Backup.
• Networking: Configuring hybrid network connectivity via Azure ExpressRoute, Site-to-Site VPN, and DNS resolution between on-premises and Azure resources.

Key Concepts & Common Difficulties

• Azure AD Connect Configuration: Candidates often struggle with advanced filtering rules and password hash synchronization versus pass-through authentication. Focus on understanding the specific use cases for each method and how to troubleshoot sync errors using the Azure AD Connect health dashboard.
• Azure Arc Integration: Many examinees find it difficult to distinguish between native Azure VM management and Azure Arc-enabled server management. Remember that Arc extends Azure management capabilities to any infrastructure, requiring careful configuration of the connected machine agent and resource tags.
• Hybrid Network Routing: Complex routing scenarios involving user-defined routes (UDRs) and on-premises route tables are common pitfalls. Practice mapping out traffic flows to ensure return traffic correctly traverses the ExpressRoute or VPN gateway without creating black holes.
• Storage Migration Strategies: Confusion often arises when choosing between Azure File Sync and Azure NetApp Files. Understand that File Sync is best for caching frequently accessed files at the edge, while NetApp Files offers enterprise-grade NFS/SMB shares directly in Azure.

Study Strategy

1. Prerequisites: Ensure you have hands-on experience with Windows Server 2016/2019/2022 and foundational knowledge of Azure networking and identity services. The AZ-800 exam is not strictly required but provides useful context.
2. Study Order: Begin with Identity and Governance, as this forms the backbone of hybrid management. Move to Networking next, followed by Compute, and conclude with Storage to understand data movement and protection.
3. Hands-On Labs: Build a lab environment that includes an on-premises Active Directory domain, a Windows Server VM, and an Azure subscription. Practice configuring Azure AD Connect, setting up ExpressRoute circuits, and deploying Azure Arc agents.
4. Review Official Documentation: Deep dive into Microsoft Learn modules specifically focused on hybrid identity and Azure Arc. Read through the official architecture guides for real-world implementation patterns.
5. Practice Scenarios: Use practice exams to identify weak areas, particularly around troubleshooting hybrid connectivity and diagnosing sync issues. Focus on understanding the "why" behind configuration choices rather than just memorizing steps.
6. Exam Day Tips: Read scenario-based questions carefully to determine if the solution requires an on-premises component, a cloud-only action, or a hybrid bridge. Double-check your understanding of resource permissions and role assignments before finalizing answers.