book

Configuring Windows Server Hybrid Advanced Services Exam Ref AZ-801

by Chris Gill

April 2023

Intermediate to advanced

602 pages

13h 31m

English

Packt Publishing

Read now

Unlock full access

ForewordContributorsAbout the authorAbout the reviewers
Who this book is forWhat this book coversTo get the most out of this book Download the color imagesConventions usedGet in touchShare Your ThoughtsDownload a free PDF copy of this book
Technical requirements and lab setupPreparing for a Microsoft examStep 1 – Reviewing the exam skills outlineStep 2 – Review the skills measured and practice to improve your skillsStep 3 – Identify additional learning materialsExam format and exam demo experienceResources available and utilizing Microsoft Learn for supplemental experienceWhere and when to take the examCreating a Microsoft 365 trial subscription and free Azure accountSetting up a lab environment using Hyper-VExam objectivesWho should take the AZ-801 exam?The current state of on-premises, hybrid, and cloud workflows (and how they can work together to deliver for you and your business needs)Identifying current hybrid cloud trendsDefining on-premises infrastructureDefining hybrid infrastructureDefining cloud-native infrastructureOn-premises versus hybrid versus cloud-native – is there a one size fits all?Summary
Technical requirements and lab setupInstalling a new Windows Server 2022 domain controllerInstalling a new Windows Server 2022 file serverConfiguring and managing exploit protectionWhat is exploit protection?How does exploit protection work?Exploit protection mitigationsUsing exploit protection Audit modeEnabling exploit protection using the Windows Security appEnabling exploit protection using Microsoft Endpoint ManagerEnabling exploit protection using Group PolicyEnabling exploit protection using PowerShellConfiguring and managing WDACEnabling WDAC using Microsoft Endpoint ManagerConfiguring and managing Microsoft Defender for EndpointLicensing, software, and hardware requirements for Microsoft Defender for EndpointOnboarding devices to Microsoft Defender for EndpointOffboarding devices from Microsoft Defender for EndpointConfiguring and managing Windows Defender Credential GuardRequirements for enabling Windows Defender Credential GuardEnabling Windows Defender Credential Guard using the hardware readiness toolEnabling Windows Defender Credential Guard using Group PolicyConfiguring Microsoft Defender SmartScreenConfiguring Microsoft Defender SmartScreen on an individual deviceConfiguring Microsoft Defender SmartScreen using IntuneAdditional notes on Microsoft Defender SmartScreenImplementing operating system security by using Group PolicySummary
Technical requirements and lab setupEstablishing a custom domain nameSynchronizing on-premises AD with Azure ADConfiguring self-service password reset (SSPR)Configuring and managing password policiesEnabling password block listsConfiguring and managing account and user securityManaging protected usersConfiguring account securityManaging account security on a Read-Only Domain Controller (RODC)Securing domain controllersHardening domain controllersRestricting access to domain controllersConfiguring authentication policies silosManaging AD built-in groups and delegationManaging AD built-in administrative groupsManaging AD delegation of privilegesImplementing and managing Microsoft Defender for IdentityMicrosoft Defender for Identity prerequisitesInstallation and management process overviewSummary
Technical requirements and lab setupIntroduction to hybrid security using Microsoft Sentinel and Microsoft Defender for CloudEstablishing a Data Collection Rule for Azure Monitor AgentInstalling the Azure Arc Connected Machine AgentMonitoring on-premises servers and Azure IaaS VMs using Microsoft SentinelIdentifying and remediating security issues for on-premises servers and Azure-hosted VMs with MDCSummary
Technical requirements and lab setupIntroduction to Windows Defender FirewallManaging Windows Defender FirewallImplementing domain isolationImplementing connection security rulesSummary
Introduction to NSGsIntroduction to ASGsOverview of Azure service tagsOverview of the Azure Storage firewallTechnical requirements and lab setupManaging BitLockerBitLocker general system requirementsBitLocker basic setupManaging and recovering encrypted volumesEnabling storage encryption by using ADEManaging Disk Encryption keys for IaaS VMsSummary

Overview of Windows Server Failover ClusteringWhat is WSFC?What workloads can WSFC be used for?What is the difference between a Failover Cluster and a hyper-converged cluster?Technical requirements and lab setupIntroduction to Windows Admin CenterCreating and managing a Windows Server Failover ClusterConfiguring network settings for Failover ClusteringConfiguring Windows Server Failover Cluster storage optionsConfiguring cluster workload optionsConfiguring Stretch ClustersConfiguring Scale-Out File ServerConfiguring Cluster SetsSummary
Technical requirements and lab setupManaging failover clusters using Windows Admin CenterImplementing cluster-aware updatingIntroduction to cluster-aware updating for Windows Server failover clustersInstalling Windows updates on cluster nodesRecovering a failed cluster nodeUpgrading a node to Windows Server 2022Failing over workloads between nodesSummary
Technical requirements and lab setupIntroduction to Storage Spaces Direct (S2D)Uses for S2DPrerequisites for S2DDeployment modes for S2DManaging S2DImplementing networking for S2DDeploying S2D on Windows ServerUpgrading an S2D cluster nodeS2D upgrade optionsPrerequisites and general limitationsSummary
Technical requirements and lab setupCost management reviewUsing Azure Backup Server to manage, back up, and recover filesInstalling and managing Azure Backup ServerBacking up and recovering files and folders using Azure Backup ServerUsing Azure Recovery Services vault to manage, back up, and restore files and foldersCreating a backup policy for an Azure Recovery Services vaultManaging backups in an Azure Recovery Services vaultConfiguring backups for Azure Virtual Machines using the built-in backup agentRecovering a VM using temporary snapshotsRestoring or recovering VMs to existing or new Azure Virtual MachinesSummary
Technical requirements and lab setupIntroduction to Azure Site RecoveryConfiguring Azure Site Recovery networkingConfiguring Azure Site Recovery for on-premises VMsConfiguring a recovery planConfiguring Azure Site Recovery policiesConfiguring Azure Site Recovery for Azure Virtual MachinesImplementing VM replication to a secondary data center or Azure regionSummary
Technical requirements and lab setupIntroduction to Hyper-V ReplicaConfiguring Hyper-V hosts for replicationConfiguring VM replicationManaging Hyper-V replica serversPerforming a VM failoverSummary
Technical requirements and lab setupIntroduction to Storage Migration ServiceTransferring data and sharing configurationCutting over to a new server by using Storage Migration ServiceUsing Storage Migration Service to migrate to Azure Virtual MachinesMigrating to Azure File sharesSummary
Technical requirements and lab setupIntroduction to Azure MigrateMigrating using Azure Migrate toolsDeploying and configure the Azure Migrate applianceMigrating VM workloads to Azure IaaSMigrating physical workloads to Azure IaaSSummary
Technical requirements and lab setupGeneral recommendations for migrating Windows Server workloadsMigrate Internet Information Services (IIS)Migrating Hyper-V hostsMigrating RDS host serversMigrating DHCP serversMigrating print serversSummary
Technical requirements and lab setupMigrating IIS workloads to Azure Web AppsMigrating IIS workloads to containersSummary
Technical requirements and lab setupUpgrading an existing forestMigrating AD DS objects, users, groups, and Group Policy objects using the Active Directory Migration ToolMigrating to a new Active Directory forestSummary
Technical requirements and lab setupConfiguring monitoring and alerting for Windows ServerMonitoring Windows Server using Performance MonitorCreating and configuring Data Collector SetsMonitoring servers and configuring alerts using Windows Admin CenterMonitoring servers using System InsightsManaging Windows Server event logsDeploying Azure Monitor AgentsCollecting performance counters for AzureCreating Azure Monitor alertsMonitoring Azure Virtual Machines using the Azure Diagnostics extensionMonitoring Azure Virtual Machines performance using VM InsightsSummary
Technical requirements and lab setupTroubleshooting hybrid network connectivityNetwork health and metricsNetwork WatcherTroubleshooting on-premises connectivitySummary
Technical requirements and lab setupTroubleshooting deployment failuresTroubleshooting booting failuresReviewing Boot diagnosticsWorking with Azure Serial ConsoleTroubleshooting VM performance issuesTroubleshooting VM extension issuesTroubleshooting disk encryption issuesTroubleshooting storageTroubleshooting VM connection issuesSummary
Technical requirements and lab setupRestoring objects from AD Recycle BinRecovering an AD database using DSRMRecovering SYSVOLTroubleshooting AD replicationTroubleshooting hybrid authentication issuesTroubleshooting on-premises ADSummary
Mock exam practice questionsMock exam practice answersLab environment housekeepingTo completely remove all local Hyper-V virtual machinesTo completely remove all Azure resources for your AZ801 exam tenantSummary
Other Books You May EnjoyPackt is searching for authors like youShare Your ThoughtsDownload a free PDF copy of this book

Content preview from Configuring Windows Server Hybrid Advanced Services Exam Ref AZ-801

Part 2: Secure Windows Server On-Premises and Hybrid Infrastructures

This section will primarily focus on how to properly secure Windows Server for both on-premises and hybrid infrastructures, using security baselines, best practices, and best-of-breed security tools to protect data, communications, identity and access management, and analysis and response.

This part of the book comprises the following chapters:

Chapter 2, Securing the Windows Server Operating System
Chapter 3, Securing a Hybrid Active Directory (AD) Infrastructure
Chapter 4, Identifying and Remediating Windows Server Security Issues by Using Azure Services
Chapter 5, Securing Windows Server Networking
Chapter 6, Securing Windows Server Storage