AZ-802: A Map of the Whole Exam

The Short Version#

Before anything else, here's what you actually need to know:

• AZ-802 replaces both AZ-800 and AZ-801 as of September 30, 2026. One exam, one credential, $165.
• Seven domains, 120 minutes, 700/1000 to pass. No official retake wait time is published for AZ-802 specifically, Microsoft's general retake policy applies.
• The heaviest domain is Deploy and manage AD DS at 20–25%. Storage and Monitoring each come in at 15–20%. Domains 4–7 don't have published weights yet.
• Limited community data exists because this exam opened in beta in July 2026. The pass/fail rates and average scores aren't public yet.
• Plenty of community reports suggest roughly 60 hours of study if hybrid tooling is new to you, or 3–4 weeks if you've already sat AZ-800 or AZ-801, though that figure comes from a small sample this early in the exam's life.
• The one confirmed failure pattern: a beta candidate scored 675 after one week of preparation. Don't do that.
• FSMO role troubleshooting is high-yield. It shows up in at least two domains.

What This Exam Is Actually Testing#

The AZ-802 is validating one specific professional: someone who can administer Windows Server infrastructure in a hybrid state, where on-premises AD DS is talking to Entra ID, where VMs run on Hyper-V and in Azure, and where monitoring happens through Azure Monitor rather than just local event logs.

That's a different skill from pure Windows Server administration. It's also different from pure Azure administration. The exam sits at the seam. The question style reflects that, you'll see scenarios where you have to decide whether to use Windows Admin Center or PowerShell or Azure Policy, and the right answer depends on the specific hybrid constraint in the question. Knowing the tool isn't enough. You need to know when each tool is the right one.

The exam rewards practical, scenario-trained thinking over definition recall. If your study time went entirely into reading, you're likely underprepared. Building things in a lab is how you develop the decision fluency the exam tests.

Exam at a Glance#

The question count isn't published, which is normal for a new exam still in calibration. Microsoft uses the beta period to set the difficulty curve and calibrate scoring. If you're sitting the general availability version, expect the question count to be in the typical Microsoft associate range. Scenario-based questions are the dominant format, expect to read a paragraph of context before each question, not just a one-liner.

The seat time and exam time differ depending on whether labs are included. If your version includes performance-based lab tasks, you get 140 minutes total. Plan accordingly, and don't assume you'll finish with time to spare.

Who This Is For, and Who Should Wait#

AZ-802 is the right exam if you're administering or planning to administer Windows Server infrastructure in an organization that uses Azure alongside its on-premises environment. Systems administrators moving into hybrid roles, Windows Server admins whose organizations are extending to Azure, and infrastructure engineers taking on cloud responsibilities are all natural fits.

There are no enforced prerequisites. If you're starting from zero on both Windows Server and Azure, AZ-900 first is the sensible move, it gives you the cloud vocabulary you'll need when the exam asks about Azure Arc onboarding or Azure Policy. If you already held AZ-800 or AZ-801 before the retirement date, you're well-positioned: you have half the material already wired in, and you're mostly filling gaps.

If you've never touched Windows Server in a real environment, this exam will be hard. Not impossible, but the scenario questions assume you've seen AD DS behave badly in production, not just in a textbook. Build a lab first. Seriously, build one before you book the exam.

The Prep Journey, Domain by Domain#

Here's how a structured prep run for AZ-802 actually unfolds. Rather than treating the seven domains as a flat list to check off, think of them as layered: foundations first, then operational skills, then hybrid and security on top. That order also maps to how the exam's question difficulty tends to compound.

Week One: The Foundation#

Domain 1, Deploy and Manage AD DS (20–25%)#

Start here. The exam blueprint makes it the heaviest domain, and the community is consistent on this point: AD DS concepts from AZ-800 carry directly into AZ-802, and FSMO role troubleshooting is genuinely high-yield because it surfaces again in the monitoring domain later.

The scope includes Active Directory Domain Services deployment, RODC deployment, FSMO role management and troubleshooting, hybrid identity with Entra ID, and Group Policy. The Entra ID integration piece is where the hybrid angle comes in, this isn't just classic AD, it's AD extending into the cloud.

What trips people up here isn't the AD DS basics. It's the Entra ID hybrid identity scenarios, specifically, knowing when to use Entra ID Connect versus Entra ID Connect Cloud Sync, and what the implications are for password hash sync versus pass-through authentication. These are the kinds of distinctions that generate exam questions. Drill them specifically.

Lab exercise: Deploy a two-tier AD DS environment (one domain controller, one RODC). Transfer and seize FSMO roles. Break something and troubleshoot it. This takes an afternoon and is worth more than a week of reading.

Domain 2, Manage Storage and File Services (15–20%)#

Storage comes second in the journey because it builds on the infrastructure foundation. The scope covers Storage Spaces Direct, Azure Files integration, file server roles, DFS, and storage migration.

Community data on this domain is thin given how new the exam is. A handful of reports flag Storage Spaces Direct scenario questions as high-yield alongside Azure Arc onboarding, one early signal worth noting rather than a confirmed pattern. What the official blueprint makes clear is that Azure Files integration is explicitly in scope, so hybrid storage, not just on-premises storage, is part of what you need.

Hands-on: Create a Storage Spaces Direct cluster in a nested virtualization environment. Integrate an Azure Files share using Azure File Sync. Time yourself explaining what you built and why you'd choose each option.

Domain 3, Monitor and Troubleshoot Windows Server Environments (15–20%)#

Monitoring is the third pillar and it's where the hybrid tooling really shows. Azure Monitor and Azure Update Manager are both in scope alongside classic Windows Server performance monitoring and event logging.

FSMO role troubleshooting appears here again, which is why it's a high-yield topic worth drilling in week one and revisiting here. The exam will likely test you on FSMO from a troubleshooting angle in this domain rather than a deployment angle. That's a different question type with a different answer pattern.

Try this: Connect a Windows Server to Azure Monitor. Create an alert rule. Generate a load spike and watch it surface. Enable Azure Update Manager and check the compliance state. These are 30-minute exercises that build real fluency.

Weeks Two and Three: Hybrid, Virtualization, Networking#

Domain 4, Manage Windows Server Workloads in a Hybrid Environment (weight not published)#

This is where the exam earns the word "hybrid" in its name. Azure Arc onboarding, Windows Admin Center, PowerShell, Azure Policy, IaaS VM administration, and workload migration to Azure are all in scope.

Azure Arc onboarding scenarios are flagged by community sources as specifically high-yield, alongside Storage Spaces Direct, it's one of the two drill topics called out most clearly. The practical skill here is knowing how to onboard a Windows Server machine to Azure Arc, what that gives you in terms of Azure Policy compliance and monitoring, and how it differs from running the workload in Azure natively.

Practice run: Arc-enable a Windows Server VM running on-premises. Assign an Azure Policy definition to it. Verify compliance. This is a 45-minute exercise and it's exactly the kind of task the exam will describe in a scenario and ask you to identify the right steps for.

Domain 5, Manage Virtualization and Containers in Windows Server (weight not published)#

Hyper-V, VM management, containers, and VM migration are the scope. This domain draws from the AZ-801 advanced services territory, so if you sat AZ-801 before September 30, this will feel familiar.

No community exam notes exist for this domain yet, the exam is too new. Cover the official blueprint topics and spend time on VM live migration and storage migration scenarios. Container support in Windows Server is explicitly in scope, which means Windows containers, not just Linux containers in Azure.

Build this: Create a Hyper-V VM, perform a live migration, and then do a storage migration. Set up a basic Windows container. This doesn't need to be elaborate, it needs to build the mental model of what's happening under the hood.

Domain 6, Implement a Networking Infrastructure in Windows Server (weight not published)#

DNS, DHCP, hybrid networking, VPN, and on-premises/Azure network infrastructure. Classic Windows Server networking combined with hybrid connectivity.

No community notes exist for this domain at this stage of the exam's lifecycle. Cover the fundamentals: DNS zone types, DHCP failover, and then the hybrid bridge, site-to-site VPN, Azure VPN Gateway, and how on-premises DNS resolves Azure private endpoints. The DNS piece in particular tends to generate scenario questions because misconfigurations are common in real environments.

Field test: Configure a split-brain DNS setup where an internal zone resolves differently from an external zone. Add a conditional forwarder that routes Azure Private DNS resolution correctly. Run it for an hour with simulated queries and verify resolution.

Domain 7, Secure Windows Server Infrastructure (weight not published)#

Microsoft Defender for Identity, Microsoft Defender for Cloud, security hardening, privileged access, and certificates/PKI are the scope. This draws from AZ-801 territory as well.

No community exam notes for this domain yet. The privileged access topic is worth specific attention, it covers things like Privileged Access Workstations, Just Enough Administration, and Windows LAPS. These are scenario-rich topics where the exam can construct a realistic situation and ask you what control to implement. Microsoft Defender for Identity is the product most specific to hybrid environments, so understanding its architecture (sensors deployed on domain controllers, alerts flowing to the Defender portal) is worth the time.

Quick lab: Enable Microsoft Defender for Identity on a test domain. Trigger a simulated lateral movement alert. Review what surfaced in the portal. This takes about an hour and builds the intuition for what Defender for Identity actually does versus what Defender for Cloud does.

The Failure Pattern#

The only confirmed failure report from the beta is instructive: a candidate scored 675 after one week of preparation. That's 25 points below passing. One week is not enough for an exam that spans seven domains and rewards scenario-trained reasoning over memorization.

The broader failure pattern to anticipate: candidates who prepared thoroughly for either AZ-800 or AZ-801 but not both will feel confident going in and then run into questions from the half they underweighted. The exam is genuinely broader than either predecessor alone, and context-switching between seven distinct domains in 120 minutes is harder than it sounds on paper.

What not to assume: that Azure knowledge from other Microsoft exams transfers cleanly to the Windows Server hybrid scenarios. The hybrid angle in AZ-802 is specifically on-premises-first, with Azure as the extension layer. Candidates coming from a pure Azure background may find the on-premises depth (FSMO, DFS, Storage Spaces Direct, DHCP failover) more demanding than expected.

How to Prepare#

The Official Learning Path#

Microsoft Learn is the foundation. The official study guide at learn.microsoft.com/credentials/certifications/resources/study-guides/az-802 lists the skills measured for each domain, with links to the relevant Learn modules. Work through it systematically. The weakness of Microsoft Learn modules for this exam is depth on the on-premises side, the modules are stronger on the Azure hybrid integration topics than on classic Windows Server administration.

The Official Study Guide#

Use the official study guide as your domain checklist. Go through each bullet point under each domain and honestly ask whether you could answer a scenario question on that topic. If the answer is no, build the lab exercise before reading more.

Practice Questions#

Take a practice exam before you feel ready. The gaps you find at week two are easier to close than the ones you find the morning before the exam.

CertCompanion has 600 practice questions for AZ-802 with detailed explanations, start with the 30 free questions at /exams/microsoft-windows-server-hybrid-administrator-associate-az-802 to get a baseline read on where you actually stand. Aim for 80–85% on practice runs before you schedule. If you're consistently hitting 70–75%, you're not ready yet, and that's useful information to have before the exam, not during it.

You can also browse the full Microsoft exam catalog on CertCompanion to see where AZ-802 fits alongside AZ-104 and other Microsoft associate-level exams.

For the official Microsoft free practice assessment, the AZ-802-specific assessment wasn't published at time of research, check the certification page directly for updates. The Microsoft Exam Sandbox at aka.ms/examdemo is worth 20 minutes to get familiar with the interface before exam day.

ROI vs Salary Uplift#

The exam costs $165. Add a realistic prep cost (a few hours of your time, any lab environment), and your total investment is well under $300 for most people. According to ZipRecruiter, Windows Server Administrator roles average $88,349/year as of 2026, with the 75th percentile at $104,500. For Azure Administrator roles, Glassdoor puts the average at $162,358/year in the US. If AZ-802 helps you move from a pure on-premises administrator role into a hybrid administrator role, even a partial step toward Azure Administrator territory, the salary differential over 12 months makes the $165 exam fee look like a rounding error. That math holds even if the salary lift is modest. The credential signals that you can work at the seam between on-premises and cloud, which is precisely where most organizations are operating right now.

Study Hours by Background#

These ranges reflect a small early sample (the exam only recently reached general availability), so expect them to firm up as more people sit it.

On Exam Day#

Book your slot at Pearson VUE, online proctored or test center, your preference. The online proctored option requires a clean, private space with a working webcam, and the check-in process typically takes 15–20 minutes before your exam window opens. Factor that into your morning.

Time management matters on this exam. Seven domains in 120 minutes means context-switching every 15–20 minutes on average. Candidates who prepared domain by domain without ever doing a full timed run through all seven tend to feel the cognitive load more acutely. Do at least one complete timed practice run before exam day. The point isn't just to check your score, it's to feel what it's like to go from an AD DS scenario to a networking scenario to a security scenario without stopping.

For question strategy: read the scenario carefully before looking at the answers. The scenario contains the constraint that determines the right answer. Read it twice (the second read is where you catch the qualifier that changes everything). Flag questions you're uncertain on and move forward, don't spend 5 minutes on one question when you haven't seen the next 10 yet.

Scores appear in your Microsoft Certification Dashboard after the exam. For beta exam sitters: results are not immediate. They come after the beta scoring period closes, which can take several weeks.

What the Cert Actually Does for You#

AZ-802 signals that you can operate at the intersection of Windows Server and Azure, a position that's genuinely in demand as organizations extend their on-premises infrastructure into the cloud rather than replacing it wholesale.

According to ZipRecruiter, Windows Server Administrator roles average $88,349/year, with top earners (90th percentile) reaching $134,000. The roles that list this certification include Windows Server Administrator, Windows Server Hybrid Administrator, Azure Administrator, Systems Administrator, and Hybrid Infrastructure Administrator. The cloud-adjacent roles in that list skew toward the higher end of the range.

The cert is valid for one year and renewable via free online assessment on Microsoft Learn, Microsoft's current approach for associate-level credentials. Mark the renewal date and do it well before it lapses.

Logical next steps after AZ-802:

• AZ-104 (Microsoft Azure Administrator), if your role is shifting more toward Azure management, this is the natural progression.
• SC-300 or SC-200, if the security domains in AZ-802 revealed gaps you want to close, these are the dedicated security tracks.
• AZ-305 (Azure Solutions Architect Expert), the advanced architecture path, for those moving toward design rather than administration.

For anyone starting their cloud journey without a prior credential, the recommended on-ramp is AZ-900 first, then AZ-802.

Recent candidate threads#

Real posts from people preparing for or recently sitting the AZ-802. Read these for the unfiltered version of what the exam felt like:

• Microsoft Certifications - 📢 Retirements and Updates 📢, r/AZURE · 78 comments
• Huge Microsoft Credentials Update, r/AZURE · 25 comments
• Microsoft's New AI Certifications (2026) – From Cloud to Agents: Discover the Next Generation of Microsoft Certifications, r/AzureCertification · 16 comments
• Now is official ! New Path Certification -> Microsoft's new cloud, AI, and security Certifications., r/AzureCertification · 21 comments
• AZ-802 is no longer in beta, r/AzureCertification · 6 comments

Threads pulled from the Reddit communities most active for Microsoft certifications.

Frequently Asked Questions#

Is AZ-802 hard? It's a legitimate associate-level exam with seven domains and a scenario-heavy question format. The difficulty isn't in memorizing definitions, it's in reasoning through hybrid scenarios correctly under time pressure. Candidates with strong on-premises Windows Server experience find the cloud integration topics challenging. Those coming from a pure Azure background find the on-premises depth challenging. Most people land somewhere in between. It's not a trick exam, but it rewards candidates who've actually built hybrid environments.

How long should I study for AZ-802? Community sources suggest around 60 hours if hybrid tooling is new to you, or roughly 3–4 weeks if you've already completed AZ-800 or AZ-801. Those numbers are drawn from a handful of early reports and will likely tighten as more people sit the exam. What matters more than hours is whether you've done hands-on lab work across all seven domains. Time in a lab is not interchangeable with time reading.

Does AZ-802 expire? Yes. The credential is valid for one year from the date you pass. Renewal is free via an online assessment on Microsoft Learn. Set a calendar reminder before the anniversary date.

Do I need AZ-800 or AZ-801 first? No enforced prerequisites exist. AZ-900 is recommended as a baseline if you're new to Azure concepts. If you already hold AZ-800 or AZ-801, you're in a strong position, focus on the material from the exam you didn't sit.

What happened to AZ-800 and AZ-801? Both exams retire on September 30, 2026. After that date, AZ-802 becomes the sole path to the Microsoft Certified: Windows Server Hybrid Administrator Associate credential (also referred to as Windows Server Administrator Associate). If you pass AZ-800 and AZ-801 before the retirement date, you already hold the credential and don't need to sit AZ-802.

What's the retake policy if I fail? Microsoft's general retake policy applies, the AZ-802-specific window wasn't confirmed in official documentation at time of writing. Check the Microsoft Certification Policies page before you schedule your first attempt so you're not caught off guard.

Is this cert worth it in 2026? The hybrid on-premises/Azure skill set this exam validates is where a large portion of enterprise infrastructure actually lives right now. The consolidation of AZ-800 and AZ-801 into a single $165 exam also means you get the same credential for half the cost of the predecessor path. If your role involves Windows Server in any hybrid capacity, the return on investment is clear.

What does FSMO stand for and why does it keep coming up? FSMO stands for Flexible Single Master Operation, it's the set of specialized domain controller roles in Active Directory (Schema Master, Domain Naming Master, PDC Emulator, RID Master, Infrastructure Master). The reason it comes up across multiple domains is that FSMO role failures cause specific, identifiable symptoms, and troubleshooting them is a task a hybrid administrator would actually face. Know what each role does, what breaks when it's unavailable, and how to transfer or seize a role.

AZ-802 is a meaty exam for a role that's genuinely meaty. Seven domains, 120 minutes, and a passing bar that requires you to know the material rather than recognize it. The candidates who pass are the ones who built lab environments, ran timed practice sessions, and treated the exam as a test of operational judgment rather than vocabulary. That's achievable, but it takes more than a week.

Start with 30 free practice questions at CertCompanion's AZ-802 exam page to see where your gaps actually are before you commit to a study plan.

Checked against official Microsoft AZ-802 exam documentation and current candidate reports. Last verified 2026-09-18.