Microsoft · AZ-800
Validates expertise in administering Windows Server as a workload in both on-premises and hybrid environments, integrating Windows Server environments with Azure services.
Questions
898
Duration
120 minutes
Passing Score
700/1000
Difficulty
AssociateLast Updated
Jan 2025
Use this AZ-800 practice exam to prepare for Administering Windows Server Hybrid Core Infrastructure (AZ-800) with realistic questions, detailed explanations, and focused study modes. The practice bank includes 898 questions for Microsoft AZ-800, so you can review the exam steadily instead of relying on one long cram session.
As you practice, pay extra attention to recurring topics such as Deploy and manage Active Directory Domain Services (AD DS), Manage Windows Servers and workloads in hybrid environment, Manage virtual machines and containers, Implement and manage networking infrastructure, and Manage storage and file services. Start with short sessions to identify weak areas, then move into timed quizzes once your accuracy is consistent.
The explanations are especially useful when you want to connect exam wording to the responsibilities and scenarios described in the official certification guidance. Use the free preview first, then unlock the full question bank when you are ready to build a complete study routine.
The AZ-800 exam, Administering Windows Server Hybrid Core Infrastructure, validates a candidate's ability to deploy, manage, and troubleshoot Windows Server workloads across both on-premises and hybrid Azure environments. It covers a broad range of disciplines including identity management with Active Directory Domain Services (AD DS) and Microsoft Entra ID, hybrid server management, Hyper-V virtualization, containers, on-premises and hybrid networking, and storage with Azure Files integration. The exam was most recently updated on January 21, 2026, reflecting evolving hybrid cloud practices.
Candidates are expected to demonstrate proficiency with a modern toolset that includes Windows Admin Center, PowerShell, Azure Arc, Azure Policy, Azure Monitor, Azure Update Manager, Microsoft Defender for Identity, Microsoft Defender for Cloud, and IaaS VM administration. Passing AZ-800 is one of two requirements—alongside AZ-801—for earning the Microsoft Certified: Windows Server Hybrid Administrator Associate credential, which formally recognizes expertise in integrating on-premises Windows Server infrastructure with Azure services.
This exam is designed for Windows Server administrators and IT professionals who are responsible for managing Windows Server workloads in environments that span on-premises data centers and Azure cloud services. Typical job roles include Systems Administrator, Infrastructure Engineer, Network Engineer, Identity and Access Administrator, and Support Engineer who collaborates with architects and cloud engineers on hybrid deployments.
Candidates should be comfortable working with both traditional Windows Server administration tasks and modern Azure-integrated scenarios. The exam is particularly well-suited for experienced server administrators looking to formalize and extend their hybrid cloud skills, as well as IT generalists seeking a structured path into the Microsoft hybrid infrastructure ecosystem.
There are no formal mandatory prerequisites for AZ-800, but Microsoft strongly recommends that candidates bring several years of hands-on experience with Windows Server operating systems before attempting the exam. Familiarity with core Windows Server roles such as Active Directory, DNS, DHCP, Hyper-V, and file services is essential, as the exam assumes foundational knowledge rather than teaching it.
Candidates will benefit from exposure to Microsoft Azure fundamentals, including basic understanding of Azure resource management, Azure networking, and Azure storage concepts. Completion of the official instructor-led course AZ-800T00: Administer Windows Server Hybrid Core Infrastructure is recommended as structured preparation, alongside hands-on practice with tools such as Windows Admin Center, PowerShell remoting, and Azure Arc.
The AZ-800 exam is a proctored assessment delivered through Pearson VUE, available both online (at home) and at authorized testing centers. The time limit is 120 minutes, and candidates must achieve a scaled score of 700 or higher out of 1000 to pass. Microsoft uses a scaled scoring model, so 700 does not represent 70% of questions answered correctly.
The exam is available in multiple languages including English, Japanese, Chinese (Simplified), German, French, Spanish, and Portuguese (Brazil). Candidates testing in a non-English language may request an additional 30 minutes of testing time. Question types typically include multiple choice, multiple select, case studies, drag-and-drop, and scenario-based questions. Microsoft does not publish the exact number of scored questions, which can vary by exam session. The Microsoft Certified: Windows Server Hybrid Administrator Associate certification earned through this exam (along with AZ-801) requires annual renewal via a free online assessment on Microsoft Learn.
Earning the AZ-800 exam credential and the associated Windows Server Hybrid Administrator Associate certification positions IT professionals for roles such as Systems Administrator, Infrastructure Engineer, Identity and Access Administrator, Network Engineer, and Security Engineer in organizations running hybrid Microsoft environments. According to Salary.com, Windows Server Administrators earn between approximately $79,000 and $105,000 annually, with certified professionals commanding the higher end of that range due to demonstrated hybrid cloud competency.
As enterprises accelerate migration to hybrid architectures while maintaining on-premises investments, demand for professionals who can bridge legacy Windows Server infrastructure with Azure services remains strong. The AZ-800 certification also serves as a natural entry point for progression toward more advanced Microsoft credentials such as AZ-801 (Configuring Windows Server Hybrid Advanced Services—the companion exam completing the associate certification), AZ-104 (Azure Administrator Associate), or specialized credentials in security and identity. Annual renewal via a free Microsoft Learn assessment keeps the credential current without requiring a full re-examination.
5 sample questions with answers and explanations. Start a practice session to test yourself across all 898 questions.
Preview — answers shown1. Adventure Works Manufacturing has virtual machines that need to communicate with each other and also access services running on the Hyper-V host itself, but they must not have access to external networks or the internet. The VMs need to reach a local database service running on the host. Which Hyper-V switch type meets these requirements?
Explanation
An internal switch allows virtual machines to communicate with each other and with the host on which they're running, but traffic never leaves that host. This is perfect for Adventure Works' scenario where VMs need to access a database service running on the host while remaining isolated from external networks. Internal switches are less restrictive than private switches but more restrictive than external switches, providing exactly the level of access needed.
2. An administrator is setting up a new virtual machine in Hyper-V to host a legacy 32-bit application. This application requires an older operating system that does not support UEFI firmware. Which VM Generation must the administrator select for this virtual machine?
Explanation
Generation 1 virtual machines provide a legacy hardware environment, including a traditional BIOS firmware. This is required for older guest operating systems, particularly 32-bit versions, that do not have support for the modern UEFI firmware used by Generation 2 VMs. Therefore, to ensure compatibility with the legacy OS, the administrator must choose Generation 1. Generation 2 is for modern 64-bit operating systems and uses UEFI. 'Auto' and 'Legacy' are not valid generation options.
3. Stark Industries is planning their first Active Directory deployment in a new branch office. Their IT administrator needs to understand what components are essential for a domain controller. The server will handle authentication for 200 users and host the directory database. Which database file contains the Active Directory objects and what authentication protocol does it use?
Explanation
Domain controllers host the NTDS.DAT database file which contains all Active Directory objects and use Kerberos authentication through the Key Distribution Center (KDC) service. NTDS stands for NT Directory Service, reflecting Active Directory's evolution from earlier Windows NT directory services. The database follows X.500 hierarchical architecture. SYSVOL is a separate folder that stores Group Policy objects, not the main database. LDAP is used for directory queries but Kerberos handles authentication. NTLM is an older authentication protocol that Kerberos replaced in Active Directory environments.
4. Woodgrove Bank is installing Azure AD Connect and sees two options: Express Settings and Customize. Their environment has a single Active Directory forest and no ADFS server. The IT team typically prefers customized installations to control all settings. Which installation option should they choose?
Explanation
Express Settings is the recommended choice for Woodgrove Bank since they have a single Active Directory forest and no ADFS server. While IT professionals often prefer customized installations to control settings, Azure AD Connect Express Settings is designed for standard environments and provides faster, easier configuration. The Customize option is primarily intended for complex scenarios with multiple forests or ADFS integration. Using Express Settings will save time and reduce complexity while providing the same functionality for their standard environment.
5. An administrator needs to deploy a security setting to all computers in a domain. The setting can only be configured via a registry key. Which Group Policy feature provides a simple, targeted way to create, update, or delete specific registry keys on managed computers?
Explanation
Group Policy Preferences (GPP) are designed for deploying a wide array of configuration settings, including specific registry keys. Using the Registry preference item, an administrator can use a GUI to target a specific registry hive and key, and then set the action to Create, Update, Replace, or Delete. GPP also supports item-level targeting, allowing the registry change to be applied only to computers that meet certain criteria (like having a specific application installed).
Microsoft Dynamics 365 Supply Chain Management Functional Consultant Expert (MB-335)
MB-335 · 2039 questions
Microsoft Dynamics 365 Business Central Functional Consultant (MB-800)
MB-800 · 1899 questions
Microsoft Certified: Azure AI Engineer Associate (AI-102)
AI-102 · 1392 questions
Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-801)
AZ-801 · 1376 questions
Microsoft Dynamics 365 Finance Functional Consultant (MB-310)
MB-310 · 1299 questions
Microsoft 365 Certified: Fundamentals (MS-900)
MS-900 · 1201 questions
$17.99
One-time access to this exam