Microsoft · AZ-800
Validates expertise in administering Windows Server as a workload in both on-premises and hybrid environments, integrating Windows Server environments with Azure services.
Questions
898
Duration
120 minutes
Passing Score
700/1000
Difficulty
AssociateLast Updated
Jan 2025
Use this AZ-800 practice exam to prepare for Administering Windows Server Hybrid Core Infrastructure (AZ-800) with realistic questions, detailed explanations, and focused study modes. The practice bank includes 898 questions for Microsoft AZ-800, so you can review the exam steadily instead of relying on one long cram session.
As you practice, pay extra attention to recurring topics such as Deploy and manage Active Directory Domain Services (AD DS), Manage Windows Servers and workloads in hybrid environment, Manage virtual machines and containers, Implement and manage networking infrastructure, and Manage storage and file services. Start with short sessions to identify weak areas, then move into timed quizzes once your accuracy is consistent.
The explanations are especially useful when you want to connect exam wording to the responsibilities and scenarios described in the official certification guidance. Use the free preview first, then unlock the full question bank when you are ready to build a complete study routine.
The AZ-800 exam, Administering Windows Server Hybrid Core Infrastructure, validates a candidate's ability to deploy, manage, and troubleshoot Windows Server workloads across both on-premises and hybrid Azure environments. It covers a broad range of disciplines including identity management with Active Directory Domain Services (AD DS) and Microsoft Entra ID, hybrid server management, Hyper-V virtualization, containers, on-premises and hybrid networking, and storage with Azure Files integration. The exam was most recently updated on January 21, 2026, reflecting evolving hybrid cloud practices.
Candidates are expected to demonstrate proficiency with a modern toolset that includes Windows Admin Center, PowerShell, Azure Arc, Azure Policy, Azure Monitor, Azure Update Manager, Microsoft Defender for Identity, Microsoft Defender for Cloud, and IaaS VM administration. Passing AZ-800 is one of two requirements—alongside AZ-801—for earning the Microsoft Certified: Windows Server Hybrid Administrator Associate credential, which formally recognizes expertise in integrating on-premises Windows Server infrastructure with Azure services.
This exam is designed for Windows Server administrators and IT professionals who are responsible for managing Windows Server workloads in environments that span on-premises data centers and Azure cloud services. Typical job roles include Systems Administrator, Infrastructure Engineer, Network Engineer, Identity and Access Administrator, and Support Engineer who collaborates with architects and cloud engineers on hybrid deployments.
Candidates should be comfortable working with both traditional Windows Server administration tasks and modern Azure-integrated scenarios. The exam is particularly well-suited for experienced server administrators looking to formalize and extend their hybrid cloud skills, as well as IT generalists seeking a structured path into the Microsoft hybrid infrastructure ecosystem.
There are no formal mandatory prerequisites for AZ-800, but Microsoft strongly recommends that candidates bring several years of hands-on experience with Windows Server operating systems before attempting the exam. Familiarity with core Windows Server roles such as Active Directory, DNS, DHCP, Hyper-V, and file services is essential, as the exam assumes foundational knowledge rather than teaching it.
Candidates will benefit from exposure to Microsoft Azure fundamentals, including basic understanding of Azure resource management, Azure networking, and Azure storage concepts. Completion of the official instructor-led course AZ-800T00: Administer Windows Server Hybrid Core Infrastructure is recommended as structured preparation, alongside hands-on practice with tools such as Windows Admin Center, PowerShell remoting, and Azure Arc.
The AZ-800 exam is a proctored assessment delivered through Pearson VUE, available both online (at home) and at authorized testing centers. The time limit is 120 minutes, and candidates must achieve a scaled score of 700 or higher out of 1000 to pass. Microsoft uses a scaled scoring model, so 700 does not represent 70% of questions answered correctly.
The exam is available in multiple languages including English, Japanese, Chinese (Simplified), German, French, Spanish, and Portuguese (Brazil). Candidates testing in a non-English language may request an additional 30 minutes of testing time. Question types typically include multiple choice, multiple select, case studies, drag-and-drop, and scenario-based questions. Microsoft does not publish the exact number of scored questions, which can vary by exam session. The Microsoft Certified: Windows Server Hybrid Administrator Associate certification earned through this exam (along with AZ-801) requires annual renewal via a free online assessment on Microsoft Learn.
Earning the AZ-800 exam credential and the associated Windows Server Hybrid Administrator Associate certification positions IT professionals for roles such as Systems Administrator, Infrastructure Engineer, Identity and Access Administrator, Network Engineer, and Security Engineer in organizations running hybrid Microsoft environments. According to Salary.com, Windows Server Administrators earn between approximately $79,000 and $105,000 annually, with certified professionals commanding the higher end of that range due to demonstrated hybrid cloud competency.
As enterprises accelerate migration to hybrid architectures while maintaining on-premises investments, demand for professionals who can bridge legacy Windows Server infrastructure with Azure services remains strong. The AZ-800 certification also serves as a natural entry point for progression toward more advanced Microsoft credentials such as AZ-801 (Configuring Windows Server Hybrid Advanced Services—the companion exam completing the associate certification), AZ-104 (Azure Administrator Associate), or specialized credentials in security and identity. Annual renewal via a free Microsoft Learn assessment keeps the credential current without requiring a full re-examination.
5 sample questions with answers and explanations. Start a practice session to test yourself across all 898 questions.
Preview — answers shown1. An administrator at the Xavier School for Gifted Youngsters is creating a GPO to deploy a new piece of software. They want the software to be installed automatically on all lab computers, regardless of who logs in. However, for instructor laptops, they want the software to be available for installation on-demand from the 'Add or Remove Programs' control panel. What are the respective software deployment methods to achieve this?
Explanation
Software deployment via GPO has two primary methods: Assign and Publish. 'Assigning' software to a computer makes the installation mandatory; it will install automatically without user intervention. 'Publishing' software makes it available for users to install on-demand via 'Add or Remove Programs'. Publishing is only available for user configurations. Therefore, to meet the requirements, the administrator must 'Assign' the software to the lab computer objects and 'Publish' the software to the instructor user accounts.
2. Fabrikam Investments has employees working on older computers with limited RAM and storage space. They want their staff to use Microsoft Word and Excel but the computers cannot run the full desktop applications. The company has Office 365 licenses that allow web-based access to these applications. What type of cloud service model are they using?
Explanation
This scenario describes Software as a Service (SaaS). SaaS provides software applications that are hosted and run on the cloud provider's servers and accessed through web browsers. The Office 365 web applications like Word Online and Excel Online are perfect examples of SaaS - the software runs on Microsoft's servers and is delivered to users through their web browsers. This eliminates the need for local installation, reduces hardware requirements, and allows even older computers with limited resources to access full-featured applications as long as they have a screen and internet connection.
3. StartupTech is new to Azure and wants to create their first virtual machine. They have limited cloud experience and are concerned about accidentally incurring large costs. They want to start with a Windows 10 virtual machine for development work that will be used approximately 8 hours per day, 5 days per week. What Azure pricing model should they understand to manage their costs effectively?
Explanation
Azure uses a pay-as-you-use billing model where virtual machines are charged per minute they are running. This is ideal for StartupTech's scenario because they only pay for the 8 hours per day, 5 days per week that they actually use the VM - approximately 40 hours per week instead of the full 168 hours. When the VM is stopped and deallocated, compute charges stop completely. This per-minute billing provides excellent cost control and is perfect for development workloads that don't need to run 24/7. The Azure portal shows estimated hourly costs to help with budgeting, but actual billing is per minute. This model allows StartupTech to experiment and learn without fear of huge bills - if they forget to turn off the VM for a few extra hours, the cost impact is minimal. This flexibility and granular billing is one of the key advantages of cloud computing over traditional fixed-cost infrastructure.
4. A company is using Azure File Sync and has enabled the cloud tiering feature. An administrator wants to ensure that a specific folder, 'C:DataHotFiles', and all its contents are never tiered to the cloud and always remain fully cached on the on-premises server, regardless of the volume free space or date policies. How can this be configured?
Explanation
Azure File Sync provides a mechanism to exclude specific files or paths from cloud tiering. This is done by adding a registry key on the file sync server. Under HKLM\Software\Microsoft\Azure\StorageSync, the administrator would create a key named GhostingExclusionList and then add a new DWORD value for the volume (e.g., C:). The value data for this key would be the path(s) to be excluded, separated by pipes (e.g., C:\Data\HotFiles). This tells the tiering driver to always keep the full content of these files local.
5. Oscorp Industries has a forest with contoso.com as the forest root domain and plans to add research.oscorp.com and manufacturing.oscorp.com as child domains. What automatically exists between these domains once they're created?
Explanation
Active Directory automatically creates two-way transitive trusts between parent and child domains within a forest. These trusts are automatically established during domain creation and enable users from any domain to access resources in any other domain within the forest (subject to permissions). The transitive nature means that if Domain A trusts Domain B, and Domain B trusts Domain C, then Domain A automatically trusts Domain C through the chain of trust relationships. This eliminates the need for administrators to manually configure trusts within the forest and enables seamless resource sharing across the organizational structure. These automatic trusts use Kerberos authentication and are secured by the forest-wide security infrastructure.
Microsoft Dynamics 365 Supply Chain Management Functional Consultant Expert (MB-335)
MB-335 · 2039 questions
Microsoft Dynamics 365 Business Central Functional Consultant (MB-800)
MB-800 · 1899 questions
Microsoft Certified: Azure AI Engineer Associate (AI-102)
AI-102 · 1392 questions
Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-801)
AZ-801 · 1376 questions
Microsoft Dynamics 365 Finance Functional Consultant (MB-310)
MB-310 · 1299 questions
Microsoft 365 Certified: Fundamentals (MS-900)
MS-900 · 1201 questions
$17.99
One-time access to this exam