Microsoft · AZ-801
Validates your ability to secure Windows Server on-premises and hybrid infrastructures, implement high availability and disaster recovery, migrate servers and workloads to Azure, and monitor and troubleshoot Windows Server environments.
Practice Questions
1,376
≈ 27 practice exams
Duration
120 minutes
Passing Score
700/1000
Difficulty
AssociateLast Updated
Jan 2026
Use this AZ-801 practice exam to prepare for Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-801) with realistic questions, detailed explanations, and focused study modes. The practice bank includes 1,376 questions for Microsoft AZ-801, so you can review the exam steadily instead of relying on one long cram session.
As you practice, pay extra attention to recurring topics such as Secure Windows Server on-premises and hybrid infrastructures, Implement and manage Windows Server high availability, Implement disaster recovery, Migrate servers and workloads, and Monitor and troubleshoot Windows Server environments. Start with short sessions to identify weak areas, then move into timed quizzes once your accuracy is consistent.
The explanations are especially useful when you want to connect exam wording to the responsibilities and scenarios described in the official certification guidance. Use the free preview first, then unlock the full question bank when you are ready to build a complete study routine.
AZ-801: Configuring Windows Server Hybrid Advanced Services validates advanced skills in managing Windows Server workloads across on-premises and hybrid cloud environments. The exam, last updated on October 6, 2025, assesses a candidate's ability to secure Windows Server infrastructures, implement high availability and disaster recovery solutions, migrate servers and workloads to Azure, and monitor and troubleshoot complex Windows Server environments. Candidates are expected to work fluently with tools including Windows Admin Center, PowerShell, Azure Arc, Azure Policy, Azure Monitor, Azure Update Manager, Microsoft Defender for Identity, Microsoft Defender for Cloud, and IaaS virtual machine administration.
This is one of two required exams—alongside AZ-800—to earn the Microsoft Certified: Windows Server Hybrid Administrator Associate credential. While AZ-800 focuses on core infrastructure tasks such as AD DS, networking, storage, and virtualization, AZ-801 concentrates on advanced services: hardening security postures using Azure Sentinel and Defender, engineering failover clusters with Storage Spaces Direct, orchestrating disaster recovery via Azure Site Recovery and Azure Backup, executing large-scale migrations using Azure Migrate and Storage Migration Service, and implementing comprehensive monitoring pipelines through Azure Monitor and System Insights.
AZ-801 is designed for experienced Windows Server administrators who are extending their on-premises expertise into hybrid Azure environments. Ideal candidates include Systems Administrators, Infrastructure Engineers, Cloud Infrastructure Architects, and IT Operations professionals who already manage Windows Server environments and want to formalize their Azure hybrid capabilities. Microsoft recommends several years of hands-on Windows Server experience before attempting this exam.
This exam is particularly suited for professionals whose organizations are actively migrating workloads to Azure or adopting a hybrid model, and who collaborate with cloud architects, security engineers, and DevOps teams. It is not recommended as an entry-level certification; candidates without prior AZ-800-level knowledge or equivalent practical experience will find the advanced security, clustering, and disaster recovery topics challenging.
There are no mandatory formal prerequisites to register for AZ-801; however, Microsoft strongly recommends several years of experience with Windows Server operating systems before attempting the exam. Candidates are also expected to have working knowledge of the topics covered in AZ-800 (Administering Windows Server Hybrid Core Infrastructure), including Active Directory Domain Services, hybrid networking, storage, and virtualization, even if they have not formally sat that exam.
Familiarity with Azure fundamentals—including Azure portal navigation, Azure Virtual Machines, Azure networking concepts, and Azure Active Directory (now Microsoft Entra ID)—is essential. Practical experience with PowerShell scripting, Windows Admin Center, and at least one Azure hybrid service such as Azure Arc or Azure Monitor will significantly aid exam preparation. Microsoft's official instructor-led course AZ-801T00: Configure Windows Server Hybrid Advanced Services is the aligned training resource.
AZ-801 is a proctored exam delivered through Pearson VUE, available both online and at test centers. The exam contains approximately 40–60 scored questions and must be completed within 120 minutes. Question types include multiple choice, multiple select, drag-and-drop, case studies, and scenario-based labs, consistent with Microsoft's standard associate-level exam formats. A score of 700 out of 1000 is required to pass. Scoring is not linear; questions are weighted based on difficulty and domain importance.
The exam is priced at approximately $165 USD, though pricing varies by country or region. It is available in English, Japanese, Chinese (Simplified), Korean, German, French, Spanish, Portuguese (Brazil), Chinese (Traditional), and Italian. Candidates taking a non-English version may request an additional 30 minutes. The certification earned upon passing both AZ-800 and AZ-801 must be renewed annually via a free online assessment on Microsoft Learn.
Earning the Microsoft Certified: Windows Server Hybrid Administrator Associate (by passing both AZ-800 and AZ-801) positions professionals for roles such as Windows Server Administrator, Hybrid Cloud Administrator, Infrastructure Engineer, and Systems Engineer in organizations running hybrid Azure environments. The credential is particularly valued in enterprises undergoing datacenter modernization or cloud migration projects where deep Windows Server and Azure integration expertise is required. Salary ranges for certified Windows Server hybrid administrators typically fall between $85,000 and $125,000 USD annually depending on geography, experience, and employer, with senior hybrid infrastructure roles in major markets reaching higher.
The Windows Server Hybrid Administrator Associate is Microsoft's dedicated credential bridging traditional on-premises Windows Server administration and Azure cloud operations—a combination increasingly in demand as organizations run mixed environments rather than committing fully to either model. Compared to the Azure Administrator Associate (AZ-104), this certification goes deeper on Windows Server-specific workloads, failover clustering, AD DS security, and Hyper-V, making it complementary rather than redundant. The certification renews annually via a free online assessment on Microsoft Learn, keeping credential holders current with platform updates.
5 sample questions with answers and explanations. The full bank has 1,376 questions, enough for 27 full-length practice exams.
Preview — answers shown1. Globodyne Corporation needs to configure their guarded hosts to communicate with the HGS infrastructure. Each guarded host must be configured with two specific URLs to properly participate in the guarded fabric. What are these two essential URL configurations that must be set on each guarded host?
Explanation
Each guarded host must be configured with two specific URLs: the Attestation Server URL (used to connect to the HGS Attestation service for health verification) and the Key Protection Server URL (used to retrieve keys needed to decrypt and start shielded VMs). These URLs can be configured using PowerShell cmdlets like Set-HgsClientConfiguration or through VMM console settings. The other URL types mentioned serve different purposes in the infrastructure but are not the specific HGS-related URLs required for guarded fabric participation.
2. InGen Corporation is implementing advanced auditing and wants to track Windows process creation and termination events. Which advanced audit policy category covers process tracking?
Explanation
Detailed Tracking is the advanced audit policy category that controls auditing of encryption events, Windows process creation and termination events, and remote procedure call (RPC) events. This category provides granular tracking of process activities and system-level operations. Account Management focuses on user, group, and computer account modifications, not process tracking. System category audits changes to the state of the security subsystem, not individual process events. Object Access audits access to files, folders, registry keys, and other objects, not process creation and termination.
3. S.H.I.E.L.D.'s disaster recovery plan includes using Azure Site Recovery to replicate VMs from their primary site to Azure. Maria Hill wants to understand what happens to VM data during the replication process between two on-premises sites when Site Recovery orchestrates the replication. Where does the actual VM data travel during on-premises to on-premises replication?
Explanation
During on-premises to on-premises replication, VM data travels directly from the primary site to the secondary site, with Azure Site Recovery providing orchestration only. The actual customer data never replicates to or through Azure during site-to-site replication. Azure Site Recovery only monitors the replication between sites and controls failover operations, but the actual VM data replicates directly between the on-premises locations over HTTPS. This design ensures data sovereignty and minimizes latency while still providing the advanced orchestration and management capabilities that Azure Site Recovery offers for disaster recovery scenarios.
4. Stark Enterprises is configuring the cutover process and needs to specify how the source server will be handled after the destination takes over its identity. What must they specify for the source server during cutover configuration?
Explanation
During cutover configuration, both the IP address to assign to the source server and the name to assign to the source server must be specified. Since the destination server takes over the source server's original identity (name and IP address), the source server needs new identity information to avoid conflicts and remain accessible for administrative purposes. Specifying only the new IP address would be incomplete, as the source server also needs a new name to avoid naming conflicts. Specifying only the new name would leave IP address conflicts unresolved. The source server configuration definitely can and must be changed during cutover to prevent identity conflicts between the source and destination servers.
5. Scrooge McDuck Enterprises is migrating file shares to Azure Files for their money bin inventory management. Huey, Dewey, and Louie need to ensure seamless access transition with preserved security permissions. Which migration strategy should be implemented?
Explanation
Using Azure File Sync establishes hybrid file sharing that allows gradual migration while maintaining access for users, with intelligent tiering and permission preservation. This provides seamless transition with minimal disruption. Robocopy with manual permission recreation is labor-intensive and error-prone for complex permission structures. Storage Migration Service targets Azure VMs, not Azure Files directly. DFS Namespace redirection without data migration does not achieve the goal of migrating data to Azure Files.
Microsoft Certified: SQL AI Developer Associate (DP-800)
DP-800 · 600 questions
Microsoft 365 Certified: Collaboration Communications Systems Engineer Associate (MS-721)
MS-721 · 306 questions
Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140)
AZ-140 · 517 questions
Microsoft Certified: Cybersecurity Architect Expert (SC-100)
SC-100 · 880 questions
Microsoft Certified: Cybersecurity Business Professional (SC-730)
SC-730 · 575 questions
Microsoft Certified: AI Agent Builder Associate (AB-620)
AB-620 · 595 questions
$17.99
One-time access to this exam