Microsoft · AZ-801
Validates your ability to secure Windows Server on-premises and hybrid infrastructures, implement high availability and disaster recovery, migrate servers and workloads to Azure, and monitor and troubleshoot Windows Server environments.
Questions
1376
Duration
120 minutes
Passing Score
700/1000
Difficulty
AssociateLast Updated
Jan 2026
Use this AZ-801 practice exam to prepare for Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-801) with realistic questions, detailed explanations, and focused study modes. The practice bank includes 1,376 questions for Microsoft AZ-801, so you can review the exam steadily instead of relying on one long cram session.
As you practice, pay extra attention to recurring topics such as Secure Windows Server on-premises and hybrid infrastructures, Implement and manage Windows Server high availability, Implement disaster recovery, Migrate servers and workloads, and Monitor and troubleshoot Windows Server environments. Start with short sessions to identify weak areas, then move into timed quizzes once your accuracy is consistent.
The explanations are especially useful when you want to connect exam wording to the responsibilities and scenarios described in the official certification guidance. Use the free preview first, then unlock the full question bank when you are ready to build a complete study routine.
AZ-801: Configuring Windows Server Hybrid Advanced Services validates advanced skills in managing Windows Server workloads across on-premises and hybrid cloud environments. The exam, last updated on October 6, 2025, assesses a candidate's ability to secure Windows Server infrastructures, implement high availability and disaster recovery solutions, migrate servers and workloads to Azure, and monitor and troubleshoot complex Windows Server environments. Candidates are expected to work fluently with tools including Windows Admin Center, PowerShell, Azure Arc, Azure Policy, Azure Monitor, Azure Update Manager, Microsoft Defender for Identity, Microsoft Defender for Cloud, and IaaS virtual machine administration.
This is one of two required exams—alongside AZ-800—to earn the Microsoft Certified: Windows Server Hybrid Administrator Associate credential. While AZ-800 focuses on core infrastructure tasks such as AD DS, networking, storage, and virtualization, AZ-801 concentrates on advanced services: hardening security postures using Azure Sentinel and Defender, engineering failover clusters with Storage Spaces Direct, orchestrating disaster recovery via Azure Site Recovery and Azure Backup, executing large-scale migrations using Azure Migrate and Storage Migration Service, and implementing comprehensive monitoring pipelines through Azure Monitor and System Insights.
AZ-801 is designed for experienced Windows Server administrators who are extending their on-premises expertise into hybrid Azure environments. Ideal candidates include Systems Administrators, Infrastructure Engineers, Cloud Infrastructure Architects, and IT Operations professionals who already manage Windows Server environments and want to formalize their Azure hybrid capabilities. Microsoft recommends several years of hands-on Windows Server experience before attempting this exam.
This exam is particularly suited for professionals whose organizations are actively migrating workloads to Azure or adopting a hybrid model, and who collaborate with cloud architects, security engineers, and DevOps teams. It is not recommended as an entry-level certification; candidates without prior AZ-800-level knowledge or equivalent practical experience will find the advanced security, clustering, and disaster recovery topics challenging.
There are no mandatory formal prerequisites to register for AZ-801; however, Microsoft strongly recommends several years of experience with Windows Server operating systems before attempting the exam. Candidates are also expected to have working knowledge of the topics covered in AZ-800 (Administering Windows Server Hybrid Core Infrastructure), including Active Directory Domain Services, hybrid networking, storage, and virtualization, even if they have not formally sat that exam.
Familiarity with Azure fundamentals—including Azure portal navigation, Azure Virtual Machines, Azure networking concepts, and Azure Active Directory (now Microsoft Entra ID)—is essential. Practical experience with PowerShell scripting, Windows Admin Center, and at least one Azure hybrid service such as Azure Arc or Azure Monitor will significantly aid exam preparation. Microsoft's official instructor-led course AZ-801T00: Configure Windows Server Hybrid Advanced Services is the aligned training resource.
AZ-801 is a proctored exam delivered through Pearson VUE, available both online and at test centers. The exam contains approximately 40–60 scored questions and must be completed within 120 minutes. Question types include multiple choice, multiple select, drag-and-drop, case studies, and scenario-based labs, consistent with Microsoft's standard associate-level exam formats. A score of 700 out of 1000 is required to pass. Scoring is not linear; questions are weighted based on difficulty and domain importance.
The exam is priced at approximately $165 USD, though pricing varies by country or region. It is available in English, Japanese, Chinese (Simplified), Korean, German, French, Spanish, Portuguese (Brazil), Chinese (Traditional), and Italian. Candidates taking a non-English version may request an additional 30 minutes. The certification earned upon passing both AZ-800 and AZ-801 must be renewed annually via a free online assessment on Microsoft Learn.
Earning the Microsoft Certified: Windows Server Hybrid Administrator Associate (by passing both AZ-800 and AZ-801) positions professionals for roles such as Windows Server Administrator, Hybrid Cloud Administrator, Infrastructure Engineer, and Systems Engineer in organizations running hybrid Azure environments. The credential is particularly valued in enterprises undergoing datacenter modernization or cloud migration projects where deep Windows Server and Azure integration expertise is required. Salary ranges for certified Windows Server hybrid administrators typically fall between $85,000 and $125,000 USD annually depending on geography, experience, and employer, with senior hybrid infrastructure roles in major markets reaching higher.
The Windows Server Hybrid Administrator Associate is Microsoft's dedicated credential bridging traditional on-premises Windows Server administration and Azure cloud operations—a combination increasingly in demand as organizations run mixed environments rather than committing fully to either model. Compared to the Azure Administrator Associate (AZ-104), this certification goes deeper on Windows Server-specific workloads, failover clustering, AD DS security, and Hyper-V, making it complementary rather than redundant. The certification renews annually via a free online assessment on Microsoft Learn, keeping credential holders current with platform updates.
5 sample questions with answers and explanations. Start a practice session to test yourself across all 1376 questions.
Preview — answers shown1. Wayne Enterprises is planning their Gotham City stretch cluster implementation and needs to understand workload suitability. The database administrator wants to know about stateful application recommendations. Which approach should be used for stateful applications like SQL Server in stretch cluster environments?
Explanation
Stateful applications and services such as Microsoft SQL Server, Hyper-V, Microsoft Exchange Server, and Active Directory Domain Services should use their own native resiliency mechanisms rather than rely on stretch clusters for high availability. These applications have built-in clustering, replication, and availability features designed specifically for their data and service requirements. Stretch clusters are better suited for applications that can effectively use shared storage replication for their availability needs.
2. Stark Industries needs to upgrade VM configuration versions. Tony Stark asks about the upgrade process requirements. What must be done before upgrading a VM's configuration version?
Explanation
The virtual machine must be shut down completely before upgrading the configuration version. This is a critical requirement because configuration version upgrades modify fundamental VM settings that cannot be changed while the VM is running. The upgrade process changes the file structure used to store VM configuration and checkpoint files, updating to the latest version supported by the Hyper-V host. After upgrading, the VM uses a new configuration file format designed to increase efficiency and reduce potential for data corruption, but the process is irreversible.
3. InGen Corporation has completed NTLM auditing and wants to implement NTLM blocking for their dinosaur genetics research domain. The security team wants to deny all NTLM authentication for domain accounts to domain servers while allowing exceptions for specific legacy systems. Which Restrict NTLM policy configuration should they implement?
Explanation
The Deny for domain accounts to domain servers option denies all NTLM authentication sign-in attempts for all servers in the domain that use domain accounts, unless the server name is listed in the Network Security: Restrict NTLM: Add server exceptions for NTLM authentication setting. This provides a balance between security and compatibility by blocking NTLM for domain account authentication to domain servers while allowing exceptions for specific servers that still require NTLM support.
4. Weyland Corporation is implementing comprehensive backup coverage and their application team asks about supported workload types. Which workloads can Azure Backup protect in addition to basic file and folder backups? (Select two!)
Multiple correct answersExplanation
Azure Backup supports Microsoft SQL Server databases running on Azure VMs and SAP HANA databases running on Azure VMs as specialized workload protection beyond basic file and folder backups. These database backup solutions provide application-consistent backups with point-in-time recovery capabilities. While Azure Backup also supports other workloads like Azure Files shares and various on-premises workloads through DPM/MABS, the specific database platforms mentioned (Oracle, MongoDB, PostgreSQL, MySQL) are not directly supported through Azure Backup's native capabilities, though they might be protected through file-level backups or other Azure services.
5. Dunder Mifflin Paper Company wants to test their Azure Site Recovery setup without disrupting their live paper sales system. Jim Halpert from IT needs to verify that their disaster recovery configuration works correctly by running a test on a single virtual machine. What is the best practice approach for conducting this disaster recovery test?
Explanation
The best practice is to run a disaster recovery drill for a single isolated virtual machine on an isolated test network. This approach prevents any impact to production services while still allowing you to verify that Site Recovery is configured correctly. Testing on an isolated network ensures that live services are not disrupted during the test. Testing all VMs simultaneously or using the production network could cause service interruptions or conflicts with live operations.
Microsoft Dynamics 365 Supply Chain Management Functional Consultant Expert (MB-335)
MB-335 · 2039 questions
Microsoft Dynamics 365 Business Central Functional Consultant (MB-800)
MB-800 · 1899 questions
Microsoft Certified: Azure AI Engineer Associate (AI-102)
AI-102 · 1392 questions
Microsoft Dynamics 365 Finance Functional Consultant (MB-310)
MB-310 · 1299 questions
Microsoft 365 Certified: Fundamentals (MS-900)
MS-900 · 1201 questions
Microsoft Certified: Power Platform Functional Consultant Associate (PL-200)
PL-200 · 1120 questions
$17.99
One-time access to this exam