Administering Windows Server Hybrid Core Infrastructure (AZ-800) Zelfstudiepakket

Algemene omschrijving

The AZ-800 E-Learning is entirely in English. As a Dutch IT training provider, we offer the information on this page in Dutch. At the bottom of the page, you will find a brief summary in English. The topics within the AZ-800 E-Learning package itself are described in English.

De M365-proefabonnementen die Microsoft voor deze labomgeving verstrekt, zijn maximaal 14 dagen beschikbaar. Toegang tot de labomgeving, inclusief virtuele machines en labhandleidingen, blijft gedurende de volledige 180 dagen beschikbaar. Voor langer toegang kan een persoonlijke tenant of abonnement nodig zijn.

De AZ-800 E-Learning biedt jou een complete leerervaring in het beheren van werklasten en services met betrekking tot Windows Server binnen on-premises (lokale servers), evenals hybride omgevingen en cloudomgevingen. Met toegang tot het AZ-800 cursusmateriaal, een interactieve labomgeving (die 180 dagen toegankelijk is), een AZ-800 oefenexamen en een AZ-800 examenvoucher word je voorzien van alles wat jij nodig hebt om jouw kennis en vaardigheden op het gebied van hybride Windows Server-oplossingen uit te breiden.

Door de AZ-800 E-Learning door te nemen, zul je een expert worden in het implementeren en beheren van on-premises (lokale) en hybride oplossingen, zoals identiteit, beheer, compute, netwerken en opslag. De interactieve labomgeving biedt jou de mogelijkheid om praktische vaardigheden op te doen binnen een Windows Server-hybride omgeving. Hierdoor zul je in staat zijn om complexe infrastructuren te beheren.

Verder bestaat de AZ-800 E-Learning uit een combinatie van theoretische kennis en praktische vaardigheden die jij direct in jouw werk toe kunt passen. Het flexibele zelfstudieformaat en de uitgebreide toegang tot leermiddelen helpen jou om jouw in jouw eigen tempo voor te bereiden op het AZ-800 examen en jouw carrière in Microsoft Azure te bevorderen.

Doelgroep

De AZ-800 E-Learning is ontworpen voor ICT-professionals die zich willen specialiseren in het beheren van Windows Server-werklasten in on-premises (lokale), hybride en cloudomgevingen.

Dit betreft met name de volgende mensen:

• Systeembeheerders die verantwoordelijk zijn voor het dagelijks beheren van Windows Server-infrastructuren en hun kennis uit willen breiden naar hybride en cloudomgevingen.
• Netwerkbeheerders die expertise willen verkrijgen in het beheren van netwerkcomponenten binnen een hybride Windows Server-omgeving.
• Cloudbeheerders die met Microsoft Azure werken en hun vaardigheden uit willen breiden naar hybride infrastructuren.
• ICT-professionals binnen technische sectoren waarbij hybride en cloudgebaseerde infrastructuren steeds belangrijker worden, zoals:
  • Gezondheidszorg.
  • Financiën.
  • Overheid.

Wat is inbegrepen

De AZ-800 E-Learning biedt jou uitgebreide leermiddelen en ondersteuning om jou optimaal voor te bereiden op het AZ-800 examen en het beheren van hybride Windows Server-oplossingen.

Hier is een overzicht van de inhoud van de AZ-800 E-Learning:

• Officieel AZ-800 cursusmateriaal
  • De inhoud van het AZ-800 cursusmateriaal biedt jou diepgaande kennis over het beheren van Windows Server-werklasten binnen hybride omgevingen.
• Interactieve labomgeving
  • Toegang tot virtuele machines en labhandleidingen gedurende 180 dagen, waarmee je praktische vaardigheden opdoet binnen een realistische labomgeving. Houd er rekening mee dat de M365-proefabonnementen maximaal 14 dagen beschikbaar zijn; voor langere toegang is een persoonlijke tenant of abonnement nodig.
• AZ-800 oefenexamen
  • Een uitgebreid AZ-800 oefenexamen waarmee jij jouw expertise kunt toetsen en waarmee jij je goed kunt voorbereiden op het officiële AZ-800 examen.
• AZ-800 examenvoucher
  • Inclusief een AZ-800 examenvoucher om het AZ-800 certificeringsexamen af te leggen.

Voorkennis

Voordat je begint met de AZ-800 E-Learning, is het van belang dat jij beschikt over de volgende kennis en vaardigheden:

• Ervaring met het beheren van Windows Server en Windows Server-werklasten binnen on-premises (lokale) scenario's, inclusief:
  • Active Directory Domain Services (AD DS).
  • Domain Name System (DNS).
  • Distributed File System (DFS).
  • Hyper-V.
  • File and Storage Services.
• Ervaring met algemene hulpmiddelen voor het beheren van Windows Server (geïmpliceerd in de eerste vereiste).
• Basiskennis van de kerntechnologieën van Microsoft voor computing, storage, netwerken en virtualisatie (impliciet in de eerste vereiste).
• Ervaring met en kennis van netwerktechnologieën, zoals:
  • IP-adressering.
  • Naamomzetting.
  • Dynamic Host Configuration Protocol (DHCP).
• Ervaring met en kennis van Microsoft Hyper-V, evenals de basisprincipes van servervirtualisatie.
• Basiservaring met het implementeren en beheren van IaaS-diensten binnen Microsoft Azure.
• Basiskennis van Azure Active Directory (Azure AD).
• Praktische ervaring met clientedities van Windows, zoals Windows 10 of Windows 11.
• Basiservaring met Windows PowerShell.

Onderwerpen

Module 1: Identity services in Windows Server

This module introduces identity services and describes Active Directory Domain Services (AD DS) in a Windows Server environment. The module describes how to deploy domain controllers in AD DS, as well as Azure Active Directory (AD) and the benefits of integrating Azure AD with AD DS. The module also covers Group Policy basics and how to configure Group Policy Objects (GPOs) in a Domain Environment.

Lessons:

• Introduction to AD DS.
• Manage AD DS domain controllers and FSMO roles.
• Implement Group Policy Objects.
• Manage advanced features of AD DS.

Lab: Implementing identity services and Group Policy

• Deploying a new domain controller on Server Core.
• Configuring Group Policy.

After completing this module, students will be able to:

• Describe AD DS in a Windows Server environment.
• Deploy domain controllers in AD DS.
• Describe Azure AD and benefits of integrating Azure AD with AD DS.
• Explain Group Policy basics and configure GPOs in a domain environment.

Module 2: Implementing identity in hybrid scenarios

This module discusses how to configure an Azure environment so that Windows IaaS workloads requiring Active Directory are supported. The module also covers integration of on-premises Active Directory Domain Services (AD DS) environment into Azure. Finally, the module explains how to extend an existing Active Directory environment into Azure by placing IaaS VMs configured as domain controllers onto a specially configured Azure virtual network subnet.

Lessons:

• Implement hybrid identity with Windows Server.
• Deploy and manage Azure IaaS Active Directory domain controllers in Azure.

Lab: Implementing integration between AD DS and Azure AD

• Preparing Azure AD for AD DS integration.
• Preparing on-premises AD DS for Azure AD integration.
• Downloading, installing, and configuring Azure AD Connect.
• Verifying integration between AD DS and Azure AD.
• Implementing Azure AD integration features in AD DS.

After completing this module, students will be able to:

• Integrate on-premises Active Directory Domain Services (AD DS) environment into Azure.
• Install and configure directory synchronization using Azure AD Connect.
• Implement and configure Azure AD DS.
• Implement Seamless Single Sign-on (SSO).
• Implement and configure Azure AD DS.
• Install a new AD DS forest on an Azure VNet.

Module 3: Windows Server Administration

This module describes how to implement the principle of least privilege through Privileged Access Workstation (PAW) and Just Enough Administration (JEA). The module also highlights several common Windows Server administration tools, such as Windows Admin Center, Server Manager, and PowerShell. This module also describes the post-installation configuration process and tools available to use for this process, such as sconfig and Desired State Configuration (DSC).

Lessons:

• Perform Windows Server secure administration.
• Describe Windows Server administration tools.
• Perform post-installation configuration of Windows Server.
• Just Enough Administration in Windows Server.

Lab: Managing Windows Server

• Implementing and using remote server administration.

After completing this module, students will be able to:

• Explain least privilege administrative models.
• Decide when to use privileged access workstations.
• Select the most appropriate Windows Server administration tool for a given situation.
• Apply different methods to perform post-installation configuration of Windows Server.
• Constrain privileged administrative operations by using Just Enough Administration (JEA).

Module 4: Facilitating Hybrid Management

This module covers tools that facilitate managing Windows IaaS VMs remotely. The module also covers how to use Azure Arc with on-premises server instances, how to deploy Azure policies with Azure Arc, and how to use Role-Based Access Control (RBAC) to restrict access to Log Analytics data.

Lessons:

• Administer and manage Windows Server IaaS virtual machines remotely.
• Manage hybrid workloads with Azure Arc.

Lab: Using Windows Admin Center in hybrid scenarios

• Provisioning Azure VMs running Windows Server.
• Implementing hybrid connectivity by using the Azure Network Adapter.
• Deploying Windows Admin Center gateway in Azure.
• Verifying functionality of the Windows Admin Center gateway in Azure.

After completing this module, students will be able to:

• Select appropriate tools and techniques to manage Windows IaaS VMs remotely.
• Explain how to onboard on-premises Windows Server instances in Azure Arc.
• Connect hybrid machines to Azure from the Azure portal.
• Use Azure Arc to manage devices.
• Restrict access using RBAC.

Module 5: Hyper-V virtualization in Windows Server

This module describes how to implement and configure Hyper-V VMs and containers. The module covers key features of Hyper-V in Windows Server, describes VM settings, and how to configure VMs in Hyper-V. The module also covers security technologies used with virtualization, such as shielded VMs, Host Guardian Service, admin-trusted and TPM-trusted attestation, and Key Protection Service (KPS). Finally, this module covers how to run containers and container workloads, and how to orchestrate container workloads on Windows Server using Kubernetes.

Lessons:

• Configure and manage Hyper-V.
• Configure and manage Hyper-V virtual machines.
• Secure Hyper-V workloads.
• Run containers on Windows Server.
• Orchestrate containers on Windows Server using Kubernetes.

Lab: Implementing and configuring virtualization in Windows Server

• Creating and configuring VMs.
• Installing and configuring containers.

After completing this module, students will be able to:

• Install and configure Hyper-V on Windows Server.
• Configure and manage Hyper-V virtual machines.
• Use Host Guardian Service to protect virtual machines.
• Create and deploy shielded virtual machines.
• Configure and manage container workloads.
• Orchestrate container workloads using a Kubernetes cluster.

Module 6: Deploying and configuring Azure VMs

This module describes Azure compute and storage in relation to Azure VMs, and how to deploy Azure VMs by using the Azure portal, Azure CLI, or templates. The module also explains how to create new VMs from generalized images and use Azure Image Builder templates to create and manage images in Azure. Finally, this module describes how to deploy Desired State Configuration (DSC) extensions, implement those extensions to remediate noncompliant servers, and use custom script extensions.

Lessons:

• Plan and deploy Windows Server IaaS virtual machines.
• Customize Windows Server IaaS virtual machine images.
• Automate the configuration of Windows Server IaaS virtual machines.

Lab: Deploying and configuring Windows Server on Azure VMs

• Authoring Azure Resource Manager (ARM) templates for Azure VM deployment.
• Modifying ARM templates to include VM extension-based configuration.
• Deploying Azure VMs running Windows Server by using ARM templates.
• Configuring administrative access to Azure VMs running Windows Server.
• Configuring Windows Server security in Azure VMs.

After completing this module, students will be able to:

• Create a VM from the Azure portal and from Azure Cloud Shell.
• Deploy Azure VMs by using templates.
• Automate the configuration of Windows Server IaaS VMs.
• Detect and remediate noncompliant servers.
• Create new VMs from generalized images.
• Use Azure Image Builder templates to create and manage images in Azure.

Module 7: Network infrastructure services in Windows Server

This module describes how to implement core network infrastructure services in Windows Server, such as DHCP and DNS. This module also covers how to implement IP address management and how to use Remote Access Services.

Lessons:

• Deploy and manage DHCP.
• Implement Windows Server DNS.
• Implement IP address management.
• Implement remote access.

Lab: Implementing and configuring network infrastructure services in Windows Server

• Deploying and configuring DHCP.
• Deploying and configuring DNS.

After completing this module, students will be able to:

• Implement automatic IP configuration with DHCP in Windows Server.
• Deploy and configure name resolution with Windows Server DNS.
• Implement IPAM to manage an organization’s DHCP and DNS servers, and IP address space.
• Select, use, and manage remote access components.
• Implement Web Application Proxy (WAP) as a reverse proxy for internal web applications.

Module 8: Implementing hybrid networking infrastructure

This module describes how to connect an on-premises environment to Azure and how to configure DNS for Windows Server IaaS virtual machines. The module covers how to choose the appropriate DNS solution for your organization’s need and run a DNS server in a Windows Server Azure IaaS VM. Finally, this module covers how to manage Microsoft Azure virtual networks and IP address configuration for Windows Server infrastructure as a service (IaaS) virtual machines.

Lessons:

• Implement hybrid network infrastructure.
• Implement DNS for Windows Server IaaS VMs.
• Implement Windows Server IaaS VM IP addressing and routing.

Lab: Implementing Windows Server IaaS VM networking

• Implementing Virtual Network Routing in Azure.
• Implementing DNS name resolution in Azure.

After completing this module, students will be able to:

• Implement an Azure virtual private network (VPN).
• Configure DNS for Windows Server IaaS VMs.
• Run a DNS server in a Windows Server Azure IaaS VM.
• Create a route-based VPN gateway using the Azure portal.
• Implement Azure ExpressRoute.
• Implement an Azure Wide Area Network (WAN).
• Manage Microsoft Azure Virtual Networks (VNets).
• Manage IP address configuration for Windows Server IaaS virtual machines (VMs).

Module 9: File servers and storage management in Windows Server

This module covers the core functionality and use cases of file server and storage management technologies in Windows Server. The module discusses how to configure and manage the Windows File Server role, and how to use Storage Spaces and Storage Spaces Direct. This module also covers replication of volumes between servers or clusters using Storage Replica.

Lessons:

• Manage Windows Server File Servers.
• Implement Storage Spaces and Storage Spaces Direct.
• Implement Windows Server Data Deduplication.
• Implement Windows Server iSCSI.
• Implement Windows Server Storage Replica.

Lab: Implementing storage solutions in Windows Server

• Implementing Data Deduplication.
• Configuring iSCSI Storage.
• Configuring Redundant Storage Spaces.
• Implementing Storage Spaces Direct.

After completing this module, students will be able to:

• Configure and manage the Windows Server File Server role.
• Protect data from drive failures using Storage Spaces.
• Increase scalability and performance of storage management using Storage Spaces Direct.
• Optimize disk utilization using Data DeDuplication.
• Configure high availability for iSCSI.
• Enable replication of volumes between clusters using Storage Replica.
• Use Storage Replica to provide resiliency for data hosted on Windows Servers volumes.

Module 10: Implementing a Hybrid File Server Infrastructure

This module introduces Azure file services and how to configure connectivity to Azure Files. The module also covers how to deploy and implement Azure File Sync to cache Azure file shares on an on-premises Windows Server File Server. This module also describes how to manage Cloud Tiering and how to migrate from DFSR to Azure File Sync.

Lessons:

• Overview of Azure File Services.
• Implementing Azure File Sync.

Lab: Implementing Azure File Sync

• Implementing DFS Replication in your on-premises environment.
• Creating and configuring a sync group.
• Replacing DFS Replication with File Sync–based replication.
• Verifying Replication and enabling Cloud Tiering.
• Troubleshooting replication issues.

After completing this module, students will be able to:

• Configure Azure File Services.
• Configure connectivity to Azure File Services.
• Implement Azure File Sync.
• Deploy Azure File Sync.
• Manage Cloud Tiering.
• Migrate from DFSR to Azure File Sync.

English Summary

The AZ-800 E-Learning offers comprehensive training in managing Windows Server workloads across on-premises, hybrid, and cloud environments. With access to AZ-800 course materials, labs (accessible for 180 days, an AZ-800 practice exam, and an AZ-800 exam voucher, you will gain expertise in implementing and managing complex infrastructures. Note that the included M365 trial subscriptions are available for up to 14 days, with extended access requiring a personal tenant or subscription.