Microsoft Certified: Windows Server Hybrid Administrator Associate

Introduction

Candidates for this certification administer core and advanced Windows Server workloads and services using on-premises, hybrid, and cloud technologies. These professionals should have expertise in implementing and managing on-premises and hybrid solutions, such as identity, management, compute, networking, and storage. They are also experts at performing tasks related to security, migration, monitoring, high availability, troubleshooting, and disaster recovery. These professionals use administrative tools and technologies, including Windows Admin Center, PowerShell, Azure Arc, and IaaS virtual machine administration. They also work with Azure Automation Update Management, Microsoft Defender for Identity, Azure Security Center, Azure Migrate, and Azure Monitor. 

Objectives

Skills measured:

• This list contains the skills measured on the exams associated with this certification. For detailed information, see the associated exam details pages and download the exam skills outlines.
• Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments
• Manage Windows Servers and workloads in a hybrid environment
• Manage virtual machines and containers
• Implement and manage an on-premises and hybrid networking infrastructure
• Manage storage and file services
• Secure Windows Server on-premises and hybrid infrastructures
• Implement and manage Windows Server high availability
• Implement disaster recovery
• Migrate servers and workloads
• Monitor and troubleshoot Windows Server environments

Training Methodology

Different learning techniques will be used during the training course, starting from PowerPoint presentations, interactive practical exercises, workshops, focused group discussions, related videos, and business case studies.

Who Should Attend?

• Experienced Server Administrators: Those already managing Windows Server on-premises and wanting to extend to the cloud.
• IT Professionals: Focused on securing, managing, and migrating hybrid infrastructure.
• Cloud Administrators: Looking to manage hybrid environments, not just pure Azure.
• Engineers: Specializing in compute, storage, networking, and virtualization in hybrid setups. 

Course Outline

Configure and manage multi-site, multi-domain, and multi-forest environments

• configure and manage forest and domain trusts
• configure and manage AD DS sites
• configure and manage AD DS replication

Create and manage AD DS security principals

• create and manage AD DS users and groups
• manage users and groups in multi-domain and multi-forest scenarios
• implement group managed service accounts (gMSAs)
• join Windows Servers to AD DS, Azure AD DS, and Azure AD

Manage Windows Servers in a hybrid environment

• deploy a Windows Admin Center gateway server
• configure a target machine for Windows Admin Center
• configure PowerShell Remoting
• configure CredSSP or Kerberos delegation for second hop remoting

Manage Windows Servers and workloads by using Azure services

• manage Windows Servers by using Azure Arc
• assign Azure Policy Guest Configuration
• deploy Azure services using Azure Virtual Machine extensions on non-Azure machines
• manage updates for Windows machines
• integrate Windows Servers with Log Analytics
• integrate Windows Servers with Azure Security Center
• manage IaaS virtual machines (VMs) in Azure that run Windows Server
• implement Azure Automation for hybrid workloads
• create runbooks to automate tasks on target VMs
• implement DSC to prevent configuration drift in IaaS machines

Create and manage containers

• create Windows Server container images
• manage Windows Server container images
• configure Container networking
• manage container instances

Implement on-premises and hybrid name resolution

• integrate DNS with AD DS
• create and manage zones and records
• configure DNS forwarding/conditional forwarding
• integrate Windows Server DNS with Azure DNS private zone
• implement DNSSEC

Implement on-premises and hybrid network connectivity

• implement and manage the Remote Access role
• implement and manage Azure Network Adapter
• implement and manage Azure Extended Network
• implement and manage Network Policy Server role
• implement Web Application Proxy
• implement Azure Relay
• implement site-to-site virtual private network (VPN)
• implement Azure Virtual WAN
• implement Azure AD Application Proxy

Configure and manage Windows Server file shares

• configure Windows Server file share access
• configure file screen
• configure File Server Resource Manager (FSRM) quotas
• configure BranchCache
• implement and configure Distributed File System (DFS)

Configure Windows Server storage

• configure disks and volumes
• configure and manage Storage Spaces
• configure and manage Storage Replica
• configure Data Deduplication
• configure SMB direct
• configure Storage Quality of Service (QoS)
• configure file systems