เกี่ยวกับหลักสูตรนี้
AZ-801 ครอบคลุม Advanced Services สำหรับ Windows Server ในสภาพแวดล้อม Hybrid ได้แก่ Security, High Availability, Disaster Recovery, Migration และ Monitoring
เป็นหลักสูตรต่อเนื่องจาก AZ-800 ที่เน้นทักษะขั้นสูงสำหรับการดูแล Windows Server ทั้งแบบ On-premises และ Azure เพื่อเตรียมพร้อมสำหรับการสอบรับรอง AZ-801
เนื้อหาวิชา
Module 1: Secure Windows Server operating system
- Configure and manage Exploit Protection and Windows Defender Application Control
- Configure Windows Defender Credential Guard and SmartScreen
- Implement OS security by using Group Policies
- Manage Windows Server security baseline by using OSConfig
- Implement Windows Local Administrator Password Solution (Windows LAPS)
Module 2: Secure a hybrid Active Directory infrastructure
- Configure password policies and implement Microsoft Entra Password Protection for AD DS
- Manage protected users and RODC account security
- Harden domain controllers and configure authentication policy silos
- Manage AD delegation and implement Microsoft Defender for Identity
- Audit usage of and disable NTLM
Module 3: Identify and remediate Windows Server security issues by using Azure services
- Implement ingestion of Windows Server data into Microsoft Sentinel
- Manage security for Windows Server by using Microsoft Defender for Cloud
- Manage security by using Microsoft Defender for Servers
Module 4: Secure Windows Server networking
- Manage Windows Defender Firewall
- Implement domain isolation and connection security rules
- Create and configure NSGs for Windows Server VMs on Azure
Module 5: Secure Windows Server storage
- Manage Windows BitLocker Drive Encryption
- Enable storage encryption by using Azure Disk Encryption
- Manage and recover encrypted volumes
- Manage disk encryption keys for IaaS virtual machines
Module 6: Implement a Windows Server failover cluster
- Implement a failover cluster on-premises, hybrid, or cloud-only
- Implement a stretch cluster across datacenters or Azure regions
- Configure storage, quorum options, and network adapters for failover clustering
- Configure Scale-Out File Servers, Azure witness, and floating IP
Module 7: Manage failover clustering
- Implement cluster-aware updating and recover failed cluster nodes
- Upgrade failover cluster nodes and install Windows updates
- Failover workloads between nodes
- Manage failover clusters using Windows Admin Center
Module 8: Implement and manage Storage Spaces Direct
- Upgrade an S2D node
- Implement networking for S2D
- Configure S2D
Module 9: Manage backup and recovery for Windows Server
- Back up and restore files and folders to Azure Recovery Services Vault
- Deploy, manage, and recover using Azure Backup Server
- Create Azure Recovery Services vault backup policy
- Recover VMs using instant recovery snapshots and restore encrypted VMs
Module 10: Implement disaster recovery by using Azure Site Recovery
- Configure Azure Site Recovery network mapping
- Configure Site Recovery for on-premises servers and Azure VMs
- Configure a recovery plan and replication policies
- Implement VM replication to secondary datacenter or Azure region
Module 11: Protect virtual machines by using Hyper-V replicas
- Configure Hyper-V hosts for replication
- Manage Hyper-V replica servers and configure VM replication
- Perform a failover
Module 12: Migrate on-premises storage to on-premises servers or Azure
- Transfer files, file shares, and security configurations by using Storage Migration Service
- Cut over to a new server by using Storage Migration Service
- Use SMS to migrate to Azure VMs and migrate to Azure file shares
Module 13: Migrate on-premises servers by using Azure Migrate
- Deploy and configure Azure Migrate appliance
- Migrate VM workloads and physical servers to Azure VMs
Module 14: Migrate workloads from previous Windows Server versions and to Azure
- Migrate IIS, Hyper-V hosts, RDS, DHCP, and print servers
- Migrate AD DS forest and objects using AD Migration Tool
- Assess and migrate IIS workloads to Azure Web Apps and containers
- Migrate AD forest to Windows Server 2025 and set functional levels
Module 15: Monitor Windows Server by using Windows Server tools and Azure services
- Monitor using Performance Monitor and Data Collector Sets
- Monitor servers and configure alerts using Windows Admin Center
- Analyze data using System Insights and manage event logs
- Configure data collection rules for Azure Monitor and monitor Azure VM performance
Module 16: Troubleshoot Windows Server and Active Directory
- Troubleshoot connectivity, name resolution, Windows Update, and Time Service
- Troubleshoot booting failures, performance, and disk encryption issues
- Restore objects from AD recycle bin and recover AD database
- Troubleshoot AD replication and hybrid authentication issues