Administering Windows Server Hybrid Core Infrastructure AZ800 Course Outline
Module 1: Introduction to AD DS
- Introduction
- Define AD DS
- Define Users, Groups, and Computers
- Define AD DS Forests and Domains
- Define Ous
- Manage Objects and Their Properties in AD DS
Module 2: Manage AD DS Domain Controllers and FSMO Roles
- Introduction
- Deploy AD DS Domain Controllers
- Maintain AD DS Domain Controllers
- Manage the AD DS Global Catalog Role
- Manage AD DS Operations Masters
- Manage AD DS Schema
Module 3: Implement Group Policy Objects
- Introduction
- Define Gpos
- Implement GPO Scope and Inheritance
- Define Domain-Based Gpos
- Create and Configure a Domain-Based GPO
- Define GPO Storage
- Define Administrative Templates
Module 4: Manage Advanced Features of AD DS
- Introduction
- Create Trust Relationships
- Implement ESAE Forests
- Monitor and Troubleshoot AD DS
- Create Custom AD DS Partitions
Module 5: Implement Hybrid Identity with Windows Server
- Introduction
- Select an Azure Active Directory Integration Model
- Plan for Azure Active Directory Integration
- Prepare On-Premises Active Directory for Directory Synchronization
- Install and Configure Directory Synchronization with Azure Active Directory Connect
- Implement Seamless Single Sign-On
- Enable Azure Active Directory Login in for Windows VM in Azure
- Knowledge Check 1
- Describe Azure Active Directory Domain Services
- Implement and Configure Azure Active Directory Domain Services
- Manage Windows Server 2019 in an Azure Active Directory Domain Services Environment
- Create and Configure an Azure Active Directory Domain Services Instance
- Join a Windows Server VM to a Managed Domain
Module 6: Deploy and Manage Azure Iaas Active Directory Domain Controllers in Azure
- Introduction
- Select an Option to Implement Directory and Identity Services Using Active Directory Domain Services in Azure
- Deploy and Configure Active Directory Domain Services Domain Controllers in Azure Vms
- Install a Replica Active Directory Domain Controller in an Azure VM
- Install a New Active Directory Forest on an Azure Vnet
Module 7: Perform Windows Server Secure Administration
- Introduction
- Define Least Privilege Administration
- Implement Delegated Privileges
- Use Privileged Access Workstations
- Use Jump Servers
Module 8: Describe Windows Server Administration Tools
- Introduction
- Explore Windows Admin Center
- Use Server Manager
- List Remote Server Administration Tools
- Use Windows Powershell
- Use Windows Powershell to Remotely Administer a Server
Module 9: Perform post-installation Configuration of Windows Server
- Introduction
- List the Available Post-Installation Configuration Tools
- Configure Server Core Using Sconfig
- Use DSC to Configure Windows Server
- Perform Post-Installation Configuration with Windows Admin Center
- Configure a Server with Answer Files
Module 10: Just Enough Administration in Windows Server
- Introduction
- Explain the Concept Of Just Enough Administration (JEA)
- Define Role Capabilities for a JEA Endpoint
- Create a Session Configuration File to Register a JEA Endpoint
- Describe How JEA Endpoints Work to Limit Access to a Powershell Session
- Create and Connect to a JEA Endpoint
- Demonstration: Connect to a JEA Endpoint
Module 11: Administer and Manage Windows Server Iaas Virtual Machine Remotely
- Introduction
- Select the Appropriate Remote Administration Tool
- Manage Windows Virtual Machines with Azure Bastion
- Create an Azure Bastion Host
- Configure Just-In-Time Administration
Module 12: Manage Hybrid Workloads with Azure Arc
- Introduction
- Describe Azure Arc
- Onboard Windows Server Instances
- Connect Hybrid Machines to Azure From the Azure Portal
- Use Azure Arc to Manage Windows Server Instances
- Restrict Access With RBAC
Module 13: Configure and Manage Hyper-V
- Introduction
- Define Hyper-V
- Define Hyper-V Manager
- Configure Hyper-V Hosts Using Best Practices
- Configure Hyper-V Networking
- Assess Advanced Hyper-V Networking Features
- Define Nested Virtualization
Module 14: Configure and Manage Hyper-V Virtual Machines
- Introduction
- List the Virtual Machine Configuration Versions
- List the Virtual Machine Generation Versions
- List Available VHD Formats and Types
- Create and Configure Vms
- Determine Storage Options for Vms
- Define Shared Vhds and VHD Sets
- Implement Guest Clusters Using Shared VHDX
Module 15: Secure Hyper-V Workloads
- Introduction
- Define Guarded Fabric
- Define the Host Guardian Service
- Explore TPM-Trusted Attestation
- Define KPS
- Determine Key Features of Shielded Vms
- Compare Encryption-Supported and Shielded Vms in a Guarded Fabric
- Implement a Shielded VM
Module 16: Run Containers on Windows Server
- Introduction
- Define Containers
- List the Differences Between Containers and Vms
- Define Windows Server and Hyper-V Containers and Isolation Modes
- Explore Docker
- Prepare a Windows Server 2019 Host for Container Deployment
- Security, Storage, and Networking with Windows Containers
Module 17: Orchestrate Containers on Windows Server Using Kubernetes
- Introduction
- Define Orchestration
- Define Kubernetes
- Deploy Kubernetes Resources
- Create a Kubernetes Cluster on Windows
- Define Azure Arc
- Connect an Azure Arc-Enabled Kubernetes Cluster to Azure Arc
Module 18: Plan and Deploy Windows Server Iaas Virtual Machines
- Introduction
- Describe Azure Compute
- Describe Virtual Machine Storage
- Deploy Azure Virtual Machines
- Create a Windows Virtual Machine Using the Portal
- Create a Windows Virtual Machine Using Azure CLI
- Deploy Azure Virtual Machines Using Templates
- Describe Additional Management Optimization Options
Module 19: Customize Windows Server Iaas Virtual Machine Images
- Introduction
- Create a Generalized Image
- Create a New Virtual Machine from a Managed Image
- Create a Managed Image of a Generalized Virtual Machine in Azure
- Create a Virtual Machine from a Managed Image
- Implement Azure Image Builder
- Create a Windows Virtual Machine Using Azure Image Builder Template
- Create a Windows Virtual Machine with Azure Image Builder Using Powershell
Module 20: Automate the Configuration of Windows Server Iaas Virtual Machines
- Introduction
- Describe Azure Automation
- Implement Azure Automation With DSC
- Remediate Noncompliant Servers
- Describe Custom Script Extensions
- Configure a Virtual Machine by Using DSC
Module 21: Deploy and Manage DHCP
- Introduction
- Use DHCP to Simplify IP Configuration
- Install and Configure the DHCP Role
- Configure DHCP Options
- Configure DHCP Scopes
- Select DHCP High Availability Options
- Implement DHCP Failover
Module 22: Implement Windows Server DNS
- Introduction
- Explore the DNS Architecture
- Work with DNS Zones and Records
- Install and Configure the DNS Role
- Implement DNS Forwarding
Module 23: Implement IP Address Management
- Introduction
- Define IP Address Management
- Deploy IP Address Management
- Administer IP Address Management
- Configure IP Address Management Options
- Manage DNS Zones with IP Address Management
- Manage DHCP Servers With IP Address Management
- Use IP Address Management to Manage IP Addressing
Module 24: Implement Remote Access
- Introduction
- Examine the Remote Access Options in Windows Server
- Select and Set Up Vpns
- Use NPS to Create and Enforce Network Access Policies
- Plan and Implement NPS
- Deploy A PKI for Remote Access
- Use WAP as a Reverse Web Proxy
Module 25: Implement Hybrid Network Infrastructure
- Introduction
- Describe Azure Network Topologies
- Implement Azure VPN Options
- Create a Route-Based VPN Gateway Using the Azure Portal
- Implement Azure Expressroute
- Configure Azure Virtual WAN
- Implement DNS in Hybrid Environments
Module 26: Implement DNS for Windows Server IaaS VMs
- Introduction
- Understand Azure DNS
- Implement Azure DNS
- Create an Azure DNS Zone and Record Using the Azure Portal
- Implement DNS With Azure Iaas Virtual Machines
- Implement Split-Horizon DNS In Azure
- Troubleshoot DNS
Module 27: Implement Windows Server IaaS VM IP Addressing and Routing
- Introduction
- Implement a Virtual Network
- Implement Iaas VM IP Addressing
- Assign and Manage IP Addresses
- Configure a Private IP Address for a Virtual Machine Using the Azure Portal
- Create a Virtual Machine with a Static Public IP Address Using the Azure Portal
- Implement Iaas Virtual Machine IP Routing
- Implement Ipv6 for Windows Server Iaas Virtual Machines
Module 28: Manage Windows Server File Servers
- Introduction
- Define the Windows Server File System
- List the Benefits and Uses of File Server Resource Manager
- Define SMB and its Security Considerations
- Configure SMB Protocol
- Define Volume Shadow Copy Service
Module 29: Implement Storage Spaces and Storage Spaces Direct
- Introduction
- Define the Storage Spaces Architecture and its Components
- List the Functionalities, Benefits, and Use Cases of Storage Spaces
- Implement Storage Spaces
- List the Functionalities, Components, Benefits, and Use Cases of Storage Spaces Direct
- Implement Storage Spaces Direct
Module 30: Implement Windows Server Data Deduplication
- Introduction
- Define the Architecture, Components, And Functionality of Data Deduplication
- Define the Use Cases and Interoperability of Data Deduplication
- Implement Data Deduplication
- Manage and Maintain Data Deduplication
Module 31: Implement Windows Server Iscsi
- Introduction
- List the Functionalities, Components, and Use Cases of Iscsi
- List the Considerations for Implementing Iscsi
- Implement Iscsi
- Configure High Availability for Iscsi
Module 32: Implement Windows Server Storage Replica
- Introduction
- List the Functionalities and Components of Storage Replica
- Examine the Prerequisites for Implementing Storage Replica
- Implement Storage Replica by Using Windows Admin Center
- Implement Storage Replica by Using Windows Powershell
Module 33: Implement a Hybrid File Server Infrastructure
- Introduction
- Describe Azure File Services
- Configure Azure Files
- Configure Connectivity to Azure Files
- Describe Azure File Sync
- Implement Azure File Sync
- Deploy Azure File Sync
- Deploy Azure File Sync 2
- Manage Cloud Tiering
- Migrate from DFSR to Azure File Sync