AZ-801 Complete Guide: Windows Server Hybrid Advanced Services — Scope, Resources & Pass Strategy

Microsoft Certified: Configuring Windows Server Hybrid Advanced Services (AZ-801) is the Associate-tier exam that covers advanced configuration, migration, DR, and monitoring of Windows Server 2022/2025. It pairs with AZ-800 (Administration): the Windows Server Hybrid Administrator Associate badge is issued only when you pass both — one of the rare Microsoft certifications structured as a "two-exam Associate." AZ-801 is the Infrastructure half of that pair. While AZ-800 focuses on day-to-day operations and infrastructure management, AZ-801 takes on senior-admin work: clustering, DR, performance tuning, monitoring, and migration strategy.

This article walks through the AZ-801 exam specs, its relationship to AZ-800 (both required), the 5-domain structure, why Failover Cluster and Storage Spaces Direct matter, a 3-4 month roadmap to passing, and career paths after combining AZ-800 + AZ-801. Together with AZ-800, it's one of the most important certifications for engineers aiming for senior Windows Server administrator roles.

AZ-801 Exam Specifications

AZ-801 follows the standard Associate-tier exam format. It's 100 minutes, 40-60 questions, with a passing score of 700 / 1000, costs 165 USD / 21,103 JPY, and is valid for 12 months (renewable via the renewal assessment). It can be taken via Pearson VUE either through OnVUE online or at a test center, and is available in multiple languages including Japanese. The format includes multiple choice plus PowerShell command interpretation, sequence questions on cluster setup and migration steps, and case studies — most questions assume advanced operational Windows Server knowledge.

Pairing with AZ-800

Passing AZ-801 alone still issues an individual exam badge, but the Windows Server Hybrid Administrator Associate certification is only awarded when you pass both AZ-800 and AZ-801. The order isn't strict, but AZ-800 → AZ-801 is the standard sequence. AZ-801 is the applied half of the pair, building on the AZ-800 foundation (AD DS, Hyper-V, networking, storage), and it's more efficient to clear AZ-800 first.

Domain 1: Secure Windows Server On-Premises and Hybrid Infrastructure (25-30%)

This domain covers security hardening for Windows Server. Core topics: Windows Defender, BitLocker (Full Volume Encryption, Network Unlock), AppLocker / Windows Defender Application Control (WDAC) for application execution control, Just Enough Administration (JEA), Just-in-Time (JIT) Administration, Privileged Access Workstation (PAW), Privileged Access Management (PAM), Microsoft Defender for Servers Plan 1/2 (protecting on-prem Windows Server with Defender for Cloud), SMB encryption, and Kerberos Armoring / Constrained Delegation. This is the largest-weighted domain on AZ-801 — you need to be able to hands-on configure advanced Windows Server security features (BitLocker, AppLocker, JEA) on real systems.

Domain 2: Implement and Manage Windows Server High Availability (10-15%)

This domain covers Windows Server high availability (HA) technologies. Core topics: Failover Cluster (Hyper-V / File Server / SQL Server scenarios, quorum settings [Node Majority, Cloud Witness, etc.], Cluster Shared Volumes [CSV]), Storage Spaces Direct (S2D) for software-defined HCI (Hyper-Converged Infrastructure), Cluster Sets for Stretched Cluster (logical joining of multiple Failover Clusters), Storage Replica for block-level replication, Hyper-V Replica for per-VM DR, and Cluster Aware Updating (CAU) for non-disruptive patch management.

Domain 3: Implement Disaster Recovery (10-15%)

This domain covers Windows Server DR and backup. Core topics: Azure Site Recovery (ASR) for on-prem to Azure DR replication (RPO 30 seconds, RTO minutes, Recovery Plan, Test Failover), Azure Backup Server (MABS) for on-prem backup with cloud replication, Azure Backup (Recovery Services Vault, Backup Vault, Long-term Retention), hybrid backup strategy (combining on-prem and cloud), and Windows Server Backup for local backup. ASR's RPO/RTO, Recovery Plan concepts, and Test Failover behavior are frequently tested.

Domain 4: Migrate Servers and Workloads (20-25%)

This domain covers Windows Server migration strategy. Core topics: Storage Migration Service (automated file migration from legacy SMB file servers to new servers), Active Directory Migration Toolkit (ADMT) for cross-forest AD object migration, Azure Migrate for server assessment and rehosting (on-prem to Azure VM), in-place upgrade strategy from Windows Server 2012/2016/2019 to 2022/2025, phased migration procedures for File / DC / Print Servers, and Lift-and-Shift vs Re-platform decisions. In Japan, the end of Windows Server 2012 R2 support (October 2023) triggered a wave of large-scale migration projects, making this domain highly relevant to real-world work.

Domain 5: Monitor and Troubleshoot Windows Server Environments (20-25%)

This domain covers the operations phase of Windows Server. Core topics: Performance Monitor (PerfMon) for counter-based performance monitoring, Data Collector Sets, and performance baselines; Event Viewer for event log analysis, Custom Views, and Event Forwarding (Windows Event Collector); Windows Performance Analyzer (WPA) / Windows Performance Toolkit (WPT) for detailed traces; Azure Monitor for Hybrid Servers for on-prem server monitoring integration; Log Analytics + KQL queries; Azure Arc-enabled Servers monitoring integration (Insights, VM Insights); Network Trace (netsh trace, Wireshark); and Active Directory replication troubleshooting (repadmin, dcdiag).

Why Failover Cluster Matters

Failover Cluster is a core AZ-801 topic and Windows Server's signature HA technology. It powers scenarios like Hyper-V clusters (VM HA), File Server clusters (Scale-out File Server), and SQL Server Always On Failover Cluster Instance — and it's tested in depth. Key topics: 1) Cluster creation and Validation testing; 2) Quorum settings (Node Majority, Node and Disk Majority, Node and File Share Majority, Cloud Witness, Disk Witness); 3) Cluster Shared Volumes (CSV) configuration; 4) integration with Storage Spaces Direct (S2D) for HCI; 5) Cluster Sets for Stretched Cluster; 6) Live Migration / Quick Migration; and 7) Cluster Aware Updating (CAU) for patch management. Building a Failover Cluster on real hardware at least once makes a huge difference to your pass rate.

A 3-4 Month Roadmap to Passing

Here's a 3-month plan assuming you already hold AZ-800 and have 3-5 years of Windows Server ops experience.Month 1: work through the Microsoft Learn AZ-801 learning path (security hardening / high availability sections), and build a 2-node Failover Cluster (Hyper-V cluster) on the Windows Server 2022/2025 evaluation edition.Month 2: study the DR / Migration domains, walk through Azure Site Recovery replication from on-prem to Azure DR, and practice file server migration with Storage Migration Service.Month 3: finish the Monitoring / Troubleshooting domain and consolidate. Do performance analysis with Performance Monitor / WPA, integrate monitoring through Azure Arc, and rep the official Practice Assessment until you consistently hit 80%.

Career Paths After AZ-801

Passing both AZ-800 and AZ-801 earns you the Windows Server Hybrid Administrator Associate certification. From there, the standard next steps are:

Broad Azure coverage: AZ-104 (Administrator) then AZ-305 (Solutions Architect Expert) for end-to-end Azure design skills.Deep hybrid networking: AZ-700 (Network Engineer Associate) to go deeper on hybrid connectivity (VPN / ExpressRoute).Security integration: SC-300 + SC-100 for hybrid identity governance and Zero Trust strategy.Deep virtualization: AZ-140 (AVD Specialty) combined with VMware / Citrix EUC certifications.Edge / private cloud: Microsoft Azure Stack (Azure Local) is a specialist area, and demand for AZ-800 / AZ-801 holders is rising in joint projects with hardware vendors (Dell / HPE / Lenovo).

Frequently Asked Questions

The exam information in this article is based on the official Microsoft Learn Windows Server Hybrid Administrator page and the Windows Server Documentation. This article is not an official Microsoft Corporation product and has no affiliation or endorsement. Microsoft, Azure, and Windows Server are trademarks of the Microsoft group of companies. Information is based on official public material as of May 24, 2026. Always check the official pages for the latest information.