Study and Prepare with Microsoft AZ-802 study material, That's Easy to pass With PracticeMaterial!
Last Updated: Sep 22, 2026
No. of Questions: 512 Questions & Answers with Testing Engine
Download Limit: Unlimited
Pass your real exam with PracticeMaterial latest AZ-802 Practice Materials one-time. All the core knowledge of Microsoft AZ-802 exam practice material are valid and reliable, compiled and edited by the experienced experts team, which can help you to deal the difficulties in the real test and pass the Microsoft AZ-802 exam certainly.
PracticeMaterial has an unprecedented 99.6% first time pass rate among our customers.
We're so confident of our products that we provide no hassle product exchange.
In 2026, preparing for a test can still feel boring and complex — usually because the material has no structure. The AZ-802 exam bank at PracticeMaterial builds a clear knowledge structure first, so the Microsoft Administering Windows Server objectives connect into a map instead of a pile.
| Certification Vendor: | Microsoft |
|---|---|
| Exam Name: | Administering Windows Server Hybrid Infrastructure |
| Exam Number: | AZ-802 |
| Related Certifications: | AZ-800 AZ-801 |
| Real Exam Qty: | 40-60 |
| Certificate Validity Period: | 1 year |
| Passing Score: | 700 (on a scale of 1000) |
| Exam Format: | Multiple-choice, Drag-and-drop, Scenario-based, Case studies, Hotspot, Multiple-response |
| Exam Duration: | 120-150 |
| Exam Price: | $165 USD |
| Available Languages: | English, Japanese, Chinese (Simplified), Portuguese (Brazil), Spanish, German, French |
| Recommended Training: | Microsoft Learn: AZ-802 Learning Path Official Microsoft Instructor-Led Training |
| Exam Registration: | Pearson VUE Registration Portal Microsoft Certification Exam Registration |
| Sample Questions: | DOWNLOAD DEMO |
| Exam Way: | Online proctored or onsite at Pearson VUE test centers |
| Pre Condition: | No mandatory prerequisites; recommended 2+ years of experience administering Windows Server in hybrid environments |
| Official Syllabus URL: | https://learn.microsoft.com/en-us/credentials/certifications/windows-server-hybrid-administrator/#exam-az-802 |
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Implement and manage an on-premises and hybrid networking infrastructure | 15% | - Implement hybrid network connectivity - Configure IP addressing, DNS, and DHCP - Secure network traffic in hybrid environments - Configure software-defined networking |
| Topic 2: Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments | 20% | - Integrate AD DS with Azure AD and Azure Arc - Manage FSMO roles and replication - Implement and manage Group Policy Objects - Install and configure domain controllers |
| Topic 3: Manage virtual machines and containers | 15% | - Deploy and manage Hyper-V virtual machines - Configure Azure Arc-enabled servers and VMs - Deploy and manage containers and Kubernetes on Windows Server |
| Topic 4: Secure Windows Server on-premises and hybrid infrastructures | 10% | - Implement security baselines and hardening - Configure Windows Defender and audit policies - Manage access control and permissions |
| Topic 5: Implement high availability and disaster recovery | 5% | - Perform server and workload migrations - Configure failover clustering - Implement backup and recovery solutions - Monitor and troubleshoot Windows Server environments - Use Azure Site Recovery for hybrid workloads |
| Topic 6: Manage storage and file services | 15% | - Configure data deduplication and replication - Integrate on-premises storage with Azure Storage - Configure file servers and shares - Implement Storage Spaces and Storage Spaces Direct |
| Topic 7: Manage Windows Servers and workloads in a hybrid environment | 20% | - Configure remote management and secure administration - Deploy servers using Windows Admin Center and Azure Arc - Manage updates and patches across hybrid servers - Implement hybrid identity solutions |
The AZ-802 exam contains 40-60 questions with 120-150 minutes to complete them. A clear knowledge structure is what makes that volume manageable — you answer faster when every topic has its place.
Passing the AZ-802 exam requires 700 (on a scale of 1000), and registration costs $165 USD. Structured preparation is how you spend study time once and exam fees once.
Immediately. The system emails you at once with the download link for the Microsoft Administering Windows Server materials — the whole delivery process takes about a minute. Open the email, download the AZ-802 exam product to your computer, install it, and you are studying within minutes of deciding to. If the message does not appear, check your spam folder; after 2 hours without delivery, contact support. Install on all of your own devices without limit.
No mandatory prerequisites; recommended 2+ years of experience administering Windows Server in hybrid environments
The AZ-802 exam is the official assessment behind the Microsoft Administering Windows Server certification from Microsoft. Lifelong learning has become the norm precisely because industries keep moving — and this credential is a concrete way to keep pace. Many candidates only sit it seriously on a second attempt; structured preparation is how you make the first one count.
Microsoft recommends these training resources for candidates:
Official training adds depth; a clearly structured practice bank with verified answers adds direction. Together they cover both sides of preparation.
The official outline divides the AZ-802 exam into weighted domains, including:
The Microsoft Administering Windows Server bank at PracticeMaterial mirrors this structure, so the knowledge map you build while practicing matches the one the exam uses.
Registration for the AZ-802 exam runs through these official channels:
It is never too late to start — but starting today beats starting after one more week of hesitation.
Structure is the design principle. The Microsoft Administering Windows Server materials first build a clear knowledge structure of the AZ-802 exam, so difficult points become understandable in sequence rather than intimidating in isolation. Our experts have prioritized the most important knowledge for busy learners, and every answer is expert-verified — so your limited hours go exactly where the objectives point.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using DEFAULTIPSITELINK.
You open a new branch office that contains only client computers. You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1. Solution: You create a new subnet object that is associated to Site1. Does this meet the goal?
Correct Answer: A 🗳️
Explanation: Only visible for PracticeMaterial members. You can sign-up / login (it's free).
You have a server named Server1 that runs Windows Server and contains two volumes named C and D.
You connect a disk to Server 1 that is encrypted by using BitLocker and contains a volume named E.
You need to ensure that after a restart, the data on volume E can be accessed without providing a password or a recovery key.
Which three actions should you perform on Server1 in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Correct Answer:

Explanation:
1. Install the BitLocker Drive Encryption feature. 2. Encrypt volume C. 3. Turn on auto-unlock.
Automatic unlocking of a BitLocker-protected fixed data drive is a feature of the core BitLocker Drive Encryption feature (Enable-BitLockerAutoUnlock) and has one hard prerequisite: the operating system volume on that computer must also be protected by BitLocker, because the auto-unlock key for the data volume is itself secured against the encrypted OS volume. Since Server1 ' s OS volume (C) is not stated to be encrypted, it must be encrypted first. BitLocker Network Unlock is an unrelated feature that unlocks operating system volumes over the network during startup in a WDS/DHCP environment - it plays no role in unlocking a fixed data drive and is not a prerequisite for Enable-BitLockerAutoUnlock. The correct sequence is therefore to add the BitLocker Drive Encryption feature, encrypt the OS volume (C), and then turn on auto- unlock for volume E, after which subsequent restarts will mount and unlock volume E automatically without any password or recovery key prompt.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. You implement a central store. You create a new Group Policy Object (GPO) named GPO1. When you attempt to edit GPO1, you see that the " Administrative Templates: Policy definitions (ADMX files) retrieved from the central store " node shows only two settings (far fewer than the normal full set of Administrative Template settings). You need to ensure that all settings are available. Solution: You delete the \\contoso.
com\SYSVOL\contoso.com\Policies\PolicyDefinitions folder. Does this meet the goal?
Group Policy Management Editor showing limited Administrative Templates settings
Correct Answer: B 🗳️
Explanation: Only visible for PracticeMaterial members. You can sign-up / login (it's free).
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two servers named Server1 and Server2 that run Windows Server You need to use connection security rules to control the connections between Server1 and Server2. The solution must meet the following requirements:
* IPsec protection for Server1 and Server2 must be limited.
* Traffic between Server1 and Server2 must be authenticated and encrypted.
* Server2 must accept traffic from Server1 only if Server2 is authenticated by using IPsec.
How should you configure the connection security rules? To answer, select the appropriate options in the answe1 area.
NOTE: Each correct selection is worth one point
Correct Answer:

Explanation:
Type of IPsec rule: Server-to-server rule. Firewall rule on Server2: Inbound port rule: Allow the connection if it is secure.
A server-to-server connection security rule protects traffic exchanged between two specific, explicitly defined endpoints, which is exactly the ' limited ' scope required here, since it applies only between Server1 and Server2 rather than isolating an entire domain or zone of the network the way an isolation rule would (isolation rules are built for domain- or network-wide policies restricting communication to only domain- joined or otherwise trusted computers, a much broader scope than two named servers). An authentication exemption rule only carves out exceptions from IPsec requirements for specified traffic or hosts and would not itself provide the authenticated, encrypted protection the scenario requires; a tunnel rule protects traffic between two gateway computers on behalf of other hosts behind them, which does not match a direct server- to-server relationship. Once the server-to-server connection security rule is defined to require authentication and encryption for traffic between the two servers, Server2 additionally needs an inbound firewall rule of type
' Allow the connection if it is secure, ' which permits inbound traffic from Server1 only when it arrives already authenticated and protected by the negotiated IPsec security association; a plain ' Allow the connection ' rule would accept the traffic regardless of whether it was secured, and outbound or predefined rule types do not enforce the requirement that Server2 accept Server1 ' s traffic only when it is IPsec- authenticated.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a failover cluster named Cluster1 that hosts an application named App1. The General tab in App1 Properties is shown in the General exhibit. (Click the General tab.) The Failover tab in App1 Properties is shown in the Failover exhibit. (Click the Failover tab.) Server2 shuts down unexpectedly. You need to ensure that when you start Server2, App1 continues to run on Server2. Solution: You pause the Server1 node in Cluster1 and then start Server1. Does this meet the goal?
Correct Answer: B 🗳️
Explanation: Only visible for PracticeMaterial members. You can sign-up / login (it's free).
Lyndon
Norton
Roy
Vic
Anastasia
Clara
PracticeMaterial is the world's largest certification preparation company with 99.6% Pass Rate History from 71481+ Satisfied Customers in 148 Countries.
Over 71481+ Satisfied Customers
