As a candidate for this exam, you’re responsible for configuring and managing Windows Server on-premises, hybrid, and infrastructure as a service (IaaS) platform workloads. As a Windows Server hybrid administrator, you’re tasked with:
Integrating Windows Server environments with Azure services.
Managing Windows Server in on-premises networks.
In this role, you manage and maintain Windows Server IaaS workloads in Azure as well as migrating and deploying workloads to Azure. You typically collaborate with:
Azure administrators
Enterprise architects
Microsoft 365 administrators
Network engineers
As a candidate for this exam, you deploy, package, secure, update, and configure Windows Server workloads using on-premises, hybrid, and cloud technologies. In this role, you implement and manage on-premises and hybrid solutions, such as identity, security, management, compute, networking, storage, monitoring, high availability, and disaster recovery.
You use administrative tools and technologies such as Windows Admin Center, PowerShell, Azure Arc, Azure Policy, Azure Monitor, Azure Automation Update Management, Microsoft Defender for Identity, Microsoft Defender for Cloud, and IaaS virtual machine (VM) administration.
As a candidate for this exam, you should have several years of experience with Windows Server operating systems.
Important
The English language version of this exam was updated on August 24, 2023. Review the study guide linked in the “Tip” box for details about the latest changes. If a localized version of this exam is available, it will be updated approximately eight weeks after this date. While Microsoft makes every effort to update localized versions as noted, there may be times when the localized versions of this exam are not updated on this schedule.
Passing score: 700. Learn more about exam scores.
Languages: English, Japanese, Chinese (Simplified), Korean, German, French, Spanish, Portuguese (Brazil), Chinese (Traditional), Italian
Retirement date: none
This exam measures your ability to accomplish the following technical tasks: secure Windows Server on-premises and hybrid infrastructures; implement and manage Windows Server high availability; implement disaster recovery; migrate servers and workloads; and monitor and troubleshoot Windows Server environments.
Examkingdom Microsoft AZ-900 Exam pdf,
Best Microsoft AZ-900 Free downloads , Microsoft AZ-900 Dumps at Certkingdom.com
Skills measured as of August 24, 2023
Audience profile
Candidates for this exam are responsible for configuring and managing Windows Server on-premises, hybrid, and Infrastructure as a Service (IaaS) platform workloads. The Windows Server Hybrid Administrator is tasked with integrating Windows Server environments with Azure services and managing Windows Server in on-premises networks. This role manages and maintains Windows Server IaaS workloads in Azure as well as migrating and deploying workloads to Azure. This role typically collaborates with Azure Administrators, Enterprise Architects, Microsoft 365 administrators, and network engineers.
Candidates for this exam deploy, package, secure, update, and configure Windows Server workloads using on-premises, hybrid, and cloud technologies. This role implements and manages on-premises and hybrid solutions, such as identity, security, management, compute, networking, storage, monitoring, high availability, and disaster recovery. This role uses administrative tools and technologies such as Windows Admin Center, PowerShell, Azure Arc, Azure Policy, Azure Monitor, Azure Automation Update Management, Microsoft Defender for Identity, Microsoft Defender for Cloud, and IaaS VM administration.
Candidates for this exam have several years of experience with Windows Server operating systems.
Secure Windows Server on-premises and hybrid infrastructures (25–30%)
Implement and manage Windows Server high availability (10–15%)
Implement disaster recovery (10–15%)
Migrate servers and workloads (20–25%)
Monitor and troubleshoot Windows Server environments (20–25%)
Secure Windows Server on-premises and hybrid infrastructures (25–30%)
Secure Windows Server operating system
Configure and manage Exploit Protection
Configure and manage Windows Defender Application Control
Configure and manage Microsoft Defender for Servers
Configure and manage Windows Defender Credential Guard
Configure SmartScreen
Implement operating system security by using Group Policies
Secure a hybrid Active Directory infrastructure
Configure password policies
Enable password block lists
Manage protected users
Manage account security on an RODC
Harden domain controllers
Configure authentication policy silos
Restrict access to domain controllers
Configure account security
Manage AD built-in administrative groups
Manage AD delegation
Implement and manage Microsoft Defender for Identity
Identify and remediate Windows Server security issues by using Azure services
Monitor on-premises servers and Azure IaaS VMs by using Microsoft Sentinel
Identify and remediate security issues on-premises servers and Azure IaaS VMs by using Microsoft Defender for Cloud
Secure Windows Server networking
Manage Windows Defender Firewall
Implement domain isolation
Implement connection security rules
Secure Windows Server storage
Manage Windows BitLocker Drive Encryption (BitLocker)
Manage and recover encrypted volumes
Enable storage encryption by using Azure Disk Encryption
Manage disk encryption keys for IaaS virtual machines
Implement and Manage Windows Server high availability (10–15%)
Implement a Windows Server failover cluster
Implement a failover cluster on-premises, hybrid, or cloud-only
Create a Windows failover cluster
Implement a stretch cluster across datacenters or Azure regions
Configure storage for failover clustering
Modify quorum options
Configure network adapters for failover clustering
Configure cluster workload options
Configure cluster sets
Configure Scale-Out File servers
Create an Azure witness
Configure a floating IP address for the cluster
Implement load balancing for the failover cluster
Manage failover clustering
Implement cluster-aware updating
Recover a failed cluster node
Upgrade a node to Windows Server 2022
Failover workloads between nodes
Install Windows updates on cluster nodes
Manage failover clusters using Windows Admin Center
Implement and manage Storage Spaces Direct
Create a failover cluster using Storage Spaces Direct
Upgrade a Storage Spaces Direct node
Implement networking for Storage Spaces Direct
Configure Storage Spaces Direct
Implement disaster recovery (10–15%)
Manage backup and recovery for Windows Server
Back up and restore files and folders to Azure Recovery Services Vault
Install and manage Azure Backup Server
Back up and recover using Azure Backup Server
Manage backups in Azure Recovery Services Vault
Create a backup policy
Configure backup for Azure VM using the built-in backup agent
Recover VM using temporary snapshots
Recover VMs to new Azure VMs
Restore a VM
Implement disaster recovery by using Azure Site Recovery
Configure Azure Site Recovery networking
Configure Site Recovery for on-premises VMs
Configure a recovery plan
Configure Site Recovery for Azure VMs
Implement VM replication to secondary datacenter or Azure region
Configure Azure Site Recovery policies
Protect virtual machines by using Hyper-V replicas
Configure Hyper-V hosts for replication
Manage Hyper-V replica servers
Configure VM replication
Perform a failover
Migrate servers and workloads (20–25%)
Migrate on-premises storage to on-premises servers or Azure
Transfer data and share
Cut over to a new server by using Storage Migration Service (SMS)
Use Storage Migration Service to migrate to Azure VMs
Migrate to Azure file shares
Migrate on-premises servers to Azure
Deploy and configure Azure Migrate appliance
Migrate VM workloads to Azure IaaS
Migrate physical workloads to Azure IaaS
Migrate by using Azure Migrate
Migrate workloads from previous versions to Windows Server 2022
Migrate IIS
Migrate Hyper-V hosts
Migrate RDS host servers
Migrate DHCP
Migrate print servers
Migrate IIS workloads to Azure
Migrate IIS workloads to Azure Web Apps
Migrate IIS workloads to containers
Migrate an AD DS infrastructure to Windows Server 2022 AD DS
Migrate AD DS objects, including users, groups and Group Policies using AD Migration Tool
Migrate to a new Active Directory forest
Upgrade an existing forest
Monitor and troubleshoot Windows Server environments (20–25%)
Monitor Windows Server by using Windows Server tools and Azure services
Monitor Windows Server by using Performance Monitor
Create and configure Data Collector Sets
Monitor servers and configure alerts by using Windows Admin Center
Analyze Windows Server system data by using System Insights
Manage event logs
Deploy Azure Monitor agents
Collect performance counters to Azure
Create alerts
Monitor Azure VMs by using Azure diagnostics extension
Monitor Azure VMs performance by using VM Insights
Troubleshoot Windows Server on-premises and hybrid networking
Troubleshoot hybrid network connectivity
Troubleshoot on-premises connectivity
Troubleshoot Windows Server virtual machines in Azure
Troubleshoot deployment failures
Troubleshoot booting failures
Troubleshoot VM performance issues
Troubleshoot VM extension issues
Troubleshoot disk encryption issues
Troubleshoot storage
Troubleshoot VM connection issues
Troubleshoot Active Directory
Restore objects from AD recycle bin
Recover Active Directory database using Directory Services Restore mode
Recover SYSVOL
Troubleshoot Active Directory replication
Troubleshoot Hybrid authentication issues
Troubleshoot on-premises Active Directory
Key to understanding the table: The topic groups (also known as functional groups) are in bold typeface followed by the objectives within each group. The table is a comparison between the two versions of the exam skills measured and the third column describes the extent of the changes.
Skill area prior to August 24, 2023 Skill area as of August 24, 2023 Change
Audience profile No change
Secure Windows Server On-premises and Hybrid Infrastructures Secure Windows Server on-premises and hybrid infrastructures No change
Secure Windows Server operating system Secure Windows Server operating system Minor
Secure a hybrid Active Directory infrastructure Secure a hybrid Active Directory infrastructure No change
Identify and remediate Windows Server security issues by using Azure Services Identify and remediate Windows Server security issues by using Azure Services No change
Secure Windows Server networking Secure Windows Server networking No change
Secure Windows Server storage Secure Windows Server storage No change
Implement and Manage Windows Server High Availability Implement and manage Windows Server high availability No change
Implement a Windows Server failover cluster Implement a Windows Server failover cluster No change
Manage failover clustering Manage failover clustering No change
Implement and manage Storage Spaces Direct Implement and manage Storage Spaces Direct No change
Implement Disaster Recovery Implement disaster recovery No change
Manage backup and recovery for Windows Server Manage backup and recovery for Windows Server No change
Implement disaster recovery by using Azure Site Recovery Implement disaster recovery by using Azure Site Recovery No change
Protect virtual machines by using Hyper-V replicas Protect virtual machines by using Hyper-V replicas No change
Migrate Servers and Workloads Migrate servers and workloads No change
Migrate on-premises storage to on-premises servers or Azure Migrate on-premises storage to on-premises servers or Azure No change
Migrate on-premises servers to Azure Migrate on-premises servers to Azure No change
Migrate workloads from previous versions to Windows Server 2022 Migrate workloads from previous versions to Windows Server 2022 No change
Migrate IIS workloads to Azure Migrate IIS workloads to Azure No change
Migrate an AD DS Infrastructure to Windows Server 2022 AD DS Migrate an AD DS Infrastructure to Windows Server 2022 AD DS No change
Monitor and Troubleshoot Windows Server Environments Monitor and troubleshoot Windows Server environments No change
Monitor Windows Server by using Windows Server tools and Azure services Monitor Windows Server by using Windows Server tools and Azure services No change
Troubleshoot Windows Server On-premises and Hybrid networking Troubleshoot Windows Server On-premises and Hybrid networking No change
Troubleshoot Windows Server virtual machines in Azure Troubleshoot Windows Server virtual machines in Azure No change
Troubleshoot Active Directory Troubleshoot Active Directory No change
QUESTION 1
DRAG DROP
Your company intends to subscribe to an Azure support plan.
The support plan must allow for new support requests to be opened.
Which of the following are support plans that will allow this? Answer by dragging the correct option from the list
to the answer area.
Select and Place:
Correct Answer:
Section: Mixed Questions
QUESTION 2
Your company has datacenters in Los Angeles and New York. The company has a Microsoft Azure subscription.
You are configuring the two datacenters as geo-clustered sites for site resiliency.
You need to recommend an Azure storage redundancy option.
You have the following data storage requirements:
Data must be stored on multiple nodes.
Data must be stored on nodes in separate geographic locations.
Data can be read from the secondary location as well as from the primary location
Which of the following Azure stored redundancy options should you recommend?
A. Geo-redundant storage
B. Read-only geo-redundant storage
C. Zone-redundant storage
D. Locally redundant storage
Answer: B
Section: Mixed Questions
Explanation
Explanation/Reference:
Explanation:
RA-GRS allows you to have higher read availability for your storage account by providing ‘read only access to
the data replicated to the secondary location. Once you enable this feature, the secondary location may be
used to achieve higher availability in the event the data is not available in the primary region. This is an ‘optinâ€
feature which requires the storage account be geo-replicated.
QUESTION 3
Note: The question is included in a number of questions that depicts the identical set-up. However,
every question has a distinctive result. Establish if the solution satisfies the requirements.
Your company’s Azure subscription includes a Basic support plan.
They would like to request an assessment of an Azure environment’s design from Microsoft. This is, however,
not supported by the existing plan.
You want to make sure that the company subscribes to a support plan that allows this functionality, while
keeping expenses to a minimum.
Solution: You recommend that the company subscribes to the Professional Direct support plan.
Does the solution meet the goal?
A. Yes
B. No
Answer: B
Section: Mixed Questions
Explanation
Explanation/Reference:
QUESTION 4
Note: The question is included in a number of questions that depicts the identical set-up. However,
every question has a distinctive result. Establish if the solution satisfies the requirements.
You are tasked with deploying Azure virtual machines for your company.
You need to make use of the appropriate cloud deployment solution.
Solution: You should make use of Software as a Service (SaaS).
Does the solution meet the goal?
A. Yes
B. No
Answer: B
Section: Mixed Questions
Explanation
Explanation/Reference:
QUESTION 5
Note: The question is included in a number of questions that depicts the identical set-up. However,
every question has a distinctive result. Establish if the solution satisfies the requirements.
You are tasked with deploying Azure virtual machines for your company.
You need to make use of the appropriate cloud deployment solution.
Solution: You should make use of Platform as a Service (PaaS).
Does the solution meet the goal?
A. Yes
B. No
Answer: B
Section: Mixed Questions
Explanation
Explanation/Reference:
QUESTION 6
Note: The question is included in a number of questions that depicts the identical set-up. However,
every question has a distinctive result. Establish if the solution satisfies the requirements.
You are tasked with deploying Azure virtual machines for your company.
You need to make use of the appropriate cloud deployment solution.
Solution: You should make use of Infrastructure as a Service (IaaS).
Does the solution meet the goal?
A. Yes
B. No
Answer: A
Section: Mixed Questions
Explanation
Explanation/Reference:
QUESTION 7
Your developers have created 10 web applications that must be host on Azure.
You need to determine which Azure web tier plan to host the web apps. The web tier plan must meet the
following requirements:
The web apps will use custom domains.
The web apps each require 10 GB of storage.
The web apps must each run in dedicated compute instances.
Load balancing between instances must be included.
Costs must be minimized.
Which web tier plan should you use?
A. Standard
B. Basic
C. Free
D. Shared
Answer: B
Section: Mixed Questions
Explanation
Explanation/Reference:
Explanation:
Standard offers 50 GB of storage space, while Basic only gives 10 GB.
QUESTION 8
Note: The question is included in a number of questions that depicts the identical set-up. However,
every question has a distinctive result. Establish if the solution satisfies the requirements.
You are planning to migrate a company to Azure. Each of the company’s numerous divisions will have an
administrator in place to manage the Azure resources used by their respective division.
You want to make sure that the Azure deployment you employ allows for Azure to be segmented for the
divisions, while keeping administrative effort to a minimum.
Solution: You plan to make use of several Azure Active Directory (Azure AD) directories.
Does the solution meet the goal?
A. Yes
B. No
Answer: B
Section: Mixed Questions
Explanation
Explanation/Reference:
QUESTION 9
Your developers have created a portal web app for users in the Miami branch office. The web app will be
publicly accessible and used by the Miami users to retrieve customer and product information. The web app is
currently running in an on-premises test environment.
You plan to host the web app on Azure.
You need to determine which Azure web tier plan to host the web app. The web tier plan must meet the
following requirements:
The website will use the miami.weyland.com URL.
The website will be deployed to two instances.
SSL support must be included.
The website requires 12 GB of storage.
Costs must be minimized.
Which web tier plan should you use?
A. Standard
B. Basic
C. Free
D. Shared
Answer: A
Section: Mixed Questions
Explanation
Explanation/Reference:
