What Is the AZ-802 Exam Really Testing?

Microsoft describes AZ-802 as an exam for professionals responsible for deploying, implementing, managing and troubleshooting Windows Server in on-premises, cloud or hybrid environments.

That means the exam goes beyond simply knowing how to install Windows Server or create a user account. You need to understand how identity, networking, compute, storage, security and monitoring work together.

Microsoft’s current AZ-802 objectives include technologies such as Windows Admin Center, Hyper-V, PowerShell, Azure Arc, Azure Monitor, Azure Update Manager, Microsoft Defender for Cloud and Active Directory Domain Services.

For example, imagine that employees suddenly cannot authenticate against the domain.

Is Active Directory down?

Is DNS failing?

Is replication broken?

Could time synchronization be affecting Kerberos?

Or is the workstation simply unable to reach a domain controller?

There may be several possible causes. A good Windows Server administrator needs to know how to narrow them down.

The Seven AZ-802 Domains You Need to Know

Before creating a study plan, understand what Microsoft actually expects you to know. The current AZ-802 study guide divides the exam into seven major skill areas.

These weightings come from Microsoft’s current AZ-802 study guide. Use that document as your primary syllabus and check it again before scheduling the exam.

Active Directory: The Part of AZ-802 You Should Not Leave Until the End

If you’re starting your AZ-802 preparation, Active Directory Domain Services should be high on your list.

AD DS has the largest individual weighting in the current exam, but the best way to learn it is not to turn it into a collection of definitions.

Think about what happens in a real environment. Domain controllers need to communicate. Users and groups need to be managed. Sites and replication need to work. Trusts may connect different environments. Group Policy needs to reach the right users and computers.

What should you study?

• Deploying and managing domain controllers
• Read-Only Domain Controllers and account security
• FSMO roles and troubleshooting
• Domain and forest trusts
• AD DS sites
• AD DS replication
• Users and groups
• Service accounts
• Group Policy
• Group Policy Preferences

Make Active Directory practical

If you have a lab, build a small domain. Create users, groups and an OU. Apply a Group Policy. If possible, add another domain controller and observe replication.

Then deliberately create a small configuration problem and troubleshoot it.

That is when concepts that seemed abstract in a course start making sense.

Hybrid Windows Server Administration: Where the Modern Part Begins

Many organisations now have Windows Server workloads in more than one place. Some servers may remain on-premises while others run in Azure or are connected to Azure management services.

AZ-802 reflects that reality. The current objectives include Windows Admin Center, PowerShell remoting, Just Enough Administration, SSH, Remote Desktop, Azure Arc, Azure Update Manager and Azure Automation runbooks.

Why Windows Admin Center matters

Spend time actually using Windows Admin Center if you can. Explore server management, events, performance, storage, networking and PowerShell.

Then try to understand how the same administrative work could be performed through PowerShell. That comparison helps you become more flexible as an administrator.

Learn Azure Arc as a management story

Don’t learn Azure Arc simply as a definition. Ask what problem it solves.

In a hybrid environment, administrators want consistent visibility and management across servers that are not all running directly in Azure. Understanding that context makes Arc-related questions much easier to reason through.

Hyper-V and Azure Virtual Machines

Virtualisation is another part of AZ-802 where practical thinking pays off.

The current objectives cover Hyper-V as well as Azure VM management, including areas such as virtual hard disks, virtual switches, VM memory, checkpoints, high availability, NIC teaming and Hyper-V Replica.

Hyper-V topics to understand

• Enhanced Session Mode
• PowerShell and PowerShell Direct
• SSH Direct
• Nested virtualisation
• Memory settings and integration services
• Device assignment and GPU partitioning
• Checkpoints
• High availability
• Virtual hard disks
• Virtual switches and network adapters
• NIC teaming
• Hyper-V Replica

Azure VM topics to understand

Also prepare for Azure VM storage, resizing and capacity, VM Scale Sets, availability sets and zones, just-in-time access, Azure Bastion and network configuration.

A useful way to study these topics is to follow the lifecycle of a VM:

Create it → configure it → connect it → secure it → monitor it → troubleshoot it.

Networking: Start With DNS, Then Connect the Dots

DNS is one of those technologies that seems simple until something stops working.

In a Windows Server environment, DNS is closely tied to Active Directory, authentication and connectivity, which makes it particularly important for AZ-802.

Focus on these areas

• DNS zones and records
• AD DS and DNS integration
• Forwarding and conditional forwarding
• Hybrid name resolution
• DNS policies
• DNSSEC
• DHCP scopes and reservations
• DHCP high availability
• IP troubleshooting in hybrid environments

Try scenario-based practice instead of memorising definitions.

If a server can reach an IP address but not a hostname, what would you check?

If a client can access the internet but cannot find a domain controller, where would you start?

If a hybrid workload cannot resolve a resource hosted in another environment, what dependencies would you investigate?

Those questions build the kind of reasoning AZ-802 is designed to assess.

Storage and File Services: More Than Just Disk Management

Storage and file services represent 15–20% of the current AZ-802 objectives, so this is not a topic you should leave until the final few days.

Azure Files and file services

• Azure file shares and permissions
• Azure File Sync and monitoring
• Migration from file shares to Azure Files
• DFS migration scenarios
• Windows Server file shares
• FSRM
• DFS
• SMB
• SMB over QUIC

Windows Server storage

• Disks and volumes
• Storage Spaces
• Storage Spaces Direct
• Storage Replica
• Data Deduplication
• SMB Direct / RDMA
• Storage QoS
• NTFS and ReFS
• iSCSI
• BitLocker

The easiest way to remember these technologies is to understand the problems they solve. Once the purpose is clear, the terminology becomes much easier to retain.

Windows Server Security: Learn the Reason Behind the Feature

Security should not be treated as the chapter you skim through the night before the exam.

AZ-802 expects administrators to secure both the Windows Server operating system and Active Directory.

Windows Server security

• Exploit protection
• Application Control
• Credential Guard
• Microsoft Defender SmartScreen
• Security policies and baselines
• OSConfig
• Windows LAPS
• Defender for Servers
• Windows Firewall
• Connection security rules

AD DS security

• Password policies
• Microsoft Entra Password Protection
• Protected Users
• Domain controller hardening
• Access restrictions
• Administrative groups
• Delegation
• Authentication protocols

For every security control, ask one simple question:

Monitoring and Troubleshooting: The Skill That Ties Everything Together

There is a difference between someone who knows how to configure Windows Server and someone who can keep a Windows Server environment running.

Troubleshooting is where that difference becomes obvious.

Microsoft includes monitoring and troubleshooting as a significant part of AZ-802, covering Performance Monitor, Data Collector Sets, Windows Admin Center alerts, System Insights, Event Logs, Azure Monitor, data collection rules, alerts and VM Insights.

Problems you should be able to reason through

• Connectivity problems
• DNS and name-resolution failures
• Windows Update issues
• Time-service problems
• Performance problems
• VM extension issues
• Azure Arc extension issues
• Disk encryption problems
• Storage issues
• AD replication problems
• Kerberos and authentication failures
• Secure-channel and computer-account trust issues

The point of the exercise isn’t to guess a magic answer. It is to build a troubleshooting habit: start with the symptom, identify the scope, check dependencies, gather evidence and make one controlled change at a time.

How to Prepare for AZ-802 Without Getting Overwhelmed

One of the easiest ways to make AZ-802 preparation harder than it needs to be is to collect too many resources.

You watch one course, download another guide, save ten articles and start several different practice-test subscriptions. A few weeks later, you’ve consumed a lot of content but still aren’t sure whether you’re ready.

A simpler approach works better:

Microsoft recommends training and hands-on experience before taking the exam. Use the official AZ-802 objectives as your map, then use Microsoft Learn and practical exercises to fill the gaps.

Hands-On AZ-802 Labs You Should Actually Try

You don’t need to recreate a giant enterprise data centre. A small lab with realistic scenarios can teach you a lot.

1. Build an AD DS environment: create a domain, users, groups and an OU.
2. Configure Group Policy: apply a policy to a test OU and troubleshoot it.
3. Test DNS: create records and troubleshoot a name-resolution failure.
4. Configure DHCP: create a scope and reservation.
5. Explore Hyper-V: create a VM, configure memory and networking, and examine checkpoints.
6. Practise PowerShell remoting: connect to a remote Windows Server and perform administrative tasks.
7. Use Windows Admin Center: inspect events, storage, networking and performance.
8. Investigate an event: create a simple issue and use Event Viewer to find evidence.
9. Work with storage: create a file share and test permissions.
10. Break something on purpose: introduce a controlled configuration problem and troubleshoot it.

How to Use AZ-802 Practice Tests Properly

A practice score is useful, but it is not the most valuable part of a practice test.

The valuable part is discovering what you don’t know.

After each test, separate your questions into three groups:

• Confident: you knew the answer and understood why.
• Uncertain: you guessed or narrowed the choices down.
• Wrong: you did not know the concept or misunderstood the scenario.

Spend most of your revision time on the second and third groups.

If you repeatedly miss questions about AD replication, don’t simply take another full test. Go back and repair that specific knowledge gap.

TestPrepTraining’s AZ-802 practice resources can be used alongside Microsoft Learn to reinforce the exam topics and help identify areas that need more revision.

A Practical 30-Day AZ-802 Study Plan

If you already have Windows Server experience, a four-week structure can give your preparation some direction.

Common AZ-802 Preparation Mistakes

What Does AZ-802 Mean for Your Career?

AZ-802 is useful because the skills behind it map closely to the work done in modern infrastructure teams.

Windows Server has not disappeared simply because organisations use cloud services. In many enterprises, Windows Server continues to sit alongside Azure services, identity platforms, virtual machines, networking, storage and security tools.

That combination creates opportunities for professionals who can bridge traditional Windows administration with hybrid cloud management.

Depending on your experience, the skills developed while preparing for AZ-802 can be relevant to roles such as:

• Windows Server Administrator
• Systems Administrator
• Infrastructure Engineer
• Systems Engineer
• Hybrid Cloud Administrator
• Azure Administrator
• IT Operations Engineer
• Infrastructure Consultant
• Technical Support Engineer

Are You Ready for AZ-802?

Before booking the exam, use this simple checklist. It isn’t a substitute for Microsoft’s objectives, but it can help you identify where you feel confident and where you still need work.

• I can explain the major AD DS components and troubleshoot common AD problems.
• I can work with Group Policy and understand why a policy may not apply.
• I understand Windows Admin Center and PowerShell remoting.
• I understand the purpose of Azure Arc and Azure Update Manager.
• I can explain core Hyper-V and Azure VM concepts.
• I can troubleshoot DNS and DHCP scenarios.
• I understand Windows Server storage and file services.
• I understand the major Windows Server and AD DS security controls.
• I can use monitoring tools to investigate performance and event problems.
• I have taken practice tests and reviewed my weak areas.

Final Thoughts: Prepare Like an Administrator, Not Just an Exam Candidate

AZ-802 can look intimidating when you first see the list of technologies involved.

Active Directory, PowerShell, Hyper-V, networking, storage, security, Azure and troubleshooting are a lot to fit into one preparation plan.

But you don’t have to approach the exam as a giant list of technologies to memorise.

Think about the environment you would actually be responsible for.

You would deploy servers. You would manage identities. You would connect systems. You would secure them. You would monitor them. And when something breaks, you would need to work out why.

That is the mindset to bring into AZ-802.

Use the Microsoft objectives as your map. Build your understanding around the major domains. Get hands-on wherever possible. Use practice tests to expose weak areas.

And don’t measure preparation only by the number of hours you’ve studied—measure it by how confidently you can explain and troubleshoot a real Windows Server scenario.

That is when AZ-802 preparation starts becoming more than exam preparation. It becomes a genuine upgrade to your Windows Server administration skills.

Frequently Asked Questions About AZ-802