AZ-802 Certification Exam Guide + Practice Questions Updated 2026

Home / Microsoft / AZ-802

Comprehensive AZ-802 certification exam guide covering exam overview, skills measured, preparation tips, and practice questions with detailed explanations.

Microsoft AZ-802 Exam: Windows Server Hybrid Administrator Associate


The AZ-802 exam is part of the Microsoft Certified: Windows Server Administrator Associate certification. Offered by Microsoft, this certification validates your ability to manage Windows Server workloads across on-premises, cloud, and hybrid environments.

AZ-802 is designed as an upgrade path that consolidates knowledge previously covered in AZ-800 and AZ-801, which are scheduled to retire on September 30, 2026. This makes AZ-802 an important certification for professionals who want to demonstrate modern Windows Server administration skills in hybrid infrastructures.

The exam focuses on real-world administrative tasks, including deployment, configuration, security, monitoring, and troubleshooting of Windows Server environments integrated with cloud services.

AZ-802 Exam Overview


Understanding the exam structure is essential for planning your preparation.

Duration: 120 minutes
Passing Score: 700
Language: English
Price: $165
Certification: Microsoft Certified: Windows Server Administrator Associate

The exam includes scenario-based questions that test your ability to manage hybrid environments and perform administrative tasks effectively.

Why AZ-802 Matters in Modern IT


As organizations increasingly adopt hybrid infrastructure models, the ability to manage both on-premises and cloud-based systems has become critical.

The AZ-802 certification helps you:

● Validate hybrid administration skills
● Manage Windows Server across multiple environments
● Strengthen identity, security, and networking capabilities
● Support modern IT operations and cloud integration
● Improve career opportunities in system administration

This certification is particularly relevant for professionals working in environments that combine traditional data centers with cloud platforms.

Who Should Take the AZ-802 Exam?


The AZ-802 exam is intended for IT professionals responsible for managing Windows Server environments.

It is especially suitable for:

● System administrators managing Windows Server
● IT professionals working in hybrid environments
● Engineers responsible for infrastructure and operations
● Administrators managing identity, networking, and storage

Candidates are expected to collaborate with architects, administrators, and engineers to ensure efficient and secure system operations.

Core Skills Measured in AZ-802 Exam


The AZ-802 exam evaluates your ability to manage and secure Windows Server environments across multiple domains.

Deploy and Manage Active Directory Domain Services (AD DS)

Managing identity and access:

● Deploying and configuring AD DS
● Managing users, groups, and policies
● Maintaining domain infrastructure

Manage Windows Servers in Hybrid Environments

Working across on-premises and cloud:

● Integrating on-premises servers with cloud services
● Managing hybrid workloads
● Maintaining system consistency across environments

Manage Virtual Machines

Handling virtualization:

● Deploying and managing virtual machines
● Configuring virtualization environments
● Optimizing performance and resource usage

Implement and Manage Networking Infrastructure

Ensuring connectivity and performance:

● Configuring network services
● Managing hybrid networking
● Supporting secure communication between systems

Manage Storage and File Services

Handling data and storage systems:

● Configuring storage solutions
● Managing file services and access
● Ensuring data availability and integrity

Secure Windows Server Infrastructure

Protecting systems and data:

● Implementing security controls
● Managing access and authentication
● Protecting against threats and vulnerabilities

Monitor and Troubleshoot Environments

Maintaining system health:

● Monitoring performance and availability
● Diagnosing and resolving issues
● Using tools for troubleshooting

Recommended Preparation Approach


Preparing for AZ-802 requires both technical knowledge and practical experience.

Focus on Hybrid Scenarios
Study how Windows Server integrates with cloud environments and supports hybrid operations.

Practice Hands-On Administration
Work with Windows Server environments to gain real-world experience in configuration and troubleshooting.

Strengthen Core Infrastructure Skills
Review networking, storage, identity, and virtualization concepts.

Learn Security Best Practices
Understand how to secure systems and manage access effectively.

Use Practice Questions
Practice questions help reinforce knowledge and improve exam readiness.

Real-World Use Cases You Should Understand


The AZ-802 exam emphasizes practical applications, including:

● Managing hybrid identity and authentication systems
● Deploying and maintaining virtualized environments
● Securing enterprise infrastructure
● Monitoring and troubleshooting system performance
● Managing storage and file services in enterprise environments

Understanding these scenarios will help you perform better in the exam.

Using Practice Questions Effectively


Practice questions are an essential part of preparation.

To get the best results:

● Simulate real exam conditions with timed sessions
● Review explanations carefully
● Identify and improve weak areas
● Focus on scenario-based understanding
● Repeat practice tests until consistent performance is achieved

This approach helps build confidence and improve decision-making skills.

AZ-802 Exam FAQ


What is the AZ-802 exam?
The AZ-802 exam is part of the Windows Server Administrator Associate certification offered by Microsoft, focusing on hybrid Windows Server administration.

Is AZ-802 replacing AZ-800 and AZ-801?
Yes, AZ-802 serves as an updated exam that consolidates the knowledge from AZ-800 and AZ-801, which are retiring in 2026.

How long is the AZ-802 exam?
The exam duration is 120 minutes.

What is the passing score for AZ-802?
The passing score is 700.

What topics are covered in AZ-802?
Key topics include AD DS, hybrid environments, virtualization, networking, storage, security, and troubleshooting.

Who should take the AZ-802 exam?
It is suitable for system administrators and IT professionals managing Windows Server environments.

How should I prepare for AZ-802?
Preparation should include hands-on practice, studying hybrid infrastructure concepts, and using practice questions to reinforce knowledge.

Practice Questions for AZ-802 Exam


High-quality practice questions are designed to reflect the real exam format and difficulty level. They typically include:

● Scenario-based administrative tasks
● Multiple-choice questions aligned with exam objectives
● Detailed explanations to support learning

Regular practice helps reinforce knowledge and improve accuracy.

Question#1

You have 40 application servers running Windows Server that share the same enforced Windows Defender Application Control (WDAC) base policy. You designate six of the 40 as pilot servers that will run a vendor app named App1, whose binaries the vendor signs with a single certificate and updates monthly. You need to enable App1 on only the pilot servers, keeping policy maintenance low and avoiding changes to the base policy's allow rules.
Which action should you perform before deploying App1 to the pilot servers?

A. Create a WDAC supplemental policy that allows App1's signing certificate, and deploy that supplemental policy only to the six pilot servers, leaving the base policy and its allow rules untouched.
B. Modify the base policy's allow rules directly to include App1's signing certificate, and redeploy the updated base policy to all 40 servers.
C. Disable WDAC enforcement entirely on the six pilot servers so App1 can run unsigned if the vendor ever changes certificates.
D. Add a file path exception for App1's installation directory to the base policy on all 40 servers, bypassing signature validation everywhere.

Question#2

Your network contains an Active Directory Domain Services (AD DS) domain.
The domain contains a member server named DNS1 that has the DNS Server role installed and PowerShell remoting enabled. The domain contains a group named DNS Operators.
The members of DNS Operators perform routine DNS tasks on DNS1 by using PowerShell. The DNS Operators members are NOT local administrators on DNS1.
You need to configure remote management for DNS Operators. The solution must meet the following requirements:
Enable access to DNS1 by using non-admin domain accounts.
Allow only the required DNS commands to run on DNS1.
Prevent adding DNS Operators to privileged groups.
What should you implement?

A. resource-based Kerberos constrained delegation for the computer account of DNS1
B. Cred SSP for PowerShell remoting on the client computers and DNS1
C. a Just Enough Administration (JEA) endpoint that uses a role capability and a virtual account
D. a standard PowerShell session configuration that uses a domain RunAsCredential

Question#3

You have a virtual machine named SRV1 that runs Windows Server and receives updates from a Windows Server Update Services (WSUS) server named WSUS1.
SRV1 is configured by Group Policy to scan WSUS1 for updates. SRV1 is in a computer group named Group1 that contains other servers.
SRV1 fails every update scan and logs the following entry in WindowsUpdate.log.
WS error: <detail><ErrorCode>InvalidParameters</ErrorCode><Message>parameters.InstalledNonleafUpdateIDs</Message> <Method>http://www.microsoft.com/SoftwareDistribution/S *FaiLED* [80244007] SyncUpdates_withRecovery failed
The other servers in Group1 scan successfully.
You need to restore update scanning for SRV1. The existing update approvals and computer group membership must remain unchanged.
What should you do?

A. Edit the ClientWebService web.config file on WSUS1, and then run IISReset.
B. Decline superseded updates on WSUS1.
C. Run wuauclt /resetauthorization on SRV1.
D. Reset the WSUS client configuration registry values for SRV1.

Question#4

HOTSPOT

Overview
Contoso, Ltd. is a company that has a main office in Seattle and two branch offices in Los Angeles and Montreal.

Existing Environment
AD DS Environment
The network contains an on-premises Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains two domains named contoso.com and canada.contoso.com.

The forest contains the domain controllers shown in the following table.



All the domain controllers are global catalog servers.

Server Infrastructure
The network contains the servers shown in the following table.



A server named Server4 runs Windows Server and is in a workgroup. Windows Defender Firewall on Server4 uses the private profile.
Server2 hosts three virtual machines named VM1, VM2, and VM3.

VM3 is a file server that stores data in the volumes shown in the following table.




Group Policies
The contoso.com domain has the Group Policies Objects (GPOs) shown in the following table.




Existing Identities
The forest contains the users shown in the following table.




The forest contains the groups shown in the following table.




Current Problems
When an administrator signs in to the console of VM2 by using Virtual Machine Connection, and then disconnects from the
session without signing out, another administrator can connect to the console session as the currently signed-in user.

Requirements
Technical Requirements
Contoso identifies the following technical requirements:
- Change the replication schedule for all site links to 30 minutes.
- Promote Server1 to a domain controller in canada.contoso.com.
- Install and authorize Server3 as a DHCP server.
- Ensure that User1 can manage the membership of all the groups in Contoso\OU3.
- Ensure that you can manage Server4 from Server1 by using PowerShell remoting.
- Ensure that you can run virtual machines on VM1.
- Force users to provide credentials when they connect to VM2.
- On VM3, enable Data Deduplication on all volumes that support the feature.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.


A. 

Question#5

You have a file server named Server1 running Windows Server that hosts file shares. You need to enable SMB access to the shares from the internet without deploying a VPN, while ensuring inbound TCP 445 stays blocked from the internet.
What should you configure?

A. SMB over QUIC
B. SMB Multichannel
C. SMB Encryption
D. SMB Direct

Disclaimer

This page is for educational and exam preparation reference only. It is not affiliated with Microsoft, Microsoft Certified: Windows Server Administrator Associate, or the official exam provider. Candidates should refer to official documentation and training for authoritative information.

Exam Code: AZ-802Q & A:  181  Q&As Updated:  2026-11-11

  Access Additional AZ-802 Practice Resources