Comfortable purchasing, instant delivery: TestPassKing emails the complete Microsoft Administering Windows Server package, AZ-802 practice questions included, about a minute after payment, and heartfelt service continues long after.
Microsoft AZ-802 Exam Overview:
| Certification Vendor: | Microsoft |
|---|---|
| Exam Name: | Administering Windows Server Hybrid Core Infrastructure (Updated Exam) |
| Exam Number: | AZ-802 |
| Exam Price: | Varies by country/region (typically ~USD $165 equivalent) |
| Exam Format: | Case studies, Drag and drop, Scenario-based questions, Multiple choice |
| Certificate Validity Period: | Typically 1 year renewable via Microsoft Learn renewal assessment |
| Available Languages: | Chinese (Simplified), French, Portuguese (Brazil), English, Japanese, German, Spanish |
| Related Certifications: | Windows Server Hybrid Administrator Associate Windows Server Administrator Associate |
| Passing Score: | 700 (expected, consistent with AZ-800/AZ-801) |
| Recommended Training: | Windows Server Hybrid Administrator learning path (Microsoft Learn) |
| Exam Registration: | Pearson VUE Microsoft Exams Microsoft Certification Dashboard |
| Sample Questions: | ![]() |
| Exam Way: | Proctored online or test center (Pearson VUE) |
| Pre Condition: | Strong experience with Windows Server administration, Active Directory, and basic Azure administration recommended |
| Official Syllabus URL: | https://learn.microsoft.com/en-us/credentials/certifications/ |
Microsoft AZ-802 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Topic 1: Hybrid infrastructure management | - Monitoring and update management
|
| Topic 2: Secure and manage Windows Server environments | - Identity and access management
|
| Topic 3: Compute, storage, and virtualization | - Virtual machines and containers
|
| Topic 4: Networking and high availability | - Networking infrastructure
|
AZ-802 (Microsoft) Exam: Questions, Answered Honestly
Microsoft Administering Windows Server is an official Microsoft exam, catalogued under exam code AZ-802. Passing it awards the Microsoft Certified: Windows Server Administrator Associate (planned successor to Windows Server Hybrid Administrator Associate) certification at the Associate level. It also connects with Windows Server Hybrid Administrator Associate, Windows Server Administrator Associate. It is built for candidates with ambitious aims, and the credential it grants is recognized accordingly.
Microsoft Administering Windows Server spans 4 official domains, led by Compute, storage, and virtualization, Secure and manage Windows Server environments, and Networking and high availability. The complete outline sits above; before getting down to business, look through the whole contents quickly so every later practice session has context.
Passing Microsoft Administering Windows Server requires 700 (expected, consistent with AZ-800/AZ-801), and official registration costs Varies by country/region (typically ~USD $165 equivalent). Retakes bill the full Varies by country/region (typically ~USD $165 equivalent) again, so verify readiness before booking: when your TestPassKing practice scores clear the requirement repeatedly, including on questions you once marked as difficult, you are ready.
Strong experience with Windows Server administration, Active Directory, and basic Azure administration recommended
Requirements change from time to time, so confirm the current conditions before registering on the official exam page.
Microsoft Administering Windows Server registration is handled through the official channels below.
When you schedule, note that the exam is delivered Proctored online or test center (Pearson VUE).
Microsoft recommends the following training for Microsoft Administering Windows Server candidates.
Combine any training with the 512 practice questions in the TestPassKing AZ-802 package; one or two focused days of repeated practice after a course is often what locks the knowledge in.
Yes, a free demo of the Microsoft Administering Windows Server questions is available before purchase. Afterward, you can track freshness by the updating version number on the website, and whenever questions change we instantly email the details to you, free for 365 days. We even keep sending the latest questions after you pass, so you can follow every tiny change. After expiry, extending updates costs 50% of the regular price.
Your purchase carries a 100% money-back guarantee under clear conditions. Take the Microsoft Administering Windows Server exam within 60 days of purchase; if you fail, you may claim a full refund, provided the exam matches your product. Attempts within 3 days of purchase are ineligible, as are downloaded-but-unused products, free materials, and expired orders; the candidate name must match the payer name. Submit a scanned enrollment slip and the official Score Report PDF within 2 days of the exam, and claims are processed within 7 days. Alternatively, exchange for two other exam products of equal value, free, keeping the update service on your original purchase.
Delivery is instant: download after ordering, with an automatic email arriving within one minute. If nothing arrives within 2 hours, do not forget to check your junk mailbox, then contact customer service. Installation is unlimited across your computers.
Microsoft Administering Windows Server Sample Questions:
You have an Azure subscription. The subscription contains a Microsoft Sentinel workspace named Workspace1 and 100 virtual machines that run Windows Server. You configure Workspace1 to collect logs from the virtual machines. You need to query the collected logs for failed logon events. Which table should you query?
- A. SigninLogs
- B. AuditLogs
- C. SecurityIncident
- D. SecurityEvent
Correct Answer: D 🗳️
Explanation: Only visible for TestPassKing members. You can sign-up / login (it's free).
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two Windows Server Failover Cluster (WSFC) instances named Cluster1 and Cluster2. Cluster1 hosts Hyper-V virtual machines. Cluster2 does NOT have any high availability roles configured. You need to create a Storage Spaces Direct cluster in Cluster2 that will store the virtual machine hard disk files for Cluster1.
Which role should you configure for Cluster2?
- A. File Server
- B. Hyper-V Replica Broker
- C. Virtual Machine
- D. SCSI Target Server
Correct Answer: A 🗳️
Explanation: Only visible for TestPassKing members. You can sign-up / login (it's free).
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two domain controllers named DC1 and DC2.
Active Directory Recycle Bin is disabled.
You discover that an organizational unit (OU) named Finance and its child objects were deleted from DC1.
The deletion replicated to DC2. DC1 has a system state backup from before the deletion. Changes to other AD DS objects were made after the backup.
You need to recover only the Finance OU and its child objects. The solution must ensure that the recovered objects replicate to DC2, and the unrelated AD DS changes are preserved.
What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:

Explanation:
Startup mode for DC1: Directory Services Restore Mode (DSRM). Recovery method: Authoritative subtree restore.
With the Recycle Bin disabled, deleted objects cannot be restored by simply reanimating tombstones, so recovering the Finance OU and its child objects requires restoring them from the pre-deletion system state backup and then forcing that restored data to overwrite the (now-deleted) copies on every other domain controller, which is precisely what an authoritative restore does. Performing any restore of the AD DS database, whether authoritative or non-authoritative, requires the domain controller to be started in Directory Services Restore Mode (DSRM), a special boot mode in which the AD DS database service is offline and can be safely restored from backup instead of running as an active, replicating directory service; Safe Mode with Networking and WinRE do not provide the isolated, non-replicating access to the NTDS database that a restore operation needs. After booting DC1 into DSRM and restoring the system state backup, running an authoritative subtree restore scoped specifically to the Finance OU (using ntdsutil ' s authoritative restore command against that subtree) increments the version numbers only on the objects under Finance so that DC1
' s restored copies are treated as more current and replicate out to DC2, overwriting the deleted state there, while every other object in the directory retains its current, already-replicated version numbers and is left untouched, preserving the unrelated changes made after the backup. A full non-authoritative restore or an AD DS snapshot export would either overwrite unrelated data or fail to force replication of the recovered objects outward.
You have two Azure virtual networks named Vnet1 and Vnet2. You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN. You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit; Vnet2 uses the remote gateway. You discover that Client1 cannot communicate with Vnet2. You need to ensure that Client1 can communicate with Vnet2. Solution: You enable BGP on the gateway of Vnet1. Does this meet the goal?
- A. Yes
- B. No
Correct Answer: B 🗳️
Explanation: Only visible for TestPassKing members. You can sign-up / login (it's free).
Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a child domain named east.contoso.com and the servers shown in the following exhibit: DC1 (contoso.com, holds schema master/infrastructure master/domain naming master), DC2 (east.contoso.com, holds PDC emulator/RID master, is a global catalog server), Server1 (contoso.com, File Server/DFS Namespaces/DFS Replication roles - a member server, not a domain controller). You need to create a folder for the Central Store to manage Group Policy template files for the entire forest. What should you name the folder, and on which server should you create the folder? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
DC1 (contoso.com: schema/infra/domain-naming master) / DC2 (east.contoso.com: PDC+RID master, GC) / Server1 (contoso.com, member server: File Server/DFS Namespaces/DFSR).
Correct Answer:

Explanation:
< Name: PolicyDefinitions ; Server: DC1 and DC2 only
The Group Policy Central Store is a specifically named folder, PolicyDefinitions, that must be created inside the SYSVOL share of a domain, at the path \\ < domain > \SYSVOL\ < domain > \Policies\PolicyDefinitions; Microsoft ' s Group Policy tooling looks for that exact folder name and will not recognize a differently named folder such as CentralDefinitions or TemplateDefinitions as a Central Store. Because SYSVOL only exists on domain controllers (it is replicated between DCs of a domain via DFS Replication), the folder can only be created on a machine that is a domain controller; Server1 is a plain member server hosting the File Server, DFS Namespaces, and DFS Replication roles, and has no SYSVOL share at all, so it cannot host the Central Store regardless of what other roles it runs. Critically, the Central Store is a per-domain construct: creating it inside contoso.com ' s SYSVOL (which DC1 hosts and which replicates to every DC in that domain) only benefits GPO editing sessions connected to contoso.com, and it has no effect on GPO editing in the separate child domain, east.contoso.com. To have Central Store coverage across the entire forest - meaning correctly working ADMX template resolution when administrators edit GPOs in either domain - a PolicyDefinitions folder must be created in the SYSVOL of both contoso.com (via DC1) and east.contoso.com (via DC2), which is why DC1 and DC2 together, not Server1 and not either domain controller alone, is the correct answer.




