Certification guide
AZ-801Windows Server Hybrid Administrator (Advanced Services): the honest guide
AZ-801 is the second of the two exams behind Microsoft Certified: Windows Server Hybrid Administrator Associate, and it is the one about what happens when things go wrong. Securing Windows Server on-premises and in hybrid infrastructures is the largest area at 25 to 30 percent, migrating servers and workloads is 20 to 25 percent, and high availability, disaster recovery, monitoring and troubleshooting fill the rest.
It assumes AZ-800 rather than repeating it. The two exams share one audience profile, which asks for several years of experience with Windows Server operating systems, and AZ-801 takes the domain controllers, virtual machines, networking and storage that AZ-800 examines as the ground it builds on. A passing score is 700 or greater on Microsoft's 1 to 1,000 scale.
Both exams retire on 30 September 2026 at 5:00 PM Central Standard Time. Microsoft's certification page says that once they retire they will be removed and AZ-802 will remain as the available path to earn this certification, and its exam pages say to complete an exam before the retirement date to ensure it is applied toward your certification. The English version of AZ-801 was last updated on 6 October 2025.
Who Windows Server Hybrid Advanced is for
A good fit if
- You have passed AZ-800, or you could pass it today, and you want to finish the certification.
- Failover clustering, Storage Spaces Direct, backup and site recovery are things you run rather than things you have read about.
- Your organization is moving Windows Server workloads into Azure and you own the migration.
- You want the credential that names hardening, patching and recovery on Windows Server rather than a general cloud exam.
Probably not, if
- You have not done the AZ-800 material. This exam does not teach Active Directory, Hyper-V, hybrid networking or storage; it assumes all four and asks harder questions on top of them.
- You want a security operations credential. AZ-801 covers hardening, Defender for Identity and Defender for Cloud as an administrator uses them, not investigation and response. SC-200 is that exam.
- You cannot sit it before 30 September 2026. After that date Microsoft names AZ-802 as the path to the certification, and studying an outline that no longer has an exam behind it is time spent for nothing.
Is Windows Server Hybrid Advanced worth it?
If you already hold AZ-800, yes, and quickly. The certification only exists once both halves are done, and the second exam is the cheaper one to prepare for because the shared background is already paid for.
As a first exam, no. AZ-801 assumes the whole AZ-800 syllabus, and the migration and clustering objectives are examined against an infrastructure the other exam describes. Reversing the order costs a sitting and teaches nothing you could not have learned in the right sequence.
The content is worth more than the exam code's remaining life. Failover clustering, Storage Replica, Azure Site Recovery, Azure Backup, Storage Migration Service and Azure Migrate are the recovery and migration tooling a Windows estate actually uses. Worth knowing which way this cuts: the skill areas Microsoft lists for AZ-802 name securing Windows Server, and monitoring and troubleshooting, and do not name high availability, disaster recovery or migration. This is the exam that examines those three, and its replacement does not list them.
What the exam actually asks you to do
Multiple choice and multiple response, plus drag-and-drop ordering, hot area items where you click a region of a screenshot, and case studies that hold one scenario across several linked questions.
Item formats
- Multiple choice
- Multiple response
- Drag and drop
- Hot area
- Case study
The highlighted formats are the ones you cannot answer from memory alone. Microsoft Learn, exam duration and question types ↗
Domain breakdown and official weightings
From the official Microsoft Learn study guides. Secure Windows Server on-premises and hybrid infrastructures is the heaviest domain at 28 percent, followed by Migrate servers and workloads at 23 percent.
- Secure Windows Server on-premises and hybrid infrastructures28%
- Implement and manage Windows Server high availability18%
- Implement disaster recovery13%
- Migrate servers and workloads23%
- Monitor and troubleshoot Windows Server environments18%
Study plans by experience level
Straight after passing AZ-800
3 to 4 weeksat 8 hours
- 1Week 1: build a two node failover cluster on evaluation media, with a witness, and fail a role over on purpose. This is the objective least amenable to reading and the one most likely to be new.
- 2Week 2: disaster recovery in Azure. Azure Site Recovery for a virtual machine, Azure Backup for a server, and Windows Server Backup for the on-premises half, all inside one concentrated block on the subscription.
- 3Week 3: migration, at 20 to 25 percent of the exam. Storage Migration Service end to end, then Azure Migrate against a lab server, then the AD DS considerations that make a migration harder than a copy.
- 4Week 4: the security area, which is the largest at 25 to 30 percent, then the free practice assessment and a timed form.
Windows Server administrator who has not sat AZ-800
10 to 12 weeksat 8 hours
- 1Weeks 1 to 5: the AZ-800 material first, because AZ-801 assumes it. Sit that exam before continuing rather than carrying two syllabuses at once.
- 2Weeks 6 to 7: securing Windows Server, on-premises and hybrid. Operating system hardening, Windows Defender Application Control, Microsoft Defender for Identity and Defender for Cloud against servers you have Arc enabled.
- 3Weeks 8 to 9: high availability and disaster recovery, built rather than read. A cluster, Storage Spaces Direct if your lab host allows it, Storage Replica, then Site Recovery and Backup.
- 4Weeks 10 to 11: migration and then monitoring and troubleshooting, which is where Performance Monitor, Event Viewer and Azure Monitor all appear as answers to different questions.
- 5Week 12: the practice assessment and a full length timed form.
Azure engineer whose Windows Server work is recent
8 to 10 weeksat 6 hours
- 1Weeks 1 to 2: the on-premises half of high availability. Failover clustering vocabulary, quorum, witnesses and cluster aware updating are not concepts your Azure work supplies.
- 2Weeks 3 to 4: Windows Server backup and recovery on its own terms, then Azure Backup and Azure Site Recovery, keeping the two clearly separate in your notes.
- 3Weeks 5 to 6: migration. Storage Migration Service, Azure Migrate, and the difference between moving a file server and moving a domain joined application server.
- 4Weeks 7 to 8: securing Windows Server, including patching with Azure Update Manager and the Defender products as an administrator configures them.
- 5Weeks 9 to 10: monitoring and troubleshooting, then the practice assessment and a timed form.
Common mistakes
- Sitting AZ-801 before AZ-800
- The exams are numbered in the order they are meant to be taken. AZ-801 assumes Active Directory, Hyper-V, hybrid networking and storage and examines what you do with them under failure and migration. A candidate who arrives without the AZ-800 ground fails on the assumed material rather than on the advanced services.
- Reading about failover clustering
- Quorum, witnesses, cluster aware updating and the behavior of a role during a planned failover are questions about things you have watched happen. Two nodes on evaluation media cost nothing to build and answer more questions per hour than any chapter does.
- Underestimating migration
- Migrating servers and workloads is 20 to 25 percent of the exam, and it is the area a steady state day job never exercises. Storage Migration Service and Azure Migrate are examined concretely, including what they can and cannot carry, and an administrator who has never run either is guessing on a fifth of the paper.
- Confusing the three recovery products
- Windows Server Backup, Azure Backup and Azure Site Recovery solve overlapping problems and the exam asks which one fits a described requirement. Configuring each once, against the same lab server, is what makes the distinction stick, and it is a single evening.
- Leaving replication running after a lab session
- Site Recovery and Backup keep billing after you close the portal, which is what turns a free account into an unexpected charge on this exam more than on AZ-800. Delete replicated items and the recovery services vault contents at the end of a session, not only the virtual machines.
What comes after passing
With AZ-800 already passed, this completes Microsoft Certified: Windows Server Hybrid Administrator Associate. If AZ-800 is not behind you, book it before 30 September 2026.
The certification lasts one year and renews free through an unproctored, open book assessment on Microsoft Learn during a six month window before expiry, and passing extends it one year from the expiration date.
Where to go next depends on which half of this exam you enjoyed. The security objectives point toward SC-200 and the Azure infrastructure objectives toward AZ-104 and then AZ-305.
The durable knowledge is the recovery model: what a cluster protects against, what a backup protects against, what replication protects against, and which of the three a described failure needs. Product names change around that and the reasoning does not.
Costs across the full renewal cycle are on the Windows Server Hybrid Advanced cost page.
Frequently asked questions
What does AZ-801 add over AZ-800?
The advanced services. Securing Windows Server on-premises and in hybrid infrastructures at 25 to 30 percent, high availability, disaster recovery, migrating servers and workloads at 20 to 25 percent, and monitoring and troubleshooting. AZ-800 covers the core infrastructure those services run on, and AZ-801 assumes it rather than repeating it.
Do I need both exams for the certification?
Yes. Microsoft Certified: Windows Server Hybrid Administrator Associate lists AZ-800 and AZ-801 as required exams, and neither one earns the credential alone. Microsoft's exam pages add that you should complete an exam before its retirement date to ensure it is applied toward your certification.
When does AZ-801 retire and what replaces it?
AZ-801 retires on 30 September 2026 at 5:00 PM Central Standard Time, as does AZ-800. Microsoft's certification page says that once the two exams retire they will be removed and AZ-802 will remain as the available path to earn this certification.
Which domain do administrators underestimate?
Migrating servers and workloads, at 20 to 25 percent. Storage Migration Service, Azure Migrate and moving domain joined workloads are examined concretely, and a day job that runs a steady estate rarely touches any of them. It is the area most worth building in a lab rather than reading about.
What score do I need to pass AZ-801?
The exam page publishes a passing score of 700. Microsoft reports technical exam scores on a scale of 1 to 1,000 and notes that a scaled score may not equal 70 percent of the points. The score report breaks the result down by skill area and does not identify individual questions.
Keep reading
- Windows Server Hybrid Advanced practice questions
Free sample questions with the full explanation on every answer.
- Free Windows Server Hybrid Advanced practice test
10 original questions, playable now. No account, no card.
- Windows Server Hybrid Advanced exam format
How many questions, how long, what the items look like, and how long it stays valid.
- Windows Server Hybrid Advanced passing score
The exact cut score, what kind of number it is, and the retake terms.
- How hard is Windows Server Hybrid Advanced?
An honest difficulty read from the format, the clock and the weights.
- What Windows Server Hybrid Advanced costs
The voucher price, the retake, and what renewal costs across the cycle.
Practice Windows Server Hybrid Advanced for free while you decide
Original questions written from the published objectives, with the concept, the reasoning, and a note on every wrong option. No account needed to start.
Start free Windows Server Hybrid Advanced questions