Microsoft - AZ-801: Configuring Windows Server Hybrid Advanced Services

Sample Questions

Explanation:

Storage Migration Service makes it easier to migrate storage to Windows Server or to Azure. It provides a graphical tool that inventories data on Windows, Linux, and NetApp CIFS servers and then transfers the data to newer servers or to Azure virtual machines. Storage Migration Service also provides the option to transfer the identity of a server to the destination server so that apps and users can access their data without changing links or paths.

Migration is a three-step process:

1. Inventory servers to gather info about their files and configuration, shown in the following figure.

2. Transfer (copy) data from the source servers to the destination servers.

3. Cut over to the new servers (optional).
   The destination servers assume the source servers' former identities so that apps and users don't have to change anything.
   The source servers enter a maintenance state where they still contain the same files they always have (we never remove files from the source servers) but are unavailable to users and apps. You can then decommission the servers at your convenience.

Requirements

To use Storage Migration Service, you need the following items:

• A source server or failover cluster to migrate files and data from.
• A destination server running Windows Server 2019 or later (clustered or standalone) to migrate to. While Windows Server 2016 is also supported, it may be more difficult to migrate to and its support will end in January 2027.
• An orchestrator server running Windows Server 2019 or later to manage the migration.This orchestrator is the server that you install Storage Migration Service on and use to manage the migration. If you're migrating only one server, you can use the destination as the orchestrator. If you're migrating several servers, use a separate orchestrator server.
• A PC or server running the latest Windows Admin Center to run the Storage Migration Service user interface, along with the latest Storage Migration Service tool (extension) available from the feed.

References:

Storage Migration Service overview

Use Storage Migration Service to migrate a server

Explanation:

Functional levels determine the available Active Directory Domain Services (AD DS) domain or forest capabilities. They also determine which Windows Server operating systems you can run on domain controllers in the domain or forest. However, functional levels don't affect which operating systems you can run on workstations and member servers joined to the domain or forest.

The following interoperability matrix summarizes which Windows Server versions you can run as domain controllers for each currently supported AD DS forest and domain functional level.

First, we should raise the domain functional level of contoso.com to Windows Server 2016. Then, we should raise the forest functional level to Windows Server 2016.

Reference: Active Directory Domain Services functional levels

Explanation:

When an organization undergoes restructuring, be it a merger or an acquisition, it can be costly to maintain two separate Active Directory (AD) infrastructures. IT administrators are tasked with migrating objects from one Active Directory Domain Services (AD DS) environment to another to enable the sharing of resources. However, migrating an AD environment is one of the most complex tasks an IT administrator can face—and the Active Directory Migration Tool (ADMT) has been the standard utility provided by Microsoft to facilitate this process.

What is the ADMT?

The ADMT is a free utility released by Microsoft that allows administrators to migrate users, groups, and computers between two AD domains. It is primarily used for:

• Interforest migration: Moving objects between different AD forests.
• Intraforest migration: Moving objects between domains within the same forest.

Migrating passwords is the trickiest part of using ADMT because it requires the Password Export Server (PES). By default, ADMT does not migrate passwords; it generates new complex passwords for users. To successfully migrate user passwords from the source domain to the target domain, the PES must be installed on the DC in the source domain.

References:

Active Directory Migration Tool (ADMT)

Active Directory Migration Tool version 3.2

Explanation:

A new forest/domain that was built by using domain controllers that run Windows Server 2025 uses the Windows Server 2016 functional level.

The following interoperability matrix summarizes which Windows Server versions you can run as domain controllers for each currently supported AD DS forest and domain functional level.

Reference: Active Directory Domain Services functional levels

Explanation:

The Windows Firewall solution for Microsoft Sentinel allows you to ingest Windows Firewall Events into Microsoft Sentinel using the Log Analytics agent for Windows.

Installing this solution will deploy two data connectors,

1. Windows Firewall Events via AMA - This data connector helps in ingesting Windows Firewall Events into your Log Analytics Workspace using the new Azure Monitor Agent. Microsoft recommends using this Data Connector
2. Windows Firewall - This solution installs the data connector to ingest Windows Firewall events using the Windows Firewall solution for Azure. After installing the solution, configure and enable this data connector by following guidance in Manage solution view.

NOTE: Microsoft recommends Installation of Windows Firewall via AMA. Legacy connector uses the Log Analytics agent which were deprecated on Aug 31, 2024, and thus should only be installed where AMA is not supported.

To collect events from any system that is not an Azure virtual machine (Server1), the system must have Azure Arc installed and enabled before you enable the Azure Monitor Agent-based connector.

This includes:

• Windows servers installed on physical machines
• Windows servers installed on on-premises virtual machines
• Windows servers installed on virtual machines in non-Azure clouds

References:

Windows Firewall

Connect Microsoft Sentinel to other Microsoft services with a Windows agent-based data connector