Career upgrade: Learn practical AI skills for better jobs and higher pay.
Level up
All Practice Exams

100+ Free AZ-802 Windows Server Hybrid Administrator Practice Questions

Pass your Microsoft Certified: Windows Server Hybrid Administrator Associate (Exam AZ-802) exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately
100+ Questions
100% Free
1 / 100
Question 1
Score: 0/0

Which Azure service assesses on-premises servers for readiness, sizing, and cost before migrating them to Azure?

A
B
C
D
to track
2026 Statistics

Key Facts: AZ-802 Windows Server Hybrid Administrator Exam

$165

Exam Fee (USD)

Microsoft

120 min

Exam Duration

Microsoft

700/1000

Passing Score

Microsoft

40-60

Approximate Question Count

Microsoft

Sept 30, 2026

AZ-800/AZ-801 Retirement

Microsoft Learn

June 2026

AZ-802 Beta Start

Microsoft Learn

AZ-802 consolidates the retiring AZ-800 and AZ-801 exams into one Windows Server Hybrid Administrator Associate exam, scheduled to enter beta in June 2026, with AZ-800 and AZ-801 retiring September 30, 2026. The exam costs $165 USD, runs about 120 minutes with roughly 40-60 questions, and requires a score of 700 out of 1000 to pass through Pearson VUE. Its skill union spans AD DS, hybrid management with Azure Arc, Hyper-V and containers, DNS and DHCP networking, server security, high availability, disaster recovery, migration, and monitoring.

Sample AZ-802 Windows Server Hybrid Administrator Practice Questions

Try these sample questions to test your AZ-802 Windows Server Hybrid Administrator exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1Which Active Directory Domain Services role holds the schema master and domain naming master FSMO roles?
A.Every domain controller in the forest
B.One domain controller per forest
C.One domain controller per domain
D.The first read-only domain controller deployed
Explanation: The schema master and domain naming master are forest-wide FSMO roles, so each role exists only once across the entire forest. The other three FSMO roles (RID master, PDC emulator, and infrastructure master) are domain-wide and exist once per domain.
2You need to deploy a domain controller in a branch office with limited physical security and no local IT staff. Which option best reduces risk?
A.Deploy a read-only domain controller (RODC)
B.Deploy a standard writable domain controller with BitLocker disabled
C.Promote a member server to a global catalog only
D.Install Azure AD Connect on the branch server
Explanation: An RODC stores a read-only copy of the directory and, by default, caches no account passwords, limiting exposure if the server is stolen. This makes RODCs ideal for branch offices with weak physical security and no on-site administrators.
3Which tool synchronizes on-premises Active Directory identities to Microsoft Entra ID for a hybrid identity solution?
A.Azure Arc agent
B.Microsoft Entra Connect (Azure AD Connect)
C.Windows Admin Center
D.Azure Migrate appliance
Explanation: Microsoft Entra Connect, formerly Azure AD Connect, synchronizes on-premises AD DS users and groups to Microsoft Entra ID, enabling hybrid identity with options such as password hash sync and pass-through authentication. It is the standard bridge between on-premises directories and the cloud.
4What is the primary purpose of an Active Directory site in AD DS?
A.To define password complexity requirements
B.To represent network topology and optimize replication and authentication traffic
C.To store Group Policy templates
D.To assign FSMO roles automatically
Explanation: AD sites map to physical network locations defined by IP subnets, allowing AD to direct clients to the nearest domain controller and to control replication between well-connected and slow links. Proper site design reduces WAN traffic and speeds authentication.
5Which Group Policy processing behavior applies when a user logs on, overriding conflicting computer settings?
A.Loopback processing in replace mode
B.Block inheritance
C.Security filtering
D.WMI filtering
Explanation: Group Policy loopback processing in replace mode applies the user policies defined in the computer's OU instead of the user's normal user policies, which is common for kiosks and shared computers. Merge mode would combine them, while replace mode discards the user's own GPO user settings.
6You must delegate the ability to reset passwords for users in a single organizational unit without granting broader admin rights. What is the best approach?
A.Add the helpdesk group to Domain Admins
B.Use the Delegation of Control Wizard on that OU
C.Grant the helpdesk group Enterprise Admins
D.Edit the Default Domain Policy
Explanation: The Delegation of Control Wizard assigns specific permissions, such as resetting passwords, scoped to a particular OU. This follows least privilege by avoiding membership in powerful groups like Domain Admins.
7Which command-line tool is used to perform an authoritative restore of an Active Directory object after deletion?
A.dcdiag
B.ntdsutil
C.repadmin
D.dsquery
Explanation: ntdsutil includes the authoritative restore commands used in Directory Services Restore Mode to mark restored objects with a higher version number so they replicate out to other DCs. The AD Recycle Bin is the modern preferred method, but ntdsutil remains the classic authoritative restore tool.
8What does the AD Recycle Bin feature provide when enabled?
A.Automatic offsite backup of the NTDS.dit file
B.Recovery of deleted objects with their attributes intact without a system state restore
C.Encryption of all directory attributes at rest
D.Replication compression across site links
Explanation: The AD Recycle Bin preserves deleted objects in a recoverable state, retaining link-valued and non-link-valued attributes so they can be restored without rebooting into DSRM. Once enabled it cannot be disabled, and it requires the forest functional level to support it.
9Which trust type would you create to allow users in a separate forest to access resources in your forest, with selective authentication?
A.External trust
B.Forest trust
C.Shortcut trust
D.Realm trust
Explanation: A forest trust links two entire AD forests and supports selective authentication, letting administrators control which users can authenticate to specific resources. External trusts link individual domains, while shortcut and realm trusts serve other scenarios.
10Which functional level setting determines which Active Directory features are available forest-wide and is constrained by the oldest DC operating system in the forest?
A.Domain functional level
B.Forest functional level
C.Site link cost
D.Schema version
Explanation: The forest functional level controls forest-wide AD features and cannot be raised higher than the lowest domain functional level, which in turn is limited by the oldest domain controller OS. Raising it unlocks features such as forest trusts and the AD Recycle Bin.

About the AZ-802 Windows Server Hybrid Administrator Exam

AZ-802 is the consolidated Windows Server Hybrid Administrator Associate exam that combines the skills previously split across AZ-800 (Administering Windows Server Hybrid Core Infrastructure) and AZ-801 (Configuring Windows Server Hybrid Advanced Services). It validates the ability to deploy and manage Active Directory Domain Services, manage hybrid servers with Azure Arc and Azure Automation, run Hyper-V and containers, configure on-premises and hybrid networking, secure Windows Server, implement high availability and disaster recovery, and migrate, monitor, and troubleshoot workloads.

Questions

50 scored questions

Time Limit

120 minutes

Passing Score

700/1000

Exam Fee

$165 (Microsoft)

AZ-802 Windows Server Hybrid Administrator Exam Content Outline

16%

Deploy and manage Active Directory Domain Services

Deploy domain controllers on-premises and in Azure, manage AD objects, Group Policy, FSMO roles, trusts, sites, replication, and hybrid identity with Microsoft Entra Connect.

8%

Manage Windows Servers and workloads in a hybrid environment

Use Azure Arc, Azure Automation, Windows Admin Center, Azure Policy, Update Manager, and Extended Security Updates to govern hybrid servers at scale.

8%

Manage virtual machines and containers

Configure Hyper-V VM generations, virtual disks, checkpoints, live migration, shielded VMs, virtual networking, and Windows containers.

9%

Implement and manage on-premises and hybrid networking

Manage DNS, DNSSEC, DHCP scopes and failover, conditional forwarders, and hybrid connectivity through site-to-site VPN and ExpressRoute.

9%

Manage storage and file services

Configure Storage Spaces, ReFS, iSCSI, DFS, FSRM, Data Deduplication, BranchCache, and Azure File Sync cloud tiering.

13%

Secure Windows Server on-premises and hybrid

Harden servers with WDAC, Credential Guard, BitLocker, baselines, gMSAs, Protected Users, Defender for Identity, and Defender for Cloud.

7%

Implement and manage high availability

Configure failover clustering, quorum and cloud witness, Storage Spaces Direct, Scale-Out File Server, NLB, and guest clustering.

8%

Implement disaster recovery

Implement Azure Site Recovery, Hyper-V Replica, Storage Replica, Azure Backup, and Windows Server Backup to meet RPO and RTO targets.

7%

Migrate servers and workloads

Use Azure Migrate, Storage Migration Service, ADMT, and SID history to migrate servers, shares, AD objects, and workloads to Azure or new servers.

15%

Monitor and troubleshoot Windows Server environments

Monitor with Azure Monitor, Log Analytics, and Performance Monitor, and troubleshoot AD replication, networking, clustering, and hybrid services.

How to Pass the AZ-802 Windows Server Hybrid Administrator Exam

What You Need to Know

  • Passing score: 700/1000
  • Exam length: 50 questions
  • Time limit: 120 minutes
  • Exam fee: $165

Keys to Passing

  • Complete 500+ practice questions
  • Score 80%+ consistently before scheduling
  • Focus on highest-weighted sections
  • Use our AI tutor for tough concepts

AZ-802 Windows Server Hybrid Administrator Study Tips from Top Performers

1Treat AZ-802 as the combined AZ-800 plus AZ-801 blueprint: study both official study guides side by side until the consolidated AZ-802 study guide is published.
2Spend the most time on Active Directory Domain Services and on monitoring and troubleshooting, since those carry the largest combined weight in the union of the two source exams.
3Practice hybrid management hands-on: onboard a server with Azure Arc, run an Azure Automation runbook, and explore Windows Admin Center and Azure Update Manager.
4Build a small failover cluster lab and configure a cloud witness, Storage Spaces Direct, and Cluster-Aware Updating to internalize high availability concepts.
5Map every disaster recovery option to RPO and RTO: Azure Site Recovery, Hyper-V Replica, Storage Replica, and Azure Backup each fit different recovery targets.
6Drill security topics such as Credential Guard, WDAC, gMSAs, Protected Users, and Microsoft Defender for Identity, because the secure Windows Server domain is heavily weighted.

Frequently Asked Questions

What is Exam AZ-802 and why does it replace AZ-800 and AZ-801?

AZ-802 is the consolidated Windows Server Hybrid Administrator Associate exam that merges the skills from AZ-800 (core hybrid infrastructure) and AZ-801 (advanced hybrid services) into a single exam. Microsoft is consolidating the two exams into AZ-802, which enters beta in June 2026, and AZ-800 and AZ-801 are scheduled to retire on September 30, 2026.

How much does the AZ-802 exam cost and how long is it?

The AZ-802 exam costs $165 USD in the United States and runs for about 120 minutes. Like other Microsoft role-based exams, it typically includes roughly 40 to 60 questions across multiple-choice, multiple-response, and scenario formats.

What score do I need to pass AZ-802?

Microsoft role-based exams, including AZ-802, use a scaled scoring model where you need 700 out of 1000 to pass. The 700 score is not a raw percentage of questions correct; it is a scaled value across the exam.

What skills does AZ-802 measure?

AZ-802 covers the union of the AZ-800 and AZ-801 skills: deploying and managing AD DS, managing hybrid servers with Azure Arc and Automation, Hyper-V and containers, on-premises and hybrid networking, securing Windows Server, high availability, disaster recovery, migration, and monitoring and troubleshooting.

Do I need to pass two exams to earn the certification?

No. Once AZ-802 is generally available, passing the single AZ-802 exam earns the Windows Server Hybrid Administrator Associate certification, replacing the previous requirement to pass both AZ-800 and AZ-801.

Where is AZ-802 delivered and how long is the certification valid?

AZ-802 is delivered through Pearson VUE, with online proctored and test-center options. The associate certification is valid for one year and can be renewed for free through an online assessment on Microsoft Learn before it expires.