Skip to main content Link Menu Expand (external link) Document Search Copy Copied

Training Contents 2024

Training content for 2024

Table of contents

  1. Learning Path 1: Secure Windows Server on-premises and hybrid infrastructures (Windows Server security)
  2. Learning Path 2: Secure Windows Server on-premises and Hybrid Infrastructures (Implementing Security Solutions in Hybrid Scenarios)
  3. Learning Path 3: Implementing Windows Server high Availability
  4. Learning Path 4: Implement Disaster Recovery in Windows Server on-premises and Hybrid Environments (Disaster Recovery in Windows Server)
  5. Learning Path 5: Implement Disaster Recovery in Windows Server on-premises and Hybrid Environments (Implementing Disaster Recovery Services in Hybrid Scenarios)
  6. Learning Path 6: Migrate Servers and Workloads in on-premises and Hybrid Environments (Upgrade and migrate in Windows Server)
  7. Learning Path 7: Migrate Servers and Workloads in on-premises and Hybrid Environments (Implementing migration in hybrid scenarios)
  8. Learning Path 8: Monitor and Troubleshoot Windows Server Environment (Server and performance monitoring in Windows Server)
  9. Learning Path 9: Monitor and troubleshoot Windows Server environment (Implementing operational monitoring in hybrid scenarios)




Learning Path 1: Secure Windows Server on-premises and hybrid infrastructures (Windows Server security)

This Learning Path consists of Modules that focus on securing Windows Server in an on-premises context.

Module Units
Secure Windows Server user accounts - Configure user account rights
- Protect user accounts
- Describe Microsoft Defender Credential Guard
- Block NTLM authentication
- Locate problematic accounts
Hardening Windows Server - Configure user account rights
- Protect user accounts
- Describe Microsoft Defender Credential Guard
- Block NTLM authentication
- Locate problematic accounts
Windows Server update management - Explore Windows Update
- Outline Windows Server Update Services server deployment options
- Define Windows Server Update Services update management process
- Describe the process of Update Management
Secure Windows Server DNS - Implement split-horizon DNS
- Create DNS policies
- Implement DNS policies
- Secure Windows Server DNS
- Implement DNSSEC


Lab Lab answer key Exercise
Lab 1 – Configuring security in Windows Server Lab 1 answer key - Exercise 1: Configuring Windows Defender Credential Guard
- Exercise 2: Locating problematic accounts
- Exercise 3: Implementing LAPS


Learning Path 2: Secure Windows Server on-premises and Hybrid Infrastructures (Implementing Security Solutions in Hybrid Scenarios)

This Learning Path consists of Modules that focus on implementing security solutions in hybrid scenarios.

Module Units
Implement Windows Server IaaS VM network security - Implement network security groups
- Security rules for network security groups
- Application security groups
- Implement adaptive network hardening
- Implement Azure Firewall and Windows IaaS VMs
- Choose the appropriate filtering solution
- Capture network traffic with network watcher
Audit the security of Windows Server IaaS Virtual Machines - Describe Microsoft Defender for Cloud
- Enable Microsoft Defender for Cloud in hybrid environments
- Audit your VM’s regulatory compliance
- Implement and assess security policies
- What is Microsoft Sentinel?
- Implement SIEM and SOAR solutions in Microsoft Sentinel
Manage Azure updates - Describe Azure updates
- Enable Update Management
- Deploy updates
- Review an update assessment
- Manage updates for your Azure VMs
Create and implement application allowlists with adaptive application control - Describe adaptive application control
- Enable Update Management
- Configure a new application control policy
- Move a VM from one group to another
Configure BitLocker disk encryption for Windows IaaS Virtual Machines - Describe Azure Disk Encryption and server-side encryption
- Configure Key Vault for Azure Disk Encryption
- Encrypt Azure IaaS Virtual Machine hard disks
- Back up your Azure Disk Encryption–protected VMs
- Restore your Azure Disk Encryption–protected VMs
- Decrypt a disk
Implement change tracking and file integrity monitoring for Windows IaaS VMs - Implement Change Tracking and Inventory
- Requirements for Change Tracking and Inventory
- Enable Change Tracking and Inventory
- Manage Change Tracking and Inventory
- Manage tracked files
- Implement File Integrity Monitoring
- Configure File Integrity Monitoring


Lab Lab answer key Exercise
Lab 2: Implementing Security Solutions in Hybrid Scenarios Lab 2 answer key - Exercise 1: Creating an Azure Log Analytics workspace and an Azure Automation account
- Exercise 2: Configuring Microsoft Defender for Cloud
- Exercise 3: Provisioning Azure VMs running Windows Server
- Exercise 4: Onboarding on-premises Windows Server into Microsoft Defender for Cloud and Azure Automation
- Exercise 5: Verifying the hybrid capabilities of Microsoft Defender for Cloud and Azure Automation solutions
- Exercise 6: Deprovisioning the Azure environment


Learning Path 3: Implementing Windows Server high Availability

This Learning Path consists of Modules that focus mainly on implementing high availability solutions in Windows Server.

Module Units
Introduction to Cluster Shared Volumes - Determine the functionality of Cluster Shared Volumes
- Cluster Shared Volumes architecture
- Implement Cluster Shared Volumes
Implement Windows Server failover clustering - Overview of failover clustering
- Define Windows Server failover clustering
- Plan Windows Server failover clustering
- Manage Windows Server failover clustering
- Overview of Storage Replica
- Implement stretch clusters
- Define cluster sets
Implement high availability of Windows Server VMs - Select high availability options for Hyper-V
- Consider network load balancing for Hyper-V VMs
- Implement Hyper-V VM live migration
- Implement Hyper-V VMs storage migration
Implement scale and high availability with Windows Server VM - Describe virtual machine scale sets
- Implement scaling
- Configuring custom autoscale
- Implement load-balancing VMs
- Describe Azure Site Recovery
- Implement Azure Site Recovery
Implement Windows Server File Server high availability - Explore the Windows Server File Server high-availability options
- Storage Replica
- Review Cluster Shared Volumes
- Implement Scale-Out File Server
- Implement Storage Replica


Lab Lab answer key Exercise
Lab 3: Implementing failover clustering Lab 3 answer key - Exercise 1: Configuring iSCSI storage
- Exercise 2: Configuring a failover cluster
- Exercise 3: Deploying and configuring a highly available file server
- Exercise 4: Validating the deployment of the highly available file server


Learning Path 4: Implement Disaster Recovery in Windows Server on-premises and Hybrid Environments (Disaster Recovery in Windows Server)

This Learning Path consists of Modules that focus on implementing disaster recovery solutions in Windows Server scenarios.

Module Units
Implement Hyper-V Replica - Define Hyper-V Replica
- Plan for Hyper-V Replica
- Configure and implement Hyper-V Replica
- Define extended replication
- Define Azure Site Recovery
- Implement Site Recovery from on-premises site to Azure
- Implement Site Recovery from on-premises site to on-premises site
Protect your on-premises infrastructure from disasters with Azure Site Recovery - Azure Site Recovery overview
- Workloads supported for protection with Azure Site Recovery
- Run a disaster recovery drill
- Failover and failback


Lab Lab answer key Exercise
Lab 4: Implementing Hyper-V Replica and Windows Server Backup Lab 4 answer key - Exercise 1: Implementing Hyper-V Replica
- Exercise 2: Implementing backup and restore with Windows Server Backup


Learning Path 5: Implement Disaster Recovery in Windows Server on-premises and Hybrid Environments (Implementing Disaster Recovery Services in Hybrid Scenarios)

This Learning Path consists of Modules that focus on implementing disaster recovery solutions in hybrid scenarios.

Lab Lab answer key Exercise
Implement hybrid backup and recovery with Windows Server IaaS - Describe Azure Backup
- Implement recovery vaults
- Implement Azure Backup policies
- Recover Windows IaaS Virtual Machines
- Perform file and folder recovery
- Perform backup and restore of on-premises workloads
 
Protect your Azure infrastructure with Azure Site Recovery - What is Azure Site Recovery?
- Prepare for disaster recovery with Azure Site Recovery
- Run a disaster recovery drill
- Failover and failback using Azure Site Recovery
 
Protect your virtual machines by using Azure Backup - Azure Backup features and scenarios
- Back up an Azure virtual machine by using Azure Backup
- Restore virtual machine data
 


Lab Lab answer key Exercise
Lab 5: Implementing Azure-based recovery services Lab 5 answer key - Exercise 1: Creating and configuring an Azure Site Recovery vault
- Exercise 2: Implementing Hyper-V VM protection by using Azure Site Recovery vault
- Exercise 3: Implementing Azure Backup
- Exercise 4: Deprovisioning the Azure lab environment


Learning Path 6: Migrate Servers and Workloads in on-premises and Hybrid Environments (Upgrade and migrate in Windows Server)

This Learning Path consists of Modules that focus on upgrade and migrate scenarios for Windows Server.

Module Units
Active Directory Domain Services migration - Examine upgrade vs. migration
- Upgrade a previous version of Active Directory Domain Services to Windows Server 2022
- Migrate to Active Directory Domain Services in Windows Server 2022 from a previous version
- Explore the Active Directory Migration Tool
Migrate file server workloads using Storage Migration Service - Storage Migration Service overview and usage scenarios
- Storage migration requirements
- Migrate a server with Storage migration
- Evaluate storage migration considerations
Migrate Windows Server roles - Describe the Windows Server Migration Tools
- Install the Migration Tools
- Migrate roles using the Migration Tools


Lab Lab answer key Exercise
Lab 06: Upgrade and migrate in Windows Server Lab 06 Answer key - Exercise 1: Deploying AD DS domain controllers in Azure
- Exercise 2: Migrating file servers by using Storage Migration Service


Learning Path 7: Migrate Servers and Workloads in on-premises and Hybrid Environments (Implementing migration in hybrid scenarios)

This Learning Path consists of Modules that focus on implementing migration in hybrid scenarios.

Module Units
Migrate on-premises Windows Server instances to Azure IaaS virtual machines - Plan your migration
- Describe Azure Migrate
- Perform server assessment
- Migrate Windows Server workloads by using Azure Migrate
Upgrade and migrate Windows Server IaaS virtual machines - Describe Azure Migrate (optional)
- Migrate Windows Server workloads by using Azure Migrate (optional)
- Describe storage migration
- Migrate file servers by using Storage Migration Service
Containerize and migrate ASP.NET applications to Azure App Service - Azure Migrate App Containerization overview


Lab Lab answer key Exercise
Lab 7 – Migrating Hyper-V VMs to Azure by using Azure Migrate Lab 7 answer key - Exercise 1: Prepare the lab environment
- Exercise 2: Prepare for assessment and migration by using Azure Migrate
- Exercise 3: Assess Hyper-V for migration by using Azure Migrate
- Exercise 4: Migrate Hyper-V VMs by using Azure Migrate


Learning Path 8: Monitor and Troubleshoot Windows Server Environment (Server and performance monitoring in Windows Server)

This Learning Path consists of Modules that focus on monitoring and troubleshooting scenarios in a Windows Server environment.

Module Units
Monitor Windows Server performance - Monitor network infrastructure services
- Monitor virtual machines running Windows Server
- Monitor performance with Windows Admin Center
- Use System Insights to help predict future capacity issues
- Optimize the performance of Windows Server
Manage and monitor Windows Server event logs - Describe Windows Server event logs
- Use Windows Admin Center to review logs
- Use Server Manager to review logs
- Use custom views
- Implement event log subscriptions
Implement Windows Server auditing and diagnostics - Describe basic auditing categories
- Describe advanced auditing categories
- Log user access
- Enable setup and boot event collection
Troubleshoot Active Directory - Recover objects from the AD recycle bin
- Recover the AD DS database
- Recover SYSVOL
- Troubleshoot AD DS replication
- Troubleshoot hybrid authentication issues


Lab Lab answer key Exercise
Lab 8: Monitoring and troubleshooting Windows Server Lab 8 answer key - Establish a performance baseline.
- Identify the source of a performance problem.
- Review and configure centralized event logs


Learning Path 9: Monitor and troubleshoot Windows Server environment (Implementing operational monitoring in hybrid scenarios)

This Learning Path consists of Modules that focus on implementing operational monitoring in hybrid scenarios.

Module Units
Monitor Windows Server Virtual Machines and hybrid instances - Enable Azure Monitor for virtual machines
- Enable Azure Monitor in hybrid scenarios
Monitor your Azure virtual machines with Azure Monitor - Monitor the health of the virtual machine
- Set up a VM with boot diagnostics
- View VM metrics
- Using the Azure Diagnostics extension
- Diagnostic data case studies
- Using diagnostic data
- Build log queries by using the Kusto Query Language
Troubleshoot Windows Server Virtual Machines in Azure - Troubleshoot VM deployment
- Troubleshoot VM startup
- Troubleshoot VM connectivity
- Optimize VM network connectivity security with Azure Bastion
- Troubleshoot VM performance
- Troubleshoot VM storage
Troubleshoot on-premises and hybrid networking - Diagnose DHCP problems
- Diagnose DNS problems
- Diagnose IP configuration issues
- Diagnose routing problems
- Use Packet Manager to help diagnose network problems
- Use Azure Network Watcher to help diagnose network problems


Lab Lab answer key Exercise
Lab 9: Implementing operational monitoring in hybrid scenarios Lab 9 answer key - Prepare a monitoring environment
- Configure monitoring of on-premises servers
- Configure monitoring of Azure VMs
- Evaluate monitoring services