Naslovnica

AZ-801: Configuring Windows Server Hybrid Advanced Services

Trening govori o konfiguraciji naprednih usluga Windows Servera koristeći lokalne (engl. on-premises), hibridne i tehnologije u oblaku (eng. cloud). Na ovom tečaju IT profesionalci će naučiti kako iskoristiti hibridne mogućnosti Azurea, kako premjestiti radna opterećenja virtualnog i fizičkog poslužitelja na Azure IaaS i kako osigurati Azure VM-ove koji koriste Windows Server.

IT profesionalci će tijekom treninga usvojiti vještine i znanja vezane uz visoku dostupnost (engl. high availability), rješavanje problema (engl. troubleshooting) i oporavak od katastrofe (engl. disaster recovery). Tečaj naglašava administrativne alate i tehnologije uključujući Windows Admin Center, PowerShell, Azure Arc, Azure Automation Update Management, Microsoft Defender for Identity, Azure Security Center, Azure Migrate i Azure Monitor.

Što ćete naučiti

  • Pojačati sigurnosnu konfiguraciju okruženja operacijskog sustava Windows Server.
  • Poboljšati hibridnu sigurnost koristeći Azure Security Center, Azure Sentinel i Windows Update Management.
  • Primijeniti sigurnosne značajke za zaštitu kritičnih resursa.
  • Implementirati rješenja visoke dostupnosti i oporavka od katastrofe.
  • Implementirati usluge oporavka u hibridnim scenarijima.
  • Planirati i implementirati hibridnu i cloud migraciju, backup i oporavak.
  • Nadogradnje i migracije povezane s AD DS-om i prostrom za pohranu.
  • Upravljati i nadgledati hibridne scenarije koristeći WAC, Azure Arc, Azure Automation i Azure Monitor.
  • Implementirati monitoring servisa i performansi i primijeniti rješavanja problema (engl. troubleshooting).

Kome je namijenjeno

Server administratorima koji imaju iskustva u radu s Windows Serverom i žele proširiti mogućnosti svojih lokalnih (engl. on-premises) okruženja kombiniranjem lokalnih i hibridnih tehnologija. Server administratorima koji već implementiraju i upravljaju lokalnim osnovnim tehnologijama, koji žele osigurati i zaštititi svoje okoline, migrirati virtualna i fizička radna opterećenja na Azure IaaS, omogućiti visoko dostupno, potpuno redundantno okruženje i obavljati nadzor i rješavanje problema.

Preduvjeti

  • Iskustvo upravljanja Windows Serverom u lokalnim (engl. on-premises) okruženjima, uključujući AD DS, DNS, DFS, Hyper-V te sustava pohrane podataka.
  • Iskustvo u radu s alatima za upravljanje servisima poput AD DS, DNS, DFS, Hyper-V.
  • Osnovno poznavanje Microsoftovih tehnologija za pohranu, umrežavanje i virtualizaciju.
  • Iskustvo u radu sa i razumijevanje osnovnih tehnologija umrežavanja kao što su IP adresiranje, name resolution i DHCP.
  • Razumijevanje i iskustvo u radu s Microsoft Hyper-V-om i osnovnim konceptima virtualizacije.
  • Svijest o sigurnosnim najboljim praksama.
  • Osnovno razumijevanje sigurnosnih tehnologija (vatrozidovi, enkripcija, višefaktorska autentifikacija, SIEM/SOAR).
  • Osnovno znanje o lokalnoj servisima kao što su Failover Clustering i Storage Spaces.
  • Osnovno iskustvo s implementcijom i upravljanjem IaaS uslugama u Microsoft Azureu.
  • Osnovno poznavanje Azure Active Directorya.
  • Iskustvo praktičnog rada sa Windows klijentskim operativnim sustavima kao što su Windows 10 ili Windows 11.
  • Osnovno iskustvo sa Windows PowerShellom.
  • Razumijevanje koncepata koji se odnose na tehnologije Windows Servera kao što su visoka dostupnost i oporavak od katastrofe, automatizacija, monitoring i rješavanje problema.

Nastavni plan

Pregledaj
Module 1: Windows Server security This module discusses how to protect an Active Directory environment by securing user accounts to least privilege and placing them in the Protected Users group. The module covers how to limit authentication scope and remediate potentially insecure accounts. The module also describes how to harden the security configuration of a Windows Server operating system environment. In addition, the module discusses the use of Windows Server Update Services to deploy operating system updates to computers on the network. Finally, the module covers how to secure Windows Server DNS to help protect the network name resolution infrastructure. After completing this module, students will be able to:
  • Diagnose and remediate potential security vulnerabilities in Windows Server resources
  • Harden the security configuration of the Windows Server operating system environment
  • Deploy operating system updates to computers on a network by using Windows Server Update Services
  • Secure Windows Server DNS to help protect the network name resolution infrastructure
  • Implement DNS policies
Module 2: Implementing security solutions in hybrid scenarios This module describes how to secure on-premises Windows Server resources and Azure IaaS workloads. The module covers how to improve the network security for Windows Server infrastructure as a service (IaaS) VMs and how to diagnose network security issues with those VMs. In addition, the module introduces Azure Security Center and explains how to onboard Windows Server computers to Security Center. The module also describes how to enable Azure Update Management, deploy updates, review an update assessment, and manage updates for Azure VMs. The module explains how Adaptive application controls and BitLocker disk encryption are used to protect Windows Server IaaS VMs. Finally, the module explains how to monitor Windows Server Azure IaaS VMs for changes in files and the registry, as well as monitoring modifications made to application software. After completing this module, students will be able to:
  • Diagnose network security issues in Windows Server IaaS virtual machines
  • Onboard Windows Server computers to Azure Security Cente
  • Deploy and manage updates for Azure VMs by enabling Azure Automation Update Management
  • Implement Adaptive application controls to protect Windows Server IaaS VMs
  • Configure Azure Disk Encryption for Windows IaaS VMs
  • Back up and recover encrypted data
  • Monitor Windows Server Azure IaaS VMs for changes in files and the registry
Module 3: Implementing high availability This module describes technologies and options to create a highly available Windows Server environment. The module introduces Clustered Shared Volumes for shared storage access across multiple cluster nodes. The module also highlights failover clustering, stretch clusters, and cluster sets for implementing high availability of Windows Server workloads. The module then discusses high availability provisions for Hyper-V and Windows Server VMs, such as network load balancing, live migration, and storage migration. The module also covers high availability options for shares hosted on Windows Server file servers. Finally, the module describes how to implement scaling for virtual machine scale sets and load balanced VMs, and how to implement Azure Site Recovery. After completing this module, students will be able to:
  • Implement highly available storage volumes by using Clustered Share Volumes
  • Implement highly available Windows Server workloads using failover clustering
  • Describe Hyper-V VMs load balancing
  • Implement Hyper-V VMs live migration and Hyper-V VMs storage migration
  • Describe Windows Server File Server high availablity options
  • Implement scaling for virtual machine scale sets and load-balanced VMs
  • Implement Azure Site Recovery
Module 4: Disaster recovery in Windows Server This module introduces Hyper-V Replica as a business continuity and disaster recovery solution for a virtual environment. The module discusses Hyper-V Replica scenarios and use cases, and prerequisites to use it. The module also discusses how to implement Azure Site Recovery in on-premises scenarios to recover from disasters. After completing this module, students will be able to:
  • Describe Hyper-V Replica, pre-requisites for its use, and its high-level architecture and components
  • Describe Hyper-V Replica use cases and security considerations
  • Configure Hyper-V Replica settings, health monitoring, and failover options
  • Describe extended replication
  • Replicate, failover, and failback virtual machines and physical servers with Azure Site Recovery
Module 5: Implementing recovery services in hybrid scenarios This module covers tools and technologies for implementing disaster recovery in hybrid scenarios, whereas the previous module focuses on BCDR solutions for on-premises scenarios. The module begins with Azure Backup as a service to protect files and folders before highlighting how to implement Recovery Vaults and Azure Backup Policies. The module describes how to recover Windows IaaS virtual machines, perform backup and restore of on-premises workloads, and manage Azure VM backups. The module also covers how to provide disaster recovery for Azure infrastructure by managing and orchestrating replication, failover, and failback of Azure virtual machines with Azure Site Recovery. After completing this module, students will be able to:
  • Recover Windows Server IaaS virtual machines by using Azure Backup
  • Use Azure Backup to help protect the data for on-premises servers and virtualized workloads
  • Implement Recovery Vaults and Azure Backup policies
  • Protect Azure VMs with Azure Site Recovery
  • Run a disaster recovery drill to validate protection
  • Failover and failback Azure virtual machines
Module 6: Upgrade and migrate in Windows Server This module discusses approaches to migrating and updating Windows Server workloads running in earlier versions of Windows Server. The module covers the necessary strategies needed to move domain controllers to Windows Server 2022 and describes how the Active Directory Migration Tool can consolidate domains within a forest or migrate domains to a new AD DS forest. The module also discusses the use of Storage Migration Service to migrate files and files shares from existing file servers to new servers running Windows Server 2022. Finally, the module covers how to install and use the Windows Server Migration Tools cmdlets to migrate commonly used server roles from earlier versions of Windows Server. After completing this module, students will be able to:
  • Compare upgrading an AD DS forest and migrating to a new AD DS forest
  • Describe the Active Directory Migration Tool (ADMT)
  • Identify the requirements and considerations for using Storage Migration Service
  • Describe how to migrate a server with storage migration
  • Use the Windows Server Migration Tools to migrate specific Windows Server roles
Module 7: Implementing migration in hybrid scenarios This module discusses approaches to migrating workloads running in Windows Server to an infrastructure as a service (IaaS) virtual machine. The module introduces using Azure Migrate to assess and migrate on-premises Windows Server instances to Microsoft Azure. The module also covers how migrate a workload running in Windows Server to an infrastructure as a service (IaaS) virtual machine (VM) and to Windows Server 2022 by using Windows Server migration tools or the Storage Migration Service. Finally, this module describes how to use the Azure Migrate App Containerization tool to containerize and migrate ASP.NET applications to Azure App Service. After completing this module, students will be able to:
  • Plan a migration strategy and choose the appropriate migration tools
  • Perform server assessment and discovery using Azure Migrate
  • Migrate Windows Server workloads to Azure VM workloads using Azure Migrate
  • Explain how to migrate workloads using Windows Server Migration tool
  • Migrate file servers by using the Storage Migration Service
  • Discover and containerize ASP.NET applcations running on Windows
  • Migrate a containerized application to Azure App Service
Module 8: Server and performance monitoring in Windows Server This module introduces a range of tools to monitor the operating system and applications on a Windows Server computer as well as describing how to configure a system to optimize efficiency and to troubleshoot problems. The module covers how Event Viewer provides a convenient and accessible location for observing events that occur, and how to interpret the data in the event log. The module also covers how to audit and diagnose a Windows Server environment for regulatory compliance, user activity, and troubleshooting. Finally, the module explains how to troubleshoot AD DS service failures or degraded performance, including recovery of deleted objects and the AD DS database, and how to troubleshoot hybrid authentication issues. After completing this module, students will be able to:
  • Explain the fundamentals of server performance tuning
  • Use built-in tools in Windows Server to monitor server performance
  • Use Server Manager and Windows Admin Center to review event logs
  • Implement custom views
  • Configure an event subscription
  • Audit Windows Server events
  • Configure Windows Server to record diagnostic information
  • Recover the AD DS database and objects in AD DS
  • Troubleshoot AD DS replication
  • Troubleshoot hybrid authentication issues
Module 9: Implementing operational monitoring in hybrid scenarios This module covers using monitoring and troubleshooting tools, processes, and best practices to streamline app performance and availability of Windows Server IaaS VMs and hybrid instances. The module describes how to implement Azure Monitor for IaaS VMs in Azure, implement Azure Monitor in on-premises environments, and use dependency maps. The module then explains how to enable diagnostics to get data about a VM, view VM metrics in Azure Metrics Explorer, and create a metric alert to monitor VM performance. The module then covers how to monitor VM performance by using Azure Monitor VM Insights. The module then describes various aspects of troubleshooting on premises and hybrid network connectivity, including how to diagnose common issues with DHCP, name resolution, IP configuration, and routing. Finally, the module examines how to troubleshoot configuration issues that impact connectivity to Azure-hosted Windows Server virtual machines (VMs), as well as approaches to resolve issues with VM startup, extensions, performance, storage, and encryption. After completing this module, students will be able to:
  • Implement Azure Monitor for IaaS VMs in Azure and in on-premises environments
  • Implement Azure Monitor for IaaS VMs in Azure and in on-premises environments
  • View VM metrics in Azure Metrics Explorer
  • Use monitoring data to diagnose problems
  • Evaluate Azure Monitor Logs and configure Azure Monitor VM Insights
  • Configure a Log Analytics workspace
  • Troubleshoot on-premises connectivity and hybrid network connectivity
  • Troubleshoot AD DS service failures or degraded performance
  • Recover deleted security objects and the AD DS database
  • Troubleshoot hybrid authentication issues