Practice exam · Azure
Azure Windows Server Hybrid Administrator AZ-800 practice exam
Short answer
The Azure Windows Server Hybrid Administrator AZ-800 practice exam has 55 questions in 100 minutes, with a 70% passing mark, as configured here. The fastest way to know whether you are ready is to sit a full exam on the clock and read your score by domain, not only the total.
Domains covered
- Deploy and manage AD DS in on-premises and cloud environments
- Manage Windows Servers and workloads in a hybrid environment
- Manage storage and file services
- Manage virtual machines and containers
- Implement and manage an on-premises and hybrid networking infrastructure
Sample questions, with explanations
Three questions from the bank, open to read.
An application running in an Azure VM, plus several developer Linux workstations on-premises, all need shared access to the same set of files using the SMB protocol with identity-based (Active Directory) authentication. The team does not want to run or patch any file server VM, and wants the share to be a fully managed PaaS resource. Which option meets these requirements?
- An Azure Blob Storage container accessed via the REST API
- An Azure file share (Azure Files) with AD DS authentication, mounted over SMB by all clients ✓ (correct)
- Azure NetApp Files configured with NFS exports
- A Windows Server failover cluster file server (SOFS) in Azure with a continuously available share
Why this is correct
Azure Files is a fully managed PaaS file share that natively speaks SMB and supports identity-based authentication against on-premises AD DS, so both the Azure VM and the on-premises clients can mount the same share with Kerberos/NTFS-style permissions and no file server to maintain — matching every stated requirement. Blob Storage is wrong because it is object storage accessed via REST/HTTPS, not an SMB file share, and offers no native SMB mount with AD authentication for general file sharing. A failover cluster SOFS in Azure is wrong because it is explicitly a server you must build, run, and patch — the requirement says no file server VM and a managed PaaS resource. Azure NetApp Files with NFS exports is wrong because the requirement is SMB with AD identity-based auth; NFS exports do not provide the SMB/AD-authenticated sharing asked for (and the NFS path uses host/UNIX-style access rather than the SMB Kerberos model requested).
A two-node Storage Spaces Direct (S2D) cluster runs in a branch office. Each node has NVMe and SATA SSD drives. During a planned firmware update you reboot one node, and while it is offline a single SATA SSD fails on the surviving node. The cluster loses quorum and all S2D virtual disks go offline, even though the remaining node still has most of its capacity. Management asks how to prevent a future single drive failure from taking the whole cluster down during node maintenance. What is the most appropriate action?
- Configure a cloud witness (or file share witness) so the two-node cluster keeps quorum when one node plus a vote is lost during maintenance ✓ (correct)
- Convert the volumes from two-way mirror to dual parity to tolerate two simultaneous failures
- Add a second cluster network to provide redundant SMB Direct paths between the nodes
- Enable Storage Replica between the two nodes so the surviving node has a synchronous copy
Why this is correct
On a two-node S2D cluster, quorum is the real exposure: with only two voting nodes there is no tiebreaker, so taking one node down for maintenance leaves the cluster one fault from losing majority. A witness adds a tiebreaker vote, letting the cluster survive the loss of a node (or a node plus a component) and keep the virtual disks online — this directly addresses the described maintenance scenario. Converting two-way mirror to dual parity is wrong because dual parity requires at least four fault domains (nodes); a two-node cluster cannot host dual parity, and resiliency is a data-layout concern, not the quorum failure that actually occurred here. Enabling Storage Replica is wrong because S2D already mirrors data across the two nodes; Storage Replica is for replicating between separate volumes/clusters/servers, not for fixing intra-cluster quorum, and it would not have kept the disks online. Adding a redundant cluster network improves SMB Direct/east-west throughput and path redundancy but does nothing for quorum votes, which is what failed.
You need to run a PowerShell automation that queries an on-premises SQL Server and writes results to a network file share that is only reachable from inside the corporate network. The logic should be authored and scheduled in Azure Automation, but the actual execution must happen on a machine that has line-of-sight to those internal resources. Which Azure Automation feature lets the runbook execute on your own on-premises machine?
- Use a Logic App with the on-premises data gateway to invoke the runbook against the internal resources.
- Convert the runbook to a PowerShell DSC configuration and compile it in the Automation account's pull server.
- Register an on-premises machine as a Hybrid Runbook Worker and target the runbook to that hybrid worker group. ✓ (correct)
- Run the runbook in the Azure sandbox and add the on-premises subnet to the Automation account's firewall allow list.
Why this is correct
A Hybrid Runbook Worker runs Azure Automation runbooks on a machine you control — on-premises or in another cloud — so the script executes with direct network access to internal systems like a private SQL Server and a non-internet-facing file share, which is exactly the requirement. Running in the Azure sandbox executes the job in Microsoft's cloud with no path to private on-premises resources, and an Automation account firewall allow list does not create such a path. Compiling the runbook as a DSC configuration changes its purpose to configuration state enforcement on nodes rather than executing arbitrary automation logic against internal data sources. A Logic App with an on-premises data gateway connects Logic Apps to on-premises data; it is not the mechanism by which an Azure Automation runbook gains on-premises execution context.
Take the full practice exam
- 55 questions drawn from the bank, with a 100-minute timer
- Score by domain and a review of every question
- An AI tutor to talk through each question you miss
- What you miss feeds your study plan
Independent, unofficial practice exam. Azure and the exam name are trademarks of their owners; UpSkillScore is not affiliated with them. Format and passing mark are the exam's configuration in UpSkillScore, not an official statement.
Frequently asked questions
How many questions does the Azure Windows Server Hybrid Administrator AZ-800 practice exam have?
It has 55 questions and a 100-minute limit. The passing mark of the practice exam is 70%.
Is this the official Azure Windows Server Hybrid Administrator AZ-800 exam?
No. It is an independent practice exam built to match the structure of the real one. It does not replace the official exam.
Do I need an account to take it?
You can read the structure and sample questions without an account. Taking the full timed exam, scoring by domain and the AI tutor need one.