Book Image

Administering Windows Server Hybrid Core Infrastructure AZ-800 Exam Guide

By : Steve Miles
Book Image

Administering Windows Server Hybrid Core Infrastructure AZ-800 Exam Guide

By: Steve Miles

Overview of this book

Written by an Azure MVP and Microsoft Certified Trainer with 20 years of experience in data center infrastructure, this AZ-800 study guide is an essential preparation tool for administrators who want to take the exam and acquire key skills that will help them thrive in their careers. This book will guide you through all the ways Windows Server can be used to manage hybrid solutions on-premises and in the cloud, starting with deploying and managing Active Directory Domain Services (AD DS) in on-premises and cloud environments. You’ll then dive into managing virtual machines and containers and progress to implementing and managing an on-premises and hybrid networking infrastructure. The later parts of the book focus on managing storage and file services, concluding with a detailed overview of all the knowledge needed to pass the AZ-800 exam with practical examples throughout the chapters. In the final chapter, you’ll be able to test your understanding of the topics covered with the help of practice exams to make sure that you’re completely prepared for the contents and structure of the exam. By the end of the book, you’ll have gained the knowledge, both practical and conceptual, that's required to administer Windows Server hybrid core infrastructure confidently.
Table of Contents (22 chapters)
1
Part 1: Hybrid Identity
6
Part 2: Hybrid Networking
9
Part 3: Hybrid Storage
12
Part 4: Hybrid Compute
18
Part 5: Exam Prep
19
Chapter 14: Exam Preparation Practice Tests

Securing Windows Server containers

This section looks at security in the context of isolation modes.

Windows Server containers provide two isolation modes: process and Hyper-V isolation. The degree of isolation that’s created between each container and the host OS differentiates these isolation modes. Let’s outline each mode:

  • Process isolation (this is the traditional isolation mode):
    • The same kernel is shared between the containers and the host
    • There is a user mode per container
    • When starting a Docker container, the –isolation=process command switch is used
  • Hyper-V isolation:
    • With this isolation mode, there is a kernel per container
    • Each container runs inside a VM
    • Hardware-level isolation is provided between each container and the host
    • When starting a Docker container, the –isolation=hyperv command switch is used

These two isolation modes are shown in the following diagram:

Figure 10.2 – Isolation modes

Process...