Book Image

Configuring Windows Server Hybrid Advanced Services Exam Ref AZ-801

By : Chris Gill
Book Image

Configuring Windows Server Hybrid Advanced Services Exam Ref AZ-801

By: Chris Gill

Overview of this book

Configuring Windows Server Hybrid Advanced Services Exam Ref AZ-801 helps you master various cloud and data center management concepts in detail, helping you grow your expertise in configuring and managing Windows Server in on-premises, hybrid, and cloud-based workloads. Throughout the book, you'll cover all the topics needed to pass the AZ-801 exam and use the skills you acquire to advance in your career. With this book, you’ll learn how to secure your on-premises Windows Server resources and Azure IaaS workloads. First, you’ll explore the potential vulnerabilities of your resources and learn how to fix or mitigate them. Next, you'll implement high availability Windows Server virtual machine workloads with Hyper-V Replica, Windows Server Failover Clustering, and Windows File Server. You’ll implement disaster recovery and server migration of Windows Server in on-premises and hybrid environments. You’ll also learn how to monitor and troubleshoot Windows Server environments. By the end of this book, you'll have gained the knowledge and skills required to ace the AZ-801 exam, and you'll have a handy, on-the-job desktop reference guide.
Table of Contents (31 chapters)
1
Part 1: Exam Overview and the Current State of On-Premises, Hybrid, and Cloud Workflows
3
Part 2: Secure Windows Server On-Premises and Hybrid Infrastructures
9
Part 3: Implement and Manage Windows Server High Availability
13
Part 4: Implement Disaster Recovery
17
Part 5: Migrate Servers and Workloads
23
Part 6: Monitor and Troubleshoot Windows Server Environments

Secure Windows Server Storage

We will now move into the final chapter of this section by covering security and encryption for Windows Server storage. Continuing the security theme, we will now discover how to properly secure our Windows Server storage to help protect against data theft, exposure, and ransomware. We will discuss and complete exercises surrounding planning, managing, and configuring security for Windows Infrastructure-as-a-Service (IaaS) VMs using Network Security Groups (NSGs) and Application Security Groups (ASGs), the Azure Storage firewall, and Windows BitLocker Drive Encryption (BitLocker).

This chapter will include exercises on how to manage and recover BitLocker encrypted volumes, enable storage encryption utilizing Azure Disk Encryption (ADE), and successfully manage and secure disk encryption keys using Azure Key Vault for IaaS VMs and VM scale sets.

In this chapter, we will cover the following topics:

  • Introduction to NSGs, ASGs, service tags,...