Book Image

Configuring Windows Server Hybrid Advanced Services Exam Ref AZ-801

By : Chris Gill
Book Image

Configuring Windows Server Hybrid Advanced Services Exam Ref AZ-801

By: Chris Gill

Overview of this book

Configuring Windows Server Hybrid Advanced Services Exam Ref AZ-801 helps you master various cloud and data center management concepts in detail, helping you grow your expertise in configuring and managing Windows Server in on-premises, hybrid, and cloud-based workloads. Throughout the book, you'll cover all the topics needed to pass the AZ-801 exam and use the skills you acquire to advance in your career. With this book, you’ll learn how to secure your on-premises Windows Server resources and Azure IaaS workloads. First, you’ll explore the potential vulnerabilities of your resources and learn how to fix or mitigate them. Next, you'll implement high availability Windows Server virtual machine workloads with Hyper-V Replica, Windows Server Failover Clustering, and Windows File Server. You’ll implement disaster recovery and server migration of Windows Server in on-premises and hybrid environments. You’ll also learn how to monitor and troubleshoot Windows Server environments. By the end of this book, you'll have gained the knowledge and skills required to ace the AZ-801 exam, and you'll have a handy, on-the-job desktop reference guide.
Table of Contents (31 chapters)
1
Part 1: Exam Overview and the Current State of On-Premises, Hybrid, and Cloud Workflows
3
Part 2: Secure Windows Server On-Premises and Hybrid Infrastructures
9
Part 3: Implement and Manage Windows Server High Availability
13
Part 4: Implement Disaster Recovery
17
Part 5: Migrate Servers and Workloads
23
Part 6: Monitor and Troubleshoot Windows Server Environments

Introduction to NSGs

Let me start by saying that NSGs are arguably one of the most critical components in the Azure network design and architecture. NSGs enable the overall flow and filtering of both inbound and outbound traffic within a virtual network, between subnets and VMs, internet traffic, and additional Azure services, such as storage.

Individual security rules can allow or deny inbound or outbound traffic to or from various Azure resources, and are grouped into NSGs that can then be assigned to the following:

  • A single network interface, allowing filtered network traffic on a singular interface
  • An entire subnet, allowing filtered traffic on all the network interfaces in the subnet
  • Both the network interface and the subnet, allowing each NSG to be independently evaluated for the application of security rules

The security rules are based on the following properties:

  • A Name value that is unique within the NSG
  • The source/destination IP address...