- Domain 3 Overview: Why VMs and Containers Matter on AZ-800
- Configuring Windows Server Virtual Machines
- Hyper-V Management for Hybrid Administrators
- Managing Azure IaaS Virtual Machines
- Containers, Windows Containers, and AKS Hybrid
- How Domain 3 Questions Are Actually Asked
- Scheduling Domain 3 Inside Your Broader AZ-800 Plan
- Who Actually Uses This Skill Set On the Job
- Frequently Asked Questions
- Domain 3 covers 15-20% of AZ-800, roughly on par with Domain 4 and Domain 5.
- Focus areas span on-premises Hyper-V, Azure IaaS VMs, and Windows containers - not just one platform.
- Azure Arc-enabled servers and Azure Update Manager appear here as much as in Domain 2.
- Expect scenario questions that ask you to choose between VM sizing, storage, and container isolation modes.
Domain 3 Overview: Why VMs and Containers Matter on AZ-800
Domain 3, "Manage virtual machines and containers," makes up 15-20% of the AZ-800 exam - a meaningful chunk, though smaller than the 30-35% dedicated to Deploy and manage AD DS in on-premises and cloud environments. If you've already reviewed the full breakdown in our AZ-800 Exam Domains 2026 guide, you know this domain sits in a three-way tie with Domain 4 and Domain 5, each weighted 15-20%.
What makes Domain 3 distinct is its dual focus. Microsoft expects candidates to be equally comfortable running virtual machines on-premises with Hyper-V and managing Azure IaaS VMs, then layering in Windows containers on top of both. This mirrors the exam's overall hybrid philosophy - Microsoft explicitly lists Windows Admin Center, PowerShell, Azure Arc, and Azure IaaS VM administration among the skills candidates should already have going into the exam, per the official exam page.
Configuring Windows Server Virtual Machines
A large share of Domain 3 content deals with configuring and managing Windows Server VMs regardless of where they run. Expect to be tested on virtual machine settings that affect performance, security, and hybrid connectivity.
Windows Server VM Configuration
Candidates must understand how to size, secure, and connect Windows Server virtual machines in mixed on-premises and cloud scenarios.
- Configuring VM checkpoints, dynamic memory, and integration services
- Applying resource controls (CPU groups, storage QoS) to prevent noisy-neighbor issues
- Connecting VMs to Azure Arc for centralized policy and monitoring
- Enabling Azure Update Manager and Microsoft Defender for Cloud on server VMs
These topics overlap with Domain 2 material on hybrid management, so if you've studied Domain 2: Manage Windows Servers and workloads in a hybrid environment, some of this will feel familiar - the difference here is the VM-specific lens: settings, migrations, and lifecycle operations rather than general server administration.
Hyper-V Management for Hybrid Administrators
Hyper-V remains the backbone of on-premises virtualization tested on AZ-800. You should be able to configure hosts, virtual switches, and storage without hesitation, and know when to reach for Windows Admin Center versus PowerShell cmdlets.
Hyper-V Host and Guest Management
Understand how to build and maintain a Hyper-V environment that supports hybrid workloads.
- Creating and configuring virtual switches (external, internal, private)
- Managing virtual hard disks, including differencing and dynamic disks
- Configuring VM replication and failover for resiliency
- Using Windows Admin Center to manage Hyper-V clusters remotely
Key Takeaway
Practice creating a Hyper-V VM entirely through PowerShell, then repeat the same task in Windows Admin Center. AZ-800 scenario questions often ask which tool is appropriate for a given constraint, not just how to perform the task.
Managing Azure IaaS Virtual Machines
The exam explicitly calls out Azure IaaS VM administration as a required skill, and Domain 3 is where that shows up most directly. You'll need working knowledge of VM deployment, scaling, and connectivity back to on-premises resources.
Azure IaaS VM Operations
Candidates should be able to deploy, resize, and connect Azure VMs as part of a hybrid infrastructure.
- Selecting VM sizes and availability options (availability sets, zones)
- Configuring managed disks and disk encryption
- Extending on-premises AD DS to Azure VMs
- Using Azure Policy to enforce configuration baselines on VM fleets
Expect questions that present a business requirement - say, cost control or fault tolerance - and ask you to pick the correct Azure VM configuration. These are rarely simple recall items; they combine networking, storage, and identity concepts from other domains, which is why reviewing how all five domains interact pays off even when you're focused on Domain 3.
| Scenario Element | On-Premises Hyper-V | Azure IaaS VM |
|---|---|---|
| Provisioning tool | Hyper-V Manager, Windows Admin Center, PowerShell | Azure Portal, Azure CLI, PowerShell, ARM/Bicep |
| Storage model | VHD/VHDX on local or shared storage | Managed disks |
| Governance | Group Policy, local security baselines | Azure Policy, Azure Arc |
| Patching | WSUS, Windows Admin Center | Azure Update Manager |
Containers, Windows Containers, and AKS Hybrid
Containers round out Domain 3, and this is often the least familiar territory for candidates coming from a traditional Windows Server background. You don't need deep Kubernetes expertise, but you do need to understand container fundamentals as Microsoft applies them to Windows Server.
Windows Container Fundamentals
Know the difference between isolation modes and how containers fit into a hybrid deployment strategy.
- Process isolation versus Hyper-V isolation for Windows containers
- Installing and configuring the Container feature and Docker/containerd tooling on Windows Server
- Building and running Windows container images from a Dockerfile
- Understanding how Azure Arc-enabled Kubernetes and AKS hybrid concepts relate to on-premises container hosts
How Domain 3 Questions Are Actually Asked
AZ-800 does not publish a fixed item count, and Microsoft states that role-based exams like this one use a mixed, variable format - multiple choice, multiple response, drag-and-drop or build-list items, case studies, and occasionally lab-style or performance tasks. Domain 3 tends to lean heavily on scenario-based multiple choice and drag-and-drop sequencing, especially for tasks like configuring a Hyper-V virtual switch or ordering the steps to deploy a containerized workload.
Plan for roughly 100 minutes of exam time for the non-lab format, keeping in mind that total seat time runs longer once you factor in the pre-exam agreement and survey. If you haven't already, read our breakdown of how hard the AZ-800 exam really is to calibrate expectations before you sit for it.
Key Takeaway
Domain 3 case studies often combine a Hyper-V requirement with an Azure VM requirement in the same scenario. Read the entire case study prompt before answering - the correct choice for the on-premises portion may not transfer to the cloud portion.
Scheduling Domain 3 Inside Your Broader AZ-800 Plan
Because Domain 3 shares tooling (Windows Admin Center, PowerShell, Azure Arc) with Domain 2, it makes sense to study them back-to-back rather than in isolation. If you're following a multi-week plan like the one outlined in our AZ-800 Study Guide 2026, slot Domain 3 right after your hybrid management review so the mental models reinforce each other.
Hyper-V and Windows Server VMs
- Build a lab Hyper-V host with two virtual switches
- Practice checkpoint, replication, and dynamic memory configuration
- Join a lab VM to Azure Arc
Azure IaaS VMs and Containers
- Deploy an Azure VM and apply an Azure Policy definition
- Install the Containers feature and run a Windows container
- Compare process isolation vs. Hyper-V isolation in a test deployment
Keep the retirement date in mind while you schedule: Microsoft has confirmed AZ-800 and AZ-801 retire September 30, 2026 at 5:00 PM CST, after which AZ-802 replaces them for earning the Windows Server Hybrid Administrator Associate credential. If your target date is close to that cutoff, build in buffer time.
Who Actually Uses This Skill Set On the Job
The VM and container skills in Domain 3 map directly to real infrastructure roles: systems administrators who manage a Hyper-V cluster and are migrating workloads to Azure, hybrid cloud engineers responsible for both on-premises and Azure IaaS VM fleets, and platform engineers introducing Windows containers into legacy .NET application environments. If you're evaluating whether the certification aligns with your career goals, our AZ-800 Jobs overview and AZ-800 Salary Guide 2026 both discuss where this skill set gets applied in practice, and our ROI analysis weighs the certification against alternatives.
For a broader look at what the certification requires beyond this one domain, see AZ-800 Certification or the introductory What Is AZ-800? overview.
Once you've reviewed the concepts here, reinforce them with realistic scenario questions on our AZ-800 practice test platform - running through timed, domain-specific questions is the fastest way to find gaps in your Hyper-V and Azure VM knowledge before exam day. You can also revisit weaker domains using the same practice test tool once you've mapped out your full study plan.
Frequently Asked Questions
Domain 3, "Manage virtual machines and containers," is weighted at 15-20% of the total exam, the same range as Domain 4 and Domain 5.
No. AZ-800 focuses on Windows container fundamentals - isolation modes, image basics, and how containers fit into hybrid deployments - rather than deep Kubernetes administration, which is covered more in advanced role-based paths.
It's both. Microsoft designed AZ-800 around hybrid administration, so Domain 3 tests Hyper-V configuration on-premises alongside Azure IaaS VM deployment and management, often within the same case study.
Prioritize Windows Admin Center, PowerShell, Hyper-V Manager, the Azure Portal, Azure CLI, Azure Arc, and Azure Update Manager - all are explicitly referenced in Microsoft's exam skills outline.
Microsoft has not published AZ-802's domain breakdown as of this writing. AZ-800 and AZ-801 remain valid through September 30, 2026 at 5:00 PM CST, so current Domain 3 content is safe to study until that date.
- AZ-800 Domain 1: Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments (30-35%) - Complete Study Guide 2026
- AZ-800 Domain 2: Manage Windows Servers and workloads in a hybrid environment (10-15%) - Complete Study Guide 2026
- AZ-800 Domain 4: Implement and manage an on-premises and hybrid networking infrastructure (15-20%) - Complete Study Guide 2026
- AZ-800 Exam Domains 2026: Complete Guide to All 5 Content Areas