AZ-800 logo
Focused certification exam prep
Start practice

AZ-800 Exam Domains 2026: Complete Guide to All 5 Content Areas

TL;DR
  • Domain 1 (AD DS) carries 30-35% of the exam - the single largest content area by far.
  • Three domains - VMs/containers, networking, and storage - each sit at 15-20%, forming the exam's core middle.
  • Domain 2 (hybrid server management) is the lightest at only 10-15%, but still testable via scenario questions.
  • AZ-800 retires September 30, 2026 at 5:00 PM CST, replaced by AZ-802 for future candidates.

Overview: How the AZ-800 Blueprint Is Structured

The Microsoft Certified: Windows Server Hybrid Administrator Associate credential is earned by passing two exams: AZ-800 and AZ-801. AZ-800 focuses on the deployment and day-to-day administration side of hybrid Windows Server environments, while AZ-801 covers advanced security and disaster recovery. If you haven't already, it helps to first understand what AZ-800 actually is and how the AZ-800 naming convention fits into Microsoft's exam catalog before diving into domain-by-domain preparation.

Microsoft organizes AZ-800 into five weighted content areas, referred to officially as "exam domains." Each domain represents a percentage range of the total question pool, not a fixed number of questions, because Microsoft does not publish exact item counts for role-based exams like this one. Understanding the weighting matters enormously - it tells you exactly where to spend your limited study hours. This guide breaks down all five domains in the depth you need to build a real study plan, not just a surface-level checklist.

Why Domain Weighting Matters: A domain worth 30-35% of the exam deserves roughly three times the study time of a domain worth 10-15%. Treating every topic equally is one of the fastest ways to fail AZ-800 despite putting in the hours.

Domain 1: Deploy and Manage AD DS in On-Premises and Cloud Environments (30-35%)

This is the heavyweight domain, and it's not close - at 30-35% of the exam, Active Directory Domain Services content will show up in more questions than any other single area, often woven into scenario-based case studies rather than isolated fact-recall questions.

Core AD DS Topics to Master

Candidates need working knowledge of both classic on-premises AD DS administration and how it extends into hybrid identity scenarios.

  • Installing and configuring domain controllers, forests, domains, trusts, and organizational units
  • Managing AD DS objects using Windows Admin Center and PowerShell scripting
  • Implementing Group Policy Objects (GPOs), including inheritance, filtering, and troubleshooting application order
  • Configuring and managing Azure AD Domain Services (Azure AD DS) and hybrid identity synchronization
  • Implementing and managing Active Directory Federation Services (AD FS) where applicable
  • Backing up, restoring, and troubleshooting AD DS, including the AD recycle bin and USN rollback scenarios

Because this domain is so heavily weighted, we've built a dedicated resource covering it in full depth: AZ-800 Domain 1: Deploy and Manage AD DS - Complete Study Guide. If you only have time to deeply study one domain before your exam date, this is it.

Key Takeaway

Spend at least a third of your total study time on AD DS - hybrid identity synchronization and GPO troubleshooting scenarios are where most candidates lose points.

Domain 2: Manage Windows Servers and Workloads in a Hybrid Environment (10-15%)

Domain 2 is the smallest slice of the exam, but don't mistake "smallest" for "skippable." This area tests your ability to actually operate Windows Server workloads day-to-day across on-premises and Azure, using the tooling Microsoft expects hybrid administrators to know cold.

What Domain 2 Covers

  • Managing servers with Windows Admin Center, PowerShell remoting, and Server Core
  • Onboarding and managing on-premises servers with Azure Arc
  • Applying governance with Azure Policy in hybrid scenarios
  • Configuring Azure Monitor and Azure Update Manager for patch compliance and performance monitoring
  • Implementing Microsoft Defender technologies for server workload protection

A full breakdown of this domain, including practical Azure Arc onboarding scenarios, is available in AZ-800 Domain 2: Manage Windows Servers and Workloads in a Hybrid Environment - Complete Study Guide. Since this domain weighs less, it's a good candidate to review in short, focused sessions rather than dedicating a full week to it.

Domain 3: Manage Virtual Machines and Containers (15-20%)

Domain 3 shifts focus from identity and server management into virtualization and Azure IaaS. This is where Hyper-V administration meets Azure VM deployment, plus a growing emphasis on containerized workloads.

High-Value Domain 3 Topics

  • Creating and configuring Hyper-V hosts, virtual switches, and virtual machine settings
  • Deploying and configuring Azure IaaS virtual machines, including sizing, availability sets, and Azure Bastion access
  • Implementing high availability for VM workloads using failover clustering
  • Creating and managing Windows containers and understanding Docker basics on Windows Server
  • Managing container networking and storage

For a scenario-driven walkthrough of this domain, see AZ-800 Domain 3: Manage Virtual Machines and Containers - Complete Study Guide. Because this domain blends on-premises Hyper-V with Azure VM administration, expect exam questions that force you to choose the correct tool for a given hybrid scenario rather than simply recalling a definition.

Common Pitfall: Candidates who only study Azure VM deployment and skip Hyper-V failover clustering details tend to miss questions on this domain - both halves are tested, not just the cloud-native side.

Domain 4: Implement and Manage an On-Premises and Hybrid Networking Infrastructure (15-20%)

Networking is another 15-20% domain, and it spans classic Windows Server networking services alongside the Azure networking components needed to connect on-premises infrastructure to the cloud.

Domain 4 Focus Areas

  • Implementing and managing IP addressing, DNS zones, and DHCP scopes/failover
  • Implementing and managing remote access solutions, including VPN and Web Application Proxy
  • Configuring Azure virtual networks, subnets, and peering for hybrid connectivity
  • Implementing on-premises to Azure connectivity via VPN Gateway or ExpressRoute
  • Troubleshooting name resolution and hybrid network routing issues

This domain gets a full dedicated treatment in AZ-800 Domain 4: Implement and Manage On-Premises and Hybrid Networking Infrastructure - Complete Study Guide. Networking questions on AZ-800 tend to be scenario-heavy - expect a description of a multi-site network with a connectivity or resolution problem, and you'll need to identify the misconfiguration.

Domain 5: Manage Storage and File Services (15-20%)

The final domain covers storage technologies that hybrid administrators are expected to deploy and maintain across both physical and cloud-integrated environments.

Domain 5 Focus Areas

  • Configuring and managing Storage Spaces and Storage Replica
  • Implementing and managing File Server Resource Manager (FSRM), including quotas and screening
  • Configuring Distributed File System (DFS) namespaces and replication
  • Implementing Azure File Sync to integrate on-premises file servers with Azure file shares
  • Managing storage for VMs, including disk types, storage tiers, and Storage QoS

Storage questions frequently intersect with the virtualization content from Domain 3, so studying these two domains close together often reinforces both. If you want a broader strategic view of how all five domains fit into a single study plan, the AZ-800 Study Guide walks through sequencing and resource selection in more depth than this domain-focused breakdown.

Question Formats You'll Actually See

Microsoft doesn't publish a fixed item count for AZ-800, but role-based exams like this one consistently use a mixed format rather than a single question style. Expect to encounter:

  • Multiple choice and multiple response questions testing direct configuration knowledge
  • Case studies or scenario clusters where a business scenario is described once and several questions reference it
  • Drag-and-drop or build-list questions requiring you to sequence steps or match components correctly
  • Occasional lab or performance-based tasks, though availability and timing for these can vary by delivery

Plan for roughly 100 minutes of exam time for the non-lab, role-based delivery format, keeping in mind that total seat time at the test center will run longer once you account for the NDA, tutorial, and survey. A passing score is 700 on Microsoft's 1-1000 scale. For a deeper look at how difficult candidates generally find this format, see How Hard Is the AZ-800 Exam? Complete Difficulty Guide, and for context on how test-takers perform overall, check AZ-800 Pass Rate: What the Data Shows.

Scheduling Your Study by Domain Weight

Rather than studying domains in the order Microsoft lists them, allocate time proportional to their weight. A four-week plan built around AZ-800's specific weighting looks like this:

Week 1

Domain 1: AD DS (30-35%)

  • Domain controllers, forests, trusts, and GPOs
  • Azure AD DS and hybrid identity sync
Week 2

Domains 3 & 5: VMs/Containers and Storage (combined 30-40%)

  • Hyper-V, Azure IaaS VMs, containers
  • Storage Spaces, DFS, Azure File Sync
Week 3

Domain 4: Hybrid Networking (15-20%)

  • DNS, DHCP, remote access
  • Azure VNets and hybrid connectivity
Week 4

Domain 2 review + full mock exams (10-15%)

  • Windows Admin Center, Azure Arc, Update Manager
  • Timed practice runs at ../ to simulate exam pacing

Notice that Domain 2, despite being listed second in Microsoft's blueprint, is scheduled last here because it carries the lowest weight. This is a case where following the official domain order for study sequencing would waste time relative to its exam impact.

Who Hires for This Skill Set

The domain content maps directly to real job responsibilities. Organizations running mixed on-premises and Azure infrastructure need administrators who can manage AD DS, extend identity into the cloud, maintain file and storage services, and keep hybrid networking functional. Roles that commonly list this certification include systems administrator, infrastructure engineer, and hybrid cloud administrator positions. For a closer look at how this certification translates into job listings and compensation expectations, see AZ-800 Jobs and AZ-800 Salary Guide: Complete Earnings Analysis. If you're still weighing whether the investment is worthwhile relative to your career goals, Is the AZ-800 Certification Worth It? Complete ROI Analysis covers that decision in detail, and AZ-800 Certification Cost: Complete Pricing Breakdown covers the $165 USD base fee and regional pricing variations.

AZ-800 Retirement and the AZ-802 Transition

AZ-800 was last updated on January 21, 2026, and Microsoft has confirmed that both AZ-800 and AZ-801 retire on September 30, 2026 at 5:00 PM CST. After that date, AZ-802 replaces both exams as the path to the Windows Server Hybrid Administrator Associate credential. If you're currently certified or in progress, this doesn't erase your existing certification - Microsoft's role-based certifications require annual renewal through a free Microsoft Learn renewal assessment regardless of which exam version you originally passed.

Timing Consideration: If you're planning your exam date around the current domain structure covered in this guide, book before the September 30, 2026 retirement deadline. After that date, candidates must use AZ-802 with its own blueprint.

For candidates who are earlier in the decision process - perhaps still confirming terminology or scope - resources like What Does AZ-800 Stand For?, What Is A AZ-800?, and What Is AZ-800 Certification? cover the foundational questions before you commit to a domain-by-domain study plan. Once you're ready to move from theory to practice, running full-length timed exams at our AZ-800 practice test platform is the most direct way to see how your domain knowledge holds up under realistic conditions. Reviewing which domains gave you the most trouble on a practice run at the practice site is often more revealing than any amount of passive reading, and it's worth revisiting the practice tests multiple times as your weak domains shift.

FAQ

Which AZ-800 domain should I study first?

Start with Domain 1 (AD DS), since it carries the largest weight at 30-35% and its concepts - like hybrid identity sync - reappear in scenario questions across other domains.

Does Microsoft publish the exact number of questions per domain?

No. Microsoft only publishes percentage ranges for each domain and does not disclose fixed item counts for AZ-800, since it uses a variable mixed-question format.

Is Domain 2 worth skipping since it's the smallest?

No. At 10-15%, Domain 2 still accounts for a meaningful share of questions, and its Azure Arc and Update Manager topics can appear woven into scenarios from other domains too.

Will studying the current domains still be useful after AZ-802 launches?

Much of the underlying technical knowledge - AD DS, networking, storage, virtualization - will likely carry over conceptually, but you should confirm AZ-802's own published blueprint once available rather than assuming identical weighting.

Do I need labs and hands-on practice, or is reading the domains enough?

Given that AZ-800 may include lab or performance-based tasks and heavily scenario-driven questions, hands-on practice with tools like Windows Admin Center and PowerShell is strongly recommended alongside reading domain content.

Ready to pass your AZ-800 exam?

Put this into practice with free AZ-800 questions across every exam domain.