AZ-802T00: Administer Windows Server

Module 01: Deploy and manage Active Directory Domain Services domain controllers
This module introduces you to the topology of domain controllers within an Active Directory environment. It also starts you down the path of deploying, managing, and migrating a domain controller between servers.
Topics
• Define Active Directory Domain Services
• Define Active Directory Domain Services forests and domains
• Deploy Active Directory Domain Services domain controllers
• Migrate a domain controller to a new site
• Manage Active Directory Domain Services operations masters

Module 02: Deploy and manage Azure IaaS Active Directory domain controllers in Azure
This module covers how to implement Active Directory Domain Services (AD DS) domain controllers on Azure virtual machines. You learn how to choose between deploying a standalone Azure forest or extending an on-premises environment into Azure, configure cross-premises connectivity using site-tosite VPN or ExpressRoute, and plan for AD DS sites, trust relationships, read-only domain controllers (RODCs), FSMO role placement, and global catalog servers. You also walk through the steps to install a replica domain controller and create a new AD DS forest in Azure.
Topics
• Select an option to implement directory and identity services using Active Directory Domain Services in Azure
• Deploy and configure Active Directory Domain Services domain controllers in Azure VMs
• Install a replica Active Directory domain controller in an Azure VM • Install a new Active Directory forest on an Azure VNet

Module 03: Manage AD DS domain controllers and FSMO roles
This module covers how to deploy and manage AD DS domain controllers and FSMO roles. You learn how to deploy domain controllers in on-premises environments using Server Manager and the AD DS Configuration Wizard, maintain domain controller availability through backup and recovery procedures, manage the global catalog role and its placement across sites, understand and manage the five FSMO roles (schema master, domain-naming master, RID master, infrastructure master, and PDC emulator), transfer FSMO roles between domain controllers and seize roles in emergency scenarios, and manage and extend the AD DS schema.
Topics
• Deploy AD DS domain controllers
• Maintain AD DS domain controllers
• Manage the AD DS Global Catalog role
• Manage AD DS operations masters
• Manage AD DS schema

Module 04: Create and manage Active Directory objects
This module covers how to create and manage the core objects in Active Directory Domain Services (AD DS). You learn how to create and configure user accounts, security groups, organizational units (OUs), and managed service accounts including group managed service accounts (gMSA). You also perform bulk management tasks such as moving accounts and forcing password resets, and maintain domain controller availability through multi-master replication, Active Directory Recycle Bin, and authoritative and nonauthoritative restore operations.
Topics
• Define users, groups, and computers
• Define organizational units
• Manage objects and their properties in Active Directory
• Create objects in Active Directory
• Configure objects in Active Directory
• Perform bulk management tasks for user accounts
• Maintain Active Directory Domain Services domain controllers

Module 05: Implement hybrid identity with Windows Server
This module covers how to implement hybrid identity by integrating on-premises AD DS with Microsoft
Entra ID. You learn how to select from Microsoft Entra integration models including extending AD DS to Azure, directory synchronization, password hash sync, and federation with AD FS, plan and prepare onpremises AD DS for synchronization with Microsoft Entra Connect, configure seamless single sign-on (SSO) and pass-through authentication, enable Microsoft Entra ID login for Azure VMs, and implement Microsoft Entra Domain Services for Kerberos authentication, LDAP, and Group Policy in the cloud without deploying domain controllers.
Topics
• Select a Microsoft Entra integration model
• Plan for Microsoft Entra integration
• Prepare on-premises Active Directory for directory synchronization
• Install and configure directory synchronization with Microsoft Entra Connect
• Implement Seamless Single Sign-On
• Enable Microsoft Entra login in for Windows VM in Azure
• Knowledge check 1
• Describe Microsoft Entra Domain Services
• Implement and configure Microsoft Entra Domain Services
• Manage Windows Server in a Microsoft Entra Domain Services environment
• Create and configure a Microsoft Entra Domain Services instance • Join a Windows Server VM to a managed domain

Module 06: Create and configure Group Policy Objects in Active Directory
This module focuses on Group Policy objects, including using them to enforce a domain wide as well as fine-grained password policy.
Topics
• Define Group Policy Objects
• Implement Group Policy Object scope and inheritance
• Define domain-based Group Policy Objects
• Create and configure a domain-based Group Policy Object
• Configure a domain password policy
• Configure and apply a fine-grained password policy

Module 07: Implement Group Policy Objects
Learn to implement Group Policy Objects (GPOs) in Active Directory Domain Services (AD DS).

Topics
• Define GPOs
• Implement GPO scope and inheritance
• Define domain-based GPOs
• Create and configure a domain-based GPO
• Define GPO storage
• Define administrative templates

Module 08: Manage advanced features of AD DS
This module covers advanced Active Directory Domain Services (AD DS) administration tasks. You learn how to create and manage trust relationships including external, forest, and realm trusts, implement Enhanced Security Administrative Environment (ESAE) forests to protect privileged accounts using the clean-source principle, monitor and troubleshoot AD DS replication using Performance Monitor,
Repadmin.exe, and Dcdiag.exe, and create custom AD DS application partitions using NtdsUtil.exe.
Topics
• Create trust relationships
• Implement ESAE forests
• Monitor and troubleshoot AD DS
• Create custom AD DS partitions

Module 09: Administer and manage Windows Server IaaS Virtual Machine remotely
This module covers how to remotely administer and manage Windows Server IaaS VMs in Azure. You learn how to select the appropriate remote administration tool from the Azure portal, Windows Admin
Center, Azure PowerShell, Azure CLI, and Azure Cloud Shell, connect to Azure VMs securely using Azure
Bastion without exposing public IP addresses, and configure Just-In-Time (JIT) VM access through Microsoft Defender for Cloud to lock down inbound management ports and reduce attack surface.
Topics
• Select the appropriate remote administration tool
• Manage Windows Virtual Machines with Azure Bastion
• Create an Azure Bastion host
• Configure just-in-time administration
Module 10: Describe Windows Server administration tools
This module covers the tools available for administering Windows Server in on-premises and remote scenarios. You learn how to install and use Windows Admin Center for web-based server management, use Server Manager for role and feature management, install and configure Remote Server Administration Tools (RSAT) on Windows client operating systems, and use Windows PowerShell remoting with WinRM to run commands and scripts against remote servers.
Topics
• Explore Windows Admin Center
• Use Server Manager
• List Remote Server Administration Tools
• Use Windows PowerShell
• Use Windows PowerShell to remotely administer a server

Module 11: Just Enough Administration in Windows Server
This module covers how to configure and use Just Enough Administration (JEA) to restrict administrative access in Windows Server. You learn how JEA uses PowerShell remoting with virtual accounts to limit users to specific cmdlets, parameters, and values, define role capabilities and session configuration files to control what actions are available in a JEA session, and create and connect to JEA endpoints for constrained administrative tasks such as restarting services or deploying containers.
Topics
• Explain the concept of Just Enough Administration (JEA)
• Define role capabilities for a JEA endpoint
• Create a session configuration file to register a JEA endpoint
• Describe how JEA endpoints work to limit access to a PowerShell session
• Create and connect to a JEA endpoint
• Demonstration: Connect to a JEA endpoint

Module 12: Perform Windows Server secure administration
This module covers how to apply secure administration practices in Windows Server environments. You learn how to implement the principle of least privilege by identifying and restricting membership in built-in privileged groups such as Enterprise Admins and Domain Admins, delegate administrative control using the Delegation of Control Wizard and Restricted Groups, deploy Privileged Access Workstations (PAWs) with Windows Defender Application Control, Credential Guard, and Device Guard, and configure jump servers for controlled remote access to sensitive infrastructure. Topics
• Introduction
• Define least privilege administration
• Implement delegated privileges
• Use privileged access workstations
• Use jump servers

Module 13: Use advanced Windows PowerShell remoting techniques
This module covers some useful advanced techniques that help overcome the limitations of basic Windows PowerShell remoting.
Topics
• Review common remoting techniques of Windows PowerShell
• Send parameters to remote computers in Windows PowerShell
• Set access protection to variables, aliases, and functions by using the scope modifier • Enable multi-hop remoting in Windows PowerShell

Module 14: Manage single and multiple computers by using Windows PowerShell remoting This module explains how to use remoting to perform administration on remote computers.
Topics
• Review the remoting feature of Windows PowerShell
• Compare remoting with remote connectivity
• Review the remoting security feature of Windows PowerShell
• Enable remoting by using Windows PowerShell
• Use one-to-one remoting by using Windows PowerShell
• Use one-to-many remoting by using Windows PowerShell
• Compare remoting output with local output

Module 15: Manage hybrid workloads with Azure Arc
This module covers how to manage hybrid workloads using Azure Arc. You learn how to describe Azure Arc capabilities for managing Windows Server, Linux, Kubernetes clusters, and SQL Server across hybrid and multicloud environments, onboard on-premises server instances to Azure Arc using the Azure Connected Machine agent, connect hybrid machines to Azure from the Azure portal using interactive scripts or at-scale service principal deployments, manage extensions and monitor Arc-enabled servers through Azure Resource Manager, and restrict access to Arc-enabled resources using role-based access control (RBAC).
Topics
• Describe Azure Arc
• Onboard Windows Server instances
• Connect hybrid machines to Azure from the Azure portal
• Use Azure Arc to manage Windows Server instances
• Restrict access with RBAC

Module 16: Manage Azure updates
Manage operating system updates for Azure virtual machines and Azure Arc-enabled servers by using Azure Update Manager.
Topics
• Describe Azure Update Manager
• Prepare machines for Azure Update Manager
• Deploy updates
• Assess updates
• Manage updates at scale

Module 17: Automate the configuration of Windows Server IaaS Virtual Machines
Learn how to deploy Desired State Configuration (DSC) extensions, implement those extensions to remediate noncompliant servers, and use custom script extension.
Topics
• Describe Azure Automation
• Implement Azure Automation with DSC
• Remediate noncompliant servers
• Describe Custom Script Extensions
• Configure a Virtual Machine by using DSC

Module 18: Enforce VM security configuration with Azure Machine Configuration
Audit and enforce OS security configuration on Azure virtual machines and Arc-enabled servers using Azure Machine Configuration. Apply built-in Windows and Linux security baseline policies, configure audit and enforce modes, and author custom machine configurations for organization-specific security requirements.
Topics
• Explore Azure Machine Configuration extension capabilities and modes
• Apply built-in security baseline policies
• Author and assign custom machine configurations

Module 19: Explore Azure Automation with DevOps
Learn how to implement Azure Automation with DevOps using runbooks, webhooks, and PowerShell workflows. Understand how to create automation accounts, manage shared resources, integrate with source control systems, and plan for hybrid cloud management across Azure and on-premises environments.
Topics
• Create automation accounts
• What is a runbook?
• Understand automation shared resources
• Explore runbook gallery
• Examine webhooks
• Explore source control integration
• Explore PowerShell workflows
• Create a workflow
• Explore hybrid management
• Examine checkpoint and parallel processing
Module 20: Configure and manage Hyper-V virtual machines
This module covers how to configure and manage Hyper-V virtual machines in Windows Server. You learn how to choose between Generation 1 and Generation 2 VMs, work with VHD and VHDX virtual hard disk formats, configure VM hardware settings including processors, memory, NUMA topology, and virtual TPM, select storage options such as local disks, Fibre Channel SANs, and SMB 3.0 file shares, and implement shared VHDs and VHD Sets for guest failover clustering.
Topics
• List the virtual machine configuration versions
• List the virtual machine generation versions
• List available VHD formats and types
• Create and configure VMs
• Determine storage options for VMs
• Define shared VHDs and VHD Sets
• Implement guest clusters using shared VHDX

Module 21: Configure and manage Hyper-V
This module covers how to install and configure the Hyper-V role in Windows Server. You learn how to prepare Hyper-V hosts following best practices, use Hyper-V Manager for VM and host management, create and configure virtual switches (external, internal, and private) with VLAN support, implement advanced networking features including NIC Teaming, SR-IOV, bandwidth management, DHCP Guard, port mirroring, and Switch Embedded Teaming (SET), and configure nested virtualization for running Hyper-V inside a VM.
Topics
• Define Hyper-V
• Define Hyper-V Manager
• Configure Hyper-V hosts using best practices
• Configure Hyper-V networking
• Assess advanced Hyper-V networking features
• Define nested virtualization

Module 22: Secure Hyper-V workloads
This module covers how to secure Hyper-V workloads in Windows Server using guarded fabric. You learn how to deploy and configure the Host Guardian Service (HGS) with TPM-trusted and Host Key attestation modes, use the Key Protection Service (KPS) to control access to shielded VM encryption keys, distinguish between standard VMs, encryption-supported VMs, and shielded VMs, and create and deploy shielded VMs using signed template disks with BitLocker encryption and provisioning data files. Topics
• Define guarded fabric
• Define the Host Guardian Service
• Explore TPM-trusted attestation
• Define KPS
• Determine key features of shielded VMs
• Compare encryption-supported and shielded VMs in a guarded fabric • Implement a shielded VM

Module 23: Implement high availability of Windows Server VMs
This module covers how to implement high availability for Hyper-V virtual machines in Windows Server. You learn how to choose between host clustering, guest clustering, and Network Load Balancing (NLB) for different workload types, configure and perform live migration to move running VMs between Hyper-V hosts using CredSSP or Kerberos authentication, and perform storage migration to relocate VM virtual hard disk files without downtime.
Topics
• Select high-availability options for Hyper-V
• Consider network load balancing for Hyper-V VMs
• Implement Hyper-V VM live migration
• Implement Hyper-V VMs storage migration

Module 24: Run containers on Windows Server
This module covers how to run and manage containers on Windows Server. You learn how containers differ from virtual machines, choose between process isolation and Hyper-V isolation modes, prepare a Windows Server host for container workloads using Docker, pull container base images (Server Core, Nano Server, Windows) from the Microsoft Container Registry, and manage containers using Docker commands and Windows Admin Center.
Topics
• Define containers
• List the differences between containers and VMs
• Define Windows Server and Hyper-V containers and isolation modes
• Explore Docker
• Prepare a Windows Server 2019 host for container deployment • Security, Storage, and Networking with Windows containers

Module 25: Plan and deploy Windows Server IaaS Virtual Machines
This module covers how to plan and deploy Windows Server IaaS virtual machines in Azure. You learn how to describe Azure compute resources including VM sizes, series, and Basic vs. Standard tiers, choose appropriate disk storage options including Standard HDD, Standard SSD, and Premium SSD managed disks, deploy Azure VMs using the Azure portal, Azure CLI, and Azure Resource Manager (ARM) templates, and configure additional options including Azure Automanage for automated VM management best practices.
Topics
• Describe Azure compute
• Describe Virtual Machine storage
• Deploy Azure Virtual Machines
• Create a windows Virtual Machine using the portal
• Create a windows Virtual Machine using Azure CLI
• Deploy Azure Virtual Machines using templates
• Describe additional management optimization options

Module 26: Implement scale and high availability with Windows Server VM
This module covers how to implement scaling and high availability for Windows Server virtual machines in Azure. You learn how to describe virtual machine scale sets and their use cases for fluctuating workloads, implement horizontal scaling (adding/removing VMs) and vertical scaling (increasing VM resources) with automated rules based on metrics, configure load-balanced virtual machines using Azure Load Balancer with frontend IP configurations, describe Azure Site Recovery capabilities for disaster recovery and business continuity, and implement Azure Site Recovery to replicate and protect Azure VMs.
Topics
• Describe virtual machine scale sets
• Implement scaling
• Implement load-balancing VMs
• Create a virtual machine scale set in the Azure portal
• Describe Azure Site Recovery
• Implement Azure Site Recovery

Module 27: Implement Windows Server IaaS VM IP addressing and routing
This module covers how to implement IP addressing and routing for Windows Server IaaS virtual machines in Azure. You learn how to implement Azure virtual networks (VNets) with subnets and private IP address spaces, configure private and public IP addresses using dynamic and static allocation methods, manage network interfaces and assign IP configurations during VM creation, understand system routes and implement user-defined routes for custom traffic flow between subnets and networks, and implement IPv6 for Azure VNet to support dual-stack networking.
Topics
• Implement a virtual network
• Implement IaaS VM IP addressing
• Assign and manage IP addresses
• Configure a private IP address for a virtual machine using the Azure portal
• Create a virtual machine with a static public IP address using the Azure portal
• Implement IaaS virtual machine IP routing
• Implement IPv6 for Windows Server IaaS virtual machines

Module 28: Implement Windows Server IaaS VM network security
This module covers how to implement network security for Windows Server IaaS virtual machines in Azure. You learn how to configure network security groups (NSGs) with inbound and outbound security rules, priority-based processing, and default rules, deploy and configure Azure Firewall for centralized network traffic filtering, configure Windows Defender Firewall with Advanced Security for host-level protection, choose the appropriate filtering solution from NSGs, Azure Firewall, and Windows Defender Firewall, and use Azure Network Watcher to capture network traffic and log network flows for diagnostics.
Topics
• Implement network security groups and Windows IaaS VMs
• Implement Azure Firewall and Windows IaaS VMs
• Implement Windows Firewall with Windows Server IaaS VMs
• Choose the appropriate filtering solution
• Deploy and configure Azure firewall using the Azure portal
• Capture network traffic with network watcher
• Log network traffic to and from a VM using the Azure portal

Module 29: Administer and manage Windows Server IaaS Virtual Machine remotely
This module covers how to remotely administer and manage Windows Server IaaS VMs in Azure. You learn how to select the appropriate remote administration tool from the Azure portal, Windows Admin
Center, Azure PowerShell, Azure CLI, and Azure Cloud Shell, connect to Azure VMs securely using Azure
Bastion without exposing public IP addresses, and configure Just-In-Time (JIT) VM access through Microsoft Defender for Cloud to lock down inbound management ports and reduce attack surface.
Topics
• Select the appropriate remote administration tool
• Manage Windows Virtual Machines with Azure Bastion
• Create an Azure Bastion host
• Configure just-in-time administration

Module 30: Implement Windows Server DNS
This module covers how to deploy and configure the DNS Server role in Windows Server. You learn how DNS name resolution works, create and manage forward and reverse lookup zones using standard filebased or Active Directory-integrated storage, configure zone replication scopes and zone transfers between primary and secondary servers, and implement forwarding strategies including forwarders, conditional forwarders, and stub zones for resolving names across domain boundaries.
Topics
• Explore the DNS architecture
• Work with DNS zones and records
• Install and configure the DNS role
• Implement DNS forwarding

Module 31: Implement DNS for Windows Server IaaS VMs
This module covers how to implement DNS for Windows Server IaaS virtual machines in Azure. You learn how to describe Azure DNS including its anycast network, RBAC integration, and current limitations such as the lack of DNSSEC support, configure Azure public DNS zones with delegation and record sets, implement Azure private DNS zones with VNet linking and autoregistration for VM host records, deploy Windows Server DNS in Azure IaaS VMs for AD DS-integrated scenarios, implement split-horizon DNS to serve different records for internal and external clients, and troubleshoot DNS issues in Azure environments.
Topics
• Understand Azure DNS
• Implement Azure DNS
• Create an Azure DNS zone and record using the Azure portal
• Implement DNS with Azure IaaS virtual machines
• Implement split-horizon DNS in Azure
• Troubleshoot DNS

Module 32: Secure Windows Server DNS
This module covers how to secure Windows Server DNS to protect your name resolution infrastructure. You learn how to implement split-horizon DNS to separate internal Active Directory-integrated DNS from internet-facing DNS servers, create DNS policies for scenarios including traffic management, geolocation-based routing, application load balancing, and split-brain DNS, implement and manage DNS policies using PowerShell cmdlets for granular query and zone transfer control, apply DNS security features including cache locking, DNS socket pool, and response rate limiting, and implement DNSSEC to cryptographically sign DNS zones and protect against spoofing and cache tampering.
Topics
• Implement split-horizon DNS
• Create DNS policies
• Implement DNS policies
• Secure Windows Server DNS
• Implement DNSSEC
Module 33: Deploy and manage DHCP
This module covers how to deploy and manage Dynamic Host Configuration Protocol (DHCP) in
Windows Server. You learn how DHCP automates IP configuration using the four-step lease process (DISCOVER, OFFER, REQUEST, ACK) and lease renewal, install and configure the DHCP Server role including server authorization in AD DS, configure DHCP options at the server, scope, and reservation levels for DNS servers, default gateways, and other settings, create and manage DHCP scopes with address ranges, exclusions, and reservations, select high availability options including DHCP Failover with hot standby and load balance modes, and implement DHCP Failover for fault tolerance across multiple DHCP servers.
Topics
• Use DHCP to simplify IP configuration
• Install and configure the DHCP role
• Configure DHCP options
• Configure DHCP scopes
• Select DHCP high availability options
• Implement DHCP Failover

Module 34: Implement IP Address Management
This module covers how to deploy and use IP Address Management (IPAM) in Windows Server. You learn how to install IPAM on a dedicated member server with WID or SQL Server storage, configure GPO-based provisioning for DHCP, DNS, and domain controller discovery, manage DNS zones and records, DHCP scopes and failover, and IP address blocks and ranges from a single console, and control access using built-in RBAC roles and access scopes.
Topics
• Define IP Address Management
• Deploy IP Address Management
• Administer IP Address Management
• Configure IP Address Management options
• Manage DNS zones with IP Address Management
• Manage DHCP servers with IP Address Management
• Use IP Address Management to manage IP addressing
Module 35: Implement Windows Server IaaS VM IP addressing and routing
This module covers how to implement IP addressing and routing for Windows Server IaaS virtual machines in Azure. You learn how to implement Azure virtual networks (VNets) with subnets and private IP address spaces, configure private and public IP addresses using dynamic and static allocation methods, manage network interfaces and assign IP configurations during VM creation, understand system routes and implement user-defined routes for custom traffic flow between subnets and networks, and implement IPv6 for Azure VNet to support dual-stack networking.
Topics
• Implement a virtual network
• Implement IaaS VM IP addressing
• Assign and manage IP addresses
• Configure a private IP address for a virtual machine using the Azure portal
• Create a virtual machine with a static public IP address using the Azure portal
• Implement IaaS virtual machine IP routing
• Implement IPv6 for Windows Server IaaS virtual machines

Module 36: Implement a hybrid file server infrastructure
This module covers how to implement a hybrid file server infrastructure using Azure Files and Azure File
Sync. You learn how to create and configure Azure file shares with identity-based authentication and NTFS permissions, deploy Azure File Sync with Storage Sync Service, sync groups, and server endpoints, configure cloud tiering policies to cache frequently accessed files locally while tiering cool files to Azure, and migrate from DFS Replication to Azure File Sync.
Topics
• Describe Azure File services
• Configure Azure Files
• Configure connectivity to Azure Files
• Describe Azure File Sync
• Implement Azure File Sync
• Deploy Azure File Sync
• Deploy Azure File Sync 2
• Manage cloud tiering
• Migrate from DFSR to Azure File Sync

Module 37: Manage Windows Server file servers
This module covers how to configure and manage the Windows Server File Server role. You learn how to work with NTFS and ReFS file systems, configure File Server Resource Manager (FSRM) for quota management, file screening, storage reports, and classification, configure SMB 3.x features including encryption, multichannel, and SMB Direct for high-performance file access, disable SMB 1.0 to address security vulnerabilities, and use Volume Shadow Copy Service (VSS) for backup and snapshot operations.
Topics
• Define the Windows Server file system
• List the benefits and uses of File Server Resource Manager
• Define SMB and its security considerations
• Configure SMB protocol
• Define Volume Shadow Copy Service

Module 38: Implement Storage Spaces and Storage Spaces Direct
This module covers how to implement Storage Spaces and Storage Spaces Direct in Windows Server. You learn how to create storage pools from physical disks and configure virtual disks with simple, mirror, and parity resiliency, use storage tiers to combine SSDs and HDDs, choose between fixed and thin provisioning, and deploy Storage Spaces Direct for hyper-converged storage using Cluster Shared Volumes (CSVs), the Software Storage Bus, and ReFS, configured through Windows Admin Center or PowerShell.
Topics
• Define the Storage Spaces architecture and its components
• List the functionalities, benefits, and use cases of Storage Spaces
• Implement Storage Spaces
• List the functionalities, components, benefits, and use cases of Storage Spaces Direct • Implement Storage Spaces Direct

Module 39: Implement Windows Server Data Deduplication
This module covers how to implement Data Deduplication in Windows Server. You learn how deduplication replaces duplicate data chunks with references to a chunk store, identify ideal candidates such as user documents, VDI libraries, software deployment shares, and backup volumes, install and enable deduplication using Windows Admin Center, Server Manager, or PowerShell, configure usage types and optimization schedules, and run optimization, garbage collection, and scrubbing jobs.
Topics
• Define the architecture, components, and functionality of Data Deduplication
• Define the use cases and interoperability of Data Deduplication
• Implement Data Deduplication
• Manage and maintain Data Deduplication

Module 40: Implement Windows Server iSCSI
This module covers how to implement iSCSI block storage in Windows Server. You learn how iSCSI uses standard TCP/IP networks to provide SAN functionality without specialized cabling, install and configure the iSCSI Target Server role service and create virtual disks using PowerShell, connect iSCSI initiators to targets, and configure network redundancy using Multiple Connections per Session (MCS) and Multipath I/O (MPIO) with load balancing policies.
Topics
• List the functionalities, components, and use cases of iSCSI
• List the considerations for implementing iSCSI
• Implement iSCSI
• Configure high availability for iSCSI

Module 41: Implement Windows Server Storage Replica
This module covers how to implement Storage Replica in Windows Server for disaster recovery and high availability. You learn how Storage Replica performs block-level replication between volumes using replication groups and partnerships, choose between synchronous and asynchronous replication modes, configure stretch failover clusters spanning two physical sites, validate prerequisites with TestSRTopology, and deploy replication using Windows Admin Center or PowerShell with NewSRPartnership.
Topics
• List the functionalities and components of Storage Replica
• Examine the prerequisites for implementing Storage Replica
• Implement Storage Replica by using Windows Admin Center
• Implement Storage Replica by using Windows PowerShell