WS-012T00: Windows Server 2019 Hybrid and Azure IaaS

Module 1: Introducing Azure Hybrid IaaS with Windows Server 2019

This module describes the principles of Azure IaaS (compute, storage, and networking), and the methods of integrating on-premises environments with Azure and Azure AD (network, file services, management, monitoring, backup and disaster recovery, and identity). The module also introduces hybrid administrative tools (Windows Admin Center, Azure portal, PowerShell, and Azure CLI). As an introductory module, the majority of these topics will be covered in more depth later in the course. Additionally, the module does not cover Windows Server 2019 technologies beyond the topics that are relevant from a hybrid integration standpoint.

Lessons

• Overview of Azure IaaS
• Overview of the Azure hybrid model
• Using hybrid admin tools

After completing this module, students will be able to:

• Describe the foundational principles of Azure IaaS, including compute, storage, and networking.
• Identify tools used to implement hybrid solutions, including Windows Admin Center and PowerShell.

Module 2: Implementing identity in hybrid scenarios

This module presents the three primary methods of integrating identity management and authentication in hybrid scenarios; AD DS on Azure VMs, AD DS integrated with Azure Active Directory, and Azure AD DS).

Lessons

• Implementing AD DS on Azure IaaS
• Integrating AD DS with Azure AD
• Implementing managed AD DS environments

Lab : Implementing integration between AD DS and Azure AD

• Preparing Azure AD for integration with AD DS
• Preparing on-premises AD DS for Azure AD integration
• Downloading, installing, and configuring Azure AD Connect
• Verifying integration between AD DS and Azure AD
• Implementing Azure AD integration features in AD DS

After completing this module, students will be able to:

• Implement AD DS on Azure IaaS.
• Integrate AD DS with Azure AD.
• Implement Managed AD DS.

Module 3: Facilitating hybrid management and operational monitoring in hybrid scenarios

This module highlights tools that facilitate hybrid management and operational monitoring, (separate from security-related monitoring, which is covered in module 4), including Windows Admin Center, Azure Arc, Azure Automation, and Azure Monitor.

Lessons

• Windows Admin Center
• Azure Arc
• Azure Monitor
• Azure Automation

Lab : Using Windows Admin Center in hybrid scenarios

• Provisioning Azure VMs running Windows Server 2019
• Implementing hybrid connectivity via Azure Network Adapter
• Deploying Windows Admin Center gateway in Azure
• Verifying functionality of Windows Admin Center gateway in Azure

After completing this module, students will be able to:

• Describe, deploy and configure Windows Admin Center.
• Describe and implement Azure Arc.
• Describe and manage Azure Monitor.
• Implement Service Map.
• Integrate Azure Monitor with Operations Manager.

Module 4: Implementing security solutions in hybrid scenarios

This module describes the primary techniques and services that enhance hybrid security, including Azure Security Center, Azure Sentinel, and Azure Monitor/Azure Automation-based solutions for Windows Update Management.

Lessons

• Azure Security Center
• Azure Sentinel
• Managing Windows Updates

Lab : Using Azure Security Center in hybrid scenarios

• Provisioning Azure VMs running Windows Server 2019
• Configuring Azure Security Center
• Onboarding on-premises Windows Server 2019 into Azure Security Center
• Verifying the hybrid capabilities of Azure Security Center

After completing this module, students will be able to:

• Describe Azure Security Center and enable it in hybrid environments.
• Describe Azure Sentinel and implement SIEM functionality.
• Implement SOAR solutions in Azure Sentinel.
• Implement the Update Management solution in Azure Automation.

Module 5: Implementing file services in hybrid scenarios

This module describes how to leverage Azure File Services to replace or enhance on-premises Windows file servers. The module covers implementing Azure Files and Azure File Sync.

Lessons

• Implementing Azure Files
• Implementing Azure File Sync

Lab : Implementing Azure File Sync

• Implementing DFS Replication in your on-premises environment
• Creating and configuring a sync group
• Replacing DFS Replication with File Sync–based replication
• Verifying replication and enabling cloud tiering
• Troubleshooting replication issues

After completing this module, students will be able to:

• Troubleshooting replication issues
• Describe and implement Azure File Sync.
• Manage cloud tiering.
• Migrate from DFSR to Azure File Sync.

Module 6: Deploying and configuring Azure VMs

his module describes how to deploy and configure Azure VMs running Windows Server 2019. The module covers how to configure Azure VM networking, storage, and security.

Lessons

• Deploying Azure VMs
• Configuring Azure VM networking
• Configuring Azure VM storage
• Configuring Azure VM security

Lab : Deploying and configuring Windows Server 2019 on Azure VMs

• Authoring ARM templates for Azure VM deployment
• Modifying ARM templates to include VM extension-based configuration
• Deploying Azure VMs running Windows Server 2019 by using ARM templates
• Configuring administrative access to Azure VMs running Windows Server 2019
• Configuring Windows Server 2019 security in Azure VMs

After completing this module, students will be able to:

• Implement Azure VM platform-level resiliency.
• Implement Windows Server 2019 operating system-level resiliency in Azure VMs.
• Implement Azure VM extensions for Windows Server 2019.
• Configure and optimize Azure VM networking.
• Configure Azure VM disks.
• Scale Azure VM storage

Module 7: Managing and maintaining Azure VMs

This module describes how to manage and maintain Azure VMs running Windows Server 2019. The module describes tools for managing and maintaining Azure VMs, including Windows Admin Center, PowerShell Remoting via the Cloud Shell, the Run Command, serial console, and Azyure policeis via Guest Configuration extension.

Lessons

• Managing Azure VMs running Windows Server 2019
• Maintaining Azure VMs running Windows Server 2019

Lab : Managing Azure VMs running Windows Server 2019

• Provisioning Azure VMs running Windows Server 2019
• Managing Windows Server 2019 in Azure VMs by using Windows Admin Center
• Managing Windows Server 2019 in Azure VMs from Cloud Shell by using PowerShell Remoting
• Managing Windows Server 2019 in Azure VMs by using Run Command
• Managing Windows Server 2019 in Azure VMs by using the serial console
• Managing Windows Server 2019 in Azure VMs by using Azure Policy Guest Configuration

After completing this module, students will be able to:

• Manage Windows Server 2019 in Azure VMs.
• Implement Azure policies.
• Maintain Windows updates.
• Describe Azure VM-level and disk-level backup and restore.
• Maintain Azure VM availability.

Module 8: Planning and implementing migration and recovery services in hybrid scenarios

This module describes how to plan and implement hybrid and cloud only migration, backup, and recovery scenarios by leveraging Windows Server 2019 and Azure services. These services include Azure Migrate, Storage Migration Service, Azure Backup, Azure Site Recovery, and Storage Replica.

Lessons

• Azure Migrate
• Storage Migration Server
• Azure Site Recovery
• Storage Replica
• Azure Backup

Lab : Implementing Azure-based recovery services

• Implementing the lab environment
• Creating and configuring an Azure Site Recovery vault
• Implementing Hyper-V VM protection by using Azure Site Recovery vault
• Implementing Azure Backup

After completing this module, students will be able to:

• Migrate Windows Server workloads by using Azure Migrate.
• Describe Storage Migration Service and identify appropriate scenarios for its use.
• Explain how Azure Site Recovery aids business continuity and disaster recovery.
• Migrate Windows servers to Azure by using Azure Site Recovery.
• Describe Storage Replica and appropriate scenarios for its use.
• Replicate storage to Azure VMs by using Storage Replica.
• Back up on-premises workloads by using Azure Backup.

• Experience with managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including AD DS, DNS, DFS, Hyper-V, and File and Storage Services
• Experience with common Windows Server management tools (implied by the first prerequisite).
• Basic knowledge of core Microsoft compute, storage, networking, and virtualization technologies (implied by the first prerequisite).
• Basic knowledge of on-premises resiliency Windows Server-based compute and storage technologies (Failover Clustering, Storage Spaces).
• Basic experience with implementing and managing IaaS services in Microsoft Azure.
• Basic knowledge of Azure Active Directory.
• Basic understanding security-related technologies (firewalls, encryption, multi-factor authentication, SIEM/SOAR).
• Basic knowledge of PowerShell scripting.

An understanding of the following concepts as related to Windows Server technologies:

• High Availability and Disaster Recovery
• Automation
• Monitoring