Is AZ-802 hard? Exam difficulty explained
AZ-802 is a moderately hard associate exam, and noticeably harder for people who know Windows Server only from the GUI or only from Azure. No single topic is exotic. The difficulty comes from breadth — seven domains in 120 minutes, from FSMO roles to Azure Arc to Storage Replica — from troubleshooting scenarios that cross several services, and from the fact that the exam is new, with little official practice material yet.
What makes it hard
Seven domains, one exam
AZ-802 packs most of what AZ-800 and AZ-801 covered in two exams into one. Each of its seven domains was a full domain on an older exam. The per-topic depth is a little lower, but you need to be ready for questions on Hyper-V GPU partitioning, DNSSEC, File Sync cloud tiering, OSConfig and SYSVOL recovery in the same sitting.
Active Directory is everywhere
AD DS is the largest domain at 20–25%, and it appears again in the security domain (password policies, Protected Users, delegation, DC hardening) and the troubleshooting domain (Recycle Bin, DSRM, SYSVOL, replication, Kerberos, secure channels). Weak AD knowledge costs marks in three places.
Hybrid tools overlap
Windows Admin Center, Azure Arc, machine configuration, Azure Update Manager, Azure Automation and Azure Monitor all manage servers, and several answer options can look right. The exam expects you to know which one is designed for a given job: patching, configuration drift, a scheduled script or an alert.
You read PowerShell
The audience profile names PowerShell, and questions use cmdlets: which parameter enables nested virtualization, which command creates a gMSA, which one repairs a secure channel. Candidates who manage everything through consoles lose time and marks here.
The options all sound right
Hot standby or load balance, DDA or GPU partitioning, forest trust or external trust, authoritative or non-authoritative restore, Credential Guard or Protected Users. The requirement usually contains the deciding word: standby site, one VM, only two servers, no backup, NTLM.
What makes it easier
- A familiar product. Windows Server administration has changed less than cloud services have. Experience transfers directly.
- Less material than the old pair. Containers, migration, clustering, backup and Site Recovery, remote access and Entra Connect are gone.
- A generous clock. 120 minutes is more time than many associate exams give.
- Everything is labbable on one Hyper-V host with evaluation software and a small Azure budget.
What makes it harder right now
- No official practice assessment yet. Microsoft says it usually appears within eight weeks of an exam leaving beta.
- English only. Non-native speakers can request 30 extra minutes.
- Thin study material. Most courses and books were written for AZ-800 and AZ-801 and spend a lot of time on topics AZ-802 dropped.
How hard for whom
| Your background | Expected difficulty | Realistic preparation |
|---|---|---|
| Windows Server administrator, AD and Hyper-V daily | Moderate | 3–4 weeks, mostly hybrid and security |
| Passed AZ-800 or AZ-801 recently | Moderate | 2–4 weeks on the half you have not studied |
| Azure administrator with little on-premises work | Moderate to hard | 5–6 weeks; AD DS, Hyper-V and file services are new |
| Linux or VMware administrator | Hard | 6–8 weeks; AD and Windows tooling are new |
| No server administration experience | Hard | 8 weeks or more, with a lab from day one |
Common reasons people fail
- Studying from AZ-800 and AZ-801 material without filtering it. Time goes to topics that no longer appear.
- Skipping the hybrid half. On-premises veterans often assume Arc and Update Manager are details. They are a full domain.
- Treating troubleshooting as general knowledge. It needs specific tools and procedures, such as authoritative SYSVOL sync and secure channel repair.
- GUI-only practice. Cmdlets appear in the questions.
- Running out of time on the case study. Keep a reserve for it.
How to make it easier
Build one lab and keep extending it for four weeks: a two-site forest, Hyper-V with Replica, DNS and DHCP failover, a file server syncing to Azure Files, an Arc-enabled server patched by Update Manager, and a hardening pass with OSConfig and LAPS. Then break it and repair it. The study plan sets out the order.
Before booking, take the free 20-question practice test. If you score below 14, the domain guides in this section show you where to spend your remaining time.