LESSON PLAN · 2017-02-27 · MS 70-410 . objectives are listed in . Appendix C: 70-410: Installing...

TestOut Server Pro:

Install and Configure – English 3.1.x

LESSON PLAN

Revised 2016/05/17

Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them.

Table of Contents

Course Overview .................................................................................................. 4 Course Introduction for Instructors ........................................................................ 6 Section 1.1: Windows as a Server ........................................................................ 8 Section 1.2: Windows Server 2008 R2 Interface Overview ................................... 9 Section 1.3: Windows Server 2012 Interface Overview ...................................... 11 Section 2.1: Installation ....................................................................................... 13

Section 2.2: PowerShell ...................................................................................... 15 Section 2.3: Server Roles ................................................................................... 17 Section 2.4: Server Core ..................................................................................... 19

Section 2.5: Remote and Offline Servers ............................................................ 21 Section 2.6: NIC Teaming ................................................................................... 23 Section 2.7: Traditional Storage .......................................................................... 25

Section 2.8: Storage Pools ................................................................................. 27 Section 3.1: Virtual Machines ............................................................................. 29

Section 3.2: Virtual Machine Storage .................................................................. 31 Section 3.3: Virtual Networks .............................................................................. 33 Section 4.1: Active Directory ............................................................................... 35

Section 4.2: Domain Controllers ......................................................................... 36 Section 4.3: Sites ................................................................................................ 38

Section 4.4: Organizational Units ........................................................................ 39 Section 4.5: Users Accounts ............................................................................... 41

Section 4.6: Bulk User Operations ...................................................................... 43 Section 4.7: Computer Accounts......................................................................... 45

Section 4.8: Groups ............................................................................................ 47 Section 4.9: Rights Delegation ............................................................................ 49 Section 5.1: Single-label Names ......................................................................... 51

Section 5.2: Name Resolution ............................................................................ 52 Section 5.3: Zone Management .......................................................................... 54

Section 5.4: DNS Records .................................................................................. 56 Section 5.5: DNS Server Properties.................................................................... 58

Section 5.6: DNS Troubleshooting ...................................................................... 60 Section 6.1: File Access ...................................................................................... 61 Section 6.2: Access-based Enumeration (ABE) and Volume Shadow Copy (VSS) ............................................................................................................................ 63

Section 6.3: Shares ............................................................................................. 65 Section 6.4: Sharing on Server 2012 .................................................................. 67 Section 6.5: Effective Permissions ...................................................................... 69

Section 7.1: Print Servers ................................................................................... 71 Section 7.2: Print Management ........................................................................... 73 Section 8.1: Group Policy Foundation ................................................................. 75 Section 8.2: Group Policy Management .............................................................. 77


Section 8.3: Password Policies ........................................................................... 79

Section 8.4: Audit Policies .................................................................................. 80 Section 8.5: User Rights Assignment .................................................................. 82 Section 8.6: Security Options .............................................................................. 83 Section 8.7: Restricted Groups ........................................................................... 85 Section 8.8: Windows Firewall Policies ............................................................... 86 Section 8.9: Application Restriction Policies ....................................................... 88 Section 8.10: Group Policy Preferences ............................................................. 90 Section 9.1: IPv4 Addressing .............................................................................. 91 Section 9.2: IPv4 Custom Addressing ................................................................. 93 Section 9.3: IPv6 Addressing .............................................................................. 95 Section 10.1: DHCP Basics ................................................................................ 97 Section 10.2: DHCP Exclusions and Reservations ............................................. 99

Section 10.3: DHCP Centralization ................................................................... 101 Section 10.4: DHCP Troubleshooting ............................................................... 103

Server Pro: Install and Configure Practice Exams ............................ 104 Microsoft 70-410 Practice Exams ..................................................................... 105 Appendix A: Approximate Time for the Course ................................................. 106

Appendix B: Server Pro: Install and Configure Objectives................. 109 Appendix C: 70-410: Installing and Configuring Server 2012 ........................... 112

Course Overview This course prepares students for TestOut’s LabSim Server Pro: Install and Configure, and Microsoft’s 70-410 certification exam.

Module 1 – Introduction

This module introduces the students to services a server provides and tools to administer Windows Server R2 and Windows Server 2012.

Module 2 – Installation and Configuration

In this module students will learn about installing and configuring Windows

Server 2012.

Module 3 – Hyper-V

This module teaches students about managing virtual machines with the Hyper-V Manager.

Module 4 – Active Directory

This module discusses details and components about managing Active Directory.

Module 5 – DNS

This module examines managing the configuration of DNS and all the elements

related to it.

Module 6 – File and Share Access

In this module students will learn concepts about configuring file and share access. This includes managing permissions, quotas, who can see what, and sharing and effective permissions.

Module 7 – Print and Document Services

This module discusses configuring and managing print and document services.

Module 8 – Group Policy

In this module students will learn about using Group Policy to centralize administration and manage security.

Module 9 – Networking

This module discusses details about how computers use IPv4 and IPv6

addressing to communicate with each other.

Module 10 – DHCP

This module examines installing and configuring DHCP. This includes scopes, options, exclusions, reservations, and centralization.



Practice Exams

In Practice Exams students will have the opportunity to test themselves and verify that they understand the concepts and are ready to take the certification exam. The practice exams are divided into two separate modules and will contain examples of the types of questions that a student will find on the actual exam:

Server Pro: Install and Configure Certification Practice Exams

Microsoft 70-410 Practice Exams


Course Introduction for Instructors

This course provides students with the knowledge to become industry certified as a Windows professional. This course actually meets the specifications for two different industry certification programs. It prepares the student for the following:

TestOut's Server Pro: Install and Configure certification

Microsoft’s 70-410: Windows Server, Installing and Configuring Server 2012

TestOut’s Server Pro: Install and Configure certification is a new certification which measures not just what you know, but what you can do. The TestOut Server Pro Certification measures your ability to design, implement, configure and manage a Windows network that incorporates Windows Server 2012. The following knowledge domains are addressed:

Configure Windows Servers

Hyper-V

Active Directory

DNS

File and Print Services

Group Policy

Networking and DHCP

Note: Server Pro: Install and Configure objectives are listed in Appendix B: Server Pro: Install and Configure Objectives.

Microsoft’s 70-410: Installing and Configuring Server 2012 certification measures the students’ ability to install, configure, and manage Windows Server 2012 operating system. The following knowledge domains are addressed:

Install and configure servers

Configure server roles and features

Configure Hyper-V

Deploy and configure core network services

Install and administer Active Directory

Create and manage Group Policy

Note: MS 70-410 objectives are listed in Appendix C: 70-410: Installing and Configure Server 2012.

The section introductions in LabSim and the lesson plans list the objectives that are met for each of the exams in that section.


The following icons are placed in front of lesson items in LabSim to help students quickly recognize the items in each section:

= Demonstration

= Exam

= Lab/Simulation

= Text lesson or fact sheet

= Video The video and demonstration icons are used throughout the lesson plans to help instructors differentiate between the timing for the videos and demonstrations. In the lesson plans the Total Time for each section is calculated by adding the approximate time for each section which is calculated using the following elements:

Video/demo times

Approximate time to read the text lesson (the length of each text lesson is taken into consideration)

Simulations (5 minutes is assigned per simulation. This is the amount of time it would take for a knowledgeable student to complete the lab activity. Plan that the new students will take much longer than this depending upon their knowledge level and computer experience.)

Questions (1 minute per question) Note: Appendix A: Approximate Time for the Course contains the approximate time for each section which are totaled for the entire course.


Section 1.1: Windows as a Server

Summary

This section provides an introduction of the course. This course is designed to prepare you for the following certification exams:

TestOut’s Server Pro: Install and Configure

Microsoft’s 70-410 exam, a requirement foro Microsoft Certified Solutions Associate (MCSA)o Microsoft Solutions Expert (MCSE): Server Infrastructureo Microsoft Solutions Master (MCSM): Directory Services

Video/Demo Time

1.1.1 Windows Server 2:47

Number of Exam Questions

5 questions

Total Time

About 10 minutes


Section 1.2: Windows Server 2008 R2 Interface Overview

Summary

This section provides an overview of the Windows Server 2008 R2 Interface. Students will become familiar with the:

Differences between Windows Server 2008 and Windows Server R2

Tools used to administer to Windows Server 2008 R2 o Initial Configuration Tasks (ICT) o Server Manager o Administrative Tools

Editions of the Windows Server 2008 operating system

Editions of the Windows Server 2008 R2 operating system Students will learn how to:

View available Administrative Tools from the Start menu

Open Administrative Tools within Server Manager

Execute a command from a command prompt

Access the Control Panel

Open the Network and Sharing Center

Open Computer Management within Administrative Tools

Open Windows Explorer and browse the Windows Server 2008 R2 file structure.

Server Pro Exam Objectives:

1.0 Configure Windows Servers o Navigate Server Interfaces

Navigate the Windows Server 2008 R2 Interface

70-410 Exam Objectives:

100 Install and Configure Servers Lecture Focus Questions:

Which command can you use to display the ICT?

How should you access Windows PowerShell to ensure that you have the PowerShell commands for the roles and services you have installed?

What tasks do you perform to customize a server?

What are key differences between Windows Server 2008 and Windows Server 2008 R2?

What is the difference between roles, role services, and features?


Video/Demo Time

1.2.1 Windows Server 2008 R2 User Interface 3:57 1.2.2 Using the Windows Server 2008 R2 User Interface 3:50

Total 7:47

Lab/Activity

Explore the Windows 2008 R2 User Interface


7 questions

Total Time

About 25 minutes


Section 1.3: Windows Server 2012 Interface Overview

Summary

This section provides an overview of the Windows Server 2012 interface. Students will become familiar with the:

Tools to administer Windows Server 2012: o Server Manager o PowerShell

Interface elements used to navigate Windows Server 2012: o Start screen o Charms menu

Windows Server 2012 editions Students will learn how to:

Open Administrative Tools within Server Manager

Access the Start screen

Open an application from the Start screen

Run a command from a command prompt

Access the Control Panel

Open the Network and Sharing Center

Open Computer Management within Administrative Tools

Open File Explorer and browse the Windows Server 2012 file structure.


1.0 Configure Windows Servers o Navigate Server Interfaces

Navigate the Windows Server 2012 Interface


100 Install and Configure Servers Lecture Focus Questions:

Which Windows Server 2012 editions provide all features of Windows Server 2012?

How do you access the Charms menu?

What are two ways can you access the Start screen?

How do you add tools to the Tools menu?

What happens when two commands are piped?


Video/Demo Time

1.3.1 Windows Server 2012 User Interface 4:44 1.3.2 Using the Windows Server 2012 User Interface 4:45 1.3.3 Using the Windows Server 2012 R2 User Interface 1:26

Total 9:29

Lab/Activity

Explore the Windows 2012 User Interface


8 questions

Total Time

About 25 minutes


Section 2.1: Installation

Summary

This section provides an overview of the Windows Server 2012. Students will become familiar with the:

Windows Server 2012 editions: o Foundation o Essentials Edition o Standard Edition o Datacenter Edition

Minimum requirements for all editions of Windows Server 2012

Windows Server 2012 Upgrade paths

Server Core

Using Server Manager Students will learn how to:

Plan a Windows Server 2012 installation.

Install Windows Server 2012.


1.0 Configure Windows Servers


101 Install servers This objective may include but is not limited to:

o Plan for a server installation o Plan for a server upgrade

Lecture Focus Questions:

Which editions of Windows Server 2012 support a Server Core installation?

What is the system volume free space requirement for Windows Server 2012?

If you are currently running Windows Web Server 2008 R2, what is your upgrade path?

How many virtual instances are allowed on each Windows Server 2012 edition?

What is the difference between a full installation of Windows Server 2012 and a Server Core installation?


How does a Server Core installation in Windows Server 2012 differ from a Server Core installation in previous versions of Windows Server?

Can a full installation of Windows Server 2012 be converted to a Server Core installation?

Video/Demo Time

2.1.1 Server Installation and Upgrade 7:29 2.1.2 Installing Windows Server 2012 3:54

Total 11:23


5 questions

Total Time

About 20 minutes


Section 2.2: PowerShell

Summary

This section discusses using PowerShell to create scripts from the command line to automate system administration and application management tasks. Concepts covered include:

Terms used with PowerShell: o Command line o Cmdlets o Providers

New features in PowerShell 3.0: o Deployment Image Servicing and Management (DISM) o Remote Windows PowerShell o Windows PowerShell Workflows

Windows Server 2012 R2 introduced PowerShell Desired State Configuration (DSC)

Students will learn how to:

Use PowerShell cmdlets to configure a Windows Server 2012


1.0 Configure Windows Servers o Configure Server Services

Configure Server Services


102 Configure servers Lecture Focus Questions:

What is the typical PowerShell command format?

How can you access the cmdlet help system?

How can you cycle through options for a cmdlet?

How can you use the auto-complete feature of PowerShell 3.0?

What is the purpose of Windows PowerShell providers?

How can you import a PowerShell module when writing a script?


Video/Demo Time

2.2.1 PowerShell Overview 7:39 2.2.2 Using PowerShell 5:00 2.2.3 PowerShell Desired State Configuration (DSC) 9:01 2.2.4 Using PowerShell Desired State Configuration (DSC) 6:11

Total 27:51


5 questions

Total Time

About 35 minutes


Section 2.3: Server Roles

Summary

In this section students will learn the roles, role services and features in Windows Server 2012. Concepts covered in this section include:

Roles: o Active Directory Domain Service (AD DS) o Active Directory Certificate Services (AD CS) o DNS Server o DHCP Server o File and Storage Services o Hyper-V o Print and Document Services o Network Policy and Access Services o Web Server (IIS) o Windows Deployment Services (WDS) o Windows Server Update Server

Role services: o Distributed Scan Server o Network Policy Server (NPS) o Host Credential Authorization Protocol (HCAP) o Health Registration Authority (HRA)

Features: o Failover Clustering o Group Policy o Network Load Balancing o BitLocker Drive Encryption o Remote Assistance o SMTP Server o Windows Server Backup

Features on Demand Students will learn how to:

Install roles on Windows Server 2012.






o Plan for server roles o Optimize resources utilization by using Features on Demand o Migrate roles from previous versions of Windows Server

102 Configure servers This objective may include but is not limited to:

o Configure services Lecture Focus Questions:

What is the relationship between server roles, role services, and features?

How is a new role installed on a server?

How do you remove a role in Windows Server 2012?

Which role should be installed if you want to configure a local update server?

How can you migrate roles from an existing system running an earlier version of Windows Server to Windows Server 2012?

Which Windows Server 2012 feature allows you to remove the source files of unused roles and features?

What is the benefit of removing the source files of unused roles and features?

What methods can be used to obtain source files to re-install removed roles and features files?

Video/Demo Time

2.3.1 Server Roles 2:04 2.3.2 Migrating Server Roles 11:25 2.3.3 Features on Demand 5:34 2.3.4 Using Features on Demand 5:28

Total 24:31


3 questions

Total Time

About 35 minutes


Section 2.4: Server Core

Summary

This section examines selecting and performing a Server Core installation option. Concepts covered include:

Installation options when installing Windows Server 2008 R2: o Server Core o Minimal Server Interface o Server with a GUI

Considerations when selecting the installation option

Tasks to perform after the Server Core installation: o Name the computer o Set the time and time zone o Assign a static IP address to the server o Join the server to the domain

PowerShell commands for switching between server installation options

Tasks to convert from Server with a GUI to a Minimal Server installation

Tasks to convert from Server with a GUI to a Server Core installation Students will learn how to:

Install and configure a Windows Server 2012 Server Core system.

Convert a Windows Server 2012 Server Core installation to a full installation.

Convert a Windows Server 2012 full installation to a Server Core installation.





o Plan for a server installation o Install Server Core


o Configure Server Core o Convert Server Core to/from full GUI

203 Configure servers for remote management This objective may include but is not limited to:


o Configure Server Core Lecture Focus Questions:

How does a Minimal Server Interface installation differ from a Server Core installation?

What are the benefits of a Server Core installation?

Which utility do you use to make changes to Server Core settings?

Which PowerShell command converts a Server with a GUI installation to a Server Core installation?

Which four tasks should you perform immediately after a Server Core installation?

Which command joins the server to the domain after the Server Core installation?

Video/Demo Time

2.4.1 Server Core 3:21 2.4.2 Configuring Server Core 8:18 2.4.3 Server Core Conversion 4:29 2.4.4 Converting Server Core 7:46

Total 24:54


5 questions

Total Time

About 35 minutes


Section 2.5: Remote and Offline Servers

Summary

This section provides information about remote role deployment tasks. Concepts covered include:

Role deployment tasks: o Add domain servers to the server pool o Manage non-domain workstations o Deploy a role on a remote server o Deploy a role to a VHD file

Using the Windows Remote Management WINRM command

Using Deployment Image Servicing and Management (dism) commands Students will learn how to:

Configure a server for remote management.

Deploy roles and features to a remote server.

Deploy roles and features to an offline image.

Use the WINRM command to manage a remote server





o Add and remove features in offline images o Deploy roles on remote servers


o Configure WinRM o Configure down-level server management o Configure servers for day-to-day management tasks o Configure multi-server management



How does remote management of servers increase efficiency?

What is a server pool?

How are servers added to a server pool?

Which roles do not support Manage As to change credentials?

What are the steps required to install and manage roles on a remote server that is not joined to the domain?

What are the requirements for deploying a role to a VHD file?

What software is required to use an answer file with Deployment Image Servicing Management (dism)?

Video/Demo Time

2.5.1 Remote Role Deployment 6:42 2.5.2 Configuring Servers for Remote Management 6:09 2.5.3 Deploying Role on Remote Servers 1:28 2.5.4 Offline Images 11:48 2.5.5 Deploying Features to Offline Images 7:12 2.5.6 WinRM 5:30

Total 38:49


6 questions

Total Time

About 50 minutes


Section 2.6: NIC Teaming

Summary

This section discusses using NIC Teaming to increase bandwidth and provide fault tolerance. Details covered include:

Considerations regarding NIC Teaming

NIC Teaming modes: o Switch-dependent mode o Switch-independent mode

Load balancing mode methods: o Hyper-V switch port o Hashing


Configure NIC Teaming.


1.0 Configure Windows Servers o Configure Server Services

Configure NIC Teaming



o Configure NIC teaming Lecture Focus Questions:

What are the benefits of using NIC Teaming?

How does switch-dependent mode differ from switch-independent mode?

How does static teaming differ from dynamic teaming?

What is the function of the Link Aggregation Control Protocol (LACP)?

How many standby NICs are there in an active/passive configuration?

What are the restrictions of using NIC Teaming with Hyper-V?


Video/Demo Time

2.6.1 NIC Teaming 7:00 2.6.2 Configuring NIC Teaming 3:21

Total 10:21

Lab/Activity

Configure NIC Teaming


8 questions

Total Time

About 45 minutes


Section 2.7: Traditional Storage

Summary

This section examines using managing traditional storage. Concepts covered include:

Implementing directly-attached storage

Partition styles of disks: o Master Boot Record (MBR) o GUID Partition Table (GPT)

Types of Volumes: o Basic o Dynamic

Dynamic Volume Types: o Simple o Spanned o Striped (RAID 0) o Striped with parity (RAID 5) o Mirrored (RAID 1)

Considerations when managing disks and volumes for directly-attached storage

Strategies for adding space to existing volumes: o Extend the volume o Configure a mount point

The role of ReFS Students will learn how to:

Initialize a disk

Configure a volume

Extend a volume

Configure fault tolerant volumes

Create a mount point

Manage disks and volumes



1.0 Configure Windows Servers o Configure Server Storage

Configure Server Volumes Configure Fault Tolerant Volumes Create a Mount Point


103 Configure local storage This objective may include but is not limited to:

o Configure basic and dynamic disks o Configure MBR and GPT disks o Manage volumes


What are the advantages of GPT partitioning over MBR partitioning?

Why is MBR recommended for disk sizes smaller than 2 TB?

How does a basic disk differ from a dynamic disk?

Which disk configuration is used with spanned, striped, and mirrored volumes?

What information does the dynamic disk database contain?

When would you use a mount point?

How do spanned disks use disk space?

Video/Demo Time

2.7.1 Disk Storage 10:13 2.7.3 Volumes 15:50 2.7.4 Volume Formats 7:09 2.7.6 Managing Disks and Volumes 9:07

Total 42:19

Lab/Activity

Configure Volumes Configure Fault Tolerance Volumes Create a Mount Point


9 questions

Total Time

About 75 minutes


Section 2.8: Storage Pools

Summary

In this section students will explore using storage pools. Details include:

Components of storage spaces: o Devices o Pools of storage o Storage spaces

Steps to add more space to storage spaces

Configuration options in storage pool creation: o Allocation o Storage layout:

Simple Two-way mirror Three-way mirror Parity

o Provisioning Fixed provisioning Thin provisioning

o Storage tiers o Write-back cache

Primordial storage pool

Storage pool limitations

PowerShell command to manage storage spaces

Considerations of enclosure awareness (introduced in Windows Server 2012 R2)


Create and mount a VHD.

Create storage pools.


1.0 Configure Windows Servers o Configure Server Storage

Create and Mount Virtual Hard Disks (VHDs) Create a Storage Pool




o Design storage spaces o Create and mount virtual hard disks (VHDs) o Configure storage pools and disk pools


What are the advantages of the VHDX format compared to the VHD format?

What are the advantages of a dynamically expanding disk compared to a fixed disk?

Which virtual hard disk type provides the best performance?

What are the advantages of storage pools compared to traditional storage?

What is thin provisioning?

What is contained in the primordial storage pool?

What are the disk requirements for adding a disk to the storage pool?

Video/Demo Time

2.8.1 Creating and Mounting a VHD 3:59 2.8.4 Creating Storage Pools 6:46 2.8.5 Disk Enclosures with Storage Pool 12:51

Total 23:36

Lab/Activity

Create and Mount a VHD Create a Storage Pool


10 questions

Total Time

About 50 minutes


Section 3.1: Virtual Machines

Summary

This section provides details of creating and managing virtual machines. Concepts covered include:

Virtualization types: o Server virtualization o Network virtualization o Storage virtualization

Hyper-V details

Hardware requirements for Windows Server 2012 running Hyper-V

New or updated features available in Windows Server 2012 Hyper-V and Windows Server R2 Hyper-V:

o Dynamically expanding memory o Smart paging o Resource metering o Resource control o Integration Services o Enhanced Session Mode

Key components of generation 2 virtual machines: o Supported guest operating systems o Hardware o Supported features o Non-supported features

Facts regarding generation 2 virtual machines Students will learn how to:

Create a virtual machine.

Manage a virtual machine: o Add and manage hardware. o Change boot order. o Change memory allocation. o Manage processors. o Configure Integration Services. o Configure shutdown options.


2.0 Hyper-V o Manage Virtual Machines with Hyper-V Manager

Create and Manage Virtual Machines



301. Create and configure virtual machine settings. This objective may include but is not limited to:

o Configure dynamic memory o Configure smart paging o Configure Resource Metering o Configure guest integration services


What are the hardware requirements for a Windows Server 2012 running Hyper-V?

How does Hyper-V in Windows Server 2012 differ from Hyper-V in previous Windows Server versions?

What is the purpose of the Memory weight setting? How is it used?

What is an advantage to using dynamically expanding memory?

What are some advantages to using fixed memory?

In what situation is smart paging used?

What is the difference between resource metering and resource control?

Video/Demo Time

3.1.1 Virtual Machines 9:59 3.1.2 Virtual Machines on 2012 R2 9:56 3.1.3 Creating Virtual Machines 6:48 3.1.4 Managing Virtual Machines 9:32

Total 36:15

Lab/Activity

Create Virtual Machines


9 questions

Total Time

About 55 minutes


Section 3.2: Virtual Machine Storage

Summary

This section discusses creating and managing virtual machine storage. Concepts covered include:

Considerations when creating a new VM

VHDs management tasks: o Expand o Shrink o Compact o Convert

Considerations for Hyper-V in Windows Server 2012

VMs features: o Pass-through disk o Differencing disk o Snapshot/Checkpoint


Create a virtual hard disk.

Install a parent virtual machine using a fixed virtual hard disk.

Create differencing disks from a parent disk.

Create, apply, and delete snapshots.

Convert, compact, merge, and expand virtual hard disks.



Create Virtual Hard Disks (VHDs) Create Differencing Drives (Parent-Child)


302. Create and configure virtual machine storage This objective may include but is not limited to:

o Create VHDs and VHDXs o Configure differencing drives o Modify VHDs o Configure pass-through disks o Manage snapshots o Implement a virtual Fibre Channel adapter



Why is it necessary to compact dynamically expanding virtual disk files?

Under what conditions should a virtual disk configuration not be edited?

What is a key difference between using IDE and SCSI virtual disks?

How is a pass-through disk implemented in a virtual machine?

Under what circumstances would it be advantageous to use differencing disks?

How does Hyper-V in Windows Server 2012 protect the integrity of domain controllers running as virtual machines?

When should you create a snapshot of a virtual machine?

What is the difference between snapshots and differencing disks?

Video/Demo Time

3.2.1 Virtual Hard Disks 3:14 3.2.2 Creating Virtual Hard Disks 6:11 3.2.3 Differencing Disks 2:48 3.2.4 Snapshots 3:52 3.2.5 Creating Snapshots 6:20

Total 22:15

Lab/Activity

Create Virtual Hard Disk Create a Parent Virtual Machine Create Child Virtual Machines


13 questions

Total Time

About 55 minutes


Section 3.3: Virtual Networks

Summary

In this section students will learn about virtual networks. Concepts covered include:

Types of virtual networks: o External o Internal o Private network o Fibre Channel

Virtual network adapters supported by: o Generation 1 o Generation 2

Virtual switches

Considerations for installing virtual switches: o External o VLAN o Fibre Channel

Features available to optimize virtual networks: o Virtual Machine Queue (VQM) o IPSec Task Offloading (IPSecTO) o DHCP Guard o Router Guard o Port Mirroring o NIC Teaming o Port Access Control Lists (ACLs) o Meter Port ACLs o Private Virtual Local Area Network (PVLAN) o Trunking o Storage quality of service (QoS)


Create a virtual network.



Create Virtual Network and Settings



302. Create and configure virtual machine storage This objective may include but is not limited to:

o Implement a virtual Fibre Channel adapter

303. Create and configure virtual networks This objective may include but is not limited to:

o Implement Hyper-V Network Virtualization o Configure Hyper-V virtual switches o Optimize network performance o Configure MAC addresses o Configure network isolation o Configure synthetic and legacy virtual network adapters


What is the difference between an internal virtual network and a private virtual network?

Which virtual network types do not allow virtual machines to communicate with other hosts on the physical network?

When would you need to use a legacy virtual network adapter?

When setting up a virtual network, what is the recommended number of network cards for the physical system? How should they be configured?

How can a virtual machine be configured to participate on a VLAN?

Video/Demo Time

3.3.1 Virtual Network Adapters 2:49 3.3.2 Adding Virtual Network Adapters 4:07 3.3.3 Virtual Switches 4:45 3.3.4 Creating Virtual Switches 3:26 3.3.7 Network Optimization 7:03 3.3.8 Optimizing Virtual Network Performance 7:02

Total 29:12

Lab/Activity

Create Virtual Switches Prepare a Production Virtual Machine


12 questions

Total Time

About 60 minutes


Section 4.1: Active Directory

Summary

This section provides details of Active Directory. Concepts covered include:

Active Directory components: o Trees and Forests o Domain o Organizational Unit (OU) o Objects o Generic Containers o Domain Controller o Global Catalog

The Active Directory database resides in Ntds.dit

Windows operating system networking models: o Stand-Alone o Workgroup o Client-Server


3.0 Manage Active Directory


500 Install and Administer Active Directory


What are the advantages of a client-server network model versus a workgroup model?

What is the difference between a tree and a forest? How can you tell when a new domain starts a new tree?

What is the function of transitive trusts in a forest?

What is the function of the schema?

How does Active Directory ensure that each domain controller has the most current information from other domain controllers?

Video/Demo Time

4.1.1 Active Directory Structure 6:59 4.1.2 Computer Roles 6:32

Total 13:31


4 questions

Total Time

About 20 minutes


Section 4.2: Domain Controllers

Summary

This section discusses installing and managing domain controllers. Concepts covered include:

Requirements for installing Active Directory Domain Services (AD DS)

Methods for Active Directory Domain Services (AD DS) installation: o Active Directory Domain Services Installation Wizard o Command Line o Answer file o AD DS installation from media

Considerations when upgrading domain controllers to Windows Server 2012 or Windows Server 2012 R2

Active Directory on Windows Azure

The role of domain controllers

Partitions within the directory partition: o Domain partition o Schema partition o Configuration partition o Application directory partition

Considerations when working with domains

Additional functions or roles that domain controllers can have: o Replica domain controller o Global Catalog o Operations Master Roles


Create a new domain.

Configure a Global Catalog server.

Troubleshoot DNS issues with Active Directory.


3.0. Manage Active Directory o Configure Global Catalog Servers


501. Install domain controllers This objective may include but is not limited to:

o Add and remove a domain controller from a domain o Upgrade a domain controller


o Install Active Directory Domain Services (AD DS) on a Server Core installation

o Install a domain controller from Install from Media (IFM) o Configure a global catalog server


To remove Active Directory from a domain controller, what action must you take before demoting the domain controller?

What are the four methods you can use to install Active Directory Domain Services?

How does Active Directory use the schema?

What is the function of a Global Catalog server?

How is a Global Catalog server updated?

What is the function of DNS in Active Directory?

What is the purpose of the directory partition?

Which partition types can be included in the directory partition?

Video/Demo Time

4.2.1 Domain Controller Installation 3:43 4.2.2 Domain Controller Upgrades 7:02 4.2.3 Global Catalog Server 4:33 4.2.4 Record Configuration Issues 3:22 4.2.5 Creating a New Domain 16:28 4.2.6 Deploying Active Directory with Windows Azure 12:47

Total 47:55


5 questions

Total Time

About 60 minutes


Section 4.3: Sites

Summary

This section discusses the role of sites and subnets. Students will learn how to:

Configure and configure a site.


3.0. Manage Active Directory


500. Install and Administer Active Directory Lecture Focus Questions:

How does a site differ from a domain?

What is the purpose of a site link?

What does the term "well-connected" mean when referring to networks?

How are sites used in Active Directory?

How do IP address and subnets relate to sites?

How are dynamic site assignments made?

Video/Demo Time

4.3.1 Site Overview 3:16 4.3.2 Configuring Sites 3:39

Total 6:55


3 questions

Total Time

About 10 minutes


Section 4.4: Organizational Units

Summary

In this section students will learn the basics of using Organization Units. Concepts covered in this section include:

Containers and OU created by default when Active Directory is installed: o Domain container o Builtin container o Users container o Computers container o Domain Controller OU

Details about an Organization Unit (OU)

Considerations for managing OUs: o Group Policy o Preventing accidental deletion o Delegating authority


Create organizational units.

Create nested organizational units.

Prevent accidental deletion of OUs.

Delegate administrative control.


3.0 Manage Active Directory o Create Organizational Units (OUs) o Delegate Administrative Control



o Delegate administration

503 Create and manage Active Directory groups and organizational units (OUs) This objective may include but is not limited to:

o Delegate the creation and management of Active Directory objects o Manage default Active Directory containers o Create, copy, configure, and delete groups and OUs.



What objects can an organizational unit contain?

How is an organizational unit different from a generic container?

What are the advantages of placing computer accounts in organizational units rather than the Computer container?

How does inheritance affect child organizational units?

How does object-based delegation differ from task-based delegation?

How can you protect objects from accidental deletion?

Video/Demo Time

4.4.1 Default Containers and Organizational Units 8:56 4.4.2 Creating Organizational Units 4:55

Total 13:51

Lab/Activity

Create OUs Delete OUs


4 questions

Total Time

About 30 minutes


Section 4.5: Users Accounts

Summary

This section discusses considerations when using user accounts. Details include:

Types of Windows user accounts: o Local o Domain

Active Directory name types: o User or Logon Name o User Principal Name (UPN) o Distinguished names o Relative Distinguished Name (RDN)

Recommendations when working with user accounts: o Create/manage user accounts o Use templates o Manage passwords o Create a user profile o Deprovision a user


Create a user account.

Disable a user account.

Manage user account passwords. Manage user accounts.


3.0 Create and Manage User and Computer Accounts o Create User Accounts o Manage User Accounts o Configure User Account Restrictions


502 Create and manage Active Directory users and computers This objective may include but is not limited to:

o Automate the creation of Active Directory accounts o Create, copy, configure, and delete users and computers o Configure templates o Manage inactive and disabled accounts



How is a domain user account different than a local user account?

What is the difference between a disabled, locked out, or expired user account?

What is the best way to handle a user's account when an employee quits the company and will be replaced by a new employee in the near future?

What are the recommendations for using a template user account?

What permissions does a user account created from a template have?

How should you re-create a user account that was accidentally deleted?

Video/Demo Time

4.5.1 Users and Computers 1:00 4.5.2 Users Accounts 1:45 4.5.3 Creating Users 9:24 4.5.4 Managing Users 7:45

Total 19:54

Lab/Activity

Create User Accounts Manage User Accounts


12 questions

Total Time

About 50 minutes


Section 4.6: Bulk User Operations

Summary

This section provides information about the following tools when performing bulk user operations such as creating or modifying large number of objects:

Csvde

Ldifde

PowerShell

Ldp

DS commands


Use Csvde to import and export Active Directory objects.

Use Domain Services (DS) commands to create and manage Active Directory objects.

Use PowerShell commands to create and manage Active Directory objects.

Use Ldifde commands to create and manage Active Directory objects.

Use the Ldp utility.


3.0 Create and Manage User and Computer Accounts

Create User Accounts

Manage User Accounts



o Perform bulk Active Directory operations


When would you choose Csvde over LDifde when managing objects?

Which tools add the user password to the user account?

Which tools can you use to create objects in Active Directory?

Which cmdlets can be used to manage Active Directory objects?

What is the benefit of piping multiple commands?

What utilities would you use to view the properties of multiple Active Directory objects?


What is the default action for the Csvde command?

Video/Demo Time

4.6.1 Bulk Operations 5:10 4.6.2 Creating Users in Bulk 16:40 4.6.3 Querying Active Directory with PowerShell 4:54

Total 26:44


12 questions

Total Time

About 45 minutes


Section 4.7: Computer Accounts

Summary

In this section students will learn about using computer accounts. Options covered include:

Processes to identify a specific computer: o Create a computer account in Active Directory o Join the computer to the domain.

Methods to perform these processes: o Pre-stage accounts o Manual join o Redirection o Offline domain join

Facts about computer accounts and joining a domain

Passwords Students will learn how to:

Create computer accounts and manage computer account properties.

Redirect the computer container.

Perform an offline domain join.


3.0 Active Directory o Create and Manage User and Computer Accounts

Create Computer Accounts


502. Create and manage Active Directory users and computers This objective may include but is not limited to:

o Automate the creation of Active Directory Accounts o Create, copy, configure, and delete users and computers o Offlline domain join


When should you pre-stage a computer account in an OU?

What is the benefit of computer account redirection?

What is the most likely cause of a computer not being able to join the domain after being turned off for several weeks?

What must you do after resetting a computer account?


How can you prevent or limit a domain user from joining computers to the domain?

How can you join a computer to the domain if it does not have a network connection?

Video/Demo Time

4.7.1 Computer Accounts 5:44 4.7.2 Redirecting the Computer Container 2:53 4.7.3 Performing an Offline Domain Join 4:00

Total 12:37

Lab/Activity

Create Computer Accounts


6 questions

Total Time

About 30 minutes


Section 4.8: Groups

Summary

This section discusses managing groups. Concepts covered include:

Groups: o Local group o Domain group

Group types: o Security o Distribution

Group scopes: o Local o Domain Local o Global o Universal

Query for group members

Considerations when managing groups Students will learn how to:

Create groups.

Create global groups.

Create a distribution group.

Change group scope.

Implement a group strategy.

Enumerate group membership.


3.0 Create and Manage Groups o Create and Manage Global Groups o Create and Manage Distribution Groups o Change the Group Scope o Implement Recommended Group Strategy



o Configure group nesting o Convert groups including security, distribution, universal, domain

local, and domain global.


o Manage group membership using Group Policy o Enumerate group membership o Manage default Active Directory containers o Create, copy, configure, and delete groups and OUs.


What are the advantages of using groups when setting permissions?

What is the difference between a security group and a distribution group?

What type of objects can be made members of a universal group? A domain local group?

What happens to user accounts when the group they are in is deleted?

Which PowerShell commands can be used to manage groups?

Video/Demo Time

4.8.1 Groups 13:14 4.8.2 Creating Groups 5:05 4.8.8 Enumerating Group Membership 2:01

Total 20:20

Lab/Activity

Create Global Groups Create a Distribution Group Change the Group Scope Implement a Group Strategy


10 questions

Total Time

About 55 minutes


Section 4.9: Rights Delegation

Summary

This section discusses rights delegation to share administrative tasks with other user. Concepts covered include:

Using Delegation of authority to enhance security

Processes to delegate administrative authority

Using the Delegation of Control wizard

Assigning permissions to Active Directory objects Students will learn how to:

Create security groups and delegate authority based on role.

Use the Delegation of Control wizard to assign permissions.


3.0 Manage Active Directory o Delegate Administrative Control



o Delegate the creation and management of Active Directory objects.


What security principle should be applied when you delegate administrative authority?

What are the processes typically involved in delegating administrative authority?

What is a limitation of the Delegation of Control Wizard?

What are the steps in delegating the right to create and link Group Policy Objects?

When is it necessary to delegate Manage Group Policy links?


Video/Demo Time

4.9.1 Rights Delegation 2:22 4.9.2 Using the Delegation of Control Wizard 5:01

Total 7:23

Lab/Activity

Delegate Administrative Control


4 questions

Total Time

About 20 minutes


Section 5.1: Single-label Names

Summary

This section provides information about the following strategies to provide single-label name resolution:

HOSTS file

Link-Local Multicast Name Resolution (LLMNR)

DNS suffix search list

DNS devolution

GlobalNames zone


Configure a DNS Suffix Search List.

Configure DNS Registration.


4.0 DNS o Manage DNS Configuration

Configure Search Suffixes


When would you use the GlobalNames zone?

Which strategies can you use to provide single-label name resolution for IPv6 hosts?

Should HOSTS files be used for name resolution in large networks?

When will a Windows client use LLMNR? What limitations does relying on LLMNR have?

How does DNS devolution work?

How can a DNS suffix search list be configured using Group Policy?

Video/Demo Time

5.1.1 Authentication and Authorization 9:49 5.1.2 Configuring DNS Suffix Search List 3:10

Total 12:59

Lab/Activity

Configure Search Suffixes


6 questions

Total Time

About 25 minutes


Section 5.2: Name Resolution

Summary

This section discusses name resolution using DNS. Concepts covered include:

DNS terms: o Forward lookup o Reverse lookup o Authoritative server o Referral o Recursion o Iterative o Delegation

DNS name resolution process: o Client o Server

Root hints and the root zone Students will learn how to:

Configure the DNS service to forward name resolution requests.

Create a root zone on a specified server.


4.0 DNS

Manage DNS Configuration o Configure Forwarders o Configure Root Hints

Create DNS Zones o Create a Root Zone

Manage DNS Configuration o Configure DNS Registration o Configure Forwarders o Configure Root Hints


403 Deploy and configure DNS service This objective may include but is not limited to:

o Configure forwarders o Configure Root Hints o Manage DNS cache



What is the name of the root domain?

What does the term distributed database mean concerning the DNS database?

How does an FQDN identify a host?

What is the difference between a forward lookup and a reverse lookup?

A client sends a request for name resolution to its configured DNS server, but it isn't authoritative for the zone where the name resides. What happens next?

You've modified an A record to point to a new IP address, but your client still resolves the name to the old IP address. What should you do?

Video/Demo Time

5.2.1 Fully Qualified Domain Names 2:59 5.2.2 Internet Name Resolution 14:05 5.2.3 Adding an Entry to the Hosts File 2:00 5.2.4 Configuring Forwarding and Root Hints 4:33 5.2.5 Intranet Name Resolution 7:39

Total 31:16

Lab/Activity

Configure Forwarders Create a Root Zone


7 questions

Total Time

About 50 minutes


Section 5.3: Zone Management

Summary

This section examines managing zones. Concepts covered include:

Types of authoritative DNS zones: o Primary o Secondary o Active Directory-integrated

Types that zones are classified as: o Forward lookup zone o Reverse lookup zone


Create a new zone and configure it to be stored in Active Directory.

Manage zone properties.

Convert an existing zone to an Active Directory-integrated zone.


4.0 DNS o Create DNS Zones

Create an Active Directory-integrated Zone Convert a Zone to Active Directory-integrated



o Configure Active Directory integration of primary zones Lecture Focus Questions:

Why is a reverse lookup zone for a network written backwards?

What are the differences between Standard Primary zones and Standard Secondary zones?

What is the difference between Refresh Interval and DNS Notify triggers for zone transfers?

What information does an SOA record contain?

How is an Active Directory-integrated zone different from a primary zone?

What type of zone would you create if you wanted to use secure dynamic updates?

What type of name resolution is performed by reverse lookup zones?


Video/Demo Time

5.3.1 Forward and Reverse Lookup Zones 1:29 5.3.2 Standard DNS Zones 4:21 5.3.3 Active Directory Integrated Zones 6:46 5.3.4 Creating a New Zone 8:03 5.3.5 Configuring Zone Properties 4:55

Total 25:34

Lab/Activity

Create an Active Directory-integrated Zone Convert a Zone to Active Directory-integrated


4 questions

Total Time

About 40 minutes


Section 5.4: DNS Records

Summary

This section discusses using DNS records. Details covered include:

Common DNS database resource records: o SOA (Start of Authority) o NS (name server) o A (host address) o AAAA (quad-A) o PTR (pointer) o CNAME (canonical name) o MX (Mail Exchanger) o SRV (service locator) o WINS and WINS-R resource records o SPF (Sender Policy Framework)


Create A records and associated PTR records for specified hosts.

Create a CNAME record to be used as an alias to redirect requests.


4.0 DNS o Create DNS Records

Create a Zone and Add Records Create A and CNAME Records



o Create A and PTR resource records

501 Install domain controllers This objective may include but is not limited to:

o Resolve DNS SRV record registration issues Lecture Focus Questions:

What is the difference between an A and a quad-A record?

What situations might warrant using a CNAME record?

What type of server does an MX record identify?

What is the purpose of PTR records?

What does an NS record identify?


Video/Demo Time

5.4.1 DNS Record Types 4:28 5.4.2 Creating Common Records 3:45

Total 8:13

Lab/Activity

Create a Zone and Add Records Create CNAME Records


8 questions

Total Time

About 30 minutes


Section 5.5: DNS Server Properties

Summary

In this section students will explore using DNS Manager to configure the following DNS server properties:

Interfaces

Forwarders

Root Hints

Debug Logging

Event Logging

Monitoring

Security

Advanced Students will learn how to:

Configure DNS server properties in DNS Manager.


4.0 DNS o Manage DNS Configuration


403 Deploy and configure DNS service


When should you activate debug logging?

Where would you enable scavenging of stale records on the system?

What is the difference between a simple query and a recursive query against the DNS server?

What type of DNS servers are allowed when the Enable BIND secondaries option is checked?

Which advanced DNS option is used to verify that the DNS record was not modified in transit?


Video/Demo Time

5.5.1 DNS Server Properties 4:22 5.5.2 Configuring DNS Server Properties 6:01

Total 10:23


10 questions

Total Time

About 25 minutes


Section 5.6: DNS Troubleshooting

Summary

In this section students will learn about the tools to troubleshoot DNS.

Ping

NSLookup

IPConfig


Use Ping and NSLookup to troubleshoot DNS.

Use IPConfig to manage the contents of the DNS cache.


4.0 DNS o Create DNS Records

Troubleshoot Name Resolution



o Manage DNS cache


What does it mean when an DNS server reports that a hostname could not be found?

When troubleshooting with ping, how can you determine if the problem is with the DNS server or with your client?

What tool can you use to view specific records on the DNS server?

How do you clear the DNS cache?

Video/Demo Time

5.6.1 DNS Troubleshooting 3:22 5.6.2 Using Ping and NSLookup 4:49 5.6.3 Clearing DNS Cache 3:29

Total 11:40


4 questions

Total Time

About 20 minutes


Section 6.1: File Access

Summary

This section discusses file and share access. Details covered include:

NTFS permissions

Shared folder permissions

Permissions for folders and files: o Read o Write o List Folder Contents o Read & Execute o Modify o Full Control

Concepts of setting up or managing NTFS permissions: o Ownership o Explicit vs inherited permissions o Copying or moving files o Using icacls

Special permissions

Best practices for permissions

NTFS quotas Students will learn how to:

Configure NTFS permissions.

Remove inherited permissions.

Enable quota restrictions.

Create a quota entry.

Modify quota limits.


5.0 File and Print Services o Manage NTFS Permissions

Configure NTFS Permissions Configure Inherited Permissions

o Manage Combined NTFS and Share Permissions o Configure Quotas

Manage Quota Restrictions Create Quota Entries Configure Quota Limits



201 Configure file and share access This objective may include but is not limited to:

o Create and configure shares o Configure share permissions o Configure offline files o Configure NTFS permissions o Configure NTFS quotas


How are NTFS permissions used to control access to file and folders?

Why should you assign permissions to groups rather than user?

How do logged on users get updated permissions?

How would you determine the effective permissions when both NTFS permissions and share permissions apply?

What is the difference between explicit permissions and inherited permissions?

What will happen if you move a file that has explicit NTFS permissions to a different folder on the same NTFS partition? if you copy the file to a different folder on the same NTFS partition?

What is the difference between a soft quota and a hard quota?

Video/Demo Time

6.1.1 NTFS Permissions 8:19 6.1.2 NTFS Quotas 1:52 6.1.3 Configuring NTFS Permissions and Quotas 11:57

Total 22:08

Lab/Activity

Configure NTFS Permissions Remove Inherited Permissions Enable Quota Restrictions Create a Quota Entry Modify Quota Limits


12 questions

Total Time

About 65 minutes


Section 6.2: Access-based Enumeration (ABE) and Volume Shadow Copy (VSS)

Summary

This section discusses Access-based Enumeration (ABE) and Volume Shadow Copy (VSS). Details covered include:

The role of Access-based Enumeration (ABE)

Differences in implementing ABE in WS2008 and Server 2012

Volume Shadow Copy Service (VSS)

Implementing shadow copies: o Scheduling o Storing o Recovering o NTFS Permissions o VSSAdmin


Configure ABE.

Enable shadow copies on a volume.

Configure shadow copy settings, including storage location, size, and schedule.

Create snapshots.

Save, copy, or restore previous versions of files.


5.0 File and Print Services o Configure Volume Shadow Copy Service (VSS)

Enable and Configure Shadow Copies Restore Previous Versions of Files and Folders



o Configure access-based enumeration (ABE) o Configure Volume Shadow Copy Service (VSS)



How does using access-based enumeration on shared folders modify what users can see?

In Windows Server 2008 you used the Share and Storage Management utility to enable ABE. Which tool will you use in Windows Server 2012 to enable ABE?

How should client work patterns affect your shadow copy schedule?

How much disk space do shadow copies take by default?

What is the maximum number of shadow copies the system can store? What happens when the system reaches this limit?

What happens to NTFS permissions when you restore a file? When you copy a file?

Why is it recommended that you place shadow copies on different volumes?

Video/Demo Time

6.2.1 Access-based Enumeration (ABE) and Volume Shadow Copy (VSS) 5:07

6.2.2 Configuring ABE and VSS 4:47

Total 9:54

Lab/Activity

Enable Shadow Copies Restore Previous Version 1 Restore Previous Version 2


5 questions

Total Time

About 35 minutes


Section 6.3: Shares

Summary

This section discusses managing share access. Details covered include:

How share permissions work with NTFS permissions to control access

Types of file sharing: o Simple File Sharing o Advanced File Sharing

Advanced share permissions: o Read o Change o Full control


Configure and manage shared folders and files.

Restrict share access through share permissions and user limits.

Enable and disable share caching.


5.0 File and Print Services o Share Folders and Configure Share Permissions

Share Folders Manage Shared Folders Manage Share Caching Configure Share Permissions



o Create and configure shares o Configure share permissions o Configure NTFS permissions


What tools are available to create and manage shares?

What is the effect of appending $ to a share name?

What permissions do you need to share a folder or configure share permissions?


What is the difference between the read permission and the change permission?

What is the recommended strategy for assigning permissions to a share to provide the required effective permissions?

What are the differences and similarities between NTFS permissions and share permissions?

Video/Demo Time

6.3.1 File Shares 9:29 6.3.2 Simple File Sharing 2:00 6.3.3 Advanced File Sharing 5:09

Total 16:38

Lab/Activity

Share a Folder with a Second Name Remove a Shared Folder Enable Share Caching Disable Share Caching Configure Share Permissions


7 questions

Total Time

About 50 minutes


Section 6.4: Sharing on Server 2012

Summary

This section provides information about using the New Share Wizard which is part of the Server Manager task-based interface. Concepts covered include:

Protocols for file shares: o Server Message Block (SMB) o Network Files System (NFS)

Options available in the New Share Wizard: o SMB Share – Quick o SMB Share – Advanced o SMB Share – Applications o NFS Share –Quick o NFS Share – Advanced

Additional settings after selecting the location for the share and naming it: o Enable access-based enumeration o Enable continuous availability o Allow caching of share o Encrypt data access

Features of Work Folders

Elements Work Folders does not support

Requirements to be met to use Work Folders: o Server o Clients

Facts about implementing Work Folders: o On the server o On the client


Create shares on Windows Server 2012 using Server Manager.


5.0 File and Print Services o Share Folders and Configure Share Permissions

Share Folders Manage Shared Folders Manage Share Caching Configure Share Permissions




o Create and configure shares o Configure share permissions o Configure offline files


Which type of file systems use the Server Message Block (SMB) protocol for file shares? When is the Network Files System (NFS) protocol used instead of the SMB protocol?

How does access-based enumeration work with NTFS permissions to restrict access to files and folders in shared folders?

How would you make shares available to offline users?

What feature must you have installed to use the SMB - Share Advanced option to create a share?

Video/Demo Time

6.4.1 Sharing on Server 2012 4:16 6.4.3 Work Folders 19:01 6.4.4 Configuring Work Folders 10:27

Total 33:44


10 questions

Total Time

About 50 minutes


Section 6.5: Effective Permissions

Summary

This section examines how to identify a user’s effective permissions for a specific folder. Details discussed include:

Effective permissions are the sum of all permissions from the following sources:

o Explicit Assignment o Group Membership o Inheritance

Inherited permissions

Effective permissions

Example scenarios of combined share and NTFS permissions

Suggestions to plan NTFS permissions Students will learn how to:

Configure combined NTFS and share permissions.


5.0 File and Print Services o Manage Combined NTFS and Share Permissions



o Configure share permissions o Configure NTFS permissions


What is the role of the access control list (ACL)?

What strategy can you use to combine and manage NTFS and share permissions?

What are the sources of permissions that are added together to create effective permissions?

Video/Demo Time

6.5.1 Effective Permissions 5:19


Lab/Activity

Configure NTFS and Share Permissions 1 Configure NTFS and Share Permissions 2


14 questions

Total Time

About 35 minutes


Section 7.1: Print Servers

Summary

This section provides information about print servers. Details include:

Definitions for print and document services: o Print server o Printer o Print device o Print driver o Print queue o Printer port

Services of the Print and Document Services role: o Print Server o LPD Service o Internet Printing o Distributed Scan Server

Print device properties useful to control print jobs: o General o Sharing o Ports o Advanced o Security


Configure printer pooling.

Restrict printer access.


5.0 File and Print Services o Manage Printing

Create, Share and Manage a Printer Configure Printer Pooling Restrict Printer Access


202 Configure print and document services This objective may include but is not limited to:

o Configure drivers o Configure printer pooling o Configure print priorities o Configure printer permissions



What is the difference between a print device and a printer?

When would you add the LPD service when configuring the Print Services role?

Under which physical printing configurations would you choose a local printer when adding a printer? When would you choose a network printer?

Under which circumstances would you configure a printer to use multiple print devices? When would you configure multiple printers for a single print device?

What services are included in the Print and Document Services role?

How would you ensure important print jobs will automatically be printed before any other print jobs?

How can you use printer permissions to designate a user as a print job administrator?

Video/Demo Time

7.1.1 Printers and the Print Server Role 1:44 7.1.2 Adding a Local Printer 4:15 7.1.3 Printer Properties 5:46 7.1.4 Configuring Printer Properties 7:52

Total 19:37

Lab/Activity

Create and Share a Printer


4 questions

Total Time

About 30 minutes


Section 7.2: Print Management

Summary

In this section students will learn about using Print Management, a utility for managing print servers. Details include:

When printers are detected, Print Management automatically: o Installs drivers o Establishes the queues o Shares the printers

Features of Print Management: o Custom Filters o Printer permissions o Printer pooling o Multiple printer objects o List in Active Directory o Deploy with Group Policy o Export/import printers o Manage print drivers o Manage documents in the print queue o Location-aware printing o Print driver isolation o Client-Side Rendering (CSR) o Easy Print driver

Configuration choices for different types of printer Students will learn how to:

Configure printer pooling.

Manage printer drivers.

Configure printer filters.

Restrict print access.

Use Group Policy to deploy printers to computer and user accounts.


5.0 File and Print Services o Manage Printing

Configure Printer Pooling Restrict Printer Access Deploy Printers with Group Policy




o Configure the Easy Print print driver o Configure Enterprise Print Management o Configure drivers o Configure printer pooling o Configure print priorities o Configure printer permissions


How do clients obtain the correct driver for shared printers?

How can you set up a filter to notify you when a printer is low on toner?

When would you choose to isolate a print driver?

What is the advantage of location-aware printing?

What is the difference between listing a printer in Active Directory and deploying a printer with Group Policy?

Video/Demo Time

7.2.1 Print Management 3:09 7.2.2 Using Print Management 5:07

Total 8:16

Lab/Activity

Configure Printer Pooling Restrict Printer Access Deploy Printers with Group Policy


15 questions

Total Time

About 45 minutes


Section 8.1: Group Policy Foundation

Summary

This section discusses the basics of using Group Policies. Concepts covered include:

Common GPO configuration settings: o Account Policies o Local Polices/Audit Policy o Local Policies/User Rights Assignment o Local Policies/Security Options o Registry o File System o Software Restriction Policies o Administrative Templates o Starter Group Policy Objects

Tasks for managing GPOs: o Creating local GPOs o Assigning GPO permissions o Linking GPOs o Using Administrative Templates o Using a central store

GPO categories: o Computer Configuration o User Configuration


Create and link GPOs to appropriate objects.

Create a starter GPO.


6.0 Group Policy o Manage Group Policy Objects (GPOs)

Create and Link a GPO Create a Starter GPO Modify GPO Links


601 Create Group Policy objects (GPOs) This objective may include but is not limited to:

o Manage starter GPOs o Configure GPO links


o Configure multiple local group policies


How does inheritance affect Group Policy settings?

If a setting is configured in a GPO linked to the domain and a GPO linked to an OU, which setting will be in effect?

What is the difference between using a starter GPO and copying an existing GPO?

Video/Demo Time

8.1.1 Local Polices 3:16 8.1.2 Configuring Local Policies 4:43 8.1.3 Group Policy Processing 7:27 8.1.4 Linking Group Policy Objects 8:09

Total 23:35

Lab/Activity

Create and Link a GPO Create a Starter GPO


7 questions

Total Time

About 50 minutes


Section 8.2: Group Policy Management

Summary

In this section students will learn about Group Policy Management. Concepts covered include:

Considerations when working with Group Policy settings

Scoping methods: o Block Inheritance o Enforced o Security group filtering o Windows Management Interface (WMI) filtering o Loopback Processing

Using Group Policy Management to manage the application of the GPO

How scoping affects the application of the GPO Students will learn how to:

Centrally manage administrative templates using the central store.

Configure the scope of Group Policy objects.


6.0 Group Policy o Manage Group Policy Objects (GPOs)

Modify GPO Links



o Configure a Central Store o Configure security filtering


What are the advantages of the .admx file format?

What is the Administrative Template central store? What advantages do you gain by enabling the central store?

How is the Block Inheritance setting affected by the No Override setting?

How does loopback processing affect computer settings?


Video/Demo Time

8.2.1 Central Stores 5:48 8.2.2 Creating a Central Store 4:52 8.2.3 Group Policy Scope 11:39 8.2.4 Configuring Group Policy Scope 12:08

Total 34:27


3 questions

Total Time

About 40 minutes


Section 8.3: Password Policies

Summary

In this section students will learn about using password policies. Details covered include:

Methods of setting password policies: o Account policies o Granular password policy

Strategies to protect against password attacks: o Educate users o Protect access to the password file o Salt the has o Implement two-factor authentication

Password policies


Configure a password policy and apply it to specific users or groups.


6.0 Group Policy o Manage Security Policies

Configure Account Password Policies


In what ways can password policies be set up?

What strategies should be implemented to protect against password attacks?

Which object types can be associated with a granular password policy?

What are the characteristics of a strong password?

Video/Demo Time

8.3.1 Password Policies 5:19 8.3.2 Configuring Password Policies 12:27

Total 17:46

Lab/Activity

Configure Account Password Policies


8 questions

Total Time

About 35 minutes


Section 8.4: Audit Policies

Summary

This section discusses using audit policies to enable auditing to record system events. Concepts covered include:

An enabled audit policy can audit for: o Success o Failure

Basic audit policies configurable through Group Policy: o Account logon o Account management o Directory service access o Logon o Object access o Policy change o Privilege use o Process tracking o System

Considerations when configuring auditing

Advanced auditing settings Students will learn how to:

Use Group Policy to enforce auditing and secure audit logs.



Configure Audit Policies


602 Configure security policies This objective may include but is not limited to:

o Configure Audit Policy


When does the account logon auditing generate an event on the system for a local user account? for a domain user account?

What is the difference between Account Logon auditing and Logon auditing?


What is the difference between auditing for success and auditing for failure?

What types of items does object access auditing track access to?

How can you use auditing to track changes to Active Directory objects?

When would you use process tracking?

Video/Demo Time

8.4.1 Audit Policies 2:17 8.4.2 Configuring Audit Policies 10:06

Total 12:23

Lab/Activity

Configure Audit Policies


13 questions

Total Time

About 35 minutes


Section 8.5: User Rights Assignment

Summary

This section discusses the basics of permissions, rights, and user rights assignment policies. Students will learn how to:

Configure user rights to secure network resources.



Configure User Rights



o Configure user rights


o Configure User Rights Assignment


What is the difference between permissions and rights?

What tool do you use to configure rights policy settings?

By default, what groups have the Allow Log On Locally right?

Video/Demo Time

8.5.1 User Rights 0:58 8.5.2 Managing User Rights 2:53

Total 3:51

Lab/Activity

Configure User Rights


3 questions

Total Time

About 10 minutes


Section 8.6: Security Options

Summary

This section examines using security options to manage the security on the computer. Details include:

Important Group Policy security options

User Account Control (UAC) account types: o Standard user o Administrator

Default behavior of UAC

UAC notification level settings: o Always o Notify me only when programs try to make changes to my computer o Notify me only when programs try to make changes to my computer

(do not dim the desktop) o Never notify

Group Policy settings for each notification level: Students will learn how to:

Configure security options.

Enforce User Account Control.



Configure Security Options Enforce User Account Control



o Configure Security Options settings o Configure Security templates o Configure Local Users and Groups o Configure User Account Control (UAC)



What is the best practice for managing Administrator and Guest accounts?

How would you prevent network users from accessing resources on an optical disc?

How can you standardize security settings across multiple computers on a network?

What is the role of the User Account Control (UAC)?

What is the difference between prompt for consent and prompt for credentials? When would one or the other be displayed?

Video/Demo Time

8.6.1 Security Options 1:01 8.6.2 Configuring Security Options 8:00 8.6.5 User Account Control 5:27 8.6.6 Configuring User Account Control 5:29

Total 19:57

Lab/Activity

Configure Security Options Enforce User Account Control


5 questions

Total Time

About 40 minutes


Section 8.7: Restricted Groups

Summary

In this section students will learn the about using restricted groups to control membership for groups that require high security. Concepts covered include:

Restricted groups definitions: o Members of this group o This group is a member of

Considerations when using the Restricted Groups Policy


Configure restricted groups.



Configure Restricted Groups



o Manage group membership using Group Policy


When is it a good idea to create a Restricted Group Policy?

What are the two methods to define a Restricted Group? Which is the preferred method?

Why is it a good strategy to test before activating a GPO using a Restricted Group Policy?

Video/Demo Time

8.7.1 Restricted Groups 1:46 8.7.2 Managing Groups with Group Policy 3:41

Total 5:27

Lab/Activity

Configure Restricted Groups


3 questions

Total Time

About 15 minutes


Section 8.8: Windows Firewall Policies

Summary

This section discusses Windows Firewall policies to provide real-time protection to the system. Concepts covered include:

Use Group Policy to manage Windows Firewall with Advanced Security: o Profiles o Firewall rules o Connection Security rules o Policy file


Use the Basic Firewall to allow traffic based on port, protocol, or application.

Use the Windows Firewall with Advanced Security to manage custom firewall rules.

Use Group Policy to enforce firewall rules.


604 Configure Windows Firewall This objective may include but is not limited to:

o Configure rules for multiple profiles using Group Policy o Configure connection security rules o Configure Windows Firewall to allow or deny applications, scopes,

ports, and users o Configure authenticated firewall exceptions o Import and export settings


o Configure Windows Firewall Lecture Focus Questions:

When should you use the Advanced Firewall instead of the Basic Firewall?

When would you configure a custom exception?

What does the exception scope do?

By default, which type of traffic is allowed through the firewall?

What is the benefit of using connection security rules?


Video/Demo Time

8.8.1 Inbound and Outbound Rules 1:27 8.8.2 Configuring an Inbound Rule 7:24 8.8.3 Connection Security Rules 5:57 8.8.4 Authenticated Firewall Exceptions 2:56

Total 17:44


8 questions

Total Time

About 30 minutes


Section 8.9: Application Restriction Policies

Summary

This section examines using application restriction policies to control the applications that run on the computers in the environment. Concepts covered include:

The role of Software Restriction Policies

Ways software restriction can be implemented: o Unrestricted o Disallowed o Basic User

Software restriction rules conditions: o Hash o Certificate o Network zone o Path

Advantages of AppLocker policies

AppLocker rule types: o Executable o Windows Installer o Script o Packaged app

AppLocker rules have the following conditions: o Publisher o Path o Hash

Considerations when using AppLocker Students will learn how to:

Configure a software restriction policy for a specific user.

Create a path rule for an application.

Create a hash rule to create software restrictions.

Create an AppLocker executable rule.


6.0 Group Policy o Configure Application Restriction Policies



603 Configure application restriction policies This objective may include but is not limited to:

o Configure rule enforcement o Configure Applocker rules o Configure Software Restriction Policies


How are software restriction policies managed?

What type of restrictions can be implemented using software restriction policies?

How does a hash rule identify one application from another? Does the application have the same hash value after an update is applied?

What are the advantages of AppLocker policies over software restriction policies?

Which file extensions can an AppLocker script rule be applied to?

If software restriction policies and AppLocker are configured on the same object, which takes precedence?

Video/Demo Time

8.9.1 Software Restriction Policies and AppLocker 6:56 8.9.2 Configuring Software Restriction Policies 8:19 8.9.4 Configuring AppLocker 11:24

Total 26:39

Lab/Activity

Configure AppLocker


10 questions

Total Time

About 50 minutes


Section 8.10: Group Policy Preferences Summary This section discusses using group policy preferences to configure, deploy, and manage operating system and application settings. Concepts covered include:

The role of the following Group Policy preferences: o Drive maps o Environment o Files Folders o Ini Files o Network shares o Registry o Shortcuts o Devices o Folder options o Internet settings o Local users and groups o Network connections o Power options o Printers o Regional options o Scheduled tasks o Services o Start menu


Configure group policy preferences to centrally manage settings in the user environment.


How do Group Policy preferences allow you to centrally manage settings on the workstation?

How would you apply Group Policy preferences to pre-Windows 7 clients?

Which Group Policy preferences would be the most useful for typical networked Windows systems?

Video/Demo Time 8.10.1 Group Policy Preferences 2:50 8.10.2 Configuring Group Policy Preferences 3:55

Total 6:45

Number of Exam Questions 3 questions

Total Time About 10 minutes


Section 9.1: IPv4 Addressing

Summary

This section discusses using IPv4 addressing to deliver packets to and from clients on a network. Details include:

Rules for using IPv4

IPv4 concepts: o Host o IP Address o Network address o Subnet mask o Address Class o Default subnet mask o Broadcast address o Default gateway

IP Address Structure

Subnet Mask

Default address classes

Options for assign IPv4 addresses and other IPv4 configuration values: o Dynamic Host Configuration Protocol (DHCP) o Automatic Private IPv4 Addressing (APIPA) o Static (manual) assignment o Alternate IPv4 configuration

The role of a Network Address Translation (NAT) router Students will learn how to:

Configure static IPv4 settings.

Convert an IPv4 address from binary to its decimal equivalent.


7.0 Networking o Configure Basic Network Settings

Configure IPv4 Settings


401 Configure IPv4 and IPv6 addressing This objective may include but is not limited to:

o Configure IP address options



What is the format of an IPv4 address?

What is the purpose of a subnet mask?

What is the default address class of the IP address 132.11.166.5?

What is the decimal equivalent of the IP address 132.11.166.5?

Video/Demo Time

9.1.1 IPv4 Basics 14:16 9.1.2 Binary Numbers 10:20 9.1.3 IPv4 Classes 11:00 9.1.4 Configuring IPv4 5:14

Total 40:50

Lab/Activity

Configure IP Settings


3 questions

Total Time

About 50 minutes


Section 9.2: IPv4 Custom Addressing

Summary

This section provides information about IPv4 custom addressing concepts. Details covered include:

IPv4 custom addressing concepts: o Subnetting o Supernetting o Classless Addressing o ANDing

Exponent values for powers of 2

Common binary and decimal values used in subnet masks

Subnetting

Calculation to determine if workstations are on the same network Students will learn how to:

Given a network address and custom mask, identify valid subnet addresses.

Given a scenario with the desired number of hosts, choose a subnet address and mask.

Given a network address and the subnet mask, identify valid host addresses on that subnet.


7.0 Networking o Configure Network Settings for Multiple Subnets

Use subnetting to split address ranges Use supernetting to combine address ranges Configure networking for multiple subnets



o Configure IP address options o Configure subnetting o Configure supernetting



What does a subnet mask identify?

What is the relationship between CIDR notation and the subnet mask?

How is a supernet different from a subnet?

What are the first and last addresses in a range used for?

What is the decimal value for a /27 mask?

How many approximate and actual hosts can you have when using a mask value of /23?

Given IP addresses and subnet masks, how do you determine if two workstations are on the same subnet?

Video/Demo Time

9.2.1 CIDR and Custom ANDing Basics 12:50 9.2.2 Subnetting 12:51 9.2.3 Supernetting 4:50

Total 30:31


8 questions

Total Time

About 40 minutes


Section 9.3: IPv6 Addressing

Summary

This section discusses transitioning to IPv6 addressing. Details include:

IPv6 follows the same basic rules as IPv4

Components of the IPv6 address structure: o Format o Leading zeros o Prefix and interface ID

Comparison of IPv6 address types and IPv4 address types

Strategies for deploying Ipv6: o Dual stack o Tunneling

Manually configured tunnel Intra-site Automatic Tunnel Addressing Protocol (ISATAP) 6-to-4 tunneling Teredo tunneling

o PortProxy o IPv4 Compatible Address o IPv4 Mapped Address o IPv6 to IPv4 Address


Configure IPv6 settings.


7.0 Networking o Configure Basic Network Settings

Configure IPv6 Settings o Configure Network Settings for Multiple Subnets

Configure Networking for Multiple Subnets 70-410 Exam Objectives:


o Configure interoperability between IPv4 and IPv6 o Configure ISATAP o Configure Teredo



How does IPv6 support differ on various Microsoft operating systems?

What limitations are associated with ISATAP in an IPv6 implementation?

Which IPv6 tunneling methods work through NAT?

When should you implement Teredo?

When is 6-to-4 tunneling automatically configured?

What technology allows an IPv4-only host to communicate with an IPv6-only host?

Video/Demo Time

9.3.1 IPv6 Basics 10:34 9.3.2 Configuring IPv6 2:16 9.3.5 ISATAP and Teredo 5:26

Total 18:16

Lab/Activity

Configure IPv6


10 questions

Total Time

About 40 minutes


Section 10.1: DHCP Basics

Summary

In this section students will explore the basics of using Dynamic Host Configuration Protocol (DHCP) to centralize management of IP assignment. Details about the following concepts will be covered:

Methods clients use to obtain an address from a DHCP server: o DHCP Discover (D) o DHCP Offer (O) o DHCP Request (R) o DHCP ACK (A)

DHCP authorization: o Authorization requirements o Authorization verification

Configuring a DHCP Server

Scope

DHCP options: o Server options o Scope options o Class options o Client options

DHCP console context-sensitive icons reflect DHCP server status Students will learn how to:

Install and authorize a DHCP server.

Create and activate scopes.


8.0 DHCP o Installation and Authorization

Install the DHCP Role Authorize DHCP Servers

o Manage DHCP Scopes, Exclusions, and Reservations Create and Configure Scopes


402. Deploy and configure Dynamic Host Configuration Protocol (DHCP) service This objective may include but is not limited to:

o Create and configure scopes o Configure DHCP options


o Authorize DHCP server


What are the steps a client uses to acquire an address from a DHCP server?

When must you authorize a DHCP server? What permissions do you need to authorize a DHCP server?

Why does a DHCP server shut down if it's address is not found in Active Directory? What does this protect against?

How can you change the subnet on a scope?

Video/Demo Time

10.1.1 DHCP Overview 5:06 10.1.2 DHCP Scopes and Options 3:29 10.1.3 Installing DHCP and Creating a Scope 14:23

Total 22:58

Lab/Activity

Install and Configure a DHCP Configure DHCP Options


5 questions

Total Time

About 40 minutes


Section 10.2: DHCP Exclusions and Reservations

Summary

This section discusses DHCP exclusions, reservations, and filters to control DHCP IP address assignment. Students will learn how to:

Configure exclusion ranges and client reservations.


8.0 DHCP

Manage DHCP Scopes, Exclusions, and Reservations o Create and Configure Scopes o Create Exclusion Ranges o Create Client Reservations



o Create and configure scopes o Configure a DHCP reservation o Configure DHCP options o Authorize DHCP server


How are reservations different from exclusions?

What are the two ways to exclude IP addresses from a scope?

What information is necessary to configure a client reservation?

How are filters used to identify which computers can be clients of the DHCP server?


Video/Demo Time

10.2.1 DHCP Exclusions, Reservations, and Filters 4:43 10.2.2 Creating a DHCP Exclusion, Reservations, and Filter 5:23

Total 10:06

Lab/Activity

Create Exclusion Ranges Create Client Reservations


3 questions

Total Time

About 25 minutes


Section 10.3: DHCP Centralization

Summary

This section covers DHCP centralization. Details include:

Administrative features that allow a DHCP server to support multiple scopes:

o Superscope o Split scope

Options for a DHCP server to service a subnet separated with a router: o 1542 compliant router o DHCP relay agent

DHCP failover Students will learn how to:

Configure a DHCP Relay Agent.


8.0 DHCP o Configure DHCP Options

Configure Server Options Configure Scope Options

o Implement DHCP Centralization Configure a DHCP Relay Agent Add a DHCP Server on Another Subnet



o Configure client and server for PXE boot o Configure DHCP relay agent o Authorize DHCP server


When might you choose to create super scopes?

What type of a system is multinet when discussing super scope?

What are the steps to create a split scope?

What options are available for a DHCP server to service a subnet separated with a router?


Video/Demo Time

10.3.1 DHCP Centralization 9:31 10.3.2 Creating a Split Scope 8:42

Total 18:13

Lab/Activity

Configure a DHCP Relay Agent Add a DHCP Server on Another Subnet


7 questions

Total Time

About 40 minutes


Section 10.4: DHCP Troubleshooting

Summary In this section students will learn about troubleshooting DHCP. Details include:

Methods by which hosts obtain IP addresses in the event of a DHCP failure:

o Automatic Private IPv4 Addressing (APIPA) o Alternate IPv4 configuration

Statistics: o DCHP Discovers are not increasing o If Discovers are increasing, but Offers are static o If Discovers and Offers are increasing, but Requests are static


Configure automatic and alternate addressing.

Troubleshoot common DHCP issues.


8.0 DHCP o Implement DHCP Centralization

Configure Automatic and Alternate Addressing


A Windows client system in your network has an IP address of 169.254.0.1. Why was this address assigned?

DHCP discoverers are not increasing the DHCP Console. What could be causing this?

DHCP discoverers are increasing in the DHCP Console, but all offers are static. What could be causing this?

DHCP discoverers and offers are increasing in the DHCP Console, but requests are static. What is causing this?

Video/Demo Time

10.4.1 Automatic Private IP Addressing (APIPA) 2:19 10.4.2 Configuring an Alternate Address 3:19 10.4.3 DHCP Troubleshooting 3:31

Total 9:09

Lab/Activity

Configure Automatic and Alternate Addressing

Number of Exam Questions 6 questions

Total Time About 20 minutes

Server Pro: Install and Configure Practice Exams

Summary

This section provides information to help prepare students to take the Server Pro: Install and Configure Certification exam. Students will have the opportunity of testing their mastery of the concepts presented in this course to reaffirm that they are ready for the certification exam.

Students will typically take about 5-10 minutes (depending upon the complexity and their level of knowledge) to complete each simulation question in the following practice exams. There is no time limit on the amount of time a student can take to complete the practice exams for the following domains.

Server Pro: Install and Configure Objective 1: Configure Windows Servers (6 simulation questions) Server Pro: Install and Configure Objective 2: Hyper-V (6 simulation question) Server Pro: Install and Configure Objective 3: Active Directory (10 simulation questions) Server Pro: Install and Configure Objective 4: DNS (7 simulation questions) Server Pro: Install and Configure Objective 5: File and Print Services (19 simulation questions) Server Pro: Install and Configure Objective 6: Group Policy (9 simulation questions) Server Pro: Install and Configure Objective 7: Networking and DHCP (9 simulation question)

The Server Pro: Install and Configure Certification Practice Exam consists of 15 simulation questions that are randomly selected from the above practice exams. Each time the Certification Practice Exam is accessed different questions may be presented.




Summary

This section provides information to help prepare students to take the MS 70-410 exam and to register for the exam. Students will have the opportunity of testing their mastery of the concepts presented in this course to reaffirm that they are ready for the certification exam. Students will typically take about 1 minute to complete each question in the following practice exams. There is no time limit on the amount of time a student can take to complete the practice exams for the following domains. Objective 100. Install and Configure Servers (70 questions) Objective 200. Configure Server Roles and Features (69 questions) Objective 300. Configure Hyper-V (35 questions) Objective 400. Deploy and Configure Core Network Services (83 questions) Objective 500. Install and Administer Active Directory (58 questions) Objective 600. Create and Manage Group Policy (61 questions) The Microsoft 70-410 Certification Practice Exam consists of 60 questions that are randomly selected from the above practice exams. Each time the Certification Practice Exam is accessed different questions may be presented. The Certification Practice Exam has a time limit of 2 hours. A passing score of 95% should verify that the student has mastered the concepts and is ready to take the real certification exam.


Appendix A: Approximate Time for the Course

The total time for the LabSim Server Pro: Install and Configure course is approximately 46 hours and 46 minutes. The time is calculated by adding the approximate time for each section which is calculated using the following elements:

Video/demo times

Approximate time to read the text lesson (the length of each text lesson istaken into consideration)

Simulations (5 minutes assigned per simulation)

Questions (1 minute per question)

The breakdown for this course is as follows:

Module Sections Time Total HR:MM

1.0 Introduction

1.1 Windows as a Server 10

1.2 Windows Server 2008 R2 Interface Overview 25

1.3 Windows Server 2012 Interface Overview 25 60 1:00

2.0 Installation and Configuration

2.1 Installation 20

2.2 PowerShell 35

2.3 Server Roles 35

2.4 Server Core 35

2.5 Remote and Offline Servers 50

2.6 NIC Teaming 45

2.7 Traditional Storage 75

2.8 Storage Pools 50 345 5:45

3.0 Hyper-V

3.1 Virtual Machines 55

3.2 Virtual Machine Storage 55

3.3 Virtual Networks 60 170 2:50

4.0 Active Directory

4.1 Active Directory 20

4.2 Domain Controllers 60

4.3 Sites 10

4.4 Organizational Units 30


4.5 User Accounts 50

4.6 Bulk User Operations 45

4.7 Computer Accounts 30

4.8 Groups 55

4.9 Rights Delegation 20 320 5:20

5.0 DNS

5.1 Single-label Names 25

5.2 Name Resolution 50

5.3 Zone Management 40

5.4 DNS Records 30

5.5 DNS Server Properties 25

5.6 DNS Troubleshooting 20 190 3:10

6.0 File and Share Access

6.1 File Access 65

6.2 Access-based Enumeration (ABE) and Volume Shadow Copy (VSS) 35

6.3 Shares 50

6.4 Sharing on Server 2012 50

6.5 Effective Permissions 35 235 3:55

7.0 Print and Document Services

7.1 Print Servers 30

7.2 Print Management 45 75 1:15

8.0 Group Policy

8.1 Group Policy Foundation 50

8.2 Group Policy Management 40

8.3 Password Policies 35

8.4 Audit Policies 35

8.5 User Rights Assignment 10

8.6 Security Options 40

8.7 Restricted Groups 15

8.8 Windows Firewall Policies 30

8.9 Application Restriction Policies 50

8.10 Group Policy Preferences 10 315 5:15

9.0 Networking

9.1 IPv4 Addressing 50

9.2 IPv4 Custom Addressing 40


9.3 IPv6 Addressing 40 130 2:10

10.0 DHCP

10.1 DHCP Basics 40

10.2 DHCP Exclusions and Reservations 25

10.3 DHCP Centralization 40

10.4 DHCP Troubleshooting 20 125 2:05

Server Pro: Install and Configure Practice Exams

Objective 1: Configure Windows Servers (6 simulation questions) 30

Objective 2: Hyper-V (6 Simulation questions) 30

Objective 3: Active Directory (10 simulation questions) 50

Objective 4: DNS (7 simulation questions) 35

Objective 5: File and Print Services (19 simulation questions) 95

Objective 6: Group Policy (9 simulation questions) 45

Objective 7: Networking and DHCP (9 simulation questions) 45 Server Pro: Install and Configure Certification Practice Exam (15 simulation questions)

75 405 6:45


Objective 100: Install and Configure Servers (70 questions) 70

Objective 200: Configure Server Roles and Features (69 questions) 69

Objective 300: Configure Hyper-V (35 questions) 35

Objective 400: Deploy and Configure Core Network Services (83 questions) 83

Objective 500: Install and Administer Active Directory (58 questions) 58

Objective 600: Create and Manage Group Policy (61 questions) 61

Microsoft 70-410 Certification Practice Exam (60 questions) 60 436 7:16

Total Time

2806 46:46


Appendix B: Server Pro: Install and ConfigureObjectives

The Server Pro: Install and Configure certification exam covers the followingobjectives:

# Objective Module.Section


Navigate Server Interfaces o Navigate the Windows Server 2008 R2 User

Interfaceo Navigate the Windows Server 2012 User

Interface Configure Server Services

o Configure Server Serviceso Configure NIC Teaming

Configure Server Storage o Configure Server Volumeso Configure Fault Tolerant Volumeso Create a Mount Pointo Create and Mount Virtual Hard Disks

(VHDs)o Create a Storage Pool

1.2 1.3 2.1 2.2 2.3 2.4 2.5 2.6 2.7 2.8

2.0 Hyper-V

Manage Virtual Machines with Hyper-V Manager o Create and Manage Virtual Machineso Create Virtual Hard Disks (VHDs)o Create a Differencing Drives (Parent-Child)o Configure Virtual Networks and Settings

3.1 3.2 3.3

3.0 Active Directory

Manage Active Directory o Configure Global Catalog Serverso Create Organizational Units (OUs)o Delegate Administrative Control

Create and Manage User and Computer Accounts o Create User Accountso Manage User Accountso Configure User Account Restrictionso Create Computer Accounts

Create and Manage Groups o Create and Manage Global Groups

4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8 4.9


o Create and Manage Distribution Group o Change the Group Scope o Implement Recommended Group Strategy

4.0 DNS

Manage DNS Configuration o Configure Search Suffixes o Configure Forwarders o Configure Root Hints

Create DNS Zones o Create a Root Zone o Create an Active Directory-integrated Zone o Convert a Zone to Active Directory-

integrated Create DNS Records

o Create a Zone and Add Records o Create A and CNAME Records o Troubleshoot Name Resolution 1

5.1 5.2 5.3 5.4 5.5 5.6

5.0 File and Print Services

Manage NTFS Permissions o Configure NTFS Permissions o Configure Inherited Permissions

Share Folders and Configure Share Permissions o Share Folders o Manage Shared Folders o Manage Share Caching o Configure Share Permissions

Manage Combined NTFS and Share Permissions Configure Volume Shadow Copy Service (VSS)

o Enable and Configure Shadow Copies o Restore Previous Versions of Files and

Folders Configure Quotas

o Manage Quota Restrictions o Create Quota Entries o Configure Quota Limits

Manage Printing o Create, Share and Manage a Printer o Configure Printer Pooling o Restrict Printer Access o Deploy Printers with Group Policy

6.1 6.2 6.3 6.4 6.5 7.1 7.2


6.0 Group Policy

Manage Group Policy Objects (GPOs) o Create and Link a GPO o Create a Starter GPO o Modify GPO Links

Manage Security Policies o Configure Security Options o Configure Account Password Policies o Enforce User Account Control o Configure Audit Policies o Configure User Rights o Configure Restricted Groups

Configure Application Restriction Policies

8.1 8.2 8.3 8.4 8.5 8.6 8.7 8.9 8.10

7.0 Networking and DHCP

Configure Basic Network Settings o Configure IPv4 Settings o Configure IPv6 Settings

Configure Network Settings for Multiple Subnets o Use Subnetting to split address ranges o Use Supernetting to combine address ranges o Configure Networking for Multiple Subnets

Installation and Authorization o Install the DHCP Role o Authorize DHCP Servers

Manage DHCP Scopes, Exclusions, and Reservations o Create and Configure Scopes o Create Exclusion Ranges o Create Client Reservations

Configure DHCP Options o Configure Server Options o Configure Scope Options

Implement DHCP Centralization o Configure a DHCP Relay Agent o Add a DHCP Server on Another Subnet o Configure Automatic and Alternate Addressing

9.1 9.2 9.3 10.1 10.2 10.3 10.4


Appendix C: 70-410: Installing and Configuring Server 2012

The certification exam measures the students’ ability to install, configure, and manage Windows Server 2012 operating system. Before taking the exam, you should be proficient in the skills listed below:

# Objective Module.Section

100 Install and Configure Servers (17 percent)

101 Install servers

This objective may include but is not limited to:

Plan for a server installation Plan for server roles Plan for a server upgrade Install Server Core Optimize resource utilization by using Features on

Demand Migrate roles from previous versions of Windows

Server

2.1 2.3 2.4


Configure Server Core Delegate administration Add and remove features in offline images Deploy roles on remote servers Convert Server Core to/from full GUI Configure services Configure NIC teaming Install and configure Windows PowerShell Desired

State Configuration (DSC)

2.2 2.3 2.4 2.5 2.6 4.4


Design storage spaces Configure basic and dynamic disks Configure MBR and GPT disks Manage volumes Create and mount virtual hard disks (VHDs) Configure storage pools and disk pools

2.7 2.8


Create storage pools by using disk enclosures

200 Configure Server Roles and Features (16 percent)


Create and configure shares Configure share permissions Configure offline files Configure NTFS permissions Configure access-based enumeration (ABE) Configure Volume Shadow Copy Service (VSS) Configure NTFS quotas Configure and create Work Folders

2.2 6.1 6.2 6.3 6.4 6.5


Configure the Easy Print driver Configure Enterprise Print Management Configure drivers Configure printer pooling Configure print priorities Configure printer permissions

7.1 7.2


Configure WinRM Configure down-level server management Configure servers for day-to-day management tasks Configure multi-server management Configure Server Core Configure Windows Firewall Manage non-domain joined servers

2.4 2.5 8.8

300 Configure Hyper-V (17 percent)

301 Create and configure virtual machine settings This objective may include but is not limited to:

Configure dynamic memory Configure smart paging Configure Resource Metering Configure guest integration services Create and configure Generation 1 and 2 virtual

3.1


machines Configure and use extended session mode

302 Create and configure virtual machine storage This objective may include but is not limited to:

Create VHDs and VHDX Configure differencing drives Modify VHDs Configure pass-through disks Manage snapshots Implement a virtual Fibre Channel adapter Manage checkpoints Configure storage quality of service

3.2 3.3 6.2

303 Create and configure virtual networks This objective may include but is not limited to:

Implement Hyper-V Network Virtualization Configure Hyper-V virtual switches Optimize network performance Configure MAC addresses Configure network isolation Configure synthetic and legacy virtual network

adapters Configure NIC teaming in virtual machines

3.3

400 Deploy and Configure Core Network Services (16 percent)


Configure IP address options Configure subnetting Configure supernetting Configure interoperability between IPv4 and IPv6 Configure ISATAP Configure Teredo

9.1 9.2 9.3

402 Deploy and configure Dynamic Host Configuration Protocol (DHCP) service This objective may include but is not limited to:

Create and configure scopes Configure a DHCP reservation Configure DHCP options

10.1 10.2 10.3 10.4


Configure client and server for PXE boot Configure the DHCP Relay Agent Authorize a DHCP server


Configure Active Directory integration of primary zones

Configure forwarders Configure Root Hints Manage the DNS cache Create A and PTR resource records

5.2 5.3 5.4 5.5 5.6

500 Install and Administer Active Directory (18 percent)

501 Install domain controllers This objective may include but is not limited to:

Add or remove a domain controller from a domain Upgrade a domain controller Install Active Directory Domain Services (AD DS) on a

Server Core installation Install a domain controller from Install from Media

(IFM) Resolve DNS SRV record registration issues Configure a global catalog server Deploy Active Directory infrastructure as a service

(IaaS) in Windows Azure

4.2 5.4


Automate the creation of Active Directory accounts Create, copy, configure, and delete users and

computers Configure templates Perform bulk Active Directory operations Configure user rights Perform an offline domain join Manage inactive and disabled accounts

4.5 4.6 4.7 8.5


Configure group nesting

4.4 4.8 4.9 8.7


Convert groups including security, distribution, universal, domain local, and domain global

Manage group membership using Group Policy Enumerate group membership Delegate the creation and management of Active

Directory objects Manage default Active Directory containers Create, copy, configure, and delete groups and OUs

600 Create and Manage Group Policy (16 percent)


Configure a Central Store Manage starter GPOs Configure GPO links Configure multiple local group policies Configure security filtering

8.1 8.2


Configure User Rights Assignment Configure Security Options settings Configure Security templates Configure Audit Policy Configure Local Users and Groups Configure User Account Control (UAC)

8.3 8.4 8.5 8.6

603 Configure application restriction policies This objective may include but is not limited to:

Configure rule enforcement Configure AppLocker rules Configure Software Restriction Policies

8.9

604 Configure Windows Firewall This objective may include but is not limited to:

Configure rules for multiple profiles using Group Policy

Configure connection security rules Configure Windows Firewall to allow or deny

applications, scopes, ports, and users Configure authenticated firewall exceptions Import and export settings

8.8

LESSON PLAN · 2017-02-27 · MS 70-410 . objectives are listed in . Appendix C: 70-410: Installing...

Documents

Transcript of LESSON PLAN · 2017-02-27 · MS 70-410 . objectives are listed in . Appendix C: 70-410: Installing...