70-410-411 412 MCSA Windows Server 2012 MMS Exam Prep
•Download as PPTX, PDF•
13 likes•16,000 views
These are the slides from the MCSA Windows Server 2012 Exam Prep that I delivered at MMS in April 2013.
Recommended
Recommended
More Related Content
Viewers also liked
Viewers also liked (8)
More from Zeshan Sattar
More from Zeshan Sattar (18)
Recently uploaded
Recently uploaded (20)
70-410-411 412 MCSA Windows Server 2012 MMS Exam Prep
- 3. Certification & resources information Exam topics that you need to focus on “Focus is on the exam, not the technology”
- 5. Microsoft Certified Solutions Master (MCSM) Master Expert Associat e Microsoft Certified Solutions Expert (MCSE) Microsoft Certified Solutions Associate (MCSA)
- 6. Installing and Configuring Windows Server 2012 411 Administering Windows Server 2012 EXAM EXAM EXAM 410 412 Configuring Advanced Windows Server 2012 Services
- 7. • • • • • • MCSA: Windows Server 2008 MCITP: Virtualization Administrator MCITP: Enterprise Messaging Administrator MCITP: Lync Server Administrator MCITP: SharePoint Administrator MCITP: Enterprise Desktop Administrator EXAM Any of the following certifications qualify: 417 Upgrading Your Skills to MCSA Windows Server 2012
- 11. • • • •
- 49. www.90days2mcsa.com • • • • • Discussion Forums Resource Wikis Study Groups Virtual Labs E-Book
Editor's Notes
- There are actuallythree skill levels for Microsoft Certifications. Associate level is the foundation for a career in IT. Expert level is the recognized standard for IT excellence. Master level is the pinnacle of recognition for deep technical expertise.At the Associate level, the MCSA focuses on a set of core skills across a technology, and includes business context.At the Expert level, the MCSE focuses on using multiple technologies to create business solutions, rather than focusing on the job role.
- Exam level of difficulty increases as you progress from 410 > 411 > 412
- “may include but not limited to”
- Concentrate on new features but don’t discount the tried and tested methods.Don’t forget the basics Read the question and the limitations e.g. “company policy states…” or “minimise purchase…”Know how to carry out the tasks in both GUI and PowerShell
- Install ServersNot just a simple case of put the CD in and click “next, next”.Planning on what hardware you can and cannot install Server 2012 e.g. x86 Servers vs. x64 serversUpgrading current servers and considerations such as 2008 /R2 / CoreMoving from one edition of Server 2012 to another e.g. using online servicing with DISMConfigure ServersYou’ve installed it…now what?!Switching between a full GUI Server 2012 install to a Server Core install by using the Removing the User Interfaces and infrastructure feature. Make sure that you know to do this using Server Manager and PowerShell. What do you use for NIC Teaming – Server ManagerConfigure local storageYou need some storage space…it’s all Just a bunch of disks (JBOD)Software RAID – knowing when to use Mirrored volumes, spanned volumes, RAID5Creating storage pools – requirements that you need for creating a storage poolAdding new disks to a storage spaceCreating large volumes i.e. using GPT disks over MBR
- ANS: B
- Now we’re coming into the nuts and bolts of the exam as at this point we have a working server and we can now do something with it. Adding the different roles and features to carry out the following tasks.Configure file and share accessThis is the typical scenario of knowing your security (NTFS) permissions from your share permissions. Know the result of when you are combining the permissions. Creating hidden sharesUsing previous versions – configuring the Volume Shadow Copy ServiceConfigure print and document servicesAll about sharing a print device in a range of scenariosMaking available a driver for different Operating SystemsPrint poolingPrioritising the use of one printer for a user group over another user groupConfigure servers for remote managementHow to manage a Server Core machinefrom another Server 2012 machine – what settings it needsUsing WinRM quick config command on the machine that you wish to remotely manage (opens up the correct firewall ports)Configuring Windows Firewall with the right port numbers for remote machines to connect to
- ANS: C
- Hyper-V has got a whole lot more powerful in Server 2012 and it is a major focus of the exam.Create and configure virtual machine settingsKnow ALL the settings and what they do!Using dynamic memory and how it can help to manage your VMs betterInstalling and leveraging integration servicesAssigning permissions that you need when you are managing a VM’s settings?Create and configure virtual machine storageWhat are the strengths and limitations of a VHD versus a VHDX – know your differencing, fixed and dynamically expanding disksThe requirements that you have when configuring a pass through diskHow you manage snapshots especially when you want to change the snapshot file locationCreate and configure virtual networksHow to implement it and optimise it i.e. go through the settings!Know the limitations of legacy network adapters (cannot assign a specified amount of network bandwidth to a virtual machine)
- ANS: C
- This is definitely where you should not forget the basics!Configure IPv4 and IPv6 addressingSubnetting is definitely something that you need to be able to do. An onscreen calculator is provided! You also get a board and pen – use it!Know the IPv6 prefixesDeploy and configure Dynamic Host Configuration Protocol (DHCP) serviceYou don’t need to remember DORA but it helps!Creating scopes, filters, reservations, and exclusions – and when to use them!Deploy and configure DNS serviceHow to configure AD integration of primary zones, configure forwarders, root hints
- ANS: ASource: MeasureUp
- Installing Active Directory we do it a few times but we administer it a LOT.So the kind of topics that you get examined on range from the things you do a lot, to something that you may have done once.Install domain controllersRelates to the “Installing Server 2012” objective domain.Simple stuff such as adding and removing a machine from the domain including how to do it on Server core.Installing a domain controller using the Install From Media option which helps to install additional domain controllers by minimising the replication of data so it is good for remote sites.Create and manage Active Directory users and computersCreate, copy, configure users and computersAssigning user rightsCarry out bulk operationsOffline domain joinsCreate and manage Active Directory groups and organizational units (OUs)Know your security, distributions, universal, domain local and domain global groups!Create, copy, configure groups and OUs
- ANS: BSource: Measure Up
- I think GP is fantastic and I use them all the time. There are just so many settings so I like to play around and see what they can do – obviously not a production environment!Create Group Policy objects (GPOs)Know the looback processing, block inheritance and enforce settings options and their impact GPO behaviourImporting and exporting GPOs (both via the GUI and PowerShell)Configure security policiesUnderstand Security Templates and be aware of the tools that you use to create and apply themConfigure application restriction policiesAppLocker and Software Restriction PoliciesConfigure Windows FirewallExactly what it says on the tin > allow or deny applications based on ports, users, applications and how to import and export these settings
- A LOT of Crossover with 410Similar topics but now there is more depth to each topic area.
- Deploy and manage server images.WDS images and their uses – boot, install, discoverDISM commands and the switches that you need to update and service imagesImplement patch management.WSUS – what you would use it for within a network, manage the storage of update files, and configuring the related Group PoliciesMonitor servers.Create and configure Data Collector Sets including configuring alerts, events and subscriptions.Know how to collect events form multiple servers
- Configure Distributed File System (DFS).Understand how to configure replication scheduling and limiting the amount of bandwidth being usedConfigure File Server Resource Manager (FSRM).How to configure quotasHow to use File ScreensConfigure file and disk encryption.The requirements to deploy and configure the Network Unlock featureBacking up the BitLocker recovery information Configure advanced audit policies.How to configure auditing and implementing using Group PolicyAuditing access to removable devices
- ANS: BSource:MeasureUp
- Configure DNS zones.Creating and configuring primary and secondary zonesConfigure zone transfer settingsConfigure DNS records.Creating and configuring DNS Resource Records (A, AAAA, PTR, NS, SRV, CNAME, MX)Configure record options including Time to Live (TTL)Configure VPN and routing.Installing and configure Remote Access role – be aware of the requirementsConfigure VPN settings Dial in settings for usersConfigure DirectAccess.Implementing server requirements and client configuration
- ANS: CSource:MeasureUp
- Configure Network Policy Server (NPS).Configure RADIUS clients and Servers If you are using certificate based authentication, you need to know where to store it.Configure NPS policies.Configure policies - including Connection Request Policy e.g. which servers perform the authentication and authorisation of connection requestsConfigure Network Access Protection (NAP).NAP – how to configure health policies (including any conditions), enforcing NAP using DHCP and VPN, what happens to a client when it is non-compliant i.e. you need to isolate it and make it compliant (remediation)
- ANS: C
- Configure service authenticationYou need to know how to create and manage service accounts - Be aware of Service Principal Names (SPN)Configure Domain ControllersPay attention to how to create Read Only Domain ControllersMaintain Active DirectoryHow do you recover deleted objects such as user accounts (especially in environments where you have mixed domain controllers)Configure account policiesUnderstand fine-grained password policies (Password Setting Objects) and how they can be created and maintained in Active Directory Administrative Center
- In 410, it was more of a case of what does it do. In this exam, is more of an application of the theory e.g. the path of where would you configure a certain group policy setting. Like 410 you need to know how to do it in the GUI as well as PowerShellConfigure Group Policy processing.How to changethe precedence order of the GPOs, block inheritanceConfigure Group Policy settings.Software installations, windows updates, folder redirection, network settingsManage Group Policy objects (GPOs).Howto delegate Group Policy management to other usersConfigure Group Policy preferences.Settings such as printers, drive mappings, power options, Control Panel settings, Internet Explorer settings
- ANS: CSource MeasureUp
- This is a tough exam. A lot of very experienced people have trouble with this and part of it is due to the numerous question types that are used e.g. Best Answer, Select All that apply, build and order (without any indication of the number required).
- Configure Network Load Balancing (NLB).Know the pre-requisites for installing and configuring NLBConfigure affinity – usually no affinity means that multiple requests from the same client can access any member this is for clusters that do not store session state information on individual membersConfigure failover clustering.Configure Quorum settings so you can define what happens when the majority of nodes fail in a clusterHow to configure heartbeat settings Configure cluster storage – configure a witness disk (disk in the cluster storage that is designated to hold a copy of the cluster configuration database)Manage failover clustering roles.Configure continuous available sharesEnable replication of virtual machinesMonitor virtual machines and even look at how you would ensure that replica virtual machines are functional.Manage Virtual Machine (VM) movement.Know the difference and requirements for live migration, quick migration, storage migration and importing and exporting virtual machines
- Configure advanced file services.Configure BranchCache – Distributed mode and Hosted modeConfigure data deduplictionImplement Dynamic Access Control (DAC). – control access to files using central access policies. You can tag data across the organisation with such a tag as “secret” which would then only allow certain groups to access it.How to set it up including the required Group Policy. Also, there is a danger when you set up DAC that users who previously had accessed to files no longer have it, so you may want to test it beforehand.Configure and optimize storage.Know how to configure iSCSI Target and InitiatorBe aware of the use of iSNS (Internet Storage Name Service) allows the automated discovery, management and configuration of iSCSI devices
- ANS: A, C
- Configure and manage backups.Carry out server backups including using the Microsoft Online Backup Service Recover servers.Know your recovery options using Windows RE, safe mode, System Restore and Last Known good configurationConfigure site-level fault toleranceSite A goes down > site B can be used by using hyper-v replicas
- Implement an advanced Dynamic Host Configuration Protocol (DHCP) solution.Create and configure superscopes and multicast scopesHigh availability for DHCP – how can you make sure that your DHCP service is continuously availableImplement an advanced DNS solution.Know how to configure DNS loggingConfigure security using DNSSECHow to configure a GlobalNames Zone (for single label names)Deploy and manage IPAM – discovering, monitoring, auditing and managing IPM address space used on a corporate network.Requirements – IPAM cannot be installed on an AD domain controllerHow to configure it- including with Group PolicyHow to delegate administration
- Now into the physical structure of Active Directory.Configure a forest or a domain.Planning your forests, domain, sitesInteroperability with previous versions of Active DirectoryUpgrading existing domains and forests Being aware of the functional level of the forest and domainConfigure trusts.Configuring the different types of trust and when they are used e.g. external, forest, shortcut and realm trustsImplication of a one way trust and a two way trustConfigure sites.Configuring the sites and subnetsCreate and configure site linksManage Active Directory and SYSVOL replication.Configure replication to Read Only Domain Controllers (RODCs)Configure password replication policy for RODCs
- Previously we have looked at Active Directory Domain Services. Now we’re looking at different components of AD:Implement Active Directory Federation Services 2.1 (AD FSv2.1).Install and configure Active Directory Certificate Services (AD CS).Install an Enterprise Certification AuthorityCertification Revocation Lists distribution pointsManage certificates.Managing certificate templates, deployment, validation, revocation and renewalInstall and configure Active Directory Rights Management Services (AD RMS).Know the steps of installing AD RMSHow to manage the AD RMS Service Connection Point