Transcription
MS 70-411 Exam ObjectivesAdministering Windows Server 2012 R2Below are the exam objectives for Administering Windows Server 2012 R2 – Exam 70-411Tasks measured as per latest update implemented in January of 2014. This revision brings to 116 thetotal number of sub-objectives. The percentages in parenthesis are the approximate number ofquestions for that objective out of the typically 50 – 55 total number of questions presented at theexam.I. Deploy, manage, and maintain servers (15–20%)1. Deploy and manage server imagesInstall the Windows Deployment Services (WDS) roleConfigure and manage boot, install, and discover imagesUpdate images with patches, hotfixes, and driversInstall features for offline imagesConfigure driver groups and packages2. Implement patch managementInstall and configure the Windows Server Update Services (WSUS) roleConfigure group policies for updatesConfigure client-side targetingConfigure WSUS synchronizationConfigure WSUS groupsManage patch management in mixed environments3. Monitor serversConfigure Data Collector Sets (DCS)Configure alertsMonitor real-time performanceMonitor virtual machines (VMs)Monitor eventsConfigure event subscriptionsConfigure network monitoringSchedule performance monitoringII. Configure File and Print Services (15–20%)1. Configure Distributed File System (DFS)Install and configure DFS namespacesConfigure DFS Replication TargetsConfigure Replication Scheduling
Configure Remote Differential Compression settingsConfigure stagingConfigure fault toleranceClone a DFS databaseRecover DFS databasesOptimize DFS replication2. Configure File Server Resource Manager (FSRM)Install the FSRM role serviceConfigure quotasConfigure file screensConfigure reportsConfigure file management tasks3. Configure file and disk encryptionConfigure BitLocker encryptionConfigure the Network Unlock featureConfigure BitLocker policiesConfigure the EFS recovery agentManage EFS and BitLocker certificatesIncluding backup and restore4. Configure advanced audit policiesImplement auditing using Group Policy and AuditPol.exeCreate expression-based audit policiesCreate removable device audit policiesIII. Configure network services and access (15–20%)1. Configure DNS zonesConfigure primary and secondary zonesConfigure stub zonesConfigure conditional forwardsConfigure zone and conditional forward storage in Active DirectoryConfigure zone delegationConfigure zone transfer settingsConfigure notify settings2. Configure DNS recordsCreate and configure DNS Resource Records (RR)Including A, AAAA, PTR, SOA, NS, SRV, CNAME, and MX recordsConfigure zone scavenging
Configure record options, including Time To Live (TTL) and weightConfigure round robinConfigure secure dynamic updates3. Configure virtual private network (VPN) and routingInstall and configure the Remote Access roleImplement Network Address Translation (NAT)Configure VPN settingsConfigure remote dial-in settings for usersConfigure routingConfigure Web Application proxy in passthrough mode4. Configure DirectAccessImplement server requirementsImplement client configurationConfigure DNS for Direct AccessConfigure certificates for Direct AccessIV. Configure a Network Policy Server (NPS) infrastructure (10–15%)1. Configure Network Policy ServerConfigure a RADIUS serverIncluding RADIUS proxyConfigure RADIUS clientsConfigure NPS templatesConfigure RADIUS accountingConfigure certificates2. Configure NPS policiesConfigure connection request policiesConfigure network policies for VPN clients (multilink and bandwidth allocation, IP filters,encryption, IP addressing)Import and export NPS policies3. Configure Network Access Protection (NAP)Configure System Health Validators (SHVs)Configure health policiesConfigure NAP enforcement using DHCP and VPNConfigure isolation and remediation of non-compliant computers using DHCP and VPN,Configure NAP client settings
V. Configure and manage Active Directory (10–15%)1. Configure service authenticationCreate and configure Service AccountsCreate and configure Group Managed Service AccountsConfigure Kerberos delegation, manage Service Principal Names (SPNs)Configure virtual accounts2. Configure domain controllersTransfer and seize operations master rolesInstall and configure a read-only domain controller (RODC)Configure domain controller cloning3. Maintain Active DirectoryBack up Active Directory and SYSVOLManage Active Directory offlineOptimize an Active Directory databaseClean up metadataConfigure Active Directory snapshotsPerform object- and container-level recoveryPerform Active Directory restoreConfigure and restore objects by using the Active Directory Recycle Bin4. Configure account policiesConfigure domain and local user password policy settingsConfigure and apply Password Settings Objects (PSOs)Delegate password settings managementConfigure account lockout policy settingsConfigure Kerberos policy settingsVI. Configure and manage Group Policy (15–20%)1. Configure Group Policy processingConfigure processing order and precedenceConfigure blocking of inheritanceConfigure enforced policiesConfigure security filtering and Windows Management Instrumentation (WMI) filteringConfigure loopback processingConfigure and manage slow-link processing and Group Policy cachingConfigure client-side extension (CSE) behaviorForce Group Policy Update2. Configure Group Policy settings
Configure settings, including software installation, folder redirection, scripts, andadministrative template settingsImport security templatesImport custom administrative template fileConfigure property filters for administrative templates3. Manage Group Policy objects (GPOs)Back up, import, copy, and restore GPOsCreate and configure Migration TableReset default GPOsDelegate Group Policy management4. Configure Group Policy preferences (GPP)Configure GPP settings, including printers, network drive mappings, power options,custom registry settings, Control Panel settings, Internet Explorer settings, file and folderdeployment, and shortcut deploymentConfigure item-level targeting
exam. I. Deploy, manage, and maintain servers (15-20%) 1. Deploy and manage server images Install the Windows Deployment Services (WDS) role Configure and manage boot, install, and discover images Update images with patches, hotfixes, and drivers Install features for offline images Configure driver groups and packages 2. Implement patch .