TestOut Server Pro: Advanced Services English 3.1.x LESSON PLAN. Revised 2016/05/17

Transcription

1 TestOut Server Pro: Advanced Services English 3.1.x LESSON PLAN Revised 2016/05/17

2 Table of Contents Course Overview... 4 Course Introduction for Instructors... 6 Section 1.1: Multi-Domain Forests... 8 Section 1.2: Cross-Forest Trusts Section 1.3: External, Shortcut and Realm Trusts Section 1.4: Sites Overview Section 1.5: Managing Sites Section 1.6: Managing Replication Section 1.7: Read-Only Domain Controllers (RODCs) Section 1.8: RODC Management Section 2.1: Network File System (NFS) Section 2.2: BranchCache Section 2.3: Dynamic Access Control (DAC) Section 2.4: DAC Management Section 2.5: Advanced Storage Section 2.6: Storage Optimization Section 3.1: Windows Server Backup Section 3.2: Restore from Backup Section 3.3: Volume Shadow Copies Section 3.4: Boot Configuration Data (BCD) Store Section 4.1: DHCP Overview Section 4.2: DHCP Scopes Section 4.3: DHCP and IPv Section 4.4: DHCP High Availability Section 4.5: IPAM Overview Section 4.6: IPAM Configuration Section 4.7: IPAM Management Section 5.1: DNS Security Section 5.2: Advanced DNS Settings Section 5.3: GlobalNames Zones Section 6.1: Virtual Machine Management Section 6.2: Hyper-V High Availability Section 7.1: Network Load Balancing Section 7.2: Network Load Balancing Management Section 7.3: Failover Clustering Section 7.4: Failover Cluster Management Section 7.5: Failover Clustered Role Management Section 7.6: Failover Cluster with Hyper-V Section 8.1: Active Directory Certificate Services Overview Section 8.2: Certificate Management Section 8.3: Certificate Revocation Section 8.4: Certificate Templates Section 8.5: Certificate Autoenrollment... 88

3 Section 8.6: Key Archival and Recovery Section 8.7: Certificate Authority (CA) Management Section 8.8: CA Backup and Recovery Section 9.1: AD RMS Overview Section 9.2: AD RMS Installation Section 9.3: AD RMS Client Deployments Section 9.4: AD RMS Templates Section 10.1: AD FS Overview Section 10.2: AD FS Certificates Section 10.3: Resource Partner Section 10.4: Accounts Partner Section 10.5: AD FS Proxies Section 10.6: AD FS and Cloud Services Section 10.7: AD FS and AD RMS Server Pro: Advanced Services Practice Exams Microsoft Practice Exams Appendix A: Approximate Time for the Course Appendix B: Exam : Configuring Advanced Windows Server 2012 Services Objectives Appendix C: Server Pro: Advanced Services Objectives

4 Course Overview This course prepares students for TestOut s Server Pro: Advanced Services exam and Microsoft s certification exam. Module 1 Active Directory Infrastructure This module teaches the students details about the infrastructure of Active Directory and how to manage the elements involved. Module 2 File and Storage Solutions In this module students will learn about file and storage solutions, such as file sharing, using BranchCache, implementing and managing Dynamic Access Control, configuring iscsi, and storage spaces. Module 3 Disaster Recovery This module teaches students about backing up and restoring data, implementing shadow copies, and finding tools to assist in system recovery. Module 4 Advanced DHCP This module examines using Dynamic Host Configuration Protocol (DHCP) and IPAM to centralize and streamline management of IP address assignments. Module 5 Advanced DNS In this module students will learn concepts about configuring DNS security: DNSSEC, DNS Socket Pooling, Cache Locking, Advanced DNS settings, and GlobalNames zones. Module 6 Hyper-V This module discusses management of virtual machines and Hyper-V replicas. Module 7 High Availability This module teaches students about the components that create high availability: Network load balancing, Failover Clustering, Active Directory Certificate Service, AD RMS, and AD FS. Module 8 Active Directory Certificate Services This module examines encryption and certificate solutions using Active Directory Certificate Services. This includes managing and revoking certificates, using certificate templates, configuring Certificate Autoenrollment, archiving and recovering keys, and managing the Certificate Authority. Module 9 Active Directory Rights Management Services (AD RMS) In this module students will learn concepts about installing and deploying AD RMS.

5 Module 10 Active Directory Federation Services 2.1 (AD FS) This module discusses using AD FS to provide access to resources that are offered by trusted partners across the Internet. Practice Exams In Practice Exams students will have the opportunity to test themselves and verify that they understand the concepts and are ready to take the certification exam. The practice exams contain examples of the types of questions that a student will find on the actual exam: Server Pro: Advanced Services Practice Exams Microsoft Practice Exams

6 Course Introduction for Instructors This course provides students with the knowledge to become industry certified as a Windows professional. It prepares the student for the following exams: Microsoft s : Configuring Advanced Windows Server 2012 Services TestOut s Server Pro: Advanced Services Microsoft s : Configuring Advanced Windows Server 2012 Services certification measures the students ability to administer, configure, and manage Windows Server 2012 advanced services. The following knowledge domains are addressed: Configure and manage high availability Configure file and storage solutions Implement business continuity and disaster recovery Configure network services Configure the Active Directory infrastructure Configure identity and access solutions Note: MS objectives are listed in Appendix B: : Configuring Advanced Windows Server 2012 Services Objectives TestOut s Server Pro: Advanced Services certification measures the students ability to perform real-world job skills using the Windows Server 2012 operating system. The following knowledge domains are addressed: Advanced Active Directory Configuration Advanced Storage Management Server Data Protection Advanced DHCP and DNS Configuration High Availability Implementation Certificate Management Digital Rights Management Note: TestOut s Server Pro: Advanced Services objectives are listed in Appendix C: Server Pro: Advanced Services Objectives The section introductions in LabSim and the lesson plans list the objectives that are met for each of the exams in that section.

7 The following icons are placed in front of lesson items in LabSim to help students quickly recognize the items in each section: = Demonstration = Exam = Lab/Simulation = Text lesson or fact sheet = Video The video and demonstration icons are used throughout the lesson plans to help instructors differentiate between the timing for the videos and demonstrations. In the lesson plans the Total Time for each section is calculated by adding the approximate time for each section which is calculated using the following elements: Video/demo times Approximate time to read the text lesson (the length of each text lesson is taken into consideration) Simulations (5 minutes is assigned per simulation. This is the amount of time it would take for a knowledgeable student to complete the lab activity. Plan that the new students will take much longer than this depending upon their knowledge level and computer experience.) Questions (1 minute per question) Note: Appendix A: Approximate Time for the Course contains the approximate time for each section, which are totaled for the entire course.

8 Section 1.1: Multi-Domain Forests Summary This section provides the basics of managing multi-domain forests. Concepts covered include: Prerequisites required before adding the first domain controller running Windows Server 2012 to an existing Active Directory environment: o Server disk space o Supported Windows Server 2012 editions o Forest and domain functional levels Tools to prepare forest and domain to support Windows Server 2012: o Adprep /forestprep o Adprep /domainprep o Adprep /rodcprep Installation scenarios for AD DS for Windows 2012: o Installing a new Windows Server 2012 forest o Installing a new Windows Server 2012 domain controller to create a new domain in an existing Windows Server 2003, 2008, or 2008 R2 forest Tools to promote the Windows Server 2012 system as a domain controller in the domain: o Server Manager o PowerShell (using ADDSDeployment cmdlets) o DCPromo (only for Server Core deployments using an answer file) The role of a functional level Features available at each domain functional level Features available at each forest functional level Management of functional levels Guidelines that apply to raising the domain or forest functional levels Students will learn how to: Raise the functional level of a domain. Raise the functional level of a forest. Add a new child domain to a multi-domain forest. Server Pro: Advanced Services Exam Objectives: 1.0 Advanced Active Directory Configuration. o Raise the functional level of an Active Directory forest

9 Exam Objectives: 501. Configure a forest or a domain. o Implement multi-domain and multi-forest Active Directory environments including interoperability with previous versions of Active Directory o Upgrade existing domains and forest including environment preparation and functional levels o Configure multiple user principal name (UPN) suffixes Lecture Focus Questions: When do you use the adprep /domainprep /gpprep command instead of the adprep /domainprep command? What are the prerequisites for adding the first domain controller running Windows Server 2012 to an existing Active Directory environment? How does the functional level of a domain impact the capabilities available on domain controllers in the domain or forest? How does the functional level of a domain affect which operating systems you can run on workstations and servers in the domain? What circumstances might prevent you from raising the functional level of a domain? In which two circumstances can you revert to a lower functional level without rebuilding the domain or forest? Video/Demo Time Multi-Domain Forests 10: Upgrading Multi-Domain Forests 10: Adding a New Child Domain 7:35 Total 28:13 Lab/Activity Raise Functional Levels Raise the Domain and/or Forest Levels Number of Exam Questions 5 questions Total Time About 50 minutes

10 Section 1.2: Cross-Forest Trusts Summary This section provides information about preparing and creating cross-forest trusts. Details include: The role of trusts Properties of trusts: o Direction of Trust: One-way Trust Two-way Trust o Direction of Resource Access o Transitivity How trusts are created for: o Domains within a forest o Trusts between forests Considerations when creating forest trusts Authentication security settings that can be applied to trusts: o Selective authentication o Domain-wide authentication o Forest-wide authentication Students will learn how to: Create and configure a forest root trust between two domains. Create trust relationships with a specified domain. Server Pro: Advanced Services Exam Objectives: 1.0 Advanced Active Directory Configuration. o Create forest root, cross-forest, external, shortcut, and realm trusts Exam Objectives: 502 Configure trusts. o Configure trust authentication

11 Lecture Focus Questions: Which types of trusts are created automatically for domains within a forest? What are the characteristics of automatically-created domain trusts? What are the characteristics of trusts between forests? When can forest trusts be used? When must you create an external trust? What advantages does selective authentication provide to system administrators for securing resources in a forest? Video/Demo Time Cross-Forest Trusts 6: Preparation for a Cross-Forest Trust 1: Preparing for a Cross-Forest Trust 7: Creating a Cross-Forest Trust 11:56 Total 27:31 Lab/Activity Create a Forest Root Trust Design Trusts Number of Exam Questions 9 questions Total Time About 50 minutes

12 Section 1.3: External, Shortcut and Realm Trusts Summary This section provides details about creating external, shortcut, and realm trusts. Students will learn how to: Manually create an external trust to allow users on one domain to access resources in a domain of another forest. Create a shortcut trust to speed up authentication between domains in the same forest. Server Pro: Advanced Services Objectives: 1.0 Advanced Active Directory Configuration. o Create forest root, cross-forest, external, shortcut, and realm trusts Exam Objectives: 502 Configure trusts. o Configure external, forest, shortcut, and realm trusts o Configure trust authentication o Configure SID filtering o Configure name suffix routing Lecture Focus Questions: How do shortcut trusts improve user logon times between two domains within a forest? What are the characteristics of an external trust? When should you use a realm trust? What features does Active Directory Federated Services (AD FS) offer?

13 Video/Demo Time External, Shortcut and Realm Trusts 5: Creating a Shortcut Trust 2:23 Total 7:23 Lab/Activity Create a Shortcut Trust Number of Exam Questions 4 questions Total Time About 20 minutes

14 Section 1.4: Sites Overview Summary This section provides an overview of sites and subnets. Details covered include: The role of a site The role of a subnet Considerations about sites and subnets Sites and subnets allow an administrator to monitor: o Active Directory replication between locations o Workstation logon traffic o Objects in Active Directory o Distributed File System (DFS) resource access o File Replication Service (FRS) characteristics o Properties for any site-aware application Students will learn how to: Create and manage sites, subnets, and site links Exam Objectives: 503. Configure sites. o Configure sites and subnets o Create and configure site links o Move domain controllers between sites Lecture Focus Questions: How does a subnet differ from a site? What is the purpose of sites and subnets? What criteria are used to assign computers to sites? How are clients assigned to sites? What criteria determine the site that a domain controller is assigned?

15 Video/Demo Time Overview of Sites 7: Creating Sites, Subnets, and Site Links 12:47 Total 20:41 Lab/Activity Manage Sites and Subnets Number of Exam Questions 3 questions Total Time About 30 minutes

16 Section 1.5: Managing Sites Summary This section discusses the following issues when managing sites: Logon requests Site link cost Site link schedules Site link interval Global Catalog servers Universal Group Membership Caching Students will learn how to: Determine the domain controller that will process logon requests at a site. Set up a Global Catalog. Enable Universal Group Membership Caching. Server Pro: Advanced Services Objectives: 1.0 Advanced Active Directory Configuration. o Manage sites, subnets, and site links Exam Objectives: 503. Configure sites. o Manage site coverage o Manage registration of SRV records Lecture Focus Questions: How can you determine which domain controller will authenticate a client when more than one domain controller exists at a site? How are site link costs determined? What steps can you take to ensure that a particular domain controller does not authenticate clients from another site? How does a Global Catalog server facilitate faster searches and logon? What are the benefits of Universal Group Membership Caching? When should it be used? What two things should you consider when defining site link schedules?

17 Video/Demo Time Site Management 17: Managing Sites 10:01 Total 27:11 Number of Exam Questions 10 questions Total Time About 40 minutes

18 Section 1.6: Managing Replication Summary This section examines managing replication. Concepts covered include: Terms to be familiar with: o Site link bridge o Bridgehead server o Connection Sites and Services distinguishes between two types of replication: o Intrasite o Intersite Transport protocols used by replication: o Directory Services Remote Procedure Call (DS-RPC) o Inter-Site Messaging Simple Mail Transfer Protocol (ISM-SMTP) Facts about intrasite replication: o Occurs between domain controllers within a site o By default, occurs once every hour o Modifying the replication frequency o Connections are created automatically as necessary Intersite replication configuration steps: o Preferred bridgehead server o Replication schedule o Replication frequency o Site link cost o Bridged site replication o Forced replication Example of site link bridging The role of SYSVOL folder File Replication Service (FRS) vs. Distributed File System (DFS) Benefits of DFS replication Migrating from FRS replication to DFS replication States that indicate stable stages in the migration process: o Not initiated o Start o Prepared o Redirected o Eliminated Considerations when managing migration Students will learn how to: Create a site link bridge. Manage replication of AD and SYSVOL.

19 Monitor replication of AD and SYSVOL. Server Pro: Advanced Services Objectives: 1.0 Advanced Active Directory Configuration. o Manage sites, subnets, and site links. o Configure site replication Exam Objectives: 504. Manage Active Directory and SYSVOL replication. o Monitor and manage replication o Upgrade SYSVOL replication to Distributed File System Replication (DFSR) Lecture Focus Questions: What types of trusts are enabled by default for site link bridges? How do you establish bidirectional communications between domain controllers? How does intrasite replication differ from intersite replication? What are three ways that you can force replication? How can you force a certain path between sites for replication? What is the process for migrating from FRS replication to DFS replication when the domain is at Windows Server 2003 functional level? During which migration stages are you able to roll back the migration? Video/Demo Time Active Directory Replication 12: Monitoring and Managing Replication 12:51 Total 25:37 Lab/Activity Configure Intrasite Replication Configure Intersite Replication Number of Exam Questions 15 questions Total Time About 60 minutes

20 Section 1.7: Read-Only Domain Controllers (RODCs) Summary In this section students will learn details about creating RODCs. Concepts covered include: Features of RODCs: o Administrator role separation o Unidirectional replication o Read-only data o Password replication o DNS Server service Requirements to be met before RODCs are installed in a domain Performing a staged installation of an RODC in which the installation is performed by two different individuals in separated stages Generals steps to install a read-only domain controller (RODC) Considerations when installing RODC Students will learn how to: Create and configure an RODC account. Server Pro: Advanced Services Exam Objectives: 1.0 Advanced Active Directory Configuration. o Implement read-only domain controllers Exam Objectives: 504. Manage Active Directory and SYSVOL replication. o Configure replication to Read-Only Domain Controllers (RODCs) Lecture Focus Questions: In which environments is an RODC typically deployed? What are the benefits and the drawbacks of unilateral replication? What are the requirements for installing an RODC in a domain? How does the administrative role separation (ARS) feature protect domain controller security?

21 Video/Demo Time Read-Only Domain Controllers 9: Pre-Staging RODC Accounts 6: Joining an RODC to the Domain 4:57 Total 21:01 Lab/Activity Create RODC Accounts Number of Exam Questions 5 questions Total Time About 35 minutes

22 Section 1.8: RODC Management Summary This section discusses the following considerations managing an RODC: Administrator role separation Replication traffic management Security management Students will learn how to: Configure the password replication policy on the RODC to cache only passwords for specified users. Prepopulate passwords before users even attempt to log on. Server Pro: Advanced Services Exam Objectives: 1.0 Active Directory Configuration. o Implement read-only domain controllers Exam Objectives: 504. Manage Active Directory and SYSVOL replication. o Configure Password Replication Policy (PRP) for RODCs Lecture Focus Questions: How does the password replication policy control password replication? What preventative measures can you implement to protect the data on an RODC in the event it is lost or stolen? How can you prevent certain data from being replicated to an RODC? What steps should you take if an RODC has been compromised? When does an RODC attempt inbound replication? Which two built-in groups can be used for password replication on RODCs?

23 Video/Demo Time RODC Management 9: Managing RODCs 6:01 Total 15:53 Lab/Activity Edit the Password Replication Policy Number of Exam Questions 6 questions Total Time About 35 minutes

24 Section 2.1: Network File System (NFS) Summary This section discusses using Network File System (NFS) to transfer files between computers running Windows and UNIX/Linux operating systems. Details include: Considerations when deploying NFS file sharing on Windows Server 2012: o System requirements o NFS service installation o NFS service configuration o NFS share configuration Students will learn how to: Create and configure an NFS share. Server Pro: Advanced Services Exam Objectives: 2.0 Advanced Storage Management. o Implement NFS to support UNIX/Linux systems Exam Objectives: 201. Configure advanced file services. o Configure NFS data store Lecture Focus Questions: Which PowerShell cmdlets install NFS sharing components on a Windows Server 2012 system? What configuration tasks must be completed before using the NFS Server or Client on a Windows Server 2012 system? What are two ways you can create shares in the server's NTFS file system and export them to NFS clients? In which two ways can you map a UNIX/Linux user or group to a Windows user or group?

25 Video/Demo Time NFS Overview 1: Configuring an NFS Data Store 12:10 Total 14:03 Lab/Activity Configure an NFS Share Number of Exam Questions 4 questions Total Time About 25 minutes

26 Section 2.2: BranchCache Summary This section discusses using BranchCache to allow users in branch offices to access information more quickly. Concepts covered include: The role of BranchCache BranchCache modes: o Hosted Cache o Distributed Cache Students will learn how to: Configure a BranchCache content server. Configure a hosted BranchCache server. Use PowerShell cmdlets to configure BranchCache clients. Verify BranchCache client settings Exam Objectives: 201. Configure advanced file services. o Configure BranchCache Lecture Focus Questions: What method do you use to configure a file server as a BranchCache content server? How does hosted cache mode differ from distributed cache mode in systems using BranchCache? What are the advantages of using Group Policy to configure BranchCache on multiple computers? How do you use Group Policy to configure firewall rules for BranchCache clients? Which settings should you verify when inspecting the current BranchCache operation mode using the Get-BCStatus cmdlet? What should you be aware of if you use both PowerShell cmdlets and Group Policy to configure BranchCache on client systems?

27 Video/Demo Time BranchCache Overview 5: Configure BranchCache 6:11 Total 11:45 Number of Exam Questions 10 questions Total Time About 25 minutes

28 Section 2.3: Dynamic Access Control (DAC) Summary In this section students will learn about using Dynamic Access control (DAC) to enable granular control over data access. Details include: The role of Dynamic Access Control (AC) Factors that can be used to change the level of access of a user Components of DAC implementation: o Resource properties o Classification rules o Claims-based access control: User claims Devices claims o Central access rules o Central access policies Considerations when setting up the permission for DAC and NTFS file permissions Tasks to implement Dynamic Access Control (DAC): o Install FSRM o Define resource properties o Create classification rules o Configure claim types o Define central access rules o Define central access policies o Configure Group Policy settings o Apply central access policies Students will learn how to: Use FSRM to configure File Classification Infrastructure. Create and configure classification rules. Configure a classification schedule. Server Pro: Advanced Services Exam Objectives: 2.0 Advanced Storage Management. o Implement Dynamic Access Control (DAC)

29 Exam Objectives: 201. Configure advanced file services. o Configure File Classification Infrastructure (FCI) using File Server Resource Manager (FSRM) 202. Implement Dynamic Access Control (DAC). o Configure user and device claim types o Configure file classification o Create and configure Central Access rules and policies o Create and configure resource properties and lists Lecture Focus Questions: By implementing DAC, what criteria can you use to dynamically change the level of access a user has to file server data? How can you use NTFS file system permissions and DAC to control resource access? To which types of data can classification rules be applied? How does the Content Classifier method of assigning a property to a file differ from the Windows PowerShell Classifier method? What are the components of a central access rule? Which Kerberos Group Policy settings must be enabled to support DAC? Video/Demo Time DAC Overview 10: Configuring File Classification Infrastructure (FCI) using FSRM 11: Implementing DAC Policies 19:59 Total 41:51 Lab/Activity Configure File Classification Infrastructure Number of Exam Questions 4 questions Total Time About 55 minutes

30 Section 2.4: DAC Management Summary In this section students will learn about options to manage Dynamic Access Control (DAC). Details in this section include: Staging Access-denied remediation Students will learn how to: Staging policy changes for central access policies for DAC. Use Group Policy to configure file access auditing. Server Pro: Advanced Services Exam Objectives: 2.0 Advanced Storage Management. o Implement Dynamic Access Control (DAC) Exam Objectives: 201. Configure advanced file services. o Configure file access auditing 202. Implement Dynamic Access Control (DAC). o Implement policy changes and staging o Perform access-denied remediation Lecture Focus Questions: How can you test the effect of DAC rules without enforcing them? What is the purpose of access-denied remediation? What are two requirements for using access-denied remediation? What should you be aware of if you use both File Server Resource Manager and Group Policy to configure DAC? Video/Demo Time DAC Management Implementing Policy Changes and Staging 6: Performing Access-denied Remediation 5:09 Total 16:50 Number of Exam Questions 3 questions

31 Total Time About 20 minutes

32 Section 2.5: Advanced Storage Summary This section examines using iscsi and isns to provide advanced storage capabilities. Details include: Hardware required to create an iscsi SAN: o Ethernet cabling o Ethernet switches o Ethernet NICs The role of iscsi targets The role of iscsi initiator iscsi terminology to be familiar with: o network entity o network portal o Protocol Data Unit (PDU) o iscsi name o iscsi Qualified Name (IQN) o iscsi target o iscsi initiator o LUN Considerations when choosing between iscsi and other SAN technologies Steps to configure iscsi initiators The role of Internet Storage Name Service (isns) Students will learn how to: Create an iscsi virtual disk and configure an iscsi target on it. Configure an iscsi initiator with access to the virtual disk. Install the isns Server Service feature and configure isns. Server Pro: Advanced Services Exam Objectives: 2.0 Advanced Storage Management. o Implement an iscsi SAN Exam Objectives: 203 Configure and optimize storage. o Configure iscsi Target and Initiator o Configure Internet Storage Name server (isns)

33 Lecture Focus Questions: What are the hardware components of a SAN? What is the advantage of using Ethernet hardware for a SAN implementation? What is the benefit from implementing a second, parallel network infrastructure dedicated only to the iscsi SAN? In an iscsi SAN, what purpose does the network portal serve? What are the steps to configure iscsi initiators? What functions does Storage Name Service (isns) provide? Video/Demo Time iscsi and Internet Storage Name Server (isns) 2: Configuring an iscsi Target 2: Configuring the iscsi Initiator 4: Configuring isns 3:11 Total 12:28 Lab/Activity Configure an iscsi Target Configure the iscsi Initiator Number of Exam Questions 8 questions Total Time About 35 minutes

34 Section 2.6: Storage Optimization Summary This section covers optimizing storage by using storage spaces and storage pools. Concepts covered include: Components of storage spaces: o Devices o Pools o Storage spaces Steps to follow when more disk space is needed Configuration options in storage pool creation: o Allocation o Storage layout: Simple Two-way mirror Three-way mirror Parity o Provisioning: Fixed provisioning Thin provisioning Considerations about storage spaces Storage pool limitations PowerShell commands to manage storage spaces: o New-StoragePool o Add-PhysicalDisk o New-VirtualDisk o Get-StoragePool Options to optimized storage on a Windows Server 2012 system: o Data deduplication o Features on Demand Students will learn how to: Configure storage pools. Reduce disk space used by Windows Server 2012 using Features on Demand. Enable data deduplication to optimize data storage.

35 Exam Objectives: 102 Configure failover clustering. o Configure and optimize clustered shared volumes o Configure storage spaces 203 Configure and optimize storage. o Implement thin provisioning and trim o Manage server free space using Features on Demand Lecture Focus Questions: How does fixed provisioning differ from thin provisioning? What are the limitations of the storage pool? Which PowerShell cmdlets can you use to manage storage spaces and what is the function of each? How does data deduplication differ from Features on Demand? How can you use Features on Demand to manage free space of a Windows Server 2012 server? Video/Demo Time Storage Optimization 4: Optimizing Storage 12: Storage Tiers 12:51 Total 29:57 Number of Exam Questions 8 questions Total Time About 45 minutes

36 Section 3.1: Windows Server Backup Summary This section provides details of using Windows Server Backup. Concepts covered include: The role of the Online Backup feature in Windows 2012 Steps to perform online backups The role of the Windows Server Local Backup Considerations about using Windows Server Backup Methods Windows Server Backup provides to run backups: o Windows Server Backup MMC snap-in o Wbadmin from the command prompt o PowerShell cmdlets for Windows Server Backup Options available with Windows Server Backup: o Full Server o Bare metal recovery o System state o Individual volumes o Folders or files Storage types that Windows Server Backup can save backups to: o Internal disk o External disk o Shared folder o DVD, other optical or removable media When using Windows Server Backup you cannot back to: o Tape o USB flash drives o Pen drives Students will learn how to: Install Windows Server Backup. Configure a regular backup schedule for a server. Back up a server. Server Pro: Advanced Services Exam Objectives: 3.0 Server Data Protection. o Configure server backups

37 Exam Objectives: 301 Configure and manage backups. o Configure Windows Server backups o Configure Windows Online backups o Configure role-specific backups Lecture Focus Questions: When using the Online Backup feature in Windows Server 2012, what options do you have for obtaining the certificate file? Which types of backups are not supported by Online Backup and must be done using a local backup? What is the best practice for securing the Online Backup passphrase? What happens if the online backup destination does not have sufficient space available to store the backup? When using Windows Server Backup, which backup option would you use if you want to be able to recover all volumes including system state and bare metal recoveries? Which media types are not supported by Windows Server Backup? Video/Demo Time Windows Server Backup 3: Configuring Windows Server Backup for Local Backup 2: Configuring Windows Server Backup for Online Backup 6:27 Total 12:16 Lab/Activity Back Up a Server Number of Exam Questions 13 questions Total Time About 35 minutes

38 Section 3.2: Restore from Backup Summary This section discusses restoring from backup. Concepts covered include: Considerations when restoring from backups Recovery types and the tools to perform them: o Online o Files and folders o Hyper-V o Volumes o Applications o Bare metal or full server o System state Students will learn how to: Restore a server from backup. Restore user data from backup. Perform a Bare Metal Recovery. Server Pro: Advanced Services Exam Objectives: 3.0 Server Data Protection. o Restore server data from backup Exam Objectives: 302 Recover servers. o Restore from backups o Perform a Bare Metal Restore (BMR) Lecture Focus Questions: Which are the only types of files that can be recovered from an online backup? Which are the only media supported for recovering files and folders using Windows Server Backup? Who is authorized to perform recoveries using Windows Server Backup? What tool allows you to recover Hyper-V virtual machines? When recovering volumes, how is the existing data on the destination volume handled?

39 Video/Demo Time Restore from Backup 1: Recovering User Data 3: Performing a Bare Metal Recovery (BMR) 3:30 Total 8:50 Number of Exam Questions 3 questions Total Time About 15 minutes

40 Section 3.3: Volume Shadow Copies Summary This section discusses using Volume Shadow Copies to make copies of user files at regular intervals. Concepts covered include: The role of Volume Shadow Copy Service (VSS) Considerations when using VSS VSS areas when implementing shadow copies: o Scheduling o Storing o Recovering o NTFS Permissions o VSSAdmin Students will learn how to: Enable and configure shadow copies for shared folders. Restore a previous version of a file. Use VSSAdmin to manage VSS settings from the command line. Server Pro: Advanced Services Exam Objectives: 3.0 Server Data Protection. o Enable shadow copies Exam Objectives: 301 Configure and manage backups. o Manage VSS settings using VSSAdmin Lecture Focus Questions: How do you view and manage previous versions of volumes, folders and files? What criteria should you use for scheduling shadow copies of volume data? How are NTFS permissions on previous versions of a file affected during recovery? How does restoring folders affect new files that have been added since the shadow copy was made? What steps should you take to allow defragmentation on volumes with VSS enabled? What happens if you delete a volume before disabling VSS?

41 Video/Demo Time Volume Shadow Copies 2: Configuring VSS 3: Managing VSS Settings with VSSAdmin 2:07 Total 7:53 Lab/Activity Enable Shadow Copies Restore Previous Version 1 Restore Previous Version 2 Number of Exam Questions 11 questions Total Time About 35 minutes

42 Section 3.4: Boot Configuration Data (BCD) Store Summary In this section students will learn about Boot Configuration Data (BCD) Store. Concepts covered include: Tools to assist in system recovery: o System Recovery Options o Boot Configuration Data (BCD) o Windows Memory Diagnostic Tool (WMDT) o Startup and Recovery options o System Configuration utility (Msconfig.exe) The role of boot options Windows Server 2012 startup modes: o Repair Your Computer o Safe Mode o Safe Mode with Networking o Safe Mode with Command Prompt o Enable Boot logging o Enable low-resolution video o Last Known Good Configuration o Debugging Mode o Disable automatic restart on a system failure o Disable Driver Signature Enforcement o Disable Early Launch Anti-Malware Protection Recommendations to troubleshoot startup errors with the advanced boot options Students will learn how to: Configure the BCD store. Use Advanced Boot options to boot a computer Exam Objectives: 302 Recover servers. o Recover servers using Windows Recovery Environment (Win RE) and safe mode o Configure the Boot Configuration Data (BCD) store

43 Lecture Focus Questions: When would you need to use the System Image Recovery tool? In which situations would the System Configuration utility (bcd) be useful? What actions can you take to boot your system if it is not running and will not boot normally? When should you access the Repair Your Computer option? When should you boot your computer into safe mode? In which situations will the Last Known Good Configuration option be useful? Why would it be useful to enable the Disable automatic restart on system failure option? Video/Demo Time BCD Store Overview 1: Configuring the BCD Store 7:55 Total 9:22 Number of Exam Questions 4 questions Total Time About 20 minutes

44 Section 4.1: DHCP Overview Summary This section provides an overview of DHCP. Concepts covered include: Methods that clients use to obtain an address from a DHCP server: o DHCP Discover (D) o DHCP Offer (O) o DHCP Request (R) o DHCP ACK (A) DHCP Authorization requirements DHCP Server authorization verification Considerations when installing and configuring a DHCP Server DHCP console context-sensitive icons: o Check mark in a green circle o Red down arrow o Horizontal white line inside a red circle o Exclamation sign inside a yellow triangle o Exclamation sign inside a blue circle Students will learn how to: Install a DHCP server. Authorize a DHCP server Exam Objectives: 401 Implement an advanced Dynamic Host Configuration Protocol (DHCP) solution. o Implement DHCPv6 Lecture Focus Questions: What are the steps a DHCP client uses to obtain an IP address from a DHCP server? What permissions do you need to authorize a DHCP server? When is authorization not required for a DHCP server? What happens when a DHCP server's IP address is not found in Active Directory? How would you set up a DHCP Administrator so that the administrator has rights on all DHCP servers in the domain? In the DHCP console, you notice that the DHCP server icon has a red down arrow beside it. What is the status of the DHCP server?

45 Video/Demo Time DHCP Overview 1: Installing and Authorizing DHCP Server 1:49 Total 3:31 Number of Exam Questions 5 questions Total Time About 10 minutes

46 Section 4.2: DHCP Scopes Summary This section provides details of using DHCP scopes. Concepts covered include: Working with DHCP scopes DHCP options: o Server options o Scope options o Class options o Client options Common options include: o 003 Router o 006 DNS Servers o 015 DNS Domain Name Considerations when working with DHCP options Key components of DHCP policies: o Conditions o Settings The role of a superscope Options for a DHCP server to service a subnet separated with a router: o 1542 compliant router o DHCP relay agent Students will learn how to: Create and activate DHCP scopes. Create a multicast scope. Create and configure a superscope Exam Objectives: 401 Implement an advanced Dynamic Host Configuration Protocol (DHCP) solution. o Create and configure superscopes and multicast scopes o Configure DNS registration

47 Lecture Focus Questions: What are the four levels of DHCP IP configuration options and what is the purpose of each? In what order are DHCP options applied? Which option values take precedence: those delivered through DHCP or those configured manually on the client? How can you change the subnet mask in an existing scope? When should you use reservations for a DHCP client? When would you use a DHCP policy? When might you use a superscope? Video/Demo Time DHCP Scopes 7: Creating IPv4 Scopes 14:22 Total 21:55 Lab/Activity Create a Superscope Number of Exam Questions 11 questions Total Time About 45 minutes

48 Section 4.3: DHCP and IPv6 Summary This section provides the basic information about the structure of IPv6 and using DHCP in an IPv6 environment. Components of a IPv6 address: o Format o Leading zeros o Prefix and interface ID Considerations when using Ipv6 Comparison of IPv4 address types with IPv4 address types The process to configure the IPv6 Address assignment Address types of an autoconfigured IPv6 address: o Tentative o Valid: Preferred Deprecated o Invalid The role of DHCP in an IPv6 environment DHCPv6 broadcasts: o Solicit Packet (S) o Advertise Packet (A) o Request Packet (R) o Reply Packet (R) Configuring a DHCP server for IPv6 Students will learn how to: Create an IPv6 scope. Configure DHCPv6 scope options. Server Pro: Advanced Services Exam Objectives: 4.0 Advanced DHCP and DNS Configuration. o Configure DHCP to support IPv6

49 Exam Objectives: 401 Implement an advanced Dynamic Host Configuration Protocol (DHCP) solution. o Implement DHCPv6 Lecture Focus Questions: How does IPv6 differ from IPv4? What is the purpose of a neighbor solicitation? If the M and O flags in the router advertisement (RA) message are set to 1, what type of configuration method should you use? What options do you have for dealing with zeros (0s) in an IPv6 address? How is autoconfiguration in IPv6 improved over autoconfiguration in IPv4? What does a multicast address indicate? Video/Demo Time IPv6 Overview 3: Implementing IPv6 1:39 Total 5:38 Lab/Activity Configure an IPv6 Scope Number of Exam Questions 9 questions Total Time About 25 minutes

50 Section 4.4: DHCP High Availability Summary This section discusses the following DHCP high availability features available on Windows Server Split scopes Failover Name Protection Students will learn how to: Create and configure a split scope Configure a DHCP failover Server Pro: Advanced Services Exam Objectives: 4.0 Advanced DHCP and DNS Configuration. o Configure split DHCP scopes o Configure DHCP failover Exam Objectives: 401 Implement an advanced Dynamic Host Configuration Protocol (DHCP) solution. o Configure high availability for DHCP including DHCP failover and split scopes o Configure DHCP Name Protection Lecture Focus Questions: What is a split scope? How do you create a split scope? When configuring a split scope, how can you help to ensure that the preferred server is accepted by the client computer? How does DHCP implement name protection? In which two ways can you implement DHCP failover?

51 Video/Demo Time DHCP High Availability 4: DHCP Split Scopes 4: DHCP Failover 6: DHCP Name Protection 1:35 Total 17:03 Lab/Activity Configure a Split Scope Configure DHCP Failover 1 Configure DHCP Failover 2 Number of Exam Questions 3 questions Total Time About 40 minutes

52 Section 4.5: IPAM Overview Summary This section provides an overview of IP Address Management (IPAM). Details include: The role of IPAM Key IPAM specifications Phases for the process of installing IPAM: o Install the IPAM role o Connect to the IPAM server o Provision the IPAM server o Configure server discovery o Discover servers o Define managed servers o Gather data from managed servers Features that Windows Server 2012 R2 supports Students will learn how to: Manually configure IPAM. Configure IPAM using the IPAM Provisioning Wizard, a Group Policy based provisioning method. Configure server discovery to discover domain controllers, DHCP servers, DNS servers, and NPS servers, and automatically add them to the IPAM console Exam Objectives: 403 Deploy and manage IPAM. o Configure IPAM manually or by using Group Policy o Configure server discovery o Migrate to IPAM o Configure IPAM database storage

53 Lecture Focus Questions: What functions does the IP Address Management (IPAM) server perform? What is the IPAM server scope discovery range in Active Directory? Why should you not install IPAM on a DHCP server? What is IPAM provisioning? What are the steps for provisioning an IPAM server? What tasks must be performed before the Server Discovery task can work properly? How do you configure discovered servers as managed servers? Video/Demo Time IPAM Basics 4: Configuring IPAM Manually or Using GPO 9: IPAM on Server 2012 R2 11:01 Total 25:35 Number of Exam Questions 7 questions Total Time About 35 minutes

54 Section 4.6: IPAM Configuration Summary In this section students will learn about configuring IPAM. Concepts covered in this section include: IP Address information managed by IPAM is organized into the following hierarchy: o IP address space o IP address blocks o IP address ranges o IP address inventory IPAM console provide the following options: o DNS and DHCP servers o DHCP scopes o DNS zones o Server groups Students will learn how to: Manage IP block and ranges from the IPAM console. Use the IPAM console to manage DHCP and DNS servers Exam Objectives: 403 Deploy and manage IPAM. o Create and manage IP blocks and ranges o Monitor utilization of IP address space o Manage IPAM collections Lecture Focus Questions: What is the hierarchical organization of IP address information managed by IPAM? How does the IP address inventory organize IP addresses? What information about DNS and DHCP servers does IPAM store? How do you view IP address ranges using the IPAM console? What DNS zone information can you view in IPAM?

55 Video/Demo Time IPAM Configuration 3: Managing IP Blocks and Ranges 15:01 Total 19:00 Number of Exam Questions 7 questions Total Time About 30 minutes

56 Section 4.7: IPAM Management Summary This section discusses the following key tasks of managing an IPAM server. Assign the appropriate right to the user. Allow the user to access the server remotely. Add the remote IPAM server to the server pool in Server Manager. Students will learn how to: Assign a user the rights to remotely act as an IPAM administrator Exam Objectives: 403 Deploy and manage IPAM. o Delegate IPAM administration Lecture Focus Questions: Which local group on the IPAM server should you assign a user to so that they will have the appropriate rights to manage an IPAM server? Which tasks must be completed to delegate to a user the ability to manage an IPAM server? If Group Policy provisioning was used to set up the IPAM server, what domain administrator privileges should a user have in order to indicate that servers in inventory are managed or not managed? Which group must a user be a member of in order to access the IPM server from a remote IPAM client? How can you allow a user to manage an IPAM server from a remote location? Video/Demo Time IPAM Management 0: Delegating IPAM Administration 2:41 Total 3:31 Number of Exam Questions 2 questions Total Time About 5 minutes

57 Section 5.1: DNS Security Summary This section discusses strategies for DNS security. The following details are covered: Goals for designing security for a DNS solution Strategies to improve DNS security: o Provide redundancy and automatic backup of DNS data o Prevent zone transfer except to specific servers o Prevent unauthorized modification of zone data on secondary servers o Prevent zone transfers except to domain controllers o Secure zone transfer data while in transit o Prevent unauthorized modification of dynamic DNS records o Secure DNS data on the servers o Cryptographically sign DNS zone records o Lock records in the DNS cache o Randomize the port used for DNS queries o Audit DNS activity Security considerations for DNS servers available to Internet users Students will learn how to: Configure DNSSEC on a zone to secure data by signing DNS zones and records. Configure DNS socket pooling and cache locking to increase security for the DNS cache. Server Pro: Advanced Services Exam Objectives: 4.0 Advanced DHCP and DNS Configuration. o Protect zone data with DNSSEC Exam Objectives: 402 Implement an advanced DNS solution. o Configure security for DNS including DNSSEC, DNS Socket Pool, and cache locking o Isolate DNSSEC key management and storage

58 Lecture Focus Questions: What security goals should you set for your DNS solution? How can you limit zone transfer to specific servers? How can you limit zone transfer to specific domain controllers? What security issue is addressed by converting all zones to Active Directory-integrated and allowing only secure dynamic update? How does DNSSec make DNS zone records more secure? How do you randomize the port used for DNS queries? Video/Demo Time DNS Security 12: Configuring DNSSEC 10: Configuring DNS Socket Pooling 2: Configuring Cache Locking 1:19 Total 26:50 Number of Exam Questions 10 questions Total Time About 40 minutes

59 Section 5.2: Advanced DNS Settings Summary This section discusses using the DNS Manager to configure advanced DNS settings. DNS Manager tabs to configure DNS server properties: o Interfaces o Forwarders o Root Hints o Debug Logging o Event Logging o Monitoring o Security o Advanced Windows Server 2012 R2 enhanced zone level statistics: o All Statistics o Query Statistics o Transfer statistics o Update statistics Students will learn how to: Configure a server with DNS advanced settings. Server Pro: Advanced Services Exam Objectives: 4.0 Advanced DHCP and DNS Configuration. o Configure advanced DNS server settings Exam Objectives: 402. Implement an advanced DNS solution. o Configure DNS logging o Configure delegated administration o Configure recursion o Configure netmask ordering o Analyze zone level statistics