Lesson Plans LabSim Windows Server Pro: Install and Configure Exam 70-410 Table of Contents Course Overview .................................................................................................. 3 Course Introduction for Instructors ........................................................................ 5 Section 1.1: Introduction ....................................................................................... 7 Section 1.2: Windows Server 2008 R2 Interface Overview ................................... 8 Section 1.3: Windows Server 2012 Interface Overview ...................................... 10 Section 2.1: Installation ....................................................................................... 12 Section 2.2: PowerShell ...................................................................................... 14 Section 2.3: Server Roles ................................................................................... 16 Section 2.4: Server Core ..................................................................................... 18 Section 2.5: Remote and Offline Servers ............................................................ 20 Section 2.6: NIC Teaming ................................................................................... 22 Section 2.7: Traditional Storage .......................................................................... 24 Section 2.8: Storage Pools ................................................................................. 27 Section 3.1: Virtual Machines ............................................................................. 29 Section 3.2: Virtual Machine Storage .................................................................. 31 Section 3.3: Virtual Networks .............................................................................. 33 Section 4.1: Active Directory ............................................................................... 36 Section 4.2: Domain Controllers ......................................................................... 38 Section 4.3: Sites ................................................................................................ 40 Section 4.4: Organizational Units ........................................................................ 41 Section 4.5: Users Accounts ............................................................................... 43 Section 4.6: Bulk User Operations ...................................................................... 45 Section 4.7: Computer Accounts......................................................................... 47 Section 4.8: Groups ............................................................................................ 49 Section 4.9: Rights Delegation ............................................................................ 51 Section 5.1: Single-label Names ......................................................................... 53 Section 5.2: Name Resolution ............................................................................ 55 Section 5.3: Zone Management .......................................................................... 57 Section 5.4: DNS Records .................................................................................. 59 Section 5.5: DNS Server Properties.................................................................... 61 Section 5.6: DNS Troubleshooting ...................................................................... 63 Section 6.1: File Access ...................................................................................... 65 Section 6.2: Access-based Enumeration (ABE) and Volume Shadow Copy (VSS) ............................................................................................................................ 68 Section 6.3: Shares............................................................................................. 70 Section 6.4: Sharing on Server 2012 .................................................................. 72 Section 6.5: Effective Permissions ...................................................................... 74 Section 7.1: Print Servers ................................................................................... 76 Section 7.2: Print Management ........................................................................... 78 Section 8.1: Group Policy Foundation ................................................................. 80 Section 8.2: Group Policy Management .............................................................. 82 Section 8.3: Password Policies ........................................................................... 84 Section 8.4: Audit Policies .................................................................................. 86 ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 1 Section 8.5: User Rights Assignment.................................................................. 88 Section 8.6: Security Options .............................................................................. 90 Section 8.7: Restricted Groups ........................................................................... 92 Section 8.8: Windows Firewall Policies ............................................................... 94 Section 8.9: Application Restriction Policies ....................................................... 96 Section 8.10: Group Policy Preferences ............................................................. 98 Section 9.1: IPv4 Addressing ............................................................................ 100 Section 9.2: IPv4 Custom Addressing ............................................................... 102 Section 9.3: IPv6 Addressing ............................................................................ 104 Section 10.1: DHCP Basics .............................................................................. 106 Section 10.2: DHCP Exclusions and Reservations ........................................... 108 Section 10.3: DHCP Centralization ................................................................... 110 Section 10.4: DHCP Troubleshooting ............................................................... 112 Windows Server Pro: Install and Configure Practice Exams............................. 114 Microsoft 70-410 Practice Exams ..................................................................... 115 Appendix A: Approximate Time for the Course ................................................. 116 Appendix B: Windows Server Pro: Install and Configure Objectives................. 119 Appendix C: 70-410: Installing and Configuring Server 2012 ........................... 122 ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 2 Course Overview This course prepares students for TestOut’s LabSim Windows Server Pro: Install and Configure, and Microsoft’s 70-410 certification exam. Module 1 – Introduction This module introduces the students to services a server provides and tools to administer Windows Server R2 and Windows Server 2012. Module 2 – Installation and Configuration In this module students will learn about installing and configuring Windows Server 2012. Module 3 – Hyper-V This module teaches students about managing virtual machines with the Hyper-V Manager. Module 4 – Active Directory This module discusses details and components about managing Active Directory. Module 5 – DNS This module examines managing the configuration of DNS and all the elements related to it. Module 6 – File and Share Access In this module students will learn concepts about configuring file and share access. This includes managing permissions, quotas, who can see what, and sharing and effective permissions. Module 7 – Print and Document Services This module discusses configuring and managing print and document services. Module 8 – Group Policy In this module students will learn about using Group Policy to centralize administration and manage security. Module 9 – Networking This module discusses details about how computers use IPv4 and IPv6 addressing to communicate with each other. Module 10 – DHCP This module examines installing and configuring DHCP. This includes scopes, options, exclusions, reservations, and centralization. ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 3 Practice Exams In Practice Exams students will have the opportunity to test themselves and verify that they understand the concepts and are ready to take the certification exam. The practice exams are divided into two separate modules and will contain examples of the types of questions that a student will find on the actual exam: Windows Server Pro: Install and Configure Certification Practice Exams Microsoft 70-410 Practice Exams ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 4 Course Introduction for Instructors This course provides students with the knowledge to become industry certified as a Windows professional. This course actually meets the specifications for two different industry certification programs. It prepares the student for the following: TestOut's Windows Server Pro: Install and Configure certification Microsoft’s 70-410: Windows Server, Installing and Configuring Server 2012 TestOut’s Windows Server Pro: Install and Configure certification is a new certification which measures not just what you know, but what you can do. The TestOut Server Pro Certification measures your ability to design, implement, configure and manage a Windows network that incorporates Windows Server 2012. The following knowledge domains are addressed: Configure Windows Servers Hyper-V Active Directory DNS File and Print Services Group Policy Networking DHCP Note: Windows Server Pro: Install and Configure objectives are listed in Appendix B: Windows Server Pro: Install and Configure Objectives. Microsoft’s 70-410: Installing and Configuring Server 2012 certification measures the students’ ability to install, configure, and manage Windows Server 2012 operating system. The following knowledge domains are addressed: Install and configure servers Configure server roles and features Configure Hyper-V Deploy and configure core network services Install and administer Active Directory Create and manage Group Policy Note: MS 70-410 objectives are listed in Appendix C: 70-410: Installing and Configure Server 2012. ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 5 The section introductions in LabSim and the lesson plans list the objectives that are met for each of the exams in that section. The following icons are placed in front of lesson items in LabSim to help students quickly recognize the items in each section: = Demonstration = Exam = Lab/Simulation = Text lesson or fact sheet = Video The video and demonstration icons are used throughout the lesson plans to help instructors differentiate between the timing for the videos and demonstrations. In the lesson plans the Total Time for each section is calculated by adding the approximate time for each section which is calculated using the following elements: Video/demo times Approximate time to read the text lesson (the length of each text lesson is taken into consideration) Simulations (5 minutes is assigned per simulation. This is the amount of time it would take for a knowledgeable student to complete the lab activity. Plan that the new students will take much longer than this depending upon their knowledge level and computer experience.) Questions (1 minute per question) Note: Appendix A: Approximate Time for the Course contains the approximate time for each section which are totaled for the entire course. ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 6 Section 1.1: Windows as a Server Summary This section provides an introduction of the course. This course is designed to prepare you for the following certification exams: TestOut’s Windows Server Pro: Install and Configure Microsoft’s 70-410 exam, a requirement for o Microsoft Certified Solutions Associate (MCSA) o Microsoft Solutions Expert (MCSE): Server Infrastructure o Microsoft Solutions Master (MCSM): Directory Services Video/Demo 1.1.1 Windows Server Time 2:47 Number of Exam Questions 5 questions Total Time About 10 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 7 Section 1.2: Windows Server 2008 R2 Interface Overview Summary This section provides an overview of the Windows Server 2008 R2 Interface. Students will become familiar with the: Differences between Windows Server 2008 and Windows Server R2 Tools used to administer to Windows Server 2008 R2 o Initial Configuration Tasks (ICT) o Server Manager o Administrative Tools Editions of the Windows Server 2008 operating system Editions of the Windows Server 2008 R2 operating system Students will learn how to: View available Administrative Tools from the Start menu Open Administrative Tools within Server Manager Execute a command from a command prompt Access the Control Panel Open the Network and Sharing Center Open Computer Management within Administrative Tools Open Windows Explorer and browse the Windows Server 2008 R2 file structure. Server Pro Exam Objectives: 1.0 Configure Windows Servers o Navigate Server Interfaces Navigate the Windows Server 2008 R2 Interface 70-410 Exam Objectives: 100 Install and Configure Servers Lecture Focus Questions: Which command can you use to display the ICT? How should you access Windows PowerShell to ensure that you have the PowerShell commands for the roles and services you have installed? What tasks do you perform to customize a server? What are key differences between Windows Server 2008 and Windows Server 2008 R2? What is the difference between roles, role services, and features? ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 8 Video/Demo Time 1.2.1 Windows Server 2008 R2 User Interface 3:57 1.2.2 Using the Windows Server 2008 R2 User Interface 4:17 Total 8:14 Lab/Activity Explore the Windows 2008 R2 User Interface Number of Exam Questions 7 questions Total Time About 25 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 9 Section 1.3: Windows Server 2012 Interface Overview Summary This section provides an overview of the Windows Server 2012 interface. Students will become familiar with the: Tools to administer Windows Server 2012: o Server Manager o PowerShell Interface elements used to navigate Windows Server 2012: o Start screen o Charms menu Windows Server 2012 editions Students will learn how to: Open Administrative Tools within Server Manager Access the Start screen Open an application from the Start screen Run a command from a command prompt Access the Control Panel Open the Network and Sharing Center Open Computer Management within Administrative Tools Open File Explorer and browse the Windows Server 2012 file structure. Server Pro Exam Objectives: 1.0 Configure Windows Servers o Navigate Server Interfaces Navigate the Windows Server 2012 Interface 70-410 Exam Objectives: 100 Install and Configure Servers Lecture Focus Questions: Which Windows Server 2012 editions provide all features of Windows Server 2012? How do you access the Charms menu? What are two ways can you access the Start screen? How do you add tools to the Tools menu? What happens when two commands are piped? ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 10 Video/Demo Time 1.3.1 Windows Server 2012 User Interface 4:44 1.3.2 Using the Windows Server 2012 User Interface 4:45 Total 9:29 Lab/Activity Explore the Windows 2012 User Interface Number of Exam Questions 7 questions Total Time About 25 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 11 Section 2.1: Installation Summary This section provides an overview of the Windows Server 2012. Students will become familiar with the: Windows Server 2012 editions: o Foundation o Essentials Edition o Standard Edition o Datacenter Edition Minimum requirements for all editions of Windows Server 2012 Windows Server 2012 Upgrade paths Server Core Using Server Manager Students will learn how to: Plan a Windows Server 2012 installation. Install Windows Server 2012. Server Pro Exam Objectives: 1.0 Configure Windows Servers 70-410 Exam Objectives: 101 Install servers This objective may include but is not limited to: o Plan for a server installation o Plan for a server upgrade Lecture Focus Questions: Which editions of Windows Server 2012 support a Server Core installation? What is the system volume free space requirement for Windows Server 2012? If you are currently running Windows Web Server 2008 R2, what is your upgrade path? How many virtual instances are allowed on each Windows Server 2012 edition? What is the difference between a full installation of Windows Server 2012 and a Server Core installation? ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 12 How does a Server Core installation in Windows Server 2012 differ from a Server Core installation in previous versions of Windows Server? Can a full installation of Windows Server 2012 be converted to a Server Core installation? Video/Demo Time 2.1.1 Server Installation and Upgrade 7:29 2.1.2 Installing Windows Server 2012 3:54 Total 11:23 Number of Exam Questions 5 questions Total Time About 20 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 13 Section 2.2: PowerShell Summary This section discusses using PowerShell to create scripts from the command line to automate system administration and application management tasks. Concepts covered include: Terms used with PowerShell: o Command line o Cmdlets o Providers New features in PowerShell 3.0: o Deployment Image Servicing and Management (DISM) o Remote Windows PowerShell o Windows PowerShell Workflows Students will learn how to: Use PowerShell cmdlets to configure a Windows Server 2012 Server Pro Exam Objectives: 1.0 Configure Windows Servers o Configure Server Services Configure Server Services 70-410 Exam Objectives: 102 Configure servers Lecture Focus Questions: What is the typical PowerShell command format? How can you access the cmdlet help system? How can you cycle through options for a cmdlet? How can you use the auto-complete feature of PowerShell 3.0? What is the purpose of Windows PowerShell providers? How can you import a PowerShell module when writing a script? ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 14 Video/Demo Time 2.2.1 PowerShell Overview 7:39 2.2.2 Using PowerShell 5:00 Total 12:39 Number of Exam Questions 3 questions Total Time About 20 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 15 Section 2.3: Server Roles Summary In this section students will learn the roles, role services and features in Windows Server 2012. Concepts covered in this section include: Roles: o Active Directory Domain Service (AD DS) o Active Directory Certificate Services (AD CS) o DNS Server o DHCP Server o File and Storage Services o Hyper-V o Print and Document Services o Network Policy and Access Services o Web Server (IIS) o Windows Deployment Services (WDS) o Windows Server Update Server Role services: o Distributed Scan Server o Network Policy Server (NPS) o Host Credential Authorization Protocol (HCAP) o Health Registration Authority (HRA) Features: o Failover Clustering o Group Policy o Network Load Balancing o BitLocker Drive Encryption o Remote Assistance o SMTP Server o Windows Server Backup Features on Demand Students will learn how to: Install roles on Windows Server 2012. Server Pro Exam Objectives: 1.0 Configure Windows Servers ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 16 70-410 Exam Objectives: 101 Install servers This objective may include but is not limited to: o Plan for server roles o Optimize resources utilization by using Features on Demand o Migrate roles from previous versions of Windows Server 102 Configure servers This objective may include but is not limited to: o Configure services Lecture Focus Questions: What is the relationship between server roles, role services, and features? How is a new role installed on a server? How do you remove a role in Windows Server 2012? Which role should be installed if you want to configure a local update server? How can you migrate roles from an existing system running an earlier version of Windows Server to Windows Server 2012? Which Windows Server 2012 feature allows you to remove the source files of unused roles and features? What is the benefit of removing the source files of unused roles and features? What methods can be used to obtain source files to re-install removed roles and features files? Video/Demo 2.3.1 Server Roles 2.3.2 Migrating Server Roles Time 2:04 11:25 2.3.3 Features on Demand 5:34 2.3.4 Using Features on Demand 5:28 Total 24:31 Number of Exam Questions 3 questions Total Time About 35 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 17 Section 2.4: Server Core Summary This section examines selecting and performing a Server Core installation option. Concepts covered include: Installation options when installing Windows Server 2008 R2: o Server Core o Minimal Server Interface o Server with a GUI Considerations when selecting the installation option Tasks to perform after the Server Core installation: o Name the computer o Set the time and time zone o Assign a static IP address to the server o Join the server to the domain PowerShell commands for switching between server installation options Tasks to convert from Server with a GUI to a Minimal Server installation Tasks to convert from Server with a GUI to a Server Core installation Students will learn how to: Install and configure a Windows Server 2012 Server Core system. Convert a Windows Server 2012 Server Core installation to a full installation. Convert a Windows Server 2012 full installation to a Server Core installation. Server Pro Exam Objectives: 1.0 Configure Windows Servers 70-410 Exam Objectives: 101 Install servers This objective may include but is not limited to: o Plan for a server installation o Install Server Core 102 Configure servers This objective may include but is not limited to: o Configure Server Core o Convert Server Core to/from full GUI 203 Configure servers for remote management This objective may include but is not limited to: ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 18 o Configure Server Core Lecture Focus Questions: How does a Minimal Server Interface installation differ from a Server Core installation? What are the benefits of a Server Core installation? Which utility do you use to make changes to Server Core settings? Which PowerShell command converts a Server with a GUI installation to a Server Core installation? Which four tasks should you perform immediately after a Server Core installation? Which command joins the server to the domain after the Server Core installation? Video/Demo Time 2.4.1 Server Core 3:01 2.4.2 Configuring Server Core 8:18 2.4.3 Server Core Conversion 4:29 2.4.4 Converting Server Core 7:46 Total 23:34 Number of Exam Questions 5 questions Total Time About 35 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 19 Section 2.5: Remote and Offline Servers Summary This section provides information about remote role deployment tasks. Concepts covered include: Role deployment tasks: o Add domain servers to the server pool o Manage non-domain workstations o Deploy a role on a remote server o Deploy a role to a VHD file Using the Windows Remote Management WINRM command Using Deployment Image Servicing and Management (dism) commands Students will learn how to: Configure a server for remote management. Deploy roles and features to a remote server. Deploy roles and features to an offline image. Use the WINRM command to manage a remote server Server Pro Exam Objectives: 1.0 Configure Windows Servers 70-410 Exam Objectives: 102 Configure servers This objective may include but is not limited to: o Add and remove features in offline images o Deploy roles on remote servers 203 Configure servers for remote management This objective may include but is not limited to: o Configure WinRM o Configure down-level server management o Configure servers for day-to-day management tasks o Configure multi-server management ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 20 Lecture Focus Questions: How does remote management of servers increase efficiency? What is a server pool? How are servers added to a server pool? Which roles do not support Manage As to change credentials? What are the steps required to install and manage roles on a remote server that is not joined to the domain? What are the requirements for deploying a role to a VHD file? What software is required to use an answer file with Deployment Image Servicing Management (dism)? Video/Demo Time 2.5.1 Remote Role Deployment 6:42 2.5.2 Configuring Servers for Remote Management 6:09 2.5.3 Deploying Role on Remote Servers 1:28 2.5.4 Offline Images 11:48 2.5.5 Deploying Features to Offline Images 7:12 2.5.6 WinRM 5:30 Total 38:49 Number of Exam Questions 7 questions Total Time About 50 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 21 Section 2.6: NIC Teaming Summary This section discusses using NIC Teaming to increase bandwidth and provide fault tolerance. Details covered include: Considerations regarding NIC Teaming NIC Teaming modes: o Switch-dependent mode o Switch-independent mode Load balancing mode methods: o Hyper-V switch port o Hashing Students will learn how to: Configure NIC Teaming. Server Pro Exam Objectives: 1.0 Configure Windows Servers o Configure Server Services Configure NIC Teaming 70-410 Exam Objectives: 102 Configure servers This objective may include but is not limited to: o Configure NIC teaming Lecture Focus Questions: What are the benefits of using NIC Teaming? How does switch-dependent mode differ from switch-independent mode? How does static teaming differ from dynamic teaming? What is the function of the Link Aggregation Control Protocol (LACP)? How many standby NICs are there in an active/passive configuration? What are the restrictions of using NIC Teaming with Hyper-V? ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 22 Video/Demo Time 2.6.1 NIC Teaming 7:00 2.6.2 Configuring NIC Teaming 3:21 Total 10:21 Lab/Activity Configure NIC Teaming Number of Exam Questions 8 questions Total Time About 45 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 23 Section 2.7: Traditional Storage Summary This section examines using managing traditional storage. Concepts covered include: Implementing directly-attached storage Partition styles of disks: o Master Boot Record (MBR) o GUID Partition Table (GPT) Types of Volumes: o Master Boot Record (MBR) o GUID Partition Table (GPT) Dynamic Volume Types: o Simple o Spanned o Striped (RAID 0) o Striped with parity (RAID 5) o Mirrored (RAID 1) Considerations when managing disks and volumes for directly-attached storage Strategies for adding space to existing volumes: o Extend the volume o Configure a mount point Dynamic volume types: o Simple o Spanned o Striped (RAID 0) o Striped with parity (RAID 5) o Mirrored (RAID 1) Considerations when managing disks and volumes for directly-attached storage Strategies to add space to existing volumes: o Extend the volume o Configure a mount point The role of ReFS Students will learn how to: Initialize a disk Configure a volume Extend a volume Configure fault tolerant volumes Create a mount point Manage disks and volumes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 24 Server Pro Exam Objectives: 1.0 Configure Windows Servers o Configure Server Storage Configure Server Volumes Configure Fault Tolerant Volumes Create a Mount Point 70-410 Exam Objectives: 103 Configure local storage This objective may include but is not limited to: o Configure basic and dynamic disks o Configure MBR and GPT disks o Manage volumes Lecture Focus Questions: What are the advantages of GPT partitioning over MBR partitioning? Why is MBR recommended for disk sizes smaller than 2 TB? How does a basic disk differ from a dynamic disk? Which disk configuration is used with spanned, striped, and mirrored volumes? What information does the dynamic disk database contain? When would you use a mount point? How do spanned disks use disk space? Video/Demo Time 2.7.1 Disk Storage 10:13 2.7.3 Volumes 13:30 2.7.4 Volume Formats 6:25 2.7.6 Managing Disks and Volumes 9:07 Total 39:15 Lab/Activity Configure Volumes Configure Fault Tolerance Volumes Create a Mount Point Number of Exam Questions 9 questions ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 25 Total Time About 75 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 26 Section 2.8: Storage Pools Summary In this section students will explore using storage pools. Details include: Components of storage spaces: o Devices o Pools of storage o Storage spaces Steps to add more space to storage spaces Configuration options in storage pool creation: o Allocation o Storage layout: o Simple o Two-way mirror o Three-way mirror o Parity Provisioning: o Fixed provisioning o Thin Provisioning Primordial storage pool Storage pool limitations PowerShell command to manage storage spaces Students will learn how to: Create and mount a VHD. Create storage pools. Server Pro Exam Objectives: 1.0 Configure Windows Servers o Configure Server Storage Create and Mount Virtual Hard Disks (VHDs) Create a Storage Pool 70-410 Exam Objectives: 103 Configure local storage This objective may include but is not limited to: o Design storage spaces o Create and mount virtual hard disks (VHDs) o Configure storage pools and disk pools ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 27 Lecture Focus Questions: What are the advantages of the VHDX format compared to the VHD format? What are the advantages of a dynamically expanding disk compared to a fixed disk? Which virtual hard disk type provides the best performance? What are the advantages of storage pools compared to traditional storage? What is thin provisioning? What is contained in the primordial storage pool? What are the disk requirements for adding a disk to the storage pool? Video/Demo Time 2.8.1 Creating and Mounting a VHD 3:59 2.8.4 Creating Storage Pools 6:46 Total 10:45 Lab/Activity Create and Mount a VHD Create a Storage Pool Number of Exam Questions 6 questions Total Time About 30 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 28 Section 3.1: Virtual Machines Summary This section provides details of creating and managing virtual machines. Concepts covered include: Virtualization types: o Server virtualization o Network virtualization o Storage virtualization Hyper-V details Hardware requirements for Windows Server 2012 running Hyper-V New or updated features available in Windows Server 2012 Hyper-V: o Dynamically expanding o Smart paging o Resource metering o Resource control o Integration Services Students will learn how to: Create a virtual machine. Manage a virtual machine: o Add and manage hardware. o Change boot order. o Change memory allocation. o Manage processors. o Configure Integration Services. o Configure shutdown options. Server Pro Exam Objectives: 2.0 Hyper-V o Manage Virtual Machines with Hyper-V Manager Create and Manage Virtual Machines 70-410 Exam Objectives: 301. Create and configure virtual machine settings. This objective may include but is not limited to: o Configure dynamic memory o Configure smart paging o Configure Resource Metering o Configure guest integration services ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 29 Lecture Focus Questions: What are the hardware requirements for a Windows Server 2012 running Hyper-V? How does Hyper-V in Windows Server 2012 differ from Hyper-V in previous Windows Server versions? What is the purpose of the Memory weight setting? How is it used? What is an advantage to using dynamically expanding memory? What are some advantages to using fixed memory? In what situation is smart paging used? What is the difference between resource metering and resource control? Video/Demo Time 3.1.1 Virtual Machines 9:59 3.1.2 Creating Virtual Machines 4:22 3.1.3 Managing Virtual Machines 6:03 Total 20:24 Lab/Activity Create Virtual Machines Number of Exam Questions 6 questions Total Time About 35 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 30 Section 3.2: Virtual Machine Storage Summary This section discusses creating and managing virtual machine storage. Concepts covered include: Considerations when creating a new VM VHDs management tasks: o Expand o Shrink o Compact o Convert Considerations for Hyper-V in Windows Server 2012 VMs features: o Pass-through disk o Differencing disk o Snapshot Students will learn how to: Create a virtual hard disk. Install a parent virtual machine using a fixed virtual hard disk. Create differencing disks from a parent disk. Create, apply, and delete snapshots. Convert, compact, merge, and expand virtual hard disks. Server Pro Exam Objectives: 2.0 Hyper-V o Manage Virtual Machines with Hyper-V Manager Create Virtual Hard Disks (VHDs) Create Differencing Drives (Parent-Child) 70-410 Exam Objectives: 302. Create and configure virtual machine storage This objective may include but is not limited to: o Create VHDs and VHDXs o Configure differencing drives o Modify VHDs o Configure pass-through disks o Manage snapshots o Implement a virtual Fibre Channel adapter ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 31 Lecture Focus Questions: Why is it necessary to compact dynamically expanding virtual disk files? Under what conditions should a virtual disk configuration not be edited? What is a key difference between using IDE and SCSI virtual disks? How is a pass-through disk implemented in a virtual machine? Under what circumstances would it be advantageous to use differencing disks? How does Hyper-V in Windows Server 2012 protect the integrity of domain controllers running as virtual machines? When should you create a snapshot of a virtual machine? What is the difference between snapshots and differencing disks? Video/Demo Time 3.2.1 Virtual Hard Disks 3:14 3.2.2 Creating Virtual Hard Disks 6:11 3.2.3 Differencing Disks 2:48 3.2.4 Snapshots 3:52 3.2.5 Creating Snapshots 6:03 Total 22:08 Lab/Activity Create Virtual Hard Disk Create a Parent Virtual Machine Create Child Virtual Machines Number of Exam Questions 12 questions Total Time About 55 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 32 Section 3.3: Virtual Networks Summary In this section students will learn about virtual networks. Concepts covered include: Types of virtual networks: o External Internal o Private network o Fibre-Channel Using virtual network adapters Types of virtual network adapters: o Synthetic o Legacy o Fibre-Channel Virtual switch Considerations for installing virtual switches: o External o VLAN o Fibre-Channel Features available to optimize virtual networks: o Virtual Machine Queue (VQM) o IPSec Task Offloading (IPSecTO) o DHCP Guard o Router Guard o Port Mirroring o NIC Teaming o Port Access Control Lists (ACLs) o Meter Port ACLs o Private Virtual Local Area Network (PVLAN) o Trunking Students will learn how to: Create a virtual network. Server Pro Exam Objectives: 2.0 Hyper-V o Manage Virtual Machines with Hyper-V Manager Create Virtual Network and Settings ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 33 70-410 Exam Objectives: 302. Create and configure virtual machine storage This objective may include but is not limited to: o Implement a virtual Fibre Channel adapter 303. Create and configure virtual networks This objective may include but is not limited to: o Implement Hyper-V Network Virtualization o Configure Hyper-V virtual switches o Optimize network performance o Configure MAC addresses o Configure network isolation o Configure synthetic and legacy virtual network adapters Lecture Focus Questions: What is the difference between an internal virtual network and a private virtual network? Which virtual network types do not allow virtual machines to communicate with other hosts on the physical network? When would you need to use a legacy virtual network adapter? When setting up a virtual network, what is the recommended number of network cards for the physical system? How should they be configured? How can a virtual machine be configured to participate on a VLAN? Video/Demo Time 3.3.1 Virtual Network Adapters 2:49 3.3.2 Adding Virtual Network Adapters 1:52 3.3.3 Virtual Switches 4:45 3.3.4 Creating Virtual Switches 3:26 3.3.7 Network Optimization 7:03 3.3.8 Optimizing Virtual Network Performance 7:02 Total 24:57 Lab/Activity Create Virtual Switches Prepare a Production Virtual Machine Number of Exam Questions 11 questions ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 34 Total Time About 55 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 35 Section 4.1: Active Directory Summary This section provides details of Active Directory. Concepts covered include: Active Directory components: o Trees and Forests o Domain o Organizational Unit (OU) o Objects o Generic Containers o Domain Controller o Global Catalog The Active Directory database resides in Ntds.dit Windows operating system networking models: o Stand-Alone o Workgroup o Client-Server Server Pro Exam Objectives: 3.0 Manage Active Directory 70-410 Exam Objectives: 500 Install and Administer Active Directory Lecture Focus Questions: What are the advantages of a client-server network model versus a workgroup model? What is the difference between a tree and a forest? How can you tell when a new domain starts a new tree? What is the function of transitive trusts in a forest? What is the function of the schema? How does Active Directory ensure that each domain controller has the most current information from other domain controllers? ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 36 Video/Demo Time 4.1.1 Active Directory Structure 6:59 4.1.2 Computer Roles 6:32 Total 13:31 Number of Exam Questions 2 questions Total Time About 20 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 37 Section 4.2: Domain Controllers Summary This section discusses installing and managing domain controllers. Concepts covered include: Requirements for installing Active Directory Domain Services (AD DS) Methods for Active Directory Domain Services (AD DS) installation: o Active Directory Domain Services Installation Wizard o Command Line o Answer file o AD DS installation from media Considerations when upgrading domain controllers to Windows Server 2012 The role of domain controllers Partitions within the directory partition: o Domain partition o Schema partition o Configuration partition o Application directory partition Considerations when working with domains Additional functions or roles that domain controllers can have: o Replica domain controller o Global Catalog o Operations Master Roles Students will learn how to: Create a new domain. Configure a Global Catalog server. Troubleshoot DNS issues with Active Directory. Server Pro Exam Objectives: 3.0. Manage Active Directory o Configure Global Catalog Servers 70-410 Exam Objectives: 501. Install domain controllers This objective may include but is not limited to: o Add and remove a domain controller from a domain o Upgrade a domain controller o Install Active Directory Domain Services (AD DS) on a Server Core installation ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 38 o Install a domain controller from Install from Media (IFM) o Configure a global catalog server Lecture Focus Questions: To remove Active Directory from a domain controller, what action must you take before demoting the domain controller? What are the four methods you can use to install Active Directory Domain Services? How does Active Directory use the schema? What is the function of a Global Catalog server? How is a Global Catalog server updated? What is the function of DNS in Active Directory? What is the purpose of the directory partition? Which partition types can be included in the directory partition? Video/Demo Time 4.2.1 Domain Controller Installation 3:43 4.2.2 Domain Controller Upgrades 7:02 4.2.3 Global Catalog Server 4:33 4.2.4 Record Configuration Issues 3:22 4.2.5 Creating a New Domain Total 16:44 35:24 Number of Exam Questions 3 questions Total Time About 45 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 39 Section 4.3: Sites Summary This section discusses the role of sites and subnets. Students will learn how to: Configure and configure a site. Server Pro Exam Objectives: 3.0. Manage Active Directory 70-410 Exam Objectives: 500. Install and Administer Active Directory Lecture Focus Questions: How does a site differ from a domain? What is the purpose of a site link? What does the term "well-connected" mean when referring to networks? How are sites used in Active Directory? How do IP address and subnets relate to sites? How are dynamic site assignments made? Video/Demo Time 4.3.1 Site Overview 3:16 4.3.2 Configuring Sites 3:39 Total 6:55 Number of Exam Questions 3 questions Total Time About 10 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 40 Section 4.4: Organizational Units Summary In this section students will learn the basics of using Organization Units. Concepts covered in this section include: Containers and OU created by default when Active Directory is installed: o Domain container o Builtin container o Users container o Computers container o Domain Controller OU Details about an Organization Unit (OU) Considerations for managing OUs: o Group Policy o Preventing accidental deletion o Delegating authority Students will learn how to: Create organizational units. Create nested organizational units. Prevent accidental deletion of OUs. Delegate administrative control. Server Pro Exam Objectives: 3.0 Manage Active Directory o Create Organizational Units (OUs) o Delegate Administrative Control 70-410 Exam Objectives: 102 Configure servers This objective may include but is not limited to: o Delegate administration 503 Create and manage Active Directory groups and organizational units (OUs) This objective may include but is not limited to: o Delegate the creation and management of Active Directory objects o Manage default Active Directory containers o Create, copy, configure, and delete groups and OUs. ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 41 Lecture Focus Questions: What objects can an organizational unit contain? How is an organizational unit different from a generic container? What are the advantages of placing computer accounts in organizational units rather than the Computer container? How does inheritance affect child organizational units? How does object-based delegation differ from task-based delegation? How can you protect objects from accidental deletion? Video/Demo Time 4.4.1 Default Containers and Organizational Units 8:56 4.4.2 Creating Organizational Units 4:55 Total 13:51 Lab/Activity Create OUs Delete OUs Number of Exam Questions 2 questions Total Time About 30 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 42 Section 4.5: Users Accounts Summary This section discusses considerations when using user accounts. Details include: Types of Windows user accounts: o Local o Domain Active Directory name types: o User or Logon Name o User Principal Name (UPN) o Distinguished names o Relative Distinguished Name (RDN) Recommendations when working with user accounts: o Create/manage user accounts o Use templates o Manage passwords o Create a user profile o Deprovision a user Students will learn how to: Create a user account. Disable a user account. Manage user account passwords. Manage user accounts. Server Pro Exam Objectives: 3.0 Create and Manage User and Computer Accounts o Create User Accounts o Manage User Accounts o Configure User Account Restrictions 70-410 Exam Objectives: 502 Create and manage Active Directory users and computers This objective may include but is not limited to: o Automate the creation of Active Directory accounts o Create, copy, configure, and delete users and computers o Configure templates o Manage inactive and disabled accounts ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 43 Lecture Focus Questions: How is a domain user account different than a local user account? What is the difference between a disabled, locked out, or expired user account? What is the best way to handle a user's account when an employee quits the company and will be replaced by a new employee in the near future? What are the recommendations for using a template user account? What permissions does a user account created from a template have? How should you re-create a user account that was accidentally deleted? Video/Demo Time 4.5.1 Users and Computers 1:00 4.5.2 Users Accounts 1:45 4.5.3 Creating Users 9:27 4.5.4 Managing Users 7:45 Total 19:57 Lab/Activity Create User Accounts Manage User Accounts Number of Exam Questions 12 questions Total Time About 50 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 44 Section 4.6: Bulk User Operations Summary This section provides information about the following tools when performing bulk user operations such as creating or modifying large number of objects: Csvde Ldifde PowerShell Ldp DS commands Students will learn how to: Use Csvde to import and export Active Directory objects. Use Domain Services (DS) commands to create and manage Active Directory objects. Use PowerShell commands to create and manage Active Directory objects. Use Ldifde commands to create and manage Active Directory objects. Use the Ldp utility. Server Pro Exam Objectives: 3.0 Create and Manage User and Computer Accounts Create User Accounts Manage User Accounts 70-410 Exam Objectives: 502 Create and manage Active Directory users and computers This objective may include but is not limited to: o Perform bulk Active Directory operations Lecture Focus Questions: When would you choose Csvde over LDifde when managing objects? Which tools add the user password to the user account? Which tools can you use to create objects in Active Directory? Which cmdlets can be used to manage Active Directory objects? What is the benefit of piping multiple commands? What utilities would you use to view the properties of multiple Active Directory objects? What is the default action for the Csvde command? ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 45 Video/Demo 4.6.1 Bulk Operations 4.6.2 Creating Users in Bulk 4.6.3 Querying Active Directory with PowerShell Total Time 5:10 16:40 4:54 26:44 Number of Exam Questions 12 questions Total Time About 45 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 46 Section 4.7: Computer Accounts Summary In this section students will learn about using computer accounts. Options covered include: Processes to identify a specific computer: o Create a computer account in Active Directory o Join the computer to the domain. Methods to perform these processes: o Pre-stage accounts o Manual join o Redirection o Offline domain join Facts about computer accounts and joining a domain Passwords Students will learn how to: Create computer accounts and manage computer account properties. Redirect the computer container. Perform an offline domain join. Server Pro Exam Objectives: 3.0 Active Directory o Create and Manage User and Computer Accounts Create Computer Accounts 70-410 Exam Objectives: 502. Create and manage Active Directory users and computers This objective may include but is not limited to: o Automate the creation of Active Directory Accounts o Create, copy, configure, and delete users and computers o Offlline domain join Lecture Focus Questions: When should you pre-stage a computer account in an OU? What is the benefit of computer account redirection? What is the most likely cause of a computer not being able to join the domain after being turned off for several weeks? What must you do after resetting a computer account? ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 47 How can you prevent or limit a domain user from joining computers to the domain? How can you join a computer to the domain if it does not have a network connection? Video/Demo Time 4.7.1 Computer Accounts 5:44 4.7.2 Redirecting the Computer Container 2:53 4.7.3 Performing an Offline Domain Join 4:00 Total 12:37 Lab/Activity Create Computer Accounts Number of Exam Questions 6 questions Total Time About 30 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 48 Section 4.8: Groups Summary This section discusses managing groups. Concepts covered include: Groups: o Local group o Domain group Group types: o Security o Distribution Group scopes: o Local o Domain Local o Global o Universal Query for group members Considerations when managing groups Students will learn how to: Create groups. Create global groups. Create a distribution group. Change group scope. Implement a group strategy. Enumerate group membership. Server Pro Exam Objectives: 3.0 Create and Manage Groups o Create and Manage Global Groups o Create and Manage Distribution Groups o Change the Group Scope o Implement Recommended Group Strategy 70-410 Exam Objectives: 503 Create and manage Active Directory groups and organizational units (OUs) This objective may include but is not limited to: o Configure group nesting o Convert groups including security, distribution, universal, domain local, and domain global. o Manage group membership using Group Policy ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 49 o Enumerate group membership o Manage default Active Directory containers o Create, copy, configure, and delete groups and OUs. Lecture Focus Questions: What are the advantages of using groups when setting permissions? What is the difference between a security group and a distribution group? What type of objects can be made members of a universal group? A domain local group? What happens to user accounts when the group they are in is deleted? Which PowerShell commands can be used to manage groups? Video/Demo 4.8.1 Groups Time 13:14 4.8.2 Creating Groups 5:05 4.8.8 Enumerating Group Membership 2:01 Total 20:20 Lab/Activity Create Global Groups Create a Distribution Group Change the Group Scope Implement a Group Strategy Number of Exam Questions 10 questions Total Time About 55 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 50 Section 4.9: Rights Delegation Summary This section discusses rights delegation to share administrative tasks with other user. Concepts covered include: Using Delegation of authority to enhance security Processes to delegate administrative authority Using the Delegation of Control wizard Assigning permissions to Active Directory objects Students will learn how to: Create security groups and delegate authority based on role. Use the Delegation of Control wizard to assign permissions. Server Pro Exam Objectives: 3.0 Manage Active Directory o Delegate Administrative Control 70-410 Exam Objectives: 503 Create and manage Active Directory groups and organizational units (OUs) This objective may include but is not limited to: o Delegate the creation and management of Active Directory objects. Lecture Focus Questions: What security principle should be applied when you delegate administrative authority? What are the processes typically involved in delegating administrative authority? What is a limitation of the Delegation of Control Wizard? What are the steps in delegating the right to create and link Group Policy Objects? When is it necessary to delegate Manage Group Policy links? ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 51 Video/Demo Time 4.9.1 Rights Delegation 2:22 4.9.2 Using the Delegation of Control Wizard 5:01 Total 7:23 Lab/Activity Delegate Administrative Control Number of Exam Questions 4 questions Total Time About 20 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 52 Section 5.1: Single-label Names Summary This section provides information about the following strategies to provide singlelabel name resolution: HOSTS file Link-Local Multicast Name Resolution (LLMNR) DNS suffix search list DNS devolution GlobalNames zone Students will learn how to: Configure a DNS Suffix Search List. Configure DNS Registration. Server Pro Exam Objectives: 4.0 DNS o Manage DNS Configuration Configure Search Suffixes Lecture Focus Questions: When would you use the GlobalNames zone? Which strategies can you use to provide single-label name resolution for IPv6 hosts? Should HOSTS files be used for name resolution in large networks? When will a Windows client use LLMNR? What limitations does relying on LLMNR have? How does DNS devolution work? How can a DNS suffix search list be configured using Group Policy? Video/Demo Time 5.1.1 Authentication and Authorization 9:49 5.1.2 Configuring DNS Suffix Search List 3:10 Total ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 12:59 53 Lab/Activity Configure Search Suffixes Number of Exam Questions 6 questions Total Time About 25 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 54 Section 5.2: Name Resolution Summary This section discusses name resolution using DNS. Concepts covered include: DNS terms: o Forward lookup o Reverse lookup o Authoritative server o Referral o Recursion o Iterative o Delegation DNS name resolution process: o Client o Server Root hints and the root zone Students will learn how to: Configure the DNS service to forward name resolution requests. Create a root zone on a specified server. Server Pro Exam Objectives: 4.0 DNS Manage DNS Configuration o Configure Forwarders o Configure Root Hints Create DNS Zones o Create a Root Zone Manage DNS Configuration o Configure DNS Registration o Configure Forwarders o Configure Root Hints 70-410 Exam Objectives: 403 Deploy and configure DNS service This objective may include but is not limited to: o Configure forwarders o Configure Root Hints o Manage DNS cache ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 55 Lecture Focus Questions: What is the name of the root domain? What does the term distributed database mean concerning the DNS database? How does an FQDN identify a host? What is the difference between a forward lookup and a reverse lookup? A client sends a request for name resolution to its configured DNS server, but it isn't authoritative for the zone where the name resides. What happens next? You've modified an A record to point to a new IP address, but your client still resolves the name to the old IP address. What should you do? Video/Demo 5.2.1 Fully Qualified Domain Names 5.2.2 Internet Name Resolution Time 2:59 14:05 5.2.3 Adding an Entry to the Hosts File 2:00 5.2.4 Configuring Forwarding and Root Hints 4:33 5.2.5 Intranet Name Resolution 7:39 Total 31:16 Lab/Activity Configure Forwarders Create a Root Zone Number of Exam Questions 7 questions Total Time About 50 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 56 Section 5.3: Zone Management Summary This section examines managing zones. Concepts covered include: Types of authoritative DNS zones: o Primary o Secondary o Active Directory-integrated Types that zones are classified as: o Forward lookup zone o Reverse lookup zone Students will learn how to: Create a new zone and configure it to be stored in Active Directory. Manage zone properties. Convert an existing zone to an Active Directory-integrated zone. Server Pro Exam Objectives: 4.0 DNS o Create DNS Zones Create an Active Directory-integrated Zone Convert a Zone to Active Directory-integrated 70-410 Exam Objectives: 403 Deploy and configure DNS service This objective may include but is not limited to: o Configure Active Directory integration of primary zones Lecture Focus Questions: Why is a reverse lookup zone for a network written backwards? What are the differences between Standard Primary zones and Standard Secondary zones? What is the difference between Refresh Interval and DNS Notify triggers for zone transfers? What information does an SOA record contain? How is an Active Directory-integrated zone different from a primary zone? What type of zone would you create if you wanted to use secure dynamic updates? What type of name resolution is performed by reverse lookup zones? ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 57 Video/Demo Time 5.3.1 Forward and Reverse Lookup Zones 1:29 5.3.2 Standard DNS Zones 4:21 5.3.3 Active Directory Integrated Zones 6:46 5.3.4 Creating a New Zone 8:03 5.3.5 Configuring Zone Properties 4:55 Total 25:34 Lab/Activity Create an Active Directory-integrated Zone Convert a Zone to Active Directory-integrated Number of Exam Questions 2 questions Total Time About 40 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 58 Section 5.4: DNS Records Summary This section discusses using DNS records. Details covered include: Common DNS database resource records: o SOA (Start of Authority) o NS (name server) o A (host address) o AAAA (quad-A) o PTR (pointer) o CNAME (canonical name) o MX (Mail Exchanger) o SRV (service locator) o WINS and WINS-R resource records o SPF (Sender Policy Framework) Students will learn how to: Create A records and associated PTR records for specified hosts. Create a CNAME record to be used as an alias to redirect requests. Server Pro Exam Objectives: 4.0 DNS o Create DNS Records Create a Zone and Add Records Create A and CNAME Records 70-410 Exam Objectives: 403 Deploy and configure DNS service This objective may include but is not limited to: o Create A and PTR resource records 501 Install domain controllers This objective may include but is not limited to: o Resolve DNS SRV record registration issues Lecture Focus Questions: What is the difference between an A and a quad-A record? What situations might warrant using a CNAME record? What type of server does an MX record identify? What is the purpose of PTR records? What does an NS record identify? ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 59 Video/Demo Time 5.4.1 DNS Record Types 4:28 5.4.2 Creating Common Records 3:45 Total 8:13 Lab/Activity Create a Zone and Add Records Create CNAME Records Number of Exam Questions 8 questions Total Time About 30 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 60 Section 5.5: DNS Server Properties Summary In this section students will explore using DNS Manager to configure the following DNS server properties: Interfaces Forwarders Root Hints Debug Logging Event Logging Monitoring Security Advanced Students will learn how to: Configure DNS server properties in DNS Manager. Server Pro Exam Objectives: 4.0 DNS o Manage DNS Configuration 70-410 Exam Objectives: 403 Deploy and configure DNS service Lecture Focus Questions: When should you activate debug logging? Where would you enable scavenging of stale records on the system? What is the difference between a simple query and a recursive query against the DNS server? What type of DNS servers are allowed when the Enable BIND secondaries option is checked? Which advanced DNS option is used to verify that the DNS record was not modified in transit? ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 61 Video/Demo Time 5.5.1 DNS Server Properties 4:22 5.5.2 Configuring DNS Server Properties 6:01 Total 10:23 Number of Exam Questions 10 questions Total Time About 25 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 62 Section 5.6: DNS Troubleshooting Summary In this section students will learn about the tools to troubleshoot DNS. Ping NSLookup IPConfig Students will learn how to: Use Ping and NSLookup to troubleshoot DNS. Use IPConfig to manage the contents of the DNS cache. Server Pro Exam Objectives: 4.0 DNS o Create DNS Records Troubleshoot Name Resolution 70-410 Exam Objectives: 403 Deploy and configure DNS service This objective may include but is not limited to: o Manage DNS cache Lecture Focus Questions: What does it mean when an DNS server reports that a hostname could not be found? When troubleshooting with ping, how can you determine if the problem is with the DNS server or with your client? What tool can you use to view specific records on the DNS server? How do you clear the DNS cache? Video/Demo Time 5.6.1 DNS Troubleshooting 3:22 5.6.2 Using Ping and NSLookup 4:49 5.6.3 Clearing DNS Cache 3:29 Total 11:40 ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 63 Number of Exam Questions 4 questions Total Time About 20 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 64 Section 6.1: File Access Summary This section discusses file and share access. Details covered include: NTFS permissions Shared folder permissions Permissions for folders and files: o Read o Write o List Folder Contents o Read & Execute o Modify o Full Control Concepts of setting up or managing NTFS permissions: o Ownership o Explicit vs inherited permissions o Copying or moving files o Using icacls Special permissions Best practices for permissions NTFS quotas Students will learn how to: Configure NTFS permissions. Remove inherited permissions. Enable quota restrictions. Create a quota entry. Modify quota limits. Server Pro Exam Objectives: 5.0 File and Print Services o Manage NTFS Permissions Configure NTFS Permissions Configure Inherited Permissions o Manage Combined NTFS and Share Permissions o Configure Quotas Manage Quota Restrictions Create Quota Entries Configure Quota Limits ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 65 70-410 Exam Objectives: 201 Configure file and share access This objective may include but is not limited to: o Create and configure shares o Configure share permissions o Configure offline files o Configure NTFS permissions o Configure NTFS quotas Lecture Focus Questions: How are NTFS permissions used to control access to file and folders? Why should you assign permissions to groups rather than user? How do logged on users get updated permissions? How would you determine the effective permissions when both NTFS permissions and share permissions apply? What is the difference between explicit permissions and inherited permissions? What will happen if you move a file that has explicit NTFS permissions to a different folder on the same NTFS partition? if you copy the file to a different folder on the same NTFS partition? What is the difference between a soft quota and a hard quota? Video/Demo Time 6.1.1 NTFS Permissions 8:19 6.1.2 NTFS Quotas 1:40 6.1.3 Configuring NTFS Permissions and Quotas Total 11:57 21:56 Lab/Activity Configure NTFS Permissions Remove Inherited Permissions Enable Quota Restrictions Create a Quota Entry Modify Quota Limits ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 66 Number of Exam Questions 12 questions Total Time About 65 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 67 Section 6.2: Access-based Enumeration (ABE) and Volume Shadow Copy (VSS) Summary This section discusses Access-based Enumeration (ABE) and Volume Shadow Copy (VSS). Details covered include: The role of Access-based Enumeration (ABE) Differences in implementing ABE in WS2008 and Server 2012 Volume Shadow Copy Service (VSS) Implementing shadow copies: o Scheduling o Storing o Recovering o NTFS Permissions o VSSAdmin Students will learn how to: Configure ABE. Enable shadow copies on a volume. Configure shadow copy settings, including storage location, size, and schedule. Create snapshots. Save, copy, or restore previous versions of files. Server Pro Exam Objectives: 5.0 File and Print Services o Configure Volume Shadow Copy Service (VSS) Enable and Configure Shadow Copies Restore Previous Versions of Files and Folders 70-410 Exam Objectives: 201 Configure file and share access This objective may include but is not limited to: o Configure access-based enumeration (ABE) o Configure Volume Shadow Copy Service (VSS) ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 68 Lecture Focus Questions: How does using access-based enumeration on shared folders modify what users can see? In Windows Server 2008 you used the Share and Storage Management utility to enable ABE. Which tool will you use in Windows Server 2012 to enable ABE? How should client work patterns affect your shadow copy schedule? How much disk space do shadow copies take by default? What is the maximum number of shadow copies the system can store? What happens when the system reaches this limit? What happens to NTFS permissions when you restore a file? When you copy a file? Why is it recommended that you place shadow copies on different volumes? Video/Demo Time 6.2.1 Access-based Enumeration (ABE) and Volume Shadow Copy (VSS) 5:07 6.2.2 Configuring ABE and VSS 4:47 Total 9:54 Lab/Activity Enable Shadow Copies Restore Previous Version 1 Restore Previous Version 2 Number of Exam Questions 5 questions Total Time About 35 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 69 Section 6.3: Shares Summary This section discusses managing share access. Details covered include: How share permissions work with NTFS permissions to control access Types of file sharing: o Simple File Sharing o Advanced File Sharing Advanced share permissions: o Read o Change o Full control Students will learn how to: Configure and manage shared folders and files. Restrict share access through share permissions and user limits. Enable and disable share caching. Server Pro Exam Objectives: 5.0 File and Print Services o Share Folders and Configure Share Permissions Share Folders Manage Shared Folders Manage Share Caching Configure Share Permissions 70-410 Exam Objectives: 201 Configure file and share access This objective may include but is not limited to: o Create and configure shares o Configure share permissions o Configure NTFS permissions Lecture Focus Questions: What tools are available to create and manage shares? What is the effect of appending $ to a share name? What permissions do you need to share a folder or configure share permissions? What is the difference between the read permission and the change permission? ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 70 What is the recommended strategy for assigning permissions to a share to provide the required effective permissions? What are the differences and similarities between NTFS permissions and share permissions? Video/Demo Time 6.3.1 File Shares 8:46 6.3.2 Simple File Sharing 2:00 6.3.3 Advanced File Sharing 5:09 Total 15:55 Lab/Activity Share a Folder with a Second Name Remove a Shared Folder Enable Share Caching Disable Share Caching Configure Share Permissions Number of Exam Questions 7 questions Total Time About 50 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 71 Section 6.4: Sharing on Server 2012 Summary This section provides information about using the New Share Wizard which is part of the Server Manager task-based interface. Concepts covered include: Protocols for file shares: o Server Message Block (SMB) o Network Files System (NFS) Options available in the New Share Wizard: o SMB Share – Quick o SMB Share – Advanced o SMB Share – Applications o NFS Share –Quick o NFS Share – Advanced Additional settings after selecting the location for the share and naming it: o Enable access-based enumeration o Enable continuous availability o Allow caching of share o Encrypt data access Students will learn how to: Create shares on Windows Server 2012 using Server Manager. Server Pro Exam Objectives: 5.0 File and Print Services o Share Folders and Configure Share Permissions Share Folders Manage Shared Folders Manage Share Caching Configure Share Permissions 70-410 Exam Objectives: 201 Configure file and share access This objective may include but is not limited to: o Create and configure shares o Configure share permissions o Configure offline files ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 72 Lecture Focus Questions: Which type of file systems use the Server Message Block (SMB) protocol for file shares? When is the Network Files System (NFS) protocol used instead of the SMB protocol? How does access-based enumeration work with NTFS permissions to restrict access to files and folders in shared folders? How would you make shares available to offline users? What feature must you have installed to use the SMB - Share Advanced option to create a share? Video/Demo 6.4.1 Sharing on Server 2012 Time 4:16 Number of Exam Questions 7 questions Total Time About 15 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 73 Section 6.5: Effective Permissions Summary This section examines how to identify a user’s effective permissions for a specific folder. Details discussed include: Effective permissions are the sum of all permissions from the following sources: o Explicit Assignment o Group Membership o Inheritance Inherited permissions Effective permissions Example scenarios of combined share and NTFS permissions Suggestions to plan NTFS permissions Students will learn how to: Configure combined NTFS and share permissions. Server Pro Exam Objectives: 5.0 File and Print Services o Manage Combined NTFS and Share Permissions 70-410 Exam Objectives: 201 Configure file and share access This objective may include but is not limited to: o Configure share permissions o Configure NTFS permissions Lecture Focus Questions: What is the role of the access control list (ACL)? What strategy can you use to combine and manage NTFS and share permissions? What are the sources of permissions that are added together to create effective permissions? Video/Demo 6.5.1 Effective Permissions Time 5:19 ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 74 Lab/Activity Configure NTFS and Share Permissions 1 Configure NTFS and Share Permissions 2 Number of Exam Questions 14 questions Total Time About 35 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 75 Section 7.1: Print Servers Summary This section provides information about print servers. Details include: Definitions for print and document services: o Print server o Printer o Print device o Print driver o Print queue o Printer port Services of the Print and Document Services role: o Print Server o LPD Service o Internet Printing o Distributed Scan Server Print device properties useful to control print jobs: o General o Sharing o Ports o Advanced o Security Students will learn how to: Configure printer pooling. Restrict printer access. Server Pro Exam Objectives: 5.0 File and Print Services o Manage Printing Create, Share and Manage a Printer Configure Printer Pooling Restrict Printer Access 70-410 Exam Objectives: 202 Configure print and document services This objective may include but is not limited to: o Configure drivers o Configure printer pooling o Configure print priorities o Configure printer permissions ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 76 Lecture Focus Questions: What is the difference between a print device and a printer? When would you add the LPD service when configuring the Print Services role? Under which physical printing configurations would you choose a local printer when adding a printer? When would you choose a network printer? Under which circumstances would you configure a printer to use multiple print devices? When would you configure multiple printers for a single print device? What services are included in the Print and Document Services role? How would you ensure important print jobs will automatically be printed before any other print jobs? How can you use printer permissions to designate a user as a print job administrator? Video/Demo Time 7.1.1 Printers and the Print Server Role 1:44 7.1.2 Adding a Local Printer 4:15 7.1.3 Printer Properties 5:46 7.1.4 Configuring Printer Properties 7:52 Total 19:37 Lab/Activity Create and Share a Printer Number of Exam Questions 2 questions Total Time About 30 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 77 Section 7.2: Print Management Summary In this section students will learn about using Print Management, a utility for managing print servers. Details include: When printers are detected, Print Management automatically: o Installs drivers o Establishes the queues o Shares the printers Features of Print Management: o Custom Filters o Printer permissions o Printer pooling o Multiple printer objects o List in Active Directory o Deploy with Group Policy o Export/import printers o Manage print drivers o Manage documents in the print queue o Location-aware printing o Print driver isolation o Client-Side Rendering (CSR) o Easy Print driver Configuration choices for different types of printer Students will learn how to: Configure printer pooling. Manage printer drivers. Configure printer filters. Restrict print access. Use Group Policy to deploy printers to computer and user accounts. Server Pro Exam Objectives: 5.0 File and Print Services o Manage Printing Configure Printer Pooling Restrict Printer Access Deploy Printers with Group Policy ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 78 70-410 Exam Objectives: 202 Configure print and document services This objective may include but is not limited to: o Configure the Easy Print print driver o Configure Enterprise Print Management o Configure drivers o Configure printer pooling o Configure print priorities o Configure printer permissions Lecture Focus Questions: How do clients obtain the correct driver for shared printers? How can you set up a filter to notify you when a printer is low on toner? When would you choose to isolate a print driver? What is the advantage of location-aware printing? What is the difference between listing a printer in Active Directory and deploying a printer with Group Policy? Video/Demo Time 7.2.1 Print Management 3:09 7.2.2 Using Print Management 5:07 Total 8:16 Lab/Activity Configure Printer Pooling Restrict Printer Access Deploy Printers with Group Policy Number of Exam Questions 15 questions Total Time About 45 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 79 Section 8.1: Group Policy Foundation Summary This section discusses the basics of using Group Policies. Concepts covered include: Common GPO configuration settings: o Account Policies o Local Polices/Audit Policy o Local Policies/User Rights Assignment o Local Policies/Security Options o Registry o File System o Software Restriction Policies o Administrative Templates o Starter Group Policy Objects Tasks for managing GPOs: o Creating local GPOs o Assigning GPO permissions o Linking GPOs o Using Administrative Templates o Using a central store GPO categories: o Computer Configuration o User Configuration Students will learn how to: Create and link GPOs to appropriate objects. Create a starter GPO. Server Pro Exam Objectives: 6.0 Group Policy o Manage Group Policy Objects (GPOs) Create and Link a GPO Create a Starter GPO Modify GPO Links 70-410 Exam Objectives: 601 Create Group Policy objects (GPOs) This objective may include but is not limited to: o Manage starter GPOs o Configure GPO links ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 80 o Configure multiple local group policies Lecture Focus Questions: How does inheritance affect Group Policy settings? If a setting is configured in a GPO linked to the domain and a GPO linked to an OU, which setting will be in effect? What is the difference between using a starter GPO and copying an existing GPO? Video/Demo Time 8.1.1 Local Polices 3:16 8.1.2 Configuring Local Policies 4:43 8.1.3 Group Policy Processing 7:27 8.1.4 Linking Group Policy Objects 8:09 Total 23:35 Lab/Activity Create and Link a GPO Create a Starter GPO Number of Exam Questions 7 questions Total Time About 50 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 81 Section 8.2: Group Policy Management Summary In this section students will learn about Group Policy Management. Concepts covered include: Considerations when working with Group Policy settings Scoping methods: o Block Inheritance o Enforced o Security group filtering o Windows Management Interface (WMI) filtering o Loopback Processing Using Group Policy Management to manage the application of the GPO How scoping affects the application of the GPO Students will learn how to: Centrally manage administrative templates using the central store. Configure the scope of Group Policy objects. Server Pro Exam Objectives: 6.0 Group Policy o Manage Group Policy Objects (GPOs) Modify GPO Links 70-410 Exam Objectives: 601 Create Group Policy objects (GPOs) This objective may include but is not limited to: o Configure a Central Store o Configure security filtering Lecture Focus Questions: What are the advantages of the .admx file format? What is the Administrative Template central store? What advantages do you gain by enabling the central store? How is the Block Inheritance setting affected by the No Override setting? How does loopback processing affect computer settings? ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 82 Video/Demo Time 8.2.1 Central Stores 5:48 8.2.2 Creating a Central Store 4:52 8.2.3 Group Policy Scope 10:29 8.2.4 Configuring Group Policy Scope 12:08 Total 33:17 Number of Exam Questions 3 questions Total Time About 40 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 83 Section 8.3: Password Policies Summary In this section students will learn about using password policies. Details covered include: Methods of setting password policies: o Account policies o Granular password policy Strategies to protect against password attacks: o Educate users o Protect access to the password file o Salt the has o Implement two-factor authentication Password policies Students will learn how to: Configure a password policy and apply it to specific users or groups. Server Pro Exam Objectives: 6.0 Group Policy o Manage Security Policies Configure Account Password Policies Lecture Focus Questions: In what ways can password policies be set up? What strategies should be implemented to protect against password attacks? Which object types can be associated with a granular password policy? What are the characteristics of a strong password? Video/Demo 8.3.1 Password Policies 8.3.2 Configuring Password Policies Total Time 5:19 12:27 17:46 Lab/Activity Configure Account Password Policies ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 84 Number of Exam Questions 8 questions Total Time About 35 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 85 Section 8.4: Audit Policies Summary This section discusses using audit policies to enable auditing to record system events. Concepts covered include: An enabled audit policy can audit for: o Success o Failure Basic audit policies configurable through Group Policy: o Account logon o Account management o Directory service access o Logon o Object access o Policy change o Privilege use o Process tracking o System Considerations when configuring auditing Advanced auditing settings Students will learn how to: Use Group Policy to enforce auditing and secure audit logs. Server Pro Exam Objectives: 6.0 Group Policy o Manage Security Policies Configure Audit Policies 70-410 Exam Objectives: 602 Configure security policies This objective may include but is not limited to: o Configure Audit Policy Lecture Focus Questions: When does the account logon auditing generate an event on the system for a local user account? for a domain user account? What is the difference between Account Logon auditing and Logon auditing? ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 86 What is the difference between auditing for success and auditing for failure? What types of items does object access auditing track access to? How can you use auditing to track changes to Active Directory objects? When would you use process tracking? Video/Demo 8.4.1 Audit Policies 8.4.2 Configuring Audit Policies Total Time 2:17 10:06 12:23 Lab/Activity Configure Audit Policies Number of Exam Questions 13 questions Total Time About 35 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 87 Section 8.5: User Rights Assignment Summary This section discusses the basics of permissions, rights, and user rights assignment policies. Students will learn how to: Configure user rights to secure network resources. Server Pro Exam Objectives: 6.0 Group Policy o Manage Security Policies Configure User Rights 70-410 Exam Objectives: 502 Create and manage Active Directory users and computers This objective may include but is not limited to: o Configure user rights 602 Configure security policies This objective may include but is not limited to: o Configure User Rights Assignment Lecture Focus Questions: What is the difference between permissions and rights? What tool do you use to configure rights policy settings? By default, what groups have the Allow Log On Locally right? Video/Demo Time 8.5.1 User Rights 0:58 8.5.2 Managing User Rights 2:53 Total 3:51 Lab/Activity Configure User Rights Number of Exam Questions 2 questions ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 88 Total Time About 10 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 89 Section 8.6: Security Options Summary This section examines using security options to manage the security on the computer. Details include: Important Group Policy security options User Account Control (UAC) account types: o Standard user o Administrator Default behavior of UAC UAC notification level settings: o Always o Notify me only when programs try to make changes to my computer o Notify me only when programs try to make changes to my computer (do not dim the desktop) o Never notify Group Policy settings for each notification level: Students will learn how to: Configure security options. Enforce User Account Control. Server Pro Exam Objectives: 6.0 Group Policy o Manage Security Policies Configure Security Options Enforce User Account Control 70-410 Exam Objectives: 602 Configure security policies This objective may include but is not limited to: o Configure Security Options settings o Configure Security templates o Configure Local Users and Groups o Configure User Account Control (UAC) ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 90 Lecture Focus Questions: What is the best practice for managing Administrator and Guest accounts? How would you prevent network users from accessing resources on an optical disc? How can you standardize security settings across multiple computers on a network? What is the role of the User Account Control (UAC)? What is the difference between prompt for consent and prompt for credentials? When would one or the other be displayed? Video/Demo Time 8.6.1 Security Options 1:01 8.6.2 Configuring Security Options 8:00 8.6.5 User Account Control 5:27 8.6.6 Configuring User Account Control 5:29 Total 19:57 Lab/Activity Configure Security Options Enforce User Account Control Number of Exam Questions 5 questions Total Time About 40 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 91 Section 8.7: Restricted Groups Summary In this section students will learn the about using restricted groups to control membership for groups that require high security. Concepts covered include: Restricted groups definitions: o Members of this group o This group is a member of Considerations when using the Restricted Groups Policy Students will learn how to: Configure restricted groups. Server Pro Exam Objectives: 6.0 Group Policy o Manage Security Policies Configure Restricted Groups 70-410 Exam Objectives: 503 Create and manage Active Directory groups and organizational units (OUs) This objective may include but is not limited to: o Manage group membership using Group Policy Lecture Focus Questions: When is it a good idea to create a Restricted Group Policy? What are the two methods to define a Restricted Group? Which is the preferred method? Why is it a good strategy to test before activating a GPO using a Restricted Group Policy? Video/Demo Time 8.7.1 Restricted Groups 1:46 8.7.2 Managing Groups with Group Policy 3:41 Total ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 5:27 92 Lab/Activity Configure Restricted Groups Number of Exam Questions 3 questions Total Time About 15 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 93 Section 8.8: Windows Firewall Policies Summary This section discusses Windows Firewall policies to provide real-time protection to the system. Concepts covered include: Use Group Policy to manage Windows Firewall with Advanced Security: o Profiles o Firewall rules o Connection Security rules o Policy file Students will learn how to: Use the Basic Firewall to allow traffic based on port, protocol, or application. Use the Windows Firewall with Advanced Security to manage custom firewall rules. Use Group Policy to enforce firewall rules. 70-410 Exam Objectives: 604 Configure Windows Firewall This objective may include but is not limited to: o Configure rules for multiple profiles using Group Policy o Configure connection security rules o Configure Windows Firewall to allow or deny applications, scopes, ports, and users o Configure authenticated firewall exceptions o Import and export settings 203 Configure servers for remote management This objective may include but is not limited to: o Configure Windows Firewall Lecture Focus Questions: When should you use the Advanced Firewall instead of the Basic Firewall? When would you configure a custom exception? What does the exception scope do? By default, which type of traffic is allowed through the firewall? What is the benefit of using connection security rules? ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 94 Video/Demo Time 8.8.1 Inbound and Outbound Rules 1:27 8.8.2 Configuring an Inbound Rule 7:24 8.8.3 Connection Security Rules 5:57 8.8.4 Authenticated Firewall Exceptions 2:56 Total 17:44 Number of Exam Questions 8 questions Total Time About 30 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 95 Section 8.9: Application Restriction Policies Summary This section examines using application restriction policies to control the applications that run on the computers in the environment. Concepts covered include: The role of Software Restriction Policies Ways software restriction can be implemented: o Unrestricted o Disallowed o Basic User Software restriction rules conditions: o Hash o Certificate o Network zone o Path Advantages of AppLocker policies AppLocker rule types: o Executable o Windows Installer o Script o Packaged app AppLocker rules have the following conditions: o Publisher o Path o Hash Considerations when using AppLocker Students will learn how to: Configure a software restriction policy for a specific user. Create a path rule for an application. Create a hash rule to create software restrictions. Create an AppLocker executable rule. Server Pro Exam Objectives: 6.0 Group Policy o Configure Application Restriction Policies 70-410 Exam Objectives: 603 Configure application restriction policies This objective may include but is not limited to: ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 96 o Configure rule enforcement o Configure Applocker rules o Configure Software Restriction Policies Lecture Focus Questions: How are software restriction policies managed? What type of restrictions can be implemented using software restriction policies? How does a hash rule identify one application from another? Does the application have the same hash value after an update is applied? What are the advantages of AppLocker policies over software restriction policies? Which file extensions can an AppLocker script rule be applied to? If software restriction policies and AppLocker are configured on the same object, which takes precedence? Video/Demo Time 8.9.1 Software Restriction Policies and AppLocker 6:56 8.9.2 Configuring Software Restriction Policies 9:31 8.9.4 Configuring AppLocker Total 11:24 27:51 Lab/Activity Configure AppLocker Number of Exam Questions 10 questions Total Time About 50 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 97 Section 8.10: Group Policy Preferences Summary This section discusses using group policy preferences to configure, deploy, and manage operating system and application settings. Concepts covered include: The role of the following Group Policy preferences: o Drive maps o Environment o Files Folders o Ini Files o Network shares o Registry o Shortcuts o Devices o Folder options o Internet settings o Local users and groups o Network connections o Power options o Printers o Regional options o Scheduled tasks o Services o Start menu Students will learn how to: Configure group policy preferences to centrally manage settings in the user environment. Lecture Focus Questions: How do Group Policy preferences allow you to centrally manage settings on the workstation? How would you apply Group Policy preferences to pre-Windows 7 clients? Which Group Policy preferences would be the most useful for typical networked Windows systems? Video/Demo Time 8.10.1 Group Policy Preferences 2:50 8.10.2 Configuring Group Policy Preferences 3:55 Total ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 6:45 98 Number of Exam Questions 3 questions Total Time About 10 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 99 Section 9.1: IPv4 Addressing Summary This section discusses using IPv4 addressing to deliver packets to and from clients on a network. Details include: Rules for using IPv4 IPv4 concepts: o Host o IP Address o Network address o Subnet mask o Address Class o Default subnet mask o Broadcast address o Default gateway IP Address Structure Subnet Mask Default address classes Options for assign IPv4 addresses and other IPv4 configuration values: o Dynamic Host Configuration Protocol (DHCP) o Automatic Private IPv4 Addressing (APIPA) o Static (manual) assignment o Alternate IPv4 configuration The role of a Network Address Translation (NAT) router Students will learn how to: Configure static IPv4 settings. Convert an IPv4 address from binary to its decimal equivalent. Server Pro Exam Objectives: 7.0 Networking o Configure Basic Network Settings Configure IPv4 Settings 70-410 Exam Objectives: 401 Configure IPv4 and IPv6 addressing This objective may include but is not limited to: o Configure IP address options ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 100 Lecture Focus Questions: What is the format of an IPv4 address? What is the purpose of a subnet mask? What is the default address class of the IP address 132.11.166.5? What is the decimal equivalent of the IP address 132.11.166.5? Video/Demo 9.1.1 IPv4 Basics 9.1.2 Binary Numbers 9.1.3 IPv4 Classes 9.1.4 Configuring IPv4 Total Time 14:06 9:18 11:00 5:14 39:38 Lab/Activity Configure IP Settings Number of Exam Questions 3 questions Total Time About 50 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 101 Section 9.2: IPv4 Custom Addressing Summary This section provides information about IPv4 custom addressing concepts. Details covered include: IPv4 custom addressing concepts: o Subnetting o Supernetting o Classless Addressing o ANDing Exponent values for powers of 2 Common binary and decimal values used in subnet masks Subnetting Calculation to determine if workstations are on the same network Students will learn how to: Given a network address and custom mask, identify valid subnet addresses. Given a scenario with the desired number of hosts, choose a subnet address and mask. Given a network address and the subnet mask, identify valid host addresses on that subnet. Server Pro Exam Objectives: 7.0 Networking o Configure Network Settings for Multiple Subnets Use subnetting to split address ranges Use supernetting to combine address ranges Configure networking for multiple subnets 70-410 Exam Objectives: 401 Configure IPv4 and IPv6 addressing This objective may include but is not limited to: o Configure IP address options o Configure subnetting o Configure supernetting ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 102 Lecture Focus Questions: What does a subnet mask identify? What is the relationship between CIDR notation and the subnet mask? How is a supernet different from a subnet? What are the first and last addresses in a range used for? What is the decimal value for a /27 mask? How many approximate and actual hosts can you have when using a mask value of /23? Given IP addresses and subnet masks, how do you determine if two workstations are on the same subnet? Video/Demo Time 9.2.1 CIDR and Custom ANDing Basics 12:50 9.2.2 Subnetting 11:33 9.2.3 Supernetting Total 4:50 29:13 Number of Exam Questions 8 questions Total Time About 40 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 103 Section 9.3: IPv6 Addressing Summary This section discusses transitioning to IPv6 addressing. Details include: IPv6 follows the same basic rules as IPv4 Components of the IPv6 address structure: o Format o Leading zeros o Prefix and interface ID Comparison of IPv6 address types and IPv4 address types Strategies for deploying Ipv6: o Dual stack o Tunneling Manually configured tunnel Intra-site Automatic Tunnel Addressing Protocol (ISATAP) 6-to-4 tunneling Teredo tunneling o PortProxy o IPv4 Compatible Address o IPv4 Mapped Address o IPv6 to IPv4 Address Students will learn how to: Configure IPv6 settings. Server Pro Exam Objectives: 7.0 Networking o Configure Basic Network Settings Configure IPv6 Settings o Configure Network Settings for Multiple Subnets Configure Networking for Multiple Subnets 70-410 Exam Objectives: 401 Configure IPv4 and IPv6 addressing This objective may include but is not limited to: o Configure interoperability between IPv4 and IPv6 o Configure ISATAP o Configure Teredo ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 104 Lecture Focus Questions: How does IPv6 support differ on various Microsoft operating systems? What limitations are associated with ISATAP in an IPv6 implementation? Which IPv6 tunneling methods work through NAT? When should you implement Teredo? When is 6-to-4 tunneling automatically configured? What technology allows an IPv4-only host to communicate with an IPv6only host? Video/Demo 9.3.1 IPv6 Basics Time 10:34 9.3.2 Configuring IPv6 2:16 9.3.5 ISATAP and Teredo 5:26 Total 18:16 Lab/Activity Configure IPv6 Number of Exam Questions 10 questions Total Time About 40 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 105 Section 10.1: DHCP Basics Summary In this section students will explore the basics of using Dynamic Host Configuration Protocol (DHCP) to centralize management of IP assignment. Details about the following concepts will be covered: Methods clients use to obtain an address from a DHCP server: o DHCP Discover (D) o DHCP Offer (O) o DHCP Request (R) o DHCP ACK (A) DHCP authorization: o Authorization requirements o Authorization verification Configuring a DHCP Server Scope DHCP options: o Server options o Scope options o Class options o Client options DHCP console context-sensitive icons reflect DHCP server status Students will learn how to: Install and authorize a DHCP server. Create and activate scopes. Server Pro Exam Objectives: 8.0 DHCP o Installation and Authorization Install the DHCP Role Authorize DHCP Servers o Manage DHCP Scopes, Exclusions, and Reservations Create and Configure Scopes 70-410 Exam Objectives: 402. Deploy and configure Dynamic Host Configuration Protocol (DHCP) service This objective may include but is not limited to: o Create and configure scopes o Configure DHCP options ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 106 o Authorize DHCP server Lecture Focus Questions: What are the steps a client uses to acquire an address from a DHCP server? When must you authorize a DHCP server? What permissions do you need to authorize a DHCP server? Why does a DHCP server shut down if it's address is not found in Active Directory? What does this protect against? How can you change the subnet on a scope? Video/Demo Time 10.1.1 DHCP Overview 5:06 10.1.2 DHCP Scopes and Options 3:29 10.1.3 Installing DHCP and Creating a Scope Total 14:23 22:58 Lab/Activity Install and Configure a DHCP Configure DHCP Options Number of Exam Questions 5 questions Total Time About 40 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 107 Section 10.2: DHCP Exclusions and Reservations Summary This section discusses DHCP exclusions, reservations, and filters to control DHCP IP address assignment. Students will learn how to: Configure exclusion ranges and client reservations. Server Pro Exam Objectives: 8.0 DHCP Manage DHCP Scopes, Exclusions, and Reservations o Create and Configure Scopes o Create Exclusion Ranges o Create Client Reservations 70-410 Exam Objectives: 402. Deploy and configure Dynamic Host Configuration Protocol (DHCP) service This objective may include but is not limited to: o Create and configure scopes o Configure a DHCP reservation o Configure DHCP options o Authorize DHCP server Lecture Focus Questions: How are reservations different from exclusions? What are the two ways to exclude IP addresses from a scope? What information is necessary to configure a client reservation? How are filters used to identify which computers can be clients of the DHCP server? Video/Demo Time 10.2.1 DHCP Exclusions, Reservations, and Filters 4:44 10.2.2 Creating a DHCP Exclusion, Reservations, and Filter 5:23 Total ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 10:07 108 Lab/Activity Create Exclusion Ranges Create Client Reservations Number of Exam Questions 3 questions Total Time About 25 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 109 Section 10.3: DHCP Centralization Summary This section covers DHCP centralization. Details include: Administrative features that allow a DHCP server to support multiple scopes: o Superscope o Split scope Options for a DHCP server to service a subnet separated with a router: o 1542 compliant router o DHCP relay agent DHCP failover Students will learn how to: Configure a DHCP Relay Agent. Server Pro Exam Objectives: 8.0 DHCP o Configure DHCP Options Configure Server Options Configure Scope Options o Implement DHCP Centralization Configure a DHCP Relay Agent Add a DHCP Server on Another Subnet 70-410 Exam Objectives: 402. Deploy and configure Dynamic Host Configuration Protocol (DHCP) service This objective may include but is not limited to: o Configure client and server for PXE boot o Configure DHCP relay agent o Authorize DHCP server Lecture Focus Questions: When might you choose to create super scopes? What type of a system is multinet when discussing super scope? What are the steps to create a split scope? What options are available for a DHCP server to service a subnet separated with a router? ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 110 Video/Demo Time 10.3.1 DHCP Centralization 9:31 10.3.2 Creating a Split Scope 8:53 Total 18:24 Lab/Activity Configure a DHCP Relay Agent Add a DHCP Server on Another Subnet Number of Exam Questions 7 questions Total Time About 40 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 111 Section 10.4: DHCP Troubleshooting Summary In this section students will learn about troubleshooting DHCP. Details include: Methods by which hosts obtain IP addresses in the event of a DHCP failure: o Automatic Private IPv4 Addressing (APIPA) o Alternate IPv4 configuration Statistics: o DCHP Discovers are not increasing o If Discovers are increasing, but Offers are static o If Discovers and Offers are increasing, but Requests are static Students will learn how to: Configure automatic and alternate addressing. Troubleshoot common DHCP issues. Server Pro Exam Objectives: 8.0 DHCP o Implement DHCP Centralization Configure Automatic and Alternate Addressing Lecture Focus Questions: A Windows client system in your network has an IP address of 169.254.0.1. Why was this address assigned? DHCP discoverers are not increasing the DHCP Console. What could be causing this? DHCP discoverers are increasing in the DHCP Console, but all offers are static. What could be causing this? DHCP discoverers and offers are increasing in the DHCP Console, but requests are static. What is causing this? Video/Demo Time 10.4.1 Automatic Private IP Addressing (APIPA) 2:19 10.4.2 Configuring an Alternate Address 3:19 10.4.3 DHCP Troubleshooting 3:31 Total ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 9:09 112 Lab/Activity Configure Automatic and Alternate Addressing Number of Exam Questions 6 questions Total Time About 20 minutes ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 113 Windows Server Pro: Install and Configure Practice Exams Summary This section provides information to help prepare students to take the Windows Server Pro: Install and Configure Certification exam. Students will have the opportunity of testing their mastery of the concepts presented in this course to reaffirm that they are ready for the certification exam. Students will typically take about 5-10 minutes (depending upon the complexity and their level of knowledge) to complete each simulation question in the following practice exams. There is no time limit on the amount of time a student can take to complete the practice exams for the following domains. Windows Server Pro: Install and Configure Objective 1: Configure Windows Servers (6 simulation questions) Windows Server Pro: Install and Configure Objective 2: Hyper-V (6 simulation question) Windows Server Pro: Install and Configure Objective 3: Active Directory (10 simulation questions) Windows Server Pro: Install and Configure Objective 4: DNS (7 simulation questions) Windows Server Pro: Install and Configure Objective 5: File and Print Services (19 simulation questions) Windows Server Pro: Install and Configure Objective 6: Group Policy (9 simulation questions) Windows Server Pro: Install and Configure Objective 7: Networking (2 simulation question) Windows Server Pro: Install and Configure Objective 8: DHCP (7 simulation questions) The Windows Server Pro: Install and Configure Certification Practice Exam consists of 15 simulation questions that are randomly selected from the above practice exams. Each time the Certification Practice Exam is accessed different questions may be presented. ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 114 Microsoft 70-410 Practice Exams Summary This section provides information to help prepare students to take the MS 70-410 exam and to register for the exam. Students will have the opportunity of testing their mastery of the concepts presented in this course to reaffirm that they are ready for the certification exam. Students will typically take about 1 minute to complete each question in the following practice exams. There is no time limit on the amount of time a student can take to complete the practice exams for the following domains. Objective 100. Install and Configure Servers (63 questions) Objective 200. Configure Server Roles and Features (65 questions) Objective 300. Configure Hyper-V (30 questions) Objective 400. Deploy and Configure Core Network Services (81 questions) Objective 500. Install and Administer Active Directory (54 questions) Objective 600. Create and Manage Group Policy (61 questions) The Microsoft 70-410 Certification Practice Exam consists of 60 questions that are randomly selected from the above practice exams. Each time the Certification Practice Exam is accessed different questions may be presented. The Certification Practice Exam has a time limit of 2 hours. A passing score of 95% should verify that the student has mastered the concepts and is ready to take the real certification exam. ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 115 Appendix A: Approximate Time for the Course The total time for the LabSim Windows Server Pro: Install and Configure course is approximately 43 hours. The time is calculated by adding the approximate time for each section which is calculated using the following elements: Video/demo times Approximate time to read the text lesson (the length of each text lesson is taken into consideration) Simulations (5 minutes assigned per simulation) Questions (1 minute per question) The breakdown for this course is as follows: Module Sections Time Minute HR:MM 1.0 Course Introduction 1.1 Windows as a Server 1.2 Windows Server 2008 R2 Interface Overview 1.3 Windows Server 2012 Interface Overview 10 25 25 60 1:00 20 20 35 35 50 45 75 30 310 5:10 35 55 55 145 2:25 2.0 Installation and Configuration 2.1 Installation 2.2 PowerShell 2.3 Server Roles 2.4 Server Core 2.5 Remote and Offline Servers 2.6 NIC Teaming 2.7 Traditional Storage 2.8 Storage Pools 3.0 Hyper-V 3.1 Virtual Machines 3.2 Virtual Machine Storage 3.3 Virtual Networks 4.0 Active Directory 4.1 Active Directory 4.2 Domain Controllers 4.3 Sites 4.4 Organizational Units 4.5 Users Accounts 4.6 Bulk User Operations ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 20 45 10 30 50 45 116 4.7 Computer Accounts 4.8 Groups 4.9 Rights Delegation 30 55 20 305 5:05 5.1 Single-label Names 5.2 Name Resolution 5.3 Zone Management 5.4 DNS Records 5.5 DNS Server Properties 5.6 DNS Troubleshooting 25 50 40 30 25 20 190 3:10 35 50 15 35 200 3:20 30 45 75 1:15 50 40 35 35 10 40 15 30 50 10 315 5:15 50 40 40 130 2:10 5.0 DNS 6.0 File and Share Access 6.1 File Access 6.2 Access-based Enumeration (ABE) and Volume Shadow Copy (VSS) 6.3 Shares 6.4 Sharing on Server 2012 6.5 Effective Permissions 65 7.0 Print and Document Services 7.1 Print Servers 7.2 Print Management 8.0 Group Policy 8.1 Group Policy Foundation 8.2 Group Policy Management 8.3 Password Policies 8.4 Audit Policies 8.5 User Rights Assignment 8.6 Security Options 8.7 Restricted Groups 8.8 Windows Firewall Policies 8.9 Application Restriction Policies 8.10 Group Policy Preferences 9.0 Networking 9.1 IPv4 Addressing 9.2 IPv4 Custom Addressing 9.3 IPv6 Addressing ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 117 10. DHCP 10.1 DHCP Basics 10.2 DHCP Exclusions and Reservations 10.3 DHCP Centralization 10.4 DHCP Troubleshooting 40 25 40 20 125 2:05 435 7:15 351 5:51 2581 43:01 Windows Server Pro: Install and Configure Practice Exams Obj.1 Configure Windows Servers (6 simulation questions Obj.2 Hyper-V (6 simulation questions) Obj.3 Active Directory (10 simulation questions) Obj. 4 DNS (7 simulation questions) 30 30 50 35 Obj. 5 File and Print Services (19 simulation questions) Obj. 6 Group Policy (9 simulation questions) Obj. 7 Networking (2 simulation questions) Obj. 8 DHCP (7 simulation questions) Windows Server Pro: Install and Configure Certification Practice Exam (15 simulation questions) 95 45 10 35 105 Microsoft 70-410 Practice Exams Obj. 100 Install and Configure Servers (63 questions) 63 Obj. 200 Configure Server Roles and Features (65 questions) 65 Obj. 300 Configure Hyper-V (30 questions) Obj. 400 Deploy and Configure Core Network Services (81 questions) Obj. 500 Install and Administer Active Directory (54 questions) 30 Obj. 600 Create and Manage Group Policy (61 questions) 61 Microsoft 70-410 Certification Practice Exam (60 questions) 60 81 54 Total Time ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 118 Appendix B: Windows Server Pro: Install and Configure Objectives The Windows Server Pro: Install and Configure certification exam covers the following objectives: # 1.0 Objective Configure Windows Servers Navigate Server Interfaces o Navigate the Windows Server 2008 R2 User Interface o Navigate the Windows Server 2012 User Interface Configure Server Services o Configure Server Services o Configure NIC Teaming Configure Server Storage o Configure Server Volumes o Configure Fault Tolerant Volumes o Create a Mount Point o Create and Mount Virtual Hard Disks (VHDs) o Create a Storage Pool 2.0 Hyper-V Manage Virtual Machines with Hyper-V Manager o Create and Manage Virtual Machines o Create Virtual Hard Disks (VHDs) o Create a Differencing Drives (Parent-Child) o Configure Virtual Networks and Settings 3.0 Active Directory Manage Active Directory o Configure Global Catalog Servers o Create Organizational Units (OUs) o Delegate Administrative Control Create and Manage User and Computer Accounts o Create User Accounts o Manage User Accounts o Configure User Account Restrictions o Create Computer Accounts Create and Manage Groups o Create and Manage Global Groups o Create and Manage Distribution Group ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure Module.Section 1.2 1.3 2.1 2.2 2.3 2.4 2.5 2.6 2.7 2.8 3.1 3.2 3.3 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8 4.9 119 o o 4.0 Change the Group Scope Implement Recommended Group Strategy DNS Manage DNS Configuration o Configure Search Suffixes o Configure Forwarders o Configure Root Hints Create DNS Zones o Create a Root Zone o Create an Active Directory-integrated Zone o Convert a Zone to Active Directoryintegrated Create DNS Records o Create a Zone and Add Records o Create A and CNAME Records o Troubleshoot Name Resolution 1 5.0 File and Print Services Manage NTFS Permissions o Configure NTFS Permissions o Configure Inherited Permissions Share Folders and Configure Share Permissions o Share Folders o Manage Shared Folders o Manage Share Caching o Configure Share Permissions Manage Combined NTFS and Share Permissions Configure Volume Shadow Copy Service (VSS) o Enable and Configure Shadow Copies o Restore Previous Versions of Files and Folders Configure Quotas o Manage Quota Restrictions o Create Quota Entries o Configure Quota Limits Manage Printing o Create, Share and Manage a Printer o Configure Printer Pooling o Restrict Printer Access o Deploy Printers with Group Policy 6.0 Group Policy Manage Group Policy Objects (GPOs) o Create and Link a GPO o Create a Starter GPO ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 5.1 5.2 5.3 5.4 5.5 5.6 6.1 6.2 6.3 6.4 6.5 7.1 7.2 8.1 8.2 8.3 8.4 8.5 120 o Modify GPO Links Manage Security Policies o Configure Security Options o Configure Account Password Policies o Enforce User Account Control o Configure Audit Policies o Configure User Rights o Configure Restricted Groups Configure Application Restriction Policies 7.0 Networking Configure Basic Network Settings o Configure IPv4 Settings o Configure IPv6 Settings Configure Network Settings for Multiple Subnets o Use Subnetting to split address ranges o Use Supernetting to combine address ranges o Configure Networking for Multiple Subnets 8.0 DHCP Installation and Authorization o Install the DHCP Role o Authorize DHCP Servers Manage DHCP Scopes, Exclusions, and Reservations o Create and Configure Scopes o Create Exclusion Ranges o Create Client Reservations Configure DHCP Options o Configure Server Options o Configure Scope Options Implement DHCP Centralization o Configure a DHCP Relay Agent o Add a DHCP Server on Another Subnet o Configure Automatic and Alternate Addressing ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 8.6 8.7 8.9 8.10 9.1 9.2 9.3 10.1 10.2 10.3 10.4 121 Appendix C: 70-410: Installing and Configuring Server 2012 The certification exam measures the students’ ability to install, configure, and manage Windows Server 2012 operating system. Before taking the exam, you should be proficient in the skills listed below: # Objective 100 Install and Configure Servers (17 percent) 101 Install servers This objective may include but is not limited to: Module.Section 2.1 2.3 2.4 Plan for a server installation Plan for server roles Plan for a server upgrade Install Server Core Optimize resource utilization by using Features on Demand Migrate roles from previous versions of Windows Server 102 Configure servers This objective may include but is not limited to: Configure Server Core Delegate administration Add and remove features in offline images Deploy roles on remote servers Convert Server Core to/from full GUI Configure services Configure NIC teaming 103 Configure local storage This objective may include but is not limited to: 2.2 2.3 2.4 2.5 2.6 4.4 2.7 2.8 Design storage spaces Configure basic and dynamic disks Configure MBR and GPT disks Manage volumes Create and mount virtual hard disks (VHDs) Configure storage pools and disk pools ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 122 200 Configure Server Roles and Features (16 percent) 201 Configure file and share access This objective may include but is not limited to: Create and configure shares Configure share permissions Configure offline files Configure NTFS permissions Configure access-based enumeration (ABE) Configure Volume Shadow Copy Service (VSS) Configure NTFS quotas 202 Configure print and document services This objective may include but is not limited to: 6.1 6.2 6.3 6.4 6.5 7.1 7.2 Configure the Easy Print print driver Configure Enterprise Print Management Configure drivers Configure printer pooling Configure print priorities Configure printer permissions 203 Configure servers for remote management This objective may include but is not limited to: 2.4 2.5 8.8 Configure WinRM Configure down-level server management Configure servers for day-to-day management tasks Configure multi-server management Configure Server Core Configure Windows Firewall 300 Configure Hyper-V (17 percent) 301 Create and configure virtual machine settings This objective may include but is not limited to: 3.1 Configure dynamic memory Configure smart paging Configure Resource Metering Configure guest integration services 302 Create and configure virtual machine storage This objective may include but is not limited to: 3.2 3.3 Create VHDs and VHDX ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 123 Configure differencing drives Modify VHDs Configure pass-through disks Manage snapshots Implement a virtual Fibre Channel adapter 303 Create and configure virtual networks This objective may include but is not limited to: 3.3 Implement Hyper-V Network Virtualization Configure Hyper-V virtual switches Optimize network performance Configure MAC addresses Configure network isolation Configure synthetic and legacy virtual network adapters 400 Deploy and Configure Core Network Services (16 percent) 401 Configure IPv4 and IPv6 addressing This objective may include but is not limited to: 9.1 9.2 9.3 Configure IP address options Configure subnetting Configure supernetting Configure interoperability between IPv4 and IPv6 Configure ISATAP Configure Teredo 402 Deploy and configure Dynamic Host Configuration Protocol (DHCP) service This objective may include but is not limited to: 10.1 10.2 10.3 10.4 Create and configure scopes Configure a DHCP reservation Configure DHCP options Configure client and server for PXE boot Configure DHCP relay agent Authorize DHCP server 403 Deploy and configure DNS service This objective may include but is not limited to: Configure Active Directory integration of primary zones Configure forwarders Configure Root Hints Manage DNS cache ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 5.2 5.3 5.4 5.5 5.6 124 Create A and PTR resource records 500 Install and Administer Active Directory (18 percent) 501 Install domain controllers This objective may include but is not limited to: 4.2 5.4 Add or remove a domain controller from a domain Upgrade a domain controller Install Active Directory Domain Services (AD DS) on a Server Core installation Install a domain controller from Install from Media (IFM) Resolve DNS SRV record registration issues Configure a global catalog server 502 Create and manage Active Directory users and computers This objective may include but is not limited to: Automate the creation of Active Directory accounts Create, copy, configure, and delete users and computers Configure templates Perform bulk Active Directory operations Configure user rights Offline domain join Manage inactive and disabled accounts 503 Create and manage Active Directory groups and organizational units (OUs) This objective may include but is not limited to: 4.5 4.6 4.7 8.5 4.4 4.8 4.9 8.7 Configure group nesting Convert groups including security, distribution, universal, domain local, and domain global Manage group membership using Group Policy Enumerate group membership Delegate the creation and management of Active Directory objects Manage default Active Directory containers Create, copy, configure, and delete groups and OUs 600 Create and Manage Group Policy (16 percent) 601 Create Group Policy objects (GPOs) This objective may include but is not limited to: 8.1 8.2 Configure a Central Store Manage starter GPOs Configure GPO links Configure multiple local group policies ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 125 Configure security filtering 602 Configure security policies This objective may include but is not limited to: Configure User Rights Assignment Configure Security Options settings Configure Security templates Configure Audit Policy Configure Local Users and Groups Configure User Account Control (UAC) 603 Configure application restriction policies This objective may include but is not limited to: 8.3 8.4 8.5 8.6 8.9 Configure rule enforcement Configure Applocker rules Configure Software Restriction Policies 604 Configure Windows Firewall This objective may include but is not limited to: 8.8 Configure rules for multiple profiles using Group Policy Configure connection security rules Configure Windows Firewall to allow or deny applications, scopes, ports, and users Configure authenticated firewall exceptions Import and export settings ©2013 TestOut Corporation (Rev 11/13) LabSim Windows Server Pro: Install and Configure 126