TestOut Windows Server Pro: Install and Configure – English 3.1.x LESSON PLAN Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Table of Contents Course Overview .................................................................................................. 4 Course Introduction for Instructors ........................................................................ 6 Section 1.1: Windows as a Server ........................................................................ 8 Section 1.2: Windows Server 2008 R2 Interface Overview ................................... 9 Section 1.3: Windows Server 2012 Interface Overview ...................................... 11 Section 2.1: Installation ....................................................................................... 13 Section 2.2: PowerShell ...................................................................................... 15 Section 2.3: Server Roles ................................................................................... 17 Section 2.4: Server Core ..................................................................................... 19 Section 2.5: Remote and Offline Servers ............................................................ 21 Section 2.6: NIC Teaming ................................................................................... 23 Section 2.7: Traditional Storage .......................................................................... 25 Section 2.8: Storage Pools ................................................................................. 27 Section 3.1: Virtual Machines ............................................................................. 29 Section 3.2: Virtual Machine Storage .................................................................. 31 Section 3.3: Virtual Networks .............................................................................. 33 Section 4.1: Active Directory ............................................................................... 35 Section 4.2: Domain Controllers ......................................................................... 36 Section 4.3: Sites ................................................................................................ 38 Section 4.4: Organizational Units ........................................................................ 39 Section 4.5: Users Accounts ............................................................................... 41 Section 4.6: Bulk User Operations ...................................................................... 43 Section 4.7: Computer Accounts......................................................................... 45 Section 4.8: Groups ............................................................................................ 47 Section 4.9: Rights Delegation ............................................................................ 49 Section 5.1: Single-label Names ......................................................................... 51 Section 5.2: Name Resolution ............................................................................ 52 Section 5.3: Zone Management .......................................................................... 54 Section 5.4: DNS Records .................................................................................. 56 Section 5.5: DNS Server Properties.................................................................... 58 Section 5.6: DNS Troubleshooting ...................................................................... 60 Section 6.1: File Access ...................................................................................... 61 Section 6.2: Access-based Enumeration (ABE) and Volume Shadow Copy (VSS) ............................................................................................................................ 63 Section 6.3: Shares............................................................................................. 65 Section 6.4: Sharing on Server 2012 .................................................................. 67 Section 6.5: Effective Permissions ...................................................................... 69 Section 7.1: Print Servers ................................................................................... 71 Section 7.2: Print Management ........................................................................... 73 Section 8.1: Group Policy Foundation ................................................................. 75 Section 8.2: Group Policy Management .............................................................. 77 Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 8.3: Password Policies ........................................................................... 79 Section 8.4: Audit Policies .................................................................................. 80 Section 8.5: User Rights Assignment.................................................................. 82 Section 8.6: Security Options .............................................................................. 83 Section 8.7: Restricted Groups ........................................................................... 85 Section 8.8: Windows Firewall Policies ............................................................... 86 Section 8.9: Application Restriction Policies ....................................................... 88 Section 8.10: Group Policy Preferences ............................................................. 90 Section 9.1: IPv4 Addressing .............................................................................. 91 Section 9.2: IPv4 Custom Addressing ................................................................. 93 Section 9.3: IPv6 Addressing .............................................................................. 95 Section 10.1: DHCP Basics ................................................................................ 97 Section 10.2: DHCP Exclusions and Reservations ............................................. 99 Section 10.3: DHCP Centralization ................................................................... 101 Section 10.4: DHCP Troubleshooting ............................................................... 103 Windows Server Pro: Install and Configure Practice Exams ............................ 104 Microsoft 70-410 Practice Exams ..................................................................... 105 Appendix A: Approximate Time for the Course ................................................. 106 Appendix B: Windows Server Pro: Install and Configure Objectives................. 109 Appendix C: 70-410: Installing and Configuring Server 2012 ........................... 112 Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Course Overview This course prepares students for TestOut’s LabSim Windows Server Pro: Install and Configure, and Microsoft’s 70-410 certification exam. Module 1 – Introduction This module introduces the students to services a server provides and tools to administer Windows Server R2 and Windows Server 2012. Module 2 – Installation and Configuration In this module students will learn about installing and configuring Windows Server 2012. Module 3 – Hyper-V This module teaches students about managing virtual machines with the Hyper-V Manager. Module 4 – Active Directory This module discusses details and components about managing Active Directory. Module 5 – DNS This module examines managing the configuration of DNS and all the elements related to it. Module 6 – File and Share Access In this module students will learn concepts about configuring file and share access. This includes managing permissions, quotas, who can see what, and sharing and effective permissions. Module 7 – Print and Document Services This module discusses configuring and managing print and document services. Module 8 – Group Policy In this module students will learn about using Group Policy to centralize administration and manage security. Module 9 – Networking This module discusses details about how computers use IPv4 and IPv6 addressing to communicate with each other. Module 10 – DHCP This module examines installing and configuring DHCP. This includes scopes, options, exclusions, reservations, and centralization. Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Practice Exams In Practice Exams students will have the opportunity to test themselves and verify that they understand the concepts and are ready to take the certification exam. The practice exams are divided into two separate modules and will contain examples of the types of questions that a student will find on the actual exam: Windows Server Pro: Install and Configure Certification Practice Exams Microsoft 70-410 Practice Exams Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Course Introduction for Instructors This course provides students with the knowledge to become industry certified as a Windows professional. This course actually meets the specifications for two different industry certification programs. It prepares the student for the following: TestOut's Windows Server Pro: Install and Configure certification Microsoft’s 70-410: Windows Server, Installing and Configuring Server 2012 TestOut’s Windows Server Pro: Install and Configure certification is a new certification which measures not just what you know, but what you can do. The TestOut Server Pro Certification measures your ability to design, implement, configure and manage a Windows network that incorporates Windows Server 2012. The following knowledge domains are addressed: Configure Windows Servers Hyper-V Active Directory DNS File and Print Services Group Policy Networking and DHCP Note: Windows Server Pro: Install and Configure objectives are listed in Appendix B: Windows Server Pro: Install and Configure Objectives. Microsoft’s 70-410: Installing and Configuring Server 2012 certification measures the students’ ability to install, configure, and manage Windows Server 2012 operating system. The following knowledge domains are addressed: Install and configure servers Configure server roles and features Configure Hyper-V Deploy and configure core network services Install and administer Active Directory Create and manage Group Policy Note: MS 70-410 objectives are listed in Appendix C: 70-410: Installing and Configure Server 2012. The section introductions in LabSim and the lesson plans list the objectives that are met for each of the exams in that section. Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. The following icons are placed in front of lesson items in LabSim to help students quickly recognize the items in each section: = Demonstration = Exam = Lab/Simulation = Text lesson or fact sheet = Video The video and demonstration icons are used throughout the lesson plans to help instructors differentiate between the timing for the videos and demonstrations. In the lesson plans the Total Time for each section is calculated by adding the approximate time for each section which is calculated using the following elements: Video/demo times Approximate time to read the text lesson (the length of each text lesson is taken into consideration) Simulations (5 minutes is assigned per simulation. This is the amount of time it would take for a knowledgeable student to complete the lab activity. Plan that the new students will take much longer than this depending upon their knowledge level and computer experience.) Questions (1 minute per question) Note: Appendix A: Approximate Time for the Course contains the approximate time for each section which are totaled for the entire course. Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 1.1: Windows as a Server Summary This section provides an introduction of the course. This course is designed to prepare you for the following certification exams: TestOut’s Windows Server Pro: Install and Configure Microsoft’s 70-410 exam, a requirement for o Microsoft Certified Solutions Associate (MCSA) o Microsoft Solutions Expert (MCSE): Server Infrastructure o Microsoft Solutions Master (MCSM): Directory Services Video/Demo 1.1.1 Windows Server Time 2:47 Number of Exam Questions 5 questions Total Time About 10 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 1.2: Windows Server 2008 R2 Interface Overview Summary This section provides an overview of the Windows Server 2008 R2 Interface. Students will become familiar with the: Differences between Windows Server 2008 and Windows Server R2 Tools used to administer to Windows Server 2008 R2 o Initial Configuration Tasks (ICT) o Server Manager o Administrative Tools Editions of the Windows Server 2008 operating system Editions of the Windows Server 2008 R2 operating system Students will learn how to: View available Administrative Tools from the Start menu Open Administrative Tools within Server Manager Execute a command from a command prompt Access the Control Panel Open the Network and Sharing Center Open Computer Management within Administrative Tools Open Windows Explorer and browse the Windows Server 2008 R2 file structure. Server Pro Exam Objectives: 1.0 Configure Windows Servers o Navigate Server Interfaces Navigate the Windows Server 2008 R2 Interface 70-410 Exam Objectives: 100 Install and Configure Servers Lecture Focus Questions: Which command can you use to display the ICT? How should you access Windows PowerShell to ensure that you have the PowerShell commands for the roles and services you have installed? What tasks do you perform to customize a server? What are key differences between Windows Server 2008 and Windows Server 2008 R2? What is the difference between roles, role services, and features? Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Video/Demo 1.2.1 Windows Server 2008 R2 User Interface 1.2.2 Using the Windows Server 2008 R2 User Interface Total Time 3:57 3:50 7:47 Lab/Activity Explore the Windows 2008 R2 User Interface Number of Exam Questions 7 questions Total Time About 25 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 1.3: Windows Server 2012 Interface Overview Summary This section provides an overview of the Windows Server 2012 interface. Students will become familiar with the: Tools to administer Windows Server 2012: o Server Manager o PowerShell Interface elements used to navigate Windows Server 2012: o Start screen o Charms menu Windows Server 2012 editions Students will learn how to: Open Administrative Tools within Server Manager Access the Start screen Open an application from the Start screen Run a command from a command prompt Access the Control Panel Open the Network and Sharing Center Open Computer Management within Administrative Tools Open File Explorer and browse the Windows Server 2012 file structure. Server Pro Exam Objectives: 1.0 Configure Windows Servers o Navigate Server Interfaces Navigate the Windows Server 2012 Interface 70-410 Exam Objectives: 100 Install and Configure Servers Lecture Focus Questions: Which Windows Server 2012 editions provide all features of Windows Server 2012? How do you access the Charms menu? What are two ways can you access the Start screen? How do you add tools to the Tools menu? What happens when two commands are piped? Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Video/Demo Time 1.3.1 Windows Server 2012 User Interface 4:44 1.3.2 Using the Windows Server 2012 User Interface 4:45 1.3.3 Using the Windows Server 2012 R2 User Interface 1:26 Total 9:29 Lab/Activity Explore the Windows 2012 User Interface Number of Exam Questions 8 questions Total Time About 25 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 2.1: Installation Summary This section provides an overview of the Windows Server 2012. Students will become familiar with the: Windows Server 2012 editions: o Foundation o Essentials Edition o Standard Edition o Datacenter Edition Minimum requirements for all editions of Windows Server 2012 Windows Server 2012 Upgrade paths Server Core Using Server Manager Students will learn how to: Plan a Windows Server 2012 installation. Install Windows Server 2012. Server Pro Exam Objectives: 1.0 Configure Windows Servers 70-410 Exam Objectives: 101 Install servers This objective may include but is not limited to: o Plan for a server installation o Plan for a server upgrade Lecture Focus Questions: Which editions of Windows Server 2012 support a Server Core installation? What is the system volume free space requirement for Windows Server 2012? If you are currently running Windows Web Server 2008 R2, what is your upgrade path? How many virtual instances are allowed on each Windows Server 2012 edition? What is the difference between a full installation of Windows Server 2012 and a Server Core installation? Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. How does a Server Core installation in Windows Server 2012 differ from a Server Core installation in previous versions of Windows Server? Can a full installation of Windows Server 2012 be converted to a Server Core installation? Video/Demo 2.1.1 Server Installation and Upgrade 2.1.2 Installing Windows Server 2012 Total Time 7:29 3:54 11:23 Number of Exam Questions 5 questions Total Time About 20 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 2.2: PowerShell Summary This section discusses using PowerShell to create scripts from the command line to automate system administration and application management tasks. Concepts covered include: Terms used with PowerShell: o Command line o Cmdlets o Providers New features in PowerShell 3.0: o Deployment Image Servicing and Management (DISM) o Remote Windows PowerShell o Windows PowerShell Workflows Windows Server 2012 R2 introduced PowerShell Desired State Configuration (DSC) Students will learn how to: Use PowerShell cmdlets to configure a Windows Server 2012 Server Pro Exam Objectives: 1.0 Configure Windows Servers o Configure Server Services Configure Server Services 70-410 Exam Objectives: 102 Configure servers Lecture Focus Questions: What is the typical PowerShell command format? How can you access the cmdlet help system? How can you cycle through options for a cmdlet? How can you use the auto-complete feature of PowerShell 3.0? What is the purpose of Windows PowerShell providers? How can you import a PowerShell module when writing a script? Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Video/Demo 2.2.1 PowerShell Overview 2.2.2 Using PowerShell 2.2.3 PowerShell Desired State Configuration (DSC) 2.2.4 Using PowerShell Desired State Configuration (DSC) Total Time 7:39 5:00 9:01 6:11 27:51 Number of Exam Questions 5 questions Total Time About 35 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 2.3: Server Roles Summary In this section students will learn the roles, role services and features in Windows Server 2012. Concepts covered in this section include: Roles: o Active Directory Domain Service (AD DS) o Active Directory Certificate Services (AD CS) o DNS Server o DHCP Server o File and Storage Services o Hyper-V o Print and Document Services o Network Policy and Access Services o Web Server (IIS) o Windows Deployment Services (WDS) o Windows Server Update Server Role services: o Distributed Scan Server o Network Policy Server (NPS) o Host Credential Authorization Protocol (HCAP) o Health Registration Authority (HRA) Features: o Failover Clustering o Group Policy o Network Load Balancing o BitLocker Drive Encryption o Remote Assistance o SMTP Server o Windows Server Backup Features on Demand Students will learn how to: Install roles on Windows Server 2012. Server Pro Exam Objectives: 1.0 Configure Windows Servers Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. 70-410 Exam Objectives: 101 Install servers This objective may include but is not limited to: o Plan for server roles o Optimize resources utilization by using Features on Demand o Migrate roles from previous versions of Windows Server 102 Configure servers This objective may include but is not limited to: o Configure services Lecture Focus Questions: What is the relationship between server roles, role services, and features? How is a new role installed on a server? How do you remove a role in Windows Server 2012? Which role should be installed if you want to configure a local update server? How can you migrate roles from an existing system running an earlier version of Windows Server to Windows Server 2012? Which Windows Server 2012 feature allows you to remove the source files of unused roles and features? What is the benefit of removing the source files of unused roles and features? What methods can be used to obtain source files to re-install removed roles and features files? Video/Demo 2.3.1 Server Roles 2.3.2 Migrating Server Roles 2.3.3 Features on Demand 2.3.4 Using Features on Demand Total Time 2:04 11:25 5:34 5:28 24:31 Number of Exam Questions 3 questions Total Time About 35 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 2.4: Server Core Summary This section examines selecting and performing a Server Core installation option. Concepts covered include: Installation options when installing Windows Server 2008 R2: o Server Core o Minimal Server Interface o Server with a GUI Considerations when selecting the installation option Tasks to perform after the Server Core installation: o Name the computer o Set the time and time zone o Assign a static IP address to the server o Join the server to the domain PowerShell commands for switching between server installation options Tasks to convert from Server with a GUI to a Minimal Server installation Tasks to convert from Server with a GUI to a Server Core installation Students will learn how to: Install and configure a Windows Server 2012 Server Core system. Convert a Windows Server 2012 Server Core installation to a full installation. Convert a Windows Server 2012 full installation to a Server Core installation. Server Pro Exam Objectives: 1.0 Configure Windows Servers 70-410 Exam Objectives: 101 Install servers This objective may include but is not limited to: o Plan for a server installation o Install Server Core 102 Configure servers This objective may include but is not limited to: o Configure Server Core o Convert Server Core to/from full GUI 203 Configure servers for remote management This objective may include but is not limited to: Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. o Configure Server Core Lecture Focus Questions: How does a Minimal Server Interface installation differ from a Server Core installation? What are the benefits of a Server Core installation? Which utility do you use to make changes to Server Core settings? Which PowerShell command converts a Server with a GUI installation to a Server Core installation? Which four tasks should you perform immediately after a Server Core installation? Which command joins the server to the domain after the Server Core installation? Video/Demo 2.4.1 Server Core 2.4.2 Configuring Server Core 2.4.3 Server Core Conversion 2.4.4 Converting Server Core Total Time 3:21 8:18 4:29 7:46 24:54 Number of Exam Questions 5 questions Total Time About 35 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 2.5: Remote and Offline Servers Summary This section provides information about remote role deployment tasks. Concepts covered include: Role deployment tasks: o Add domain servers to the server pool o Manage non-domain workstations o Deploy a role on a remote server o Deploy a role to a VHD file Using the Windows Remote Management WINRM command Using Deployment Image Servicing and Management (dism) commands Students will learn how to: Configure a server for remote management. Deploy roles and features to a remote server. Deploy roles and features to an offline image. Use the WINRM command to manage a remote server Server Pro Exam Objectives: 1.0 Configure Windows Servers 70-410 Exam Objectives: 102 Configure servers This objective may include but is not limited to: o Add and remove features in offline images o Deploy roles on remote servers 203 Configure servers for remote management This objective may include but is not limited to: o Configure WinRM o Configure down-level server management o Configure servers for day-to-day management tasks o Configure multi-server management Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Lecture Focus Questions: How does remote management of servers increase efficiency? What is a server pool? How are servers added to a server pool? Which roles do not support Manage As to change credentials? What are the steps required to install and manage roles on a remote server that is not joined to the domain? What are the requirements for deploying a role to a VHD file? What software is required to use an answer file with Deployment Image Servicing Management (dism)? Video/Demo 2.5.1 Remote Role Deployment 2.5.2 Configuring Servers for Remote Management 2.5.3 Deploying Role on Remote Servers 2.5.4 Offline Images 2.5.5 Deploying Features to Offline Images 2.5.6 WinRM Total Time 6:42 6:09 1:28 11:48 7:12 5:30 38:49 Number of Exam Questions 6 questions Total Time About 50 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 2.6: NIC Teaming Summary This section discusses using NIC Teaming to increase bandwidth and provide fault tolerance. Details covered include: Considerations regarding NIC Teaming NIC Teaming modes: o Switch-dependent mode o Switch-independent mode Load balancing mode methods: o Hyper-V switch port o Hashing Students will learn how to: Configure NIC Teaming. Server Pro Exam Objectives: 1.0 Configure Windows Servers o Configure Server Services Configure NIC Teaming 70-410 Exam Objectives: 102 Configure servers This objective may include but is not limited to: o Configure NIC teaming Lecture Focus Questions: What are the benefits of using NIC Teaming? How does switch-dependent mode differ from switch-independent mode? How does static teaming differ from dynamic teaming? What is the function of the Link Aggregation Control Protocol (LACP)? How many standby NICs are there in an active/passive configuration? What are the restrictions of using NIC Teaming with Hyper-V? Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Video/Demo 2.6.1 NIC Teaming 2.6.2 Configuring NIC Teaming Total Time 7:00 3:21 10:21 Lab/Activity Configure NIC Teaming Number of Exam Questions 8 questions Total Time About 45 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 2.7: Traditional Storage Summary This section examines using managing traditional storage. Concepts covered include: Implementing directly-attached storage Partition styles of disks: o Master Boot Record (MBR) o GUID Partition Table (GPT) Types of Volumes: o Basic o Dynamic Dynamic Volume Types: o Simple o Spanned o Striped (RAID 0) o Striped with parity (RAID 5) o Mirrored (RAID 1) Considerations when managing disks and volumes for directly-attached storage Strategies for adding space to existing volumes: o Extend the volume o Configure a mount point The role of ReFS Students will learn how to: Initialize a disk Configure a volume Extend a volume Configure fault tolerant volumes Create a mount point Manage disks and volumes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Server Pro Exam Objectives: 1.0 Configure Windows Servers o Configure Server Storage Configure Server Volumes Configure Fault Tolerant Volumes Create a Mount Point 70-410 Exam Objectives: 103 Configure local storage This objective may include but is not limited to: o Configure basic and dynamic disks o Configure MBR and GPT disks o Manage volumes Lecture Focus Questions: What are the advantages of GPT partitioning over MBR partitioning? Why is MBR recommended for disk sizes smaller than 2 TB? How does a basic disk differ from a dynamic disk? Which disk configuration is used with spanned, striped, and mirrored volumes? What information does the dynamic disk database contain? When would you use a mount point? How do spanned disks use disk space? Video/Demo Time 2.7.1 Disk Storage 2.7.3 Volumes 2.7.4 Volume Formats 2.7.6 Managing Disks and Volumes 10:13 15:50 7:09 9:07 Total 42:19 Lab/Activity Configure Volumes Configure Fault Tolerance Volumes Create a Mount Point Number of Exam Questions 9 questions Total Time About 75 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 2.8: Storage Pools Summary In this section students will explore using storage pools. Details include: Components of storage spaces: o Devices o Pools of storage o Storage spaces Steps to add more space to storage spaces Configuration options in storage pool creation: o Allocation o Storage layout: Simple Two-way mirror Three-way mirror Parity o Provisioning Fixed provisioning Thin provisioning o Storage tiers o Write-back cache Primordial storage pool Storage pool limitations PowerShell command to manage storage spaces Considerations of enclosure awareness (introduced in Windows Server 2012 R2) Students will learn how to: Create and mount a VHD. Create storage pools. Server Pro Exam Objectives: 1.0 Configure Windows Servers o Configure Server Storage Create and Mount Virtual Hard Disks (VHDs) Create a Storage Pool Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. 70-410 Exam Objectives: 103 Configure local storage This objective may include but is not limited to: o Design storage spaces o Create and mount virtual hard disks (VHDs) o Configure storage pools and disk pools Lecture Focus Questions: What are the advantages of the VHDX format compared to the VHD format? What are the advantages of a dynamically expanding disk compared to a fixed disk? Which virtual hard disk type provides the best performance? What are the advantages of storage pools compared to traditional storage? What is thin provisioning? What is contained in the primordial storage pool? What are the disk requirements for adding a disk to the storage pool? Video/Demo Time 2.8.1 Creating and Mounting a VHD 3:59 2.8.4 Creating Storage Pools 6:46 2.8.5 Disk Enclosures with Storage Pool 12:51 Total 23:36 Lab/Activity Create and Mount a VHD Create a Storage Pool Number of Exam Questions 10 questions Total Time About 50 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 3.1: Virtual Machines Summary This section provides details of creating and managing virtual machines. Concepts covered include: Virtualization types: o Server virtualization o Network virtualization o Storage virtualization Hyper-V details Hardware requirements for Windows Server 2012 running Hyper-V New or updated features available in Windows Server 2012 Hyper-V and Windows Server R2 Hyper-V: o Dynamically expanding memory o Smart paging o Resource metering o Resource control o Integration Services o Enhanced Session Mode Key components of generation 2 virtual machines: o Supported guest operating systems o Hardware o Supported features o Non-supported features Facts regarding generation 2 virtual machines Students will learn how to: Create a virtual machine. Manage a virtual machine: o Add and manage hardware. o Change boot order. o Change memory allocation. o Manage processors. o Configure Integration Services. o Configure shutdown options. Server Pro Exam Objectives: 2.0 Hyper-V o Manage Virtual Machines with Hyper-V Manager Create and Manage Virtual Machines Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. 70-410 Exam Objectives: 301. Create and configure virtual machine settings. This objective may include but is not limited to: o Configure dynamic memory o Configure smart paging o Configure Resource Metering o Configure guest integration services Lecture Focus Questions: What are the hardware requirements for a Windows Server 2012 running Hyper-V? How does Hyper-V in Windows Server 2012 differ from Hyper-V in previous Windows Server versions? What is the purpose of the Memory weight setting? How is it used? What is an advantage to using dynamically expanding memory? What are some advantages to using fixed memory? In what situation is smart paging used? What is the difference between resource metering and resource control? Video/Demo 3.1.1 Virtual Machines 3.1.2 Virtual Machines on 2012 R2 3.1.3 Creating Virtual Machines 3.1.4 Managing Virtual Machines Total Time 9:59 9:56 6:48 9:32 36:15 Lab/Activity Create Virtual Machines Number of Exam Questions 9 questions Total Time About 55 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 3.2: Virtual Machine Storage Summary This section discusses creating and managing virtual machine storage. Concepts covered include: Considerations when creating a new VM VHDs management tasks: o Expand o Shrink o Compact o Convert Considerations for Hyper-V in Windows Server 2012 VMs features: o Pass-through disk o Differencing disk o Snapshot/Checkpoint Students will learn how to: Create a virtual hard disk. Install a parent virtual machine using a fixed virtual hard disk. Create differencing disks from a parent disk. Create, apply, and delete snapshots. Convert, compact, merge, and expand virtual hard disks. Server Pro Exam Objectives: 2.0 Hyper-V o Manage Virtual Machines with Hyper-V Manager Create Virtual Hard Disks (VHDs) Create Differencing Drives (Parent-Child) 70-410 Exam Objectives: 302. Create and configure virtual machine storage This objective may include but is not limited to: o Create VHDs and VHDXs o Configure differencing drives o Modify VHDs o Configure pass-through disks o Manage snapshots o Implement a virtual Fibre Channel adapter Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Lecture Focus Questions: Why is it necessary to compact dynamically expanding virtual disk files? Under what conditions should a virtual disk configuration not be edited? What is a key difference between using IDE and SCSI virtual disks? How is a pass-through disk implemented in a virtual machine? Under what circumstances would it be advantageous to use differencing disks? How does Hyper-V in Windows Server 2012 protect the integrity of domain controllers running as virtual machines? When should you create a snapshot of a virtual machine? What is the difference between snapshots and differencing disks? Video/Demo 3.2.1 Virtual Hard Disks 3.2.2 Creating Virtual Hard Disks 3.2.3 Differencing Disks 3.2.4 Snapshots 3.2.5 Creating Snapshots Total Time 3:14 6:11 2:48 3:52 6:20 22:15 Lab/Activity Create Virtual Hard Disk Create a Parent Virtual Machine Create Child Virtual Machines Number of Exam Questions 13 questions Total Time About 55 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 3.3: Virtual Networks Summary In this section students will learn about virtual networks. Concepts covered include: Types of virtual networks: o External o Internal o Private network o Fibre Channel Virtual network adapters supported by: o Generation 1 o Generation 2 Virtual switches Considerations for installing virtual switches: o External o VLAN o Fibre Channel Features available to optimize virtual networks: o Virtual Machine Queue (VQM) o IPSec Task Offloading (IPSecTO) o DHCP Guard o Router Guard o Port Mirroring o NIC Teaming o Port Access Control Lists (ACLs) o Meter Port ACLs o Private Virtual Local Area Network (PVLAN) o Trunking o Storage quality of service (QoS) Students will learn how to: Create a virtual network. Server Pro Exam Objectives: 2.0 Hyper-V o Manage Virtual Machines with Hyper-V Manager Create Virtual Network and Settings Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. 70-410 Exam Objectives: 302. Create and configure virtual machine storage This objective may include but is not limited to: o Implement a virtual Fibre Channel adapter 303. Create and configure virtual networks This objective may include but is not limited to: o Implement Hyper-V Network Virtualization o Configure Hyper-V virtual switches o Optimize network performance o Configure MAC addresses o Configure network isolation o Configure synthetic and legacy virtual network adapters Lecture Focus Questions: What is the difference between an internal virtual network and a private virtual network? Which virtual network types do not allow virtual machines to communicate with other hosts on the physical network? When would you need to use a legacy virtual network adapter? When setting up a virtual network, what is the recommended number of network cards for the physical system? How should they be configured? How can a virtual machine be configured to participate on a VLAN? Video/Demo 3.3.1 Virtual Network Adapters 3.3.2 Adding Virtual Network Adapters 3.3.3 Virtual Switches 3.3.4 Creating Virtual Switches 3.3.7 Network Optimization 3.3.8 Optimizing Virtual Network Performance Total Time 2:49 4:07 4:45 3:26 7:03 7:02 29:12 Lab/Activity Create Virtual Switches Prepare a Production Virtual Machine Number of Exam Questions 12 questions Total Time About 60 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 4.1: Active Directory Summary This section provides details of Active Directory. Concepts covered include: Active Directory components: o Trees and Forests o Domain o Organizational Unit (OU) o Objects o Generic Containers o Domain Controller o Global Catalog The Active Directory database resides in Ntds.dit Windows operating system networking models: o Stand-Alone o Workgroup o Client-Server Server Pro Exam Objectives: 3.0 Manage Active Directory 70-410 Exam Objectives: 500 Install and Administer Active Directory Lecture Focus Questions: What are the advantages of a client-server network model versus a workgroup model? What is the difference between a tree and a forest? How can you tell when a new domain starts a new tree? What is the function of transitive trusts in a forest? What is the function of the schema? How does Active Directory ensure that each domain controller has the most current information from other domain controllers? Video/Demo 4.1.1 Active Directory Structure 4.1.2 Computer Roles Total Time 6:59 6:32 13:31 Number of Exam Questions 4 questions Total Time About 20 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 4.2: Domain Controllers Summary This section discusses installing and managing domain controllers. Concepts covered include: Requirements for installing Active Directory Domain Services (AD DS) Methods for Active Directory Domain Services (AD DS) installation: o Active Directory Domain Services Installation Wizard o Command Line o Answer file o AD DS installation from media Considerations when upgrading domain controllers to Windows Server 2012 or Windows Server 2012 R2 Active Directory on Windows Azure The role of domain controllers Partitions within the directory partition: o Domain partition o Schema partition o Configuration partition o Application directory partition Considerations when working with domains Additional functions or roles that domain controllers can have: o Replica domain controller o Global Catalog o Operations Master Roles Students will learn how to: Create a new domain. Configure a Global Catalog server. Troubleshoot DNS issues with Active Directory. Server Pro Exam Objectives: 3.0. Manage Active Directory o Configure Global Catalog Servers 70-410 Exam Objectives: 501. Install domain controllers This objective may include but is not limited to: o Add and remove a domain controller from a domain o Upgrade a domain controller Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. o Install Active Directory Domain Services (AD DS) on a Server Core installation o Install a domain controller from Install from Media (IFM) o Configure a global catalog server Lecture Focus Questions: To remove Active Directory from a domain controller, what action must you take before demoting the domain controller? What are the four methods you can use to install Active Directory Domain Services? How does Active Directory use the schema? What is the function of a Global Catalog server? How is a Global Catalog server updated? What is the function of DNS in Active Directory? What is the purpose of the directory partition? Which partition types can be included in the directory partition? Video/Demo Time 4.2.1 Domain Controller Installation 3:43 4.2.2 Domain Controller Upgrades 7:02 4.2.3 Global Catalog Server 4:33 4.2.4 Record Configuration Issues 3:22 4.2.5 Creating a New Domain 16:28 4.2.6 Deploying Active Directory with Windows Azure 12:47 Total 47:55 Number of Exam Questions 5 questions Total Time About 60 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 4.3: Sites Summary This section discusses the role of sites and subnets. Students will learn how to: Configure and configure a site. Server Pro Exam Objectives: 3.0. Manage Active Directory 70-410 Exam Objectives: 500. Install and Administer Active Directory Lecture Focus Questions: How does a site differ from a domain? What is the purpose of a site link? What does the term "well-connected" mean when referring to networks? How are sites used in Active Directory? How do IP address and subnets relate to sites? How are dynamic site assignments made? Video/Demo Time 4.3.1 Site Overview 4.3.2 Configuring Sites 3:16 3:39 Total 6:55 Number of Exam Questions 3 questions Total Time About 10 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 4.4: Organizational Units Summary In this section students will learn the basics of using Organization Units. Concepts covered in this section include: Containers and OU created by default when Active Directory is installed: o Domain container o Builtin container o Users container o Computers container o Domain Controller OU Details about an Organization Unit (OU) Considerations for managing OUs: o Group Policy o Preventing accidental deletion o Delegating authority Students will learn how to: Create organizational units. Create nested organizational units. Prevent accidental deletion of OUs. Delegate administrative control. Server Pro Exam Objectives: 3.0 Manage Active Directory o Create Organizational Units (OUs) o Delegate Administrative Control 70-410 Exam Objectives: 102 Configure servers This objective may include but is not limited to: o Delegate administration 503 Create and manage Active Directory groups and organizational units (OUs) This objective may include but is not limited to: o Delegate the creation and management of Active Directory objects o Manage default Active Directory containers o Create, copy, configure, and delete groups and OUs. Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Lecture Focus Questions: What objects can an organizational unit contain? How is an organizational unit different from a generic container? What are the advantages of placing computer accounts in organizational units rather than the Computer container? How does inheritance affect child organizational units? How does object-based delegation differ from task-based delegation? How can you protect objects from accidental deletion? Video/Demo 4.4.1 Default Containers and Organizational Units 4.4.2 Creating Organizational Units Total Time 8:56 4:55 13:51 Lab/Activity Create OUs Delete OUs Number of Exam Questions 4 questions Total Time About 30 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 4.5: Users Accounts Summary This section discusses considerations when using user accounts. Details include: Types of Windows user accounts: o Local o Domain Active Directory name types: o User or Logon Name o User Principal Name (UPN) o Distinguished names o Relative Distinguished Name (RDN) Recommendations when working with user accounts: o Create/manage user accounts o Use templates o Manage passwords o Create a user profile o Deprovision a user Students will learn how to: Create a user account. Disable a user account. Manage user account passwords. Manage user accounts. Server Pro Exam Objectives: 3.0 Create and Manage User and Computer Accounts o Create User Accounts o Manage User Accounts o Configure User Account Restrictions 70-410 Exam Objectives: 502 Create and manage Active Directory users and computers This objective may include but is not limited to: o Automate the creation of Active Directory accounts o Create, copy, configure, and delete users and computers o Configure templates o Manage inactive and disabled accounts Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Lecture Focus Questions: How is a domain user account different than a local user account? What is the difference between a disabled, locked out, or expired user account? What is the best way to handle a user's account when an employee quits the company and will be replaced by a new employee in the near future? What are the recommendations for using a template user account? What permissions does a user account created from a template have? How should you re-create a user account that was accidentally deleted? Video/Demo 4.5.1 Users and Computers 4.5.2 Users Accounts 4.5.3 Creating Users 4.5.4 Managing Users Total Time 1:00 1:45 9:24 7:45 19:54 Lab/Activity Create User Accounts Manage User Accounts Number of Exam Questions 12 questions Total Time About 50 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 4.6: Bulk User Operations Summary This section provides information about the following tools when performing bulk user operations such as creating or modifying large number of objects: Csvde Ldifde PowerShell Ldp DS commands Students will learn how to: Use Csvde to import and export Active Directory objects. Use Domain Services (DS) commands to create and manage Active Directory objects. Use PowerShell commands to create and manage Active Directory objects. Use Ldifde commands to create and manage Active Directory objects. Use the Ldp utility. Server Pro Exam Objectives: 3.0 Create and Manage User and Computer Accounts Create User Accounts Manage User Accounts 70-410 Exam Objectives: 502 Create and manage Active Directory users and computers This objective may include but is not limited to: o Perform bulk Active Directory operations Lecture Focus Questions: When would you choose Csvde over LDifde when managing objects? Which tools add the user password to the user account? Which tools can you use to create objects in Active Directory? Which cmdlets can be used to manage Active Directory objects? What is the benefit of piping multiple commands? What utilities would you use to view the properties of multiple Active Directory objects? Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. What is the default action for the Csvde command? Video/Demo Time 4.6.1 Bulk Operations 5:10 4.6.2 Creating Users in Bulk 16:40 4.6.3 Querying Active Directory with PowerShell 4:54 Total 26:44 Number of Exam Questions 12 questions Total Time About 45 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 4.7: Computer Accounts Summary In this section students will learn about using computer accounts. Options covered include: Processes to identify a specific computer: o Create a computer account in Active Directory o Join the computer to the domain. Methods to perform these processes: o Pre-stage accounts o Manual join o Redirection o Offline domain join Facts about computer accounts and joining a domain Passwords Students will learn how to: Create computer accounts and manage computer account properties. Redirect the computer container. Perform an offline domain join. Server Pro Exam Objectives: 3.0 Active Directory o Create and Manage User and Computer Accounts Create Computer Accounts 70-410 Exam Objectives: 502. Create and manage Active Directory users and computers This objective may include but is not limited to: o Automate the creation of Active Directory Accounts o Create, copy, configure, and delete users and computers o Offlline domain join Lecture Focus Questions: When should you pre-stage a computer account in an OU? What is the benefit of computer account redirection? What is the most likely cause of a computer not being able to join the domain after being turned off for several weeks? What must you do after resetting a computer account? Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. How can you prevent or limit a domain user from joining computers to the domain? How can you join a computer to the domain if it does not have a network connection? Video/Demo 4.7.1 Computer Accounts 4.7.2 Redirecting the Computer Container 4.7.3 Performing an Offline Domain Join Total Time 5:44 2:53 4:00 12:37 Lab/Activity Create Computer Accounts Number of Exam Questions 6 questions Total Time About 30 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 4.8: Groups Summary This section discusses managing groups. Concepts covered include: Groups: o Local group o Domain group Group types: o Security o Distribution Group scopes: o Local o Domain Local o Global o Universal Query for group members Considerations when managing groups Students will learn how to: Create groups. Create global groups. Create a distribution group. Change group scope. Implement a group strategy. Enumerate group membership. Server Pro Exam Objectives: 3.0 Create and Manage Groups o Create and Manage Global Groups o Create and Manage Distribution Groups o Change the Group Scope o Implement Recommended Group Strategy 70-410 Exam Objectives: 503 Create and manage Active Directory groups and organizational units (OUs) This objective may include but is not limited to: o Configure group nesting o Convert groups including security, distribution, universal, domain local, and domain global. Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. o o o o Manage group membership using Group Policy Enumerate group membership Manage default Active Directory containers Create, copy, configure, and delete groups and OUs. Lecture Focus Questions: What are the advantages of using groups when setting permissions? What is the difference between a security group and a distribution group? What type of objects can be made members of a universal group? A domain local group? What happens to user accounts when the group they are in is deleted? Which PowerShell commands can be used to manage groups? Video/Demo Time 4.8.1 Groups 13:14 4.8.2 Creating Groups 5:05 4.8.8 Enumerating Group Membership 2:01 Total 20:20 Lab/Activity Create Global Groups Create a Distribution Group Change the Group Scope Implement a Group Strategy Number of Exam Questions 10 questions Total Time About 55 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 4.9: Rights Delegation Summary This section discusses rights delegation to share administrative tasks with other user. Concepts covered include: Using Delegation of authority to enhance security Processes to delegate administrative authority Using the Delegation of Control wizard Assigning permissions to Active Directory objects Students will learn how to: Create security groups and delegate authority based on role. Use the Delegation of Control wizard to assign permissions. Server Pro Exam Objectives: 3.0 Manage Active Directory o Delegate Administrative Control 70-410 Exam Objectives: 503 Create and manage Active Directory groups and organizational units (OUs) This objective may include but is not limited to: o Delegate the creation and management of Active Directory objects. Lecture Focus Questions: What security principle should be applied when you delegate administrative authority? What are the processes typically involved in delegating administrative authority? What is a limitation of the Delegation of Control Wizard? What are the steps in delegating the right to create and link Group Policy Objects? When is it necessary to delegate Manage Group Policy links? Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Video/Demo 4.9.1 Rights Delegation 4.9.2 Using the Delegation of Control Wizard Total Time 2:22 5:01 7:23 Lab/Activity Delegate Administrative Control Number of Exam Questions 4 questions Total Time About 20 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 5.1: Single-label Names Summary This section provides information about the following strategies to provide singlelabel name resolution: HOSTS file Link-Local Multicast Name Resolution (LLMNR) DNS suffix search list DNS devolution GlobalNames zone Students will learn how to: Configure a DNS Suffix Search List. Configure DNS Registration. Server Pro Exam Objectives: 4.0 DNS o Manage DNS Configuration Configure Search Suffixes Lecture Focus Questions: When would you use the GlobalNames zone? Which strategies can you use to provide single-label name resolution for IPv6 hosts? Should HOSTS files be used for name resolution in large networks? When will a Windows client use LLMNR? What limitations does relying on LLMNR have? How does DNS devolution work? How can a DNS suffix search list be configured using Group Policy? Video/Demo 5.1.1 Authentication and Authorization 5.1.2 Configuring DNS Suffix Search List Total Time 9:49 3:10 12:59 Lab/Activity Configure Search Suffixes Number of Exam Questions 6 questions Total Time About 25 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 5.2: Name Resolution Summary This section discusses name resolution using DNS. Concepts covered include: DNS terms: o Forward lookup o Reverse lookup o Authoritative server o Referral o Recursion o Iterative o Delegation DNS name resolution process: o Client o Server Root hints and the root zone Students will learn how to: Configure the DNS service to forward name resolution requests. Create a root zone on a specified server. Server Pro Exam Objectives: 4.0 DNS Manage DNS Configuration o Configure Forwarders o Configure Root Hints Create DNS Zones o Create a Root Zone Manage DNS Configuration o Configure DNS Registration o Configure Forwarders o Configure Root Hints 70-410 Exam Objectives: 403 Deploy and configure DNS service This objective may include but is not limited to: o Configure forwarders o Configure Root Hints o Manage DNS cache Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Lecture Focus Questions: What is the name of the root domain? What does the term distributed database mean concerning the DNS database? How does an FQDN identify a host? What is the difference between a forward lookup and a reverse lookup? A client sends a request for name resolution to its configured DNS server, but it isn't authoritative for the zone where the name resides. What happens next? You've modified an A record to point to a new IP address, but your client still resolves the name to the old IP address. What should you do? Video/Demo 5.2.1 Fully Qualified Domain Names 5.2.2 Internet Name Resolution 5.2.3 Adding an Entry to the Hosts File 5.2.4 Configuring Forwarding and Root Hints 5.2.5 Intranet Name Resolution Total Time 2:59 14:05 2:00 4:33 7:39 31:16 Lab/Activity Configure Forwarders Create a Root Zone Number of Exam Questions 7 questions Total Time About 50 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 5.3: Zone Management Summary This section examines managing zones. Concepts covered include: Types of authoritative DNS zones: o Primary o Secondary o Active Directory-integrated Types that zones are classified as: o Forward lookup zone o Reverse lookup zone Students will learn how to: Create a new zone and configure it to be stored in Active Directory. Manage zone properties. Convert an existing zone to an Active Directory-integrated zone. Server Pro Exam Objectives: 4.0 DNS o Create DNS Zones Create an Active Directory-integrated Zone Convert a Zone to Active Directory-integrated 70-410 Exam Objectives: 403 Deploy and configure DNS service This objective may include but is not limited to: o Configure Active Directory integration of primary zones Lecture Focus Questions: Why is a reverse lookup zone for a network written backwards? What are the differences between Standard Primary zones and Standard Secondary zones? What is the difference between Refresh Interval and DNS Notify triggers for zone transfers? What information does an SOA record contain? How is an Active Directory-integrated zone different from a primary zone? What type of zone would you create if you wanted to use secure dynamic updates? What type of name resolution is performed by reverse lookup zones? Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Video/Demo 5.3.1 Forward and Reverse Lookup Zones 5.3.2 Standard DNS Zones 5.3.3 Active Directory Integrated Zones 5.3.4 Creating a New Zone 5.3.5 Configuring Zone Properties Total Time 1:29 4:21 6:46 8:03 4:55 25:34 Lab/Activity Create an Active Directory-integrated Zone Convert a Zone to Active Directory-integrated Number of Exam Questions 4 questions Total Time About 40 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 5.4: DNS Records Summary This section discusses using DNS records. Details covered include: Common DNS database resource records: o SOA (Start of Authority) o NS (name server) o A (host address) o AAAA (quad-A) o PTR (pointer) o CNAME (canonical name) o MX (Mail Exchanger) o SRV (service locator) o WINS and WINS-R resource records o SPF (Sender Policy Framework) Students will learn how to: Create A records and associated PTR records for specified hosts. Create a CNAME record to be used as an alias to redirect requests. Server Pro Exam Objectives: 4.0 DNS o Create DNS Records Create a Zone and Add Records Create A and CNAME Records 70-410 Exam Objectives: 403 Deploy and configure DNS service This objective may include but is not limited to: o Create A and PTR resource records 501 Install domain controllers This objective may include but is not limited to: o Resolve DNS SRV record registration issues Lecture Focus Questions: What is the difference between an A and a quad-A record? What situations might warrant using a CNAME record? What type of server does an MX record identify? What is the purpose of PTR records? What does an NS record identify? Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Video/Demo 5.4.1 DNS Record Types 5.4.2 Creating Common Records Total Time 4:28 3:45 8:13 Lab/Activity Create a Zone and Add Records Create CNAME Records Number of Exam Questions 8 questions Total Time About 30 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 5.5: DNS Server Properties Summary In this section students will explore using DNS Manager to configure the following DNS server properties: Interfaces Forwarders Root Hints Debug Logging Event Logging Monitoring Security Advanced Students will learn how to: Configure DNS server properties in DNS Manager. Server Pro Exam Objectives: 4.0 DNS o Manage DNS Configuration 70-410 Exam Objectives: 403 Deploy and configure DNS service Lecture Focus Questions: When should you activate debug logging? Where would you enable scavenging of stale records on the system? What is the difference between a simple query and a recursive query against the DNS server? What type of DNS servers are allowed when the Enable BIND secondaries option is checked? Which advanced DNS option is used to verify that the DNS record was not modified in transit? Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Video/Demo Time 5.5.1 DNS Server Properties 4:22 5.5.2 Configuring DNS Server Properties 6:01 Total 10:23 Number of Exam Questions 10 questions Total Time About 25 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 5.6: DNS Troubleshooting Summary In this section students will learn about the tools to troubleshoot DNS. Ping NSLookup IPConfig Students will learn how to: Use Ping and NSLookup to troubleshoot DNS. Use IPConfig to manage the contents of the DNS cache. Server Pro Exam Objectives: 4.0 DNS o Create DNS Records Troubleshoot Name Resolution 70-410 Exam Objectives: 403 Deploy and configure DNS service This objective may include but is not limited to: o Manage DNS cache Lecture Focus Questions: What does it mean when an DNS server reports that a hostname could not be found? When troubleshooting with ping, how can you determine if the problem is with the DNS server or with your client? What tool can you use to view specific records on the DNS server? How do you clear the DNS cache? Video/Demo 5.6.1 DNS Troubleshooting 5.6.2 Using Ping and NSLookup 5.6.3 Clearing DNS Cache Total Time 3:22 4:49 3:29 11:40 Number of Exam Questions 4 questions Total Time About 20 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 6.1: File Access Summary This section discusses file and share access. Details covered include: NTFS permissions Shared folder permissions Permissions for folders and files: o Read o Write o List Folder Contents o Read & Execute o Modify o Full Control Concepts of setting up or managing NTFS permissions: o Ownership o Explicit vs inherited permissions o Copying or moving files o Using icacls Special permissions Best practices for permissions NTFS quotas Students will learn how to: Configure NTFS permissions. Remove inherited permissions. Enable quota restrictions. Create a quota entry. Modify quota limits. Server Pro Exam Objectives: 5.0 File and Print Services o Manage NTFS Permissions Configure NTFS Permissions Configure Inherited Permissions o Manage Combined NTFS and Share Permissions o Configure Quotas Manage Quota Restrictions Create Quota Entries Configure Quota Limits Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. 70-410 Exam Objectives: 201 Configure file and share access This objective may include but is not limited to: o Create and configure shares o Configure share permissions o Configure offline files o Configure NTFS permissions o Configure NTFS quotas Lecture Focus Questions: How are NTFS permissions used to control access to file and folders? Why should you assign permissions to groups rather than user? How do logged on users get updated permissions? How would you determine the effective permissions when both NTFS permissions and share permissions apply? What is the difference between explicit permissions and inherited permissions? What will happen if you move a file that has explicit NTFS permissions to a different folder on the same NTFS partition? if you copy the file to a different folder on the same NTFS partition? What is the difference between a soft quota and a hard quota? Video/Demo 6.1.1 NTFS Permissions 6.1.2 NTFS Quotas 6.1.3 Configuring NTFS Permissions and Quotas Total Time 8:19 1:52 11:57 22:08 Lab/Activity Configure NTFS Permissions Remove Inherited Permissions Enable Quota Restrictions Create a Quota Entry Modify Quota Limits Number of Exam Questions 12 questions Total Time About 65 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 6.2: Access-based Enumeration (ABE) and Volume Shadow Copy (VSS) Summary This section discusses Access-based Enumeration (ABE) and Volume Shadow Copy (VSS). Details covered include: The role of Access-based Enumeration (ABE) Differences in implementing ABE in WS2008 and Server 2012 Volume Shadow Copy Service (VSS) Implementing shadow copies: o Scheduling o Storing o Recovering o NTFS Permissions o VSSAdmin Students will learn how to: Configure ABE. Enable shadow copies on a volume. Configure shadow copy settings, including storage location, size, and schedule. Create snapshots. Save, copy, or restore previous versions of files. Server Pro Exam Objectives: 5.0 File and Print Services o Configure Volume Shadow Copy Service (VSS) Enable and Configure Shadow Copies Restore Previous Versions of Files and Folders 70-410 Exam Objectives: 201 Configure file and share access This objective may include but is not limited to: o Configure access-based enumeration (ABE) o Configure Volume Shadow Copy Service (VSS) Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Lecture Focus Questions: How does using access-based enumeration on shared folders modify what users can see? In Windows Server 2008 you used the Share and Storage Management utility to enable ABE. Which tool will you use in Windows Server 2012 to enable ABE? How should client work patterns affect your shadow copy schedule? How much disk space do shadow copies take by default? What is the maximum number of shadow copies the system can store? What happens when the system reaches this limit? What happens to NTFS permissions when you restore a file? When you copy a file? Why is it recommended that you place shadow copies on different volumes? Video/Demo Time 6.2.1 Access-based Enumeration (ABE) and Volume Shadow Copy (VSS) 5:07 6.2.2 Configuring ABE and VSS 4:47 Total 9:54 Lab/Activity Enable Shadow Copies Restore Previous Version 1 Restore Previous Version 2 Number of Exam Questions 5 questions Total Time About 35 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 6.3: Shares Summary This section discusses managing share access. Details covered include: How share permissions work with NTFS permissions to control access Types of file sharing: o Simple File Sharing o Advanced File Sharing Advanced share permissions: o Read o Change o Full control Students will learn how to: Configure and manage shared folders and files. Restrict share access through share permissions and user limits. Enable and disable share caching. Server Pro Exam Objectives: 5.0 File and Print Services o Share Folders and Configure Share Permissions Share Folders Manage Shared Folders Manage Share Caching Configure Share Permissions 70-410 Exam Objectives: 201 Configure file and share access This objective may include but is not limited to: o Create and configure shares o Configure share permissions o Configure NTFS permissions Lecture Focus Questions: What tools are available to create and manage shares? What is the effect of appending $ to a share name? What permissions do you need to share a folder or configure share permissions? Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. What is the difference between the read permission and the change permission? What is the recommended strategy for assigning permissions to a share to provide the required effective permissions? What are the differences and similarities between NTFS permissions and share permissions? Video/Demo 6.3.1 File Shares 6.3.2 Simple File Sharing 6.3.3 Advanced File Sharing Total Time 9:29 2:00 5:09 16:38 Lab/Activity Share a Folder with a Second Name Remove a Shared Folder Enable Share Caching Disable Share Caching Configure Share Permissions Number of Exam Questions 7 questions Total Time About 50 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 6.4: Sharing on Server 2012 Summary This section provides information about using the New Share Wizard which is part of the Server Manager task-based interface. Concepts covered include: Protocols for file shares: o Server Message Block (SMB) o Network Files System (NFS) Options available in the New Share Wizard: o SMB Share – Quick o SMB Share – Advanced o SMB Share – Applications o NFS Share –Quick o NFS Share – Advanced Additional settings after selecting the location for the share and naming it: o Enable access-based enumeration o Enable continuous availability o Allow caching of share o Encrypt data access Features of Work Folders Elements Work Folders does not support Requirements to be met to use Work Folders: o Server o Clients Facts about implementing Work Folders: o On the server o On the client Students will learn how to: Create shares on Windows Server 2012 using Server Manager. Server Pro Exam Objectives: 5.0 File and Print Services o Share Folders and Configure Share Permissions Share Folders Manage Shared Folders Manage Share Caching Configure Share Permissions Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. 70-410 Exam Objectives: 201 Configure file and share access This objective may include but is not limited to: o Create and configure shares o Configure share permissions o Configure offline files Lecture Focus Questions: Which type of file systems use the Server Message Block (SMB) protocol for file shares? When is the Network Files System (NFS) protocol used instead of the SMB protocol? How does access-based enumeration work with NTFS permissions to restrict access to files and folders in shared folders? How would you make shares available to offline users? What feature must you have installed to use the SMB - Share Advanced option to create a share? Video/Demo 6.4.1 Sharing on Server 2012 6.4.3 Work Folders 6.4.4 Configuring Work Folders Total Time 4:16 19:01 10:27 33:44 Number of Exam Questions 10 questions Total Time About 50 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 6.5: Effective Permissions Summary This section examines how to identify a user’s effective permissions for a specific folder. Details discussed include: Effective permissions are the sum of all permissions from the following sources: o Explicit Assignment o Group Membership o Inheritance Inherited permissions Effective permissions Example scenarios of combined share and NTFS permissions Suggestions to plan NTFS permissions Students will learn how to: Configure combined NTFS and share permissions. Server Pro Exam Objectives: 5.0 File and Print Services o Manage Combined NTFS and Share Permissions 70-410 Exam Objectives: 201 Configure file and share access This objective may include but is not limited to: o Configure share permissions o Configure NTFS permissions Lecture Focus Questions: What is the role of the access control list (ACL)? What strategy can you use to combine and manage NTFS and share permissions? What are the sources of permissions that are added together to create effective permissions? Video/Demo 6.5.1 Effective Permissions Time 5:19 Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Lab/Activity Configure NTFS and Share Permissions 1 Configure NTFS and Share Permissions 2 Number of Exam Questions 14 questions Total Time About 35 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 7.1: Print Servers Summary This section provides information about print servers. Details include: Definitions for print and document services: o Print server o Printer o Print device o Print driver o Print queue o Printer port Services of the Print and Document Services role: o Print Server o LPD Service o Internet Printing o Distributed Scan Server Print device properties useful to control print jobs: o General o Sharing o Ports o Advanced o Security Students will learn how to: Configure printer pooling. Restrict printer access. Server Pro Exam Objectives: 5.0 File and Print Services o Manage Printing Create, Share and Manage a Printer Configure Printer Pooling Restrict Printer Access 70-410 Exam Objectives: 202 Configure print and document services This objective may include but is not limited to: o Configure drivers o Configure printer pooling o Configure print priorities o Configure printer permissions Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Lecture Focus Questions: What is the difference between a print device and a printer? When would you add the LPD service when configuring the Print Services role? Under which physical printing configurations would you choose a local printer when adding a printer? When would you choose a network printer? Under which circumstances would you configure a printer to use multiple print devices? When would you configure multiple printers for a single print device? What services are included in the Print and Document Services role? How would you ensure important print jobs will automatically be printed before any other print jobs? How can you use printer permissions to designate a user as a print job administrator? Video/Demo 7.1.1 Printers and the Print Server Role 7.1.2 Adding a Local Printer 7.1.3 Printer Properties 7.1.4 Configuring Printer Properties Total Time 1:44 4:15 5:46 7:52 19:37 Lab/Activity Create and Share a Printer Number of Exam Questions 4 questions Total Time About 30 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 7.2: Print Management Summary In this section students will learn about using Print Management, a utility for managing print servers. Details include: When printers are detected, Print Management automatically: o Installs drivers o Establishes the queues o Shares the printers Features of Print Management: o Custom Filters o Printer permissions o Printer pooling o Multiple printer objects o List in Active Directory o Deploy with Group Policy o Export/import printers o Manage print drivers o Manage documents in the print queue o Location-aware printing o Print driver isolation o Client-Side Rendering (CSR) o Easy Print driver Configuration choices for different types of printer Students will learn how to: Configure printer pooling. Manage printer drivers. Configure printer filters. Restrict print access. Use Group Policy to deploy printers to computer and user accounts. Server Pro Exam Objectives: 5.0 File and Print Services o Manage Printing Configure Printer Pooling Restrict Printer Access Deploy Printers with Group Policy Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. 70-410 Exam Objectives: 202 Configure print and document services This objective may include but is not limited to: o Configure the Easy Print print driver o Configure Enterprise Print Management o Configure drivers o Configure printer pooling o Configure print priorities o Configure printer permissions Lecture Focus Questions: How do clients obtain the correct driver for shared printers? How can you set up a filter to notify you when a printer is low on toner? When would you choose to isolate a print driver? What is the advantage of location-aware printing? What is the difference between listing a printer in Active Directory and deploying a printer with Group Policy? Video/Demo Time 7.2.1 Print Management 7.2.2 Using Print Management 3:09 5:07 Total 8:16 Lab/Activity Configure Printer Pooling Restrict Printer Access Deploy Printers with Group Policy Number of Exam Questions 15 questions Total Time About 45 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 8.1: Group Policy Foundation Summary This section discusses the basics of using Group Policies. Concepts covered include: Common GPO configuration settings: o Account Policies o Local Polices/Audit Policy o Local Policies/User Rights Assignment o Local Policies/Security Options o Registry o File System o Software Restriction Policies o Administrative Templates o Starter Group Policy Objects Tasks for managing GPOs: o Creating local GPOs o Assigning GPO permissions o Linking GPOs o Using Administrative Templates o Using a central store GPO categories: o Computer Configuration o User Configuration Students will learn how to: Create and link GPOs to appropriate objects. Create a starter GPO. Server Pro Exam Objectives: 6.0 Group Policy o Manage Group Policy Objects (GPOs) Create and Link a GPO Create a Starter GPO Modify GPO Links 70-410 Exam Objectives: 601 Create Group Policy objects (GPOs) This objective may include but is not limited to: o Manage starter GPOs o Configure GPO links Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. o Configure multiple local group policies Lecture Focus Questions: How does inheritance affect Group Policy settings? If a setting is configured in a GPO linked to the domain and a GPO linked to an OU, which setting will be in effect? What is the difference between using a starter GPO and copying an existing GPO? Video/Demo 8.1.1 Local Polices 8.1.2 Configuring Local Policies 8.1.3 Group Policy Processing 8.1.4 Linking Group Policy Objects Total Time 3:16 4:43 7:27 8:09 23:35 Lab/Activity Create and Link a GPO Create a Starter GPO Number of Exam Questions 7 questions Total Time About 50 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 8.2: Group Policy Management Summary In this section students will learn about Group Policy Management. Concepts covered include: Considerations when working with Group Policy settings Scoping methods: o Block Inheritance o Enforced o Security group filtering o Windows Management Interface (WMI) filtering o Loopback Processing Using Group Policy Management to manage the application of the GPO How scoping affects the application of the GPO Students will learn how to: Centrally manage administrative templates using the central store. Configure the scope of Group Policy objects. Server Pro Exam Objectives: 6.0 Group Policy o Manage Group Policy Objects (GPOs) Modify GPO Links 70-410 Exam Objectives: 601 Create Group Policy objects (GPOs) This objective may include but is not limited to: o Configure a Central Store o Configure security filtering Lecture Focus Questions: What are the advantages of the .admx file format? What is the Administrative Template central store? What advantages do you gain by enabling the central store? How is the Block Inheritance setting affected by the No Override setting? How does loopback processing affect computer settings? Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Video/Demo 8.2.1 Central Stores 8.2.2 Creating a Central Store 8.2.3 Group Policy Scope 8.2.4 Configuring Group Policy Scope Total Time 5:48 4:52 11:39 12:08 34:27 Number of Exam Questions 3 questions Total Time About 40 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 8.3: Password Policies Summary In this section students will learn about using password policies. Details covered include: Methods of setting password policies: o Account policies o Granular password policy Strategies to protect against password attacks: o Educate users o Protect access to the password file o Salt the has o Implement two-factor authentication Password policies Students will learn how to: Configure a password policy and apply it to specific users or groups. Server Pro Exam Objectives: 6.0 Group Policy o Manage Security Policies Configure Account Password Policies Lecture Focus Questions: In what ways can password policies be set up? What strategies should be implemented to protect against password attacks? Which object types can be associated with a granular password policy? What are the characteristics of a strong password? Video/Demo 8.3.1 Password Policies 8.3.2 Configuring Password Policies Total Time 5:19 12:27 17:46 Lab/Activity Configure Account Password Policies Number of Exam Questions 8 questions Total Time About 35 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 8.4: Audit Policies Summary This section discusses using audit policies to enable auditing to record system events. Concepts covered include: An enabled audit policy can audit for: o Success o Failure Basic audit policies configurable through Group Policy: o Account logon o Account management o Directory service access o Logon o Object access o Policy change o Privilege use o Process tracking o System Considerations when configuring auditing Advanced auditing settings Students will learn how to: Use Group Policy to enforce auditing and secure audit logs. Server Pro Exam Objectives: 6.0 Group Policy o Manage Security Policies Configure Audit Policies 70-410 Exam Objectives: 602 Configure security policies This objective may include but is not limited to: o Configure Audit Policy Lecture Focus Questions: When does the account logon auditing generate an event on the system for a local user account? for a domain user account? What is the difference between Account Logon auditing and Logon auditing? Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. What is the difference between auditing for success and auditing for failure? What types of items does object access auditing track access to? How can you use auditing to track changes to Active Directory objects? When would you use process tracking? Video/Demo 8.4.1 Audit Policies 8.4.2 Configuring Audit Policies Total Time 2:17 10:06 12:23 Lab/Activity Configure Audit Policies Number of Exam Questions 13 questions Total Time About 35 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 8.5: User Rights Assignment Summary This section discusses the basics of permissions, rights, and user rights assignment policies. Students will learn how to: Configure user rights to secure network resources. Server Pro Exam Objectives: 6.0 Group Policy o Manage Security Policies Configure User Rights 70-410 Exam Objectives: 502 Create and manage Active Directory users and computers This objective may include but is not limited to: o Configure user rights 602 Configure security policies This objective may include but is not limited to: o Configure User Rights Assignment Lecture Focus Questions: What is the difference between permissions and rights? What tool do you use to configure rights policy settings? By default, what groups have the Allow Log On Locally right? Video/Demo 8.5.1 User Rights 8.5.2 Managing User Rights Total Time 0:58 2:53 3:51 Lab/Activity Configure User Rights Number of Exam Questions 3 questions Total Time About 10 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 8.6: Security Options Summary This section examines using security options to manage the security on the computer. Details include: Important Group Policy security options User Account Control (UAC) account types: o Standard user o Administrator Default behavior of UAC UAC notification level settings: o Always o Notify me only when programs try to make changes to my computer o Notify me only when programs try to make changes to my computer (do not dim the desktop) o Never notify Group Policy settings for each notification level: Students will learn how to: Configure security options. Enforce User Account Control. Server Pro Exam Objectives: 6.0 Group Policy o Manage Security Policies Configure Security Options Enforce User Account Control 70-410 Exam Objectives: 602 Configure security policies This objective may include but is not limited to: o Configure Security Options settings o Configure Security templates o Configure Local Users and Groups o Configure User Account Control (UAC) Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Lecture Focus Questions: What is the best practice for managing Administrator and Guest accounts? How would you prevent network users from accessing resources on an optical disc? How can you standardize security settings across multiple computers on a network? What is the role of the User Account Control (UAC)? What is the difference between prompt for consent and prompt for credentials? When would one or the other be displayed? Video/Demo 8.6.1 Security Options 8.6.2 Configuring Security Options 8.6.5 User Account Control 8.6.6 Configuring User Account Control Total Time 1:01 8:00 5:27 5:29 19:57 Lab/Activity Configure Security Options Enforce User Account Control Number of Exam Questions 5 questions Total Time About 40 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 8.7: Restricted Groups Summary In this section students will learn the about using restricted groups to control membership for groups that require high security. Concepts covered include: Restricted groups definitions: o Members of this group o This group is a member of Considerations when using the Restricted Groups Policy Students will learn how to: Configure restricted groups. Server Pro Exam Objectives: 6.0 Group Policy o Manage Security Policies Configure Restricted Groups 70-410 Exam Objectives: 503 Create and manage Active Directory groups and organizational units (OUs) This objective may include but is not limited to: o Manage group membership using Group Policy Lecture Focus Questions: When is it a good idea to create a Restricted Group Policy? What are the two methods to define a Restricted Group? Which is the preferred method? Why is it a good strategy to test before activating a GPO using a Restricted Group Policy? Video/Demo 8.7.1 Restricted Groups 8.7.2 Managing Groups with Group Policy Total Time 1:46 3:41 5:27 Lab/Activity Configure Restricted Groups Number of Exam Questions 3 questions Total Time About 15 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 8.8: Windows Firewall Policies Summary This section discusses Windows Firewall policies to provide real-time protection to the system. Concepts covered include: Use Group Policy to manage Windows Firewall with Advanced Security: o Profiles o Firewall rules o Connection Security rules o Policy file Students will learn how to: Use the Basic Firewall to allow traffic based on port, protocol, or application. Use the Windows Firewall with Advanced Security to manage custom firewall rules. Use Group Policy to enforce firewall rules. 70-410 Exam Objectives: 604 Configure Windows Firewall This objective may include but is not limited to: o Configure rules for multiple profiles using Group Policy o Configure connection security rules o Configure Windows Firewall to allow or deny applications, scopes, ports, and users o Configure authenticated firewall exceptions o Import and export settings 203 Configure servers for remote management This objective may include but is not limited to: o Configure Windows Firewall Lecture Focus Questions: When should you use the Advanced Firewall instead of the Basic Firewall? When would you configure a custom exception? What does the exception scope do? By default, which type of traffic is allowed through the firewall? What is the benefit of using connection security rules? Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Video/Demo 8.8.1 Inbound and Outbound Rules 8.8.2 Configuring an Inbound Rule 8.8.3 Connection Security Rules 8.8.4 Authenticated Firewall Exceptions Total Time 1:27 7:24 5:57 2:56 17:44 Number of Exam Questions 8 questions Total Time About 30 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 8.9: Application Restriction Policies Summary This section examines using application restriction policies to control the applications that run on the computers in the environment. Concepts covered include: The role of Software Restriction Policies Ways software restriction can be implemented: o Unrestricted o Disallowed o Basic User Software restriction rules conditions: o Hash o Certificate o Network zone o Path Advantages of AppLocker policies AppLocker rule types: o Executable o Windows Installer o Script o Packaged app AppLocker rules have the following conditions: o Publisher o Path o Hash Considerations when using AppLocker Students will learn how to: Configure a software restriction policy for a specific user. Create a path rule for an application. Create a hash rule to create software restrictions. Create an AppLocker executable rule. Server Pro Exam Objectives: 6.0 Group Policy o Configure Application Restriction Policies 70-410 Exam Objectives: Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. 603 Configure application restriction policies This objective may include but is not limited to: o Configure rule enforcement o Configure Applocker rules o Configure Software Restriction Policies Lecture Focus Questions: How are software restriction policies managed? What type of restrictions can be implemented using software restriction policies? How does a hash rule identify one application from another? Does the application have the same hash value after an update is applied? What are the advantages of AppLocker policies over software restriction policies? Which file extensions can an AppLocker script rule be applied to? If software restriction policies and AppLocker are configured on the same object, which takes precedence? Video/Demo 8.9.1 Software Restriction Policies and AppLocker 8.9.2 Configuring Software Restriction Policies 8.9.4 Configuring AppLocker Total Time 6:56 8:19 11:24 26:39 Lab/Activity Configure AppLocker Number of Exam Questions 10 questions Total Time About 50 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 8.10: Group Policy Preferences Summary This section discusses using group policy preferences to configure, deploy, and manage operating system and application settings. Concepts covered include: The role of the following Group Policy preferences: o Drive maps o Environment o Files Folders o Ini Files o Network shares o Registry o Shortcuts o Devices o Folder options o Internet settings o Local users and groups o Network connections o Power options o Printers o Regional options o Scheduled tasks o Services o Start menu Students will learn how to: Configure group policy preferences to centrally manage settings in the user environment. Lecture Focus Questions: How do Group Policy preferences allow you to centrally manage settings on the workstation? How would you apply Group Policy preferences to pre-Windows 7 clients? Which Group Policy preferences would be the most useful for typical networked Windows systems? Video/Demo 8.10.1 Group Policy Preferences 8.10.2 Configuring Group Policy Preferences Total Number of Exam Questions Time 2:50 3:55 6:45 3 questions Total Time About 10 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 9.1: IPv4 Addressing Summary This section discusses using IPv4 addressing to deliver packets to and from clients on a network. Details include: Rules for using IPv4 IPv4 concepts: o Host o IP Address o Network address o Subnet mask o Address Class o Default subnet mask o Broadcast address o Default gateway IP Address Structure Subnet Mask Default address classes Options for assign IPv4 addresses and other IPv4 configuration values: o Dynamic Host Configuration Protocol (DHCP) o Automatic Private IPv4 Addressing (APIPA) o Static (manual) assignment o Alternate IPv4 configuration The role of a Network Address Translation (NAT) router Students will learn how to: Configure static IPv4 settings. Convert an IPv4 address from binary to its decimal equivalent. Server Pro Exam Objectives: 7.0 Networking o Configure Basic Network Settings Configure IPv4 Settings 70-410 Exam Objectives: 401 Configure IPv4 and IPv6 addressing This objective may include but is not limited to: o Configure IP address options Lecture Focus Questions: Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. What is the format of an IPv4 address? What is the purpose of a subnet mask? What is the default address class of the IP address 132.11.166.5? What is the decimal equivalent of the IP address 132.11.166.5? Video/Demo 9.1.1 IPv4 Basics 9.1.2 Binary Numbers 9.1.3 IPv4 Classes 9.1.4 Configuring IPv4 Total Time 14:16 10:20 11:00 5:14 40:50 Lab/Activity Configure IP Settings Number of Exam Questions 3 questions Total Time About 50 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 9.2: IPv4 Custom Addressing Summary This section provides information about IPv4 custom addressing concepts. Details covered include: IPv4 custom addressing concepts: o Subnetting o Supernetting o Classless Addressing o ANDing Exponent values for powers of 2 Common binary and decimal values used in subnet masks Subnetting Calculation to determine if workstations are on the same network Students will learn how to: Given a network address and custom mask, identify valid subnet addresses. Given a scenario with the desired number of hosts, choose a subnet address and mask. Given a network address and the subnet mask, identify valid host addresses on that subnet. Server Pro Exam Objectives: 7.0 Networking o Configure Network Settings for Multiple Subnets Use subnetting to split address ranges Use supernetting to combine address ranges Configure networking for multiple subnets 70-410 Exam Objectives: 401 Configure IPv4 and IPv6 addressing This objective may include but is not limited to: o Configure IP address options o Configure subnetting o Configure supernetting Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Lecture Focus Questions: What does a subnet mask identify? What is the relationship between CIDR notation and the subnet mask? How is a supernet different from a subnet? What are the first and last addresses in a range used for? What is the decimal value for a /27 mask? How many approximate and actual hosts can you have when using a mask value of /23? Given IP addresses and subnet masks, how do you determine if two workstations are on the same subnet? Video/Demo 9.2.1 CIDR and Custom ANDing Basics 9.2.2 Subnetting 9.2.3 Supernetting Total Time 12:50 12:51 4:50 30:31 Number of Exam Questions 8 questions Total Time About 40 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 9.3: IPv6 Addressing Summary This section discusses transitioning to IPv6 addressing. Details include: IPv6 follows the same basic rules as IPv4 Components of the IPv6 address structure: o Format o Leading zeros o Prefix and interface ID Comparison of IPv6 address types and IPv4 address types Strategies for deploying Ipv6: o Dual stack o Tunneling Manually configured tunnel Intra-site Automatic Tunnel Addressing Protocol (ISATAP) 6-to-4 tunneling Teredo tunneling o PortProxy o IPv4 Compatible Address o IPv4 Mapped Address o IPv6 to IPv4 Address Students will learn how to: Configure IPv6 settings. Server Pro Exam Objectives: 7.0 Networking o Configure Basic Network Settings Configure IPv6 Settings o Configure Network Settings for Multiple Subnets Configure Networking for Multiple Subnets 70-410 Exam Objectives: 401 Configure IPv4 and IPv6 addressing This objective may include but is not limited to: o Configure interoperability between IPv4 and IPv6 o Configure ISATAP o Configure Teredo Lecture Focus Questions: Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. How does IPv6 support differ on various Microsoft operating systems? What limitations are associated with ISATAP in an IPv6 implementation? Which IPv6 tunneling methods work through NAT? When should you implement Teredo? When is 6-to-4 tunneling automatically configured? What technology allows an IPv4-only host to communicate with an IPv6only host? Video/Demo 9.3.1 IPv6 Basics 9.3.2 Configuring IPv6 9.3.5 ISATAP and Teredo Total Time 10:34 2:16 5:26 18:16 Lab/Activity Configure IPv6 Number of Exam Questions 10 questions Total Time About 40 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 10.1: DHCP Basics Summary In this section students will explore the basics of using Dynamic Host Configuration Protocol (DHCP) to centralize management of IP assignment. Details about the following concepts will be covered: Methods clients use to obtain an address from a DHCP server: o DHCP Discover (D) o DHCP Offer (O) o DHCP Request (R) o DHCP ACK (A) DHCP authorization: o Authorization requirements o Authorization verification Configuring a DHCP Server Scope DHCP options: o Server options o Scope options o Class options o Client options DHCP console context-sensitive icons reflect DHCP server status Students will learn how to: Install and authorize a DHCP server. Create and activate scopes. Server Pro Exam Objectives: 8.0 DHCP o Installation and Authorization Install the DHCP Role Authorize DHCP Servers o Manage DHCP Scopes, Exclusions, and Reservations Create and Configure Scopes 70-410 Exam Objectives: 402. Deploy and configure Dynamic Host Configuration Protocol (DHCP) service This objective may include but is not limited to: o Create and configure scopes o Configure DHCP options Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. o Authorize DHCP server Lecture Focus Questions: What are the steps a client uses to acquire an address from a DHCP server? When must you authorize a DHCP server? What permissions do you need to authorize a DHCP server? Why does a DHCP server shut down if it's address is not found in Active Directory? What does this protect against? How can you change the subnet on a scope? Video/Demo Time 10.1.1 DHCP Overview 5:06 10.1.2 DHCP Scopes and Options 3:29 10.1.3 Installing DHCP and Creating a Scope 14:23 Total 22:58 Lab/Activity Install and Configure a DHCP Configure DHCP Options Number of Exam Questions 5 questions Total Time About 40 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 10.2: DHCP Exclusions and Reservations Summary This section discusses DHCP exclusions, reservations, and filters to control DHCP IP address assignment. Students will learn how to: Configure exclusion ranges and client reservations. Server Pro Exam Objectives: 8.0 DHCP Manage DHCP Scopes, Exclusions, and Reservations o Create and Configure Scopes o Create Exclusion Ranges o Create Client Reservations 70-410 Exam Objectives: 402. Deploy and configure Dynamic Host Configuration Protocol (DHCP) service This objective may include but is not limited to: o Create and configure scopes o Configure a DHCP reservation o Configure DHCP options o Authorize DHCP server Lecture Focus Questions: How are reservations different from exclusions? What are the two ways to exclude IP addresses from a scope? What information is necessary to configure a client reservation? How are filters used to identify which computers can be clients of the DHCP server? Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Video/Demo 10.2.1 DHCP Exclusions, Reservations, and Filters 10.2.2 Creating a DHCP Exclusion, Reservations, and Filter Total Time 4:43 5:23 10:06 Lab/Activity Create Exclusion Ranges Create Client Reservations Number of Exam Questions 3 questions Total Time About 25 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 10.3: DHCP Centralization Summary This section covers DHCP centralization. Details include: Administrative features that allow a DHCP server to support multiple scopes: o Superscope o Split scope Options for a DHCP server to service a subnet separated with a router: o 1542 compliant router o DHCP relay agent DHCP failover Students will learn how to: Configure a DHCP Relay Agent. Server Pro Exam Objectives: 8.0 DHCP o Configure DHCP Options Configure Server Options Configure Scope Options o Implement DHCP Centralization Configure a DHCP Relay Agent Add a DHCP Server on Another Subnet 70-410 Exam Objectives: 402. Deploy and configure Dynamic Host Configuration Protocol (DHCP) service This objective may include but is not limited to: o Configure client and server for PXE boot o Configure DHCP relay agent o Authorize DHCP server Lecture Focus Questions: When might you choose to create super scopes? What type of a system is multinet when discussing super scope? What are the steps to create a split scope? What options are available for a DHCP server to service a subnet separated with a router? Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Video/Demo 10.3.1 DHCP Centralization 10.3.2 Creating a Split Scope Total Time 9:31 8:42 18:13 Lab/Activity Configure a DHCP Relay Agent Add a DHCP Server on Another Subnet Number of Exam Questions 7 questions Total Time About 40 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Section 10.4: DHCP Troubleshooting Summary In this section students will learn about troubleshooting DHCP. Details include: Methods by which hosts obtain IP addresses in the event of a DHCP failure: o Automatic Private IPv4 Addressing (APIPA) o Alternate IPv4 configuration Statistics: o DCHP Discovers are not increasing o If Discovers are increasing, but Offers are static o If Discovers and Offers are increasing, but Requests are static Students will learn how to: Configure automatic and alternate addressing. Troubleshoot common DHCP issues. Server Pro Exam Objectives: 8.0 DHCP o Implement DHCP Centralization Configure Automatic and Alternate Addressing Lecture Focus Questions: A Windows client system in your network has an IP address of 169.254.0.1. Why was this address assigned? DHCP discoverers are not increasing the DHCP Console. What could be causing this? DHCP discoverers are increasing in the DHCP Console, but all offers are static. What could be causing this? DHCP discoverers and offers are increasing in the DHCP Console, but requests are static. What is causing this? Video/Demo 10.4.1 Automatic Private IP Addressing (APIPA) 10.4.2 Configuring an Alternate Address 10.4.3 DHCP Troubleshooting Total Time 2:19 3:19 3:31 9:09 Lab/Activity Configure Automatic and Alternate Addressing Number of Exam Questions 6 questions Total Time About 20 minutes Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Windows Server Pro: Install and Configure Practice Exams Summary This section provides information to help prepare students to take the Windows Server Pro: Install and Configure Certification exam. Students will have the opportunity of testing their mastery of the concepts presented in this course to reaffirm that they are ready for the certification exam. Students will typically take about 5-10 minutes (depending upon the complexity and their level of knowledge) to complete each simulation question in the following practice exams. There is no time limit on the amount of time a student can take to complete the practice exams for the following domains. Windows Server Pro: Install and Configure Objective 1: Configure Windows Servers (6 simulation questions) Windows Server Pro: Install and Configure Objective 2: Hyper-V (6 simulation question) Windows Server Pro: Install and Configure Objective 3: Active Directory (10 simulation questions) Windows Server Pro: Install and Configure Objective 4: DNS (7 simulation questions) Windows Server Pro: Install and Configure Objective 5: File and Print Services (19 simulation questions) Windows Server Pro: Install and Configure Objective 6: Group Policy (9 simulation questions) Windows Server Pro: Install and Configure Objective 7: Networking and DHCP (9 simulation question) The Windows Server Pro: Install and Configure Certification Practice Exam consists of 15 simulation questions that are randomly selected from the above practice exams. Each time the Certification Practice Exam is accessed different questions may be presented. Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Microsoft 70-410 Practice Exams Summary This section provides information to help prepare students to take the MS 70-410 exam and to register for the exam. Students will have the opportunity of testing their mastery of the concepts presented in this course to reaffirm that they are ready for the certification exam. Students will typically take about 1 minute to complete each question in the following practice exams. There is no time limit on the amount of time a student can take to complete the practice exams for the following domains. Objective 100. Install and Configure Servers (70 questions) Objective 200. Configure Server Roles and Features (69 questions) Objective 300. Configure Hyper-V (35 questions) Objective 400. Deploy and Configure Core Network Services (83 questions) Objective 500. Install and Administer Active Directory (58 questions) Objective 600. Create and Manage Group Policy (61 questions) The Microsoft 70-410 Certification Practice Exam consists of 60 questions that are randomly selected from the above practice exams. Each time the Certification Practice Exam is accessed different questions may be presented. The Certification Practice Exam has a time limit of 2 hours. A passing score of 95% should verify that the student has mastered the concepts and is ready to take the real certification exam. Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Appendix A: Approximate Time for the Course The total time for the LabSim Windows Server Pro: Install and Configure course is approximately 46 hours and 46 minutes. The time is calculated by adding the approximate time for each section which is calculated using the following elements: Video/demo times Approximate time to read the text lesson (the length of each text lesson is taken into consideration) Simulations (5 minutes assigned per simulation) Questions (1 minute per question) The breakdown for this course is as follows: Module Sections Time Total HR:MM 10 25 25 60 1:00 20 35 35 35 50 45 75 50 345 5:45 55 55 60 170 2:50 1.0 Introduction 1.1 Windows as a Server 1.2 Windows Server 2008 R2 Interface Overview 1.3 Windows Server 2012 Interface Overview 2.0 Installation and Configuration 2.1 Installation 2.2 PowerShell 2.3 Server Roles 2.4 Server Core 2.5 Remote and Offline Servers 2.6 NIC Teaming 2.7 Traditional Storage 2.8 Storage Pools 3.0 Hyper-V 3.1 Virtual Machines 3.2 Virtual Machine Storage 3.3 Virtual Networks 4.0 Active Directory 4.1 Active Directory 4.2 Domain Controllers 4.3 Sites 4.4 Organizational Units 20 60 10 30 Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. 4.5 User Accounts 4.6 Bulk User Operations 4.7 Computer Accounts 4.8 Groups 4.9 Rights Delegation 50 45 30 55 20 320 5:20 5.1 Single-label Names 5.2 Name Resolution 5.3 Zone Management 5.4 DNS Records 5.5 DNS Server Properties 5.6 DNS Troubleshooting 25 50 40 30 25 20 190 3:10 35 50 50 35 235 3:55 30 45 75 1:15 50 40 35 35 10 40 15 30 50 10 315 5:15 5.0 DNS 6.0 File and Share Access 6.1 File Access 6.2 Access-based Enumeration (ABE) and Volume Shadow Copy (VSS) 6.3 Shares 6.4 Sharing on Server 2012 6.5 Effective Permissions 65 7.0 Print and Document Services 7.1 Print Servers 7.2 Print Management 8.0 Group Policy 8.1 Group Policy Foundation 8.2 Group Policy Management 8.3 Password Policies 8.4 Audit Policies 8.5 User Rights Assignment 8.6 Security Options 8.7 Restricted Groups 8.8 Windows Firewall Policies 8.9 Application Restriction Policies 8.10 Group Policy Preferences 9.0 Networking 9.1 IPv4 Addressing 9.2 IPv4 Custom Addressing 50 40 Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. 9.3 IPv6 Addressing 40 130 2:10 40 25 40 20 125 2:05 405 6:45 10.0 DHCP 10.1 DHCP Basics 10.2 DHCP Exclusions and Reservations 10.3 DHCP Centralization 10.4 DHCP Troubleshooting Windows Server Pro: Install and Configure Practice Exams Objective 1: Configure Windows Servers (6 simulation questions) Objective 2: Hyper-V (6 Simulation questions) Objective 3: Active Directory (10 simulation questions) Objective 4: DNS (7 simulation questions) Objective 5: File and Print Services (19 simulation questions) Objective 6: Group Policy (9 simulation questions) Objective 7: Networking and DHCP (9 simulation questions) Windows Server Pro: Install and Configure Certification Practice Exam (15 simulation questions) 30 30 50 35 95 45 45 75 Microsoft 70-410 Practice Exams Objective 100: Install and Configure Servers (70 questions) Objective 200: Configure Server Roles and Features (69 questions) Objective 300: Configure Hyper-V (35 questions) 70 69 35 Objective 400: Deploy and Configure Core Network Services (83 questions) 83 Objective 500: Install and Administer Active Directory (58 questions) 58 Objective 600: Create and Manage Group Policy (61 questions) 61 Microsoft 70-410 Certification Practice Exam (60 questions) 60 436 7:16 Total Time 2806 46:46 Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Appendix B: Windows Server Pro: Install and Configure Objectives The Windows Server Pro: Install and Configure certification exam covers the following objectives: # 1.0 Objective Configure Windows Servers Navigate Server Interfaces o Navigate the Windows Server 2008 R2 User Interface o Navigate the Windows Server 2012 User Interface Configure Server Services o Configure Server Services o Configure NIC Teaming Configure Server Storage o Configure Server Volumes o Configure Fault Tolerant Volumes o Create a Mount Point o Create and Mount Virtual Hard Disks (VHDs) o Create a Storage Pool 2.0 Hyper-V Manage Virtual Machines with Hyper-V Manager o Create and Manage Virtual Machines o Create Virtual Hard Disks (VHDs) o Create a Differencing Drives (Parent-Child) o Configure Virtual Networks and Settings 3.0 Active Directory Manage Active Directory o Configure Global Catalog Servers o Create Organizational Units (OUs) o Delegate Administrative Control Create and Manage User and Computer Accounts o Create User Accounts o Manage User Accounts o Configure User Account Restrictions o Create Computer Accounts Create and Manage Groups o Create and Manage Global Groups Module.Section 1.2 1.3 2.1 2.2 2.3 2.4 2.5 2.6 2.7 2.8 3.1 3.2 3.3 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8 4.9 Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. o o o 4.0 Create and Manage Distribution Group Change the Group Scope Implement Recommended Group Strategy DNS Manage DNS Configuration o Configure Search Suffixes o Configure Forwarders o Configure Root Hints Create DNS Zones o Create a Root Zone o Create an Active Directory-integrated Zone o Convert a Zone to Active Directoryintegrated Create DNS Records o Create a Zone and Add Records o Create A and CNAME Records o Troubleshoot Name Resolution 1 5.0 File and Print Services Manage NTFS Permissions o Configure NTFS Permissions o Configure Inherited Permissions Share Folders and Configure Share Permissions o Share Folders o Manage Shared Folders o Manage Share Caching o Configure Share Permissions Manage Combined NTFS and Share Permissions Configure Volume Shadow Copy Service (VSS) o Enable and Configure Shadow Copies o Restore Previous Versions of Files and Folders Configure Quotas o Manage Quota Restrictions o Create Quota Entries o Configure Quota Limits Manage Printing o Create, Share and Manage a Printer o Configure Printer Pooling o Restrict Printer Access o Deploy Printers with Group Policy 5.1 5.2 5.3 5.4 5.5 5.6 6.1 6.2 6.3 6.4 6.5 7.1 7.2 Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. 6.0 Group Policy Manage Group Policy Objects (GPOs) o Create and Link a GPO o Create a Starter GPO o Modify GPO Links Manage Security Policies o Configure Security Options o Configure Account Password Policies o Enforce User Account Control o Configure Audit Policies o Configure User Rights o Configure Restricted Groups Configure Application Restriction Policies 7.0 Networking and DHCP Configure Basic Network Settings o Configure IPv4 Settings o Configure IPv6 Settings Configure Network Settings for Multiple Subnets o Use Subnetting to split address ranges o Use Supernetting to combine address ranges o Configure Networking for Multiple Subnets Installation and Authorization o Install the DHCP Role o Authorize DHCP Servers Manage DHCP Scopes, Exclusions, and Reservations o Create and Configure Scopes o Create Exclusion Ranges o Create Client Reservations Configure DHCP Options o Configure Server Options o Configure Scope Options Implement DHCP Centralization o Configure a DHCP Relay Agent o Add a DHCP Server on Another Subnet o Configure Automatic and Alternate Addressing 8.1 8.2 8.3 8.4 8.5 8.6 8.7 8.9 8.10 9.1 9.2 9.3 10.1 10.2 10.3 10.4 Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Appendix C: 70-410: Installing and Configuring Server 2012 The certification exam measures the students’ ability to install, configure, and manage Windows Server 2012 operating system. Before taking the exam, you should be proficient in the skills listed below: # Objective 100 Install and Configure Servers (17 percent) 101 Install servers This objective may include but is not limited to: Module.Section 2.1 2.3 2.4 Plan for a server installation Plan for server roles Plan for a server upgrade Install Server Core Optimize resource utilization by using Features on Demand Migrate roles from previous versions of Windows Server 102 Configure servers This objective may include but is not limited to: Configure Server Core Delegate administration Add and remove features in offline images Deploy roles on remote servers Convert Server Core to/from full GUI Configure services Configure NIC teaming Install and configure Windows PowerShell Desired State Configuration (DSC) 103 Configure local storage This objective may include but is not limited to: 2.2 2.3 2.4 2.5 2.6 4.4 2.7 2.8 Design storage spaces Configure basic and dynamic disks Configure MBR and GPT disks Manage volumes Create and mount virtual hard disks (VHDs) Configure storage pools and disk pools Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Create storage pools by using disk enclosures 200 Configure Server Roles and Features (16 percent) 201 Configure file and share access This objective may include but is not limited to: Create and configure shares Configure share permissions Configure offline files Configure NTFS permissions Configure access-based enumeration (ABE) Configure Volume Shadow Copy Service (VSS) Configure NTFS quotas Configure and create Work Folders 202 Configure print and document services This objective may include but is not limited to: 2.2 6.1 6.2 6.3 6.4 6.5 7.1 7.2 Configure the Easy Print driver Configure Enterprise Print Management Configure drivers Configure printer pooling Configure print priorities Configure printer permissions 203 Configure servers for remote management This objective may include but is not limited to: 2.4 2.5 8.8 Configure WinRM Configure down-level server management Configure servers for day-to-day management tasks Configure multi-server management Configure Server Core Configure Windows Firewall Manage non-domain joined servers 300 Configure Hyper-V (17 percent) 301 Create and configure virtual machine settings This objective may include but is not limited to: 3.1 Configure dynamic memory Configure smart paging Configure Resource Metering Configure guest integration services Create and configure Generation 1 and 2 virtual Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. machines Configure and use extended session mode 302 Create and configure virtual machine storage This objective may include but is not limited to: 3.2 3.3 6.2 Create VHDs and VHDX Configure differencing drives Modify VHDs Configure pass-through disks Manage snapshots Implement a virtual Fibre Channel adapter Manage checkpoints Configure storage quality of service 303 Create and configure virtual networks This objective may include but is not limited to: 3.3 Implement Hyper-V Network Virtualization Configure Hyper-V virtual switches Optimize network performance Configure MAC addresses Configure network isolation Configure synthetic and legacy virtual network adapters Configure NIC teaming in virtual machines 400 Deploy and Configure Core Network Services (16 percent) 401 Configure IPv4 and IPv6 addressing This objective may include but is not limited to: 9.1 9.2 9.3 Configure IP address options Configure subnetting Configure supernetting Configure interoperability between IPv4 and IPv6 Configure ISATAP Configure Teredo 402 Deploy and configure Dynamic Host Configuration Protocol (DHCP) service This objective may include but is not limited to: 10.1 10.2 10.3 10.4 Create and configure scopes Configure a DHCP reservation Configure DHCP options Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Configure client and server for PXE boot Configure the DHCP Relay Agent Authorize a DHCP server 403 Deploy and configure DNS service This objective may include but is not limited to: Configure Active Directory integration of primary zones Configure forwarders Configure Root Hints Manage the DNS cache Create A and PTR resource records 500 Install and Administer Active Directory (18 percent) 501 Install domain controllers This objective may include but is not limited to: 5.2 5.3 5.4 5.5 5.6 4.2 5.4 Add or remove a domain controller from a domain Upgrade a domain controller Install Active Directory Domain Services (AD DS) on a Server Core installation Install a domain controller from Install from Media (IFM) Resolve DNS SRV record registration issues Configure a global catalog server Deploy Active Directory infrastructure as a service (IaaS) in Windows Azure 502 Create and manage Active Directory users and computers This objective may include but is not limited to: Automate the creation of Active Directory accounts Create, copy, configure, and delete users and computers Configure templates Perform bulk Active Directory operations Configure user rights Perform an offline domain join Manage inactive and disabled accounts 503 Create and manage Active Directory groups and organizational units (OUs) This objective may include but is not limited to: 4.5 4.6 4.7 8.5 4.4 4.8 4.9 8.7 Configure group nesting Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them. Convert groups including security, distribution, universal, domain local, and domain global Manage group membership using Group Policy Enumerate group membership Delegate the creation and management of Active Directory objects Manage default Active Directory containers Create, copy, configure, and delete groups and OUs 600 Create and Manage Group Policy (16 percent) 601 Create Group Policy objects (GPOs) This objective may include but is not limited to: 8.1 8.2 Configure a Central Store Manage starter GPOs Configure GPO links Configure multiple local group policies Configure security filtering 602 Configure security policies This objective may include but is not limited to: Configure User Rights Assignment Configure Security Options settings Configure Security templates Configure Audit Policy Configure Local Users and Groups Configure User Account Control (UAC) 603 Configure application restriction policies This objective may include but is not limited to: 8.3 8.4 8.5 8.6 8.9 Configure rule enforcement Configure AppLocker rules Configure Software Restriction Policies 604 Configure Windows Firewall This objective may include but is not limited to: 8.8 Configure rules for multiple profiles using Group Policy Configure connection security rules Configure Windows Firewall to allow or deny applications, scopes, ports, and users Configure authenticated firewall exceptions Import and export settings Copyright © 2015 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, and Windows are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. (ISC)2 and SSCP are the trademarks of (ISC)2. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them.