Exam 70-412 - Configuring Advanced Windows Server 2012 Services
Skills measured
This exam measures your ability to accomplish the technical tasks listed below. The percentages indicate the relative weight of each major topic area on the exam. The higher the percentage, the more questions you are likely to see on that content area on the exam.
Prerequisties:
Microsoft Training20412 - Configuring Advanced Windows Server 2012 Services
Please note that the questions may test on, but will not be limited to, the topics described in the bulleted text.
As of January 2014, this exam includescontent covering Windows Server 2012 R2.
Configure and manage high availability (15–20%)
- Configure Network Load Balancing (NLB)
- Install NLB nodes, configure NLB prerequisites, configure affinity, configure port rules, configure cluster operation mode, upgrade an NLB cluster
- Configure failover clustering
- Configure quorum, configure cluster networking, restore single node or cluster configuration, configure cluster storage, implement Cluster-Aware Updating, upgrade a cluster, configure and optimize clustered shared volumes, configure clusters without network names, configure storage spaces
- Manage failover clustering roles
- Configure role-specific settings, including continuously available shares; configure virtual machine (VM) monitoring; configure failover and preference settings; configure guest clustering
- Manage VM movement
- Perform live migration; perform quick migration; perform storage migration; import, export, and copy VMs; configure VM network health protection; configure drain on shutdown
Preparation resources
- Managing Network Load Balancing clusters
- Setting Network Load Balancing parameters
- Failover cluster deployment guide
Configure file and storage solutions (15–20%)
- Configure advanced file services
- Configure Network File System (NFS) data store, configure BranchCache, configure File Classification Infrastructure (FCI) using File Server Resource Manager (FSRM), configure file access auditing
- Implement Dynamic Access Control (DAC)
- Configure user and device claim types, implement policy changes and staging, perform access-denied remediation, configure file classification, create and configure Central Access rules and policies, create and configure resource properties and lists
- Configure and optimize storage
- Configure iSCSI target and initiator, configure Internet Storage Name server (iSNS), implement thin provisioning and trim, manage server free space using Features on Demand, configure tiered storage
Preparation resources
- Network File System
- File Server Resource Manager
- Dynamic Access Control: Scenario overview
Implement business continuity and disaster recovery (15–20%)
- Configure and manage backups
- Configure Windows Server backups, configure Microsoft Azure backups, configure role-specific backups, manage VSS settings using VSSAdmin
- Recover servers
- Restore from backups, perform a Bare Metal Restore (BMR), recover servers using Windows Recovery Environment (Win RE) and safe mode, configure the Boot Configuration Data (BCD) store
- Configure site-level fault tolerance
- Configure Hyper-V Replica, including Hyper-V Replica Broker and VMs; configure multi-site clustering, including network settings, Quorum, and failover settings; configure Hyper-V Replica extended replication; configure Global Update Manager; recover a multi-site failover cluster
Preparation resources
- Windows Server backup overview
- Windows Recovery Environment (RE) explained
- How to configure bare-metal restore/recovery media
Configure Network Services (15–20%)
- Implement an advanced Dynamic Host Configuration Protocol (DHCP) solution
- Create and configure superscopes and multicast scopes; implement DHCPv6; configure high availability for DHCP, including DHCP failover and split scopes; configure DHCP Name Protection; configure DNS registration
- Implement an advanced DNS solution
- Configure security for DNS, including Domain Name System Security Extensions (DNSSEC), DNS Socket Pool, and cache locking; configure DNS logging; configure delegated administration; configure recursion; configure netmask ordering; configure a GlobalNames zone; analyze zone level statistics
- Deploy and manage IP Address Management (IPAM)
- Provision IPAM manually or by using Group Policy, configure server discovery, create and manage IP blocks and ranges, monitor utilization of IP address space, migrate to IPAM, delegate IPAM administration, manage IPAM collections, configure IPAM database storage
Preparation resources
- Dynamic Host Configuration Protocol (DHCP) overview
- Step-by-step: Demonstrate DNSSEC in a test lab
- Holistic administration of IP address space using Windows Server 2012 IP Address Management
Configure the Active Directory infrastructure (15–20%)
- Configure a forest or a domain
- Implement multi-domain and multi-forest Active Directory environments, including interoperability with previous versions of Active Directory; upgrade existing domains and forests, including environment preparation and functional levels; configure multiple user principal name (UPN) suffixes
- Configure trusts
- Configure external, forest, shortcut, and realm trusts; configure trust authentication; configure SID filtering; configure name suffix routing
- Configure sites
- Configure sites and subnets, create and configure site links, manage site coverage, manage registration of SRV records, move domain controllers between sites
- Manage Active Directory and SYSVOL replication
- Configure replication to Read-Only Domain Controllers (RODCs), configure Password Replication Policy (PRP) for RODC, monitor and manage replication, upgrade SYSVOL replication to Distributed File System Replication (DFSR)
Preparation resources
- Deploy Active Directory Domain Services (AD DS) in your enterprise
- Active Directory domains and trusts
- Introduction to Active Directory replication and topology management using Windows PowerShell (Level 100)
Configure Identity and Access Solutions (15–20%)
- Implement Active Directory Federation Services (AD FS)
- Install AD FS; implement claims-based authentication, including Relying Party Trusts; configure authentication policies; configure Workplace Join; configure multi-factor authentication
- Install and configure Active Directory Certificate Services (AD CS)
- Install an Enterprise Certificate Authority (CA), configure certificate revocation lists (CRL) distribution points, install and configure Online Responder, implement administrative role separation, configure CA backup and recovery
- Manage certificates
- Manage certificate templates; implement and manage certificate deployment, validation, and revocation; manage certificate renewal; manage certificate enrollment and renewal to computers and users using Group Policies; configure and manage key archival and recovery
- Install and configure Active Directory Rights Management Services (AD RMS)
- Install a licensing or certificate AD RMS server, manage AD RMS Service Connection Point (SCP), manage RMS templates, configure Exclusion Policies, back up and restore AD RMS