Tuesday, May 10, 2016

HOWTO - Prepare for Microsoft Exam 70-410 - Installing and Configuring Windows Server 2012/R2

Hi, if you are preparing for Microsoft Exam 70-410, make sure to prepare yourself a learning road-map.
If you start off without reviewing the 'objective domain' then you will have no idea what to study and how deep to study it.
The server certification track of microsoft consists of three exams, 70-410, 70-411, and 70-412, each with it's own objective domain.

A nice video on the exam 70-410 and it's objective domain can be found on Microsoft Virtual Academy.  It will give you a great understanding of what to study and how deep, make sure to check it out.


Install and configure servers (15-20%)

  • Install servers
    • Plan for a server installation
      • Windows Server 2012 R2 Foundation
        • max 15 users, no CAL's
        • single CPU socket, no limit on cores
        • max 32 Gb Ram
        • no virtualisation rights
      • Windows Server 2012 R2 Essentials
        • max 25 users and 50 devices
        • preconfigured connectivity to cloud-based services
          • Remote Web Access
          • My Server app for Windows/RT/Phone
          • Microsoft Azure Backup integration
          • Office 356 integration
        • no virtualisation rights
      • Windows Server 2012 R2 Standard
        • the entirety of Windows Server
        • max two cpu sockets, no limit on cores
        • two virtual instances included
      • Windows Server 2012 R2 Datacenter
        • the entirety of Windows Server
        • max two cpu sockets, no limit on cores
        • unlimited virtual instances included

      • Windows Server 2012 R2 User Interfaces
        • Server with a Gui
          • windows gui with start screen, server manager, and management console
        • Windows Server Core
          • server without a start screen, explorer, IE and desktop
        • Full Desktop Experience
          • Server with a gui, with desktop experience installed
          • Windows store and apps supported as well

    • Plan for server roles
      • In server manager - install roles and features
      • in powershell - get-windowsfeature, install-windowsfeature
      • grouped as roles with role services and features which do not fit in the roles
      • installing a role installs the framework for further role services
      • Server core only supports a subset of roles
        • AD Certificate Services
        • AD Domain Services
        • AD Lightweight Domain Services
        • AD Right Management Services
        • DHCP Server
        • DNS Server
        • File and Storage Services
        • Hyper-V
        • Print and Document Services
        • Remote Access Services
        • Streaming Media Services
        • Web Server (IIS)
        • Windows Server Update Services
    • Plan for a server upgrade
    • install Server Core, optimise resource utilisation by using Features on Demand, migrate roles from previous versions of Windows Server
    • Looking at the tools available, and knowing them
    • configuring services needs to be known well
  • Configure servers
    • Configure Server Core, delegate administration, add and remove features in offline images, deploy roles on remote servers, convert Server Core to/from full GUI, configure services, configure NIC teaming, install and configure Windows PowerShell Desired State Configuration (DSC)
    • know which features exists and what they do https://technet.microsoft.com/library/hh831669
  • Configure local storage
    • Design storage spaces, configure basic and dynamic disks, configure master boot record (MBR) and GUID partition table (GPT) disks, manage volumes, create and mount virtual hard disks (VHDs), configure storage pools and disk pools, create storage pools by using disk enclosures
    • know the differences between mbr and gpt disks

Configure server roles and features (15-20%)

  • Configure file and share access
    • Create and configure shares, configure share permissions, configure offline files, configure NTFS permissions, configure access-based enumeration (ABE), configure Volume Shadow Copy Service (VSS), configure NTFS quotas, create and configure Work Folders
    • deep knowledge about ntfs and share permissions required
    • know volume shadow copy services
  • Configure print and document services
    • Configure the Easy Print print driver, configure Enterprise Print Management, configure drivers, configure printer pooling, configure print priorities, configure printer permissions
    • know what a printer pool is
    • know difference between printer and print device
    • print priorities
    • shared print queues
  • Configure servers for remote management
    • Configure WinRM, configure down-level server management, configure servers for day-to-day management tasks, configure multi-server management, configure Server Core, configure Windows Firewall, manage non-domain joined servers
    • quickconfig switch, group policy

Configure Hyper-V (15-20%)

  • Create and configure virtual machine settings
    • Configure dynamic memory, configure smart paging, configure Resource Metering, configure guest integration services, create and configure Generation 1 and 2 virtual machines, configure and use enhanced session mode, configure RemoteFX
  • Create and configure virtual machine storage
    • Create VHDs and VHDX, configure differencing drives, modify VHDs, configure pass-through disks, manage checkpoints, implement a virtual Fibre Channel adapter, configure storage Quality of Service
  • Create and configure virtual networks
    • Configure Hyper-V virtual switches, optimise network performance, configure MAC addresses; configure network isolation, configure synthetic and legacy virtual network adapters, configure NIC teaming in virtual machines
    • know the differences between switches external internal private
    • new virtual machine
    • virtual switch, create, difference
    • new hard disks, learn the wizards

Deploy and configure core network services (15-20%)

Real world experience is a must-have for this topic

  • Configure IPv4 and IPv6 addressing
    • Configure IP address options, configure IPv4 or IPv6 subnetting, configure supernetting, configure interoperability between IPv4 and IPv6, configure Intra-site Automatic Tunnel Addressing Protocol (ISATAP), configure Teredo
    • know ipv4/6 interoperability tools and differences

  • Deploy and configure Dynamic Host Configuration Protocol (DHCP) service
    • Create and configure scopes, configure a DHCP reservation, configure DHCP options, configure client and server for PXE boot, configure DHCP relay agent, authorise DHCP server
  • Deploy and configure DNS service
    • Configure Active Directory integration of primary zones, configure forwarders, configure Root Hints, manage DNS cache, create A and PTR resource records
Follow the IPV6 bootcamp

Install and administer Active Directory (15-20%)

Limited to below topics but deeply integrated

  • Install domain controllers
    • Add or remove a domain controller from a domain, upgrade a domain controller, install Active Directory Domain Services (AD DS) on a Server Core installation, install a domain controller from Install from Media (IFM), resolve DNS SRV record registration issues, configure a global catalogue server, deploy Active Directory infrastructure as a service (IaaS) in Microsoft Azure
  • Create and manage Active Directory users and computers
    • Automate the creation of Active Directory accounts; create, copy, configure and delete users and computers; configure templates; perform bulk Active Directory operations; configure user rights; offline domain join; manage inactive and disabled accounts
  • Create and manage Active Directory groups and organisational units (OUs)
    • Configure group nesting; convert groups, including security, distribution, universal, domain local and domain global; manage group membership using Group Policy; enumerate group membership; delegate the creation and management of Active Directory objects; manage default Active Directory containers; create, copy, configure and delete groups and OUs

Create and manage Group Policy (15-20%)

  • Create Group Policy objects (GPOs)
    • Configure a Central Store, manage starter GPOs, configure GPO links, configure multiple local Group Policies
  • Configure security policies
    • Configure User Rights Assignment, configure Security Options settings. Configure Security templates, configure Audit Policy, configure Local Users and Groups, configure User Account Control (UAC)
  • Configure application restriction policies
    • Configure rule enforcement, configure AppLocker rules, configure Software Restriction Policies
  • Configure Windows Firewall
    • Configure rules for multiple profiles using Group Policy; configure connection security rules; configure Windows Firewall to allow or deny applications, scopes, ports, and users; configure authenticated firewall exceptions; import and export settings

No comments:

Post a Comment