70-411: Administering Windows Server 2012: Target Audience

70-411:
Administering Windows Server 2012
Target Audience
This exam is part two of a series of three exams that test the skills and knowledge necessary to
administer a Windows Server 2012 infrastructure in an enterprise environment. Passing this exam
validates a candidate’s ability to administer the tasks required to maintain a Windows Server 2012
infrastructure, such as user and group management, network access, and data security. Passing this
exam along with the other two exams confirms that a candidate has the skills and knowledge necessary
for implementing, managing, maintaining, and provisioning services and infrastructure in a Windows
Server 2012 environment.
Objective Domain
Note: This document shows tracked changes that are effective as of April 19, 2018.
Deploy, Manage, and Maintain Servers
Deploy and manage server images

Install the Windows Deployment Services (WDS) role; configure and manage boot, install,
and discover images; update images with patches, hotfixes, and drivers; install features for
offline images; configure driver groups and packages
Implement patch management

Install and configure the Windows Server Update Services (WSUS) role; configure group
policies for updates; configure client-side targeting; configure WSUS synchronization;
configure WSUS groups; manage patch management in mixed environments
Monitor servers
Configure Data Collector Sets (DCS); configure alerts; monitor real-time performance;
monitor virtual machines (VMs); monitor events; configure event subscriptions; configure
network monitoring; schedule performance monitoring
Configure File and Print Services
Configure Distributed File System (DFS)

Install and configure DFS namespaces; configure DFS Replication Targets; configure
Replication Scheduling; configure Remote Differential Compression settings; configure
staging; configure fault tolerance; clone a DFS database; recover DFS databases; optimize
DFS replication
Configure File Server Resource Manager (FSRM)

Install the FSRM role service; configure quotas; configure file screens; configure reports;
configure file management tasks
Configure file and disk encryption

Configure Bitlocker encryption; configure the Network Unlock feature; configure Bitlocker
policies; configure the EFS recovery agent; manage EFS and Bitlocker certificates including
backup and restore
Configure advanced audit policies

Implement auditing using Group Policy and AuditPol.exe; create expression-based audit
policies; create removable device audit policies
Configure Network Services and Access
Configure DNS zones

Configure primary and secondary zones; configure stub zones; configure conditional
forwards; configure zone and conditional forward storage in Active Directory; configure
zone delegation; configure zone transfer settings; configure notify settings
Configure DNS records

Create and configure DNS Resource Records (RR) including A, AAAA, PTR, SOA, NS, SRV,
CNAME, and MX records; configure zone scavenging; configure record options including
Time To Live (TTL) and weight; configure round robin; configure secure dynamic updates
Configure VPN and routing

Install and configure the Remote Access role; implement Network Address Translation
(NAT); configure VPN settings; configure remote dial-in settings for users; configure routing;
configure Web Application proxy in passthrough mode
Configure DirectAccess
Implement server requirements; implement client configuration; configure DNS for
DirectAccess; configure certificates for DirectAccess
Configure a Network Policy Server Infrastructure
Configure Network Policy Server (NPS)

Configure a RADIUS server including RADIUS proxy; configure RADIUS clients; configure NPS
templates; configure RADIUS accounting; configure certificates
Configure NPS policies

Configure connection request policies; configure network policies for VPN clients (multilink
and bandwidth allocation, IP filters, encryption, IP addressing); import and export NPS
policies
Configure Network Access Protection (NAP)

Configure System Health Validators (SHVs); configure health policies; configure NAP
enforcement using DHCP and VPN; configure isolation and remediation of non-compliant
computers using DHCP and VPN; configure NAP client settings
Configure and Manage Active Directory
Configure service authentication

Create and configure Service Accounts; create and configure Group Managed Service
Accounts; configure Kerberos delegation; manage Service Principal Names (SPNs); configure
virtual accounts
Configure Domain Controllers

Transfer and seize operations master roles; install and configure a read-only domain
controller (RODC); configure Domain Controller cloning
Maintain Active Directory

Back up Active Directory and SYSVOL; manage Active Directory offline; optimize an Active
Directory database; clean up metadata; configure Active Directory snapshots; perform
object- and container-level recovery; perform Active Directory restore; configure and
restore objects by using the Active Directory Recycle Bin
Configure account policies

Configure domain and local user password policy settings; configure and apply Password
Settings Objects (PSOs); delegate password settings management; configure account
lockout policy settings; configure Kerberos policy settings
Configure and Manage Group Policy
Configure Group Policy processing

Configure processing order and precedence; configure blocking of inheritance; configure
enforced policies; configure security filtering and WMI filtering; configure loopback
processing; configure and manage slow-link processing and Group Policy caching; configure
client-side extension (CSE) behavior; force Group Policy Update
Configure Group Policy settings
Configure settings including software installation, folder redirection, scripts, and
administrative template settings; import security templates; import custom administrative
template file; configure property filters for administrative templates
Manage Group Policy objects (GPOs)

Back up, import, copy, and restore GPOs; create and configure Migration Table; reset
default GPOs; delegate Group Policy management
Configure Group Policy Preferences (GPP)

Configure GPP settings including printers, network drive mappings, power options, custom
registry settings, Control Panel settings, Internet Explorer settings, file and folder
deployment, and shortcut deployment; configure item-level targeting

70-411: Administering Windows Server 2012: Target Audience

Uploaded by

Copyright:

Available Formats

70-411: Administering Windows Server 2012: Target Audience

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

70-411: Administering Windows Server 2012: Target Audience

Uploaded by

Copyright:

Available Formats

70-411:

Administering Windows Server 2012

Deploy, Manage, and Maintain Servers

Deploy and manage server images

Implement patch management

Configure File and Print Services

Configure Distributed File System (DFS)

Configure File Server Resource Manager (FSRM)

Configure file and disk encryption

Configure advanced audit policies

Configure Network Services and Access

Configure DNS zones

Configure DNS records

Configure VPN and routing

Configure a Network Policy Server Infrastructure

Configure Network Policy Server (NPS)

Configure NPS policies

Configure Network Access Protection (NAP)

Configure and Manage Active Directory

Configure service authentication

Configure Domain Controllers

Maintain Active Directory

Configure account policies

Configure and Manage Group Policy

Configure Group Policy processing

Manage Group Policy objects (GPOs)

Configure Group Policy Preferences (GPP)

You might also like