Microsoft Windows Server 2012 Certification - Exam 70-412

Implement IPv6 addresses with DHCPv6 by configuring stateless or stateful modes, and assign DNS and other scope options on the DHCPv6 server.

Enable DHCP name protection to prevent DNS name squatting by non-Windows hosts. Learn to use dynamic DNS, secure updates, and DHCID records to lock registrations on IPv4 and IPv6 scopes.

Explore the DNS registration enhancements in Windows Server 2012 and how policy-based rules tailor DNS records using conditions like fully qualified domain name and alternate DNS suffix.

Enable and validate DNS security with DNSSEC to protect DNS responses from spoofing; sign zones, share trust anchors, and enforce validation via group policy.

Learn to troubleshoot DNS by checking event logs and health, enabling advanced debugging. Use nslookup, flush DNS, ping, and Dcdiag to verify DNS and Active Directory replication health.

Analyze zone level statistics for Windows Server 2012 DNS using PowerShell and get-dns-server-statistics, retrieving zone query, transfer, and update statistics, and review records, errors, successes, and dynamic updates per zone.

Delegate IPAM management with granular access via IPAM administrator, IPAM user, and MSM roles, integrated with Server Manager, for centralized control within your forest boundary.

Examine the active directory domain services architecture, including read-only domain controllers, password caching limits, and read-only dns and global catalogs, with domain and forest creation via server manager and PowerShell.

Plan and perform active directory upgrades by mixing Windows 2003/2008/2012, use in-place upgrade or deploy 2012 domain controllers, which automates forest and domain prep; migrate operation masters, and decommission servers.

Learn how to use user principal name suffixes in Active Directory to simplify logon access by adding alternative UPNs that match users' emails and domains.

Discover how Active Directory Federation Services extend home credentials for single sign-on across partner organizations using claims, tokens, and trust with SAML standards.

Explain how enterprise CA is automatically trusted by all domain members through Active Directory integration. Show how group policy and certificate templates publish roots and enable enrollment in the domain.

Back up and protect your Active Directory certificate services environment by backing up private keys, the certificate database, system state, and enabling key recovery certificates and archiving.

Explore creating and customizing Active Directory Certificate Services templates across versions, configuring compatibility, security, and cryptography, then issuing certificates via MMC or web portal in an enterprise CA.

Configure group policy to enable certificate auto enrollment for computers and users, ensuring read and enroll permissions, and use global or universal groups; computers automatically enroll and renew certificates.

Explore how rights management services protect data across documents and in transit by enforcing usage rights, while encryption options like encrypted file system and bit locker secure at-rest data.

Back up and restore image servers by safeguarding the key password, exporting the trusted publishing domain, and backing up the configuration, logging, and directory services databases.

Configure dynamic access control in Windows Server 2012 by creating claim types, enabling resource properties, building resource property lists, defining access rules and policies, and deploying to file servers.

Enable and customize the access denied assistance policy to replace generic denials with a tailored email notification for access requests, directing users to contact admins and escalate as needed.

Identify the file service types in Windows Server 2012—block-level storage via iSCSI and Fibre Channel, and file-based access via SMB 3.0; NTFS improvements, ReFS resilience, data deduplication, and storage spaces.

Explore SMB 3.0 in Windows Server 2012 and Windows 8, including highest common dialect negotiation, cluster shared volumes, and multi-path I/O for Hyper-V and SQL workloads.

Learn how branch cache optimizes remote office bandwidth by caching content locally, using either distributed or hosted cache, with per share hashing and server enablement.