Microsoft Windows Server 2012 Certification - Exam 70-412

Explore the dynamic host configuration protocol, detailing how DHCP assigns and renews IP addresses via scopes and leases, with offers, requests, acknowledgments, reservations by MAC address, and DNS registration.

Explore creating advanced dhcp configurations with super scopes and multicast scopes to manage multiple ip scopes as a single administrative unit, and deploy multicast for os deployment and multimedia streaming.

Implement IPv6 addresses with DHCPv6 by configuring stateless or stateful modes, and assign DNS and other scope options on the DHCPv6 server.

Enable DHCP name protection to prevent DNS name squatting by non-Windows hosts. Learn to use dynamic DNS, secure updates, and DHCID records to lock registrations on IPv4 and IPv6 scopes.

Learn how to make DHCP highly available in Windows Server 2012 through clustering, split scopes, and replication. Explore conflict detection, failover, and hot standby options.

Explore the DNS registration enhancements in Windows Server 2012 and how policy-based rules tailor DNS records using conditions like fully qualified domain name and alternate DNS suffix.

Explore the basics of DNS in Windows Server, including name resolution, recursive queries, root hints, caching, and the role of resource records and Active Directory integrated zones.

Enable and validate DNS security with DNSSEC to protect DNS responses from spoofing; sign zones, share trust anchors, and enforce validation via group policy.

Learn how to delegate DNS management in Windows Server by using DNS Admins and Domain Admins, and apply granular permissions at server or zone levels.

Explore advanced dns configuration options, including recursion controls, round robin, net mask ordering, secure cache pollution protection, dns validation, automatic scavenging, and global names for single-label resolution across domains.

Learn to troubleshoot DNS by checking event logs and health, enabling advanced debugging. Use nslookup, flush DNS, ping, and Dcdiag to verify DNS and Active Directory replication health.

Analyze zone level statistics for Windows Server 2012 DNS using PowerShell and get-dns-server-statistics, retrieving zone query, transfer, and update statistics, and review records, errors, successes, and dynamic updates per zone.

Deploy and configure IPAM on Windows Server 2012 using the quickstart wizard, enabling server discovery, group policy provisioning, and centralized management of DNS, DHCP, and domain controllers.

Manage IP address space by defining blocks and ranges, monitor utilization across DHCP servers with replication, and centrally manage DNS records, scopes, and IPv6 ranges from a single console.

Learn to monitor and manage IP address spaces with IPAM by integrating DHCP, pulling lease and scope data, creating reservations, and scheduling periodic updates for consistent administration.

Delegate IPAM management with granular access via IPAM administrator, IPAM user, and MSM roles, integrated with Server Manager, for centralized control within your forest boundary.

Configure IPAM database storage by provisioning the server, choosing Windows internal database or Microsoft SQL Server, and configuring credentials and schema to enable scalability, disaster recovery, and advanced reporting.

Discover Active Directory architecture, domain controllers, and multi-master replication, with DNS integration, forest and domain functional levels, and key roles like schema master and global catalog.

Examine the active directory domain services architecture, including read-only domain controllers, password caching limits, and read-only dns and global catalogs, with domain and forest creation via server manager and PowerShell.

Evaluate when to keep a single Active Directory domain in one forest and when to add domains, trees, or forests to fit geography, administration, and replication needs.

Plan and perform active directory upgrades by mixing Windows 2003/2008/2012, use in-place upgrade or deploy 2012 domain controllers, which automates forest and domain prep; migrate operation masters, and decommission servers.

Learn how to use user principal name suffixes in Active Directory to simplify logon access by adding alternative UPNs that match users' emails and domains.

Explore how trust relationships connect domains within and across forests, including parent-child and tree root trusts, transitive behavior, one-way versus bidirectional trusts, Kerberos referrals, and shortcut paths.

Understand how security identifiers (SIDs) attach to every Active Directory object and how SID filtering prevents non-local seeds from gaining access across trusted domains, using seed history and quarantine features.

Configure Active Directory sites and subnets, optimize replication topology with the knowledge consistency check, and use a least-cost spanning tree and ring within sites to manage cross-site and intra-site replication.

Master advanced Active Directory replication concepts, including site bridges, bridgehead selection, and site-specific replication, and monitor SYSVOL and domain controller replication with dcdiag and replmon.

Discover how Active Directory Federation Services extend home credentials for single sign-on across partner organizations using claims, tokens, and trust with SAML standards.

Install Active Directory Federation Services via server manager on a domain-joined server, configure certificates and a service account, and ensure DNS resolution for remote federations, including conditional forwarders.

Configure a federation service with the federation server configuration wizard, choosing a standalone federation server, managing certificates and endpoints, and establishing trust relationships for single sign-on across business-to-business scenarios.

Active Directory certificate services implement public key infrastructure for securing internal and external communications, using certificates, private/public keys, encryption, digital signatures, certificate templates, and revocation checks in Windows Server 2012.

Explore the foundations of public key infrastructure, including symmetric and asymmetric encryption, and how certificates, root and subordinate certificate authorities, and chains of trust enable secure communication.

Install Active Directory Certificate Services via Server Manager or PowerShell, noting no edition difference between standard and data center. Configure the certificate authority and related roles for issuing certificates.

Install and configure an enterprise certificate authority within Active Directory, choosing root or subordinate roles, using the ca.policy file, and enabling auto enrollment and certificate templates for domain-joined machines.

Explain how enterprise CA is automatically trusted by all domain members through Active Directory integration. Show how group policy and certificate templates publish roots and enable enrollment in the domain.

Back up and protect your Active Directory certificate services environment by backing up private keys, the certificate database, system state, and enabling key recovery certificates and archiving.

Explore creating and customizing Active Directory Certificate Services templates across versions, configuring compatibility, security, and cryptography, then issuing certificates via MMC or web portal in an enterprise CA.

Configure group policy to enable certificate auto enrollment for computers and users, ensuring read and enroll permissions, and use global or universal groups; computers automatically enroll and renew certificates.

Explore how rights management services protect data across documents and in transit by enforcing usage rights, while encryption options like encrypted file system and bit locker secure at-rest data.

Learn to install and deploy rights management services on a dedicated Windows server, publish via a DNS alias, configure a service account, and use SQL Server for production deployments.

Create and manage rights policy templates for rights management services, defining language, group permissions, and expiration rules to control viewing, editing, and exporting of protected data.

Configure RMS protection on data across Exchange Server, SharePoint, and Office applications, and establish an RMS super users group for recovery while ensuring server and database backups.

Enable access to RMS by configuring trusted domains and publishing domains, linking RMS infrastructures, and using PowerShell to import trusted user domains or Windows Live ID in cryptographic mode one.

Back up and restore image servers by safeguarding the key password, exporting the trusted publishing domain, and backing up the configuration, logging, and directory services databases.

Explore NTFS data access capabilities, including global groups, share and file-system permissions, inheritance, and effective access, and learn about moving toward attribute-based access control.

Learn how dynamic access control on Windows Server 2012 uses claims-based authorization to grant access based on user and device attributes, with data classified and governed by rules.

Configure dynamic access control in Windows Server 2012 by creating claim types, enabling resource properties, building resource property lists, defining access rules and policies, and deploying to file servers.

Deploy dynamic access control policies to file servers via group policy and central access policy. Use security filtering to target specific servers and verify enforcement via data classification and confidentiality.

Configure automatic data classification with the file classification infrastructure in Windows Server 2012, create rules for PII like social security numbers and credit cards, and apply rights management and encryption.

Enable and customize the access denied assistance policy to replace generic denials with a tailored email notification for access requests, directing users to contact admins and escalate as needed.

Identify the file service types in Windows Server 2012—block-level storage via iSCSI and Fibre Channel, and file-based access via SMB 3.0; NTFS improvements, ReFS resilience, data deduplication, and storage spaces.

Enable and manage NFS on Windows Server 2012 via server manager, configuring NFS shares with authentication, permissions, and quotas for Unix/Linux clients using NFS version 4.1.

Install and configure iSCSI targets and initiators in Windows Server 2012, create virtual disks, map to targets, and connect clients for block-level storage with NTFS and clustering.

Explore SMB 3.0 in Windows Server 2012 and Windows 8, including highest common dialect negotiation, cluster shared volumes, and multi-path I/O for Hyper-V and SQL workloads.

Explore features on demand to shrink the Windows Server footprint by removing unused components with Get-WindowsFeature and uninstall. Configure sources to pull files from Windows Update or a local source.

Learn how branch cache optimizes remote office bandwidth by caching content locally, using either distributed or hosted cache, with per share hashing and server enablement.

Configure branch cache on Windows 7 and Windows 8 clients using group policy, choosing distributed or hosted cache modes, enabling automatic discovery, firewall settings, and peer discovery for seamless caching.