70-413 Question Answer

1
Preparing for the Windows Server 2012 MCSE Server
Infrastructure Exams 70-413 and 70-414
2
MCSE and MCSD Certifications
3
Session Objectives And Takeaways

• Session Objective(s)
• Describe key Windows Server 2012 exam objectives
• Understand question styles
• Prepare more effectively using available study
  material
• Relate practical Windows Server 2012 experience
  to exam topics
• Key Takeaway 1
• Identify areas that may require extra studying
• Key Takeaway 2
• Action Plan for exam preparation and success

http//www.pass4surebraindumps.com/70-413.html
4
Microsoft Certification
http//www.pass4surebraindumps.com/70-413.html
5
Changes to Certifications and Exams
Certification Requirement
Broader Skill Set
Relevance
Rigor
Recertification
Deeper Skill Set
http//www.pass4surebraindumps.com/70-413.html
6
(No Transcript)
7
Increased Rigor

• Reflection of the real world
• Learn more, validate more
• Solutions are more complex, questions must
  reflect that
• Best way to measure candidates know what they
  know
• New item types
• Fewer multiple choice
• Case studies
• Scenario based
• See big picture and make decisions
• Innovative item types

http//www.pass4surebraindumps.com/70-413.html
8
Exam Tips
http//www.pass4surebraindumps.com/70-413.html
9
Exam Basics

• 40-60 questions
• 1-4 hours to complete exam
• Can review questions
• Cannot move between case studies
• 700 is passing
• 700 is not 70

http//www.pass4surebraindumps.com/70-413.html
10
How to interpret questions
Business Problem
All questions have a consistent anatomy
Goal Statement
One or Multiple Correct Answers
Questions are not intended to trick you
Multiple Distracters
11
Exam Content
http//www.pass4surebraindumps.com/70-413.html
12
Exam Objectives

• 70-413
• Plan and Deploy a Server Infrastructure (20)
• Design and Implement Network Infrastructure
  Services (20)
• Design and Implement Network Access Services
  (17)
• Design and Implement an Active Directory
  Infrastructure (Logical) (22)
• Design and Implement an Active Directory
  Infrastructure (Physical) (21)
• 70-414
• Manage and Maintain a Server Infrastructure (27)
• Plan and Implement a Highly Available Enterprise
  Infrastructure (26)
• Plan and Implement a Server Virtualization
  Infrastructure (26)
• Design and Implement Identity and Access
  Solutions (21)

13
Exam Objectives

• 70-413
• Plan and Deploy a Server Infrastructure (20)
• Design and Implement Network Infrastructure
  Services (20)
• Design and Implement Network Access Services
  (17)
• Design and Implement an Active Directory
  Infrastructure (Logical) (22)
• Design and Implement an Active Directory
  Infrastructure (Physical) (21)
• 70-414
• Manage and Maintain a Server Infrastructure (27)
• Plan and Implement a Highly Available Enterprise
  Infrastructure (26)
• Plan and Implement a Server Virtualization
  Infrastructure (26)
• Design and Implement Identity and Access
  Solutions (21)

http//www.pass4surebraindumps.com/70-413.html
14
Design an Automated Server Installation Strategy

• Select an appropriate imaging strategy
• Bare Metal vs. Virtual
• High/Lite/Zero-touch
• Thin/Thick/Hybrid
• Tip
• What is the number of images required for the
  configuration desired?
• How many disks are required?

• Design a server implementation using Windows
  Assessment and Deployment Kit (ADK)
• Tips
• Know what each tool does!
• Know how to add custom drivers and software
  packages to images
• Know how to updates images

http//technet.microsoft.com/en-us/library/hh83176
4.aspx
15
Design an Automated Server Installation Strategy

• Design a Virtual Server Deployment
• Hyper-V
• System Center 2012 Virtual Machine Manager
• WDS

http//technet.microsoft.com/en-us/library/gg61063
4.aspx
16
Plan and Implement a Server Deployment
Infrastructure

• Configure standalone and AD-integrated Windows
  Deployment Services (WDS) servers
• Configure multi-site topology and distribution
  points in System Center 2012
• Collections
• Distribution Point Groups

• Configure a multi-server topology
• Configure multicast deployment

http//technet.microsoft.com/en-us/library/hh39740
5.aspx
17
Plan and Implement Server Upgrade and Migration

• Upgrade and migration strategies
• Prerequisites
• In-place upgrade vs. server migration
• Migration planning tools
• Tip
• Be familiar with Microsoft Assessment and
  Planning (MAP) Toolkit and what it can do

• Plan and migrate server roles
• Tips
• Know which roles can be migrated and which can be
  co-hosted
• Know how to migrate print queues

http//technet.microsoft.com/en-us/library/jj13403
9.aspx
18
Plan and Implement Server Upgrade and Migration

• Migrate servers across domains and forests
• Design a server consolidation strategy

• Plan for capacity and resource optimization

ADMT 3.2 Guide http//www.microsoft.com/en-us/do
wnload/details.aspx?id19188 ADMT 3.2 Supported
OS and Target Domains http//support.microsoft.co
m/kb/2753560
19
Sample Question

• You are planning the migration of
  sales.company.com. You need to identify the
  tools for this migration.
• Which tools should you select?
• ADMT 3.2 and GPMC
• AD FS and Federation Gateway
• ADMT 3.2 and AD FS
• AD LDS and GPMC

http//www.pass4surebraindumps.com/70-413.html
20
Sample Question - Answer

• You are planning the migration of
  sales.company.com. You need to identify the
  tools for this migration.
• Which tools should you select?
• ADMT 3.2 and GPMC
• AD FS and Federation Gateway
• ADMT 3.2 and AD FS
• AD LDS and GPMC

21
Plan and Deploy Virtual Machine Manager Services

• Design Virtual Machine Manager service templates
• Define operating system profiles
• Configure hardware and capability profiles

• Tip
• Know the components associated with templates for
  hardware profiles and guest OS profiles

Profiles and VM Templates http//technet.microsoft
.com/en-us/library/hh368987.aspx Service
Templates http//technet.microsoft.com/en-us/libra
ry/gg675074.aspx
22
Plan and Deploy Virtual Machine Manager Services

• Configure image template libraries
• Manage services
• Manage logical networks

http//technet.microsoft.com/en-us/library/gg69696
7.aspx
23
Plan and Implement File and Storage Services

• Plan and implement Storage Spaces and Storage
  Pools
• Disk types
• Data deduplication
• Tip
• Deduplication is used on NTFS volumes, but it
  cant be used on boot/system volumes or Cluster
  Shared Volumes

• Configure an iSCSI Storage Name Server (iSNS)
• Configure Network File System (NFS)
• Install Device Specific Modules (DSM)

http//technet.microsoft.com/en-us/library/hh83148
7.aspx
24
Plan and Implement File and Storage Services

• Storage design considerations
• SAN vs. DAS vs. NAS
• Planning for iSCSI and fibre channel SANs
• Components

• Configure an iSCSI target server
• Tip
• Know the steps to configure an iSCSI target

http//technet.microsoft.com/en-us/library/hh84827
2.aspx
25
Sample Question

• You are evaluating data deduplication for the
  planned Windows Server 2012 File Servers. All
  servers will have identically configured volumes.
• On which volumes should you enable deduplication?
• C - System Volume
• D - Data Volume
• E - CSV
• F - CSV

26
Sample Question - Answer

• You are evaluating data deduplication for the
  planned Windows Server 2012 File Servers. All
  servers will have identically configured volumes.
• On which volumes should you enable deduplication?
• C - System Volume
• D - Data Volume
• E - CSV
• F - CSV

27
Exam Objectives

• 70-413
• Plan and Deploy a Server Infrastructure (20)
• Design and Implement Network Infrastructure
  Services (20)
• Design and Implement Network Access Services
  (17)
• Design and Implement an Active Directory
  Infrastructure (Logical) (22)
• Design and Implement an Active Directory
  Infrastructure (Physical) (21)
• 70-414
• Manage and Maintain a Server Infrastructure (27)
• Plan and Implement a Highly Available Enterprise
  Infrastructure (26)
• Plan and Implement a Server Virtualization
  Infrastructure (26)
• Design and Implement Identity and Access
  Solutions (21)

28
Design a Name Resolution Solution Strategy

• DNS namespace design
• Disjointed
• Integrated
• Zones
• Types
• Hierarchy
• Delegation
• Replication
• Migration to application partitions

• Tip
• Make sure you can explain when and how to use
  forwarding, conditional forwarding, delegation
  records, stub zones, etc.
• Make sure you can describe how zone replication
  is implemented

http//technet.microsoft.com/en-us/library/cc72562
5(vws.10).aspx
29
Design a Name Resolution Solution Strategy

• IPv6
• Secure name resolution
• DNSSEC
• DNS socket pool
• Cache locking
• DNS interoperability

• Single-Label DNS name resolution
• Tip
• Make sure you know when and how to use the
  GlobalNames zone

DNS GlobalNames Zone http//technet.microsoft.com/
en-us/library/cc731744.aspx DNSSEC http//technet.
microsoft.com/en-us/library/jj200221.aspx
30
Design and Maintain a DHCP Solution

• Scopes
• DHCP interoperability and DHCPv6
• Tips
• Placing scopes to support geographical splits of
  IP addresses
• Managing scopes using PowerShell (import, etc.)

• DHCP Management
• DHCP database maintenance
• DHCP Management Pack
• Delegation
• Tip
• Know how to use PowerShell to migrate/move DHCP
  data

DHCP Design Guide http//technet.microsoft.com/en-
us/library/dd283016(vws.10).aspx DHCP Migration
Guide http//technet.microsoft.com/en-us/library/d
d379535(vws.10).aspx
31
Design and Maintain a DHCP Solution

• DHCP Filtering
• High-Availability
• Split scopes
• DHCP Failover
• Modes
• Topologies
• DHCP Failover clustering

• Tip
• Know how to configure DHCP Failover

DHCP Failover http//technet.microsoft.com/en-us/l
ibrary/hh831825.aspx
32
Planning and Implementing an IPAM Provisioning
Strategy

• IPAM implementation
• Manual vs. Group Policy
• Distributed vs. centralized
• IPAM configuration
• Role-Based access control
• Auditing
• Tip
• Know the IPAM security groups and what each can do

• IPAM management
• IPAM Console
• Migrate IPs
• Manage and monitor multiple DHCP and DNS servers
• Tip
• Know the IPAM Cmdlets, including but not limited
  to
• Invoke-IPAMGPProvisioning
• Set-IPAMConfiguration

http//technet.microsoft.com/en-us/library/hh83135
3.aspx
33
Sample Question

• You need to recommend a solution for DHCP
  logging. The solution must meet technical
  requirements.
• Which tool should you select?
• Event Viewer
• IP Address Management (IPAM)
• DHCP Audit Logging
• DHCP Filtering

34
Sample Question - Answer

• You need to recommend a solution for DHCP
  logging. The solution must meet technical
  requirements.
• Which tool should you select?
• Event Viewer
• IP Address Management (IPAM)
• DHCP Audit Logging
• DHCP Filtering

35
Exam Objectives

• 70-413
• Plan and Deploy a Server Infrastructure (20)
• Design and Implement Network Infrastructure
  Services (20)
• Design and Implement Network Access Services
  (17)
• Design and Implement an Active Directory
  Infrastructure (Logical) (22)
• Design and Implement an Active Directory
  Infrastructure (Physical) (21)
• 70-414
• Manage and Maintain a Server Infrastructure (27)
• Plan and Implement a Highly Available Enterprise
  Infrastructure (26)
• Plan and Implement a Server Virtualization
  Infrastructure (26)
• Design and Implement Identity and Access
  Solutions (21)

36
Design a VPN Solution

• Connection types
• Client Remote Access
• Site-to-Site
• Tunneling protocols
• PPTP, L2TP, SSTP
• Authentication Methods
• PAP, CHAP. MS-CHAPv2, EAP, Unauthenticated
  Access, Machine Certificate for IKEv2
• Encryption methods
• MPPE, IPSec, SSL

• VPN server placement
• Network Load Balancing
• User environment configuration
• Connection Manager Administration Kit (CMAK)
• RADIUS
• Network Access Policies

http//technet.microsoft.com/en-us/library/hh83141
6.aspx
37
Design and Implement a Direct Access Solution

• Components
• Design choices
• Scope
• Network
• Native IPv6, 6to4, Teredo, IP-HTTPS
• Web server and certificate infrastructure

• Prerequisites
• Server
• Client
• Infrastructure
• Migration from Forefront Unified Access Gateway
  (UAG)
• Side-by-Side
• Offline

http//technet.microsoft.com/en-us/library/hh83141
6.aspx
38
Implement a Scalable Remote Access Solution

• Configure Site-to-Site VPN
• Remote Access Management Console
• Enable Site-to-Site VPN
• Configure DirectAccess
• Remote Access Management Console Configuration
• Implement multi-site remote access
• Enable Multisite Deployment Wizard

• Configure remote access clustered with NLB
• Enable Load Balancing Wizard
• Configure packet filters
• Windows Firewall with Advanced Security console
• Implement packet tracing
• Remote Access Management Console Monitoring
  Start Tracing

http//technet.microsoft.com/en-us/library/hh83141
6.aspx
39
Design a Network Protection Solution

• Network Policy Server (NPS)
• Server role used for both VPN and DirectAccess
• Tip
• Know the roles service requirements for NPS, HRA,
  and Certification Authority

• Network Access Protection (NAP)
• Architecture
• Components
• Network Policies
• Force Tunneling
• Health Policies
• Tip
• Understand how Force Tunneling works and when to
  use it

http//technet.microsoft.com/en-us/library/hh83168
3.aspx
40
Design a Network Protection Solution

• NAP enforcement methods
• IPSec
• 802.1x
• VPN
• DHCP

• Design considerations
• Capacity
• Server placement
• Firewall
• Remediation network
• Remediation Server Groups

• Tip
• Know when each enforcement method should be used
  and the requirements for each also know how to
  configure each

http//technet.microsoft.com/en-us/library/hh83168
3.aspx
41
Implement a Network Protection Solution

• Implement multi-RADIUS deployment
• Configure NAP enforcement for IPSec and 802.1x
• Deploy and configure the Endpoint Protection
  Client

• Create anti-malware and firewall policies
• Monitor for compliance

http//technet.microsoft.com/en-us/library/hh83168
3.aspx
42
Sample Question

• You need to recommend remote access solutions
  that meets the VPN requirements.
• Which solutions should you recommend?CHOOSE 2
• Routing
• Network Policy Server
• DirectAccess
• VPN

43
Sample Question - Answer

• You need to recommend remote access solutions
  that meets the VPN requirements.
• Which solutions should you recommend?CHOOSE 2
• Routing (doesnt provide VPN connectivity)
• Network Policy Server (doesnt provide VPN
  connectivity)
• DirectAccess
• VPN

44
Exam Objectives

• 70-413
• Plan and Deploy a Server Infrastructure (20)
• Design and Implement Network Infrastructure
  Services (20)
• Design and Implement Network Access Services
  (17)
• Design and Implement an Active Directory
  Infrastructure (Logical) (22)
• Design and Implement an Active Directory
  Infrastructure (Physical) (21)
• 70-414
• Manage and Maintain a Server Infrastructure (27)
• Plan and Implement a Highly Available Enterprise
  Infrastructure (26)
• Plan and Implement a Server Virtualization
  Infrastructure (26)
• Design and Implement Identity and Access
  Solutions (21)

45
Design and Implement a Forest and Domain
Infrastructure

• Multi-Forest architecture
• Deploy and manage a test forest including
  synchronization with production forests
• Tip
• To prevent a forest owner from gaining access to
  object in non-root domains, create a new forest
  and migrate the resources and the accounts to the
  new forest

• Forest design
• Forest Models
• Single, organizational, resource, restricted
  access
• Tip
• Know the benefits and disadvantages of each
  forest mode
• Functional levels
• DNS design for AD

http//technet.microsoft.com/en-us/library/cc75467
8(vws.10).aspx
46
Design and Implement a Forest and Domain
Infrastructure

• Forest trusts
• One-Way vs. Two-Way
• Security considerations
• SID Filtering
• Selective Authentication
• Name Suffix Routing
• Resource Access
• Tip
• Know how to configure a Kerberos Realm Trust

• Forest restructure
• Domain upgrade
• Domain migration
• Domain rename
• Rendom.exe
• Repadmin.exe
• Gpfixup.exe
• Tip
• Use GPFixup after a domain rename

http//technet.microsoft.com/en-us/library/cc97433
2(vws.10).aspx
47
Design a Group Policy Strategy

• OU hierarchy design strategies
• Location-based, resource-based,
  organization-based, multi-tenancy based, hybrid
• Tip Know the benefits and disadvantages of each
  strategy
• Group Policy management
• Centralized Storage
• Advanced Group Policy Management (AGMP)
• Migration
• Active Directory Migration Tool (ADMT 3.2)
• Microsoft Desktop Optimization Pack (MDOP)

• Group Policy implementation
• Inheritance blocking
• Enforced policies
• Loopback processing
• Security Group filtering
• WMI filtering
• Slow-Link processing

http//technet.microsoft.com/en-us/library/cc75494
8(vws.10).aspx
48
Design an Active Directory Permission Model

• Administrative models
• Centralized vs. Decentralized
• Active Directory quotas
• Delegation methods
• Object-Type
• Role-Based
• Kerberos
• Tip Know how to configure Kerberos delegation

• Delegation of Control
• Delegwiz.inf
• AdminSDHolder
• Tip Delegwiz.inf is used to ensure that admins
  can delegate custom tasks using Delegation of
  Control Wizard
• Administrative tools
• Deploy to client computers

http//www.microsoft.com/en-us/download/details.as
px?id21678
49
Sample Question

• You need to recommend a management solution for
  Group Policy. The solution must meet technical
  requirements.
• Which solution should you recommend?
• Microsoft Desktop Optimization Pack (MDOP)
• System Center 2012 Operations Manager
• System Center 2012 Configuration Manager
• Microsoft Baseline Security Analyzer (MBSA)

50
Sample Question - Answer

• You need to recommend a management solution for
  Group Policy. The solution must meet technical
  requirements.
• Which solution should you recommend?
• Microsoft Desktop Optimization Pack (MDOP)
• System Center 2012 Operations Manager
• System Center 2012 Configuration Manager
• Microsoft Baseline Security Analyzer (MBSA)

51
Exam Objectives

• 70-413
• Plan and Deploy a Server Infrastructure (20)
• Design and Implement Network Infrastructure
  Services (20)
• Design and Implement Network Access Services
  (17)
• Design and Implement an Active Directory
  Infrastructure (Logical) (22)
• Design and Implement an Active Directory
  Infrastructure (Physical) (21)
• 70-414
• Manage and Maintain a Server Infrastructure (27)
• Plan and Implement a Highly Available Enterprise
  Infrastructure (26)
• Plan and Implement a Server Virtualization
  Infrastructure (26)
• Design and Implement Identity and Access
  Solutions (21)

52
Design an Active Directory Sites Topology

• Design considerations
• Proximity of Domain Controllers
• Forest root domain controller
• Regional domain controller
• Global Catalog server
• Operations master role
• Sites and site links
• Site cost
• Schedule
• Interval

• Replication
• Replication optimization
• Number of physical sites
• Available bandwidth between sites
• Monitor and resolve Active Directory replication
  conflicts
• repadmin /showrepl
• dcdiag /testreplications

http//technet.microsoft.com/en-us/library/cc75467
8(vws.10).aspx
53
Design a Domain Controller Strategy

• Placement
• Global Catalog
• Operations Master roles
• Read-Only Domain Controllers
• Partial Attribute Set
• Domain Controller virtualization and cloning

Virtualization and Cloning http//technet.microso
ft.com/en-us/library/jj574191.aspx
54
Design and Implement a Branch Office
Infrastructure

• Considerations
• Global Catalog
• RODCs
• Universal Group Membership Caching
• DNS
• DHCP
• Branch Cache
• Distributed vs. hosted

• Confidential attributes
• Delegate administration
• Modify Filtered Attributes Set
• Configure Password Replication Policy
• Configure Hash Publication

http//technet.microsoft.com/en-us/library/cc77174
4(vws.10).aspx
55
Sample Question

• You need ensure that a new site link bridge is
  used by the KCC between two datacenter locations
  named HQ and Branch. What must you do?
• Configure the Bridge all site links setting as
  enabled.
• B. Configure the Bridge all site links setting
  as disabled.
• Configure the Connection object schedule to None.
• D. Run repadmin /kcc siteHQ.

56
Sample Question - Answer

• You need ensure that a new site link bridge
  object is used by the KCC between two datacenter
  locations named HQ and Branch. What must you do?
• Configure the Bridge all site links setting as
  enabled.
• B. Configure the Bridge all site links setting
  as disabled.
• Configure the Connection object schedule to None.
• Run repadmin /kcc siteHQ.
• Site link bridge objects are used by the KCC only
  when the Bridge all site links setting is
  disabled. Otherwise, site link bridge objects are
  ignored

57
Exam Objectives

• 70-413
• Plan and Deploy a Server Infrastructure (20)
• Design and Implement Network Infrastructure
  Services (20)
• Design and Implement Network Access Services
  (17)
• Design and Implement an Active Directory
  Infrastructure (Logical) (22)
• Design and Implement an Active Directory
  Infrastructure (Physical) (21)
• 70-414
• Manage and Maintain a Server Infrastructure (27)
• Plan and Implement a Highly Available Enterprise
  Infrastructure (26)
• Plan and Implement a Server Virtualization
  Infrastructure (26)
• Design and Implement Identity and Access
  Solutions (21)

58
Knowledge not specifically mentioned in exam
objectives

• Hyper-V Manager
• Components
• Network settings
• Assigning VMs to appropriate networks
• NIC teaming
• Tip To ensure that users can access a VM even
  if a NIC fails, enable teaming and then create a
  virtual switch

• Hyper-V Disks
• Differencing
• VHD vs. VHDX
• Dynamically expanding
• Tip Given configuration information of various
  disks (parity, two-way mirror, three way mirror),
  be able to determine the number of physical disks
  required per virtual disk

http//technet.microsoft.com/en-us/library/hh83153
1.aspx
59
Design an Administrative Model

• Design and implement administration of VMM 2012
• Delegation
• User Roles
• Plan and implement self-service options in
  Systems Center 2012
• VMM
• Service Manager
• Orchestrator

• Implement Automated Remediation Using System
  Center 2012
• Create and implement baselines
• VMM
• Configuration Manager
• Plan and implement automation
• Configure VMM to move a VM dynamically based on
  policy
• Integrate for automatic remediation into an
  existing Enterprise infrastructure

Tip Know what each product in System Center
2012 does and when to use it!!
http//technet.microsoft.com/en-us/library/gg61061
5.aspx
60
Design a Monitoring Strategy

• Plan for performance monitoring
• Tools
• Event Viewer, Resource Monitor, Performance
  Monitor, Reliability Monitor
• Monitor server roles
• Domain Controllers, file server, web server,
  remote desktop session host
• Monitor a virtualized environment
• Performance Monitor
• Resource Metering
• PowerShell cmdlets

• Plan for centralized monitoring and reporting
• Server Manager
• Multiple server management, Best Practices
  Analyzer, Event logs
• Operations Manager
• Components
• Alerts, Notification channels, Subscriptions,
  Access reports
• Audit Collection Services
• Deployment
• Distributed application
• Service Level Tracking object
• Monitor override

http//technet.microsoft.com/en-us/library/hh80190
0.aspx
61
Design an Update Infrastructure

• Select an appropriate update management
  technology
• Deploy Updates using WSUS
• Topology
• Replica mode vs. autonomous mode
• Cluster-Aware Updating

• Deploy software updates using Virtual Machine
  Manager
• Update VDI desktop images
• Deploy updates using Configuration Manager
• Software update points
• Distribution points
• Compliance setting

http//technet.microsoft.com/en-us/library/hh83169
4.aspx
62
Implement Automated Remediation

• Baselines
• VMM - Create an update baseline
• Configuration Manager - implement a Desired
  Configuration Management (DCM) baseline
• Implement VMM Integration with Operations Manager

• Configure VMM to move a VM dynamically based on
  policy
• Integrate Systems Center for automatic
  remediation into your existing infrastructure

http//technet.microsoft.com/en-us/library/hh88188
7.aspx
63
Sample Question

• You are configuring a 60-disk JBOD as a single
  storage pool with Storage Spaces. You configure
  the pool as a three-way mirror.
• How many disks can fail in the 60 disk enclosure
  without losing data?
• Choose all that apply.
• One disk
• Two disks
• Three disks
• Six disks
• 29 disks

64
Sample Question - Answer

• You are configuring a 60-disk JBOD as a single
  storage pool with Storage Spaces. You configure
  the pool as a three-way mirror.
• How many disks can fail in the 60 disk enclosure
  without losing data?
• Choose all that apply.
• One disk
• Two disks
• Three disks
• Six disks
• 29 disks

65
Sample Question

• You are deploying the new web app to several
  servers that includes a custom registry key. The
  solution must ensure the registry key was applied
  successfully.
• What should you do? Select the BEST Answer
• Operations Manager -gt create a monitor
• GPMC -gt create a Group Policy Object (GPO)
• Config Manager -gt create Compliance Settings.
• From Orchestrator -gt create a runbook.

66
Sample Question - Answer

• You are deploying the new web app to several
  servers that includes a custom registry key. The
  solution must ensure the registry key was applied
  successfully.
• What should you do? Select the BEST Answer
• Operations Manager -gt create a monitor
• GPMC -gt create a Group Policy Object (GPO)
• Config Manager -gt create Compliance Settings.
• From Orchestrator -gt create a runbook.

67
Exam Objectives

• 70-413
• Plan and Deploy a Server Infrastructure (20)
• Design and Implement Network Infrastructure
  Services (20)
• Design and Implement Network Access Services
  (17)
• Design and Implement an Active Directory
  Infrastructure (Logical) (22)
• Design and Implement an Active Directory
  Infrastructure (Physical) (21)
• 70-414
• Manage and Maintain a Server Infrastructure (27)
• Plan and Implement a Highly Available Enterprise
  Infrastructure (26)
• Plan and Implement a Server Virtualization
  Infrastructure (26)
• Design and Implement Identity and Access
  Solutions (21)

68
Plan and Implement Failover Clustering

• Design Choices
• Redundant networks
• Network Infrastructure
• WAN Link upgrade
• Network priority settings
• Resource failover and failback
• Heartbeat and DNS settings
• Quorum configuration
• Storage placement and data replication
• Cluster Shared Volumes (CSV)

• Tips
• Use CSV to
• Implement the clustered File Server role of a
  file server for a scale-out application data type
  for a cluster
• Minimize the downtime that shared folders are
  unavailable during a failover of a file server
  role
• Know the process used to ensure that clustered
  servers can store new VMs on a SAN
• Know the steps for configuring a scale-out
  file-server cluster to ensure a disk stays
  accessible

http//technet.microsoft.com/en-us/library/hh83157
9.aspx
69
Plan and Implement Highly Available Network
Services

• Plan for and configure Network Load Balancing
  (NLB)
• Design Considerations
• Fault-tolerant networking
• Multi-cast vs. unicast configuration
• State management

• Automated deployment of NLB using VMM service
  templates

http//technet.microsoft.com/en-us/library/hh83169
8.aspx
70
Plan and Implement Highly Available Storage
Solutions

• Plan and configure Storage Pools and Storage
  Spaces
• Design highly-available, multi-replica DFS
  namespaces

• Plan for and configure multi-path I/O (including
  Server Core)
• Configure highly available iSCSI Target and iSNS
  server
• Tip Know the steps for configuring a
  highly-available iSCSI target

http//technet.microsoft.com/en-us/library/hh83173
9.aspx
71
Plan and Implement Highly Available Server Roles

• DHCP
• Split scope, Failover Clustering, DHCP Failover
• Hyper-V
• Clustering
• Continuously-Available File Shares
• Hyper-V over SMB
• DFS Namespace Server

• Use Generic Application, Generic Script, and
  Generic Service clustering roles
• SQL Server
• Database replication
• Tip Database replication would be the BEST way
  to ensure disaster recovery in a data center SAN
  with a 2-node failover cluster hosting SQL

http//technet.microsoft.com/en-us/library/hh83157
9.aspx
72
Plan and Implement Business Continuity and
Disaster Recovery

• Plan a backup and recovery strategy
• Tip use Windows Server Backup to backup VM
  files and folders from shared storage, including
  open files.
• Active Directory domain and forest recovery
• Domain Controller restore and cloning

• AD object and container restore
• Authoritative Restore
• Active Directory Recycle Bin
• Hyper-V Replica
• http//technet.microsoft.com/en-us/library/jj1341
  72.aspx

http//technet.microsoft.com/en-us/library/jj61462
1.aspx
73
Sample Question

• You are planning to implement two Windows Server
  2012 clusters. You need to plan the application
  of automated Windows Updates in your plans.
• What should you include in your plans? BEST
  Answer
• System Center Configuration Manager SUP Roles
• System Center VMM with WSUS Integration
• Cluster Aware Updating (CAU)
• Windows Server Update Services

74
Sample Question - Answer

• You are planning to implement two Windows Server
  2012 clusters. You need to plan the application
  of automated Windows Updates in your plans.
• What should you include in your plans? BEST
  Answer
• System Center Configuration Manager SUP Roles
• System Center VMM with WSUS Integration
• Cluster Aware Updating (CAU)
• Windows Server Update Services

75
Exam Objectives

• 70-413
• Plan and Deploy a Server Infrastructure (20)
• Design and Implement Network Infrastructure
  Services (20)
• Design and Implement Network Access Services
  (17)
• Design and Implement an Active Directory
  Infrastructure (Logical) (22)
• Design and Implement an Active Directory
  Infrastructure (Physical) (21)
• 70-414
• Manage and Maintain a Server Infrastructure (27)
• Plan and Implement a Highly Available Enterprise
  Infrastructure (26)
• Plan and Implement a Server Virtualization
  Infrastructure (26)
• Design and Implement Identity and Access
  Solutions (21)

76
Plan and Implement Virtualization Hosts

• Delegation of virtualization environment
• Hosts, services, VMs
• Self-service
• User Role Profiles
• Delegated Administrators
• Self-Service Users
• Read-Only Administrators
• Administrators

• Multi-Host libraries
• Including equivalent objects
• Host Resource Optimization
• Integrate third-party virtualization platforms

Tip To enable users to self-create a VM based
on an existing VHD, you need a hardware profile,
VM template and a guest OS profile
Planning http//technet.microsoft.com/en-us/libra
ry/gg610615.aspx Delegation http//technet.micro
soft.com/en-us/library/gg675078.aspx
77
Plan and Implement Virtualization Guests

• Plan and implement highly-available VMs
• Tips
• You must create a Cloud before you can delegate
  permissions for users to manage their VMs
• Use Microsoft Assessment and Planning (MAP)
  toolkit scans to generate monthly reports that
  contain a list of all installed software on VMs
  without installing additional software on the VMs
• Create VMM Templates

• Configure Placement Rules
• Guest resource optimization
• Smart page file
• Dynamic memory
• RemoteFX
• Dynamic Optimization
• http//technet.microsoft.com/en-us/library/gg6751
  09.aspx

http//technet.microsoft.com/en-us/library/gg69697
0.aspx
78
Plan and Implement Virtualization Networking

• VMM Logical Networks
• IP Address and MAC Address settings across
  multiple Hyper-V hosts
• Including IP virtualization
• Tip Know how to enable MAC address spoofing on
  the virtual network adapter of VMs and why you
  would do it.

• Virtual Network Optimization

http//technet.microsoft.com/en-us/library/gg61059
6.aspx
79
Plan and Implement Virtualization Storage

• Hyper-V host storage
• Standalone vs. clustered
• SMB
• Cluster Shared Volumes
• Hyper-V guest storage
• Virtual fibre channel
• iSCSI
• Pass-through disks

• Storage Optimization

http//technet.microsoft.com/en-us/library/gg61060
0.aspx
80
Plan and Implement Virtual Guest Movement

• Migration between Hyper-V hosts
• Live Migration
• SAN migration
• Network migration
• Plan for and manage V2V

• Plan for and manage P2V
• Requirements
• Tip Given a list of servers with corresponding
  operating system and configuration information,
  know which servers can be converted to VMs

Migration http//technet.microsoft.com/en-us/libr
ary/jj860420.aspx P2V http//technet.microsoft.c
om/en-us/library/hh368990.aspx V2V
http//technet.microsoft.com/en-us/library/jj86044
2.aspx
81
Sample Question

• You are planning to deploy the new web app via a
  Service Template with Network Load Balancing
  (NLB).
• Which component should be added to the Service
  Template? Select the BEST Answer
• Guest OS Profile
• Host Profile
• Capability Profile
• VIP Template

82
Sample Question - Answer

• You are planning to deploy the new web app via a
  Service Template with Network Load Balancing
  (NLB).
• Which component should be added to the Service
  Template? Select the BEST Answer
• Guest OS Profile
• Host Profile
• Capability Profile
• VIP Template

83
Exam Objectives

• 70-413
• Plan and Deploy a Server Infrastructure (20)
• Design and Implement Network Infrastructure
  Services (20)
• Design and Implement Network Access Services
  (17)
• Design and Implement an Active Directory
  Infrastructure (Logical) (22)
• Design and Implement an Active Directory
  Infrastructure (Physical) (21)
• 70-414
• Manage and Maintain a Server Infrastructure (27)
• Plan and Implement a Highly Available Enterprise
  Infrastructure (26)
• Plan and Implement a Server Virtualization
  Infrastructure (26)
• Design and Implement Identity and Access
  Solutions (21)

84
Design a Certificate Services Infrastructure

• Multi-Tier Certificate Authority (CA) hierarchy
• Offline Root
• Stand-alone vs. Enterprise
• Multi-Forest CA deployment

• Trust between organizations
• Network device enrollment

• Implement and manage
• Administrator role separation
• Trust between organizations
• CA migration
• Monitor CA health

• Configure and manage
• Offline root CA
• Certificate Enrollment Web Services
• Network Device enrollment Services
• Online Certificates Status Protocol responders

http//technet.microsoft.com/en-us/library/hh83174
0.aspx
85
Implement and Manage Certificates

• Manage
• Certificate templates
• Certificate renewal
• Internet-based clients
• Certificate deployment and renewal to network
  devices
• Configure and Manage
• Key archival and recovery

• Implement and Manage
• Deployment
• Validation
• Revocation

http//technet.microsoft.com/en-us/library/hh83174
0.aspx
86
Design and Implement a Federated Identity Solution

• Plan and implement
• Claims-Based authentication
• Relying Party Trusts
• Claims Provider Trust rules
• Plan for identity integration with Cloud services

• Plan and configure Attribute Stores
• AD LDS
• AD DS
• SQL Server

http//technet.microsoft.com/en-us/library/hh83150
2.aspx
87
Design and implement AD Rights Management
Services (AD RMS)

• Manage
• Service Connection Points
• Trusted User Domains
• Trusted Publishing Domains
• Federated Identity support
• Distributed and Archived Rights Policy templates
• Plan for and manage AD RMS client deployment

• Plan for
• High-Availability deployment
• Decommissioning

http//technet.microsoft.com/en-us/library/hh83136
4.aspx
88
Sample Question

• You are planning to implement AD CS for
  supporting certificate management for Web app
  authentication.
• What is the minimum number of certificate servers
  you should plan to deploy? Select the BEST
  Answer
• Two
• Three
• Four
• Six

89
Sample Question - Answer

• You are planning to implement AD CS for
  supporting certificate management for Web app
  authentication.
• What is the minimum number of certificate servers
  you should plan to deploy? Select the BEST
  Answer
• Two
• Three
• Four
• Six

90
In Review Session Objectives And Takeaways

• Session Objective(s)
• Describe key Windows Server 2012 exam objectives
• Understand question styles
• Prepare more effectively using available study
  material
• Relate practical Windows Server 2012 experience
  to exam topics
• Key Takeaway 1
• Identify areas that may require extra studying
• Key Takeaway 2
• Action Plan for exam preparation and success

91
Related content

• Breakout Sessions (session codes and titles)
• Many, but focus on Labs perhaps?

• Labs (session codes and titles)
• DCIM-H205 Build Your Storage Infrastructure with
  Windows Server 2012 R2
• DCIM-H322 Exploring Virtualization with Windows
  Server 2012 R2 Hyper-V
• DCIM-H321 Windows Server 2012 R2 Introduction to
  Failover Clustering with Hyper-V

• Related Certification Exam
• 70-413 70-414

92
Evaluate this session
Scan this QR code to evaluate this session.
93
2014 Microsoft Corporation. All rights
reserved. Microsoft, Windows, and other product
names are or may be registered trademarks and/or
trademarks in the U.S. and/or other
countries. The information herein is for
informational purposes only and represents the
current view of Microsoft Corporation as of the
date of this presentation. Because Microsoft
must respond to changing market conditions, it
should not be interpreted to be a commitment on
the part of Microsoft, and Microsoft cannot
guarantee the accuracy of any information
provided after the date of this presentation.
MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED
OR STATUTORY, AS TO THE INFORMATION IN THIS
PRESENTATION.