MCSE – Microsoft Certified Solution Expert “Server 2012”

A. Designing and Implementing a Server Infrastructure 413

• Plan and Deploy a Server Infrastructure (20%)
  • Design an automated server installation strategy.
    • This objective may include but is not limited to: Design considerations including images and bare metal/virtual deployment; design a server implementation using Windows Assessment and Deployment Kit (ADK); design a virtual server deployment
  • Plan and implement a server deployment infrastructure.
    • This objective may include but is not limited to: Configure multicast deployment; configure multi-site topology and distribution points; configure a multi-server topology; configure autonomous and replica Windows Deployment Services (WDS) servers
  • Plan and implement server upgrade and migration.
    • This objective may include but is not limited to: Plan for role migration; migrate server roles; migrate servers across domains and forests; design a server consolidation strategy; plan for capacity and resource optimization
  • Plan and deploy Virtual Machine Manager services.
    • This objective may include but is not limited to: Design Virtual Machine Manager service templates; define operating system profiles; configure hardware and capability profiles; manage services; configure image and template libraries; manage logical networks
  • Plan and implement file and storage services.
    • This objective may include but is not limited to: Planning considerations include iSCSI SANs, Fibre Channel SANs, Virtual Fibre Channel, storage spaces, storage pools, and data de-duplication; configure the iSCSI Target server; configure the Internet Storage Name server (iSNS); configure Network File System (NFS); install Device Specific Modules (DSMs)
•  Design and Implement Network Infrastructure Services (20%)
  • Design and maintain a Dynamic Host Configuration Protocol (DHCP) solution.
    • This objective may include but is not limited to: Design considerations including a highly available DHCP solution including split scope, DHCP failover, and DHCP failover clustering, DHCP interoperability, and DHCPv6; implement DHCP filtering; implement and configure a DHCP management pack; maintain a DHCP database
  • Design a name resolution solution strategy.
    • This objective may include but is not limited to: Design considerations including secure name resolution, DNSSEC, DNS Socket Pool, cache locking, disjoint namespaces, DNS interoperability, migration to application partitions, IPv6, Single-Label DNS Name Resolution, zone hierarchy, and zone delegation
  • Design and manage an IP address management solution.
    • This objective may include but is not limited to: Design considerations including IP address management technologies including IPAM, Group Policy based, and manual provisioning, and distributed vs. centralized placement; configure role-based access control; configure IPAM auditing; migrate IPs; manage and monitor multiple DHCP and DNS servers; configure data collection for IPAM
• Design and Implement Network Access Services (17%)
  • Design a VPN solution.
    • This objective may include but is not limited to: Design considerations including certificate deployment, firewall configuration, client/site to site, bandwidth, protocol implications, and VPN deployment configurations using Connection Manager Administration Kit (CMAK)
  • Design a DirectAccess solution.
    • This objective may include but is not limited to: Design considerations including topology, migration from Forefront UAG, DirectAccess deployment, and enterprise certificates
  • Implement a scalable remote access solution.
    • This objective may include but is not limited to: Configure site-to-site VPN; configure packet filters; implement packet tracing; implement multi-site Remote Access; configure Remote Access clustered with Network Load Balancing (NLB); configure DirectAccess
  • Design a network protection solution.
    • This objective may include but is not limited to: Design considerations including Network Access Protection (NAP) enforcement methods for DHCP, IPSec, VPN, and 802.1x, capacity, placement of servers, firewall, Network Policy Server (NPS), and remediation network
  • Implement a network protection solution.
    • This objective may include but is not limited to: Implement multi-RADIUS deployment; configure NAP enforcement for IPSec and 802.1x; deploy and configure the Endpoint Protection client; create anti-malware and firewall policies; monitor for compliance
• Design and Implement an Active Directory Infrastructure (Logical) (22%)
  • Design a forest and domain infrastructure.
    • This objective may include but is not limited to: Design considerations including multi-forest architecture, trusts, functional levels, domain upgrade, domain migration, forest restructure, and Hybrid Cloud services
  • Implement a forest and domain infrastructure.
    • This objective may include but is not limited to: Configure domain rename; configure Kerberos realm trusts; implement a domain upgrade; implement a domain migration; implement a forest restructure; deploy and manage a test forest including synchronization with production forests
  • Design a Group Policy strategy.
    • This objective may include but is not limited to: Design considerations including inheritance blocking, enforced policies, loopback processing, security, and WMI filtering, site-linked Group Policy Objects (GPOs), slow-link processing, group strategies, organizational unit (OU) hierarchy, and Advanced Group Policy Management (AGPM)
  • Design an Active Directory permission model.
    • This objective may include but is not limited to: Design considerations including Active Directory object security and Active Directory quotas; customize tasks to delegate in Delegate of control wizard; deploy administrative tools on the client computer; delegate permissions on administrative users (AdminSDHolder); configure Kerberos delegation
• Design and Implement an Active Directory Infrastructure (Physical) (21%)
  • Design an Active Directory sites topology.
    • This objective may include but is not limited to: Design considerations including proximity of domain controllers, replication optimization, and site link; monitor and resolve Active Directory replication conflicts
  • Design a domain controller strategy.
    • This objective may include but is not limited to: Design considerations including global catalog, operations master roles, Read-Only Domain Controllers (RODCs), partial attribute set, and domain controller cloning
  • Design and implement a branch office infrastructure.
    • This objective may include but is not limited to: Design considerations including RODC, Universal Group Membership Caching (UGMC), global catalog, DNS, DHCP, and BranchCache; implement confidential attributes; delegate administration; modify filtered attributes set; configure password replication policy; configure hash publication

B. Implementing an Advanced Server Infrastructure   414

• Manage and Maintain a Server Infrastructure (27%)
  • Design an administrative model.
    • This objective may include but is not limited to: Design considerations including user rights, built-in groups, and end-user self-service portal; design a delegation of administration structure for Microsoft System Center 2012
  • Design a monitoring strategy.
    • This objective may include but is not limited to: Design considerations including monitoring servers using Audit Collection Services (ACS), performance monitoring, centralized monitoring, and centralized reporting; implement and optimize System Center 2012 – Operations Manager management packs; plan for monitoring Active Directory
  • Design an updates infrastructure.
    • This objective may include but is not limited to: Design considerations including Windows Server Update Services (WSUS), System Center 2012 – Configuration Manager, and cluster-aware updating; design and configure Virtual Machine Manager for software update management; update VDI desktop images
  • Implement automated remediation.
    • This objective may include but is not limited to: Create an Update Baseline in Virtual Machine Manager; implement a Desired Configuration Management (DCM) Baseline; implement Virtual Machine Manager integration with Operations Manager; configure Virtual Machine Manager to move a VM dynamically based on policy; integrate System Center 2012 for automatic remediation into your existing Enterprise Infrastructure
• Plan and Implement a Highly Available Enterprise Infrastructure (26%)
  • Plan and implement failover clustering.
    • This objective may include but is not limited to: Plan for multi-node and multi-site clustering; design considerations including redundant networks, network priority settings, resource failover and failback, heartbeat and DNS settings, Quorum configuration, and storage placement and replication
  • Plan and implement highly available network services.
    • This objective may include but is not limited to: Plan for and configure Network Load Balancing (NLB); design considerations including fault-tolerant networking, multicast vs. unicast configuration, state management, and automated deployment of NLB using Virtual Machine Manager service templates
  • Plan and implement highly available storage solutions.
    • This objective may include but is not limited to: Plan for and configure storage spaces and storage pools; design highly available, multi-replica DFS namespaces; plan for and configure multi-path I/O, including Server Core; configure highly available iSCSI Target and iSNS Server
  • Plan and implement highly available server roles.
    • This objective may include but is not limited to: Plan for a highly available Dynamic Host Configuration Protocol (DHCP) Server, Hyper-V clustering, Continuously Available File Shares, and a DFS Namespace Server; plan for and implement highly available applications, services, and scripts using Generic Application, Generic Script, and Generic Service clustering roles
  • Plan and implement a business continuity and disaster recovery solution.
    • This objective may include but is not limited to: Plan a backup and recovery strategy; planning considerations including Active Directory domain and forest recovery, Hyper-V replica, domain controller restore and cloning, and Active Directory object and container restore using authoritative restore and Recycle Bin
• Plan and Implement a Server Virtualization Infrastructure (26%)
  • Plan and implement virtualization hosts.
    • This objective may include but is not limited to: Plan for and implement delegation of virtualization environment (hosts, services, and VMs), including self-service capabilities; plan and implement multi-host libraries including equivalent objects; plan for and implement host resource optimization; integrate third-party virtualization platforms
  • Plan and implement virtualization guests.
    • This objective may include but is not limited to: Plan for and implement highly available VMs; plan for and implement guest resource optimization including smart page file, dynamic memory, and RemoteFX; configure placement rules; create Virtual Machine Manager templates
  • Plan and implement virtualization networking.
    • This objective may include but is not limited to: Plan for and configure Virtual Machine Manager logical networks; plan for and configure IP address and MAC address settings across multiple Hyper-V hosts including IP virtualization; plan for and configure virtual network optimization
  • Plan and implement virtualization storage.
    • This objective may include but is not limited to: Plan for and configure Hyper-V host storage including stand-alone and clustered setup using SMB 2.2 and CSV; plan for and configure Hyper-V guest storage including virtual Fibre Channel, iSCSI, and pass-through disks; plan for storage optimization
  • Plan and implement virtual guest movement.
    • This objective may include but is not limited to: Plan for and configure live, SAN, and network migration between Hyper-V hosts; plan for and manage P2V and V2V
  • Manage and maintain a server virtualization infrastructure.
    • This objective may include but is not limited to: Manage dynamic optimization and resource optimization; manage Operations Manager integration using PRO Tips; automate VM software and configuration updates using service templates; maintain library updates
• Design and Implement Identity and Access Solutions (21%)
  • Design a Certificate Services infrastructure.
    • This objective may include but is not limited to: Design a multi-tier Certificate Authority (CA) hierarchy with offline root CA; plan for multi-forest CA deployment; plan for Certificate Enrollment Web Services; plan for network device enrollment; plan for certificate validation and revocation; plan for disaster recovery; plan for trust between organizations
  • Implement and manage a Certificate Services infrastructure.
    • This objective may include but is not limited to: Configure and manage offline root CA; configure and manage Certificate Enrollment Web Services; configure and manage Network Device Enrollment Services; configure Online Certificates Status Protocol responders; migrate CA; implement administrator role separation; implement and manage trust between organizations; monitor CA health
  • Implement and manage certificates.
    • This objective may include but is not limited to: Manage certificate templates; implement and manage deployment, validation, and revocation; manage certificate renewal including Internet-based clients; manage certificate deployment and renewal to network devices; configure and manage key archival and recovery
  • Design and implement a federated identity solution.
    • This objective may include but is not limited to: Plan for and implement claims-based authentication including planning and implementing Relying Party Trusts; plan for and configure Claims Provider Trust rules; plan for and configure attribute stores including Active Directory Lightweight Directory Services (AD LDS); plan for and manage Active Directory Federation Services (AD FS) certificates; plan for Identity Integration with Cloud services
  • Design and implement Active Directory Rights Management Services (AD RMS).
    • This objective may include but is not limited to: Plan for highly available AD RMS deployment; manage AD RMS Service Connection Point; plan for and manage AD RMS client deployment; manage Trusted User Domains; manage Trusted publishing domains; manage Federated Identity support; manage Distributed and Archived Rights Policy templates; configure Exclusion Policies; decommission AD RMS