Exam
70-411

Windows Server

  • Published:
    September 17, 2012
  • Languages:
    English, Chinese (Simplified), French, German, Japanese, Portuguese (Brazil)
  • Audiences:
    IT professionals
  • Technology:
    Windows Server 2012 R2
  • Credit toward certification:
    MCP, MCSA, MCSE

Administering Windows Server 2012

* Secondary and higher education students may be eligible for special academic pricing (not available in India or China). See Exam policies and FAQ for details. Pricing does not reflect any promotional offers or reduced pricing for Microsoft IT Academy program members, Microsoft Certified Trainers, and Microsoft Partner Network program members. Pricing is subject to change without notice. Pricing does not include applicable taxes. Please confirm exact pricing with the exam provider before registering to take an exam.

Skills measured

This exam measures your ability to accomplish the technical tasks listed below. The percentages indicate the relative weight of each major topic area on the exam. The higher the percentage, the more questions you are likely to see on that content area on the exam. View video tutorials about the variety of question types on Microsoft exams.

Please note that the questions may test on, but will not be limited to, the topics described in the bulleted text.

Do you have feedback about the relevance of the skills measured on this exam? Please send Microsoft your comments. All feedback will be reviewed and incorporated as appropriate while still maintaining the validity and reliability of the certification process. Note that Microsoft will not respond directly to your feedback. We appreciate your input in ensuring the quality of the Microsoft Certification program.

If you have concerns about specific questions on this exam, please submit an exam challenge.

If you have other questions or feedback about Microsoft Certification exams or about the certification program, registration, or promotions, please contact your Regional Service Center.

As of January 2014, this exam includes content covering Windows Server 2012 R2.

Deploy, manage, and maintain servers (15–20%)
  • Deploy and manage server images
    • Install the Windows Deployment Services (WDS) role; configure and manage boot, install, and discover images; update images with patches, hotfixes, and drivers; install features for offline images; configure driver groups and packages
  • Implement patch management
    • Install and configure the Windows Server Update Services (WSUS) role, configure group policies for updates, configure client-side targeting, configure WSUS synchronization, configure WSUS groups, manage patch management in mixed environments
  • Monitor servers
    • Configure Data Collector Sets (DCS), configure alerts, monitor real-time performance, monitor virtual machines (VMs), monitor events, configure event subscriptions, configure network monitoring, schedule performance monitoring

Preparation resources

Configure File and Print Services (15–20%)
  • Configure Distributed File System (DFS)
    • Install and configure DFS namespaces, configure DFS Replication Targets, configure Replication Scheduling, configure Remote Differential Compression settings, configure staging, configure fault tolerance, clone a DFS database, recover DFS databases, optimize DFS replication
  • Configure File Server Resource Manager (FSRM)
    • Install the FSRM role service, configure quotas, configure file screens, configure reports, configure file management tasks
  • Configure file and disk encryption
    • Configure BitLocker encryption; configure the Network Unlock feature; configure BitLocker policies; configure the EFS recovery agent; manage EFS and BitLocker certificates, including backup and restore
  • Configure advanced audit policies
    • Implement auditing using Group Policy and AuditPol.exe, create expression-based audit policies, create removable device audit policies

Preparation resources

Configure network services and access (15–20%)
  • Configure DNS zones
    • Configure primary and secondary zones, configure stub zones, configure conditional forwards, configure zone and conditional forward storage in Active Directory, configure zone delegation, configure zone transfer settings, configure notify settings
  • Configure DNS records
    • Create and configure DNS Resource Records (RR), including A, AAAA, PTR, SOA, NS, SRV, CNAME, and MX records; configure zone scavenging; configure record options, including Time To Live (TTL) and weight; configure round robin; configure secure dynamic updates
  • Configure virtual private network (VPN) and routing
    • Install and configure the Remote Access role, implement Network Address Translation (NAT), configure VPN settings, configure remote dial-in settings for users, configure routing, configure Web Application proxy in passthrough mode
  • Configure DirectAccess
    • Implement server requirements, implement client configuration, configure DNS for Direct Access, configure certificates for Direct Access

Preparation resources

Configure a Network Policy Server (NPS) infrastructure (10–15%)
  • Configure Network Policy Server
    • Configure a RADIUS server, including RADIUS proxy; configure RADIUS clients; configure NPS templates; configure RADIUS accounting; configure certificates
  • Configure NPS policies
    • Configure connection request policies, configure network policies for VPN clients (multilink and bandwidth allocation, IP filters, encryption, IP addressing), import and export NPS policies
  • Configure Network Access Protection (NAP)
    • Configure System Health Validators (SHVs), configure health policies, configure NAP enforcement using DHCP and VPN, configure isolation and remediation of non-compliant computers using DHCP and VPN, configure NAP client settings

Preparation resources

Configure and manage Active Directory (10–15%)
  • Configure service authentication
    • Create and configure Service Accounts, create and configure Group Managed Service Accounts, configure Kerberos delegation, manage Service Principal Names (SPNs), configure virtual accounts
  • Configure domain controllers
    • Transfer and seize operations master roles, install and configure a read-only domain controller (RODC), configure domain controller cloning
  • Maintain Active Directory
    • Back up Active Directory and SYSVOL, manage Active Directory offline, optimize an Active Directory database, clean up metadata, configure Active Directory snapshots, perform object- and container-level recovery, perform Active Directory restore, configure and restore objects by using the Active Directory Recycle Bin
  • Configure account policies
    • Configure domain and local user password policy settings, configure and apply Password Settings Objects (PSOs), delegate password settings management, configure account lockout policy settings, configure Kerberos policy settings

Preparation resources

Configure and manage Group Policy (15–20%)
  • Configure Group Policy processing
    • Configure processing order and precedence, configure blocking of inheritance, configure enforced policies, configure security filtering and Windows Management Instrumentation (WMI) filtering, configure loopback processing, configure and manage slow-link processing and Group Policy caching, configure client-side extension (CSE) behavior, force Group Policy Update
  • Configure Group Policy settings
    • Configure settings, including software installation, folder redirection, scripts, and administrative template settings; import security templates; import custom administrative template file; configure property filters for administrative templates
  • Manage Group Policy objects (GPOs)
    • Back up, import, copy, and restore GPOs; create and configure Migration Table; reset default GPOs; delegate Group Policy management
  • Configure Group Policy preferences (GPP)
    • Configure GPP settings, including printers, network drive mappings, power options, custom registry settings, Control Panel settings, Internet Explorer settings, file and folder deployment, and shortcut deployment; configure item-level targeting

Preparation resources

Preparation options

Instructor-led training
Find a Microsoft Learning Partner near you
Exam prep video

Microsoft Certification PREP Talk: Exam 411

In this episode of Prep tips from certification experts, James Seymour, Senior Product Planner, and Rick Claus, Senior Technical Evangelist, discuss the relevancy of the skills being measured on Exam 411.

Practice test

Take a Microsoft Official Practice Test for Exam 411

From the community

Exam 70-411 wiki

Exam 70-411 forum

Follow @MSLearning and @windowsserver

Books

Exam Ref 70-411: Administering Windows Server 2012 R2
Published: June 23, 2014

Prepare for Microsoft Exam 70-411— and help demonstrate your real-world mastery of administering Windows Server 2012 R2. Designed for experienced IT professionals ready to advance their status, Exam Ref focuses on the critical thinking and decision-making acumen needed for success at the MCSA level.

Buy this book at the Microsoft Press Store

Training Guide: Administering Windows Server 2012 R2
Published: June 1, 2014

Designed to help enterprise administrators develop real-world, job-role-specific skills, this Training Guide focuses on core infrastructure administration for Windows Server 2012 R2. Build hands-on expertise through a series of lessons, exercises, and suggested practices—and help maximize your performance on the job.

Buy this book at the Microsoft Press Store

Who should take this exam?

This exam is part two of a series of three exams that test the skills and knowledge necessary to administer a Windows Server 2012 infrastructure in an enterprise environment. Passing this exam validates a candidate’s ability to administer the tasks required to maintain a Windows Server 2012 infrastructure, such as user and group management, network access, and data security. Passing this exam along with the other two exams confirms that a candidate has the skills and knowledge necessary for implementing, managing, maintaining, and provisioning services and infrastructure in a Windows Server 2012 environment.

More information about exams

Preparing for an exam

We recommend that you review this exam preparation guide in its entirety and familiarize yourself with the resources on this website before you schedule your exam. See the Microsoft Certification exam overview for information about registration, videos of typical exam question formats, and other preparation resources. For information on exam policies and scoring, see the Microsoft Certification exam policies and FAQs.

Note

This preparation guide is subject to change at any time without prior notice and at the sole discretion of Microsoft. Microsoft exams might include adaptive testing technology and simulation items. Microsoft does not identify the format in which exams are presented. Please use this preparation guide to prepare for the exam, regardless of its format. To help you prepare for this exam, Microsoft recommends that you have hands-on experience with the product and that you use the specified training resources. These training resources do not necessarily cover all of the topics listed in the "Skills measured" section.