Table of Contents - TestOut · Web view2.3.4 Monitor utilization of IP address space2.3.5 Migrate...

Copyright © 2018 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, Windows, and Office are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them.

TestOut Server Pro 2016: Networking - English 4.0.x

LESSON PLAN

Revised 2018-06-29

Table of Contents

IntroductionSection 0.1: Server Pro 2016: Networking Introduction.................................................................4Section 0.2: The TestOut Simulator..............................................................................................5DNSSection 1.1: DNS Overview and Installation..................................................................................6Section 1.2: DNS Name Resolution..............................................................................................8Section 1.3: Primary and Secondary DNS Zones.......................................................................10Section 1.4: Zone Properties and Auxiliary DNS Zones..............................................................12Section 1.5: DNS Records...........................................................................................................14Section 1.6: DNS Record Management......................................................................................16Section 1.7: Single-Label Name Resolution................................................................................18Section 1.8: DNS Server Properties............................................................................................20Section 1.9: DNS Protection........................................................................................................22Section 1.10: DNS Policies..........................................................................................................24Section 1.11: DNS Monitoring and Troubleshooting...................................................................26TCP/IPSection 2.1: IPv4 Addresses.......................................................................................................28Section 2.2: IPv6 Addresses.......................................................................................................30Section 2.3: IPv4-to-IPv6 Transitional Technologies...................................................................32DHCPSection 3.1: Install DHCP............................................................................................................34Section 3.2: DHCP Scopes.........................................................................................................36Section 3.3: DHCP Options.........................................................................................................38Section 3.4: Advanced Scopes....................................................................................................39Section 3.5: Centralized DHCP and PXE....................................................................................41Section 3.6: DHCP Policies.........................................................................................................43Section 3.7: Advanced DHCP Management...............................................................................44Section 3.8: Maintain the DHCP Database.................................................................................46Section 3.9: Troubleshooting DHCP............................................................................................47IP Address Management (IPAM)Section 4.1: IPAM Installation......................................................................................................49Section 4.2: IPAM DNS and DHCP.............................................................................................51Section 4.3: Advanced IPAM Administration and Auditing..........................................................53Routing and Remote Access (RRAS)Section 5.1: Routing....................................................................................................................55Section 5.2: Install VPN...............................................................................................................57Section 5.3: VPNs........................................................................................................................59Section 5.4: Connection Profiles.................................................................................................61DirectAccess (DA)Section 6.1: DirectAccess Installation.........................................................................................63Section 6.2: DirectAccess Troubleshooting.................................................................................65Network Policy Server (NPS)Section 7.1: Install Network Policy Server (NPS)........................................................................67Section 7.2: NPS Templates.......................................................................................................68Section 7.3: NPS Network Policies..............................................................................................69Section 7.4: NPS Connection Request Policies..........................................................................72Section 7.5: RADIUS Accounting................................................................................................74Copyright © 2018 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, Windows, and Office are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them.

Section 7.6: Manage NPS Policies..............................................................................................76Distributed File System (DFS) and BranchCacheSection 8.1: Distributed File System (DFS) Namespaces...........................................................78Section 8.2: Configure DFS Replication......................................................................................80Section 8.3: Optimize DFS Replication.......................................................................................82Section 8.4: Manage the DFS Replication Database..................................................................84Section 8.5: BranchCache Installation and Configuration...........................................................86High Performance Network SolutionsSection 9.1: NIC Teaming and Switch Embedded Teaming (SET).............................................88Section 9.2: QoS with Data Center Bridging (DCB)....................................................................90Section 9.3: Virtual Machine Queue (VMQ) and Receive Side Scaling (RSS)...........................92Section 9.4: SMB Direct and SMB Multichannel.........................................................................94Section 9.5: Single-Root IO Virtualization (SR-IOV)....................................................................96Implement Software-Defined Networking (SDN)Section 10.1: Implement SDN.....................................................................................................97Section 10.2: Implement Hyper-V Network Virtualization (HNV).................................................99Section 10.3: Implement Software Load Balancer (SLB)..........................................................101Section 10.4: Implement Windows Server Gateways................................................................103Section 10.5: Implement Data Center Firewall Policies.............................................................105Practice ExamsPractice Exams..........................................................................................................................107AppendicesAppendix A: Approximate Time for the Course.........................................................................108


0.1: Server Pro 2016: Networking Introduction

Lecture Focus Questions:

What are the course prerequisites? What major topics are covered in the course? What certification does this course prepare me for?

Video/Demo Time0.1.1 Server Pro 2016: Networking Introduction 3:36

Total Video Time 3:36

Total TimeAbout 4 minutes


0.2: The TestOut Simulator


How do I open the lab interface? How do I see the lab exhibits? How do I navigate to different servers in the lab interface? How do I open a virtual machine console?

In this section, you will learn to:

Open the lab interface. Review lab exhibits. Navigate to different servers in the lab interface. Open a virtual machine console.

Video/Demo Time0.2.1 Using the Simulator 3:38


Lab/Activity0.2.2 Explore Hyper-V Servers



1.1: DNS Overview and Installation


What are the primary functions of a Domain Name System? In what way is DNS a distributed database? In what way is DNS a hierarchical database? What are the parts of an FQDN? How does an FQDN identify a host? What are the advantages of installing DNS on a Nano Server?


Install DNS. Install DNS on Nano Server.

Key terms for this section include the following:Term Definition

Domain Name System

(DNS)

A service that resolves fully qualified domain names (FQDNs) to IP addresses and IP addresses to FQDNs.

. (dot) Domain The root domain, or root of the DNS domain tree, denotes a fully qualified unambiguous domain name.

Fully Qualified Domain Names(FQDN)

The FQDN includes the host name and all domain names separated by periods. The final period, which is for the root domain, is normally omitted and only implied.

Top-Level Domain(TDL)

Sometimes known as a first-level domain, a TDL is the last part of a domain name (.com, .edu, .gov). TDLs are managed by the Internet Corporation of Assigned Names and Numbers (ICANN).

Second-Level Domain

Additional domains, or second-level domains, are registered to an individual or organization for use on the internet.

Third-Level Domain

Third-level domains are only used in the United Kingdom (UK) and are associated with the co.uk first- and second-level name domains. Third-level domains are registered to individuals or organizations for use on the internet in the same way second-level domains are registered in the rest of the world. An example of a third-level domain in the DNS domain tree is bbc.co.uk.

HostnameThe hostname is the part of a FQDN that represents a specific host. It is the left-most name in an FQDN. For example, "www" is the hostname of www.example.com.

Sub-Domain In an FQDN, any domain between the hostname and the second-level domain is a sub-domain. Sub-domains are not registered. Responsibility for sub-domains lies with the individual or organization that registered the second-level domain. Docs.microsoft.com and


news.google.com are examples of sub-domains in the DNS domain tree.

This section helps you prepare for the following certification exam objectives:Exam Objective

TestOut Server Pro 2016: Networking

1.1 Install and Configure DNS 1.1.1 Install and configure forwarders

Microsoft 70-741 Networkingwith Windows Server 2016

1.1 Install and configure DNS servers 1.1.1 Determine DNS installation requirements1.1.2 Determine supported DNS deployment scenarios on Nano Server1.1.3 Install DNS

Video/Demo Time1.1.1 DNS Overview 4:391.1.2 Installing DNS 2:001.1.3 Installing DNS on Nano Server 8:08


Lab/Activity1.1.5 Install DNS

Fact Sheets1.1.4 DNS Overview and Installation Facts

Number of Exam Questions3 questions



1.2: DNS Name Resolution


How does a DNS client perform name resolution? What is the purpose of the DNS client cache? What is the purpose of the hosts file? What is the purpose of the DNS server cache? What is an authoritative DNS? Under what conditions should a conditional forwarder be used? When does a DNS server use DNS forwarding? When does a DNS server use Root Hints? What is involved in the DNS delegation process? What is the purpose of a stub zone?


Configure forwarding. Configure conditional forwarders. Configure root hints. Configure delegations.


DNS Client A client computer that is configured to send name resolution queries to a DNS server.

DNS Client Cache

(DNS Resolver Cache)

A temporary database maintained by the DNS client that contains previously resolved FQDNs and their matching IP addresses.

Host File A plain text file that maps FQDNs to IP addresses.

DNS Server A type of name server that responds to DNS queries using a database of hostnames and their associated records.

DNS Server Cache

A temporary database maintained by the DNS server that contains previously resolved FQDNs and their matching IP addresses.

Authoritative DNS

A DNS server that holds original and definitive DNS records for the domains it is responsible for.

DNS Forwarding Occurs when one DNS server queries another DNS server when it can't resolve a FQDN.

Conditional Forwarding

Occurs when a DNS server forwards queries for certain DNS domains to certain DNS servers.

Stub Zone A DNS zone containing a list of authoritative DNS servers for a specific DNS domain.

Root Hints The process of resolving FQDNs by first contacting root DNS


servers followed by contacting delegated DNS servers.

DelegationThe process of responding to DNS queries by delegating to a DNS server that is lower in the DNS tree, but closer to the requested FQDN.



1.1 Install and Configure DNS 1.1.1 Install and configure forwarders1.1.2 Configure Root Hints


41.1 Install and configure DNS servers 1.1.4 Configure forwarders1.1.5 Configure Root Hints1.1.6 Configure delegation

Video/Demo Time1.2.1 DNS Name Resolution 15:571.2.2 Configuring Forwarding 3:421.2.3 Configuring Conditional Forwarders 3:441.2.4 Configuring Root Hints 3:041.2.5 Configuring Delegations 4:47


Lab/Activity1.2.7 Configure Forwarders1.2.8 Configure Conditional Forwarders

Fact Sheets1.2.6 Name Resolution Facts




1.3: Primary and Secondary DNS Zones


What is the difference between forward lookup and reverse lookup zones? How are reverse lookup zones named? What is the difference between a standard zone and an Active Directory-

integrated zone? What is the difference between a primary zone and a secondary zone? What events trigger a zone transfer? Why are Active Directory-integrated zones transfers considered to be secure? What are the differences between the four Active Directory-integrated zone

replication scope options?


Create a primary zone. Create a secondary zone. Create an Active Directory-integrated zone. Create a reverse lookup zone. Convert a zone to Active Directory-integrated.


DNS Zone Any distinct, contiguous portion of the domain name space in the Domain Name System.

Forward Lookup Zone

A DNS zone containing records used to resolve FQDNs to IP addresses.

Reverse Lookup Zone

A DNS zone containing records used to resolve IP addresses to FQDNs.

Standard Zone A DNS zone where DNS records are stored in text files.Primary (Master)

ZoneA standard read-write zone that contains original, authoritative DNS records.

Secondary (Slave) Zone

A standard read-only zone that contains a copy of the records contained in a primary zone and used for fault tolerance and load balancing.

Zone Transfer The transfer of records from a primary zone to a secondary zone.Active DirectoryIntegrated Zone

A DNS zone where DNS records are stored in Active Directory data structures.

Replication Scope

An Active Directory-integrated zone option that controls how records are replicated between domain controllers.


TestOut Server Pro 2016: 1.1 Install and Configure DNS


Networking1.1.1 Install and configure forwarders1.2 Create and configure DNS zones and records1.2.1 Create and configure DNS zones


1.1 Install and configure DNS servers 1.1.8 Configure DNS Server settings using Windows PowerShell1.2 Create and configure DNS zones and records1.2.1 Create primary zones1.2.2 Configure Active Directory primary zones1.2.3 Create and configure secondary zones

Video/Demo Time1.3.1 DNS Zones 11:011.3.2 Creating a Primary Zone 4:591.3.3 Creating a Secondary Zone 4:351.3.4 Creating an Active Directory Integrated Zone 4:59


Lab/Activity1.3.6 Create a Zone1.3.7 Create a Reverse Lookup Zone1.3.8 Create an Active Directory-Integrated Zone1.3.9 Convert a Zone to Active Directory-Integrated

Fact Sheets1.3.5 DNS Zone Facts




1.4: Zone Properties and Auxiliary DNS Zones


What information is contained in the Start of Authority (SOA) record? When are stub zones most often used? What is the purpose of the GlobalNames zone?


Create a stub zone. Create a GlobalNames zone. Configure zone properties. Create a root zone.


Start of Authority (SOA) Records

A record in a DNS zone that is integrated into the zone properties dialog box that contains the name of the DNS server, the zone administrator and other key settings.

Stub Zones A DNS zone that contains information used to directly forward queries to a specific external DNS zone.

GlobalNames Zones A DNS zone used to resolve single label names in a domain to IP addresses.


Sample: TestOut Server Pro 2016: Networking

1.1 Install and Configure DNS1.1.2 Configure Root Hints1.2 Create and configure DNS zones and records1.1.8 Configure DNS Server settings with Windows PowerShell1.2.2 Create and configure stub zones1.2.3 Create and configure DNS records

Sample: Microsoft 70-741 Networkingwith Windows Server 2016

1.2 Create and configure DNS zones and records 1.2.4 Create and configure stub zones1.2.5 Configure a GlobalNames zone1.2.7 Create and configure DNS Resource Records (RR)1.2.7.4 SOA records1.2.9 Configure record options, including Tim To Live (TTL) and weight


Video/Demo Time1.4.1 Zone Properties 0:421.4.2 Creating a Stub Zone 4:591.4.3 Creating GlobalNames Zones 2:341.4.4 Configure Zone Properties 8:17


Lab/Activity1.4.6 Create a GlobalNames Zone1.4.7 Create a Root Zone

Fact Sheets1.4.5 Zone Properties and Auxiliary DNS Zones Facts




1.5: DNS Records


What is the difference between an A record and a AAAA record? What situations might warrant using a CNAME record? What type of server does an MX record identify? What is the purpose of PTR records? What does an NS record identify?


Create A and AAAA records. Create PTR records. Create CNAME records. Create MX records. Manage NS and SRV records.


Host Record

A DNS resource record that resolves an FQDN to an IP address.

A records resolve to IPv4 addresses. AAAA records resolve IPv6 addresses.

CNAME (Alias) Record

A DNS resource record that specifies that one FQDN name is an alias for another FQDN.

MX Record A DNS resource record that identifies a mail server for a DNS domain.PTR Record A DNS resource record that resolves an IP address to an FQDN.

SRV Record A DNS resource record that resolves a domain service to an IP address.

NS Record A DNS resource record that identifies a DNS server for a DNS domain.

SOA RecordA DNS resource record that is integrated into the zone properties dialog box that contains the name of the DNS server, the zone administrator, and other key settings.



1.2 Create and configure DNS zones and records 1.2.1 Create and configure DNS zones1.2.3 Create and configure DNS records


1.2 Create and configure DNS zones and records 1.2.7 Create and configure DNS Resource Records (RR)1.2.7.1 A records


1.2.7.2 AAAA records1.2.7.3 PTR records1.2.7.4 SOA records1.2.7.5| NS records1.2.7.6 SRV records1.2.7.7 CNAME records1.2.7.8 MX records

Video/Demo Time1.5.1 DNS Record Types 4:171.5.2 Creating A and AAAA Records 4:481.5.3 Creating PTR Records 3:391.5.4 Creating CNAME Records 4:191.5.5 Creating MX Records 3:461.5.6 Managing NS and SRV Records 5:10


Lab/Activity1.5.8 Create a Zone and Add Records1.5.9 Create CNAME Records

Fact Sheets1.5.7 DNS Record Facts




1.6: DNS Record Management


What are the risks of allowing unsecured dynamic updates in DNS? How is client information updated in DNS when the client obtains an IP address

from a DHCP server? How does the Round Robin setting affect how a DNS server responds to queries

when there are duplicate host records? How does the netmask ordering setting affect how a DNS server responds to

queries when there are duplicate host records?


Enable and configure secure dynamic updates. Configure round robin. Configure netmask ordering.


Secure Dynamic Updates

The process of integrating DNS with Active Directory so that DNS host and pointer records can only be updated by authenticated computers that are members of the Active Directory domain.

Round RobinThe DNS process of responding to client queries for an FQDN that has multiple IP addresses. The IP addresses are reordered in a round robin fashion by the DNS server.

Netmask Ordering

The DNS process of responding to client queries for an FQDN that has multiple IP addresses. The IP address are ordered by IP address proximity.



1.2 Create and configure DNS zones and records 1.2.3 Create and configure DNS records


1.2 Create and configure DNS zones and records 1.2.10 Configure round robin1.2.11 Configure secure dynamic updates

Video/Demo Time1.6.1 DNS Record Management 8:281.6.2 Configuring Secure Dynamic Updates 3:181.6.3 Configuring Round Robin 4:231.6.4 Configuring Duplicate Record Support 6:19


Lab/ActivityCopyright © 2018 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, Windows, and Office are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them.

1.6.6 Enable Dynamic DNS Updates1.6.7 Configure DNS Round Robin

Fact Sheets1.6.5 DNS Record Management Facts




1.7: Single-Label Name Resolution


How does DNS devolution work? When would you use a GlobalNames zone? How can a DNS suffix search list be configured using Group Policy?


Configure the DNS suffix search list.


Single-Label Name Resolution

The process of resolving a non-FQDN host name to an IP address.

Primary DNS suffix The name of the DNS domain to which a client belongs.

DNS DevolutionPart of the single-label name resolution process where the DNS client will automatically append portions of primary DNS suffix when sending queries to a DNS server.

GlobalNames Zone A zone containing a the static list of global records with single-label names mapped to IP addresses.

DNS Suffix Search List

A list of DNS domains appended by the DNS client to single-label names when sending queries to a DNS server.


TestOut Server Pro 2016: Networking 1.1 Install and Configure DNS 1.1.7 Configure Global Settings


1.1 Install and configure DNS servers 1.1.18 Configure global settings1.2 Create and configure DNS zones and records1.2.5 Configure a GlobalNames zone

Video/Demo Time1.7.1 Single-Label Name Resolution 4:221.7.2 Configuring the DNS Suffix Search List 4:00


Lab/Activity1.7.4 Configure Search Suffixes

Fact Sheets1.7.3 Single-Label Name Facts


1.8: DNS Server Properties


When should you activate debug logging? How can you run test queries to monitor your DNS server? How can you prevent a DNS server from running recursive queries? Where would you enable scavenging of stale records on the system? What type of DNS servers are allowed when the Enable BIND secondaries

option is checked?


Configure DNS logging. Configure recursion settings. Configure DNS zone scavenging. Configure global settings.


DNS Logging The ability to configure the type of events to include in the DNS log.Zone Scavenging The process of eliminating obsolete DNS records.



1.1 Install and Configure DNS 1.1.6 Configure DNS logging1.1.7 Configure Global Settings1.2 Create and configure DNS zones and records1.2.4 Configure zone scavenging


1.1 Install and configure DNS servers 1.1.14 Configure DNS logging1.1.16 Configure recursion settings1.1.18 Configure global settings

Video/Demo Time1.8.1 DNS Server Properties 5:001.8.2 Configuring DNS Logging 3:371.8.3 Configuring Recursion Settings 3:171.8.4 Configuring Zone Scavenging 9:551.8.5 Configuring Global Settings 1:53


Lab/Activity1.8.7 Configure DNS Logging1.8.8 Configure DNS Advanced Settings


1.8.9 Configure DNS Aging and Scavenging

Fact Sheets1.8.6 DNS Server Properties Facts




1.9: DNS Protection


How does DNSSEC make DNS zone records more secure? How do you randomize the port used for DNS queries? How can you prevent the entries in the DNS cache from changing too quickly? How can the slowing of responses to DNS queries make a DNS server more

secure?


Configure DNS Security Extensions (DNSSEC). Configure DNS socket pooling. Configure DNS cache locking. Configure delegated administration. Enabling response rate limiting.


DNS Security Extensions(DNSSEC)

A technology used to secure the Domain Name System (DNS) process. DNSSEC is used to verify whether a response was actually what was sent out by the replying server and whether the server sending it is really who they claim to be.

DNS Socket Pooling

A DNS security feature where multiple TCP ports are used when performing queries.

DNS Cache Locking

A DNS security feature that controls how long before a cached entry can be overwritten. This helps prevent attacks that attempt to pollute information in the cache to direct traffic to a malicious site.

Response Rate Limiting

A DNS security feature that helps protect a DNS server from denial of service attacks by limiting the frequency and size of the response to a query.

DANEA protocol that allows X.509 certificates (commonly used for Transport Layer Security), to be bound to DNS names to help prevent man-in-the-middle attacks.



1.1 Install and Configure DNS 1.1.3 Configure DNSSEC1.1.4 Configure DNS Socket Pool1.1.5 Configure delegated administration


1.1 Install and configure DNS servers 1.1.9 Configure Domain Name System Security Extensions (DNSSEC)


1.1.10 Configure DNS Socket Pool1.1.11 Configure cache locking1.1.12 Enable Response Rate Limiting1.1.13 Configure DNS-based Authentication of Named Entities (DANE)1.1.15 Configure delegated administration

Video/Demo Time1.9.1 DNS Protection Features 5:071.9.2 Configuring DNS Security Extensions (DNSSEC) 9:061.9.3 Configuring DNS Socket Pooling 3:031.9.4 Configuring DNS Cache Locking 3:201.9.5 Enabling Response Rate Limiting 6:151.9.6 Configuring Delegated Administration 2:15


Lab/Activity1.9.8 Configure DNSSEC

Fact Sheets1.9.7 DNS Protection Facts




1.10: DNS Policies


In what ways can a DNS policy be used? What are the three types of DNS policies? How do they differ?


Configure DNS policies. Configure zone scopes.


DNS Policy A new feature in Windows Server 2016 that gives the DNS server flexibility when responding to queries.

DNS Query Resolution Policy

A policy that specifies how incoming resolution queries are handled by a DNS server.

DNS Recursion Policy

A policy that controls how the DNS server performs recursion for a query.

DNS Transfer Policy A policy that controls whether a zone transfer is allowed.This section helps you prepare for the following certification exam objectives:

Exam Objective


1.1 Install and configure DNS servers 1.1.7 Implement DNS policies1.2 Create and configure DNS zones and records1.2.14 Configure Zone Scopes1.2.15 Configure records in Zone Scopes1.2.16 Configure policies for zones

Video/Demo Time1.10.1 DNS Policies Overview 2:051.10.2 Configuring DNS Policies 7:291.10.3 Configuring Zone Scopes 6:33


Fact Sheets1.10.4 DNS Policy Facts


Total TimeCopyright © 2018 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, Windows, and Office are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them.

About 25 minutes


1.11: DNS Monitoring and Troubleshooting


What server resources should be monitored to optimize DNS performance? What application logs and event logs track DNS processing and performance? Which two categories do DNS problems generally fall into? Which tools can be used to troubleshoot DNS?


Implement DNS performance alerts. Run test queries against a DSN server. Use DNS audit and analytical events. Analyze DNS zone statistics. Troubleshoot DNS and DNS records.

Key terms for this section include the following:Term DefinitionDNS

Performance Alerts

A feature added to Server Manager when the DNS role is added to send alerts when CPU usage and available memory cross a configurable threshold.

DNS Performance

Tuning

The process of monitoring and configuring the DNS server's critical resources to optimize DNS performance.

PowerShell

An automated task framework provided by Microsoft with a command line shell and scripting language. There are several DNS cmdlets that can be uses to set up, configure, and manage a DNS server.

dnscmd A command line utility used for routine DNS setup, configuration, and management.



1.1 Install and configure DNS servers 1.1.8 Configure DNS Server settings using Windows PowerShell1.1.17 Implement DNS performance tuning1.2 Create and configure DNS zones and records1.2.6 Analyze zone level statistics1.2.13 Use DNS audit events and analytical (query) events for auditing and troubleshooting

Video/Demo Time1.11.1 DNS Monitoring and Troubleshooting 9:291.11.2 Implementing DNS Performance Alerts 1:41


1.11.3 Using DNS Audit and Analytical Events 3:021.11.4 Analyzing DNS Zone Statistics 4:36


Lab/Activity1.11.6 Troubleshoot Dynamic DNS1.11.7 Troubleshoot DNS Records

Fact Sheets1.11.5 DNS Monitoring and Troubleshooting Facts




2.1: IPv4 Addresses


What is the format of an IPv4 address? What is the purpose of a subnet mask? What is the relationship between CIDR notation and the subnet mask? What is the purpose of ANDing? What is the default address class of the IP address 132.11.166.5? What is the decimal equivalent of the IP address 132.11.166.5? What is the decimal value of a /27 CIDR mask? Given IP addresses and subnet masks, how do you determine if two workstations

are on the same subnet?


Convert an IPv4 address from binary to its decimal equivalent. Configure static IPv4 settings. Create subnets. Identify valid subnet addresses. Choose a subnet address and mask. Identify valid host addresses on the subnet.


Subnetting The process of dividing a large network into smaller networks.Supernetting The process of combining two or more networks.

Classless Inter-Domain Routing

(CIDR)

A set of internet protocol standards used to create unique identifiers for networks and host devices.

ANDing The process used to determine the network address/ID.

Subnet MaskA 32-bit number that defines which portion of an IPv4 address identifies the network address and which portion of the address defines the host address.

Network ID A 32-bit number that identifies network an IPv4 address belongs to.



3.1 Configure TCP/IP 3.1.1 Configure IPv4 settings


4.1 Implement IPv4 and IPv6 addressing 4.1.1 Configure IPv4 addresses and options4.1.3 Configure IPv4 or IPv6 subnetting

Video/Demo TimeCopyright © 2018 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, Windows, and Office are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them.

2.1.1 Understanding Binary Numbers 6:052.1.2 IPv4 Addressing 4:512.1.3 IPv4 Address Classes and NAT Routing 8:352.1.4 Understanding the Basics of ANDing 9:182.1.5 IPv4 Classless Inter-Domain Routing (CIDR) 4:472.1.6 IPv4 Advanced ANDing 5:362.1.7 IPv4 Network Subnetting 9:572.1.8 Configuring IPv4 8:12


Lab/Activity2.1.11 Explore IPv4 Configuration2.1.12 Configure IPv4 Settings

Fact Sheets2.1.9 IPv4 Addressing Facts2.1.10 Custom Addressing Facts




2.2: IPv6 Addresses


What are the components of an IPv6 address? How many bits are in an IPv6 address? What methods are used to omit leading zeros in an IPv6 address? Which portion of an IPv6 address contains the network ID? Which portion of an IPv6 address contains the interface ID? What are the two methods used to determine the interface ID?


Configure IPv6 settings. Implement IPv6 stateless addressing. Subnet IPv6 addresses.


Global-Unicast

An IPv6 address type that is publicly routable and can be used in the internet.

Unique-Local

An IPv6 address type that indicates the IP address is a private IP address.

Link-Local An IPv6 address type that indicates that the IP address was configured by default.

Multicast An IPv6 address type that indicates that the packet is addressed to a number of hosts on the network, but not all hosts.

Prefix ID The leftmost bits of the IPv6 address, also know as the network ID. The prefix is used for routing IPv6 packets.

Interface ID The rightmost bits of the IPv6 address used to uniquely identify a network card (interface) in a host.





4.1 Implement IPv4 and IPv6 addressing 4.1.2 Determine and configure appropriate IPv6 addresses4.1.3 Configure IPv4 or IPv6 subnetting4.1.4 Implement IPv6 stateless addressing

Video/Demo Time2.2.1 IPv6 Addressing 4:552.2.2 IPv6 Subnetting 9:382.2.3 IPv6 Stateless Addresses 4:21


2.2.4 Implementing IPv6 Stateless Addressing 3:33Total Video Time 22:27

Lab/Activity2.2.7 Configure IPv6 Settings

Fact Sheets2.2.5 IPv6 Addressing Facts2.2.6 IPv6 Configuration Facts




2.3: IPv4-to-IPv6 Transitional Technologies


What limitations are associated with ISATAP in an IPv6 implementation? When is 6to4 tunneling automatically configured? When should you implement Teredo? Which IPv6 tunneling methods work through NAT? What technology allows an IPv4-only host to communicate with an IPv6-only

host?


Configure a Windows Server 2016 as an ISATAP router. Tunnel an IPv6 address through the IPv4 version of the internet using 6to4. Configure Teredo to allow tunneling through a NAT router.


TunnelingThe process of wrapping or embedding one type of IP packet (such as IPv6) within another type of IP packet (such as IPv4) to allow hosts to communicate over different IP infrastructures.

Network Address Translation

(NAT)

Translates private or unregistered IP address to a public IP address, allowing those using private addresses to access the internet.

NetshA command line scripting utility that allows you to display or modify the network configuration of a currently running computer remotely or locally.

Intra-site Automatic Tunnel Addressing

Protocol(ISATAP)

A tunneling method for use within a site to provide IPv6 communication over a private IPv4 network by encapsulating IPv6 packets with an IPv4 header.

6to4 TunnelingA transitional technology that's used to dynamically tunnel an IPv6 address through the IPv4 version of the internet. Cannot be used between IPv4-only hosts and IPv6-only hosts.

Teredo TunnelingEstablishes the tunnel between individual IPv6 hosts so they can communicate through a private or public IPv4 network. This tunneling method works through a NAT.





4.1 Implement IPv4 and IPv6 addressing 4.1.5 Configure interoperability between IPv4 and


IPv6 by using ISATAP, 6to4, and Teredo scenarios

Video/Demo Time2.3.1 IPv4-to-IPv6 Transitional Technologies 3:142.3.2 Configuring ISATAP 6:202.3.3 Configuring 6to4 2:362.3.4 Configuring Teredo 2:25


Fact Sheets2.3.5 IPv4 and IPv6 Interoperability Facts




3.1: Install DHCP


What are the steps a client uses to acquire an address from a DHCP server? When must you authorize a DHCP server? What permissions do you need to authorize a DHCP server? Why does a DHCP server shut down if its address is not found in Active

Directory? What does this protect against?


Install and authorize a DHCP server.

Key terms for this section include the following:Terms Definitions

Dynamic Host Configuration

Protocol (DHCP)

A component of the TCP/IP protocol suite used to assign an IP address to a host automatically from a preconfigured pool of addresses.

DHCP Server Authorization

The process of enabling a DHCP server in a domain environment to prevent rogue DHCP servers from functioning on the network.

DHCP Server

A computer that runs the DHCP Server service, holds information about available IP addresses and related configuration information as defined by the systems administrator, and responds to requests from DHCP clients.

DHCP Client A computer that gets its IP configuration information using DHCP from a DHCP server.

Address PoolAvailable IP addresses form an address pool within the DHCP scope. The pooled addresses are available for the DHCP server to dynamically assign to DHCP clients.

Broadcast A packet addressed to all computers on the network.This section helps you prepare for the following certification exam objectives:

Exam ObjectiveTestOut Server Pro 2016:

Networking2.1 Install and configure DHCP 2.1.1 Install and authorize DHCP servers


2.1 Install and configure DHCP 2.3.1 Install and configure DHCP servers2.3.2 Authorize a DHCP server

Video/Demo Time3.1.1 DHCP Installation and Authorization 1:003.1.2 Installing and Authorizing DHCP 3:43

Total Video Time 4:43Copyright © 2018 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, Windows, and Office are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them.

Lab/Activity3.1.4 Install and Configure a DHCP Server

Fact Sheets3.1.3 DHCP Installation Facts




3.2: DHCP Scopes


How can you change the subnet on a scope? How are reservations different from exclusions? What are the two ways to exclude IP addresses from a scope? What information is necessary to configure a client reservation? How are filters used to identify which computers can be clients of the DHCP

server?


Create and activate scopes. Configure exclusion ranges and client reservations. Configure filters on a DHCP server.


DHCP Scopes A pool of IP addresses and other IP configuration parameters from which a DHCP server leases addresses to DHCP scopes.

DHCP Lease Duration

A parameter of a DHCP IP address lease that specifies how long a DHCP client can keep an address.

DHCP Lease Renewal

The process of a DHCP client renewing its IP address lease by using unicast DHCPREQUEST messages.

DHCP Filter A DHCP server feature that allows administrators to restrict which computers on a network are leased IP addresses.

DHCP Reservation

An IP address associated with reserving DHCP clients' MAC addresses to ensure that when a client requests an IP address, it always receives the same one with any configured options.

DHCP Exclusions

One or more IP addresses within a DHCP scope that are not allocated by the DHCP Server service. Exclusions ensure that the specified IP addresses will not be offered to clients by the DHCP server as part of the general address pool.



2.1 Install and configure DHCP 2.1.1 Install and authorize DHCP servers2.1.2 Configure DHCP scopes and options2.1.3 Configure DHCP exclusions and reservations

Microsoft 70-741 Networking

with Windows Server 2016

5.2 Determine scenarios and requirements for implementing Software Defined Networking (SDN) 2.1.3 Create and configure scopes2.1.5 Configure a DHCP reservation


2.2.1 Configure a lease period

Video/Demo Time3.2.1 DHCP Scopes 0:533.2.2 Creating DHCP Scopes 8:35


Lab/Activity3.2.4 Create DHCP Exclusion Ranges3.2.5 Create DHCP Client Reservations

Fact Sheets3.2.3 DHCP Scope, Exclusion, and Reservation Facts




3.3: DHCP Options


What are the four levels of DHCP IP configuration options? What is each level's purpose?

In what order are DHCP options applied? Which option values take precedence: those delivered through DHCP, or those

configured manually on the client?


Configure DHCP options.


DHCP Option Types

Client configuration parameters a DHCP server can assign when offering an IP address lease to a client.

DHCP Option Class

A way for the DHCP server to customize option types provided to clients.



2.1 Install and configure DHCP 2.1.2 Configure DHCP scopes and options


2.1 Install and configure DHCP 2.1.6 Configure DHCP options2.1.7 Configure DNS options from within DHCP

Video/Demo Time3.3.1 DHCP Options Overview 1:213.3.2 Configuring DHCP Options 6:21


Lab/Activity3.3.4 Configure DHCP Options

Fact Sheets3.3.3 DHCP Options Facts




3.4: Advanced Scopes


What does a multicast address indicate? When might you choose to create superscopes? What type of system is multinet when discussing superscopes? How does IPv6 differ from IPv4? If the M and O flags in the router advertisement (RA) message are set to 1, what

type of configuration method should you use? What options do you have for dealing with zeros (0s) in an IPv6 address? How is autoconfiguration in IPv6 improved over autoconfiguration in IPv4?


Create a multicast scope. Create an IPv6 scope. Configure DHCPv6 scope options. Create and configure a superscope.


Multicast Scope

A type of DHCP scope that allows multicast addresses to be dynamically assigned to multicast servers and clients using Multicast Address Dynamic Client Allocation Protocol (MADCAP).

SuperscopeA special type of scope consisting of one or more member scopes that allows a DHCP server to service multiple IP subnets on a single physical network.

DHCP Version 6

The IPv6 version of DHCP, which supports the longer IP 128-bit addresses.



2.1 Install and configure DHCP 2.1.4 Create and configure superscopes



2.1 Install and configure DHCP 2.1.4 Create and configure superscopes and multicast scopes2.1.11 Implement IPv6 addressing using DHCPv6

Video/Demo Time3.4.1 Advanced Scopes 1:143.4.2 Configuring a Superscope 3:213.4.3 Configuring a Multicast Scope 3:273.4.6 Configuring a DHCPv6 Scope 5:00

Total Video Time 13:02Copyright © 2018 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, Windows, and Office are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them.

Lab/Activity3.4.5 Create a Superscope3.4.8 Configure an IPv6 Scope

Fact Sheets3.4.4 DHCP Superscope and Multicast Scope Facts3.4.7 DHCPv6 Scope Facts




3.5: Centralized DHCP and PXE


What options are available for a DHCP server to service a subnet separated with a router?

How does DHCP broadcast reach clients located in a different subnet? What are the alternatives to using a Microsoft DHCP relay agent?


Configure a DHCP relay agent.


DHCP Relay Agent

A device that listens for broadcast DHCPDISCOVER and DHCPREQUEST messages and forwards them to a DHCP server on another subnet.

DHCP IP Helper

Address

The IP Helper address lets routers relay User Datagram Protocol (UDP) requests when necessary. It makes the router a middleman and allows a broadcast to pass through a router to its destination.

PXE

Preboot execution environment (PXE) allows computers to boot remotely through a network interface. PXE enables a client machine to boot from a server independent of the hard disks and installed operating system.



2.1 Install and configure DHCP 2.1.2 Configure DHCP scopes and options2.1.5 Configure DHCP Relay Agent


2.1 Install and configure DHCP 2.1.9 Configure client and server for PXE boot2.1.10 Configure DHCP Relay Agent

Video/Demo Time3.5.1 Centralized DHCP 7:413.5.2 Configuring a DHCP Relay Agent 5:503.5.5 PXE Boot 1:483.5.6 Configure Client and Server for PXE Boot 1:38


Lab/Activity3.5.4 Configure a DHCP Relay Agent


Fact Sheets3.5.3 DHCP Centralization Facts3.5.7 PXE Boot Facts




3.6: DHCP Policies


When should you use a DHCP policy?


Create and configure DHCP policies.

Key terms for this section include the following:Term DefinitionDHCP policies

A feature in Windows Server 2016 that gives administrators the ability to customize IP address lease options with conditions based on criteria.





2.1 Install and configure DHCP 2.1.3 Create and configure scopes2.1.6 Configure DHCP options2.1.8 Configure (DHCP) policies

Video/Demo Time3.6.1 DHCP Policies 1:353.6.2 Configuring DHCP Policies 5:31


Fact Sheets3.6.3 DHCP Policy Facts




3.7: Advanced DHCP Management


In which two ways can you implement DHCP failover? What is a split scope? What steps do you take to create a split scope? How does DHCP implement name protection?


Configure a DHCP failover. Create and configure a split scope.


DHCP FailoverA feature in Windows Server 2016 that allows two DHCP servers to share the pool of IP addresses in a scope, giving both servers access to all addresses in the pool.

Split ScopeA fault-tolerant DHCP configuration in which two DHCP servers that contains the same scope information, allowing both servers to offer DHCP services to clients.

DHCP Name Protection

A feature in DHCP that prevents name squatting by non-Windows computers by using the DHCP resource record Dynamic Host Configuration Identifier (DHCID). Also see name squatting.



2.1 Install and configure DHCP 2.1.6 Configure high availability using DHCP failover


2.1 Install and configure DHCP 2.2.3 Configure high availability using DHCP failover2.2.4 Configure DHCP name protection

Video/Demo Time3.7.1 Advanced DHCP Management Overview 1:283.7.2 Configuring High Availability Failover 8:203.7.3 Configuring High Availability Load Balancing 3:233.7.6 Configuring DHCP Filters 6:013.7.9 Configuring DHCP Name Protection 5:46


Lab/Activity3.7.4 Configure DHCP Failover 13.7.5 Configure DHCP Failover 23.7.7 Configure a Scope for an Additional Subnet3.7.8 Configure a Split Scope


Fact Sheets3.7.10 DHCP High Availability Facts




3.8: Maintain the DHCP Database


When would you want to back up the DHCP database? What information is backed up with a default backup? Where is the DHCP database stored?


Back up a DHCP database.


DHCP Database

DHCP servers store DHCP lease and reservation information in database files. By default, these files are stored in the %SystemRoot%\System32\DHCP directory.





2.1 Install and configure DHCP 2.1.12 Perform export and import of a DHCP server2.1.13 Perform DHCP server migration2.2.2 Back up and restore the DHCP database

Video/Demo Time3.8.1 Maintain the DHCP Database 1:503.8.2 Backing Up and Restoring the Database 4:173.8.3 Performing DHCP Server Migration 4:49


Fact Sheets3.8.4 DHCP Database Facts




3.9: Troubleshooting DHCP


A Windows client system in your network has an IP address of 169.254.0.1. Why was this address assigned?

DHCP discoverers are not increasing in the DHCP console. What could cause this?

DHCP discoverers are increasing in the DHCP console, but all offers are static. What could cause this?

DHCP discoverers and offers are increasing in the DHCP console, but requests are static. What could cause this?


Configure automatic and alternate addressing. Troubleshoot common DHCP issues.


Automatic Private IPv4 Addressing

(APIPA)

The Windows function that provides DHCP autoconfiguration addressing. APIPA assigns a class B IP address from 169.254.0.0 to 169.254.255.255 to the client when a DHCP server is either permanently or temporarily unavailable.


TestOut Server Pro 2016: Networking 2.1 Install and configure DHCP 2.1.7 Troubleshoot DHCP


2.1 Install and configure DHCP 2.2.5 Troubleshoot DHCP

Video/Demo Time3.9.1 Issues with DHCP 4:063.9.2 Configuring Alternate Addresses 10:463.9.3 Troubleshooting DHCP 8:15


Lab/Activity3.9.5 Configure Automatic and Alternate Addressing3.9.6 Troubleshoot DHCP 13.9.7 Troubleshoot DHCP 2

Fact Sheets3.9.4 DHCP Troubleshooting Facts

Number of Exam QuestionsCopyright © 2018 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, Windows, and Office are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them.

12 questions



4.1: IPAM Installation


What functions does the IP Address Management (IPAM) server perform? What is the IPAM server scope discovery range in Active Directory? What is IPAM provisioning? What are the steps for provisioning an IPAM server? What tasks must be performed before the Server Discovery task can work

properly? Manage IP block and ranges from the IPAM console.


Install and Configure IPAM using the IPAM Provisioning Wizard. Configure Server Discovery to discover domain controllers, DHCP servers, DNS

servers, and NPS servers, and automatically add them to the IPAM console.

Key terms for this section include the following:Terms Definitions

IP Address Management

(IPAM)

IP Address Management (IPAM) is a feature in newer releases of Windows Server that enables an administrator to manage the IP address space.

IPAM ServerThe IPAM server collects data from the managed DNS and DHCP servers, manages Windows Internal Database, and manages security groups and roles related to IPAM.

WID Windows Internal Database is a relational data store used by Microsoft applications and services for small environments.

Microsoft SQL Server

Microsoft SQL Server is a relational database management system that supports data processes and manipulations for corporate IT environments.

IPAM Client The IPAM client provides an interface that the IPAM administrator can use to manage and configure the IPAM server.

IP Address Block

An IP address block is the largest unit in the IP address space. It consists of a contiguous range of IP addresses with a corresponding subnet mask.

IP Address Range

IP address ranges are part of an IP address space beneath the address block. An IP address range normally maps to a DHCP scope.

IP Addresses IP addresses are the individual addresses that are contained in an IP address range.

Unmapped Address Space

Unmapped address spaces are IP addresses or IP address ranges that haven't been assigned to an IP address block.

Group Policy Group Policy provisioning is the process of using group policies to


Povisioning perform tasks such as creating security groups, setting firewall rules, and creating shares for each server managed by IPAM.

Manual Provisioning

Manual provisioning is the process of manually configuring each IPAM server task and managed server.



3.2 Implement IPAM 3.2.1 Configure server discovery3.2.2 Create and Manage IP blocks and ranges


2.3 Implement and Maintain IP Address Management 2.3.1 Provision IPAM manually or by using Group Policy2.3.6 Configure IPAM database storage using SQL Server2.3.2 Configure server discovery2.3.3 Create and manage IP blocks and ranges

Video/Demo Time4.1.1 IPAM Overview 3:434.1.2 Install IPAM 14:024.1.3 Create IP Blocks 6:52


Fact Sheets4.1.4 IPAM Facts




4.2: IPAM DNS and DHCP


What information about DNS and DHCP servers does IPAM store? How do you view IP address ranges using the IPAM console? What DNS zone information can you view in IPAM? Why should you not install IPAM on a DHCP server?


Use the IPAM console to manage DHCP and DNS servers.

Key terms for this section include the following:Key

Terms Definitions

DHCP Server

A computer rthat runs DHCP Server service, holds information about available IP addresses and related configuration information as defined by the systems administrator, and responds to requests from DHCP clients.

DHCP Client

A computer that gets its IP configuration information by using DHCP from a DHCP server.

DHCP Scopes

A pool of IP addresses and other IP configuration parameters from which a DHCP server leases addresses to DHCP scopes.

Address Pool

Available IP addresses from an address pool within the DHCP scope. These addresses are available for the DHCP server to be dynamically assigned by DHCP clients.



3.2 Implement IPAM 3.2.3 Manage DHCP server properties using IPAM3.2.4 Manage DNS server properties using IPAM


2.3 Implement and Maintain IP Address Management 2.3.8 Manage DHCP server properties using IPAM2.3.9 Configure DHCP scopes and options2.3.10 Configure DHCP policies and failover2.3.11 Manage DNS server properties using IPAM2.3.12 Manage DNS zones and records

Video/Demo Time4.2.1 IPAM and DHCP Overview 1:324.2.2 Manage the DHCP Server with IPAM 2:474.2.3 Configure DHCP Scopes and Options with IPAM 4:454.2.4 Configure DHCP Policies with IPAM 4:414.2.5 Configure DHCP Failover with IPAM 1:47


4.2.6 Managing DNS Records with IPAM 3:104.2.7 Manage the DNS Server with IPAM 4:38


Fact Sheets4.2.8 IPAM DNS and DHCP Facts




4.3: Advanced IPAM Administration and Auditing


Which local group on the IPAM server should you assign a user to so that she will have the appropriate rights to manage an IPAM server?

Which tasks must be completed to delegate the ability to manage an IPAM server to a user?

If Group Policy provisioning was used to set up the IPAM server, what domain administrator privileges should a user have in order to indicate that servers in inventory are managed or not managed?

Which group must a user be a member of in order to access the IPM server from a remote IPAM client?

How can you allow a user to manage an IPAM server from a remote location? How do you run Server Discovery in a forest environment?


Assign a user the rights to remotely act as an IPAM administrator. Audit DNS and DHCP with IPAM.

Key terms for this section include the following:Key Terms Definitions

TrustsTrusts are relationships between domains or forests that allow users to be authenticated by domain controllers from another domain or forest.

Two-Way TrustsA two-way trust is a trust that goes in both directions in a domain or forest. Users in each domain can access resources in each other’s domains or forests.

IP Utilization Threshold

An Under status indicates that IP address usage is under the specified threshold. By default, the Under threshold means that utilization is less than 20%.

Role-Based Access Control

(RBAC)

Role-Based Access Control (RBAC) is a method for granting access to computer or network resources based on the roles of individual users. Access allows an individual user to perform specific tasks as determined by the system administrator.

Access Policies: Access policies assign users or groups to specific roles and access scopes.

Access Scope Access scopes determine which objects a user has access to.System Center Virtual Machine Manager (VMM)

Virtual Machine Manager is part of the System Center suite that is used to configure and manage datacenters by providing unified management across multiple systems.




3.2 Implement IPAM 3.2.5 Delegate administration for DNS and DHCP using RBAC



2.3 Implement and Maintain IP Address Management 2.3.4 Monitor utilization of IP address space2.3.5 Migrate existing workloads to IPAM2.3.7 Determine scenarios for using IPAM with System Center Virtual Machine Manager for physical and virtual IP address space management2.3.13 Manage DNS and DHCP servers in multiple Active Directory forests2.3.14 Delegate administration for DNS and DHCP using role-based access control (RBAC)2.3.15 Audit the changes performed on the DNS and DHCP servers2.3.16 Audit the IPAM address usage trail2.3.17 Audit DHCP lease events and user logon events

Video/Demo Time4.3.1 Advanced IPAM Administration Overview 4:154.3.2 Use IPAM in Multiple Forests 4:164.3.3 Delegate IPAM Administration 4:264.3.4 Audit Changes to DHCP and DNS 2:37


Fact Sheets4.3.5 Advanced IPAM Administration Facts




5.1: Routing


What are the major functions you can configure after the Routing and Remote Access role is installed?

What is a router? What steps must you complete to add routing to a Windows Server 2016?

What are two methods a router can use to learn about networks they aren't directly connected with?

What is the function of the Routing Information Protocol (RIP)? How is the protocol configured in Windows Server 2016?

What is the function of a NAT router? How is a NAT router configured?


Configure LAN routing Configure Network Address Translation (NAT) Configure Border Gateway Protocol (BPG) routing Install the Routing and Remote Access role Enable LAN routing Add static routes Configure RIP routing Configure NAT


Router Routers forward packets from one network to another by maintaining routing information in a database called a routing table.

Static Route A static route is a route that is manually added to the routing table.

Dynamic Routing A process called routing protocol exchanges information between routers to dynamically build the routing table.

Default Route A default route is a special route that is used when no other routes in the routing table are found.

RIP(Routing

Information Protocol)

A distance-vector routing protocol is used to exchange network topology information with other routers, allowing the routing table to be built dynamically.

NAT(Network Address

Translation)

NAT translates private addresses to the public address of the NAT router. This allows you to connect a private network to the internet without obtaining registered (public) addresses for every host.


TestOut Server Pro 2016: 2.2 Implement Routing


Networking

2.2.1 Enable LAN routing2.2.2 Implement NAT4.2 Implement Remote Access4.2.1 Enable Remote Access


3.1 Implement network connectivity solutions 3.1.1 Implement Network Address Translation (NAT)3.1.2 Configure routing

Video/Demo Time5.1.1 Routing 10:035.1.2 Routing and Remote Access Overview 1:305.1.3 Configuring Routing 3:375.1.4 Configuring Network Address Translation (NAT) 6:075.1.5 Configuring Border Gateway Protocol (BPG) Routing 6:03


Lab/Activity5.1.9 Add the Routing and Remote Access Role5.1.10 Enable LAN Routing5.1.11 Add Static Routes5.1.12 Configure RIP Routing5.1.13 Configure NAT

Fact Sheets5.1.6 Routing Facts5.1.7 Routing Information Protocol (RIP) Facts5.1.8 Network Address Translation (NAT) Facts




5.2: Install VPN


What circumstances warrant the installation and configuration of a VPN server? To allow a remote client to connect to a remote access server using VPN, which

configuration tasks must be performed on the server? To allow a remote client to connect to a remote access server using VPN, which

configuration tasks must be performed on the client? What is VPN Reconnect? Why is it important? How do you configure VPN on Windows Server 2016?


Configure a VPN server. Configure different VPN protocol options. Configure authentication options. Configure VPN reconnect.

Key terms for this section include the following:Term DefinitionVPN

(Virtual Private Network)

A type of network that uses encryption to allow IP traffic to travel securely over the TCP/IP network.

VPN Reconnect The method of automatically reconnecting a remote user to a disrupted or disconnected VPN session.

IKEv2(Internet Key Exchange)

A tunneling protocol. The protocol used to set up a security association (SA) in the IPsec protocol suite. IKEv2 is required to use the VPN Reconnect feature.

Network Policies

Identify which users and computers are allowed to connect to the Remote Access server. Use the Network Policy Server console to configure network policies.



4.2 Implement Remote Access 4.2.2 Implement Virtual Private Network (VPN)4.2.3 Configure a VPN server


3.2 Implement virtual private network (VPN) and DirectAccess solutions 3.2.2 Configure different VPN protocol options3.2.3 Configure authentication options3.2.4 Configure VPN reconnect

Video/Demo Time


5.2.1 VPN Concepts 7:275.2.2 Installing a VPN Server 7:495.2.3 Configuring VPN Reconnect 12:59


Fact Sheets5.2.4 Remote Access Service (RAS) Gateway Facts5.2.5 VPN Installation Facts




5.3: VPNs


What benefits come from installing a site-to-site VPN? Under what circumstances would you want to install a Remote Gateway? How does a Remote Gateway differ from a site-to-site VPN? What are tunneling protocols? What role do they play in configuring a VPN?


Install a VPN server. Configure VPN ports. Implement a site-to-site VPN.


(Virtual Private

Network)


Host-to-Host VPN

When two hosts establish a secure channel and communicate directly. With this configuration, both devices must be capable of creating the VPN connection.

Site-to-Site VPN

A site-to-site VPN securely connects two or more private networks located in different geographical locations over a public network (such as the internet) using a VPN tunneling protocol.

Remote Access VPN

A remote access VPN lets remote users access the secure resources on a private network as if they were local to the network.



4.2 Implement Remote Access 4.2.2 Implement Virtual Private Network (VPN)4.2.3 Configure a VPN server


3.2 Implement virtual private network (VPN) and DirectAccess solutions 3.2.1 Implement remote access and site-to-site (S2S) VPN solutions using remote access gateway3.2.2 Configure different VPN protocol options3.2.6 Determine when to use remote access VPN and site-to-site VPN and configure appropriate protocols

Video/Demo Time


5.3.1 Site-to-Site VPN Overview 1:335.3.2 Implementing Site-to-Site VPN 6:555.3.4 Remote Desktop Gateway 1:50


Lab/Activity5.3.6 Configure a VPN Server

Fact Sheets5.3.3 VPN Facts5.3.5 Remote Desktop Gateway Facts




5.4: Connection Profiles


What function does a connection profile play in establishing a VPN connection? What must be installed before the Connection Manager Administration Kit

(CMAK) is available? Why is it important to run CMAK from a specific type of computer? How can you run CMAK from a 32-bit computer? Which steps should be completed after you create a connection profile

installation file and before you distribute the file to end users?


Create a connection profile using the CMAK wizard.


CMAK(Connection

Manager Administration Kit)

A wizard available on Windows Server 2016. This wizard creates a self-installing executable, containing a predefined connection to remote servers and networks. Running this file on a client computer configures everything needed to establish the desired network connection.

Realm Name

In a Network Policy Server connection request, realm name is the user account location and is synonymous with the concept of domain, including DNS domains, Active Directory® domains, and Windows NT 4.0 domains.



4.2 Implement Remote Access 4.2.2 Implement Virtual Private Network (VPN)


3.2 Implement virtual private network (VPN) and DirectAccess solutions 3.2.5 Create and configure connection profiles

Video/Demo Time5.4.1 Connection Profiles 1:095.4.2 Creating Connection Profiles 6:41


Fact Sheets5.4.3 Connection Profiles Facts



6.1: DirectAccess Installation


What VPN challenges does DirectAccess solve? What service does the NRPT provide on a DirectAccess client? How is DirectAccess installed? Which wizard can be used to configure DirectAccess and from where is the

wizard accessed? Which desktop operating systems can be used as a DirectAccess client? Which server operating systems support DirectAccess?


Install and configure DirectAccess Implement (DirectAccess) server requirements Implement (DirectAccess) client configuration


(Virtual Private Network)


DirectAccessWith DirectAccess, remote users are always connected to organization network resources without the need for traditional Virtual Private Network (VPN) connections.

NRPT(Name

Resolution Policy Table)

When a DirectAccess client wants to access a resource (such as the internet) that is not on the corporate network, name resolution depends on the settings on the Name Resolution Policy Table (NRPT). The NRPT provides a form of DNS server routing based on the names configured on the NRPT.

IPsecIPsec provides authentication and encryption, and it can be used in conjunction with L2TP or by itself. IPsec uses either digital certificates or pre-shared keys. DirectAccess supports IPsec.

AuthIPMicrosoft’s extension or enhanced version of the Internet Key Exchange (IKE) protocol used to negotiate security parameters for communications protected using Internet Protocol security (IPsec).

NLS(Network

Location Server)

A web server with SSL certificates installed used to detect whether DirectAccess clients are located in the corporate network. Can be installed on the DirectAccess server.



4.1 Implement Direct Access 4.1.1 Install and configure DirectAccess



3.2 Implement virtual private network (VPN) and DirectAccess solutions 3.2.7 Install and configure DirectAccess3.2.8 Implement (DirectAccess) server requirements3.2.9 Implement (DirectAccess) client configuration

Video/Demo Time6.1.1 DirectAccess Overview 7:216.1.2 Installing DirectAccess 2:166.1.3 Configuring DirectAccess Clients 6:38


Fact Sheets6.1.4 DirectAccess Installation Facts6.1.5 DirectAccess Configuration Facts




6.2: DirectAccess Troubleshooting


What DirectAccess troubleshooting purpose would you use the Remote Access Setup wizard for?

How can the Remote Access Management Console aid you in troubleshooting DirectAccess?

You have installed and configured DirectAccess, but some users are complaining that they cannot connect. How would you troubleshoot this issue?

DirectAccess group policies have been created, but don't seem to be working. How would you verify that the policies are enabled?


Use the DirectAccess and VPN wizard to verity DirectAccess settings. Examine the Name Resolution Policy Table (NRPT) for possible errors or

omissions. Verify that the DirectAccess group policies are being applied on DirectAccess

clients.


DirectAccessWith DirectAccess, remote users are always connected to organization network resources without the need for traditional Virtual Private Network (VPN) connections.

Group PoliciesWhen using Microsoft's Active Directory, group policies let you implement specific configurations for users and computers. DirectAccess uses group policies for this purpose.

NRPT(Name

Resolution Policy Table)

When a DirectAccess client wants to access a resource (such as the internet) that is not on the corporate network, name resolution depends on the settings on the Name Resolution Policy Table (NRPT). The NRPT provides a form of DNS server routing based on the names configured on the NRPT.



3.2 Implement virtual private network (VPN) and DirectAccess solutions 3.2.10 Troubleshoot DirectAccess

Video/Demo Time6.2.1 DirectAccess Troubleshooting 2:206.2.2 Troubleshooting DirectAccess 2:51


Fact SheetsCopyright © 2018 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, Windows, and Office are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them.

6.2.3 DirectAccess Troubleshooting Facts




7.1: Install Network Policy Server (NPS)


What is a Windows Network Policy Server (NPS)? How can a Windows 2016 server become a RADIUS server? What are the two methods for installing NPS? What are the major functions NPS provides for RADIUS clients? What must you do if the default RADIUS ports are not used for your Windows

2016 NPS server? After you install NPS, how do you get permission to read the dial-in properties of

user accounts during the NPS authorization process?


Install NPS using multiple methods. Register an NPS server.


RADIUS A server used to perform authentication, authorization, and accounting for remote connections



4.2 Implement Remote Access 4.2.4 Install and configure NPS


3.3 Implement Network Policy Server (NPS) 3.3.1 Configure a RADIUS server including RADIUS proxy

Video/Demo Time7.1.1 NPS Overview 2:107.1.2 Installing NPS 2:08


Fact Sheets7.1.3 NPS Installation Facts




7.2: NPS Templates


What is an NPS template? How can an NPS template be beneficial when you are installing and managing

NPS servers? What must you do to use an NPS template that has been created? What is a template type, and how are they used?


Create a Network Policy Server (NPS). Apply an NPS template to an NPS server. Export and Import NPS templates.



4.2 Implement Remote Access 4.2.6 Create a Network Access Policy


3.3 Implement Network Policy Server (NPS) 3.3.3 Configure NPS templates

Video/Demo Time7.2.1 NPS Templates Overview 1:547.2.2 Creating NPS Templates 4:42


Fact Sheets7.2.3 NPS Template Facts




7.3: NPS Network Policies


What is a RADIUS server? How can a Windows 2016 server become a RADIUS server?

What is the overall purpose of a RADIUS server? What is the purpose of the network policies contained in a Network Policy Server

(NPS)? How many network policies can be matched by a connecting computer per

connection request? What is the process used to determine which network policy is used? What are the four major components or group properties of a network policy? How are network policies created and managed? What is the RADIUS process used to authenticate, authorize, and log a remote

connection?

In this section, you will learn how to:

Create network policies Manage network policies Configure a RADIUS client Configure a RADIUS proxy Configure NPS certificates Configure a RADIUS solution

Key terms for this section include the following:Component Description

RADIUS

An acronym for Remote Authentication Dial-In User Service. RADIUS is a networking protocol that provides centralized authentication, authorization, and accounting for remote users requesting access to a network service.

Remote Access Clients

Remote access clients (such as laptop computers) initiate connections to remote access servers. The client supplies authentication credentials to the remote access server.

RADIUS Client A remote access server that is configured to forward authentication requests to a RADIUS server.

RADIUS Server The RADIUS server accepts authentication credentials from the RADIUS clients and uses network policies stored on the server to authenticate users.

RADIUS Proxy Server

Forwards connection requests and accounting data to a remote RADIUS server or another RADIUS proxy server.

Remote RADIUS Server

Group

A group of RADIUS servers. RADIUS proxy servers forward connection and accounting requests to the server(s) defined in this group.

Connection Request

Policies used to determine whether the authentication request is forwarded to a RADIUS server or processed locally on the RADIUS


Policies proxy.Network Policies

Policies used to identify users who can connect to the network and the conditions that must be met for the connection to succeed.

RADIUS Accounting

RADIUS accounting includes event logging and logging of user authentication and accounting requests. NPS can send accounting data to a log file, an SQL server, or both.

NPS Templates

NPS templates allow you to create pre-configured elements, such as RADIUS clients or remote RADIUS servers. You can reuse these elements on the local NPS server or export them to other NPS servers. Templates can be created and configured without actually altering the NPS server functionality until the template is selected.

User Account Databases

A list of user accounts and their properties that a RADIUS server can use to verify authentication and authorization. NPS can use the Security Accounts Manager (SAM), Windows NT 4.0 domain, and Active Directory Domain Services (AD DS) databases.

RADIUS Messages

RADIUS messages are the actual communications exchanged between RADIUS clients, proxies, and servers. RADIUS messages contain attributes that are used during the authentication process.



4.2 Implement Remote Access Sample 4.2.5 Configure RADIUS4.2.6 Create a Network Access Policy


3.3 Implement Network Policy Server (NPS) 3.3.1 Configure a RADIUS server including RADIUS proxy3.3.2 Configure RADIUS clients3.3.5 Configure (NPS) certificates3.3.6 Configure (NPS) Connection Request Policies3.3.7 Configure network policies for VPN and wireless and wired clients

Video/Demo Time7.3.1 NPS Network Policies 4:067.3.2 Configuring Network Policies for VPN, Wireless, and Wired Clients 8:237.3.4 Configuring a RADIUS Client 3:167.3.5 Configuring a RADIUS Proxy 8:237.3.6 Configuring NPS Certificates 2:45


Lab/Activity7.3.9 Configure a RADIUS Solution

Fact Sheets7.3.3 NPS Network Policy Facts


7.3.7 RADIUS Facts7.3.8 RADIUS Configuration Facts




7.4: NPS Connection Request Policies


What is the overall purpose of a Network Policy Server's (NPS) connection request policy?

How many connection request policies can be matched by a connecting computer per connection request?

Which process determines which connection request policy is used? What are the three major components or group properties of a connection

request policy? How are connection request policies created and managed?


Create a connection request policy from the NPS console. Change connection request policy priorities. Create RADIUS server groups. Change the priority and weight of the RADIUS servers contained in the RADIUS

server groups.


Connection Request Policy

On an Network Policy Server, a connection request policy determines whether the authentication request is forwarded to a RADIUS server or processed locally.

RADIUS Server Groups

A group that contains one or more RADIUS servers, which you can select from to tell NPS where to send the connection requests that match the connection request policy. The servers contained in this group can be prioritized by priority and weight values.



4.2 Implement Remote Access 4.2.4 Install and configure NPS


3.3 Implement Network Policy Server (NPS) 3.3.6 Configure (NPS) Connection Request Policies

Video/Demo Time7.4.1 NPS Connection Request Policies 2:59


Lab/Activity7.4.3 Create a Network Access Policy 17.4.4 Create a Network Access Policy 2


Fact Sheets7.4.2 Connection Request Policies Facts




7.5: RADIUS Accounting


What is Network Policy Server (NPS) accounting? What types of NPS accounting can be used? How do you configure NPS accounting? What are the four NPS accounting options, and why would you select on over the

other? How can you change NPS accounting options not presented while running the

accounting configuration wizard? What are the four logging options that can be used to capture the desired

accounting information?


Configure NPS accounting. Update NPS accounting options not available using the accounting configuration

wizard.


NPS Accounting

A Network Policy Server feature that captures accounting information for user authentication requests, Access-Accept messages, Access-Reject messages, accounting requests and responses, and periodic status updates.

NPS Logging A synonym for NPS Accounting.



4.2 Implement Remote Access 4.2.5 Configure RADIUS


3.3 Implement Network Policy Server (NPS) 3.3.4 Configure RADIUS accounting

Video/Demo Time7.5.1 RADIUS Accounting 4:297.5.2 Configuring RADIUS Accounting 2:09


Fact Sheets7.5.3 RADIUS Accounting Facts

Number of Exam Questions


3 questions



7.6: Manage NPS Policies


Why is it beneficial to export and import NPS configurations? What are the three methods that can be used to export and import NPS

configurations? Why is it important to secure exported NPS configurations? Which settings are not exported with NPS configurations? Under what circumstances would you not want to import an NPS configuration?


Export and import NPS configurations using the NPS console. Export and import NPS configurations using Windows PowerShell. Export and import NPS configurations using Netsh.


Windows PowerShell

A shell or user interface developed by Microsoft for the purpose of task automation and configuration management. It is built on the .NET Framework and designed to help control and automate the administration of the Windows operating system and applications that run on Windows. PowerShell can be used to export or import NPS configurations.

Netsh

Run from a Windows command prompt, Netsh is a scripting utility. Using this utility you can view or modify network configuration of a computer that is currently running. Netsh can be used to export or import NPS configurations.

SQLAn acronym for Structured Query Language. SQL is used to communicate with a database where NPS accounting information can be saved.

XMLAn acronym for Extensible Markup Language. A markup language that defines a set of rules for encoding documents in a format that is both human-readable and machine-readable.



3.3 Implement Network Policy Server (NPS) 3.3.8 Import and export NPS policies

Video/Demo Time7.6.1 Importing and Exporting NPS Policies 2:52



Fact Sheets7.6.2 NSP Policy Management Facts




8.1: Distributed File System (DFS) Namespaces


What is the difference between the namespace root and a folder within DFS? If you have multiple namespace servers, which namespace type should you

implement? Which namespace type and mode would you choose to support access-based

enumeration? If you have a single namespace server and that server fails, what happens to

client access for folders within the DFS structure? Why? How can you prevent users from adding or changing files in a replicated folder?


Create a DFS namespace with folders and targets. Add role services to support DFS and the appropriate replication method.


Namespace A group of shared folders.Namespace Server A server that holds the information for a namespace.Namespace Root The starting point of a namespace.

Folder Target A folder that points to a shared folder that has shared content.

Access-Based Enumeration (ABE)

Allows you to hide specific files and folders for users who don’t have access permission.

This section help you prepare for the following exam objectives:Exam Objective

TestOut Server Pro 2016:

Networking

5.1 Implement Distributed File Systems 5.1.1 Install and configure Distributed File System (DFS)

Microsoft exam 70-741

Networkingwith Windows Server 2016

Implement Distributed File System (DFS) and Branch Office solutions

Install and configure DFS namespaces; configure DFS replication targets; configure replication scheduling; configure Remote Differential Compression (RDC) settings; configure staging; configure fault tolerance;clone a Distributed File System Replication (DFSR) database; recover DFSR databases; optimizeDFS Replication; install and configure BranchCache; implement distributed and hosted cache modes;implement BranchCache for web, file, and application


servers; troubleshoot BranchCache

Video/Demo Time8.1.1 DFS Namespaces Overview 4:158.1.2 Creating a DFS Namespace 5:538.1.3 Configuring Fault Tolerance for DFS Namespaces 2:06


Lab/Activity8.1.5 Add Role Services for DFS and Create a Namespace

Fact Sheets8.1.4 DFS Facts




8.2: Configure DFS Replication


When can you add a failover cluster to a DFS replication group? Adam, Bob, and Curt access different copies of a replicated folder and modify the

same file simultaneously. When each of them saves the file, which file becomes the authoritative copy? What happens to the other copies of this file?


Configure DFS replication.


Replication Group

A replication group is a set of servers that participate in replication. Each server is a member of the replication group.

Replicated Folder

A replicated folder is a folder that synchronizes its contents to each member.

ConnectionA connection is a logical link between replication group members. Connections identify how and when data is replicated between members.





4.2 Implement Distributed File System (DFS) and Branch Office solutions 4.2.2 Configure DFS replication targets4.2.3 Configure replication scheduling

Video/Demo Time8.2.1 DFS Replication 4:198.2.2 Configuring DFS Replication 11:19


Fact Sheets8.2.3 DFS Replication Facts


Total TimeCopyright © 2018 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, Windows, and Office are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them.

About 27 minutes


8.3: Optimize DFS Replication


When can you add a failover cluster to a DFS replication group? How does Remote Differential Compression conserve bandwidth? Adam, Bob, and Curt access different copies of a replicated folder and modify the

same file simultaneously. When each of them saves the file, which file becomes the authoritative copy? What happens to the other copies of this file?


Configure Remote Differential Compression (RDC) settings. Configure staging. Configure fault tolerance.


Remote Differential Compression (RDC)

A protocol used to update files in replicated folders over the network.

DFS StagingThe process of isolating files as they are compressed, transferred, and decompressed during replication from one server to another.

DFS Fault Tolerance The process of storing DFS namespaces on multiple DFS servers to mitigate the risk of server failure.





4.2 Implement Distributed File System (DFS) and Branch Office solutions 4.2.4 Configure Remote Differential Compression (RDC) settings4.2.5 Configure staging4.2.9 Optimize DFS Replication

Video/Demo Time8.3.1 Optimizing DFS Replication 2:438.3.2 Optimizing DFS Replication 4:338.3.3 Configuring Remote Differential Compression (RDC) Settings 2:168.3.4 Configuring Staging 3:288.3.5 Configuring Fault Tolerance 0:47



Fact Sheets8.3.6 DFS Replication Optimization Facts




8.4: Manage the DFS Replication Database


What are the benefits of cloning a DFS database over adding a DFS namespace to and namespace server?

What are the prerequisites to cloning a DFS database on both the source and destination server?


Manage the DFS replication database. Clone the DFSR database. Recover a DFSR database.

Key terms for this section include the following:Term DefinitionPre-

seedingThe process of copying files from one location to another when preparing to clone a DFS database.

Cloning The process of creating a copy of a DFS namespace and deploying it to a new namespace server.

Recovery Recovering files from a DFS namespace after a DFS failure.This section helps you prepare for the following certification exam objectives:

Exam Objective




4.2 Implement Distributed File System (DFS) and Branch Office solutions 4.2.7 Clone a Distributed File System Replication (DFSR) database4.2.8 Recover DFSR databases

Video/Demo Time8.4.1 Managing the DFS Replication Database 3:478.4.2 Cloning a DFSR Database 10:048.4.3 Recovering a DFSR Database 2:40


Fact Sheets8.4.4 DFS Replication Database Management Facts



8.5: BranchCache Installation and Configuration


What method do you use to configure a file server as a BranchCache content server?

How does hosted cache mode differ from distributed cache mode in systems using BranchCache?

What are the advantages of using Group Policy to configure BranchCache on multiple computers?

How do you use Group Policy to configure firewall rules for BranchCache clients? Which settings should you verify when inspecting the current BranchCache

operation mode using the Get-BCStatus cmdlet? What should you be aware of if you use both PowerShell cmdlets and Group

Policy to configure BranchCache on client systems?


Install BranchCache. Implement Distributed mode. Implement Hosted Cache mode. Implement BranchCache for application servers. Troubleshoot BranchCache.


BranchCache A feature that stores content in remote locations so that users in branch offices can access information more quickly.

Hosted Cache Mode

A BranchCache mode that allows data to be cached on a BranchCache-enabled content server in the branch office.

Distributed Cache Mode A BranchCache mode that allows peer clients to cache data.

This section help you prepare for the following exam objectives:Exam Objective


Networking

5.2 Implement Branch Office Solutions 5.2.1 Enable and configure BranchCache

Microsoft exam 70-741 Networking


4.2 Implement Distributed File System (DFS) and Branch Office solutions 4.2.10 Install and configure BranchCache4.2.11 Implement distributed and hosted cache modes4.2.12 Implement BranchCache for web, file, and application servers

Video/Demo TimeCopyright © 2018 TestOut Corporation. CompTIA, A+, Network+, Security+, Linux+ and related trademarks and trade names are the trademarks of CompTIA. Microsoft, MCITP, MSCA, MCTS, Windows, and Office are the trademarks of Microsoft. Cisco and CCNA are the trademarks of Cisco. TestOut has no affiliation with any of these companies and the products and services advertised herein are not endorsed by any of them.

8.5.1 BranchCache Overview 3:378.5.3 Installing BranchCache 4:538.5.4 Implementing Distributed Mode 4:568.5.5 Implementing Hosted Cache Mode 7:098.5.6 Implementing BranchCache for Application Servers 5:368.5.7 Troubleshooting BranchCache 6:21


Fact Sheets8.5.2 BranchCache Facts8.5.8 BranchCache Configuration Facts




9.1: NIC Teaming and Switch Embedded Teaming (SET)


What technology can group NICs together for load balancing and fault tolerance? What is the minimum number of NICs needed to create a team? What is the maximum number of NICs that can be used in a NIC team? What are the two teaming configurations? When using SET, how many physical adapters are used? What are the NIC manufacturer requirements for SET?


Implement NIC Teaming. Implement Switch Embedded Teaming (SET). Identify when to use NIC Teaming or Switch Embedded Teaming.


NIC Teaming NIC teaming uses multiple network interfaces to work together to provide increased bandwidth, load balancing, and fault tolerance.

Switch Embedded

Teaming (SET)

Switch Embedded Teaming is a new feature in Windows Server 2016 that allows up to eight identical physical adapters on the host system to be configured as a team and mapped to a virtual switch. The virtual switch can control all the physical adapters simultaneously.

Software-Defined

Networking (SDN)

Software-defined networking (SDN) is term covering several kinds of network technology that make modern networks agile and flexible using virtualization.

FailoverFailover is switching to a redundant or standby computer server, hardware component, or network upon the failure or termination of hardware, software, or a network link.



5.3 Implement Advanced Networking Solutions 5.3.1 Implement NIC Teaming



5.1 Implement high performance network solutions 5.1.1 Implement NIC Teaming or the Switch Embedded Teaming (SET) solution and identify when to use each


Video/Demo Time9.1.1 NIC Teaming Overview 4:499.1.2 Switch Embedded Teaming Overview 2:189.1.3 Configuring NIC Teaming 3:329.1.4 Configuring SET 2:22


Lab/Activity9.1.6 Configure NIC Teaming

Fact Sheets9.1.5 NIC Teaming and SET Facts




9.2: QoS with Data Center Bridging (DCB)


What does Data Center Bridging enhance? What are the features DCB uses to enhance data delivery without causing

delays? How do you enable DCB? What does QoS do to ensure the deliver of important network traffic? Which tool is used to configure traffic classes?


Enable and configure network Quality of Service with Data Center Bridging. Use PowerShell to configure QoS and DCB.


Data Center Bridging (DCB)

Data center bridging (DCB) is an enhancement to Ethernet that provides additional features for use in Enterprise datacenters, especially when dealing with server clustering and SANs.

Quality of Service (QoS)

Quality of Service (QoS) in a network allows you to configure priorities based on different types of network traffic so high-priority data is delivered before regular data.


TestOut Server Pro 2016: Networking 5.3 Implement Advanced Networking Solutions



5.1 Implement high performance network solutions 5.1.3 Enable and configure network Quality of Service (QoS) with Data Center Bridging (DCB)

Video/Demo Time9.2.1 Data Center Bridging Overview 3:449.2.2 Configuring QoS with DCB 3:07


Fact Sheets9.2.3 QoS with DCB Facts



9.3: Virtual Machine Queue (VMQ) and Receive Side Scaling (RSS)


How does RSS help distribute network traffic for processing? Without RSS, how is network traffic processed? How do you enable RSS on a network adapter? How does vRSS differ from RSS? How does VMQ speed up network delivery?


Enable and configure Receive Side Scaling RSS from the properties of the NIC or through PowerShell.

Use Hyper-V manager to enable and configure vRSS on a VMQ-capable network adapter.

Use Hyper-V manager to enable and configure VMMQ.


Receive Side Scaling (RSS)

Receive Side Scaling distributes network traffic to multiple CPU cores for processing.

Virtual Receive Side Scaling

(vRSS)

Virtual Receive Side Scaling distributes network traffic to multiple virtual CPU cores for processing.

Virtual Machine Queue (VMQ)

Virtual Machine Queue increases virtual NIC (vNIC) performance by delivering packets from the external network directly to the virtual NIC, bypassing the NIC team on the Hyper-V host server.

Virtual Machine Multi-Queue

(VMMQ)

Virtual Machine Multi-Queue enhances VMQ by using multiple hardware queues per virtual machine and spreads the traffic between those hardware queues to improve throughput.



5.3 Implement Advanced Networking Solutions 5.3.2 Enable and configure Receive Side Scaling (RSS)5.3.3 Enable and configure Virtual Machine Multi-Queue (VMMQ)



5.1 Implement high performance network solutions 5.1.2 Enable and configure Receive Side Scaling (RSS)5.1.6 Enable and configure virtual Receive Side Scaling (vRSS) on a Virtual Machine Queue (VMQ) capable network adapter5.1.7 Enable and configure Virtual Machine Multi-Queue (VMMQ)


Video/Demo Time9.3.1 Virtual Machine Queue Overview 2:039.3.2 Receive Side Scaling Overview 3:559.3.3 Configuring RSS 1:169.3.4 Configuring vRSS on a VMQ Network Adapter 1:079.3.5 Configuring VMMQ 1:01


Lab/Activity9.3.7 Configure RSS9.3.8 Configure VMMQ

Fact Sheets9.3.6 VMQ and RSS Facts




9.4: SMB Direct and SMB Multichannel


What is the default sharing protocol for Windows? How does SMB Direct speed up data transfer between servers? What type of NICs are required for SMB Direct? What are the benefits of SMB Multichannel? What are the requirements needed to use SMB Multichannel?


Use NIC properties or PowerShell to enable and configure SMB Direct on Remote Direct Memory Access (RDMA) enabled network adapters.

Use PowerShell to check connections and configure SMB Multichannel.


Server Message Block (SMB)

Server Message Block (SMB) is the default Windows protocol for file sharing.

SMB Direct SMB Direct allows direct memory-to-memory data transfers between servers with very little or no CPU usage.

SMB MultichannelSMB Multichannel provides fault tolerance and improved performance in a connection between a client and a server providing a Windows SMB share.





5.1 Implement high performance network solutions 5.1.4 Enable and configure SMB Direct on Remote Direct Memory Access (RDMA) enabled network adapters5.1.5 Configure SMB Multichannel

Video/Demo Time9.4.1 SMB Direct and SMB Multichannel Overview 3:059.4.2 Enabling SMB Direct on RDMA 2:03


Fact Sheets9.4.3 SMB Direct and SMB Multichannel Facts



9.5: Single-Root IO Virtualization (SR-IOV)


How does SR-IOV speed up data transfers? What are the benefits of using SR-IOV? What are the hardware requirements for using SR-IOV? How is SR-IOV enabled?


Create, enable, and configure a virtual switch for SR-IOV on a supported network adapter.

Use Device Manager to confirm that SR-IOV is supported on a virtual machine


Single-root IO virtualization (SR-

IOV)

Single-root IO virtualization is an enhancement to a virtual network adapter’s performance. It allows a virtual adapter to bypass the virtual switch software on the Hyper-V host and communicate directly with the physical hardware.





5.1 Implement high performance network solutions 5.1.8 Enable and configure Single-Root I/O Virtualization (SR-IOV) on a supported network adapter

Video/Demo Time9.5.1 Single-Root IO Virtualization Overview 1:519.5.2 Configuring SR-IOV 1:50


Fact Sheets9.5.3 SR-IOV Facts




10.1: Implement SDN


Which three layers exist in the SDN architecture? What is the function of the controller? Which technology allows network and security professionals to manage, control,

and make changes to a network? What are the advantages of SDN? What are the disadvantages of SDN?


Determine deployment scenarios for Software Defined Networks. Determine network requirements for deploying Software Defined Networks.


Software-Defined

Networking (SDN)

Software-defined networking (SDN) is term that covers several kinds of network technology that make modern networks agile and flexible by using virtualization. SDN is comprised of three network layers or planes: the Application layer, the Control layer, and the Physical layer (these layers are often referred to with slightly different names).

Application Layer

The Application layer communicates with the Control layer through what is called the northbound interface, or the northbound API.

Control Layer

The Control layer receives its requests from the Application layer and then provides the Physical layer with its configuration and instructions.

Physical Layer

The Physical layer, also known as the Infrastructure layer, communicates to the Control layer through the southbound interface. This layer contains devices such as routers, switches, and hypervisors.

Network Controller

The Network Controller is a server role in Windows Server 2016 Datacenter Edition. It is used to implement the Software Defined Networking configuration.



2.1 Install and configure DHCP 5.3.4 Determine deployment scenarios for SDN5.3.5 Determine deployment scenarios for HNV



5.2 Determine scenarios and requirements for implementing Software Defined Networking (SDN) 5.2.1 Determine deployment scenarios and network requirements for deploying SDN

Video/Demo Time10.1.1 Software-Defined Networking Basics 3:33


10.1.2 SDN Infrastructure and Architecture 2:3610.1.3 Implementing SDN 3:41


Fact Sheets10.1.4 SDN Implementation Facts




10.2: Implement Hyper-V Network Virtualization (HNV)


How does HNV help data center operators isolate tenant network traffic? Which tunneling protocols are used with HNV? Why are there customer address and provider addresses?


Determine requirements and scenarios using Network Virtualization Generic Route Encapsulation.

Determine requirements and scenarios using Virtual Extensible LAN (VXLAN) Encapsulation.


Hyper-V Network Virtualization(HNV)

Hyper-V Network Virtualization is a virtual network infrastructure that is part of the Windows Server 2016 software-defined networking (SDN) environment.

Generic Routing Encapsulation

(NVGRE)

Network Virtual using Generic Routing Encapsulation uses tunneling and encapsulation to create VLANs in multitenant datacenters.

Virtual Extensible LAN(VXLAN)

Virtual Extensible LAN is a tunneling protocol that allows traffic between virtual networks. It also allows communication between virtual networks and the physical network.



Networking



5.2 Determine scenarios and requirements for implementing Software Defined Networking (SDN) 5.2.2 Determine requirements and scenarios for implementing Hyper-V Network Virtualization (HNV) using Network Virtualization Generic Route Encapsulation (NVGRE) encapsulation or Virtual Extensible LAN (VXLAN) encapsulation

Video/Demo Time10.2.1 Implement HNV using NVGR 4:34


Fact Sheets


10.2.2 HNV Implementation Using NVGR Facts




10.3: Implement Software Load Balancer (SLB)


How does Software Load Balancing work in a datacenter? What are the advantages of SLN? What are the disadvantages of SLN? What are the components required for Software Load Balancing? What is the difference between East-West and North-South traffic within a

datacenter?


Determine scenarios for implementation of Software Load Balancing


Software Load Balancing (SLB)

Software Load Balancing is a feature that allows a network administrator to distribute network traffic across virtual network resources to increase performance and provide fault tolerance.

Load BalancingLoad balancing improves the distribution of workloads across multiple computing resources such as NICs, disk drives, and network links.

East-West Network Traffic

East-west network traffic travels between a datacenter's servers and the datacenter's virtual networks.

North-South Network Traffic

North-south network traffic travels between the datacenter and outside clients that need to access to the datacenter.






5.2 Determine scenarios and requirements for implementing Software Defined Networking (SDN) 5.2.3 Determine scenarios for implementation of Software Load Balancer (SLB) for North-South and East-West load balancing

Video/Demo Time10.3.1 Implement SLB 3:33


Fact Sheets10.3.2 SLB Implementation Facts


10.4: Implement Windows Server Gateways


How does Windows Server Gateway help route traffic in a datacenter? Under what scenarios might you use Windows Server Gateway? What are some ways Windows Server Gateway is implemented?


Determine implementation scenarios for various types of Windows Server Gateways, or RAS Gateways.


Windows Server Gateway

Windows Server Gateway, referred to as RAS Gateway, is a Windows virtual router that is used in datacenters.

GRE Tunneling GRE tunneling is used with traditional VLANs to maintain subnet isolation.

Layer 3 Forwarder

Layer 3 Forwarder is a simple forwarding router that communicates to other routers.

Site-to-Site VPN (S2S)

A site-to-site VPN is often used to connect a virtual network residing on a cloud provider’s datacenter to the tenant’s on-site datacenter.



Networking




5.2 Determine scenarios and requirements for implementing Software Defined Networking (SDN) 5.2.4 Determine implementation scenarios for various types of Windows Server Gateways and their use including, L3, GRE, and S2S and their use

Video/Demo Time10.4.1 Implement Windows Server Gateways 2:21


Fact Sheets10.4.2 Windows Server Gateways Implementation Facts



10.5: Implement Data Center Firewall Policies


What are some of the features available with Windows Server Policies? How are Datacenter Firewall Polices distributed? How are Datacenter Firewall Polices created? How are Datacenter Firewall Polices assigned? How are network security groups created? Where can you assign network security groups? What properties belong to access control lists?


Determine requirements and scenarios for using datacenter firewall policies. Determine requirements and scenarios for using network security groups.


Distributed Firewall Policies

Distributed firewall policies enable a network administrators to manage firewall policies for a datacenter’s virtual networks. Distributed firewall policies are configured using the Datacenter Firewall service on Windows Server 2016.

Network Security Groups

(NSGs)

Network Security Groups are security policies based on Access Control Lists (ACLs).

Access Control List (ACL)

An access control list (ACL) is a set of rules that define what type of traffic is allowed to pass through a network interface.






5.2 Determine scenarios and requirements for implementing Software Defined Networking (SDN) 5.2.5 Determine requirements and scenarios for Datacenter firewall policies and network security groups

Video/Demo Time10.5.1 Implement Data Center Firewall Policies 4:27


Fact Sheets10.5.2 Data Center Firewall Policy Implementation Facts


Practice Exams

A.0: TestOut Server Pro 2016: Networking - Practice ExamsServer Pro 2016: Networking Certification Practice Exam (14 questions)

B.0: Microsoft 70-741 Practice ExamsMicrosoft 70-741 Certification Practice Exam (65 questions)


Appendix A: Approximate Time for the CourseThe total time for the LabSim for TestOut Server Pro 2016: Networking course is approximately 28 hours and 16 minutes. Time is calculated by adding the approximate time for each section which is calculated using the following elements:

Video/demo times Text Lessons (5 minutes assinged per text lesson) Simulations (5 minutes assigned per simulation) Questions (1 minute per question)

Additionally, there are approximately another 2 hours and 15 minutes of Practice Test material at the end of the course.

The breakdown for this course is as follows:

Module Sections Time Videos Labs Text Exams0.0: Introduction

0.1: Server Pro 2016: Networking Introduction 4 4 0 0 00.2: The TestOut Simulator 9 4 5 0 0

Total 0:13 0:08 0:05 0:00 0:001.0: DNS

1.1: DNS Overview and Installation 28 15 5 5 31.2: DNS Name Resolution 57 32 10 5 101.3: Primary and Secondary DNS Zones 61 26 20 5 101.4: Zone Properties and Auxiliary DNS Zones 39 17 10 5 71.5: DNS Records 54 26 10 5 131.6: DNS Record Management 45 23 10 5 71.7: Single-Label Name Resolution 22 9 5 5 31.8: DNS Server Properties 51 24 15 5 71.9: DNS Protection 46 30 5 5 61.10: DNS Policies 25 17 0 5 31.11: DNS Monitoring and Troubleshooting 41 19 10 5 7

Total 7:49 3:58 1:40 0:55 1:162.0: TCP/IP

2.1: IPv4 Addresses 87 58 10 10 92.2: IPv6 Addresses 48 23 5 10 102.3: IPv4-to-IPv6 Transitional Technologies 27 15 0 5 7

Total 2:42 1:36 0:15 0:25 0:263.0: DHCP

3.1: Install DHCP 20 5 5 5 53.2: DHCP Scopes 35 10 10 5 103.3: DHCP Options 21 8 5 5 33.4: Advanced Scopes 47 14 10 10 133.5: Centralized DHCP and PXE 41 17 5 10 93.6: DHCP Policies 16 8 0 5 3


3.7: Advanced DHCP Management 54 25 20 5 43.8: Maintain the DHCP Database 19 11 0 5 33.9: Troubleshooting DHCP 56 24 15 5 12

Total 5:09 2:02 1:10 0:55 1:024.0: IP Address Management (IPAM)

4.1: IPAM Installation 40 25 0 5 104.2: IPAM DNS and DHCP 32 24 0 5 34.3: Advanced IPAM Administration and Auditing 26 16 0 5 5

Total 1:38 1:05 0:00 0:15 0:185.0: Routing and Remote Access (RRAS)

5.1: Routing 76 28 25 15 85.2: Install VPN 43 29 0 10 45.3: VPNs 31 11 5 10 55.4: Connection Profiles 16 8 0 5 3

Total 2:46 1:16 0:30 0:40 0:206.0: DirectAccess (DA)

6.1: DirectAccess Installation 35 17 0 10 86.2: DirectAccess Troubleshooting 14 6 0 5 3

Total 0:49 0:23 0:00 0:15 0:117.0: Network Policy Server (NPS)

7.1: Install Network Policy Server (NPS) 13 5 0 5 37.2: NPS Templates 15 7 0 5 37.3: NPS Network Policies 54 27 5 15 77.4: NPS Connection Request Policies 21 3 10 5 37.5: RADIUS Accounting 15 7 0 5 37.6: Manage NPS Policies 11 3 0 5 3

Total 2:09 0:52 0:15 0:40 0:228.0: Distributed File System (DFS) and BranchCache

8.1: Distributed File System (DFS) Namespaces 28 13 5 5 58.2: Configure DFS Replication 27 16 0 5 68.3: Optimize DFS Replication 22 14 0 5 38.4: Manage the DFS Replication Database 25 17 0 5 38.5: BranchCache Installation and Configuration 53 33 0 10 10

Total 2:35 1:33 0:05 0:30 0:279.0: High Performance Network Solutions

9.1: NIC Teaming and Switch Embedded Teaming (SET) 27 14 5 5 39.2: QoS with Data Center Bridging (DCB) 15 7 0 5 39.3: Virtual Machine Queue (VMQ) and Receive Side

Scaling (RSS) 30 10 10 5 5

9.4: SMB Direct and SMB Multichannel 14 6 0 5 39.5: Single-Root IO Virtualization (SR-IOV) 12 4 0 5 3

Total 1:38 0:41 0:15 0:25 0:1710.0: Implement Software-Defined Networking (SDN)

10.1: Implement SDN 20 10 0 5 510.2: Implement Hyper-V Network Virtualization (HNV) 14 5 0 5 410.3: Implement Software Load Balancer (SLB) 15 4 0 5 610.4: Implement Windows Server Gateways 12 3 0 5 410.5: Implement Data Center Firewall Policies 14 5 0 5 4


Total 1:15 0:27 0:00 0:25 0:23Total Course Time 28:16

Practice Exams

A.0: TestOut Server Pro 2016: Networking - Practice Exams Number of Questions Time

A.3: Server Pro 2016: Networking Certification Practice Exam 14 1:10Total 14 1:10

B.0: Microsoft 70-741 Practice Exams Number of Questions Time

B.4: Microsoft 70-741 Certification Practice Exam 65 1:05Total 65 1:05

Total Practice Exam Time 2:15


Table of Contents - TestOut · Web view2.3.4 Monitor utilization of IP address space2.3.5 Migrate...

Documents

Transcript of Table of Contents - TestOut · Web view2.3.4 Monitor utilization of IP address space2.3.5 Migrate...