a forest or a domain, Chapter 21
Implement multi-domain and multi-forest Active Directory environments including interoperability with previous versions of Active Directory
Upgrade existing domains and forests including environment preparation and functional levels
Configure multiple user principal name (UPN) suffixes
Configure Trusts, Chapter 21
Configure external, forest, shortcut, and realm trusts
Configure trust authentication
Configure SID filtering
Configure name suffix routing
Configure Sites, Chapter 21
Configure sites and subnets
Create and configure site links
Manage site coverage
Manage registration of SRV records
Move domain controllers between sites
Manage Active Directory and SYSVOL replication, Chapter 21
Configure replication to Read-Only Domain Controllers (RODCs)
Configure Password Replication Policy (PRP) for RODCs
Monitor and manage replication
Upgrade SYSVOL replication to Distributed File System Replication (DFSR)
Install and configure Active Directory Certificate Services (AD CS), Chapter 22
Describe and explain the new features in Windows Server 2012 Active Directory Certificate Services
Install and configure Active Directory Certificate Services using Server Manager and Windows PowerShell
Manage Active Directory Certificate Services using management consoles and Windows PowerShell
Configure CRL distribution points
Install and configure Online Responder
Implement administrative role separation
Configure CA Disaster recovery
Manage certificates
Manage certificate templates
Implement and manage certificate deployment, validation, and revocation
Manage certificate renewal
Manage certificate enrollment and renewal to computers and users using Group Policies
Configure and manage key archival and recovery
Manage trust between organizations including Certificate Trust List (CTL)
Managing Cross certifications and bride CAs
Monitoring CA Health
Install and Configure Active Directory Federation Services (AD FS), Chapter 22
Implement claims-based authentication including Relying Party Trusts
Configure authentication policies
Configure Workplace Join
Configure multi-factor authentication
Install and configure Active Directory Rights Management Services (AD RMS), Chapter 22
Install a licensing or certificate AD RMS server
Manage AD RMS Service Connection Point (SCP)
Manage RMS templates
Configure Exclusion Policies
Backup and restore AD RMS
Assessment Test
1. Which of the following is a valid role for a Windows Server 2012 R2 computer?
A. Stand-alone server
B. Member server
C. Domain controller
D. All of the above
2. Which of the following is a benefit of using Active Directory? (Choose all that apply.)
A. Hierarchical object structure
B. Fault-tolerant architecture
C. Ability to configure centralized and distributed administration
D. Flexible replication
3. Which of the following features of the Domain Name System (DNS) can be used to improve performance? (Choose all that apply.)
A. Caching-only servers
B. DNS forwarding
C. Secondary servers
D. Zone delegation
4. Which of the following pieces of information should you have before you begin the Active Directory Installation Wizard? (Choose all that apply.)
A. Active Directory domain name
B. Administrator password for the local computer
C. NetBIOS name for the server
D. DNS configuration information
5. An Active Directory environment consists of three domains. What is the maximum number of sites that can be created for this environment?
A. Two
B. Three
C. Nine
D. Unlimited
6. Which of the following is not a valid Active Directory object?
A. User
B. Group
C. Organizational unit
D. Computer
E. None of the above
7. Which of the following is not considered a security principal?
A. Users
B. Security groups
C. Distribution groups
D. Computers
8. Which of the following should play the least significant role in planning an OU structure?
A. Network infrastructure
B. Domain organization
C.
