This training is offered in two different formats, instructor-led classroom
or online training over the Internet.
Microsoft Certified Information Technology Professional (MCITP): Enterprise
Administrator training leads to The Microsoft Certified Solutions Expert
(MCSE): Windows Server 2008 certification shows that you have the minimum
set of skills needed to hit the ground running, and differentiates you as
better able to work with Windows Server 2008 in a real-world business
context. This certification validates a set of primary Windows Server skills
that are relevant across multiple solution areas. MCSE.
As a Microsoft Certified Solutions Expert, you will cultivate industry-supported
skills and credentials that you will be able to transfer to future
employment opportunities. With your MCSE certification, you will be able
to demonstrate and promote the fact that you have the necessary skills to do
your job effectively and you are certified by Microsoft Corporation the
leader in Enterprise Operating Systems.
Configuring Windows Server 2008 Active Directory
|
Exam
No.
Course Length: |
70-640
4 days |
|
Skills Being Measured:
This exam
measures your ability to accomplish the technical tasks listed below.
The
percentages indicate the relative weight of each major topic area on the
exam.
|
|
Exam
Topics
|
|
Configuring Domain Name System (DNS) for Active Directory (16 percent) |
|
·
Configure zones.
May include but is not limited
to: Dynamic DNS (DDNS), Non-dynamic DNS (NDDNS), and Secure Dynamic DNS
(SDDNS), Time to Live (TTL), GlobalNames, Primary, Secondary, Active
Directory Integrated, Stub, SOA, zone scavenging, forward lookup,
reverse lookup
·
Configure DNS
server settings.
May include but is not limited
to: forwarding, root hints, configure zone delegation, round robin,
disable recursion, debug logging, server scavenging
·
Configure zone
transfers and replication.
May include but is not limited
to: configure replication scope (forestDNSzone, domainDNSzone),
incremental zone transfers, DNS Notify, secure zone transfers, configure
name servers, application directory partitions
|
|
Configuring the Active Directory
infrastructure
(25 percent)
|
|
C
·
Configure a forest
or a domain.
May include but is not limited
to: remove a domain, perform an unattended installation, Active
Directory Migration Tool (ADMT) v3 (pruning and grafting), raise forest
and domain functional levels, interoperability with previous versions of
Active Directory, alternate user principal name (UPN) suffix, forestprep,
domainprep
·
Configure trusts.
May include but is not limited
to: forest trust, selective authentication versus forest-wide
authentication, transitive trust, external trust, shortcut trust, SID
filtering
·
Configure sites.
May include but is not limited
to: create Active Directory subnets, configure site links, configure
site link costing, configure sites infrastructure
·
Configure Active
Directory replication.
May include but is not limited
to: Distributed File System, one-way replication, bridgehead server,
replication scheduling, configure replication protocols, force intersite
replication
·
Configure the
global catalog.
May include but is not limited
to: Universal Group Membership Caching (UGMC), partial attribute set,
promote to global catalog
·
Configure
operations masters.
May include but is not limited
to: seize and transfer, backup operations master, operations master
placement, Schema Master, extending the schema, time service
|
|
Configuring
additional Active Directory server roles (9 percent) |
|
·
Configure Active Directory Lightweight Directory Service (AD LDS).
May include
but is not limited to: migration to AD LDS, configure data within AD
LDS, configure an authentication server, server core, Windows Server
2008 Hyper-V
·
Configure Active Directory Rights Management Service (AD RMS).
May include
but is not limited to: certificate request and installation,
self-enrollments, delegation, Active Directory Metadirectory Services
(AD MDS), Windows Server virtualization
·
Configure the read-only domain controller (RODC).
May include
but is not limited to: unidirectional replication, Administrator role
separation, read-only DNS, BitLocker, credential caching, password
replication, syskey, Windows Server virtualization
·
Configure Active Directory Federation Services (AD FS).
May include
but is not limited to: install AD FS server role, exchange certificate
with AD FS agents, configure trust policies, configure user and group
claim mapping, Windows Server virtualization
|
|
Creating
and maintaining Active Directory objects (24 percent)
|
|
·
Automate creation
of Active Directory accounts.
May include but is not limited
to: bulk import, configure the UPN, create computer, user, and group
accounts (scripts, import, migration), template accounts, contacts,
distribution lists
·
Maintain Active
Directory accounts.
May include but is not limited
to: configure group membership, account resets, delegation, AGDLP/AGGUDLP,
deny domain local group, local versus domain, Protected Admin, disabling
accounts versus deleting accounts, deprovisioning, contacts, creating
organizational units (OUs), delegation of control
·
Create and apply
Group Policy objects (GPOs).
May include but is not limited
to: enforce, OU hierarchy, block inheritance, and enabling user objects,
Group Policy processing priority, WMI, Group Policy filtering, Group
Policy loopback
·
Configure GPO
templates.
May include but is not limited
to: user rights, ADMX Central Store, administrative templates, security
templates, restricted groups, security options, starter GPOs, shell
access policies
·
Configure GPO
templates.
May include but is not limited
to: user rights, ADMX Central Store, administrative templates, security
templates, restricted groups, security options, starter GPOs, shell
access policies
·
Configure software
deployment GPOs.
May include but is not limited
to: publishing to users, assigning software to users, assigning to
computers, software removal
·
Configure account
policies.
May include but is not limited
to: domain password policy, account lockout policy, fine-grain password
policies
·
Configure audit
policy by using GPOs.
May include but is not limited
to: audit logon events, audit account logon events, audit policy change,
audit access privilege use, audit directory service access, audit object
access
|
|
Maintaining the Active Directory
environment
(13 percent)
|
|
·
Configure backup
and recovery.
May include but is not limited
to: using Windows Server Backup, backup files and system state data to
media, backup and restore by using removable media, perform an
authoritative or non-authoritative Active Directory restore, linked
value replication, Directory Services Recovery Mode (DSRM) (reset admin
password), back up and restore GPOs
·
Perform offline
maintenance.
May include but is not limited
to: offline defragmentation and compaction, Restartable Active
Directory, Active Directory database storage allocation
·
Monitor Active
Directory.
May include but is not limited
to: Network Monitor, Task Manager, Event Viewer, ReplMon, RepAdmin,
Windows System Resource Manager, Reliability and Performance Monitor,
Server Performance Advisor, RSOP
|
|
Configuring Active Directory
Certificate Services
(13 percent)
|
|
·
Install Active
Directory Certificate Services.
May include but is not limited
to: standalone versus enterprise, CA hierarchies—root versus
subordinate, certificate requests, certificate practice statement
·
Configure CA
server settings.
May include but is not limited
to: key archival, certificate database backup and restore, assigning
administration roles
·
Manage certificate
templates.
May include but is not limited
to: certificate template types, securing template permissions, managing
different certificate template versions, key recovery agent
·
Manage
enrollments.
May include but is not limited
to: network device enrollment service (NDES), autoenrollment, Web
enrollment, smart card enrollment, creating enrollment agents
·
Manage certificate
revocations.
May include but is not
limited to: configure Online Responders, Certificate Revocation List (CRL),
CRL Distribution Point (CDP), Authority Information Access (AIA)
|
Configuring
Windows Server 2008 Network Infrastructure
|
Exam
No.
Course Length: |
70-642
4 days |
|
Skills Being Measured:
This exam measures your ability to accomplish the technical tasks listed
in the following table. The percentages indicate the relative weight of
each major topic area on the exam.
|
|
Exam
Topics
|
|
Configuring IP Addressing and Services (24
percent) |
|
·
Configure IPv4 and IPv6 addressing.
May include but is not limited to: configure IP options,
subnetting, supernetting, alternative configuration
Configure Dynamic Host Configuration Protocol (DHCP).
May include but is not limited to: DHCP options, creating new
options, PXE boot, default user profiles, DHCP relay agents,
exclusions, authorize server in Active Directory, scopes, server
core, Windows Server Hyper-V
Configure routing.
May include but is not limited to: static routing, persistent
routing, Routing Internet Protocol (RIP), Open Shortest Path First (OSPF)
Configure IPsec.
May include but is not limited to: create IPsec policy, IPsec
Authentication Header (AH), IPsec Encapsulating Security Payload
(ESP)
|
|
|
Configuring Name Resolution (27
percent) |
|
C Configure
a Domain Name System (DNS) server.
May include but is not limited to: conditional
forwarding, external forwarders, root hints, cache-only, server core,
WINS and DNS integration, Windows Server virtualization
Configure DNS zones.
May include but is not limited to: DNS Refresh
no-refresh, intervals, DNS listserv address (NSLOOKUP),
primary/secondary zones, Active Directory integration, Dynamic Domain
Name System (DDNS), GlobalNames, SOA refresh
Configure DNS records.
May include but is not limited to: record types, host,
pointer, MX, SRV, NS, dynamic updates, Time to Live (TTL)
Configure DNS replication.
May include but is not limited to: DNS secondary
zones, DNS stub zones, DNS scavenging interval, replication scope
Configure name resolution for client computers.
May include but is not limited to: DNS and WINS
integration, configuring HOSTS file, LMHOSTS, node type, Link-Local
Multicast Name Resolution (LLMNR), broadcasting, resolver cache, DNS
Server list, Suffix Search order, manage client settings by using group
policy
|
|
Configuring Network Access (22 percent) |
|
·
Configure remote access.
May include but is not limited to: dial-up, Remote
Access Policy, Network Address Translation (NAT), Internet Connection
Sharing (ICS), VPN, Routing and Remote Access Services (RRAS),
inbound/outbound filters, configure Remote Authentication Dial-In User
Service (RADIUS) server, configure RADIUS proxy, remote access
protocols, Connection Manager
Configure Network Access Protection (NAP).
May include but is not limited to: network layer
protection, DHCP enforcement, VPN enforcement, configure NAP health
policies, IPsec enforcement, 802.1x enforcement, flexible host isolation
Configure network authentication.
May include but is not limited to: LAN authentication
by using NTLMv2 and Kerberos, WLAN authentication by using 802.1x, RAS
authentication by using MS-CHAP, MS-CHAP v2, and EAP
Configure wireless access.
May include but is not limited to: Set Service
Identifier (SSID), Wired Equivalent Privacy (WEP), Wi-Fi Protected
Access (WPA), Wi-Fi Protected Access 2 (WPA2), ad hoc versus
infrastructure mode, group policy for wireless
Configure firewall settings.
May include but is not limited to: incoming and
outgoing traffic filtering, Active Directory account integration,
identify ports and protocols, Microsoft Windows Firewall versus Windows
Firewall with Advanced Security, configure firewall by using group
policy, isolation policy
|
|
Configuring
File and Print Services (13 percent)
|
|
· Configure a file server.
May include but is not limited to: file share
publishing, Offline Files, share permissions, NTFS permissions,
encrypting file system (EFS)
Configure Distributed File System (DFS).
May include but is not limited to: DFS namespace, DFS
configuration and application, creating and configuring targets, DFS
replication
Configure shadow copy services.
May include but is not limited to: recover previous
versions, set schedule, set storage locations
Configure backup and restore.
May include but is not limited to: backup types,
backup schedules, managing remotely, restoring data
Manage disk quotas.
May include but is not limited to: quota by volume or
quota by user, quota entries, quota templates
Configure and monitor print services.
May include but is not limited to: printer share,
publish printers to Active Directory, printer permissions, deploy
printer connections, install printer drivers, export and import print
queues and printer settings, add counters to Reliability and Performance
Monitor to monitor print servers, print pooling, print priority
|
|
Monitoring
and Managing a Network Infrastructure (14 percent) |
·
Configure Windows Server Update Services (WSUS) server
settings.
May include but is not limited to: update type selection, client
settings, Group Policy object (GPO), client targeting, software updates,
test and approval, disconnected networks
Capture performance data.
May include but is not limited to: Data Collector Sets, Performance
Monitor, Reliability Monitor, monitoring System Stability Index
Monitor event logs.
May include but is not limited to: custom views, application and
services logs, subscriptions, DNS log
Gather network data.
May include but is not limited to: Simple Network Management Protocol
(SNMP), Baseline Security Analyzer, Network Monitor
|
Configuring
Windows Server 2008 Application Infrastructure
|
Exam
No.
Course Length: |
70-643
3 days |
|
Skills Being Measured:
This exam measures your ability to accomplish the technical tasks listed
in the following table. The percentages indicate the relative weight of
each major topic area on the exam.
|
|
Exam
Topics
|
|
Deploying Servers (24 percent) |
Deploy images by using Windows Deployment
Services.
May include but is not limited to: Install from media
(IFM), configure Windows Deployment Services, capture Windows Deployment
Services images, deploy Windows Deployment Services images, server core
Configure Microsoft Windows activation.
May include but is not limited to: install a KMS
server, create a DNS SRV record, replicate volume license data
Configure Windows Server Hyper-V and virtual machines.
May include but is not limited to: virtual networking,
virtualization hardware requirements, Virtual Hard Disks, migrate from
physical to virtual, VM additions, backup, optimization, server core
Configure high availability.
May include but is not limited to: failover
clustering, Network Load Balancing, hardware redundancy
Configure storage.
May include but is not limited to: RAID types, Virtual
Disk Specification (VDS) API, Network Attached Storage, iSCSI and Fibre
Channel storage area networks, mount points
|
|
Configuring Terminal Services (32 percent) |
|
C
Configure Windows Server 2008 Terminal Services RemoteApp (TS RemoteApp).
May include but is not limited to: Configuring
Terminal Services Web Access, configuring Terminal Services Remote
Desktop Web Connection
Configure Terminal Services Gateway.
May include but is not limited to: certificate
configuration, Terminal Services Gateway Manager (TS Gateway Manager),
specifying resources that users can access through TS Gateway by using
Terminal Services resource authorization policy (TS RAP) and Terminal
Services connection authorization policy (TS CAP), Terminal Services
group policy
Configure Terminal Services load balancing.
May include but is not limited to: Terminal Services
Session Broker redirection modes, DNS registration, setting through
group policy
Configure and monitor Terminal Services resources.
May include but is not limited to: allocate resources
by using Windows Server Resource Manager, configure application logging
Configure Terminal Services licensing.
May include but is not limited to: deploy licensing
server, connectivity between terminal servers and Terminal Services
licensing server, recovering Terminal Services licensing server,
managing Terminal Services client access licenses (TS CALs)
Configure Terminal Services client connections.
May include but is not limited to: connecting local
devices and resources to a session, Terminal Services profiles, Terminal
Services home folders, Remote Desktop Connection (RDC), single sign-on,
Remote Desktop Snap-In, MSTSC.exe
Configure Terminal Services server options.
May include but is not limited to: logoff, disconnect,
reset, remote control, monitor, Remote Desktop Protocol (RDP)
permissions, connection limits, session time limits, managing by using
GPOs, viewing processes, session permissions, display data
prioritization
|
|
Configuring a Web Services Infrastructure
(30 percent) |
Configure Web applications.
May include but is not limited to:
directory-dependent, publishing, URL-specified configuration, Microsoft
.NET components, for example, .NET and .aspx, configure application
pools
Manage Web sites.
May include but is not limited to: migrate sites and
Web applications, publish IIS Web sites, configure virtual directories
Configure a File Transfer Protocol (FTP) server.
May include but is not limited to: configure for
extranet users, configure permissions
Configure Simple Mail Transfer Protocol (SMTP).
May include but is not limited to: setting up smart
hosts, configuring size limitations, setting up security and
authentication to the delivering server, creating proper service
accounts, authentication, SMTP relay
Manage Internet Information Services (IIS).
May include but is not limited to: Web site content
backup and restore, IIS configuration backup, monitor IIS, configure
logging, delegation of administrative rights
Configure SSL security.
May include but is not limited to: configure
certificates, requesting SSL certificate, renewing SSL certificate,
exporting and importing certificates
Configure Web site authentication and permissions.
May include but is not limited to: configure site
permissions and authentication, configure application permissions,
client certificate mappings
|
|
Configuring Network Application
Services (14 percent) |
Configure Windows Media server.
May include but is not limited to: on-demand
replication, configure time-sensitive content, caching and proxy
Configure Digital Rights Management (DRM).
May include but is not limited to: encryption, sharing
business rules, configuring license delivery, configuring policy
templates
Configure Microsoft Windows SharePoint Services server options.
May include but is not limited to: site permissions,
backup, antivirus, configuring Windows SharePoint Services service
accounts
Configure Windows SharePoint Services e-mail integration.
May include but is not limited to: configuring a
document library to receive e-mail, configuring incoming versus outgoing
e-mail
|
Windows
Server 2008 Enterprise Administrator
|
Exam
No.
Course Length: |
70-647
2 days |
|
Skills Being Measured:
This exam measures your ability to accomplish the technical tasks listed
in the following table. The percentages indicate the relative weight of
each major topic area on the exam.
|
|
Exam
Topics
|
|
Planning network and application
services (23 percent) |
Plan for name resolution and IP addressing.
May include but is not limited to: internal and
external naming strategy, naming resolution support for legacy clients,
naming resolution for directory services, IP addressing scheme, TCP/IP
version coexistence
Design for network access.
May include but is not limited to: network access
policies, remote access strategy, perimeter networks, server and domain
isolation
Plan for application delivery.
May include but is not limited to: application
virtualization, presentation virtualization, locally installed software,
Web-based applications
Plan for Terminal Services.
May include but is not limited to: Terminal Services
licensing, Terminal Services infrastructure
|
|
Designing core identity and access
management components (25 percent) |
|
C Design Active
Directory forests and domains.
May include but is not limited to: forest structure,
forest and domain functional levels, intra-organizational authorization
and authentication, schema modifications
Design the Active Directory physical topology.
May include but is not limited to: placement of
servers, site and replication topology, printer location policies
Design the Active Directory administrative model.
May include but is not limited to: delegation, group
strategy, compliance auditing, group administration, organizational
structure
Design the enterprise-level group policy strategy.
May include but is not limited to: group policy
hierarchy and scope filtering, control device installation,
authentication and authorization
|
|
Designing support identity and access
management components (29 percent) |
|
C Plan for domain
or forest migration, upgrade, and restructuring.
May include but is not limited to: cross-forest
authentication, backward compatibility, object migration, migration
planning, implementation planning, environment preparation
Design the branch office deployment.
May include but is not limited to: authentication
strategy, server security
Design and implement public key infrastructure.
May include but is not limited to: certificate
services, PKI operations and maintenance, certificate life cycle
management
Plan for interoperability.
May include but is not limited to:
inter-organizational authorization and authentication, application
authentication interoperability, cross-platform interoperability
|
|
Designing for business continuity and data availability
(23 percent) |
Plan for business continuity.
May include but is not limited to: service
availability, directory service recovery
Design for software updates and compliance management.
May include but is not limited to: patch management
and patch management compliance, Microsoft Update and Windows Update,
security baselines, system health models
Design the operating system virtualization strategy.
May include but is not limited to: server
consolidation, application compatibility, virtualization management,
placement of servers
Design for data management and data access.
May include but is not limited to: data security, data
accessibility and redundancy, data collaboration
|
Configuring
Windows Vista Client
|
Exam
No.
Course Length: |
70-620
2 days |
|
Skills Being Measured:
This exam measures your ability to accomplish the technical tasks listed
in the following table.
|
|
Exam
Topics
|
|
Installing and
upgrading Windows Vista |
Identify
hardware requirements.
Perform
a clean installation.
Upgrade
to Windows Vista from previous versions of Windows.
Upgrade
from one edition of Windows Vista to another edition.
Troubleshoot
Windows Vista installation issues.
Install
and configure Windows Vista drivers.
|
|
Configuring and
troubleshooting Post-installation system settings
|
Troubleshoot post-installation
configuration issues.
Configure
and troubleshoot Windows Aero.
Configure
and troubleshoot parental controls.
Configure
Microsoft Internet Explorer.
|
|
Configuring Windows security features |
Configure
and troubleshoot User Account Control.
Configure
Windows Defender.
Configure
Dynamic Security for Microsoft Internet Explorer
Configure security settings in
Windows Firewall.
|
|
Configuring network connectivity |
Configuring networking by
using the Network and Sharing Center.
Troubleshoot connectivity
issues.
Configure
remote access.
|
|
Configuring applications included with Windows Vista
|
Configure and troubleshoot
media applications.
Configure
Windows Mail.
Configure
Windows Meeting Space.
Configure
Windows Calendar.
Configure
Windows Fax and Scan.
Configure
Windows Sidebar.
|
|
Maintaining and
optimizing systems that run Windows Vista
|
Troubleshoot performance
issues.
Troubleshoot reliability
issues by using built-in diagnostic tools.
Configure Windows Update.
Configure
data protection.
|
|
Configuring and
troubleshooting mobile computing |
Configure mobile display
settings.
Configure mobile devices.
Configure Tablet PC software.
Configure power options.
|
