Microsoft 70-214 Braindumps
| Exam details |
|---|
| 70-214 : Implementing and Administering Security in a Microsoft Windows 2000 Network |
| Certification provider: Microsoft |
| 70-214 Exam Topics |
| 70-214 Exam Info |
Prerequisites: The requirements for this exam is that you must have at least 1 year experience implementing and administering security and network infrastructures in enterprise environments that include the use of NT4 Workstation, Windows 2000 Professional, and Windows XP Professional operating systems
Number of Questions:
There are more or less 50 questions.
Time:
120 Minutes
Price:
$125 (USD)
Passing Score:
700
Difficulty Rating:
4/5
The Exam Format:
Form-Based Multiple Choice.
Title
Date
| Displaying Rows 1 - 30 of 125 | Pages: 1 2 3 4 5  |
 Add Microsoft 70-214 Dump |
70-214 Exam Topics
- Implementing, Managing, and Troubleshooting Baseline Security
- You should be able to set up security templates
- Configure registry and file system permissions.
- Configure account policies.
- Configure audit policies.
- Configure user rights assignment.
- Configure security options.
- Configure system services.
- Configure restricted groups.
- Configure event logs.
- You should know how to deploy security templates. Deployment methods include using Group Policy and scripting.
- You should be able to troubleshoot security template problems. Considerations include Group Policy, upgraded operating systems, and mixed client-computer operating systems.
- Set up additional security based on computer roles. Computer roles include Microsoft SQL Server computer, Microsoft Exchange Server computer, domain controller, Internet Authentication Service (IAS) server, Internet Information Services (IIS) server, and mobile client computer.
- Configure additional security for client-computer operating systems by using Group Policy.
- You should be able to set up security templates
- Implementing, Managing, and Troubleshooting Service Packs and Security Updates
- Determine the current status of service packs and security updates. Tools include MBSA and HFNetChk.
- Install service packs and security updates. Consideration includes slipstreaming and using Remote Installation Services (RIS), custom scripts, and isolated networks.
- Install service packs and security updates on new client computers and servers. Considerations include slipstreaming and using RIS, custom scripts, and isolated networks.
- You should know how to manage service packs and security updates. Considerations include server computers and remote client computers. Tools include Microsoft Software Update Service, Automatic Updates, and SMS.
- Troubleshoot the deployment of service packs and security updates. Matters include third-party application compatibility, permissions, and version conflicts.
- Implementing, Managing, and Troubleshooting Security-Enhanced Communication Channels
- Configure IPSec to help protect communication between networks and hosts. Hosts include domain controllers, Internet Web servers, databases, e-mail servers, and client computers.
- Configure IPSec authentication.
- Configure appropriate encryption levels.
- Configure the appropriate IPSec protocol. Protocols include AH and ESP.
- Deploy and manage IPSec certificates. Considerations include renewing certificates.
- You should know how to troubleshoot IPSec. The matters include IPSec rule configurations, firewall configurations, routers, and authentication.
- You must be able to implement security for wireless networks.
- Configure public and private wireless LANs.
- Configure wireless encryption levels. Levels include WEP and 802.1x.
- Configure wireless network connection settings on client computers. Client-computer operating systems include Windows 2000 Professional, Windows XP Professional, and Windows CE 3.0.
- Setting up Server Message Block (SMB) signing to support packet authentication and integrity.
- Deploy and manage SSL certificates. The matters include the renewing of certificates and obtaining self-issued certificates versus public-issued certificates.
- Obtain public and private certificates.
- Install certificates for SSL.
- Renew certificates.
- You should be able to set up SSL to help protect communication channels. Communication channels include client computer to Web server, Web server to SQL Server computer, client computer to Active Directory domain controller, and e-mail server to client computer.
- Configure IPSec to help protect communication between networks and hosts. Hosts include domain controllers, Internet Web servers, databases, e-mail servers, and client computers.
- Configuring, Managing, and Troubleshooting Authentication and Remote Access Security
- You should be able to configure and troubleshoot authentication.
- Configure authentication protocols to support mixed Windows client-computer environments.
- Configure the interoperability of Kerberos authentication with UNIX computers.
- Configure authentication for extranet scenarios.
- Configure trust relationships.
- Configure authentication for members of non-trusted domain authentication.
- You should configure and troubleshoot authentication for Web users. Authentication types include Basic, Integrated Windows, anonymous, digest, and client certificate mapping.
- You should be able to set up authentication for security-enhanced remote access. Authentication types include PAP, CHAP, MS-CHAP, MS-CHAP v2, EAP-MD5, EAP-TLS, and Multi-factor authentication with smart cards and EAP.
- You should be able to configure and troubleshoot virtual private network (VPN) protocols. The matters include Internet service provider (ISP), client-computer operating system, Network Address Translation (NAT) devices, Routing and Remote Access server, and firewall server.
- Manage client-computer configuration for remote access security. Tools include remote access policy and Connection Manager Administration Kit.
- You should be able to configure and troubleshoot authentication.
- Implementing and Managing a Public Key Infrastructure (PKI) and Encrypting File System (EFS)
- You should be able to install and configure Certificate Authority (CA) hierarchies. Considerations include enterprise, standalone, and third-party.
- Install and configure the root, intermediate, and issuing CA. Considerations include renewals and hierarchy.
- Configure certificate templates. Considerations include LDAP queries, HTTP queries, and third-party CAs.
- Configure the publication of Certificate Revocation Lists (CRLs).
- Configure public key Group Policy.
- Configure certificate renewal and enrollment.
- Deploy certificates to users, computers, and CAs.
- Manage Certificate Authorities (CAs). The matters include enterprise, stand-alone, and third-party.
- Enroll and renew certificates.
- Revoke certificates.
- Manage and troubleshoot Certificate Revocation Lists (CRLs). Considerations include publishing the CRL.
- Back up and restore the CA.
- Manage client-computer and server certificates. Considerations include SMIME, EFS, exporting, and storage.
- Publish certificates through Active Directory.
- Issue certificates using MMC, Web enrollment, programmatic, or auto enrollment using Windows XP.
- Recover KMS-issued keys.
- Manage and troubleshoot EFS. Considerations include domain members, workgroup members, and client-computer operating systems.
- You should be able to install and configure Certificate Authority (CA) hierarchies. Considerations include enterprise, standalone, and third-party.
- Monitoring and Responding to Security Incidents
- You should be able to configure and manage auditing. Considerations include Windows Events, Internet Information Services (IIS), firewall log files, Network Monitor Log, and RAS log files.
- Manage audit log retention.
- Manage distributed audit logs by using EventComb.
- Analyze security events. Considerations include reviewing logs and events.
- Respond to security incidents. Event includes hackers, viruses, denial-of-service (DoS) attacks, natural disasters, and maintaining chains of evidence.
- Isolate and contain the incident. Considerations include preserving the chain of evidence.
- Implement counter measures.
- Restore services.
- You should be able to configure and manage auditing. Considerations include Windows Events, Internet Information Services (IIS), firewall log files, Network Monitor Log, and RAS log files.
70-214 Exam Info
Intended Audience: The exam of 70-214: Implementing and Administering Security in a Microsoft Windows 2000 Network, is designed for people working in medium to very large computing environments that use Windows 2000 and Active Directory. Operating systems on client computers might include Windows NT Workstation 4.0, Windows 2000 Professional, and Windows XP Professional, which the following characteristics:
- It support a user range from 200 to more than 26,000
- It has a location range from five to more than 150
- The infrastructure must include LAN, WAN, and wireless networks
- It also has the following services: Network services and applications which includes the following : file and print, database, messaging, proxy server and firewall, public key infrastructure, remote access, desktop management, and Web hosting
- It also has connectivity requirements, which includes connecting branch offices and individual users in remote locations to the corporate network and connecting corporate networks to the Net and the Internet.
Exam 70-214 has a difficulty rating of 4/5. The exam measures skills related to implement and administer security and network infrastructures that use Windows 2000 and Active Directory.
The exam consists of approximately 50 questions, Form-Based Multiple Choice. All candidates have 120 Minutes to complete the exam. The required score to pass exam 70-214 is 700.
Pass exam 70-214 Implementing and Administering Security in a Microsoft Windows 2000 Network and you achieve Microsoft Certified Professional (MCP). You also earn:
- Elective credit toward Microsoft Certified Systems Administrator (MCSA) on Microsoft Windows 2000
- Elective credit toward Microsoft Certified Systems Engineer (MCSE) on Microsoft Windows 2000
What you need to know
You must be able to Implementing, Managing, and Troubleshooting Baseline Security. This means you must be able to set up security templates, which includes the configuration of registry and file system permissions. You should be able to set up account policies, audit policies, user rights assignment, security options, system services, restricted groups and event logs.
You should know how to deploy security templates. The method you should know is the use of Group Policy and scripting.
You should be able to troubleshoot security template problems. The matters include Group Policy, upgraded operating systems, and mixed client-computer operating systems.
You must be able to set up additional security based on computer roles. Computer roles include Microsoft SQL Server computer, Microsoft Exchange Server computer, domain controller, Internet Authentication Service (IAS) server, Internet Information Services (IIS) server, and mobile client computer. You must also set up additional security for client-computer operating systems by using Group Policy.
You should be able to manage and troubleshoot service packs and security updates. This includes finding out the current status of service packs and security updates. The tools that involves this, is the MBSA and HFNetChk.
You should be able to install service packs and security updates. This includes the slipstreaming and using of Remote Installation Services (RIS), custom scripts, and isolated networks
You should be able to install service packs and security updates on new client computers and servers. This include slipstreaming and using RIS, custom scripts, and isolated networks
You should know how to manage service packs and security updates. This includes server computers and remote client computers. The tools that is used, is the Microsoft Software Update Service, Automatic Updates, and SMS.
You should be able to troubleshoot the deployment of service packs and security updates. Matters include third-party application compatibility, permissions, and version conflicts
You should be able to implement, managing, and troubleshooting Security-Enhanced Communication Channels. You must be able to set up IPSec to help protect communication between networks and hosts. The hosts include domain controllers, Internet Web servers, databases, e-mail servers, and client computers. This means you must be able to set up IPSec authentication. You must be able to set up the appropriate encryption levels. You should know how to set up the appropriate IPSec protocol. The protocols include AH and ESP. you must be able to deploy and manage IPSec certificates.
You should know how to troubleshoot IPSec. The matters include IPSec rule configurations, firewall configurations, routers, and authentication.
You must be able to implement security for wireless networks. This includes the configuring of public and private wireless LANs. You should be able to configure wireless encryption levels. The levels include WEP and 802.1x. You should be able to configure wireless network connection settings on client computers, which includes Windows 2000 Professional, Windows XP Professional, and Windows CE 3.0.
You should be able to set up Server Message Block (SMB) signing to support packet authentication and integrity.
You must know how to deploy and manage SSL certificates. The matters include the renewing of certificates and obtaining self-issued certificates versus public-issued certificates. This consists of how to obtain public and private certificates, to install certificates for SSL and to renew certificates.
You should be able to set up SSL to help protect communication channels. Communication channels include client computer to Web server, Web server to SQL Server computer, client computer to Active Directory domain controller, and e-mail server to client computer.
You should be able to configure and troubleshoot authentication. This means you must be able to set up authentication protocols to support mixed Windows client-computer environments. You should be able to configure the interoperability of Kerberos authentication with UNIX computers. You should be able to set up authentication for extranet situations. You should know how to set up trust relationships. You must be able to set up authentication for members of non-trusted domain authentication.
You should configure and troubleshoot authentication for Web users. Authentication types include Basic, Integrated Windows, anonymous, digest, and client certificate mapping.
You should be able to set up authentication for security-enhanced remote access. Authentication types include PAP, CHAP, MS-CHAP, MS-CHAP v2, EAP-MD5, EAP-TLS, and Multi-factor authentication with smart cards and EAP.
You should be able to set up and troubleshoot virtual private network (VPN) protocols. The matters include Internet service provider (ISP), client-computer operating system, Network Address Translation (NAT) devices, Routing and Remote Access server, and firewall server.
You should be able to manage client-computer configuration for remote access security. The tools include remote access policy and Connection Manager Administration Kit.
You must be able to implement and Managing a Public Key Infrastructure (PKI) and Encrypting File System (EFS). This consists of installing and configuring Certificate Authority (CA) hierarchies. The matters include enterprise, standalone, and third-party. This means you should be able to install and configure the root, intermediate, and issuing CA. Considerations include renewals and hierarchy. You should be able to set up certificate templates. This includes LDAP queries, HTTP queries, and third-party CAs. You should be able to set up the publication of Certificate Revocation Lists (CRLs). You should know how to configure the public key Group Policy. You should know how to set up certificate renewal and enrollment. You must also be able to deploy certificates to users, computers, and CAs.
You should be able to manage Certificate Authorities (CAs). The matters include enterprise, stand-alone, and third-party. This means you must be able to enroll and renew certificates and revoke certificates. You must be able to manage and troubleshoot Certificate Revocation Lists (CRLs). This includes the publishing of the CRL. You also must be able to back up and restore the CA.
You should be able to manage client-computer and server certificates. This include SMIME, EFS, exporting, and storage. This means you should be able to publish certificates through Active Directory. You should be able to issue certificates using MMC, Web enrollment, programmatic, or auto enrollment using Windows XP. You should be able to recover KMS-issued keys.
Manage and troubleshoot EFS. This includes domain members, workgroup members, and client-computer operating systems.
You should be able to monitor and to Responding to Security Incidents. This means you should be able to configure and manage auditing. This includes Windows Events, Internet Information Services (IIS), firewall log files, Network Monitor Log, and RAS log files. You should know how to manage audit log retention and distributed audit logs by using EventComb
You should be able to analyze security events. This includes reviewing logs and events.
You should be able to respond to security incidents. Event includes hackers, viruses, denial-of-service (DoS) attacks, natural disasters, and maintaining chains of evidence. This means you should be able to isolate and contain the incident. This includes the preserving of the chain of evidence. You must be able to put in to practice counter measures and restore services.
| Add Microsoft 70-214 Dump |
| CertYourself - Free Practice Exams, Free Study Guides For MCSE, CCNA, A+, MCSD, N+ and much much more |
| Testking - The acknowledged leader in Certification Preparation |
| Real-Exams - We have the Questions you will see in your Exams |
| ExactQuestions - Register for free and Take FREE IT Courses! Click Here! |
| Exact-Exams - Quality Exam Preparation - Available NOW! |
