Microsoft 70-293 Braindumps
| Exam details |
|---|
| 70-293 : Planning and Maintaining a Microsoft Windows Server 2003 Network Infrastructure |
| Certification provider: Microsoft |
| 70-293 Exam Topics |
| 70-293 Exam Info |
Number of Questions:
Approximately 50
Time:
120 Minutes
Price:
$125 (USD)
Passing Score:
700
Difficulty Rating:
4/5
Prerequisites: A Minimum of 1 year experience implementing and administering enterprise computer environments using Windows Server 2003 OS and client operating systems Windows 2000 and XP is required.
Exam Format: Form-Based Multiple Choice, Drag and Drop, Hot Area, List, sort and order questions.
Title
Date
| Displaying Rows 1 - 30 of 112 | Pages: 1 2 3 4  |
 Add Microsoft 70-293 Dump |
70-293 Exam Topics
- Plan and Implement Server Roles and Server Security
- Configure security for servers assigned specific roles
- Planning a secure baseline installation
- Strategy planning to enforce system default security settings on new systems.
- Client operating systems default security settings identification.
- All server operating systems default security settings identification.
- Planning security for servers assigned specific roles like domain controllers, Web servers, database servers, and mail servers
- Security configuration deployment for servers assigned specific roles.
- Custom security templates created based on server roles.
- Evaluating and selecting the operating systems to install on computers in an enterprise
- Minimum configuration to satisfy security requirements identification.
- Plan, Implement and Maintain a Network Infrastructure
- Planning a TCP/IP network infrastructure strategy
- IP addressing requirements analyzing.
- Solution planning for IP-routing.
- IP subnet scheme creation.
- Planning and modifying a network topology
- Physical placement planning of resources.
- Network protocols identified to be used.
- Internet connectivity strategy planning
- Planning network traffic monitoring using Network Monitor and System Monitor
- Internet connectivity troubleshooting
- Network Address Translation (NAT) diagnosing and resolving.
- Name resolution cache information diagnosing and resolving.
- Client configuration diagnosing and resolving.
- TCP/IP addressing troubleshooting
- Client computer configuration diagnosing and resolving.
- DHCP server address assignment diagnosing and resolving.
- Host name resolution strategy planning
- DNS namespace design planning.
- Zone replication requirements planning.
- Forwarding configuration planning.
- DNS security planning.
- Examine the interoperability of DNS with third-party DNS solutions.
- NetBIOS name resolution strategy planning
- WINS replication strategy planning.
- NetBIOS name resolution planning using Lmhosts file.
- Host name resolution troubleshooting
- DNS services diagnosing and resolving.
- Client computer configuration diagnosing and resolving.
- Planning a TCP/IP network infrastructure strategy
- Plan, Implement and Maintain Routing and Remote Access
- Routing strategy planning
- Identifying routing protocols to use in specified environments.
- Routing for IP multicast traffic planning.
- Security for remote access users planning
- Remote access policies planning.
- Protocol security requirements analyzing.
- Authentication methods for remote access clients planning.
- Secure access implementations between private networks
- Implementing and creating an IPSec policy.
- Troubleshooting TCP/IP routing using route, tracert, ping, pathping, and netsh commands and Network Monitor
- Routing strategy planning
- Plan, Implement and Maintain Server Availability
- Services planned for high availability
- High availability planning solution using clustering services.
- High availability planning solution using Network Load Balancing.
- Identifying system bottlenecks, memory, processor, disk, and network related bottlenecks
- Identify system bottlenecks using System Monitor.
- Cluster server implementation
- Cluster node failure recoveries.
- Managing Network Load Balancing using Network Load Balancing Monitor Microsoft Management Console (MMC) snap-in and the WLBS cluster control utility
- Backup and recovery strategy planning
- Identifying appropriate backup types and methods using full, incremental, and differential.
- Backup strategy planning using volume shadow copy.
- System recovery identification using Automated System Recovery (ASR).
- Services planned for high availability
- Plan and Maintain Network Security
- Network protocol security configuration
- Protocol security configuring in a heterogeneous client computer environment.
- Protocol security configuration using IPSec policies.
- Security configuration for data transmission
- IPSec policy settings configuration.
- Network protocol security planning
- Specifying required ports and protocols for specified services.
- IPSec policy planning for secure network communications.
- Secure network administration methods planning
- Creating a plan to offer Remote Assistance to client computers.
- Remote administration planning using Terminal Services.
- Security planning for wireless networks
- Security planning for data transmission
- Securing data transmission between client computers to meet security requirements.
- Securing data transmission using IPSec.
- Troubleshooting security for data transmission using IP Security Monitor MMC snap-in and the Resultant Set of Policy (RSoP) MMC snap-in
- Network protocol security configuration
- Plan, Implement and Maintain Security Infrastructure
- Configuring Active Directory directory service for certificate publication
- Public key infrastructure (PKI) planning using Certificate Services
- Identifying the appropriate certificate authority to support certificate issuance requirements.
- Enrollment and distribution planning of certificates.
- Planning usage of smart cards for authentication.
- Framework for planning and implementing security
- Plan for security monitoring planning.
- Planning and change configuration of management framework for security.
- Planning a security update infrastructure using Microsoft Baseline Security Analyzer and Microsoft Software Update Services
70-293 Exam Info
Intended Audience: Exam 70-293, Planning and Maintaining a Microsoft Windows Server 2003 Network Infrastructure is designed for people working in the complex computing environments of medium to large companies with the following characteristics:
- 250 to 5,000 users
- At least three physical locations
- At least three domain controllers
- Network services and resources and client computer management
- Connectivity requirements
- Implement and administer a desktop operating system
- Designing a network infrastructure
Exam 70-293 has a difficulty rating of 4/5. The exam measures skills related to planning and maintenance of a Windows Server 2003 infrastructure. All network design and planning aspects including provisions for network availability, security and performance are covered.
The exam consists of approximately 50 Questions, Form-Based, Multiple Choice, Drag and Drop, Hot Area, List, sort and order questions. All candidates have 120 Minutes to complete the examination. The requirement for passing exam 70-293 is 700.
Passing exam 70-293 Planning and Maintaining a Microsoft Windows Server 2003 Network Infrastructure and you achieve Microsoft Certified Professional (MCP) status providing it's your first exam you pass, also earning:
- Core credit towards Microsoft Certified Systems Engineer (MCSE) on Windows Server 2003
- Elective credit towards Microsoft Certified Database Administrator (MCDBA) on Microsoft SQL Server 2000
What you need to know
Planning roles for servers installed in the network and evaluating existing technologies and hardware appropriately ensuring functionality of each computer in the network this includes Web servers, domain controllers and database servers.
Plan and configure a physical network infrastructure that includes TCP/IP address schemes, planning for Internet connectivity and traffic monitoring.
Providing fault tolerance and increased availability of resources for the network environment.
Network Load Balancing, configuring logical server groups functioning as a single entity and server clustering.
Provide network services to users and clients when hardware or other system failures. Setting up an effective security infrastructure, including Internet Protocol Security (IPSec) and PKI.
Planning an effective security strategy for Windows Server 2003 using different roles the servers play based on security requirements. The roles different Windows 2003 servers play on the network. Understanding the roles Windows Server 2003 can play on the network.
Planning a server security strategy, choosing the right operating system based on security needs, identifying the minimum security requirements and identifying correct configurations based on security requirements.
Planning a baseline security for client and server machines, planning secure baseline installation parameters and enforcing default security settings on new computers.
Customizing server security, securing servers based on their roles, creating and deploying custom security templates, identifying network protocols supported on Windows Server 2003 and identifying network protocols to use in the network environment
Planning IP addressing strategies and analyzing addressing requirements to create a effective subnetting scheme. Troubleshooting IP addressing problems related to client configuration and Dynamic Host Configuration Protocol (DHCP) server.
Analyzing hardware requirements and planning the placement of physical resources. Plan network traffic management and monitor network traffic and devices using Network Monitor and System Monitor. Determine bandwidth requirements optimizing the network performance.
Static and dynamic IP routing, the routing tables role and routing protocols Routing Information Protocol (RIP) and Open Shortest Path First (OSPF). Using netsh router commands to evaluate routing options, connectivity devices hubs, bridges, switches (Layer 2, 3, and 4 varieties) and routers. Configure Windows Server 2003 as a router, configuring Routing and Remote Access Service (RRAS).
Analyze security requirements of routing components and simplifying the network topology to provide fewer attack points minimizing the number of network interfaces, routes and routing protocols.
Router-to-router virtual private networks (VPNs), packet filtering, firewalls, and logging levels. Troubleshoot IP routing issues related to interface configuration, RRAS configuration, routing protocols, TCP/IP configuration, and routing table configuration.
Develop a strategy connecting the Windows Server 2003 network to the Internet. Connect the LAN to the Internet using Internet Connection Sharing or Routing and Remote Access Service's Network Address Translation component).
Using a internet-based virtual private networks (VPNs) and router-to-router (VPNs). Provide connectivity from remote locations to the branch offices or company LAN.
Using Remote Access Policies to control VPN connections, VPN protocols supported by Windows Server 2003. Make VPN connections using Point-to-Point Tunneling Protocol (PPTP) or Layer 2 Tunneling Protocol (L2TP). Provide VPN security and identify authentication and encryption protocols for the virtual private network.
Provide centralized user authentication and authorization, centralized auditing and accounting, and extensibility and scalability using Internet Authentication Service (IAS). The integration of IAS with Windows Server 2003 Remote Access and Routing Service (RRAS) Controlling authentication via Remote Access Policies.
Implement and monitoring IAS using Microsoft Management Console (MMC) snap-in, using the IAS Software Development Kit (SDK). IAS authentication methods and Remote Authentication Dial-In User Service (RADIUS) access server support, wireless access points (WAPs) and authenticating switches.
Using Connection Manager Administration Kit (CMAK) to create service profiles, custom actions, custom help files and VPN support making nontechnical users connect remotely needing no complex configuration. Connection Manager related security issues, prevent editing of service profile files, prevent users saving passwords and distribute service pro- files securely.
Plan the best way to resolve host and NetBIOS names on the network. Resolving host names using the hosts file and Domain Name System (DNS). Designing a DNS namespace, choose the parent domain name, convention and limitations that govern host names, relationship of DNS and Active Directory (AD) and support multiple namespaces.
Planning deployment of a DNS server consider factors like the number of servers, server roles, server capacity, and server placement. Configure zone replication between the DNS servers. Address planning for forwarding and DNS interaction with the Dynamic Host Configuration Protocol (DHCP) on a Windows Server 2003 network.
Windows Server 2003 DNS server interoperability with Berkeley Internet Name Domain (BIND) and non-Windows DNS implementations.
Supporting AD with BIND and split DNS configurations, interoperability with other services such as Windows Internet Name Service (WINS) and DHCP. DNS security issues, common DNS threats footprinting, redirection, and DNS denial-of-service (DoS) attacks.
Secure DNS deployment by using a split namespace and packet filtering. Determine the best DNS security level for the network. Monitor and analyze DNS performance issues.
Providing and resolving NetBIOS names using LMHOSTS files and NetBIOS name servers such as WINS servers. Planning WINS server deployment and configuring push-only , pull only replication partnerships.
Troubleshoot configuration, performance, and security issues related to WINS. Planning WINS database backup and troubleshooting name resolution problems related to host names and NetBIOS names.
Analyzing organizational needs and user needs for devising a remote access strategy. Select remote access policy types to be allowed (dial-in, VPN, and/or wireless). Allocating IP addresses to dial-in users and determining the incoming port. Selecting the best administrative model based on your organizational needs and the functional level of your domain.
Select the VPN protocols allowed based on client support, PKI requirements data integrity and sender authentication. Installing machine certificates and configure firewall filters. Create access policies gorverning VPN connections.
Wireless remote access design considerations. Configuring remote access policies for wireless connections and using IAS for wireless connections. The advantage of a certification authority on a Virtual LAN (VLAN) for wireless clients using multiple WAPs. Configure WAP as a RADIUS client.
Plan a security strategy for remote access connections. Select authentication methods to be allowed, disallowing insecure password-based connections such as PAP, SPAP, CHAP, and MS-CHAPv1. The more secure methods MSCHAPv2 and EAP, and the advantages of using RADIUS/IAS rather than Windows authentication.
Select data-encryption level and other security measures such as requiring callback, mandating operating system and file system choices, using managed connections, and using smart cards for remote access.
Authorize remote access by user or group, restricting remote access in various ways and controlling remote connections. Identify performance bottlenecks and what cause them and identify common system bottlenecks memory, processor, disk, and network components.
Use System Monitor utility to track server performance and using Event Viewer and service logs to monitor server issues. Plan a backup and recovery strategy using the Windows Backup Utility. Understand the differences between full, incremental, and differential backups.
Use Volume Shadow Copy feature as a backup option. Decide which information to back up. Back up user data, System State data, the Dynamic Host Configuration Protocol (DHCP) database, Windows Internet Name Service (WINS) database, Domain Name System (DNS) database, cluster disk signatures, and partition layouts.
Use the Windows Backup administrative tool and the Backup and Restore Wizard feature and Advanced Mode feature. Use command-line tools, selecting the backup media, scheduling backups and restore data from backup when necessary.
We'll address how to Plan for system recovery using the Automated System Recovery (ASR) feature. Know the system services. Make an ASR backup, and restore from ASR back up The alternatives to ASR such as Safe Mode and Last Known Good boot options.
Planning fault tolerance solutions and providing fault tolerance for local network connectivity, Internet connectivity, data on disk and mission-critical servers. Server clustering, Understand cluster nodes, cluster groups, failover and failback name resolution.
The three cluster models single-node, single quorum device, and majority node set. Cluster deployment options N-node failover pairs, hot standby server/N+1, failover ring and random. Use Cluster Administrator tool and command-line tools.
The best practices for deploying server clusters. Troubleshoot hardware issues related to network interface controllers, storage devices, power saving features, and general compatibility issues. Cluster network configuration, multiple interconnections and node-to-node communications.
Plan security for server clusters, physical security, public/mixed networks, private networks, secure remote administration of cluster nodes, security issues related to the cluster service account and limiting client access. Securing data in a cluster, secure disk resources and cluster configuration log files.
Make Network Load Balancing (NLB) part of your high-availability plan, NLB concepts such as hosts/default host, load weight, traffic distribution, convergence, and heartbeats. Know how NLB works and the relationship of NLB to clustering. Manage NLB clusters using NLB Manager tool, remote management tools and command-line tools.
NLB error detection and handling, monitoring NLB using the NLB Monitor Microsoft Management Console (MMC) snap-in or Windows Load Balancing Service (WLBS) cluster control utility. The best practices implementing and managing NLB, issues related to multiple network adapters, protocols, IP addressing, NLB Manager logging and NLB security.
This chapter deals with how to work with Windows Server 2003's IPSec. We start by introducing IPSec terminology and concepts and explaining how IPSec works "under the hood" to secure data in transit over the network. IPSec encryption: authentication, integrity, and confidentiality. The modes IPSec operates in.
The protocols used by IPSec, two primary protocols: Authentication Header (AH) protocol and Encapsulating Security Payload (ESP) protocol. We'll also discuss The roles of additional protocols used by IPSec, Internet Security and Key Management Protocol (ISAKMP), Internet Key Exchange (IKE), Oakley key-determination protocol, and Diffie-Hellman key-agreement protocol.
Use the IPSec driver and Policy Agent service. Understand the relationship of IPSec and Internet Protocol version 6 (IPv6). Deploying IPSec on the network based on organizational needs and security levels.
Determine the appropriate authentication methods. Managing IPSec and using the IP Security Policy Management Microsoft Management Console (MMC) snap-in and command-line tools.
IPSec policies and roles, default and custom policies and assign and apply policies, IPSec security considerations and issues using strong encryption algorithms (Triple Data Encryption Standard, or 3DES), authentication methods, firewall packet filtering, unprotected traffic, Diffie-Hellman groups, and pre-shared keys.
Use the Resultant Set of Policy (RSoP) and RSoP MMC snapin to view policy assignments and simulate policy assignments for deployment planning. Plan and implement Active Directory (AD) security, includes physically securing domain controllers, securing the schema, managing cross-forest security relationships, account security, and implementing AD access controls.
Planning and implementing wireless security. 802.11 wireless technologies, authenticators, supplicants and wireless networking. "The authentication methods used for wireless networks including authentication subtypes such as open system and shared key.
The protocols used for wireless authentication include Extensible Authentication Protocol (EAP), EAP-Transport Layer Security (EAP-TLS), EAP-Microsoft Challenge Handshake Authentication Protocol version 2 (EAP-MSCHAPv2) and Protected Extensible Authentication Protocol (PEAP).
Using Internet Authentication Service (IAS) with wireless to address wireless security issues such as common insecure default settings (administrative password, service set identifier and Wired Equivalent Privacy settings). The weaknesses of Wired Equivalent Privacy (WEP) protocol encryption and making WEP more secure.
Security monitoring and address object-based access control and security policies, password policies, Kerberos policies, account lockout policies, user rights and security templates.
Security auditing and setting up the auditing policy, modify the security log settings, and audit objects such as files or folders.
Planning a change and configuration management framework using Security Configuration Manager tool and command-line tools included with Windows Server 2003. Security configuration and analysis best practices.
Plan a security update infrastructure. The importance of regular security updates using Microsoft Baseline Security Analyzer (MBSA) and Microsoft Software Update Services (SUS) tools ensure Window Server 2003's security features are current.
Planning a certificate based PKI. Public key infrastructure and public key cryptography authenticate the identity of users, computers, and applications and services.
The role of digital certificates certificate types, user, machine and application certificates. Certification authorities (CAs) servers issue certificates, including both public and private CAs implemented on the network using Windows Server 2003's certificate services.
The CA hierarchy root CAs and subordinate CAs act together providing for the organization's certificate needs. Implementing one or more certification authorities based on the security needs of the organization.
Determine the appropriate CA type, enterprise or stand-alone CA in a situation. Plan the CA hierarchy and provide security for the CAs. Plan the enrollment and distribution of certificates, manual certificate requests, role-based administration, and auto-enrollment deployment.
Implement and use the smart cards for authentication within PKI. Deploy smart cards for logon on the network. Smart card readers and set up a smart card enrollment station. Using smart cards to log on to Windows, for remote access and VPNs and log on to a terminal server.
| Add Microsoft 70-293 Dump |
| CertYourself - Free Practice Exams, Free Study Guides For MCSE, CCNA, A+, MCSD, N+ and much much more |
| Testking - The acknowledged leader in Certification Preparation |
| Real-Exams - We have the Questions you will see in your Exams |
| ExactQuestions - Register for free and Take FREE IT Courses! Click Here! |
| Exact-Exams - Quality Exam Preparation - Available NOW! |
