Microsoft 70-299 Braindumps
| Exam details |
|---|
| 70-299 : Implementing and Administering Security in a Microsoft Windows Server 2003 Network |
| Certification provider: Microsoft |
| 70-299 Exam Topics |
| 70-299 Exam Info |
Prerequisites: An MCSA candidate should have 6 to 12 months of experience administering client and network operating systems in environments that have the following characteristics:
- 250 to 5,000 or more users
- Three or more physical locations
- Three or more domain controllers
- Network services and resources such as messaging, database, file and print, proxy server, firewall, public key infrastructure (PKI), Internet, intranet, remote access, and client computer management
- Connectivity requirements such as connecting branch offices and individual users in remote locations to the corporate network and connecting corporate networks to the Internet
Exam Format:
They are using case studies with a combination of the following: Multiple Choice, Active Screen, Select-and-Place, Build List – sort and reorder, Simulations and Case Study–based formats.
Number of Questions:
There are 50 questions.
Time:
150 Minutes
Price:
$125 (USD)
Passing Score:
700
Difficulty Rating:
4/5
Title
Date
| Displaying Rows 1 - 30 of 32 | Pages: 1 2  |
 Add Microsoft 70-299 Dump |
70-299 Exam Topics
- Implementing, Managing, and Troubleshooting Security Policies.
- Plan security templates based on computer role. Computer roles include SQL Server computer, Microsoft Exchange Server computer, domain controller, Internet Authentication Service (IAS) server, and Internet Information Services (IIS) server.
- Configure security templates.
- Configure registry and file system permissions.
- Configure account policies.
- Configure .pol files.
- Configure audit policies.
- Configure user rights assignment.
- Configure security options.
- Configure system services.
- Configure restricted groups.
- Configure event logs.
- Deploy security templates.
- Plan the deployment of security templates.
- Deploy security templates by using Active Directory-based Group Policy objects (GPOs).
- Deploy security templates by using command-line tools and scripting.
- Troubleshoot security template problems.
- Troubleshoot security templates in a mixed operating system environment.
- Troubleshoot security policy inheritance.
- Troubleshoot removal of security template settings.
- Set up additional security based on computer roles. Server computer roles include SQL Server computer, Exchange Server computer, domain controller, Internet Authentication Service (IAS) server, and Internet Information Services (IIS) server. Client computer roles include desktop, portable, and kiosk.
- Plan and configure security settings.
- Plan network zones for computer roles.
- Plan and configure software restriction policies.
- Plan security for infrastructure services. Services include DHCP and DNS.
- Plan and configure auditing and logging for a computer role. Considerations include Windows Events, Internet Information Services (IIS), firewall log files, Netlog, and RAS log files.
- Analyze security configuration. Tools include Microsoft Baseline Security Analyzer (MBSA), the MBSA command-line tool, and Security Configuration and Analysis.
- Implementing, Managing, and Troubleshooting Patch Management Infrastructure.
- Plan the deployment of service packs and hotfixes.
- Evaluate the applicability of service packs and hotfixes.
- Test the compatibility of service packs and hotfixes for existing applications.
- Plan patch deployment environments for both the pilot and production phases.
- Plan the batch deployment of multiple hotfixes.
- Plan rollback strategy.
- Assess the current status of service packs and hotfixes. Tools include MBSA and the MBSA command-line tool.
- Assess current patch levels by using the MBSA GUI tool.
- Assess current patch levels by using the MBSA command-line tool with scripted solutions.
- Deploy service packs and hotfixes.
- Deploy service packs and hotfixes on new servers and client computers. Considerations include slipstreaming, custom scripts, and isolated installation or test networks.
- Deploy service packs and hotfixes on existing servers and client computers.
- Plan the deployment of service packs and hotfixes.
- Implementing, Managing, and Troubleshooting Security for Network Communications.
- Plan IPSec deployment.
- Decide which IPSec mode to use.
- Plan authentication methods for IPSec.
- Test the functionality of existing applications and services.
- Configure IPSec policies to secure communication between networks and hosts. Hosts include domain controllers, Internet Web servers, databases, e-mail servers, and client computers.
- Configure IPSec authentication.
- Configure appropriate encryption levels. Considerations include the selection of perfect forward secrecy (PFS) and key lifetimes.
- Configure the appropriate IPSec protocol. Protocols include Authentication Header (AH) and Encapsulating Security Payload (ESP).
- Configure IPSec inbound and outbound filters and filter actions.
- Deploy and manage IPSec policies.
- Deploy IPSec policies by using Local policy objects or Group Policy objects (GPOs).
- Deploy IPSec policies by using commands and scripts. Tools include IPSecPol and NetSh.
- Deploy IPSec certificates. Considerations include deployment of certificates and renewing certificates on managed and unmanaged client computers.
- Troubleshoot IPSec.
- Monitor IPSec policies by using IP Security Monitor.
- Configure IPSec logging. Considerations include Oakley logs and IPSec driver logging.
- Troubleshoot IPSec across networks. Considerations include network address translation, port filters, protocol filters, firewalls, and routers.
- Troubleshoot IPSec certificates. Considerations include enterprise trust policies and certificate revocation list (CRL) checking.
- Plan and implement security for wireless networks.
- Plan the authentication methods for a wireless network.
- Plan the encryption methods for a wireless network.
- Plan wireless access policies.
- Configure wireless encryption.
- Install and configure wireless support for client computers.
- Deploy, manage, and configure SSL certificates, including uses for HTTPS, LDAPS, and wireless networks. Considerations include renewing certificates and obtaining self-issued certificates instead of publicly issued certificates.
- Obtain self-issued certificates and publicly issued certificates.
- Install certificates for SSL.
- Renew certificates.
- Configure SSL to secure communication channels. Communication channels include client computer to Web server, Web server to SQL Server computer, client computer to Active Directory domain controller, and e-mail server to client computer.
- Configure security for remote access users.
- Configure authentication for secure remote access. Authentication types include PAP, CHAP, MS-CHAP, MS-CHAP v2, EAP-MD5, EAP-TLS, and multifactor authentication that combines smart cards and EAP.
- Configure and troubleshoot virtual private network (VPN) protocols. Considerations include Internet service provider (ISP), client operating system, network address translation devices, Routing and Remote Access servers, and firewall servers.
- Manage client configuration for remote access security. Tools include remote access policy and the Connection Manager Administration Kit.
- Plan IPSec deployment.
- Planning, Configuring, and Troubleshooting Authentication, Authorization, and PKI.
- Plan and configure authentication.
- Plan, configure, and troubleshoot trust relationships.
- Plan and configure authentication protocols.
- Plan and configure multifactor authentication.
- Plan and configure authentication for Web users.
- Plan and configure delegated authentication.
- Plan group structure.
- Decide which types of groups to use.
- Plan security group scope.
- Plan nested group structure.
- Plan and configure authorization.
- Configure access control lists (ACLs).
- Plan and troubleshoot the assignment of user rights.
- Plan requirements for digital signatures.
- Install, manage, and configure Certificate Services.
- Install and configure root, intermediate, and issuing certification authorities (CAs). Considerations include renewals and hierarchy.
- Configure certificate templates.
- Configure, manage, and troubleshoot the publication of certificate revocation lists (CRLs).
- Configure archival and recovery of keys.
- Deploy and revoke certificates to users, computers, and CAs.
- Backup and restore the CA.
- Plan and configure authentication.
70-299 Exam Info
Exam Layout and Design: The format is as follows:
- Multiple Choice: Multiple-choice questions come in two main forms. One is a straightforward question followed by several potential answers, of which one or more is correct. The other type of multiple-choice question is more complex and based on a specific scenario. The scenario may focus on several areas or objectives.
- Active Screen: Tests your working knowledge of the product by presenting you with a dialog box and requiring you to configure or change one or more options in order to answer the question.
- Select-and-Place: Requires you to drag source objects into the correct target area in order to answer the question.
- Build List and Reorder: You will be needed to create a list, in the correct order that represents the steps required to complete the stated problem.
- Simulations: Simulations are the kinds of questions that closely represent actual situations and test the skills that you use while working with Microsoft software interfaces. These exam questions include a mock interface on which you are asked to perform certain actions according to a given scenario.
- Case Study–based: Case study–based questions first appeared in the MCSD program. These questions present a scenario with a range of requirements. Based on the information provided, you answer a series of multiple-choice and select-and-place questions. The interface for case study–based questions has a number of tabs, each of which contains information about the scenario.
Intended Audience: The exam of 70 299: Implementing and Administering Security in a Microsoft Windows Server 2003 Network is designed for IT professionals who work in the typically complex computing environment of medium to large companies.
Exam 70-299 has a difficulty rating of 4/5. The exam measures your ability to implement, manage, maintain, and troubleshoot security in a Windows Server 2003 network infrastructure and also plan and configure a Windows Server 2003 PKI.
The exam consists of approximately 50 Questions, Multiple Choice, Active Screen, Select-and-Place, Build List – sort and reorder, Simulations and Case Study–based formats. All candidates have 120 Minutes to complete the examination. The requirement for passing exam 70-299 is 700.
Passing exam 70-299 Implementing and Administering Security in a Microsoft Windows Server 2003 Network and you achieve Microsoft Certified Professional (MCP) status providing it’s your first exam you pass, also earning:
- Core credit toward Microsoft Certified Systems Administrator (MCSA): Security on Microsoft Windows Server 2003 certification.
- Core credit toward Microsoft Certified Systems Engineer (MCSE): Security on Microsoft Windows Server 2003 certification.
- Elective credit toward Microsoft Certified Systems Engineer (MCSE) on Microsoft Windows Server 2003 certification.
- Elective credit toward Microsoft Certified Systems Administrator (MCSA) on Microsoft Windows Server 2003 certification.
What you need to know
You should know how to implement, manage and to troubleshoot the security policies. This means you must be able to pan the security templates that are based on the computer role. The computer roles include the following: SQL Server computer, Microsoft Exchange Server computer, domain controller, Internet Authentication Service (IAS) server, and Internet Information Services (IIS) server.
In configuring the security templates you should know the following: You must be able to set up registry and file system permissions. You should know how to configure the account policies, .pol files, auditing policies, user rights assignment, security options, system services, restricted groups and event logs.
You must be able to deploy security templates. This consists of the planning of the deployment of security templates. You must be able to deploy security templates by making use of the Active Directory-based Group Policy objects (GPOs). You should be by the means to deploy security templates by using the command-line tools and scripting.
You should have the knowledge and the know-how to troubleshoot security template problems. You should be able to troubleshoot security templates in a mixed operating system environment, troubleshoot security policy inheritance and you should be able to troubleshoot the removal of security template settings.
You also must be able to set up additional security based on computer roles. The server computer roles include SQL Server computer, Exchange Server computer, domain controller, Internet Authentication Service (IAS) server, and Internet Information Services (IIS) server. The client computer roles include desktop, portable and kiosk. This means you should plan and set up security settings, zones for computer roles, software restriction policies. You should be able to plan security for infrastructure services. Services include DHCP and DNS. You should also know how to auditing and logging for a computer role. Considerations include Windows Events, Internet Information Services (IIS), firewall log files, Netlog, and RAS log files. You should be able to analyze security configuration, of which the tools consists of Microsoft Baseline Security Analyzer (MBSA), the MBSA command-line tool, and Security Configuration and Analysis.
You should be able to implement, managing and troubleshoot patch management infrastructure. This means you must b able to plan the deployment of services packs and hotfixes. This includes the evaluation of the applicability of service packs and hotfixes. You should be able to test the compatibility of service packs and hotfixes for existing applications. You should be able to plan patch deployment environments for both the pilot and production phases. You should also batch deployment of multiple hotfixes. You should know how to plan the rollback strategy.
You should be able to assess the current status of services packs and hotfixes. This means you must assess current patch levels by using the MBSA GUI tool. You should also be able to use the MBSA command-line tool with scripted solutions.
You should be able to deploy service packs and hotfixes on new servers and client computers. This includes slipstreaming, custom scripts, and isolated installation or test networks.
You should be able to implement, manage and troubleshoot security for network communications. This includes the planning of IPSec deployment. You know which IPSec mode to use. You should be able to authenticate methods for IPSec. You should also test the functionality of existing applications and services.
You should know how to configure IPSec policies to secure communication between networks and hosts. The hosts include domain controllers, Internet Web servers, databases, e-mail servers, and client computers. This means you should set up IPSec authentication. You should be able to use the suitable encryption levels. Considerations include the selection of perfect forward secrecy (PFS) and key lifetimes. You should be able to configure the suitable IPSec protocol. Protocols include Authentication Header (AH) and Encapsulating Security Payload (ESP). You should also be able to set up IPSec inbound and outbound filters and filter actions.
You should be able to deploy and manage IPSec policies. This includes the deployment of IPSec policies by using Local policy objects or Group Policy objects (GPOs). You should be able to deploy IPSec policies by using commands and scripts. Tools include IPSecPol and NetSh. You should know how to set up IPSec certificates. Considerations include deployment of certificates and renewing certificates on managed and unmanaged client computers.
You should be able to troubleshoot IPSec. This means you must monitor IPSec policies by using IP Security Monitor. You should set up IPSec logging. Considerations include Oakley logs and IPSec driver logging. You must be able to troubleshoot IPSec across networks. Considerations include network address translation, port filters, protocol filters, firewalls, and routers. You should also troubleshoot IPSec certificates. Considerations include enterprise trust policies and certificate revocation list (CRL) checking.
You must also have knowledge of planning and implementing the security for a wireless network. This includes the authentication methods and encryption methods for a wireless network. You should be able to plan wireless access policies and set up wireless encryption. You should also know how to install and set up wireless support for client computers.
You should be able to deploy, manage, and configure SSL certificates, including uses for HTTPS, LDAPS, and wireless networks. Considerations include renewing certificates and obtaining self-issued certificates instead of publicly issued certificates. This means obtaining self-issued certificates and publicly issued certificates. You must be able to install certificates for SSL. You should know how to renew certificates. You should be able to set up SSL to secure communication channels. Communication channels include client computer to Web server, Web server to SQL Server computer, client computer to Active Directory domain controller, and e-mail server to client computer.
You should be able to set up security for remote access users. This means you should set up authentication for secure remote access. Authentication types include PAP, CHAP, MS-CHAP, MS-CHAP v2, EAP-MD5, EAP-TLS, and multifactor authentication that combines smart cards and EAP. You should be able to set up and troubleshoot virtual private network (VPN) protocols. Considerations include Internet service provider (ISP), client operating system, network address translation devices, Routing and Remote Access servers, and firewall servers. You should know how to manage client configuration for remote access security. Tools include remote access policy and the Connection Manager Administration Kit.
You should be able to plan, set up and Troubleshooting Authentication, Authorization, and PKI. This means you must be able to plan and configure authentication. This includes planning, set up and troubleshoots trust relationships. You should be able to configure and plan authentication protocols, multifactor authentication, authentication for Web users and delegated authentication.
You should be able to plan group structures. You should know which types of groups to use. You should be able to plan security group scope and nested group structure.
You should also know how to plan and configure authorization. This means you must know how to set up an access control list (ACLs). You should know how to troubleshoot and plan the assignment of user rights. You should be able to plan the requirements for digital signatures.
You should be able to install, manage and set up certificate services. This means you should be able to install and set up root, intermediate and issuing certification authorities (CAs). Considerations include renewals and hierarchy. You should be able to set up certificate templates. You must be able to set up, manage, and troubleshoot the publication of certificate revocation lists (CRLs). Yu should know how to set up archival and recovery key. You must be able to deploy and revoke certificates to users, computers, and CAs. You must be able to backup and restore the CA.
| Add Microsoft 70-299 Dump |
| CertYourself - Free Practice Exams, Free Study Guides For MCSE, CCNA, A+, MCSD, N+ and much much more |
| Testking - The acknowledged leader in Certification Preparation |
| Real-Exams - We have the Questions you will see in your Exams |
| ExactQuestions - Register for free and Take FREE IT Courses! Click Here! |
| Exact-Exams - Quality Exam Preparation - Available NOW! |
