| Planning and Implementing Server
Roles and Server Security |
Configure security for servers that are assigned specific roles
|
Plan security for servers that are assigned specific roles,
including domain controllers, Web servers, database servers, and
mail servers
- Deploy the security configuration for servers that are
assigned specific roles
- Create custom security templates based on server roles
|
| Planning, Implementing, and
Maintaining a Network Infrastructure |
Plan a host name resolution strategy
- Plan a DNS namespace design
- Plan zone replication requirements
- Plan a forwarding configuration
- Plan for DNS security
- Examine the interoperability of DNS with third-party DNS
solutions
|
| Planning, Implementing, and
Maintaining Server Availability |
Plan services for high availability
- Plan a high availability solution that uses clustering
services
- Plan a high availability solution that uses Network Load
Balancing
|
Plan a backup and recovery strategy
- Identify appropriate backup types, including: full,
incremental, and differential
- Plan a backup strategy that uses volume shadow copy
- Plan system recovery that uses Automated System Recovery
(ASR)
|
| Planning and Maintaining Network
Security |
Plan secure network administration methods
- Create a plan to offer Remote Assistance to client computers
- Plan for remote administration by using Terminal Services
|
Plan security for wireless networks
|
Plan security for data transmission
- Secure data transmission between client computers to meet
security requirements
- Secure data transmission by using IPSec
|
| Planning, Implementing, and
Maintaining Security Infrastructure |
Configure Active Directory directory service for certificate
publication
|
Plan a public key infrastructure (PKI) that uses Certificate
Services
- Identify the appropriate type of certificate authority to
support certificate issuance requirements
- Plan the enrollment and distribution of certificates
- Plan for the use of smart cards for authentication
|
Plan a framework for planning and implementing security
- Plan for security monitoring
- Plan a change and configuration management framework for
security
|
Plan a security update infrastructure using: Microsoft
Baseline Security Analyzer and Microsoft Software Update Services
|
| Planning and Implementing an Active
Directory Infrastructure |
Plan a strategy for placing global catalog servers
- Evaluate network traffic considerations when placing global
catalog servers
- Evaluate the need to enable universal group caching
|
Implement an Active Directory directory service forest and domain
structure
- Create the forest root domain
- Create a child domain
- Create and configure Application Data Partitions
- Install and configure an Active Directory domain controller
- Set an Active Directory forest and domain functional level
based on requirements
- Establish trust relationships, including external trusts,
shortcut trusts, and cross-forest trusts
|
Managing and Maintaining an Active
Directory Infrastructure
|
Manage an Active Directory forest and domain structure
- Manage trust relationships
- Manage schema modifications
- Add or remove a UPN suffix
|
Restore Active Directory directory
services
- Perform an authoritative restore operation
- Perform a nonauthoritative restore operation
|
| Planning and Implementing User,
Computer, and Group Strategies |
Plan a user authentication strategy
- Plan a smart card authentication strategy
- Create a password policy for domain users
|
| Planning and Implementing Group
Policy
|
Plan Group Policy strategy
- Plan a Group Policy strategy by using Resultant Set of
Policy (RSoP) Planning mode
- Plan a strategy for configuring the user environment by
using Group Policy
- Plan a strategy for configuring the computer environment by
using Group Policy
|
Configure the user environment by using Group Policy
- Distribute software by using Group Policy
- Automatically enroll user certificates by using Group Policy
- Redirect folders by using Group Policy
- Configure user security settings by using Group Policy
|
Managing and Maintaining Group Policy
|
Troubleshoot issues related to Group Policy application deployment
using RSoP and the GPResult command
|
Troubleshoot the application of Group Policy security settings using
RSoP and the GPResult command
|