|
RealCert SM : MCSE Exam 70-219 -- Designing a Microsoft Windows 2000 directory services infrastructure
- Exam registration
- Exam 70-219 profile
- Exam strategy
- Case study format example
- Close up: Sample case study
- After reading a case study core topics for 70-219
- Designing Active Directory
- Forests, trees, & domains
- Active directory design components
- Forest design factors
- Tree design factors
- Domain design factors
- User principal names
- Placement of domain controllers
- Domains: Upgrading NT4 to Win2K
- FSMO planning and placement
- Designing service locations
- Forest specific FSMO roles
- Schema master
- Domain naming master
- Domain specific FSMO roles
- PDC emulator
- Infrastructure master
- RID master
- Quick FSMO question
- Global catalog(s)
- Placement of GC's
- Global catalog caveats
- Sites, site links, bridgehead servers
- Site design
- Reasons for creating sites
- Site & site link creation
- Replication protocols
- Bridgehead servers
- Intrasite vs. intersite replication
- DNS: What's the plan?
- W2K DNS specifications
- DNS migration
- DNS integration
- Designing the DNS namespace
- Reverse lookup zones
- Mergers & acquisitions
- Placement of DNS servers
- DNS planning strategy
- Trust relationships and kerberos referral
- Trusts in a forest
- Trusts between forests
- Kerberos referral
- Analyze & optimize trust relationships
- Organizational units
- OU notes to remember
- Criteria for OU structure
- Delegation of control wizard
- Plan OU delegation
- Group policies
- Group policy: Design it!
- GPO's: Order of implementation
- Group policy: Account settings
- Managing group policy objects
- Security policies
- Security policy settings
- Mixed mode vs. native mode
- Mixed mode
- Native mode
- Domain mode notes
- Quiz: Domain modes
- Nesting of security groups
- Group nesting: Choices
- Universal group 'phenomenon'
- Specific group notes
- RRAS authentication
- RAS authentication protocols
- Secure transfers over the Internet
- RIS implementation reminders
- Requirements for RIS
RealCert SM : MCSE exam 70-220 -- Designing security for a Microsoft Windows 2000 Network
- Exam registration
- Exam 70-220 profile
- Exam strategy
- Case study format example
- Close up: Sample case study
- After reading a case study
- Core topics for 70-220
- Red flag centralf
- More red flagsf
- Perform a risk analysis
- Security design
- Audit policies
- Audit policies: Major points
- Implementing audit policies
- Delegation of authority
- Delegation: Under the hood
- Designing OU's and delegation
- Geographical design thoughts
- Security policies
- Security policy: The hot list
- Security policy settings
- Security policy: Order of implementation
- Security policy: Inheritance
- Blocking inheritance
- Forcing inheritance
- Where do policy settings go?
- When is policy applied?
- Is policy applied for RAS users?
- When is policy refreshed?
- Determining Policy in Effect (RSOP)
- EFS strategies
- EFS: The hot list
- EFS in action
- EFS uses
- Authentication
- Authentication choices
- Authentication facts
- Kerberos V5
- Kerberos benefits
- Windows 2000 network authentication
- The KDC
- What uses Kerberos for authentication?
- Kerberos for cross platform authentication
- Certificate-based authentication
- NTLM authentication
- Clear-text
- Digest authentication
- Smart cards
- RADIUS
- SSL
- Security groups
- Security group implementation
- Group types
- Group scope
- Domain mode affects groups!
- Group nesting
- Public key infrastructure (PKI)
- Designing a PKI
- Certificate authority hierarchies
- Certificate authority roles
- Manage and map certificates
- Integration with 3rd party CA's
- Windows 2000 network services security
- Securing services? Which ones?
- DNS
- DNS zone types
- DNS integration and AD
- RIS
- SNMP agent
- SNMP basics
- SNMP security
- Terminal server security
- TS security features
- TS client security issues
- Security solutions
- Access between networks
- Security for Communication channels
- SMB (server message block)
- SMB defined
- IP security (IPSec) policies
- AH and ESP
- IPSec with ESP (encrypts data)
- IPSec with AH (encrypts header information but not data)
RealCert SM : MCSE exam 70-221 -- Designing a Microsoft Windows 2000 network infrastructure
RealCert SM : MCSE exam 70-222 -- Migrating from Microsoft Windows NT 4.0 to Microsoft Windows 2000
RealCert SM : MCSE exam 70-244 -- Supporting and maintaining a Microsoft Windows NT. Server 4.0 network
RealCert SM : MCSE exam 70-224 -- Installing, configuring, and administering Microsoft Exchange 2000 server
RealCert SM : MCSE exam 70-225 -- Designing and deploying a messaging infrastructure with Microsoft Exchange 2000 server
|