1、70-299 考试资料Implementing Security in a MS Win Server2003 Network科目编号：70-299 科目名称：Implementing Security in a MS Win Server2003 Network语言（s）： 英语，法语，德语，日语，西班牙语，中文（简体）观众（补）： IT 专业人士技术： 微软 Windows 服务器 2003类型： 监考考试相关分类：MCSE 2003 Security70-299 考试是 Microsoft 公司的 Implementing Security in a MS Win Server2003
2、Network 认证考试官方代号，Implementing Security in a MS Win Server2003 Network 认证作为全球 IT领域专家 Microsoft 热门认证之一，是许多大中 IT 企业选择人才标准的必备条件。下面是由 Testinside 考题大师带来的 70-299 考试相关资料分享：70-299 考试概述：About this ExamThe Microsoft Certified Systems Administrator (MCSA) on Windows Server 2003 credential is intended for IT pro
3、fessionals who work in the typically complex computing environment of medium to large companies.Audience ProfileThe Microsoft Certified Systems Administrator (MCSA) on Windows Server 2003 credential is intended for IT professionals who work in the typically complex computing environment of medium to
4、 large companies. An MCSA candidate should have 6 to 12 months of experience administering client and network operating systems in environments that have the following characteristics:250 to 5,000 or more usersThree or more physical locationsThree or more domain controllersNetwork services and resou
5、rces such as messaging, database, file and print, proxy server, firewall, public key infrastructure (PKI), Internet, intranet, remote access, and client computer managementConnectivity requirements such as connecting branch offices and individual users in remote locations to the corporate network an
6、d connecting corporate networks to the InternetCredit Toward CertificationWhen you pass Exam 70-299: Implementing and Administering Security in a Microsoft Windows Server 2003 Network, you complete the requirements for the following certification(s):Microsoft Certified Professional (MCP)Exam 70-299:
7、 Implementing and Administering Security in a Microsoft Windows Server 2003 Network: counts as credit toward the following certification(s):Core credit toward Microsoft Certified Systems Administrator (MCSA): Security on Microsoft Windows Server 2003 certificationCore credit toward Microsoft Certifi
8、ed Systems Engineer (MCSE): Security on Microsoft Windows Server 2003 certificationElective credit toward Microsoft Certified Systems Engineer (MCSE) on Microsoft Windows Server 2003 certificationElective credit toward Microsoft Certified Systems Administrator (MCSA) on Microsoft Windows Server 2003
9、 certification70-299 考试知识点Skills Being MeasuredThis exam measures your ability to accomplish the technical tasks listed below.The percentages indicate the relative weight of each major topic area on the exam.Implementing, Managing, and Troubleshooting Security PoliciesPlan security templates based o
10、n computer role. Computer roles include SQL Server computer, Microsoft Exchange Server computer, domain controller, Internet Authentication Service (IAS) server, and Internet Information Services (IIS) server.Configure security templates.Configure registry and file system permissions.Configure accou
11、nt policies.Configure .pol files.Configure audit policies.Configure user rights assignment.Configure security options.Configure system services.Configure restricted groups.Configure event logs.Deploy security templates.Deploy security templates by using command-line tools and scripting.Plan the depl
12、oyment of security templates.Deploy security templates by using Active Directory-based Group Policy objects (GPOs).Troubleshoot security template problems.Troubleshoot security templates in a mixed operating system environment.Troubleshoot security policy inheritance.Troubleshoot removal of security
13、 template settings.Configure additional security based on computer roles. Server computer roles include SQL Server computer, Exchange Server computer, domain controller, Internet Authentication Service (IAS) server, and Internet Information Services (IIS) server. Client computer roles include deskto
14、p, portable, and kiosk.Plan and configure security settings.Plan network zones for computer roles.Plan and configure software restriction policies.Plan security for infrastructure services. Services include DHCP and DNS.Plan and configure auditing and logging for a computer role. Considerations incl
15、ude Windows Events, Internet Information Services (IIS), firewall log files, Netlog, and RAS log files.Analyze security configuration. Tools include Microsoft Baseline Security Analyzer (MBSA), the MBSA command-line tool, and Security Configuration and Analysis.Implementing, Managing, and Troublesho
16、oting Patch Management InfrastructurePlan the deployment of service packs and hotfixes.Evaluate the applicability of service packs and hotfixes.Test the compatibility of service packs and hotfixes for existing applications.Plan patch deployment environments for both the pilot and production phases.P
17、lan the batch deployment of multiple hotfixes.Plan rollback strategy.Assess the current status of service packs and hotfixes. Tools include MBSA and the MBSA command-line tool.Assess current patch levels by using the MBSA GUI tool.Assess current patch levels by using the MBSA command-line tool with
18、scripted solutions.Deploy service packs and hotfixes.Deploy service packs and hotfixes on new servers and client computers. Considerations include slipstreaming, custom scripts, and isolated installation or test networks.Deploy service packs and hotfixes on existing servers and client computers.Impl
19、ementing, Managing, and Troubleshooting Security for Network CommunicationsPlan IPSec deployment.Decide which IPSec mode to use.Plan authentication methods for IPSec.Test the functionality of existing applications and services.Configure IPSec policies to secure communication between networks and hos
20、ts. Hosts include domain controllers, Internet Web servers, databases, e-mail servers, and client computers.Configure IPSec authentication.Configure appropriate encryption levels. Considerations include the selection of perfect forward secrecy (PFS) and key lifetimes.Configure the appropriate IPSec
21、protocol. Protocols include Authentication Header (AH) and Encapsulating Security Payload (ESP).Configure IPSec inbound and outbound filters and filter actions.Deploy and manage IPSec policies.Deploy IPSec policies by using Local policy objects or Group Policy objects (GPOs).Deploy IPSec policies by
22、 using commands and scripts. Tools include IPSecPol and NetSh.Deploy IPSec certificates. Considerations include deployment of certificates and renewing certificates on managed and unmanaged client computers.Troubleshoot IPSec.Monitor IPSec policies by using IP Security Monitor.Configure IPSec loggin
23、g. Considerations include Oakley logs and IPSec driver logging.Troubleshoot IPSec across networks. Considerations include network address translation, port filters, protocol filters, firewalls, and routers.Troubleshoot IPSec certificates. Considerations include enterprise trust policies and certific
24、ate revocation list (CRL) checking.Plan and implement security for wireless networks.Plan the authentication methods for a wireless network.Plan the encryption methods for a wireless network.Plan wireless access policies.Configure wireless encryption.Install and configure wireless support for client
25、 computers.Deploy, manage, and configure SSL certificates, including uses for HTTPS, LDAPS, and wireless networks. Considerations include renewing certificates and obtaining self-issued certificates instead of publicly issued certificates.Obtain self-issued certificates and publicly issued certifica
26、tes.Install certificates for SSL.Renew certificates.Configure SSL to secure communication channels. Communication channels include client computer to Web server, Web server to SQL Server computer, client computer to Active Directory domain controller, and e-mail server to client computer.Configure s
27、ecurity for remote access users.Configure authentication for secure remote access. Authentication types include PAP, CHAP, MS-CHAP, MS-CHAP v2, EAP-MD5, EAP-TLS, and multifactor authentication that combines smart cards and EAP.Configure and troubleshoot virtual private network (VPN) protocols. Consi
28、derations include Internet service provider (ISP), client operating system, network address translation devices, Routing and Remote Access servers, and firewall servers.Manage client configuration for remote access security. Tools include remote access policy and the Connection Manager Administratio
29、n Kit.Planning, Configuring, and Troubleshooting Authentication, Authorization, and PKIPlan and configure authentication.Plan, configure, and troubleshoot trust relationships.Plan and configure authentication protocols.Plan and configure multifactor authentication.Plan and configure authentication f
30、or Web users.Plan and configure delegated authentication.Plan group structure.Decide which types of groups to use.Plan security group scope.Plan nested group structure.Plan and configure authorization.Configure access control lists (ACLs).Plan and troubleshoot the assignment of user rights.Plan requ
31、irements for digital signatures.Install, manage, and configure Certificate Services.Install and configure root, intermediate, and issuing certification authorities (CAs). Considerations include renewals and hierarchy.Configure certificate templates.Configure, manage, and troubleshoot the publication
32、 of certificate revocation lists (CRLs).Configure archival and recovery of keys.Deploy and revoke certificates to users, computers, and CAs.Backup and restore the CA.70-299 考试题库：最新活动：Testinside 考题大师权威Microsoft、Cisco、SUN、CIW、IBM、Nortel、HP、Oracle 等各大 IT 认证题库，最新考题售价仅 180 元起。（时间有限！）机会不容错过！需要的朋友一定要抓住这个机会
33、！下面开始我们的正文！70-299 考试资料Implementing Security in a MS Win Server2003 Network科目编号：70-299科目名称：Implementing Security in a MS Win Server2003 Network语言（s）： 英语，法语，德语，日语，西班牙语，中文（简体）观众（补）： IT 专业人士技术： 微软 Windows 服务器 2003类型： 监考考试相关分类： MCSE 2003 Security70-299 考试是 Microsoft 公司的 Implementing Security in a MS Win
34、Server2003 Network 认证考试官方代号，Implementing Security in a MS Win Server2003 Network 认证作为全球 IT 领域专家 Microsoft 热门认证之一，是许多大中 IT 企业选择人才标准的必备条件。下面是由 Testinside 考题大师带来的 70-299 考试相关资料分享：70-299 考试概述：About this ExamThe Microsoft Certified Systems Administrator (MCSA) on Windows Server 2003 credential is intende
35、d for IT professionals who work in the typically complex computing environment of medium to large companies.Audience ProfileThe Microsoft Certified Systems Administrator (MCSA) on Windows Server 2003 credential is intended for IT professionals who work in the typically complex computing environment
36、of medium to large companies. An MCSA candidate should have 6 to 12 months of experience administering client and network operating systems in environments that have the following characteristics:250 to 5,000 or more usersThree or more physical locationsThree or more domain controllersNetwork servic
37、es and resources such as messaging, database, file and print, proxy server, firewall, public key infrastructure (PKI), Internet, intranet, remote access, and client computer managementConnectivity requirements such as connecting branch offices and individual users in remote locations to the corporat
38、e network and connecting corporate networks to the InternetCredit Toward CertificationWhen you pass Exam 70-299: Implementing and Administering Security in a Microsoft Windows Server 2003 Network, you complete the requirements for the following certification(s):Microsoft Certified Professional (MCP)
39、Exam 70-299: Implementing and Administering Security in a Microsoft Windows Server 2003 Network: counts as credit toward the following certification(s):Core credit toward Microsoft Certified Systems Administrator (MCSA): Security on Microsoft Windows Server 2003 certificationCore credit toward Micro
40、soft Certified Systems Engineer (MCSE): Security on Microsoft Windows Server 2003 certificationElective credit toward Microsoft Certified Systems Engineer (MCSE) on Microsoft Windows Server 2003 certificationElective credit toward Microsoft Certified Systems Administrator (MCSA) on Microsoft Windows
41、 Server 2003 certification70-299 考试知识点Skills Being MeasuredThis exam measures your ability to accomplish the technical tasks listed below.The percentages indicate the relative weight of each major topic area on the exam.Implementing, Managing, and Troubleshooting Security PoliciesPlan security templ
42、ates based on computer role. Computer roles include SQL Server computer, Microsoft Exchange Server computer, domain controller, Internet Authentication Service (IAS) server, and Internet Information Services (IIS) server.Configure security templates.Configure registry and file system permissions.Con
43、figure account policies.Configure .pol files.Configure audit policies.Configure user rights assignment.Configure security options.Configure system services.Configure restricted groups.Configure event logs.Deploy security templates.Deploy security templates by using command-line tools and scripting.P
44、lan the deployment of security templates.Deploy security templates by using Active Directory-based Group Policy objects (GPOs).Troubleshoot security template problems.Troubleshoot security templates in a mixed operating system environment.Troubleshoot security policy inheritance.Troubleshoot removal
45、 of security template settings.Configure additional security based on computer roles. Server computer roles include SQL Server computer, Exchange Server computer, domain controller, Internet Authentication Service (IAS) server, and Internet Information Services (IIS) server. Client computer roles in
46、clude desktop, portable, and kiosk.Plan and configure security settings.Plan network zones for computer roles.Plan and configure software restriction policies.Plan security for infrastructure services. Services include DHCP and DNS.Plan and configure auditing and logging for a computer role. Conside
47、rations include Windows Events, Internet Information Services (IIS), firewall log files, Netlog, and RAS log files.Analyze security configuration. Tools include Microsoft Baseline Security Analyzer (MBSA), the MBSA command-line tool, and Security Configuration and Analysis.Implementing, Managing, an
48、d Troubleshooting Patch Management InfrastructurePlan the deployment of service packs and hotfixes.Evaluate the applicability of service packs and hotfixes.Test the compatibility of service packs and hotfixes for existing applications.Plan patch deployment environments for both the pilot and product
49、ion phases.Plan the batch deployment of multiple hotfixes.Plan rollback strategy.Assess the current status of service packs and hotfixes. Tools include MBSA and the MBSA command-line tool.Assess current patch levels by using the MBSA GUI tool.Assess current patch levels by using the MBSA command-line tool with scripted solutions.Deploy service packs and hotfixes.Deploy service packs and hotfixes on new servers and client computers. Considerations include slipstreaming, custom scripts, and isolated installation or test networks.Deploy service packs and hotfixes on existing servers and client
