70-298

Preparation Guide for Exam 70-298
Designing Security for a Windows Server 2003 Network
Updated: July 5, 2007

Exam news
Exam 70-298 became available on December 9, 2003.

Audience profile
The Microsoft Certified Systems Engineer (MCSE) on Windows Server 2003 credential is intended for IT professionals who work in the typically complex computing environment of medium to large companies. An MCSE candidate should have at least one year of experience implementing and administering a network operating system in environments that have the following characteristics:

• 250 to 5,000 or more users

• Three or more physical locations

• Three or more domain controllers

• Network services and resources such as messaging, database, file and print, proxy server, firewall, Internet, intranet, remote access, and client computer management

• Connectivity requirements such as connecting branch offices and individual users in remote locations to the corporate network and connecting corporate networks to the Internet

In addition, an MCSE candidate should have at least one year of experience in the following areas:

• Designing a network infrastructure

• Implementing and administering a desktop operating system

Credit toward certification
When you pass the Designing Security for a Windows Server 2003 Network exam, you achieve Microsoft Certified Professional (MCP) status. You also earn credit toward the following certifications:

• Core credit toward Microsoft Certified Systems Engineer (MCSE) on Windows Server 2003 certification

• Core credit toward Microsoft Certified Systems Engineer (MCSE): Security on Windows Server 2003 certification

Preparation tools and resources
In addition to your hands-on experience working with the product, we recommend that you use the following tools and training to help you prepare for this exam.

Classroom training for this exam
• Course 2830: Designing Security for Microsoft Networks

Microsoft Press self-paced training products
• MCSE Self-Paced Training Kit (Exam 70-298): Designing Security for a Microsoft Windows Server 2003 Network

Microsoft certified practice tests
• MeasureUp: Visit the MeasureUp Web site to take a practice test.

• Self Test Software: Visit the Self Test Software Web site to take a practice test.

Microsoft online resources
• TechNet: Designed for IT professionals, this site includes how-to instructions, best practices, downloads, technical chats, and much more.

• MSDN: The Microsoft Developer Network (MSDN) is a reference for developers that features code samples, technical articles, newsgroups, chats, and more.

• Training and certification newsgroups: A newsgroup exists for every Microsoft certification. By participating in the ongoing dialogue, you take advantage of a unique opportunity to exchange ideas with and ask questions of others, including more than 750 Microsoft Most Valuable Professionals (MVPs) worldwide.

Skills being measured by Exam 70-298
This certification exam measures your ability to gather and analyze business requirements for a secure network infrastructure and design a security solution that meets those requirements. Before taking the exam, you should be proficient in the job skills listed in the following matrix. The matrix shows which Official Microsoft Learning Products may help you reach competency in the skills being tested in the exam.

KEY: = The course provides a general introductory overview of this task. You will need to supplement the course with additional work. = The course includes some material to prepare you for this task. You will need to supplement the course with additional work. = The course includes material to prepare you for this task.
Skills measured by exam 70-298 Course 2830
Creating the Conceptual Design for Network Infrastructure Security by Gathering and Analyzing Business and Technical Requirements
Analyze business requirements for designing security. Considerations include existing policies and procedures, sensitivity of data, cost, legal requirements, end-user impact, interoperability, maintainability, scalability, and risk.

• Analyze existing security policies and procedures.

• Analyze the organizational requirements for securing data.

• Analyze the security requirements of different types of data.

• Analyze risks to security within the current IT administration structure and security practices.

Design a framework for designing and implementing security. The framework should include prevention, detection, isolation, and recovery.

• Predict threats to your network from internal and external sources.

• Design a process for responding to incidents.

• Design segmented networks.

• Design a process for recovering services.

Analyze technical constraints when designing security.

• Identify capabilities of the existing infrastructure.

• Identify technology limitations.

• Analyze interoperability constraints.

Creating the Logical Design for Network Infrastructure Security
Design a public key infrastructure (PKI) that uses Certificate Services.

• Design a certification authority (CA) hierarchy implementation. Types include geographical, organizational, and trusted.

• Design enrollment and distribution processes.

• Establish renewal, revocation and auditing processes.

• Design security for CA servers.

Design a logical authentication strategy.

• Design certificate distribution.

• Design forest and domain trust models.

• Design security that meets interoperability requirements.

• Establish account and password requirements for security.

Design security for network management.

• Manage the risk of managing networks.

Donwload Free PassGuide Braindumps-The Most Realistic Practice Questions and Answers,Help You Pass any Exams

• Design the administration of servers by using common administration tools. Tools include Microsoft Management Console (MMC), Terminal Server, Remote Desktop for Administration, Remote Assistance, and Telnet.

• Design security for Emergency Management Services.

Design a security update infrastructure.

• Design a Software Update Services (SUS) infrastructure.

• Design Group Policy to deploy software updates.

• Design a strategy for identifying computers that are not at the current patch level.

Creating the Physical Design for Network Infrastructure Security
Design network infrastructure security.

• Specify the required protocols for a firewall configuration.

• Design IP filtering.

• Design an IPSec policy.

• Secure a DNS implementation.

• Design security for data transmission.

Design security for wireless networks.

• Design public and private wireless LANs.

• Design 802.1x authentication for wireless networks.

Design user authentication for Internet Information Services (IIS).

• Design user authentication for a Web site by using certificates.

• Design user authentication for a Web site by using IIS authentication.

• Design user authentication for a Web site by using RADIUS for IIS authentication.

Design security for Internet Information Services (IIS).

• Design security for Web sites that have different technical requirements by enabling only the minimum required services.

• Design a monitoring strategy for IIS.

• Design an IIS baseline that is based on business requirements.

• Design a content management strategy for updating an IIS server.

Design security for communication between networks.

• Select protocols for VPN access.

• Design VPN connectivity.

• Design demand-dial routing between internal networks.

Design security for communication with external organizations.

• Design an extranet infrastructure.

• Design a strategy for cross-certification of Certificate Services.

Design security for servers that have specific roles. Roles include domain controller, network infrastructure server, file server, IIS server, terminal server, and POP3 mail server.

• Define a baseline security template for all systems.

• Create a plan to modify baseline security templates according to role.

Designing an Access Control Strategy for Data
Design an access control strategy for directory services.

• Create a delegation strategy.

• Analyze auditing requirements.

• Design the appropriate group strategy for accessing resources.

• Design a permission structure for directory service objects.

Design an access control strategy for files and folders.

• Design a strategy for the encryption and decryption of files and folders.

• Design a permission structure for files and folders.

• Design security for a backup and recovery strategy.

• Analyze auditing requirements.

Design an access control strategy for the registry.

• Design a permission structure for registry objects.

• Analyze auditing requirements.

Creating the Physical Design for Client Infrastructure Security
Design a client authentication strategy.

• Analyze authentication requirements.

• Establish account and password security requirements.

Design a security strategy for client remote access.

• Design remote access policies.

• Design access to internal resources.

• Design an authentication provider and accounting strategy for remote network access by using Internet Authentication Service (IAS).

Design a strategy for securing client computers. Considerations include desktop and portable computers.

• Design a strategy for hardening client operating systems.

• Design a strategy for restricting user access to operating system features.

The microsoft 70-298 certificates give you possibility to work in any country of the world because they are acknowledged in all countries equally. This microsoft 70-298 torrent certificate helps
not only to improve your knowledge and skills, but it also helps your career, gives a possibility for qualified usage of microsoft 70-298 exam products under different conditions. The
majority of companies in the sphere of information technologies require the presence of microsoft 70-298 exams for the work in the company, and that makes obtaining this microsoft 70-298
certificate necessary. Many IT specialists were not able to obtain the real microsoft 70-298 certificate from the first attempt, which was the result of poor preparation for the
examination, using preparatory microsoft 70-298 study guide of poor quality.

The PassGuide leader among the providers of microsoft 70-298 preparatory materials is products such as microsoft 70-298 vce pdf Braindumps, microsoft 70-298 Tutorial, microsoft 70-298 Exam Questions with Answers, microsoft 70-298
Trainings, microsoft 70-298 Test Online Simulations Course and free PDF. It obtained its leadership and trust of the users from the very beginning of its work on the microsoft 70-298 training
materials market. All the microsoft 70-298 value pack aids have been created by people who are personally familiar with actualtests microsoft 70-298 Preparation Labs and who know all the
difficulties and popular mistakes made by those who take a microsoft 70-298 . The entire material is logically composed in such a way that everything becomes easy to understand for
anyone. full download Many microsoft 70-298 guides include audio and video material. It is really easy to acquire microsoft 70-298 exams because of great variety of methods of payment.

pass4sure testking microsoft 70-298 transcender PassGuide Testinside rapidshare 4shared links

High quality IT Certification Training Exam Questions, Study Guides and Practice Tests are in Downloadable PassGuide Testing Engine,Successful for IT Certification or Full Refund for you.Contact Us:Sales@PassGuide.com

Type	Exam Bible	New Questions & Answers	Latest Updated	Download link
PDF	All Certbible 's Exam Dumps	597	1 days ago	Available

PassGuide Training Materials & Practice Tests

• passguide microsoft
• PassGuide microsoft 70-662 pdf
• Windows 7 Exams in Development
• 70-685
• mb7-849
• Microsoft Certified Professional Developer (MCPD)
• actualtests microsoft mb3-003
• actualtests microsoft 74-133
• actualtests microsoft mb3-209
• actualtests-microsoft-70-621