Posey The Real MCTS/MCITP Exam 70-649 Prep Kit

Independent and Complete Self-Paced Solutions
1. Auflage 2011
ISBN: 978-0-08-087791-4
Verlag: Elsevier Science & Techn.
Format: PDF
Kopierschutz: 1 - PDF Watermark

E-Book, Englisch, 800 Seiten, Web PDF

This exam is designed to validate Windows Server 2003 Microsoft Certified Systems Administrators (MCSEs) AD, Network Infrastructure, and Application Platform Technical Specialists skills. The object of this exam is to validate only the skills that are are different from the existing MCSE skills. This exam will fulfill the Windows Server 2008 Technology Specialist requirements of Exams 70-640, 70-642, and 70-643.

The Microsoft Certified Technology Specialist (MCTS) on Windows Server 2008 credential is intended for information technology (IT) professionals who work in the complex computing environment of medium to large companies. The MCTS candidate should have at least one year of experience implementing and administering a network operating system in an environment that has the following characteristics: 250 to 5,000 or more users, three or more physical locations, and three or more domain controllers.

MCTS candidates will manage network services and resources such as messaging, a database, file and print, a proxy server, a firewall, the Internet, an intranet, remote access, and client computer management.

In addition MCTS candidates must understant connectivity requirements such as connecting branch offices and individual users in remote locations to the corporate network and connecting corporate networks to the Internet.

* THE independent source of exam day tips, techniques, and warnings not available from Microsoft
* Comprehensive study guide guarantees 100% coverage of all Microsoft's exam objectives
* Interactive FastTrack e-learning modules help simplify difficult exam topics
* Two full-function ExamDay practice exams guarantee double coverage of all exam objectives
* Free download of audio FastTracks for use with iPods or other MP3 players
* 1000 page DRILL DOWN reference for comprehensive topic review

Autoren/Hrsg.

Posey, Brien

Inhaltsverzeichnis

1;Front Cover;1
2;The Real MCTS/MCITP Exam 70-649 Upgrading Your MCSE on Windows Server 2003 to Windows Server 2008 Prep Kit;4
3;Copyright Page;5
4;Technical Editor;6
5;Contributing Authors;7
6;Contents;14
7;Foreword;30
8;Chapter 1: Deploying Servers;40
8.1;Introduction ;41
8.2;Installing Windows Server 2008;41
8.2.1;Changes in Functionality from Windows Server 2003 with SP1 to Windows Server 2008;42
8.2.2;Installing Windows Server 2008 Enterprise Edition ;47
8.2.3;What Is New in the AD DS Installation?;60
8.2.4;Installing from Media;76
8.2.5;Installing Server Core;77
8.3;The Windows Deployment Service;80
8.3.1;What Is WDS? ;81
8.3.2;Configuring WDS;82
8.3.3;Capturing WDS Images;90
8.3.4;Deploying WDS Images;91
8.4;Configuring Storage;93
8.4.1;RAID Types;94
8.4.2;Network Attached Storage;95
8.4.3;Storage Area Networks;96
8.4.4;Fibre Channel;98
8.4.5;iSCSI;99
8.4.5.1;iSCSI Initiators and Targets;99
8.4.6;Mount Points;101
8.5;Configuring High Availability;104
8.5.1;Failover Clusters;104
8.5.1.1;Installing and Validating a Failover Cluster;105
8.5.1.2;Managing the Failover Cluster;107
8.5.2;Network Load Balancing;108
8.6;Configuring Windows Activation;112
8.6.1;Using Multiple Activation Keys;113
8.6.2;Using Key Management Service Keys;113
8.6.3;License States;114
8.6.4;Reporting;115
8.6.5;Installing a KMS;115
8.6.6;Creating a DNS SRV Record;117
8.6.7;Enabling Clients to Use KMS;118
8.6.7.1;Activating the System;119
8.7;Summary of Exam Objectives;120
8.8;Exam Objectives Fast Track;121
8.8.1;Installing Windows Server 2008;121
8.8.2;The Windows Deployment Service;121
8.8.3;Configuring Storage;121
8.8.4;Configuring High Availability;122
8.8.5;Configuring Windows Activation;122
8.9;Exam Objectives Frequently Asked Questions;123
8.10;Self Test;126
8.11;Self Test Quick Answer Key;130
9;Chapter 2: Configuring Server Roles in Windows 2008;132
9.1;Introduction;133
9.2;New Roles in 2008;133
9.2.1;Using Server Manager to Implement Roles;134
9.2.2;Using Server Core and Active Directory;140
9.2.2.1;What Is Server Core?;141
9.3;Read-Only Domain Controllers (RODCs);146
9.3.1;Introduction to RODC;146
9.3.1.1;Its Purpose in Life;146
9.3.1.2;Its Features;147
9.3.2;Configuring RODC;147
9.3.3;Removing an RODC;152
9.4;Active Directory Lightweight Directory Service (LDS);153
9.4.1;When to Use AD LDS;153
9.4.2;Changes from Active Directory Application Mode (ADAM);154
9.4.3;Configuring AD LDS;154
9.4.3.1;Working with AD LDS;157
9.5;Active Directory Rights Management Service (RMS) ;159
9.5.1;What's New in RMS ;159
9.5.2;RMS vs. DRMS in Vista ;160
9.5.3;Configuring RMS ;161
9.6;Active Directory Federation Services (ADFS);168
9.6.1;What Is Federation?;168
9.6.1.1;Why and When to Use Federation;169
9.6.2;Configuring ADFS;170
9.7;Summary of Exam Objectives;183
9.8;Exam Objectives Fast Track;183
9.8.1;New Roles in 2008;183
9.8.2;Read-Only Domain Controllers;183
9.8.3;Active Directory Lightweight Directory Service;184
9.8.4;Active Directory Rights Management Services;184
9.8.5;Active Directory Federation Services;184
9.9;Exam Objectives Frequently Asked Questions;185
9.10;Self Test;187
9.11;Self Test Quick Answer Key;190
10;Chapter 3: Configuring Certificate Services and PKI;192
10.1;Introduction;193
10.2;What Is PKI?;194
10.2.1;The Function of the PKI;196
10.2.2;Components of PKI;197
10.2.3;How PKI Works;199
10.2.3.1;PKCS Standards;201
10.2.4;How Certificates Work;207
10.2.5;Public Key Functionality;210
10.2.5.1;Digital Signatures;211
10.2.5.2;Authentication;212
10.2.5.3;Secret Key Agreement via Public Key;213
10.2.5.4;Bulk Data Encryption without Prior Shared Secrets;213
10.2.5.5;User Certificates;226
10.2.5.6;Machine Certificates;227
10.2.5.7;Application Certificates;227
10.3;Analyzing Certificate Needs within the Organization;227
10.4;Working with Certificate Services;228
10.4.1;Configuring a Certificate Authority;228
10.4.1.1;Certificate Authorities;229
10.4.1.1.1;Standard vs. Enterprise;229
10.4.1.1.2;Root vs. Subordinate Certificate Authorities;230
10.4.1.1.3;Certificate Requests;231
10.4.1.1.4;Certificate Practice Statement;236
10.4.2;Key Recovery;236
10.4.2.1;Backup and Restore;236
10.4.2.2;Assigning Roles;243
10.4.2.3;Enrollments;243
10.4.2.4;Revocation;244
10.5;Working with Templates;248
10.5.1;General Properties;250
10.5.2;Request Handling;252
10.5.3;Cryptography;253
10.5.4;Subject Name;255
10.5.5;Issuance Requirements;256
10.5.6;Security;259
10.5.7;Types of Templates;260
10.5.7.1;User Certificate Types;260
10.5.7.2;Computer Certificate Types;261
10.5.7.3;Other Certificate Types;263
10.5.7.4;Custom Certificate Templates;263
10.5.8;Securing Permissions;266
10.5.9;Versioning;267
10.5.10;Key Recovery Agent;268
10.6;Summary of Exam Objectives;270
10.7;Exam Objectives Fast Track;271
10.7.1;Planning a Windows Server 2008 Certificate-Based PKI;271
10.7.2;Implementing Certification authorities;272
10.7.3;Planning Enrollment and Distribution of Certificates;272
10.8;Exam Objectives Frequently Asked Questions;273
10.9;Self Test;276
10.10;Self Test Quick Answer Key;279
11;Chapter 4: Maintaining an Active Directory Environment;280
11.1;Introduction;281
11.2;Backup and Recovery;281
11.2.1;Using Windows Server Backup;282
11.2.1.1;Scheduling a Backup;287
11.2.1.2;Backing Up to Removable Media;295
11.2.1.3;Backing Up System State Data;298
11.2.1.4;Backing Up Key Files;302
11.2.1.5;Backing Up Critical Volumes;303
11.2.1.6;Recovering System State Data;304
11.2.1.7;Recovering Key Files;306
11.2.2;Directory Services Restore Mode;312
11.2.3;Performing Authoritative and Nonauthoritative Restores;315
11.2.3.1;Authoritative Restore;315
11.2.3.2;Nonauthoritative Restore;322
11.2.4;Linked Value Replication;322
11.2.5;Backing Up and Restoring GPOs;322
11.3;Offline Maintenance;331
11.3.1;Restartable Active Directory;331
11.3.2;Offline Defrag and Compaction;334
11.3.3;Active Directory Storage Allocation;337
11.4;Monitoring Active Directory;338
11.4.1;The Network Monitor;338
11.4.2;The Task Manager;341
11.4.2.1;The Applications Tab;343
11.4.2.2;The Processes Tab;344
11.4.2.3;The Services Tab;345
11.4.2.4;The Performance Tab;345
11.4.2.5;The Networking Tab;346
11.4.2.6;The Users Tab;348
11.4.3;The Event Viewer;349
11.4.3.1;Custom Views;349
11.4.3.2;Windows Logs;352
11.4.3.3;Subscriptions;354
11.4.4;Replmon;358
11.4.4.1;Using Replmon;358
11.4.5;RepAdmin;365
11.4.6;Windows System Resource Manager;368
11.4.7;The Windows Reliability and Performance Monitor;370
11.4.7.1;Resource Overview;371
11.4.7.2;The Performance Monitor;372
11.4.7.3;The Reliability Monitor ;374
11.4.7.4;Data Collector Sets ;376
11.4.7.5;Reports ;378
11.5;Summary of Exam Objectives;380
11.6;Exam Objectives Fast Track;382
11.6.1;Backup and Recovery;382
11.6.2;Offline Maintenance;382
11.6.3;Monitoring Active Directory;383
11.7;Exam Objectives Frequently Asked Questions;384
11.8;Self Test;386
11.9;Self Test Quick Answer Key;391
12;Chapter 5: Configuring the Active Directory Infrastructure;392
12.1;Introduction;393
12.2;Working with Forests and Domains;394
12.2.1;Understanding Forests;395
12.2.2;Understanding Domains;395
12.2.3;Forest and Domain Functional Levels;397
12.2.3.1;Using Domain Functional Levels;398
12.2.3.1.1;Using the Windows 2000 Domain Functional Level;399
12.2.3.1.2;Windows Server 2003 Domain Functional Level;399
12.2.3.1.3;Windows Server 2008 Domain Functional Level;400
12.2.3.2;Configuring Forest Functional Levels;401
12.2.3.2.1;Windows 2000 Forest Functional Level (default);401
12.2.3.2.2;Windows Server 2003 Forest Functional Level;402
12.2.3.2.3;Windows Server 2008 Forest Functional Level;403
12.2.3.3;Raising Forest and Domain Functional Levels;403
12.2.3.3.1;Raising the Domain Functional Level;404
12.2.4;Understanding the Global Catalog;405
12.2.4.1;UPN Authentication;407
12.2.4.2;Directory Information Search;407
12.2.4.3;Universal Group Membership Information;409
12.2.5;Understanding GC Replication;409
12.2.5.1;Universal Group Membership;410
12.2.5.2;Attributes in the Global Catalog;410
12.2.6;Placing GC Servers within Sites;411
12.2.6.1;Bandwidth and Network Traffic Considerations;412
12.2.6.2;Universal Group Membership Caching;413
12.2.7;Working with Flexible Single Master Operation (FSMO) Roles;415
12.2.7.1;Placing, Transferring, and Seizing FSMO Role Holders;418
12.2.7.1.1;Locating and Transferring the Schema Master Role;419
12.2.7.1.2;Locating and Transferring the Domain Naming Master Role;422
12.2.7.1.3;Locating and Transferring the Infrastructure, RID, and PDC Operations Master Roles;423
12.2.7.1.4;Placing the FSMO Roles within an Active Directory Environment;427
12.3;Working with Sites;428
12.3.1;Understanding Sites;428
12.3.1.1;Subnets;431
12.3.2;Site Planning;432
12.3.2.1;Criteria for Establishing Separate Sites;432
12.3.2.2;Creating a Site;433
12.3.2.3;Renaming a Site;438
12.3.3;Creating Subnets;439
12.3.3.1;Associating Subnets with Sites;442
12.3.4;Creating Site Links;444
12.3.4.1;Configuring Site Link Cost;447
12.3.5;Understanding Replication;450
12.3.5.1;Intrasite Replication;451
12.3.5.2;Intersite Replication;453
12.3.5.3;Bridgehead Servers;454
12.3.5.4;Site Link Bridges;454
12.3.5.5;Scheduling;455
12.3.5.6;Forcing Replication;456
12.3.5.7;Replication Protocols;456
12.3.6;Planning, Creating, and Managing the Replication Topology;457
12.3.6.1;Planning Replication Topology;457
12.3.6.2;Creating Replication Topology;457
12.3.7;Configuring Replication between Sites;458
12.3.8;Troubleshooting Replication Failure;459
12.3.8.1;Troubleshooting Replication;459
12.3.8.2;Using Event Viewer;460
12.4;Working with Trusts;461
12.4.1;Default Trusts;467
12.4.2;Forest Trusts;467
12.4.3;External Trusts;468
12.4.4;Shortcut Trusts;469
12.4.5;SID Filtering;470
12.5;Summary of Exam Objectives;472
12.6;Exam Objectives Fast Track;474
12.6.1;Working with Forests and Domains;474
12.6.2;Working with Sites;474
12.6.3;Working with Trusts;475
12.7;Exam Objectives Frequently Asked Questions;476
12.8;Self Test;480
12.9;Self Test Quick Answer Key;485
13;Chapter 6: Configuring Web Application Services;486
13.1;Introduction;487
13.2;Installing and Configuring Internet Information Services;487
13.2.1;Differences in Windows Editions;492
13.2.2;Typical Deployment Scenarios;493
13.2.2.1;Simple Web Server;493
13.2.2.2;Small Web Farms;493
13.2.2.3;Large Web Farms;494
13.3;Installing Internet Information Services;495
13.4;Provisioning Web Sites;503
13.4.1;Adding a Virtual Directory;508
13.4.2;Configuring the Default Document;508
13.4.3;Enabling Directory Browsing;509
13.4.4;Customizing Error Pages;511
13.4.5;Redirecting Requests;514
13.4.6;Adding Custom Response Headers;515
13.4.7;Adding MIME Types;516
13.5;Configuring Web Applications;517
13.5.1;Application Pool Settings;524
13.5.2;Application Development Settings;525
13.5.2.1;Enabling Third-Party Runtime Environments;526
13.6;Migrating from Previous Releases;528
13.7;Securing Your Web Sites and Applications;528
13.7.1;Transport Security;529
13.7.2;Authentication;538
13.7.2.1;Considerations When Using Client Certificates;541
13.7.3;Authorization;544
13.7.3.1;URL Authorization;544
13.7.3.2;IP Authorization;548
13.7.3.3;Request Filtering;549
13.7.4;.NET Trust Levels;552
13.8;Managing Internet Information Services;553
13.8.1;Configuration and Delegation;553
13.8.1.1;Remote Administration;558
13.8.2;Health and Diagnostics;559
13.8.2.1;Failed Request Tracing;560
13.8.2.2;Logging;563
13.8.3;Scaling Your Web Farm;564
13.8.3.1;Output Caching;565
13.8.3.2;Compression;567
13.8.3.3;Network Load Balancing;570
13.8.3.3.1;Shared Configuration;570
13.8.3.3.2;TCP and HTTP Service Unavailable Responses;571
13.8.4;Backing Up and Restoring Server Configuration;572
13.9;Summary of Exam Objectives;574
13.10;Exam Objectives Fast Track;576
13.10.1;Installing and Confirming Internet Information Services;576
13.10.2;Securing Your Web Sites and Applications;576
13.10.3;Managing Internet Information Services;577
13.11;Exam Objectives Frequently Asked Questions;579
13.12;Self Test;581
13.13;Self Test Quick Answer Key;584
14;Chapter 7: Configuring Web Infrastructure Services;586
14.1;Introduction;587
14.2;Installing and Configuring FTP Publishing Services;587
14.2.1;Installing the FTP Publishing Service;589
14.2.2;Provisioning FTP Sites;595
14.2.2.1;Directory Browsing;599
14.2.2.2;Firewall Support;600
14.2.2.3;Messages;601
14.2.2.4;Virtual Directories;603
14.2.2.5;Application Pools;604
14.2.3;Securing Your FTP Site;605
14.2.3.1;Transport Security;605
14.2.3.2;Authentication;611
14.2.3.3;Authorization;612
14.2.3.3.1;URL Authorization;613
14.2.3.3.2;IP Authorization;614
14.2.3.4;User Isolation;616
14.3;Installing and Configuring SMTP Services;617
14.3.1;Installing SMTP Services;619
14.3.2;Provisioning Virtual Servers;622
14.3.2.1;Configuring a Virtual Server;625
14.3.2.1.1;Server Bindings;626
14.3.2.1.2;Logging;627
14.3.2.1.3;Message Limits;628
14.3.2.1.4;Delivery Options;630
14.3.2.1.5;LDAP Routing;633
14.4;Securing Your SMTP Virtual Server;634
14.4.1;Transport Security;634
14.4.2;Authentication;636
14.4.3;Connection Control;637
14.4.4;Relay Restrictions;637
14.5;Summary of Exam Objectives;639
14.6;Exam Objectives Fast Track;640
14.6.1;Installiing and Configuring FTP Publishing Service;640
14.6.2;Installing and Configuring SMTP Services;641
14.7;Exam Objectives Frequently Asked Questions;642
14.8;Self Test;644
14.9;Self Test Quick Answer Key;647
15;Chapter 8: Deploying the Terminal Services;649
15.1;Introduction;650
15.2;Deploying the Terminal Server Role Service;651
15.2.1;Specifying the License Mode after Installation;658
15.3;Terminal Services Licensing;661
15.3.1;Installing a Terminal Service Licensing Server;661
15.3.1.1;Installing the TS Licensing Role Service on an Existing Terminal Server;662
15.3.1.2;Installing the TS Licensing Role Service on a Separate Server;665
15.3.2;Activating a Terminal Service Licensing Server;666
15.3.2.1;Activating a Terminal Service Licensing Server Using the Automatic Connection Method;667
15.3.2.2;Activating a Terminal Service Licensing Server Using the Web Browser Method;673
15.3.2.3;Activating a Terminal Service Licensing Server Using the Telephone Method;675
15.3.2.4;Establishing Connectivity between Terminal Server and Terminal Services Licensing Server;678
15.3.2.4.1;Using the Terminal Services Configuration Tool to Specify a TS Licensing Server;679
15.3.2.4.2;Publishing a Terminal Services Licensing Server Using TS Licensing Manager;682
15.3.2.4.3;Publishing a Terminal Server Licensing Server Using ADSI Edit and Active Directory Sites and Services;682
15.3.3;Installing and Managing Terminal Services Client Access Licenses (TS CALs);687
15.3.3.1;Installing and Activating Terminal Services Client Access Licenses Using the Automatic Connection Method;688
15.3.3.2;Installing and Activating Terminal Services Client Access Licenses Using the Web Browser Method;693
15.3.3.3;Installing and Activating Terminal Services Client Access Licenses Using the Telephone Method;695
15.3.4;Recovering a Terminal Service Licensing Server;697
15.4;Establishing Client Connections to a Terminal Server;698
15.4.1;Using the Remote Desktop Connection Utility;698
15.4.1.1;Launching and Using the Remote Desktop Connection Utility;698
15.4.1.2;Configuring the Remote Desktop Connection Utility;700
15.4.1.2.1;The General tab;700
15.4.1.2.2;The Display Tab;701
15.4.1.2.3;The Local Resources Tab;701
15.4.1.2.4;The Programs Tab;703
15.4.1.2.5;The Experience tab;704
15.4.1.2.6;The Advanced Tab;705
15.5;Installing and Using the Remote Desktops Snap-in;706
15.5.1;Adding a New Connection;707
15.5.2;Configuring a Connection's Properties;709
15.5.3;Connecting and Disconnecting;711
15.6;Summary of Exam Objectives;712
15.7;Exam Objectives Fast Track;713
15.7.1;Deploying the Terminal Server Role Service;713
15.7.2;Terminal Services Licensing;713
15.7.3;Establishing Client Connections to a Terminal Server;714
15.8;Exam Objectives Frequently Asked Questions;715
15.9;Self Test;718
15.10;Self Test Quick Answer Key;722
16;Chapter 9: Configuring and Managing the Terminal Services;723
16.1;Introduction;724
16.2;Configuring and Monitoring Terminal Service Resources;724
16.2.1;Allocating Resources by Using Windows System Resource Manager;727
16.2.1.1;Installing WSRM;728
16.2.2;Configuring Application Logging;732
16.3;Load Balancing;733
16.3.1;Terminal Service Load-Balancing Techniques;734
16.3.2;Configuring Load Balancing;734
16.3.2.1;Adding Local Group On The TS Session Broker;737
16.3.2.2;Installing NLB;737
16.3.3;Terminal Service Session Broker Redirection Modes;743
16.3.4;DNS Registration;744
16.3.5;Configuring Load Balancing Through Group Policy;746
16.4;The Terminal Services Gateway;749
16.4.1;Certificate Configuration;752
16.4.2;Terminal Service (TS) Gateway Manager;754
16.4.3;Accessing Resources through the TS Gateway Using TS CAP;755
16.4.4;Accessing Resources through the TS Gateway Using TS RAP;759
16.4.5;Terminal Service Group Policy Settings;761
16.5;Terminal Service RemoteApp;764
16.5.1;Configuring TS RemoteApp;765
16.5.2;Configuring TS Web Access;775
16.5.3;Configuring TS Remote Desktop Web Connection;778
16.6;Managing the Terminal Services;780
16.6.1;RDP Permissions;780
16.6.2;Connection Limits;784
16.6.3;Session Time Limits;785
16.6.4;Session Permissions;786
16.6.5;Viewing Processes;788
16.6.6;Monitoring Sessions;789
16.6.7;Displaying Data Prioritization;791
16.6.8;Logging Users Off ;792
16.6.9;Disconnecting Sessions;793
16.6.10;Resetting the Terminal Services;793
16.7;Summary of Exam Objectives;794
16.8;Exam Objectives Fast Track;795
16.8.1;Configuring and Monitoring Terminal Service Resources;795
16.8.2;Load Balancing;795
16.8.3;The Terminal Services Gateway;795
16.9;Exam Objectives Frequently Asked Questions;798
16.10;Self Test;800
16.11;Self Test Quick Answer Key;806
17;Chapter 10: IP Addressing and Services;807
17.1;Introduction;808
17.2;Configuring IPv4 and IPv6 Addressing;808
17.2.1;IPv4 Quick Review;810
17.2.2;Configuring Local IPv4 Settings;812
17.3;Configuring IPv4 Options;814
17.4;Subnetting;814
17.5;Supernetting;818
17.6;Alternative Configuration;819
17.7;Internet Protocol Version 6 (IPv6);819
17.7.1;IPv6 Address Format;819
17.7.2;IPv6 Address Types;820
17.7.3;IPv6 Autoconfiguration Options;821
17.7.4;IPv6 Transition Technologies;821
17.8;Configuring IPv6 Settings;822
17.9;Configuring Dynamic Host Configuration Protocol (DHCP);824
17.9.1;Adding the DHCP Server Role;825
17.9.2;Configuring DHCP Scopes;827
17.9.2.1;Configuring IPv4 Scopes and Options;827
17.9.2.2;DHCP IPv4 Reservations;830
17.10;Configuring DHCP Scope Options;830
17.10.1;Server Options;830
17.10.2;Scope Options;831
17.10.3;Reservation Options;831
17.10.4;Setting Scope Options;832
17.10.5;Configuring IPv6 Scopes;833
17.10.6;Configuring IPv6 Scope Options;836
17.10.7;DHCP IPv6 Client Reservation Configuration;836
17.11;Creating New Options;837
17.11.1;New Options Using the Windows Interface;838
17.11.2;New Options Using the Command Line;838
17.12;Exclusions;838
17.13;DHCP Relay Agents;842
17.14;PXE Boot;842
17.15;DHCP and Network Access Protection (NAP);844
17.16;DHCP Configuration via Server Core;846
17.17;Configuring Network Authentication;849
17.17.1;NTLMv2 and Kerberos Authentication;850
17.17.2;WLAN Authentication Using 802.1x and 802.3;852
17.17.2.1;Wireless and Wired Authentication Technologies;853
17.17.2.2;Implementing Secure Network Access Authentication;855
17.17.3;Routing and Remote Access Services (RRAS) Authentication;859
17.18;Configuring IP Security (IPsec);861
17.18.1;IPsec Authentication Header (AH);863
17.18.2;IPsec Encapsulating Security Payload (ESP);864
17.18.3;Configuring IPsec in Windows Server 2008;865
17.18.4;Creating IPsec Policy;867
17.18.5;IPsec Using the Command Line;867
17.18.6;IPsec Isolation Policy;869
17.19;Windows Firewall with Advanced Security in Windows Server 2008;870
17.19.1;Network Perimeter Firewalls;870
17.19.2;Host-based Firewalls;870
17.20;New Features in Windows Firewall with Advanced Security;870
17.20.1;IPsec Integration;871
17.20.2;Support for IPv6;872
17.20.3;Support for Active Directory User, Computer, and Groups;872
17.20.4;Location-Aware Profiles;872
17.20.5;Detailed Rules;872
17.20.6;Expanded Authenticated Bypass;873
17.20.7;Network Location-Aware Host Firewall;873
17.20.8;Server and Domain Isolation;875
17.20.8.1;Server Isolation;875
17.20.8.2;Domain Isolation;875
17.21;Configuring Windows Firewall with Advanced Security;875
17.22;Incoming and Outgoing Traffic Filtering;877
17.22.1;Firewall Rules;877
17.22.2;Connection Security Rules;880
17.22.3;Firewall Profiles;881
17.22.4;IPsec Settings;882
17.22.5;Monitoring;886
17.23;Managing Windows Firewall with Advanced Security via Group Policy;887
17.24;Identifying Ports and Protocols;888
17.25;Command Line Tools for Windows Firewall with Advanced Security;889
17.26;Summary of Exam Objectives;891
17.27;Exam Objectives Fast Track;893
17.27.1;Configuring IPv4 and IPv6 Addressing;893
17.27.2;Configuring Dynamic Host Configuration Protocol (DHCP);893
17.27.3;Configuring Network Authentication;894
17.27.4;Configuring IP Security (IPsec);895
17.27.5;Windows Firewall with Advanced Security in Windows Server 2008;895
17.28;Exam Objectives Frequently Asked Questions;897
17.29;Self Test ;900
17.30;Self Test Quick Answer Key;906
18;Chapter 11: Configuring Network Access;907
18.1;Introduction;908
18.1.1;Windows Server 2008 and Routing;909
18.1.2;Window Server 2008 and Remote Access;910
18.1.3;Windows Server 2008 and Wireless Access;911
18.2;Configuring Routing;911
18.2.1;Routing Fundamentals;912
18.2.2;Static Routing;915
18.2.3;Routing Internet Protocol (RIP);916
18.2.4;Open Shortest Path First (OSPF);917
18.3;Configuring Remote Access;918
18.3.1;Routing and Remote Access Services (RRAS);919
18.3.1.1;Network Policy Server and Network Access Protection;921
18.3.2;Dial-Up;925
18.3.3;Remote Access Policy;926
18.3.4;Network Address Translation (NAT);928
18.3.5;Internet Connection Sharing (ICS);930
18.3.6;Remote Access Protocols;933
18.3.7;Virtual Private Networks;940
18.3.8;Installing and Configuring a SSL VPN Server;941
18.3.9;Inbound/Outbound Filters;945
18.3.10;Configuring Remote Authentication Dial-In User Service (RADIUS) Server;946
18.4;Configuring Wireless Access;950
18.4.1;Set Service Identifier (SSID);954
18.4.2;Wi-Fi Protected Access (WPA);955
18.4.3;Wi-Fi Protected Access 2 (WPA2);956
18.4.4;Ad Hoc vs. Infrastructure Mode;956
18.4.5;Wireless Group Policy;958
18.5;Summary of Exam Objectives;960
18.6;Exam Objectives Fast Track;960
18.6.1;Configuring Routing;960
18.6.2;Configuring Remote Access;961
18.6.3;Configuring Wireless Access;962
18.7;Exam Objectives Frequently Asked Questions;964
18.8;Self Test;966
18.9;Self Test Quick Answer Key;970
19;Chapter 12: Network Access Protection;971
19.1;Introduction;972
19.2;Working with NAP;974
19.2.1;Network Layer Protection;974
19.2.1.1;NAP Clients;975
19.2.1.2;NAP Enforcement Points;976
19.2.1.3;Active Directory Domain Services;977
19.2.1.4;NAP Health Policy Server;977
19.2.1.5;Health Requirement Server;977
19.2.1.6;Restricted Network;978
19.2.1.7;Software Policy Validation;979
19.2.2;DHCP Enforcement;979
19.2.3;VPN Enforcement;985
19.2.3.1;Communication Process with VPN Client and NAP;985
19.2.4;Configuring NAP Health Policies;989
19.2.4.1;Connection Request Policies;990
19.2.4.2;Network Policies;991
19.2.4.3;Health Policies;992
19.2.4.4;Network Access Protection Settings;994
19.2.5;IPsec Enforcement;995
19.2.5.1;Secure Network;996
19.2.5.2;Boundary Network;996
19.2.5.3;Restricted Network;997
19.2.5.4;Flexible Host Isolation;997
19.2.6;802.1x Enforcement;1000
19.3;Summary of Exam Objectives;1004
19.4;Exam Objectives Fast Track;1005
19.4.1;Working with Network Access Protection;1005
19.5;Exam Objectives Frequently Asked Questions;1007
19.6;Self Test;1009
19.7;Self Test Quick Answer Key;1013
20;Appendix;1015
20.1;Chapter 1: Deploying Servers;1016
20.2;Chapter 2: Configuring Server Roles in Windows 2008;1021
20.3;Chapter 3: Configuring Certificate Services and PKI;1025
20.4;Chapter 4: Maintaining an Active Directory Environment;1031
20.5;Chapter 5: Configuring the Active Directory Infrastructure;1039
20.6;Chapter 6: Configuring Web Application Services;1046
20.7;Chapter 7: Configuring Web Infrastructure Services;1051
20.8;Chapter 8: Deploying the Terminal Services;1056
20.9;Chapter 9: Configuring and Managing the Terminal Services;1063
20.10;Chapter 10: IP Addressing and Services;1071
20.11;Chapter 11: Configuring Network Access;1081
20.12;Chapter 12: Network Access Protection;1086
21;Index;1091