MCSE : 70-291

Planning Windows 2003 Server Network Infrastructure (70-291) :

Implementing, Managing, and Maintaining IP Addressing ~ Configure TCP/IP addressing on a server computer.

Manage DHCP.

Manage DHCP clients and leases.

Manage DHCP Relay Agent. Manage DHCP databases.

Manage DHCP scope options.

Manage reservations and reserved clients.

Troubleshoot TCP/IP addressing. Diagnose and resolve issues related to Automatic Private IP Addressing (APIPA).

Diagnose and resolve issues related to incorrect TCP/IP configuration. Troubleshoot DHCP.

Diagnose and resolve issues related to DHCP authorization.

Verify DHCP reservation configuration.

Examine the system event log and DHCP server audit log files to find related events.

Diagnose and resolve issues related to configuration of DHCP server and scope options.

Verify that the DHCP Relay Agent is working correctly.

Verify database integrity. ~ Implementing, Managing, and Maintaining Name Resolution ~ Install and configure the DNS Server service.

Configure DNS server options. Configure DNS zone options. Configure DNS forwarding. Configure DNS caching only.


Manage DNS. Manage DNS zone settings.

Manage DNS record settings.

Manage DNS server options. Manage DNS zone options.

Monitor DNS. Tools might include System Monitor, Event Viewer, Replication Monitor, and DNS debug logs ~ Implementing, Managing, and Maintaining Routing and Remote Access ~ Configure Routing and Remote Access user authentication.

Configure remote access authentication protocols.

Configure Internet Authentication Service (IAS) to provide authentication for Routing and Remote Access clients.

Configure Routing and Remote Access policies to permit or deny access.

Manage remote access. Manage packet filters.

Manage Routing and Remote Access routing interfaces.

Manage devices and ports. Manage routing protocols.

Manage Routing and Remote Access clients.

Manage TCP/IP routing. Manage routing protocols.

Manage routing tables. Manage routing ports.

Implement secure access between private networks.

Troubleshoot user access to remote access services.

Diagnose and resolve issues related to remote access VPNs.

Diagnose and resolve issues related to establishing a remote access connection.

Diagnose and resolve user access to resources beyond the remote access server.

Troubleshoot Routing and Remote Access routing.

Troubleshoot demand-dial routing.

Troubleshoot router-to-router VPNs. ~ Implementing, Managing, and Maintaining Network Infrastructure and Security ~ Implement secure network administration procedures.

Implement security baseline settings and audit security settings by using security templates.

Implement the principle of least privilege.

Install and configure software update infrastructure.

Install and configure software update services.

Install and configure automatic client update settings.

Configure software updates on earlier operating systems.

Monitor network protocol security.

Tools might include the IP Security Monitor Microsoft Management Console (MMC) snap-in and Kerberos support tools.

Troubleshoot network protocol security.

Tools might include the IP Security Monitor MMC snap-in, Event Viewer, and Network Monitor.

Monitor network traffic.

Tools might include Network Monitor and System Monitor.

Troubleshoot connectivity to the Internet.

Troubleshoot server services.

Diagnose and resolve issues related to service dependency.

Use service recovery options to diagnose and resolve service-related issues.

Planning Windows 2003 Server Network Infrastructure (70-293) ~ Planning and Implementing Server Roles and Server Security ~ Configure security for servers that are assigned specific roles.

Plan a secure baseline installation.

Plan a strategy to enforce system default security settings on new systems.

Identify client operating system default security settings.

Identify all server operating system default security settings.

Plan security for servers that are assigned specific roles.

Roles might include domain controllers, Web servers, database servers, and mail servers.

Deploy the security configuration for servers that are assigned specific roles.

Create custom security templates based on server roles.

Evaluate and select the operating system to install on computers in an enterprise.

Identify the minimum configuration to satisfy security requirements.

Planning, Implementing, and Maintaining a Network Infrastructure
Plan a TCP/IP network infrastructure strategy.

Analyze IP addressing requirements.

Plan an IP routing solution.

Create an IP subnet scheme.

Plan and modify a network topology.

Plan the physical placement of network resources.

Identify network protocols to be used.

Plan an Internet connectivity strategy.

Troubleshoot connectivity to the Internet.

Troubleshoot TCP/IP addressing.

Diagnose and resolve issues related to Network Address Translation (NAT).

Diagnose and resolve issues related to name resolution cache information ~ Diagnose and resolve issues related to client configuration.

Diagnose and resolve issues related to client computer configuration.

Diagnose and resolve issues related to DHCP server address assignment.

Plan a host name resolution strategy.

Plan a DNS namespace design.

Plan zone replication requirements.

Plan a forwarding configuration.

Plan for DNS security.

Examine the interoperability of DNS with third-party DNS solutions.

Plan a NetBIOS name resolution strategy.

Plan a WINS replication strategy.

Plan NetBIOS name resolution by using the Lmhosts file.

Troubleshoot host name resolution.

Diagnose and resolve issues related to DNS services.
Diagnose and resolve issues related to client computer configuration
Planning, Implementing, and Maintaining Routing and Remote Access.

Plan a routing strategy.

Plan routing for IP multicast traffic.

Identify routing protocols to use in a specified environment.

Plan security for remote access users.

Plan remote access policies.

Analyze protocol security requirements.

Plan authentication methods for remote access clients.

Implement secure access between private networks.

Create and implement an IPSec policy.

Troubleshoot TCP/IP routing.

Tools might include the route, tracert, ping, pathping, and netsh commands and Network Monitor.


Planning, Implementing, and Maintaining Server Availability ~ Configure Active Directory service for certificate publication.

Plan a public key infrastructure (PKI) that uses Certificate Services.

Identify the appropriate type of certificate authority to support certificate issuance requirements.

Plan the enrollment and distribution of certificates.

Plan for the use of smart cards for authentication.

Plan a framework for planning and implementing security.

Plan for security monitoring.

Plan a change and configuration management framework for security.

Plan a security update infrastructure.

Tools might include Microsoft Baseline Security Analyzer and Microsoft Software Update Services.

Plan network traffic monitoring.

Tools might include Network Monitor and System Monitor.