The topic area or objectives on 70-649

1. Configuring Additional Active Directory Server Roles

·                          Configure Active Directory Lightweight Directory Service (AD LDS)

May include but is not limited to: migration to AD LDS, configuring data within AD LDS, configuring an authentication server, server core, Windows Server 2008 Hyper-V

·                          Configure Active Directory Rights Management Service (AD RMS)

May include but is not limited to: certificate request and installation, self-enrollments, delegation, Active Directory Metadirectory Services (AD MDS), Windows Server virtualization

·                          Configure the read-only domain controller (RODC)

May include but is not limited to: unidirectional replication, Administrator role separation, read-only DNS, BitLocker, credential caching, password replication, syskey, Windows Server virtualization

·                          Configure Active Directory Federation Services (ADFS)

May include but is not limited to: installing AD FS server role, exchange certificate with AD FS agents, configuring trust policies, configuring user and group claim mapping, Windows Server virtualization

2. Configuring IP Addressing and Services

·                          Configure IPv4 and IPv6 addressing

May include but is not limited to: configuring IP options, subnetting, supernetting, alternative configuration

·                          Configure Dynamic Host Configuration Protocol (DHCP)

May include but is not limited to: DHCP options, creating new options, PXE boot, default user profiles, DHCP relay agents, exclusions, authorizing server in Active Directory, scopes, server core, Windows Server Hyper-V

·                          Configure routing

May include but is not limited to: static routing, persistent routing, Routing Internet Protocol (RIP), Open Shortest Path First (OSPF)

·                          Configure IPsec

May include but is not limited to: creating IPsec policy, IPsec Authentication Header (AH), IPsec Encapsulating Security Payload (ESP)

3. Monitoring and Managing a Network Infrastructure

·                          Configure Windows Software Update Services (WSUS) server settings

May include but is not limited to: updating type selection, client settings, Group Policy object (GPO), client targeting, software updates, test and approval, disconnected networks

·                          Capture performance data

May include but is not limited to: Data Collector Sets, Performance Monitor, Reliability Monitor, monitoring System Stability Index

·                          Monitor event logs

May include but is not limited to: custom views, application and services logs, subscriptions, DNS log

·                          Gather network data

May include but is not limited to: Simple Network Management Protocol (SNMP), Baseline Security Analyzer, Network Monitor

4. Deploying Servers

·                          Deploy images by using Windows Deployment Services

May include but is not limited to: installing from media (IFM), configuring Windows Deployment Services, capturing Windows Deployment Services images, deploying Windows Deployment Services images, server core

·                          Configure Microsoft Windows activation

May include but is not limited to: installing a KMS server, creating a DNS SRV record, replicating volume license data

·                          Configure Windows Server Hyper-V and virtual machines

May include but is not limited to: virtual networking, virtualization hardware requirements, Virtual Hard Disks, migrating from physical to virtual, VM additions, backup, optimization, server core

·                          Configure high availability

May include but is not limited to: failover clustering, Network Load Balancing, hardware redundancy

·                          Configure storage

May include but is not limited to: RAID types, Virtual Disk Specification (VDS) API, Network Attached Storage, iSCSI and Fibre Channel storage area networks, mount points

5. Configuring Terminal Services

·                          Configure Windows Server 2008 Terminal Services RemoteApp (TS RemoteApp)

May include but is not limited to: Configuring Terminal Services Web Access, configuring Terminal Services Remote Desktop Web Connection

·                          Configure Terminal Services Gateway

May include but is not limited to: certificate configuration, Terminal Services Gateway Manager (TS Gateway Manager), specifying resources that users can access through TS Gateway by using Terminal Services resource authorization policy (TS RAP) and Terminal Services connection authorization policy (TS CAP), Terminal Services group policy

·                          Configure Terminal Services load balancing

May include but is not limited to: Terminal Services Session Broker redirection modes, DNS registration, setting through group policy

·                          Configure and monitor Terminal Services resources

May include but is not limited to: allocating resources by using Windows Server Resource Manager, configuring application logging

·                          Configure Terminal Services licensing

May include but is not limited to: deploying licensing server, connectivity between terminal servers and Terminal Services licensing server, recovering Terminal Services licensing server, managing Terminal Services client access licenses (TS CALs)

·                          Configure Terminal Services client connections

May include but is not limited to: connecting local devices and resources to a session, Terminal Services profiles, Terminal Services home folders, Remote Desktop Connection (RDC), single sign-on, Remote Desktop Snap-In, MSTSC.exe

·                          Configure Terminal Services server options

May include but is not limited to: logoff, disconnect, reset, remote control, monitor, Remote Desktop Protocol (RDP) permissions, connection limits, session time limits, managing by using GPOs, viewing processes, session permissions, display data prioritization

6. Configuring a Web Services Infrastructure

·                          Configure Web applications

May include but is not limited to: directory-dependent, publishing, URL-specified configuration, Microsoft .NET components, for example, .NET and .aspx, configuring application pools

·                          Manage Web sites

May include but is not limited to: migrating sites and Web applications, publishing IIS Web sites, configuring virtual directories

·                          Configure a File Transfer Protocol (FTP) server

May include but is not limited to: configuring for extranet users, configuring permissions

·                          Configure Simple Mail Transfer Protocol Services (SMTP)

May include but is not limited to: setting up smart hosts, configuring size limitations, setting up security and authentication to the delivering server, creating proper service accounts, authentication, SMTP relay

·                          Manage Internet Information Services (IIS)

May include but is not limited to: Web site content backup and restore, IIS configuration backup, monitoring IIS, configuring logging, delegation of administrative rights

·                          Configure SSL security

May include but is not limited to: configuring certificates, requesting SSL certificate, renewing SSL certificate, exporting and importing certificates

·                          Configure Web site authentication and permissions

May include but is not limited to: configuring site permissions and authentication, configuring application permissions, client certificate mappings