Thursday, August 14, 2008

Microsoft Exam 70-298




Microsoft Exam 70-298: Designing Security for a Windows Server 2003 Network


Microsoft exam 70-298 based on concepts related to security.. That included local physical, remote. Network security of resources & their access..


  • Credits for this certification:

When you pass Microsoft exam 70-298 you became Microsoft Certified Professional (MCP)


Microsoft exam 70-298 is also one of the exams requiring achieve following group certifications

Certificate MCSE on win server 2003... = core exam

Certificate MCSE Security on win server 2003... = core exam


  • Program of study for Microsoft exam 70-298

You will need to acquire a solid understanding of Windows 2003 Security concepts... & some business concepts that will allow you to configure security to enhance your company’s business objectives. & importantly need to focus on various components of Windows 2000 security, like the different types of protocols and their implementations.


  • Analyze business requirements for designing security.

Study about:

existing security policies and procedures

requirements for securing data, sensitivity of data

flaws in current administration structure and security practices

cost & risks in implementing new strategies


  • Design a framework for designing and implementing security

Study about:

detection of threats to your network from internal and external sources

segmented networks

process for recovering services


  • Technical constraints for security

Study about:

capabilities of the existing infrastructure

technology availability

Analyze interoperability constraints


  • Network Infrastructure Security

Study about:

public key infrastructure (PKI)

certification authority (CA) hierarchy implementation

enrollment and distribution processes

security for CA servers


  • logical authentication strategy

study about:

certificate distribution

forest and domain trust models

account and password requirements for security


  • security for network management

study about:

risk of managing networks

Microsoft Management Console (MMC)

Terminal Server

Remote Desktop for Administration

Remote Assistance

Telnet

Emergency Management Services


  • Security update infrastructure

Study about:

Software Update Services (SUS)

Deploy software updates by Group Policies

Strategy for identifying computers those are not at the current patch level


  • Physical Design for Network Infrastructure Security

Study about:

IP filtering

IPSec policy

DNS implementation

Security for data transmission


  • security for wireless networks

study about:

public and private wireless LANs

802.1x authentication for wireless networks


  • authentication for Internet Information Services (IIS)

study about:

user authentication for a Web site by using IIS authentication

RADIUS for IIS authentication

strategy for IIS

strategy for updating an IIS server


  • security for communication between networks

study about:

protocols for VPN access

VPN connectivity

demand-dial routing between internal networks


  • communication with external organizations

study about:

extranet infrastructure

cross-certification of Certificate Services


  • Assigning server roles

study about:

domain controller

network infrastructure server

file server

IIS server

terminal server

POP3 mail server

security template for systems


  • access control for directory services

study about:

auditing

group permission to resources

permission structure for directory service objects


  • security for files & folders

study about:

encryption and decryption of files and folders

permission for files and folders

backup and recovery of files and folders


  • permission for registry objects


  • client authentication strategy

study about:

account and password of clients

remote access policies

access to internal resources

authentication by using Internet Authentication Service (IAS) for remote users


  • securing client computers

study about:

desktop and portable computers

hardening client operating systems

restricting user access to operating system features



these all point must be covered before giving Microsoft exam 70-298

Microsoft warns that preparation guide can be change at any time without any notice... well they change exam structure suddenly... so prepare for all concepts that related to security of win 2003 server & you don’t have to worry about Microsoft exam 70-298.



No comments: