O'Reilly logo

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

MCSE: Windows 2000 Exams in a Nutshell

MCSE: Windows 2000 Exams in a Nutshell

by Paul Murphy, Michael Moncur
Publisher: O'Reilly Media, Inc.
Release Date: February 2001
ISBN: 0596000308
Topics:
View table of contents
Start reading

Book Description

Microsoft's MCSE (Microsoft Certified Systems Engineer) candidates in the Windows 2000 track are required to pass five core exams and two elective exams. These exams are designed to provide a valid and reliable measure of competency for experienced IT professionals working in the typically complex computing environment of medium to large organizations. MCSE in a Nutshell: The Windows 2000 Exams is a comprehensive study guide and detailed quick reference that covers the following exams:

  • Exam 70-210: Installing, Configuring, and Administering Microsoft Windows 2000 Professional

  • Exam 70-215: Installing, Configuring, and Administering Microsoft Windows 2000 Server

  • Exam 70-216: Implementing and Administering a Microsoft Windows 2000 Network Infrastructure

  • Exam 70-217: Implementing and Administering a Microsoft Windows 2000 Directory Services Infrastructure

  • Exam 70-219: Designing a Microsoft. Windows. 2000 Directory Services Infrastructure

  • Exam 70-221: Designing a Microsoft. Windows. 2000 Network Infrastructure

  • Exam 70-220: Designing Security for a Microsoft. Windows. 2000 Network

  • A summary of the key areas covered by the exam

  • A description of the format, difficulty of each exam and tips for passing it

  • Definitions of key terms

    • Each chapter covers one exam. It includes:

    Any administrator who is serious about acquiring MCSE certification will find this book indispensable. MCSE in a Nutshell: The Windows 2000 Exams is the best value on the market, combining a low price and fast pace that will appeal to sophisticated users who need a bridge between real-world experience and the MCSE Exam requirements.

    Table of Contents

    1. MCSE in a Nutshell: The Windows 2000 Exams
      1. Preface
        1. Contents
        2. Conventions Used in This Book
        3. Other MCSE Resources
        4. Comments and Questions
        5. Acknowledgments
      2. 1. About the MCSE Exams
        1. The MCSE 2000 Program
          1. Required Core Exams
          2. Optional Core Exams
          3. Elective Exams
        2. MCSE 2000 Core Exams
          1. Windows 2000 Professional
          2. Windows 2000 Server
          3. Active Directory
          4. Network Infrastructure
          5. Designing Active Directory
          6. Designing a Network Infrastructure
          7. Designing Security
        3. The Examination Process
          1. Notes About the Windows NT 4.0 MCSE Track
          2. Preparing for Exams
          3. Scheduling and Payment
          4. How the Exams Work
            1. Single answer
            2. Multiple answer
            3. Scenario
            4. Simulation questions
            5. Select and Place, Create a Tree
          5. Test-Taking Tips
        4. Continuing Education
          1. Retired Exams
          2. New Exams
          3. Beta Exams
      3. I. Windows 2000 Professional
        1. 2. Exam Overview
          1. Areas of Study
            1. Windows 2000 Basics
            2. Installing Windows 2000 Professional
            3. Configuring Windows 2000 Professional
            4. Managing Disk Storage
            5. Managing Network Components
            6. Administration and Security
            7. Optimization and Troubleshooting
        2. 3. Study Guide
          1. Windows 2000 Basics
            1. Terminology
            2. Operating Systems
              1. Windows 3.1x
              2. Windows 95/98/Me
              3. Windows NT
              4. Windows 2000 Professional
              5. Windows 2000 Server
            3. Networking Basics
              1. Server-based networks
              2. Peer-to-peer networks
              3. Computer types
            4. The Boot Process
              1. The BOOT.INI file
            5. Using Windows 2000
              1. The Logon dialog
              2. The desktop
              3. Management utilities
          2. Installing Windows 2000 Professional
            1. Planning the Installation
              1. Hardware requirements
              2. Disk partitions
            2. Installation Methods
            3. Performing the Installation
              1. Text-mode phase
              2. GUI phase (Setup Wizard)
            4. Upgrading to Windows 2000
              1. Checking hardware compatibility
              2. Upgrading from Windows 95/98/Me
              3. Upgrading from Windows NT
            5. Unattended Installation
              1. Setup Manager
              2. Disk duplication
              3. Remote Installation Services (RIS)
            6. Using Service Packs
          3. Configuring Windows 2000 Professional
            1. Microsoft Management Console (MMC)
            2. Task Scheduler
            3. Control Panel
              1. The System Control Panel
            4. The Registry
              1. Registry editors
            5. Configuring Mobile Systems
              1. Offline files and folders
              2. Synchronization Manager
              3. Power management
            6. Configuring Hardware
              1. Device Manager
              2. System Information
              3. Driver signing
          4. Managing Disk Storage
            1. Basic Disks
              1. Primary partitions
              2. Extended partitions and logical drives
            2. Dynamic Disks
              1. Simple volumes
              2. Spanned volumes
              3. Striped volumes
            3. Disk Management
              1. Partitioning
              2. Creating spanned volumes
              3. Creating striped volumes
              4. Converting basic to dynamic storage
              5. Defragmenting disks
            4. Disk Compression
              1. Compressing files
              2. Moving and copying files
            5. Disk Quotas
            6. EFS (Encrypted Filesystem)
            7. Managing Backups
              1. Backing up files
              2. Restoring files
              3. Scheduling backups
          5. Managing Network Components
            1. TCP/IP
              1. IP addressing
              2. TCP/IP protocols and services
              3. Managing TCP/IP
            2. Other Protocols
            3. Active Directory
              1. Active Directory basics
              2. Active Directory structure
              3. Directory replication
            4. Remote Access
              1. Remote access security
              2. Managing dial-out connections
              3. Managing dial-in connections
          6. Administration and Security
            1. The Windows 2000 Logon Process
            2. Users and Groups
              1. Adding and modifying users
              2. Configuring groups
              3. Default users and groups
            3. Security Policies
              1. Account policies
              2. Security Options
              3. Audit Policy
            4. NTFS Security
              1. Copying and moving files
            5. File Sharing
            6. Monitoring Users and Shares
            7. Managing Printers
              1. Installing and configuring printers
              2. Print pools
              3. Scheduling and priorities
              4. Managing print jobs
          7. Optimization and Troubleshooting
            1. Monitoring Performance
              1. Performance Console
              2. Event Viewer
            2. Troubleshooting Boot Problems
              1. Boot options
              2. Emergency Repair Disk (ERD)
              3. Recovery Console
        3. 4. Suggested Exercises
          1. Installing Windows 2000 Professional
          2. Configuring Windows 2000 Professional
          3. Managing Disk Storage
          4. Managing Network Components
          5. Administration and Security
          6. Optimization and Troubleshooting
        4. 5. Practice Tests
          1. Comprehensive Test
          2. Case Study
            1. Multiple Choice
            2. Create a Tree
          3. Answers
            1. Comprehensive Test
            2. Case Study: Multiple Choice
            3. Case Study: Create a Tree
              1. Create a Tree Answer # 1
              2. Create a Tree Answer # 2
        5. 6. Highlighter’s Index
          1. Windows 2000 Basics
            1. Operating System Characteristics
            2. Windows 2000
            3. Network Types
            4. Computer Types
            5. Boot and System Partitions
            6. BOOT.INI
          2. Installing Windows 2000 Professional
            1. Hardware Requirements
            2. Filesystems
            3. Upgrading to Windows 2000
            4. Unattended Installation
            5. Service Packs
          3. Configuring Windows 2000 Professional
            1. Microsoft Management Console (MMC)
            2. Task Scheduler
            3. Registry Subtrees
            4. Registry Editors
          4. Managing Disk Storage
            1. Basic Disks
            2. Dynamic Disks
            3. Disk Quotas
            4. EFS (Encrypted Filesystem)
            5. Backup Types
          5. Managing Network Components
            1. Protocol Suites
            2. IP Address Classes
          6. Administration and Security
            1. Users and Groups
            2. NTFS Permissions
            3. File Sharing Permissions
          7. Optimization and Troubleshooting
            1. Monitoring Performance
            2. Troubleshooting Boot Problems
      4. II. Windows 2000 Server
        1. 7. Exam Overview
          1. Objectives
        2. 8. Study Guide
          1. Windows 2000 Server Basics
            1. Windows 2000 Server Editions
              1. Windows 2000 Server
              2. Windows 2000 Advanced Server
              3. Windows 2000 Datacenter Server
            2. Windows 2000 Architecture
              1. User mode
              2. Kernel mode
              3. Hardware Abstraction Layer (HAL)
            3. Networking Basics
              1. The Active Directory model
          2. Installing Windows 2000 Server
            1. Planning the Installation
              1. Hardware requirements
              2. CD and network installation
              3. The installation process
              4. Pre-copy
              5. Text mode
              6. GUI mode
              7. Unattended installation
              8. Distribution folders
              9. Installing service packs
              10. Understanding failed installations
            2. Upgrading a Windows NT Domain
              1. Upgrading the primary domain controller
              2. Upgrading backup domain controllers
              3. Upgrading a member server
              4. The transition period
          3. Managing Disk Storage
            1. Changes to NTFS in Windows 2000
              1. Disk quotas
              2. Reparse points
              3. Native Structured Storage
              4. Link tracking
              5. Sparse files
              6. The Change Journal
              7. The Unique Sequence Number Journal
            2. The Distributed Filesystem
              1. Standalone Dfs roots versus domain Dfs roots
              2. Dfs links
            3. File Replication Service (FRS)
              1. Intrasite replication
              2. Intersite replication
              3. Knowledge Consistency Checker (KCC)
            4. The Encrypted Filesystem (EFS)
            5. Data Compression
            6. Backup and Restore
          4. Windows 2000 Active Directory
            1. Active Directory Basics
            2. Planning and Implementing Active Directory
              1. Installing Active Directory Services
            3. Managing an Active Directory Network
          5. Managing Network Components
            1. Internet Information Server 5.0 (IIS)
              1. The web server
              2. WebDAV permissions
              3. The File Transfer Protocol (FTP) server
              4. The Telnet server
            2. Terminal Services
              1. Installation and configuration
              2. Remote administration mode
              3. Application sharing mode
            3. Remote Access
              1. Remote Access Service (RAS)
              2. Virtual private networks
          6. Administration and Security
            1. Managing Users and Groups
              1. User profiles
              2. Groups
              3. Group nesting
              4. Managing Group Policies
            2. Print Server Administration
              1. Network printers
              2. Managing print jobs
            3. Device Drivers
              1. Driver signing
            4. Auditing
            5. Security Configuration and Analysis
            6. Kerberos
          7. Optimization and Troubleshooting
            1. Task Manager
            2. Performance Console
            3. Network Monitor
            4. SNMP
            5. Disk Tools
            6. Hardware Issues
            7. Safe Mode
            8. Recovery Console
        3. 9. Suggested Exercises
          1. Installing Windows 2000 Server
          2. Creating User Accounts and Groups
          3. Creating a Group Policy and User Profiles
          4. Creating a Dynamic Disk
          5. Using the Task Manager
        4. 10. Practice Tests
          1. Test Questions
          2. Case Study
            1. Multiple Choice
            2. Create a Tree
          3. Answers
            1. Comprehensive Test
            2. Case Study: Multiple Choice
            3. Case Study: Create a Tree
              1. Create a Tree Answer # 1
              2. Create a Tree Answer # 2
        5. 11. Highlighter’s Index
          1. Windows 2000 Editions
          2. Windows 2000 Architecture
          3. Windows 2000 Installation Files
          4. Windows 2000 Server Hardware Requirements
          5. Windows NT Upgrade Order
          6. Encrypting Filesystem Keys
          7. Windows Backup Types
          8. Windows 2000 Security Groups
          9. Kerberos Terms
          10. SNMP Tools
      5. III. Active Directory
        1. 12. Exam Overview
          1. Objectives
        2. 13. Study Guide
          1. Introduction to Active Directory
            1. Terminology
          2. Installing Active Directory
            1. Planning
            2. Installation
              1. Verifying the Active Directory installation
          3. Configuring Active Directory
            1. Creating Active Directory Components
              1. Managing intersite replication
              2. Sites
              3. Subnets
              4. Site links
              5. Link bridges
              6. Bridgehead servers
              7. Managing intrasite replication
              8. Global catalog servers
            2. Organizational Unit Structure
              1. Creating Organizational Units
              2. Configuring Organizational Units
            3. Managing Active Directory Objects
              1. Active Directory object naming conventions
              2. Creating accounts
              3. Locating objects
              4. Moving objects
            4. Publishing Resources
            5. Securing Resources
              1. Delegating administrative control
            6. Group Policies
              1. Implementing a Group Policy
                1. Creating a Group Policy Object (GPO)
                2. Administrative Templates
                3. Software Settings
                4. Windows Settings
                5. Modifying Group Policy inheritance
                6. Filtering Group Policy settings with security groups
          4. DNS for Active Directory
            1. Installing and Configuring DNS
              1. DNS zones
              2. Integrating DNS zones
              3. Dynamic updates
              4. DNS replication
              5. Monitoring DNS
          5. Directory Maintenance and Replication
            1. Creating a Server Object
            2. Moving Server Objects Between Sites
            3. Removing a Server Object
            4. Active Directory Replication
              1. Operations master roles
              2. Transferring operations master roles
          6. Remote Installation Service (RIS)
            1. Creating an RIS Boot Disk
            2. Installing RIS on a Server
            3. Authorizing an RIS Server
            4. Pre-Staging RIS Clients
            5. RIS Account Creation
          7. Active Directory Security
            1. Security Templates
            2. The Security Configuration and Analysis Console
            3. Audit Policies
            4. Trust Relationships
          8. Active Directory Maintenance
            1. Managing Accounts
            2. Backing Up Active Directory
              1. Restoring Active Directory
            3. Optimizing Performance
              1. Active Directory performance
          9. Troubleshooting Active Directory
            1. Troubleshooting DNS
            2. Troubleshooting RIS
            3. Troubleshooting Group Policies
            4. Troubleshooting Software Deployment
            5. Active Directory Troubleshooting Tools
        3. 14. Suggested Exercises
          1. Installing Active Directory
          2. Testing DNS
          3. Configuring Active Directory
          4. Organizational Units
          5. Managing Objects
          6. Group Policy Objects
          7. Remote Installation Service
          8. Security
          9. Backup and Recovery
        4. 15. Practice Tests
          1. Test Questions
          2. Case Study
            1. Multiple Choice
          3. Answers
            1. Comprehensive Test
            2. Case Study: Multiple Choice
        5. 16. Highlighter’s Index
          1. Site Replication
          2. Organizational Unit Properties
          3. Accounts
          4. Moving Objects
          5. Windows 2000 Permissions
          6. Group Policy Objects
          7. Managing Applications
          8. DNS Zones
          9. Active Directory Replication
          10. Operations Master Roles
          11. Operations Master Failure
          12. Troubleshooting RIS
      6. IV. Network Infrastructure
        1. 17. Exam Overview
          1. Areas of Study
            1. Network Basics
            2. TCP/IP
            3. IP Routing
            4. IPSec (IP Security)
            5. Host Name Resolution
            6. NetBIOS Name Resolution
            7. NetWare Connectivity
            8. DHCP (Dynamic Host Configuration Protocol)
            9. Remote Access
            10. NAT (Network Address Translation)
            11. Certificate Services
            12. Monitoring Network Performance
        2. 18. Study Guide
          1. Network Protocols
            1. TCP/IP
            2. IPX and SPX
            3. NetBEUI
            4. AppleTalk
            5. DLC (Data Link Control)
            6. IrDA (Infrared Data Association)
          2. Managing TCP/IP
            1. TCP/IP Protocols and Services
              1. The Network Access layer
              2. The Internet layer
              3. The Host-to-Host layer
              4. TCP (Transmission Control Protocol)
              5. UDP (User Datagram Protocol)
              6. The Process/Application layer
            2. IP Addressing
              1. IP address classes
              2. Subnet masking
              3. Reserved IP addresses
              4. IP address assignments
              5. Supernetting
            3. Configuring TCP/IP
              1. Installing TCP/IP
              2. Managing TCP/IP settings
            4. Packet Filtering
          3. IP Routing
            1. Static Routing
              1. Default Gateways
            2. Dynamic Routing
              1. RIP (Router Information Protocol)
              2. OSPF (Open Shortest Path First)
            3. Configuring Static Routing
            4. Configuring Dynamic Routing
          4. IP Security (IPSec)
            1. Configuring IPSec
            2. Security Policy Properties
              1. Authentication methods
              2. Tunnel setting
              3. Connection type
              4. IP filter list
              5. Filter action
          5. Hostname Resolution
            1. The HOSTS File
            2. Domain Name Service (DNS)
              1. Installing DNS Server
              2. Configuring DNS
          6. NetBIOS Name Resolution
            1. Windows Internet Name Service (WINS)
              1. How WINS works
              2. Installing WINS
              3. Configuring WINS
              4. WINS replication
            2. The LMHOSTS File
          7. NetWare Connectivity
            1. NWLink (IPX/SPX Protocols)
              1. Installing NWLink
            2. Client Service for NetWare (CSNW )
            3. Gateway Service for NetWare (GSNW )
              1. Configuring GSNW
          8. DHCP (Dynamic Host Configuration Protocol)
            1. How DHCP Works
            2. Configuring DHCP
              1. Installing DHCP Server
              2. Creating a scope
              3. DHCP authorization
              4. DHCP reservations
              5. DHCP options
              6. Configuring DHCP clients
            3. DHCP Forwarding
            4. Using DHCP with DNS
          9. Remote Access Server (RAS)
            1. Configuring RAS
              1. Dial-in Constraints
              2. IP
              3. Multilink
              4. Authentication
              5. Encryption
              6. Advanced
            2. Remote Access Encryption
              1. Dial-up connections
              2. VPN connections
            3. RAS and DHCP
          10. NAT (Network Address Translation)
            1. Installing NAT
            2. Configuring NAT
              1. Using special ports
            3. Internet Connection Sharing (ICS)
          11. Certificate Services
            1. Installing a Certificate Authority
            2. Managing Certificates
              1. Requesting a certificate
              2. Revoking a certificate
          12. Monitoring Network Performance
            1. Using Network Monitor
              1. Installing Network Monitor
              2. Capturing packets
              3. Viewing Capture results
            2. Using Event Viewer
            3. Monitoring IPSec
        3. 19. Suggested Exercises
          1. Installing and Configuring TCP/IP
          2. Configuring IP Routing
          3. Managing IPSec
          4. Configuring Name Resolution
          5. Setting up NetWare Connectivity
          6. Installing and Configuring DHCP
          7. Installing and Managing Remote Access
          8. Installing and Using NAT
          9. Installing and Using Certificate Services
          10. Monitoring the Network
        4. 20. Practice Tests
          1. Comprehensive Test
          2. Case Study
            1. Multiple Choice
            2. Create a Tree
          3. Answers
            1. Comprehensive Test
            2. Case Study: Multiple Choice
            3. Case Study: Create a Tree
              1. Create a Tree Answer # 1
              2. Create a Tree Answer # 2
        5. 21. Highlighter’s Index
          1. Network Protocols
            1. TCP/IP
            2. IPX/SPX
            3. NetBEUI
            4. AppleTalk
            5. DLC
            6. IrDA
          2. TCP/IP
            1. Network Access Layer
            2. Internet Layer
            3. Host-to-Host Layer
            4. Process/Application Layer
            5. IP Address Classes
            6. Subnet Masking
            7. Private IP Address Ranges
            8. IP Filtering
          3. IP Routing
            1. Static Routing
            2. Dynamic Routing
          4. IPSec (IP Security)
            1. IPSec Components
            2. IPSec Options
            3. IPSec Authentication Methods
          5. Name Resolution
            1. Hostname Resolution Order
            2. NetBIOS Name Resolution Order
            3. DNS (Domain Name Service)
            4. WINS (Windows Internet Naming Service)
          6. NetWare Connectivity
          7. DHCP (Dynamic Host Configuration Protocol)
            1. DHCP Basics
            2. DHCP Features
          8. Remote Access
            1. Remote Access Basics
            2. Authentication Methods
          9. NAT (Network Address Translation)
            1. NAT Features
            2. NAT Versus ICS
          10. Certificate Services
            1. Basics
            2. CA Types
          11. Network Monitoring
            1. Network Monitor
            2. Event Viewer
            3. IPSECMON
      7. V. Designing Active Directory
        1. 22. Exam Overview
          1. Objectives
        2. 23. Study Guide
          1. Directory Services Overview
            1. Active Directory Versus the NT Domain Model
            2. Active Directory Components
            3. Balancing Technical and Business Requirements
          2. Analyzing the Company
            1. Mapping Organizational Structure
              1. Physical locations
              2. Departmental structure
              3. Functional structure
              4. IT structure
          3. Active Directory Architecture
            1. Domain Structure
              1. Domain controller placement
              2. Operations masters placement
              3. Global catalog server placement
              4. Multiple domains
              5. Multiple domain trees
              6. Empty root domains
              7. Multiple forests
              8. Multiple-tree forests
              9. Organizational Units
              10. Objects
              11. Windows 2000 groups
            2. Designing Trust Relationships
              1. Transitive trusts
              2. External trusts
              3. Authentication issues
              4. Shortcut trusts
            3. Designing Group Policies
              1. Group Policy goals
              2. Security group filtering
              3. Group Policy blocking
            4. Delegating Authority
              1. Object ownership
              2. Permissions inheritance
            5. DNS Naming
              1. Organizing a DNS structure
            6. Schema Modification
              1. Attribute-schema objects
              2. Class-schema objects
              3. Modifying the schema
            7. Replication
              1. Sites
              2. Site links
              3. Site link bridges
              4. Bridgehead servers
        3. 24. Suggested Exercises
          1. Domain Naming
          2. Company IT Mapping
          3. Trust Relationships
          4. DNS
          5. Site Replication
        4. 25. Practice Tests
          1. Test Questions
          2. Case Study
            1. Multiple Choice
            2. Create a Tree
          3. Answers
            1. Comprehensive Test
            2. Case Study: Multiple Choice
            3. Case Study: Create a Tree
        5. 26. Highlighter’s Index
          1. Analyzing Your Company Evaluation Notes
          2. IT Structure Types
          3. Reasons for a Multiple Domain Structure
          4. Security Groups
          5. External Trusts
          6. DNS Naming Conventions
          7. Site Level Traffic Optimization
      8. VI. Designing Network Infrastructure
        1. 27. Exam Overview
          1. Areas of Study
            1. Designing a Network Infrastructure
            2. Designing TCP/IP Networks
            3. Designing DHCP Services
            4. Designing Name Resolution Services
            5. Designing Internet Connectivity
            6. Designing Routing and Remote Access
        2. 28. Study Guide
          1. Designing a Network Infrastructure
            1. Network Services Overview
            2. Examining Requirements
              1. Business requirements
              2. Technical requirements
              3. Analyzing the existing network
              4. Planning for change
          2. Designing TCP/IP Networks
            1. IP Addressing
              1. Public addresses
              2. Private addresses
              3. How addresses are assigned
            2. TCP/IP Network Security
              1. Packet filtering
              2. IPSec encryption
            3. Optimizing TCP/IP Networks
              1. Improving availability
              2. Improving performance
          3. Designing DHCP Services
            1. Basic DHCP Design
            2. DHCP and Other Services
              1. DHCP and routing
              2. DHCP and remote access
              3. DHCP and DNS
              4. DHCP and Active Directory
            3. Optimizing DHCP Services
              1. Single servers
              2. Multiple servers per subnet
              3. Servers in separate subnets
              4. Supporting non-Windows clients
              5. Improving performance
          4. Designing Name Resolution Services
            1. Basic DNS Design
              1. Choosing zone types
            2. Planning DNS Security
              1. Securing DNS replication
              2. Securing DNS updates
            3. Optimizing DNS
              1. Measuring and improving performance
              2. Designing for availability
            4. Basic WINS Design
              1. WINS and other services
              2. Number of WINS servers
            5. Optimizing WINS
              1. Improving availability
              2. Improving performance
          5. Designing Internet Connectivity
            1. Network Address Translation (NAT)
              1. Placement and connectivity of the NAT server
              2. Replacing DHCP and DNS services
              3. Allowing Internet access
              4. NAT security
              5. Optimizing NAT
            2. Microsoft Proxy Server
              1. Basic proxy server design
              2. Proxy server security
              3. Web publishing
              4. Optimizing proxy server availability
              5. Optimizing proxy server performance
          6. Designing Routing and Remote Access
            1. Basic Routing Design
              1. Router placement
              2. Static and dynamic routing
              3. Routing protocols
            2. Planning Routing Security
              1. Authentication
              2. IP filtering
              3. VPNs and IPSec
            3. Optimizing the Routing Design
            4. Planning Remote Access
              1. Placement of remote access servers
              2. Remote access security
              3. Tunneling protocols
              4. Optimizing remote access
              5. Remote access using RADIUS
        3. 29. Suggested Exercises
          1. Designing a Network Infrastructure
          2. TCP/IP and DHCP Design
          3. Name Resolution Design
          4. Internet Connectivity
          5. Routing and Remote Access
        4. 30. Practice Tests
          1. Comprehensive Test
          2. Case Study
            1. Multiple Choice
            2. Create a Tree
          3. Answers
            1. Comprehensive Test
            2. Case Study: Multiple Choice
            3. Case Study: Create a Tree
              1. Create a Tree Answer # 1
              2. Create a Tree Answer # 2
        5. 31. Highlighter’s Index
          1. TCP/IP Design
            1. TCP/IP Basics
            2. IP Address Classes
            3. Subnet Masking
            4. Private IP Address Ranges
            5. IP Filtering
          2. DHCP Design
            1. DHCP Basics
            2. DHCP Features
          3. Name Resolution Design
            1. DNS (Domain Name Service)
            2. WINS (Windows Internet Naming Service)
          4. Internet Connectivity
            1. NAT (Network Address Translation)
            2. Internet Connection Sharing (ICS)
            3. Proxy Server 2.0
          5. Routing and Remote Access
            1. Remote Access Basics
            2. Authentication Methods
      9. VII. Designing Security
        1. 32. Exam Overview
          1. Areas of Study
            1. Planning Network Security
            2. Designing Basic Security
            3. Encrypting Filesystem (EFS)
            4. Designing Auditing
            5. Securing Network Services
            6. Designing Secure Connectivity
            7. Planning IP Security
        2. 33. Study Guide
          1. Planning Network Security
            1. Windows 2000 Security Overview
              1. Authentication
              2. Controlling access to resources
              3. Auditing resource access
              4. Encryption
            2. Analyzing Business Requirements
              1. Company structure
              2. Size and locations
            3. Analyzing Technical Requirements
              1. Connectivity and bandwidth
              2. Performance requirements
            4. Mapping Company Information
              1. Information flow
              2. Product life cycle
              3. Decision-making structure
            5. Mapping Network Roles
              1. End-user roles
              2. Resource ownership
              3. Administrative roles
              4. Service roles
            6. Analyzing Security Risks
              1. Finding current security risks
              2. Determining acceptable risks
              3. Analyzing new systems
            7. Planning for Change
              1. Identifying upgrades and patches
              2. Technical support
              3. System administration
          2. Designing Basic Security
            1. Creating a Security Baseline
              1. Domain controllers
              2. Operations masters
              3. File and print servers
              4. Application servers
              5. RAS servers
              6. Desktop computers
              7. Portable computers
              8. Kiosks
            2. Planning Authentication
              1. Clear-text passwords
              2. LM and NTLM authentication
              3. Kerberos authentication
              4. Digest authentication
              5. Smart cards
              6. RADIUS
              7. Certificates
              8. SSL
              9. Integration with other systems
            3. Certificate-Based Security
              1. Certificate authority (CA) hierarchies
              2. Certificate server roles
              3. Managing certificates
              4. Mapping certificates
              5. Third-party certificate authorities
          3. Encrypted Filesystem (EFS)
            1. EFS Basics
              1. How EFS works
              2. Key storage locations
            2. Planning Recovery
            3. EFS Options
          4. Designing Auditing
            1. Creating an Audit Policy
            2. Planning Use of Audit Data
          5. Securing Network Services
            1. DNS Security
            2. Remote Installation Services (RIS) Security
            3. Terminal Services Security
          6. Designing Secure Connectivity
            1. Securing Public Network Access
              1. Securing Internet access
              2. Providing access to local resources
            2. VPNs (Virtual Private Networks)
              1. PPTP
              2. L2TP
            3. SMB Signing Security
          7. Planning IP Security
            1. Creating an Encryption Scheme
            2. IPSec Negotiation
              1. Phase One Negotiation
              2. Phase Two Negotiation
            3. IP Filtering
              1. Defining security levels
              2. Managing IPSec
        3. 34. Suggested Exercises
          1. Planning Network Security
          2. Designing Basic Security
          3. Encrypting Filesystem (EFS)
          4. Designing Auditing
          5. Securing Network Services
          6. Designing Secure Connectivity
          7. Planning IP Security
        4. 35. Practice Tests
          1. Comprehensive Test
          2. Case Study
            1. Multiple Choice
            2. Create a Tree
          3. Answers
            1. Comprehensive Test
            2. Case Study: Multiple Choice
            3. Case Study: Create a Tree
              1. Create a Tree Answer # 1
        5. 36. Highlighter’s Index
          1. Planning Network Security
            1. Basic Security Tasks
            2. Business Requirements
            3. Technical Requirements
            4. Company Information
          2. Designing Basic Security
            1. Operations Masters
            2. Authentication Methods
            3. Certificate Authority Roles
          3. Encrypting Filesystem (EFS)
            1. EFS Terminology
          4. Designing Auditing
            1. Built-in Audit Policies
            2. Events to Audit
          5. Securing Network Services
            1. DHCP and Dynamic DNS
            2. RIS Security
          6. Designing Secure Connectivity
            1. Internet Connectivity Methods
            2. VPN Protocols
            3. Windows 2000 SMB Features
          7. Planning IP Security
            1. IPSec Terminology
            2. IPSec Modes
            3. Common TCP/IP Ports
      10. Index
      11. Colophon