微软MCSE2003认证升级考试70-292和70-296详解

70-296 Planning, Implementing, and Maintaining a Windows Server 2003 Environment for an MCSE Certified on Windows 2000

Planning and Implementing Server Roles and Server Security
Configure security for servers that are assigned specific roles.
Plan security for servers that are assigned specific roles. Roles might include domain controllers, Web servers, database servers, and mail servers.
Deploy the security configuration for servers that are assigned specific roles.
Create custom security templates based on server roles.

Planning, Implementing, and Maintaining a Network Infrastructure
Plan a host name resolution strategy.
Plan a DNS namespace design.
Plan zone replication requirements.
Plan a forwarding configuration.
Plan for DNS security.
Examine the interoperability of DNS with third-party DNS solutions.

Planning, Implementing, and Maintaining Server Availability
Plan services for high availability.
Plan a high availability solution that uses clustering services.
Plan a high availability solution that uses Network Load Balancing. 网管u家u.bitscn@com

Plan a backup and recovery strategy.
Identify appropriate backup types. Methods include full, incremental, and differential.
Plan a backup strategy that uses volume shadow copy.
Plan system recovery that uses Automated System Recovery (ASR).

Planning and Maintaining Network Security
Plan secure network administration methods.
Create a plan to offer Remote Assistance to client computers.
Plan for remote administration by using Terminal Services.

Plan security for wireless networks.
Plan security for data transmission.
Secure data transmission between client computers to meet security requirements.
Secure data transmission by using IPSec.

Planning, Implementing, and Maintaining Security Infrastructure
Configure Active Directory directory service for certificate publication.
Plan a public key infrastructure (PKI) that uses Certificate Services.
Identify the appropriate type of certificate authority to support certificate issuance requirements.

Plan the enrollment and distribution of certificates.
Plan for the use of smart cards for authentication.

Plan a framework for planning and implementing security.
Plan for security monitoring.
Plan a change and configuration management framework for security.

Plan a security update infrastructure. Tools might include Microsoft Baseline Security Analyzer and Microsoft Software Update Services.
Planning and Implementing an Active Directory Infrastructure
Plan a strategy for placing global catalog servers.
Evaluate network traffic considerations when placing global catalog servers.
Evaluate the need to enable universal group caching.

Implement an Active Directory directory service forest and domain structure.
Create the forest root domain.
Create a child domain.
Create and configure Application Data Partitions.
Install and configure an Active Directory domain controller.
Set an Active Directory forest and domain functional level based on requirements. 网管联盟bitsCN_com
Establish trust relationships. Types of trust relationships might include external trusts, shortcut trusts, and cross-forest trusts.

Managing and Maintaining an Active Directory Infrastructure
Manage an Active Directory forest and domain structure.
Manage trust relationships.
Manage schema modifications.
Add or remove a UPN suffix.

Restore Active Directory directory services.
Perform an authoritative restore operation.
Perform a nonauthoritative restore operation.

Planning and Implementing User, Computer, and Group Strategies
Plan a user authentication strategy.
Plan a smart card authentication strategy.
Create a password policy for domain users.

Planning and Implementing Group Policy
Plan Group Policy strategy.
Plan a Group Policy strategy by using Resultant Set of Policy (RSoP) Planning mode.
Plan a strategy for configuring the user environment by using Group Policy.
Plan a strategy for configuring the computer environment by using Group Policy. 网管网www_bitscn_com

Configure the user environment by using Group Policy.
Distribute software by using Group Policy.
Automatically enroll user certificates by using Group Policy.
Redirect folders by using Group Policy.
Configure user security settings by using Group Policy.

Managing and Maintaining Group Policy
Troubleshoot issues related to Group Policy application deployment. Tools might include RSoP and the gpresult command.
Troubleshoot the application of Group Policy security settings. Tools might include RSoP and the gpresult command.

考　　题： 50道
时　　间： 130分钟
调查时间： 50分钟（额外的，不计入正式考试时间）
考试题型： 单选题型、多选题型、活动界面题型、拖放题型、热区题型 网管u家u.bitsCN.com

由于70-296的考试范围对应的科目是70-293和70-294，所以其考试被分成了独立的2个小节，每小节单独计算时间、单独提交：

中国网管论坛bbs.bitsCN.com

• 70-293部分，26道，70分钟；
• 70-294部分，24道，60分钟；