70-299: Implementing And Administering Security In A Windows Server 2003 Network

By Author: CompTIA A+ certification,A+ Exams,comptia
Total Articles: 30
Comment this article

This test prepares you for various job roles, which include: 70-270 systems engineer, systems administrator, network administrator, information systems administrator, technical support engineers, systems analysts, network analysts and technical consultants. If you would like to know more about the Windows 2003 Design Security 70-298 test please visit the Microsoft website.

The test is appropriate for you if you are working or want to work in a typically complex computing environment of medium-to-large organizations. There are no specific prerequisites for this test, although it is recommended that you should have at least one year of experience in implementing and administering network operating systems in network environments.

This test consists of Multiple Choice, Hot Area, Drag and Drop, Build list and reorder, and Build a Tree questions. The test can be adaptive and simulation questions might be asked. This test includes Case study type questions. You will be required to attempt approximately 50 questions in 150 minutes. To pass, you need a score of 700.

Tip: ...
... Only one password policy using Group Policy Objects can be configured per domain.
Gpupdate replaces Secedit /refreshpolicy in Windows Server 2003. Gpupdate can be used to force group policy settings for immediate compliance and recover a computer with incorrect settings applied. To troubleshoot a computer that has been locked down incorrectly to the point of where you can't log on with the domain MCSE Certification administrator account, restart the computer in Safe Mode, log on as the local administrator, run gpupdate, restart the computer in normal mode, and then log on normally.
Tip: Group policy loopback processing mode can be used to override user-based settings on a computer with a computer policy.
Secedit at the command line, and the Security Configuration and Analysis snap-in can be used in Windows Server 2003 to analyze, configure, and validate computer security configuration settings.
Implementing, Managing, and Troubleshooting Patch Management Infrastructure
Topics included: planning the deployment of service packs and hotfixes, verifying with MBSA, to SUS deployment and administration. This is certainly a hot topic for many of us: patch management. Unless you're an administrator who has been hiding in a server closet for the past 24 months, you've no doubt had your challenges with patch management — a nightmare if not done correctly. Patch management is one of the key aspects of securing a network.
In the exam world — which can be completely different from the real world- patch management of Windows computers must be done with Microsoft's free tools: the Microsoft Baseline Security Analyzer and Software Update Services. MBSA is a network-based scanning tool that runs on Windows 2000, XP, and 2003 operating systems; it looks for missing patches and security updates on all flavors of Windows down to Windows NT 4.0. It also supports scanning of IIS, SQL, and Exchange servers. MBSA comes in both a GUI wizard version and a command line MCSE Exam version called mbsacli.exe.