Exam 70-640
Windows Server 2008 Active Directory, Configuring
Published: 06 March 2008
Languages: English, German, Japanese
Audiences: IT professionals
Technology: Windows Server 2008
Credit towards certification: MCP, MCTS, MCITP, MCSA
Skills measured
This exam measures your ability to accomplish the technical tasks listed below. The percentages indicate the relative weight of each major topic area in the exam. The higher the percentage, the more questions you are likely to see on that content area in the exam.
Please note that the questions may test on, but will not be limited to, the topics described in the bulleted text.
Configuring Domain Name System (DNS) for Active Directory (18%)
Configure zones
Dynamic DNS (DDNS), Non-dynamic DNS (NDDNS) and Secure Dynamic DNS (SDDNS); Time to Live (TTL); GlobalNames; Primary, Secondary, Active Directory Integrated, Stub; SOA; zone scavenging; forward lookup; reverse lookup
Configure DNS server settings
Forwarding; root hints; configure zone delegation; round robin; disable recursion; debug logging; server scavenging
Configure zone transfers and replication
Configure replication scope (forestDNSzone; domainDNSzone); incremental zone transfers; DNS Notify; secure zone transfers; configure name servers; application directory partitions
Preparation resources
Configuring zone properties
Configure a DNS server for use with Active Directory Domain Services
Modify zone transfer settings
Configuring the Active Directory infrastructure (17%)
Configure a forest or a domain
Remove a domain; perform an unattended installation; Active Directory Migration Tool (ADMT); change forest and domain functional levels; interoperability with previous versions of Active Directory; multiple user principal name (UPN) suffixes; forestprep; domainprep
Configure trusts
Forest trust; selective authentication vs. forest-wide authentication; transitive trust; external trust; shortcut trust; SID filtering
Configure sites
Create Active Directory subnets; configure site links; configure site link costing; configure sites infrastructure
Configure Active Directory replication
DFSR; one-way replication; Bridgehead server; replication scheduling; configure replication protocols; force intersite replication
Configure the global catalogue
Universal Group Membership Caching (UGMC); partial attribute set; promote to global catalogue
Configure operations masters
Seize and transfer; backup operations master; operations master placement; Schema Master; extending the schema; time service
Preparation resources
Deploying a Windows Server 2008 forest root domain
Securing domain and forest trusts
Active Directory replication tools and settings
Configuring Active Directory roles and services (14%)
Configure Active Directory Lightweight Directory Service (AD LDS)
Migration to AD LDS; configure data within AD LDS; configure an authentication server; Server Core installation
Configure Active Directory Rights Management Service (AD RMS)
Certificate request and installation; self-enrolments; delegation; create RMS templates; RMS administrative roles; RM add-on for IE
Configure the read-only domain controller (RODC)
Replication; Administrator role separation; read-only DNS; BitLocker; credential caching; password replication; syskey; read-only SYSVOL; staged install
Configure Active Directory Federation Services (AD FSv2)
Install AD FS server role; exchange certificate with AD FS agents; configure trust policies; configure user and group claim mapping; import and export trust policies
Preparation resources
AD LDS getting started step-by-step guide
Read-only domain controllers step-by-step guide
AD FS step-by-step guide
Creating and maintaining Active Directory objects (18%)
Automate creation of Active Directory accounts
Bulk import; configure the UPN; create computer, user and group accounts (scripts, import, migration); template accounts; contacts; distribution lists; offline domain join
Maintain Active Directory accounts
Manage computer accounts; configure group membership; account resets; delegation; AGDLP/AGGUDLP; deny domain local group; local vs. domain; Protected Admin; disabling accounts vs. deleting accounts; deprovisioning; contacts; creating organisational units (OUs); delegation of control; protecting AD objects from deletion; managed service accounts
Create and apply Group Policy objects (GPOs)
Enforce, OU hierarchy, block inheritance and enabling user objects; group policy processing priority; WMI; group policy filtering; group policy loopback; Group Policy Preferences (GPP)
Configure GPO templates
User rights; ADMX Central Store; administrative templates; security templates; restricted groups; security options; starter GPOs; shell access policies
Deploy and manage software by using GPOs
Publishing to users; assigning software to users; assigning to computers; software removal; software restriction policies; AppLocker
Configure account policies
Domain password policy; account lockout policy; fine-grain password policies
Configure audit policy by using GPOs
Audit logon events; audit account logon events; audit policy change; audit access privilege use; audit directory service access; audit object access; advanced audit policies; global object access auditing; “Reason for Access” reporting
Preparation resources
Active Directory how to…
Group policy planning and deployment guide
Account policies
Maintaining the Active Directory environment (18%)
Configure backup and recovery
Using Windows Server Backup; back up files and system state data to media; backup and restore by using removable media; perform an authoritative or non-authoritative restore; linked value replication; Directory Services Recovery Mode (DSRM); backup and restore GPOs; configure AD recycle bin
Perform offline maintenance
Offline defragmentation and compaction; Restartable Active Directory; Active Directory database mounting tool
Monitor Active Directory
Event viewer subscriptions; data collector sets; real-time monitoring; analysing logs; WMI queries; PowerShell
Preparation resources
Windows Server backup step-by-step guide for Windows Server 2008
Compact the directory database file (offline defragmentation)
Restartable AD DS step-by-step guide
Configuring Active Directory Certificate Services (15%)
Install Active Directory Certificate Services
Certificate authority (CA) types, including standalone, enterprise, root, and subordinate; role services; prepare for multiple-forest deployments
Configure CA server settings
Key archival; certificate database backup and restore; assigning administration roles; high-volume CAs; auditing
Manage certificate templates
Certificate template types; securing template permissions; managing different certificate template versions; key recovery agent
Manage enrolments
Network device enrolment service (NDES); auto enrolment; Web enrolment; extranet enrolment; smart card enrolment; authentication mechanism assurance; creating enrolment agents; deploying multiple-forest certificates; x.509 certificate mapping
Manage certificate revocations
Configure Online Responders; Certificate Revocation List (CRL); CRL Distribution Point (CDP); Authority Information Access (AIA)
Preparation resources
Active Directory certificate services step-by-step guide
Setting up a certification authority
Administering certificate templates
Make The Best Choice Chose – Joogate
Make yourself more valuable in today’s competitive computer industry Joogate’s preparation material includes the most excellent features, prepared by the same dedicated experts who have come together to offer an integrated solution. We provide the most excellent and simple method to pass your Microsoft MCTS 70-640 exam on the first attempt .
will prepare you for your exam effectively. 70-640 Study Guide. Your exam will download as a single 70-640 PDF or complete 70-640 preparation material as well as over +4000 other technical exam PDF and study material downloads. Forget buying your prep materials separately at three time the price of our – skip the 70-640 audio exams and select the one package that gives it all to you at your discretion: 70-640 Study Materials featuring the study material.
Joogate 70-640 Exam Prepration Tools
Joogate Microsoft MCTS preparation begins and ends with your accomplishing this credential goal. Although you will take each Microsoft MCTS online test one at a time – each one builds upon the previous. Remember that each Microsoft MCTS exam paper is built from a common certification foundation.
70-640 Exam preparation materials
Beyond knowing the answer, and actually understanding the 70-640 test questions puts you one step ahead of the test. Completely understanding a concept and reasoning behind how something works, makes your task second nature. Your 70-640 quiz will melt in your hands if you know the logic behind the concepts. Any legitimate Microsoft MCTS prep materials should enforce this style of learning – but you will be hard pressed to find more than a Microsoft MCTS practice test anywhere other than Joogate.
70-640 Exam Questions and Answers with Explanation
This is where your Microsoft MCTS 70-640 exam prep really takes off, in the testing your knowledge and ability to quickly come up with answers in the 70-640 online tests. Using MCTS 70-640 practice exams is an excellent way to increase response time and queue certain answers to common issues.
70-640 Exam Study Guides
All Microsoft MCTS online tests begin somewhere, and that is what the Microsoft MCTS training course will do for you: create a foundation to build on. Study guides are essentially a detailed Microsoft MCTS 70-640 tutorial and are great introductions to new Microsoft MCTS training courses as you advance. The content is always relevant, and compound again to make you pass your 70-640 exams on the first attempt. You will frequently find these 70-640 PDF files downloadable and can then archive or print them for extra reading or studying on-the-go.
70-640 Exam Video Training
For some, this is the best way to get the latest Microsoft MCTS 70-640 training. However you decide to learn 70-640 exam topics is up to you and your learning style. The Joogate Microsoft MCTS products and tools are designed to work well with every learning style. Give us a try and sample our work. You’ll be glad you did.
70-640 Other Features
* Realistic practice questions just like the ones found on certification exams.
* Each guide is composed from industry leading professionals real Microsoft MCTSnotes, certifying 100% brain dump free.
* Study guides and exam papers are help you prepare effectively or .
* Designed to help you complete your certificate using only
* Delivered in PDF format for easy reading and printing Joogate unique have you dancing the Microsoft MCTS jig before you know it
* MCTS 70-640 prep files are frequently updated to maintain accuracy. Your courses will always be up to date.
Get MCTS ebooks from Joogate which contain real 70-640 exam questions and answers. You WILL pass your MCTS exam on the first attempt using only Joogate’s MCTS excellent preparation tools and tutorials.
