Звезды и С. Учебный центр Citrix и Microsoft

About this ExamExam 70-648 is an upgrade exam that is a composite of two stand-alone exams: 70-640 and 70-642. Exam 70-648 validates skills related to the core technology features and functionality of Windows Server 2008, from the existing knowledge base of a Microsoft Certified Systems Administrator (MCSA) on Windows Server 2003.

Exam Topics Covered

Exam 70-648 is an upgrade exam that is a composite of two stand-alone exams: 70-640 and 70-642. Exam 70-648 validates skills related to the core technology features and functionality of Windows Server 2008, from the existing knowledge base of a Microsoft Certified Systems Administrator (MCSA) on Windows Server 2003. The key topics for each source exam, plus the percentage of material per topic for each exam, are noted in the following lists. See the "Skills measured" section of this page to learn about the testing objectives of Exam 70-648.

Exam 70-640: TS: Windows Server 2008 Active Directory, Configuring

Configuring Additional Active Directory Server Roles (11 percent)
Maintaining the Active Directory Environment (15 percent)
Configuring Active Directory Certificate Services (14 percent)

Exam 70-642: TS: Windows Server 2008 Network Infrastructure, Configuring

Configuring IP Addressing and Services (24 percent)
Configuring Network Access (22 percent)
Monitoring and Managing a Network Infrastructure (14 percent)

Audience Profile

Exam 70-648 is intended for IT professionals who currently hold an MCSA on Windows Server 2003 certification and work in the complex computing environment of mid-sized to large companies. The MCSA on Windows Server 2003 certification is a prerequisite for this exam. Without it, your transcript will show that you passed the exam but will not show credit for the resulting certifications.

You should have at least one year of experience implementing and administering a network operating system in an environment that has the following characteristics:

250 to 5,000 or more users
Three or more physical locations
Three or more domain controllers
Network services and resources such as messaging, a database, file and print, a proxy server, a firewall, the Internet, an intranet, remote access, and client computer management
Connectivity requirements such as connecting branch offices and individual users in remote locations to the corporate network and connecting corporate networks to the Internet

Credit Toward CertificationWhen you pass Exam 70-648: TS: Upgrading from Windows Server 2003 MCSA to, Windows Server 2008, Technology Specializations, you complete the requirements for the following certification(s):

Exam 70-648: TS: Upgrading from Windows Server 2003 MCSA to, Windows Server 2008, Technology Specializations: counts as credit toward the following certification(s):

Note This preparation guide is subject to change at any time without prior notice and at the sole discretion of Microsoft. Microsoft exams might include adaptive testing technology and simulation items. Microsoft does not identify the format in which exams are presented. Please use this preparation guide to prepare for the exam, regardless of its format.

Skills Being MeasuredThis exam measures your ability to accomplish the technical tasks listed below.The percentages indicate the relative weight of each major topic area on the exam.

Configuring Additional Active Directory Server Roles

Configure Active Directory Lightweight Directory Service (AD LDS). May include but is not limited to: migration to AD LDS, configuring data within AD LDS, configuring an authentication server, server core, Windows Server 2008 Hyper-V
Configure Active Directory Rights Management Service (AD RMS). May include but is not limited to: certificate request and installation, self-enrollments, delegation, Active Directory Metadirectory Services (AD MDS), Windows Server virtualization
Configure the read-only domain controller (RODC). May include but is not limited to: unidirectional replication, Administrator role separation, read-only DNS, BitLocker, credential caching, password replication, syskey, Windows Server virtualization
Configure Active Directory Federation Services (AD FS). May include but is not limited to: install AD FS server role, exchange certificate with AD FS agents, configuring trust policies, configuring user and group claim mapping, Windows Server virtualization

Maintaining the Active Directory Environment

Configure backup and recovery. May include but is not limited to: using Windows Server Backup, backup files and system state data to media, backup and restore by using removable media, performing an authoritative or non-authoritative Active Directory restore, linked value replication, Directory Services Recovery Mode (DSRM) (reset admin password), backing up and restoring GPOs
Perform offline maintenance. May include but is not limited to: offline defragmentation and compaction, Restartable Active Directory, Active Directory database storage allocation
Monitor Active Directory. May include but is not limited to: Network Monitor, Task Manager, Event Viewer, ReplMon, RepAdmin, Windows System Resource Manager, Reliability and Performance Monitor, Server Performance Advisor, RSOP

Configuring Active Directory Certificate Services

Install Active Directory Certificate Services. May include but is not limited to: standalone versus enterprise, CA hierarchies—root versus subordinate, certificate requests, certificate practice statement
Configure CA server settings. May include but is not limited to: key archival, certificate database backup and restore, assigning administration roles
Manage certificate templates. May include but is not limited to: certificate template types, securing template permissions, managing different certificate template versions, key recovery agent
Manage enrollments. May include but is not limited to: network device enrollment service (NDES), autoenrollment, Web enrollment, smart card enrollment, creating enrollment agents
Manage certificate revocations. May include but is not limited to: configuring Online Responders, Certificate Revocation List (CRL), CRL Distribution Point (CDP), Authority Information Access (AIA)

Configuring IP Addressing and Services

Configure IPv4 and IPv6 addressing. May include but is not limited to: configuring IP options, subnetting, supernetting, alternative configuration
Configure Dynamic Host Configuration Protocol (DHCP). May include but is not limited to: DHCP options, creating new options, PXE boot, default user profiles, DHCP relay agents, exclusions, authorizing server in Active Directory, scopes, server core, Windows Server Hyper-V
Configure routing. May include but is not limited to: static routing, persistent routing, Routing Internet Protocol (RIP), Open Shortest Path First (OSPF)
Configure IPsec. May include but is not limited to: creating IPsec policy, IPsec Authentication Header (AH), IPsec Encapsulating Security Payload (ESP)

Configuring Network Access

Configure remote access. May include but is not limited to: dial-up, Remote Access Policy, Network Address Translation (NAT), Internet Connection Sharing (ICS), VPN, Routing and Remote Access Services (RRAS), inbound/outbound filters, configuring Remote Authentication Dial-In User Service (RADIUS) server, configuring RADIUS proxy, remote access protocols, Connection Manager
Configure Network Access Protection (NAP). May include but is not limited to: network layer protection, DHCP enforcement, VPN enforcement, configuring NAP health policies, IPsec enforcement, 802.1x enforcement, flexible host isolation
Configure network authentication. May include but is not limited to: LAN authentication by using NTLMv2 and Kerberos, WLAN authentication by using 802.1x, RAS authentication by using MS-CHAP, MS-CHAP v2, and EAP
Configure wireless access. May include but is not limited to: Set Service Identifier (SSID), Wired Equivalent Privacy (WEP), Wi-Fi Protected Access (WPA), Wi-Fi Protected Access 2 (WPA2), ad hoc versus infrastructure mode, group policy for wireless
Configure firewall settings. May include but is not limited to: incoming and outgoing traffic filtering, Active Directory account integration, identifying ports and protocols, Windows Firewall versus Windows Firewall with Advanced Security, configuring firewall by using group policy, isolation policy

Monitoring and Managing a Network Infrastructure

Configure Windows Software Update Services (WSUS) server settings. May include but is not limited to: updating type selection, client settings, Group Policy object (GPO), client targeting, software updates, test and approval, disconnected networks
Capture performance data. May include but is not limited to: Data Collector Sets, Performance Monitor, Reliability Monitor, monitoring System Stability Index
Monitor event logs. May include but is not limited to: custom views, application and services logs, subscriptions, DNS log
Gather network data. May include but is not limited to: Simple Network Management Protocol (SNMP), Baseline Security Analyzer, Network Monitor

Preparation Tools and ResourcesTo help you prepare for this exam, Microsoft Learning recommends that you have hands-on experience with the product and that you use the following training resources. These training resources do not necessarily cover all of the topics listed in the "Skills Measured" tab.

Classroom Training

6416D: Updating your Network Infrastructure and Active Directory Technology Skills to Windows Server 2008 (5 Days)
6416C: Updating your Network Infrastructure and Active Directory Technology Skills to Windows Server 2008 (5 Days)

Microsoft E-Learning

Microsoft Press Books

MCTS Self-Paced Training Kit (Exams 70-648 and 70-649): Transitioning your MCSA/MCSE to Windows Server 2008 Technology Specialist

Practice Tests

MeasureUp(Measureup.com)
Self Test Software(Selftestsoftware.com)

Microsoft Online Resources

Learning Plan: Get started by creating a step-by-step study guide that is based on recommended resources for this exam.
Windows Server 2008 – Learning Portal: Find special offers and information on training and certification.
Product information: Visit the Windows Server 2008 Web site for detailed product information.
Microsoft Learning Community: Join newsgroups and visit community forums to connect with your peers for suggestions on training resources and advice on your certification path and studies.
TechNet: Designed for IT professionals, this site includes how-to instructions, best practices, downloads, technical resources, newsgroups, and chats.
MSDN: Designed for developers, the Microsoft Developer Network (MSDN) features code samples, technical articles, downloads, newsgroups, and chats.

Тест №70-648: TS: Upgrading Your MCSA on Windows Server 2003 to Windows Server 2008, Technology Specialist