Real MCTS/MCITP Exam 70-642 Prep Kit (eBook)

Front Cover 1
The Real MCTS/MCITP Exam 642 Network Infrastructure configuration Prep Kit 4
Copyright Page 5
Technical Editor 6
Contributing Authors 7
Contents 10
Foreword 20
What Is MCTS Exam 70-642? 20
Path to MCTS/MCITP/MS Certified Architect 21
Exam Day Experience 23
Pedagogical Elements 27
Additional Resources 28
Chapter 1: IP Addressing and Services 30
Introduction 31
Configuring IPv4 and IPv6 Addressing 31
IPv4 Quick Review 33
Configuring Local IPv4 Settings 35
Configuring IPv4 Options 37
Subnetting 37
Supernetting 41
Alternative Configuration 42
Internet Protocol Version 6 (IPv6) 42
IPv6 Address Format 42
IPv6 Address Types 43
IPv6 Autoconfiguration Options 44
IPv6 Transition Technologies 44
Configuring IPv6 Settings 45
Configuring Dynamic Host Configuration Protocol (DHCP) 47
Adding the DHCP Server Role 48
Configuring DHCP Scopes 50
Configuring IPv4 Scopes and Options 50
DHCP IPv4 Reservations 53
Configuring DHCP Scope Options 53
Server Options 53
Scope Options 54
Reservation Options 54
Setting Scope Options 55
Configuring IPv6 Scopes 56
Configuring IPv6 Scope Options 59
DHCP IPv6 Client Reservation Configuration 59
Creating New Options 60
New Options Using the Windows Interface 61
New Options Using the Command Line 61
Exclusions 61
DHCP Relay Agents 65
PXE Boot 65
DHCP and Network Access Protection (NAP) 67
DHCP Configuration via Server Core 69
Configuring Network Authentication 72
NTLMv2 and Kerberos Authentication 73
WLAN Authentication Using 802.1x and 802.3 75
Wireless and Wired Authentication Technologies 76
Implementing Secure Network Access Authentication 78
Routing and Remote Access Services (RRAS) Authentication 82
Configuring IP Security (IPsec) 84
IPSec Authentication Header (AH) 86
IPSec Encapsulating Security Payload (ESP) 87
Configuring IPSec in Windows Server 2008 88
Creating IPSec Policy 90
IPSec Using the Command Line 90
IPSec Isolation Policy 92
Windows Firewall with Advanced Security in Windows Server 2008 93
Network Perimeter Firewalls 93
Host-based Firewalls 93
New Features in Windows Firewall with Advanced Security 93
IPSec Integration 94
Support for IPv6 95
Support for Active Directory User, Computer, and Groups 95
Location-Aware Profiles 95
Detailed Rules 95
Expanded Authenticated Bypass 96
Network Location-Aware Host Firewall 96
Server and Domain Isolation 98
Server Isolation 98
Domain Isolation 98
Configuring Windows Firewall with Advanced Security 98
Incoming and Outgoing Traffic Filtering 100
Firewall Rules 100
Connection Security Rules 103
Firewall Profiles 104
IPSec Settings 105
Monitoring 109
Managing Windows Firewall with Advanced Security via Group Policy 110
Identifying Ports and Protocols 111
Command Line Tools for Windows Firewall with Advanced Security 112
Summary of Exam Objectives 114
Exam Objectives Fast Track 116
Exam Objectives Frequently Asked Questions 120
Self Test 123
Self Test Quick Answer Key 129
Chapter 2: Configuring DNS 130
Introduction 131
An Introduction to Domain Name System (DNS) 131
Understanding Public Name Resolution 134
Understanding Private Name Resolution 135
Understanding Microsoft's DNS Terminology 136
Configuring a DNS Server 137
Installing the DNS Server Role 137
Understanding Cache-Only DNS Servers 138
Configuring Root Hints 139
Adding Root Hint Records 140
Editing Root Hints Records 141
Removing Root Hints Records 142
Copying Root Hints from Another Server 143
Configuring Server-Level Forwarders 143
Configuring Conditional Forwarding 147
Creating Conditional Forwarders 147
Managing Conditional Forwarders 150
Server Core 152
Creating DNS Zones 153
Creating a Standard Primary Forward Lookup Zone 156
Creating a Secondary Forward Lookup Zone 161
Creating an Active Directory Integrated Forward Lookup Zone 163
Creating a Standard Primary Reverse Lookup Zone 166
Creating a Standard Secondary Reverse Lookup Zone 171
Creating a Zone Delegation 172
Creating a Stub Zone 175
Using the New GlobalNames Zone Feature 176
Enabling a Domain Controller to Support GlobalNames Zones 177
Creating the GlobalNames Zone 178
Configuring and Managing DNS Replication 180
Manually Initiating Replication Using DNS Manager 180
Configuring DNS Servers to Allow Zone Transfers 181
Configuring a Standard Primary Zone for Transfers 181
Configuring an AD Integrated or Secondary Zone for Transfers 183
Configuring the SOA Record 183
Creating an Application Directory Partition 186
Creating and Managing DNS Records 188
Managing Record Types 188
Creating Host Records 188
Creating A Records 188
Creating AAAA Records 190
Creating Pointer Records 192
Creating MX Records 195
Creating SRV Records 196
Creating CNAME Records 200
Creating NS Records 201
Configuring Windows Internet Name Service (WINS) and DNS Integration 203
Creating a WINS Lookup Record 203
Creating a WINS Reverse Lookup Record 206
Understanding the Dynamic Domain Name System (DDNS) 209
Configuring DDNS Aging and Scavenging 210
Enabling Automatic Scavenging 212
Initiating Manual Scavenging 213
Configuring Name Resolution for Client Computers 214
How Name Resolution Works in Windows XP and Later 216
Configuring the DNS Server List 217
Configuring the Suffix Search Order 219
Configuring the HOSTS File 220
Configuring the NetBIOS Node Type 221
Configuring the WINS Server List 224
Configuring the LMHOSTS File 225
Understanding Link-Local Multicast Name Resolution (LLMNR) 227
Managing Client Settings by Using Group Policy 228
Summary of Exam Objectives 231
Exam Objectives Fast Track 233
Exam Objectives Frequently Asked Questions 236
Self Test 239
Self Test Answer Key 243
Chapter 3: Configuring Network Access 244
Introduction 245
Windows Server 2008 and Routing 246
Window Server 2008 and Remote Access 247
Windows Server 2008 and Wireless Access 248
Configuring Routing 248
Routing Fundamentals 249
Static Routing 252
Routing Internet Protocol (RIP) 253
Open Shortest Path First (OSPF) 254
Configuring Remote Access 255
Routing and Remote Access Services (RRAS) 249
Network Policy Server and Network Access Protection 258
Dial-Up 262
Remote Access Policy 263
Network Address Translation (NAT) 265
Internet Connection Sharing (ICS) 267
Remote Access Protocols 270
Virtual Private Networks 277
Installing and Configuring a SSL VPN Server 278
Inbound/Outbound Filters 282
Configuring Remote Authentication Dial-In User Service (RADIUS) Server 283
Configuring Wireless Access 287
Set Service Identifier (SSID) 291
Wi-Fi Protected Access (WPA) 292
Wi-Fi Protected Access 2 (WPA2) 293
Ad Hoc vs. Infrastructure Mode 293
Wireless Group Policy 295
Summary of Exam Objectives 297
Exam Objectives Fast Track 297
Exam Objectives Frequently Asked Questions 301
Self Test 303
Self Test Quick Answer Key 307
Chapter 4: Configuring File and Print Services 308
Introduction 309
Configuring a File Server 309
File Share Publishing 310
Additional Role Services 313
File Screening 316
Sharing a Folder 317
Share Permissions 318
NTFS Permissions 319
Offline Files 322
Encrypting File System (EFS) 328
Working with EFS 329
Configuring Distributed File System (DFS) 334
DFS Namespaces 334
DFS Configuration and Application 335
Creating and Configuring Targets 337
DFS Replication 338
Configuring Shadow Copy Services 340
Recovering Previous Versions 341
Setting the Schedule 344
Setting Storage Locations 345
Configuring Backup and Restore 345
Backup Types 345
Backup Schedules 346
Managing Remotely 348
Restoring Data 349
Managing Disk Quotas 351
Quota by Volume or Quota by User 351
Quota Entries 353
Configuring Quotas Using FSRM 354
Quota Templates 356
Configuring and Monitoring Print Services 356
Printer Share 356
Publishing Printers to Active Directory 358
Printer Permissions 358
Deploying Printer Connections 360
Installing Printer Drivers 361
Exporting and Importing Print Queues and Printer Settings 362
Adding Counters to Reliability and Performance Monitor to Monitor Print Servers 364
Printer Pooling 366
Print Priority 367
Summary of Exam Objectives 368
Exam Objectives Fast Track 370
Exam Objectives Frequently Asked Questions 372
Self Test 377
Self Test Quick Answer Key 380
Chapter 5: Monitoring and Managing a Network Infrastructure 382
Introduction 383
Configuring Windows Server Update Services Server Settings 383
Installing Windows Server Update Services 384
Update Type Selection 396
Client Settings 397
Configuring WSUS Computer Group Assignment Settings 399
Group Policy Objects (GPOs) 401
Client Targeting 404
Software Updates 404
Test and Approval 407
Disconnected Networks 409
Capturing Performance Data 412
Data Collector Sets 412
Performance Monitor 423
Reliability Monitor 427
Monitoring the System Stability Index 428
Monitoring Event Logs 429
Custom Views 429
Application and Services Logs 432
Admin Logs 432
Operational Logs 432
Analytic Logs 432
Debug Logs 432
Subscriptions 433
DNS Event Log 436
Gathering Network Data 436
Simple Network Management Protocol (SNMP) 436
Baseline Security Analyzer 441
Network Monitor 444
Summary of Exam Objectives 448
Exam Objectives Fast Track 448
Exam Objectives Frequently Asked Questions 450
Self Test 451
Self Test Quick Answer Key 456
Chapter 6: Network Access Protection 458
Introduction 459
Working with NAP 461
Network Layer Protection 461
NAP Clients 462
NAP Enforcement Points 463
Active Directory Domain Services 464
NAP Health Policy Server 464
Health Requirement Server 464
Restricted Network 465
Software Policy Validation 466
DHCP Enforcement 466
VPN Enforcement 472
Communication Process with VPN Client and NAP 472
Configuring NAP Health Policies 476
Connection Request Policies 477
Network Policies 478
Health Policies 479
Network Access Protection Settings 481
IPsec Enforcement 482
Secure Network 483
Boundary Network 483
Restricted Network 484
Flexible Host Isolation 484
802.1x Enforcement 487
Summary of Exam Objectives 491
Exam Objectives Fast Track 492
Exam Objectives Frequently Asked Questions 494
Self Test 496
Self Test Quick Answer Key 500
Appendix: Self Test Appendix 502
Chapter 1: IP Addressing and Services 503
Chapter 2: Configuring DNS 513
Chapter 3: Configuring Network Access 519
Chapter 4: Configuring File and Print Services 524
Chapter 5: Monitoring andManaging a Network Infrastructure 529
Chapter 6: Network Access Protection 538
Index 544