Exam 70-647 - Windows Server 2008, Enterprise Administrator
Skills measured
This exam measures your ability to accomplish the technical tasks listed below. The percentages indicate the relative weight of each major topic area on the exam. The higher the percentage, the more questions you are likely to see on that content area on the exam.
Please note that the questions may test on, but will not be limited to, the topics described in the bulleted text.
Planning network and application services (23%)
- Plan for name resolution and IP addressing
- Internal and external naming strategy, naming resolution support for legacy clients, naming resolution for directory services, IP addressing scheme, TCP/IP version coexistence
- Design for network access
- Network access policies, remote access strategy, perimeter networks, server and domain isolation
- Plan for application delivery
- Application virtualization, presentation virtualization, locally installed software, Web-based applications
- Plan for Remote Desktop Services
- Terminal Services licensing, Remote Desktop Services infrastructure
Designing core identity and access management components (25%)
- Design Active Directory forests and domains
- Structure, forest and domain functional levels, intra-organizational authorization and authentication, schema modifications
- Design the Active Directory physical topology
- Placement of servers, site and replication topology, printer location policies
- Design the Active Directory administrative model
- Delegation, group strategy, compliance auditing, group administration, organizational structure
- Design the enterprise-level group policy strategy
- Group policy hierarchy and scope filtering, control device installation, authentication and authorization
Designing support identity and access management components (29%)
- Plan for domain or forest migration, upgrade, and restructuring
- Cross-forest authentication, backward compatibility, object migration, migration planning, implementation planning, environment preparation
- Design the branch office deployment
- Authentication strategy, server security
- Design and implement public key infrastructure
- Certificate services, PKI operations and maintenance, certificate life cycle management
- Plan for interoperability
- Inter-organizational authorization and authentication, application authentication interoperability, cross-platform interoperability
Designing for business continuity and data availability (23%)
- Plan for business continuity
- Service availability, directory service recovery
- Design for software updates and compliance management
- Patch management and patch management compliance, Microsoft Update and Windows Update, security baselines, system health models
- Design the operating system virtualization strategy
- Server consolidation, application compatibility, virtualization management, placement of servers
- Design for data management and data access
- Data security, data accessibility and redundancy, data collaboration