Exam 70-640
TS: Windows Server 2008 Active Directory, Configuring
Published: March 06, 2008
Language(s): English, French, German, Italian, Japanese, Korean, Russian,
Spanish, Portuguese(Brazil), Chinese(Simplified)
Audience(s): IT Professionals
Technology: Windows Server 2008
Type: Proctored Exam
About this ExamThis Technology Specialist (TS) exam, Exam 70-640: TS:
Windows Server 2008 Active Directory, Configuring, became available in March
2008. This exam is available in English, Brazilian Portuguese, Chinese
[Simplified], French, Japanese, Korean, Russian, and Spanish.
Audience Profile
The Microsoft Certified Technology Specialist (MCTS) on Windows Server 2008
credential is intended for IT professionals who work in the complex computing
environment of medium-sized to large companies. The MCTS candidate should have a
minimum of one year of experience implementing and administering a network
operating system in an environment that has the following characteristics:
* 250 to 5,000 or more users
* Three or more physical locations
* Three or more domain controllers
* Network services and resources such as messaging, a database, file and print,
a proxy server, a firewall, the Internet, an intranet, remote access, and client
computer management
* Connectivity requirements, such as connecting branch offices and individual
users in remote locations to the corporate network and connecting corporate
networks to the Internet
Credit Toward CertificationWhen you pass Exam 70-640: TS: Windows Server 2008
Active Directory, Configuring, you complete the requirements for the following
certification(s):
* Microsoft Certified Technology Specialist (MCTS): Windows Server 2008 Active
Directory, Configuration
Exam 70-640: TS: Windows Server 2008 Active Directory, Configuring: counts as
credit toward the following certification(s):
* Microsoft Certified IT Professional (MCITP): Enterprise Administrator
* Microsoft Certified IT Professional (MCITP): Server Administrator
Note This preparation guide is subject to change at any time without prior
notice and at the sole discretion of Microsoft. Microsoft exams might include
adaptive testing technology and simulation items. Microsoft does not identify
the format in which exams are presented. Please use this preparation guide to
prepare for the exam, regardless of its format.
Skills Being MeasuredThis exam measures your ability to accomplish the technical
tasks listed below.The percentages indicate the relative weight of each major
topic area on the exam.
Configuring Domain Name System (DNS) for Active Directory (16 percent)
* Configure zones.
* May include but is not limited to: Dynamic DNS (DDNS), Non-dynamic DNS (NDDNS),
and Secure Dynamic DNS (SDDNS), Time to Live (TTL), GlobalNames,
Primary, Secondary, Active Directory Integrated, Stub, SOA, zone scavenging,
forward lookup, reverse lookup
Preparation Tools and ResourcesTo help you prepare for this exam, Microsoft
Learning recommends that you have hands-on experience with the product and that
you use the following training resources. These training resources do not
necessarily cover all of the topics listed in the "Skills Measured" tab.
Classroom Training
* Course 6425: Configuring and Troubleshooting Windows Server 2008 Active
Directory Domain Services (five days)
* Course 6426: Configuring and Troubleshooting Identity and Access Solutions
with Windows Server 2008 Active Directory (three days)
Microsoft E-Learning
* Collection 6424: Fundamentals of Windows Server 2008 Active Directory (18
hours) (available late 2008)
* Collection 6425AE: Configuring Windows Server 2008 Active Directory Domain
Services (20 hours) (available late 2008)
Microsoft Press Books
* MCTS Self-Paced Training Kit (Exam 70-640): Configuring Windows Server 2008
Active Directory
* MCITP Self-Paced Training Kit (Exams 70-640, 70-642, 70-643, 70-647): Windows
Server 2008 Enterprise Administrator Core Requirements
* MCITP Self-Paced Training Kit (Exams 70-640, 70-642, 70-646): Server
Administrator Core Requirements
Practice Tests
* MeasureUp(Measureup.com)
* Self Test Software(Selftestsoftware.com)
Microsoft Online Resources
* Learning Plan: Get started with a step-by-step study guide that is based
on recommended resources for this exam.
* Windows Server 2008 – Learning Portal: Find special offers and information on
training and certification.
* Product information: Visit the Windows Server 2008 Web site for detailed
product information.
* TechNet: Designed for IT professionals, this site includes how-to
instructions, best practices, downloads, technical resources, newsgroups, and
chats.
* MSDN: Designed for developers, the Microsoft Developer Network (MSDN) features
code samples, technical articles, downloads, newsgroups, and chats.
* Microsoft Learning Community: Join newsgroups and visit community forums to
connect with your peers for suggestions on training resources and advice on your
certification path and studies.
* Configure DNS server settings.
* May include but is not limited to: forwarding, root hints, configure zone
delegation, round robin, disable recursion, debug logging, server scavenging
* Configure zone transfers and replication.
* May include but is not limited to: configure replication scope (forestDNSzone,
domainDNSzone), incremental zone transfers, DNS Notify, secure zone transfers,
configure name servers, application directory partitions
Configuring the Active Directory infrastructure (25 percent)
* Configure a forest or a domain.
* May include but is not limited to: remove a domain, perform an unattended
installation, Active Directory Migration Tool (ADMT) v3 (pruning and grafting),
raise forest and domain functional levels, interoperability with previous
versions of Active Directory, alternate user principal name (UPN) suffix,
forestprep, domainprep
* Configure trusts.
* May include but is not limited to: forest trust, selective authentication
versus forest-wide authentication, transitive trust, external trust, shortcut
trust, SID filtering
* Configure sites.
* May include but is not limited to: create Active Directory subnets, configure
site links, configure site link costing, configure sites infrastructure
* Configure Active Directory replication.
* May include but is not limited to: Distributed File System, one-way
replication, bridgehead server, replication scheduling, configure replication
protocols, force intersite replication
* Configure the global catalog.
* May include but is not limited to: Universal Group Membership Caching (UGMC),
partial attribute set, promote to global catalog
* Configure operations masters.
* May include but is not limited to: seize and transfer, backup operations
master, operations master placement, Schema Master, extending the schema, time
service
Configuring additional Active Directory server roles (9 percent)
* Configure Active Directory Lightweight Directory Service (AD LDS).
* May include but is not limited to: migration to AD LDS, configure data within
AD LDS, configure an authentication server, server core, Windows Server 2008
Hyper-V
* Configure Active Directory Rights Management Service (AD RMS).
* May include but is not limited to: certificate request and installation,
self-enrollments, delegation, Active Directory Metadirectory Services (AD MDS),
Windows Server virtualization
* Configure the read-only domain controller (RODC).
* May include but is not limited to: unidirectional replication, Administrator
role separation, read-only DNS, BitLocker, credential caching, password
replication, syskey, Windows Server virtualization
* Configure Active Directory Federation Services (AD FS).
* May include but is not limited to: install AD FS server role, exchange
certificate with AD FS agents, configure trust policies, configure user and
group claim mapping, Windows Server virtualization
MCITP
Training Get unlimited access to all exams
MCITP Certification
Creating and maintaining Active Directory objects (24 percent)
* Automate creation of Active Directory accounts.
* May include but is not limited to: bulk import, configure the UPN, create
computer, user, and group accounts (scripts, import, migration), template
accounts, contacts, distribution lists
* Maintain Active Directory accounts.
* May include but is not limited to: configure group membership, account resets,
delegation, AGDLP/AGGUDLP, deny domain local group, local versus domain,
Protected Admin, disabling accounts versus deleting accounts, deprovisioning,
contacts, creating organizational units (OUs), delegation of control
* Create and apply Group Policy objects (GPOs).
* May include but is not limited to: enforce, OU hierarchy, block inheritance,
and enabling user objects, Group Policy processing priority, WMI, Group Policy
filtering, Group Policy loopback
* Configure GPO templates.
* May include but is not limited to: user rights, ADMX Central Store,
administrative templates, security templates, restricted groups, security
options, starter GPOs, shell access policies
* Configure GPO templates.
* May include but is not limited to: user rights, ADMX Central Store,
administrative templates, security templates, restricted groups, security
options, starter GPOs, shell access policies
* Configure software deployment GPOs.
* May include but is not limited to: publishing to users, assigning software to
users, assigning to computers, software removal
* Configure account policies.
* May include but is not limited to: domain password policy, account lockout
policy, fine-grain password policies
* Configure audit policy by using GPOs.
* May include but is not limited to: audit logon events, audit account logon
events, audit policy change, audit access privilege use, audit directory service
access, audit object access
Maintaining the Active Directory environment (13 percent)
* Configure backup and recovery.
* May include but is not limited to: using Windows Server Backup, backup files
and system state data to media, backup and restore by using removable media,
perform an authoritative or non-authoritative Active Directory restore, linked
value replication, Directory Services Recovery Mode (DSRM) (reset admin
password), back up and restore GPOs
* Perform offline maintenance.
* May include but is not limited to: offline defragmentation and compaction,
Restartable Active Directory, Active Directory database storage allocation
* Monitor Active Directory.
* May include but is not limited to: Network Monitor, Task Manager, Event
Viewer, ReplMon, RepAdmin, Windows System Resource Manager, Reliability and
Performance Monitor, Server Performance Advisor, RSOP
Configuring Active Directory Certificate Services (13 percent)
* Install Active Directory Certificate Services.
* May include but is not limited to: standalone versus enterprise, CA
hierarchies—root versus subordinate, certificate requests, certificate practice
statement
* Configure CA server settings.
* May include but is not limited to: key archival, certificate database backup
and restore, assigning administration roles
* Manage certificate templates.
* May include but is not limited to: certificate template types, securing
template permissions, managing different certificate template versions, key
recovery agent
* Manage enrollments.
* May include but is not limited to: network device enrollment service (NDES),
autoenrollment, Web enrollment, smart card enrollment, creating enrollment
agents
* Manage certificate revocations.
* May include but is not limited to: configure Online Responders, Certificate
Revocation List (CRL), CRL Distribution Point (CDP), Authority Information
Access (AIA)
MCITP Training –
MCITP Certification –
MCITP Exams