NOTE: This page is outdated, and is included here only for historical reasons.
Please visit my Windows Server 2008 page for an updated list of skills.
As you know, I like to combine the “skills being measured” section of the Preparation Guides in order to lead me (and you) to information that may be contained in study guides for exams other than the one you are currently studying for, especially the upgrade exams.
Usually, the upgrade exams include several regular exams put together.
In the 70-64x series, Microsoft made some errors. For example, both the 70-648 and 70-649 state that the “Deploying Servers” section goes with 70-642, when in fact it goes with 70-643. There is also not a one-to-one correspondence between the 70-640/70-642/70-643 and the 70-648/70-649. I have tried to combine these as best as I can, but I would recommend that you consult the individual Preparation guides as well:
W1. Configuring IP Addressing and Services (24 percent) [Exam 70-642 only]
W1.1. Configure IPv4 and IPv6 addressing. -- May include but is not limited to: configure IP options; subnetting; supernetting; alternative configuration [Exam 70-642, 70-648, and 70-649 only]
W1.2. Configure Dynamic Host Configuration Protocol (DHCP). -- May include but is not limited to: DHCP options; creating new options; PXE boot; default user profiles; DHCP relay agents; exclusions; authorize server in Active Directory; scopes; server core; Windows Server Hyper-V [Exam 70-642, 70-648, and 70-649 only]
W1.3. Configure routing. -- May include but is not limited to: static routing; persistent routing; Routing Internet Protocol (RIP); Open Shortest Path First (OSPF) [Exam 70-642, 70-648, and 70-649 only]
W1.4. Configure IPsec. -- May include but is not limited to: create IPsec policy; IPsec Authentication Header (AH); IPsec Encapsulating Security Payload (ESP) [Exam 70-642 only]
W2. Configuring Name Resolution (27 percent) [Exam 70-642 and 70-648 only. (70-648 reads “Configuring the Domain Name System (DNS)”)]
W2.1. Configure a Domain Name System (DNS) server. -- May include but is not limited to: conditional forwarding; external forwarders; root hints; cache-only; server core; WINS and DNS integration; Windows Server virtualization [Exam 70-642 and 70-648 only. (70-648 reads “Configure DHCP and WINS for DNS”)]
W2.2. Configure DNS zones. -- May include but is not limited to: DNS Refresh no-refresh, intervals; DNS listserv address (NSLOOKUP); primary/secondary zones; Active Directory integration; Dynamic Domain Name System (DDNS); GlobalNames; SOA refresh [Exam 70-642 and 70-648 only (70-648 reads “Configure zones.”)]
W2.3. Configure DNS records. -- May include but is not limited to: record types; host; pointer; MX; SRV; NS; dynamic updates; Time to Live (TTL) [Exam 70-642 and 70-648 only. (70-648 reads “Configure DNS client settings.”)]
W2.4. Configure DNS replication. -- May include but is not limited to: DNS secondary zones; DNS stub zones; DNS scavenging interval; replication scope [Exam 70-642 and 70-648 only. 70-648 reads “Configure zone resolution”)]
W2.5. Configure name resolution for client computers. -- May include but is not limited to: DNS and WINS integration; configuring HOSTS file; LMHOSTS; node type; Link-Local Multicast Name Resolution (LLMNR); broadcasting; resolver cache; DNS Server list; Suffix Search order; manage client settings by using group policy [Exam 70-642 only]
W3. Configuring Network Access (22 percent) [Exam 70-642 (49%), 70-648, and 70-649 only]
W3.1. Configure remote access. -- May include but is not limited to: dial-up; Remote Access Policy; Network Address Translation (NAT); Internet Connection Sharing (ICS); VPN; Routing and Remote Access Services (RRAS); inbound/outbound filters; configure Remote Authentication Dial-In User Service (RADIUS) server; configure RADIUS proxy; remote access protocols; Connection Manager [Exam 70-642, 70-648, and 70-649 only]
W3.2. Configure Network Access Protection (NAP). -- May include but is not limited to: network layer protection; DHCP enforcement; VPN enforcement; configure NAP health policies; IPsec enforcement; 802.1x enforcement; flexible host isolation [Exam 70-642, 70-648, and 70-649 only (70-648 and 70-649 read “Configure Network Access Protection (NAP) Components”]
W3.3. Configure network authentication. -- May include but is not limited to: LAN authentication by using NTLMv2 and Kerberos; WLAN authentication by using 802.1x; RAS authentication by using MS-CHAP, MS-CHAP v2, and EAP [Exam 70-642, 70-648, and 70-649 only]
W3.4. Configure data transmission protocols. [Exams 70-648, 70-649 only]
W3.5. Configure wireless access. -- May include but is not limited to: Set Service Identifier (SSID); Wired Equivalent Privacy (WEP); Wi-Fi Protected Access (WPA); Wi-Fi Protected Access 2 (WPA2); ad hoc vs. infrastructure mode; group policy for wireless [Exam 70-642, 70-648, and 70-649 only]
W3.6. Configure certificate services. [Exams 70-648, 70-649 only]
W3.7. Configure firewall settings. -- May include but is not limited to: incoming and outgoing traffic filtering; Active Directory account integration; identify ports and protocols; Microsoft Windows Firewall vs. Windows Firewall with Advanced Security; configure firewall by using group policy; isolation policy [Exam 70-642 only]
W4. Configuring File and Print Services (13 percent) [Exam 70-642 only]
W4.1. Configure a file server. -- May include but is not limited to: file share publishing; Offline Files; share permissions; NTFS permissions; encrypting file system (EFS) [Exam 70-642 only]
W4.2. Configure Distributed File System (DFS). -- May include but is not limited to: DFS namespace; DFS configuration and application; creating and configuring targets; DFS replication [Exam 70-642 only]
W4.3. Configure shadow copy services. -- May include but is not limited to: recover previous versions; set schedule; set storage locations [Exam 70-642 only]
W4.4. Configure backup and restore. -- May include but is not limited to: backup types; backup schedules; managing remotely; restoring data [Exam 70-642 and 70-649 only. (70-649 reads “Configure backup.”)]
W4.5. Manage disk quotas. -- May include but is not limited to: quota by volume or quota by user; quota entries; quota templates [Exam 70-642 only]
W4.6. Configure and monitor print services. -- May include but is not limited to: printer share; publish printers to Active Directory; printer permissions; deploy printer connections; install printer drivers; export and import print queues and printer settings; add counters to Reliability and Performance Monitor to monitor print servers; print pooling; print priority [Exam 70-642 only]
W5. Monitoring and Managing a Network Infrastructure (14 percent) [Exam 70-642 only]
W5.1. Configure Windows Server Update Services (WSUS) server settings. -- May include but is not limited to: update type selection; client settings; Group Policy object (GPO); client targeting; software updates; test and approval; disconnected networks [Exam 70-642 only]
W5.2. Capture performance data. -- May include but is not limited to: Data Collector Sets; Performance Monitor; Reliability Monitor; monitoring System Stability Index [Exam 70-642 only]
W5.3. Monitor event logs. -- May include but is not limited to: custom views; application and services logs; subscriptions; DNS log [Exam 70-642 only]
W5.4. Gather network data. -- May include but is not limited to: Simple Network Management Protocol (SNMP); Baseline Security Analyzer; Network Monitor [Exam 70-642 only]
W6. Deploying Servers (23 percent) [Exam 70-643 only] [Exams 70-642 (51%), 70-648, 70-649: Deploying and Monitoring Servers]
W6.1. Deploy images by using Windows Deployment Services. -- May include but is not limited to: Install from media (IFM); configure Windows Deployment Services; capture Windows Deployment Services images; deploy Windows Deployment Services images; server core [Exam 70-643, 70-648, and 70-649 only. (70-648 and 70-649 separate out “Capture WDS images” and “Deploy WDS images” into separate skills)]
W6.2. Configure Microsoft Windows activation. -- May include but is not limited to: install a KMS server; create a DNS SRV record; replicate volume license data [Exam 70-643, 70-648, and 70-649 only. (70-648 and 70-649 read “Configure Windows activation”)]
W6.3. Configure Windows Server Hyper-V and virtual machines. -- May include but is not limited to: virtual networking; virtualization hardware requirements; Virtual Hard Disks; migrate from physical to virtual; VM additions; backup; optimization; server core [Exam 70-643, 70-648, and 70-649 only (70-648 and 70-649 read “Configure virtual machines”)]
W6.4. Configure high availability. -- May include but is not limited to: failover clustering; Network Load Balancing; hardware redundancy [Exam 70-643 only]
W6.5. Configure storage. -- May include but is not limited to: RAID types; Virtual Disk Specification (VDS) API; Network Attached Storage; iSCSI and fibre channel Storage Area Networks; mount points [Exam 70-643 only]
W6.6. Configure Virtual Server settings. [Exams 70-648, 70-649 only]
W6.7. Install Windows Server Enterprise. [Exams 70-648, 70-649 only]
W6.8. Install server core. [Exams 70-648, 70-649 only]
W7. Configuring Terminal Services (31 percent) [Exam 70-643 only] [Exams 70-643 (32%), 70-649 only]
W7.1. Configure Windows Server 2008 Terminal Services RemoteApp (TS RemoteApp). -- May include but is not limited to: Configuring Terminal Services Web Access; configuring Terminal Services Remote Desktop Web Connection [Exam 70-643 and 70-649 only. (70-649 reads “Configure Terminal Services Remote Programs”)]
W7.2 Configure Terminal Services Gateway. -- May include but is not limited to: certificate configuration; Terminal Services Gateway Manager (TS Gateway Manager); specifying resources that users can access through TS Gateway by using Terminal Services resource authorization policy (TS RAP) and Terminal Services connection authorization policy (TS CAP); Terminal Services group policy [Exam 70-643 and 70-649 only]
W7.3. Configure Terminal Services load balancing. -- May include but is not limited to: Terminal Services Session Broker redirection modes; DNS registration; setting through group policy [Exam 70-643 and 70-649 only]
W7.4. Configure and monitor Terminal Services resources. -- May include but is not limited to: allocate resources by using Windows Server Resource Manager; configure application logging [Exam 70-643 and 70-649 only (70-649 reads “Configure resource allocations for Terminal Services”)]
W7.5. Configure Terminal Services licensing. -- May include but is not limited to: deploy licensing server; connectivity between terminal servers and Terminal Services licensing server; recovering Terminal Services licensing server; managing Terminal Services client access licenses (TS CALs) [Exam 70-643 and 70-649 only]
W7.6. Configure Terminal Services client connections. -- May include but is not limited to: connecting local devices and resources to a session; Terminal Services profiles; Terminal Services home folders; Remote Desktop Connection (RDC); single sign-on; Remote Desktop Snap-In; MSTSC.exe [Exam 70-643 and 70-649 only]
W7.7. Configure Terminal Services server options. -- May include but is not limited to: logoff; disconnect; reset; remote control; monitor; Remote Desktop Protocol (RDP) permissions; connection limits; session time limits; managing by using GPOs; viewing processes; session permissions; display data prioritization [Exam 70-643 and 70-649 only]
W8. Configuring a Web Services Infrastructure (30 percent) [Exam 70-643 only] [Exams 70-643 (30%), 70-649 only]
W8.1. Configure Web applications. -- May include but is not limited to: directory-dependent; publishing; URL-specified configuration; Microsoft .NET components, for example, .NET and aspx; configure application pools [Exam 70-643 and 70-649 only. (70-649 also has the skill “Configure Application Pools”)]
W8.2. Manage Web sites. -- May include but is not limited to: migrate sites and Web applications; publish IIS Web sites; configure virtual directories [Exam 70-643 and 70-649 only. (70-649 reads “Publish IIS Web sites”)]
W8.3 Configure a File Transfer Protocol (FTP) server. -- May include but is not limited to: configure for extranet users; configure permissions [Exam 70-643 and 70-649 only]
W8.4. Configure Simple Mail Transfer Protocol (SMTP). -- May include but is not limited to: setting up smart hosts; configuring size limitations; setting up security and authentication to the delivering server; creating proper service accounts; authentication; SMTP relay [Exam 70-643 and 70-649 only. (70-649 reads “Configure SMTP service.”]
W8.5. Manage Internet Information Services (IIS). -- May include but is not limited to: Web site content backup and restore; IIS configuration backup; monitor IIS; configure logging; delegation of administrative rights [Exam 70-643 and 70-649 only. (70-649 reads “Configure IIS components.”)]
W8.6. Configure SSL security. -- May include but is not limited to: configure certificates; requesting SSL certificate; renewing SSL certificate; exporting and importing certificates [Exam 70-643 only]
W8.7. Configure Web site authentication and permissions. -- May include but is not limited to: configure site permissions and authentication; configure application permissions; client certificate mappings [Exam 70-643 only]
W9. Configuring Network Application Services (13 percent) [Exam 70-643 only]
W9.1. Configure Windows Media server. -- May include but is not limited to: on-demand replication; configure time-sensitive content; caching and proxy [Exam 70-643 only]
W9.2. Configure Digital Rights Management (DRM). -- May include but is not limited to: encryption; sharing business rules; configuring license delivery; configuring policy templates [Exam 70-643 only]
W9.3. Configure Microsoft Windows SharePoint Services server options. -- May include but is not limited to: site permissions; backup; antivirus; configuring Windows SharePoint Services service accounts [Exam 70-643 only]
W9.4. Configure Windows SharePoint Services e-mail integration. -- May include but is not limited to: configuring a document library to receive e-mail; configuring incoming vs. outgoing e-mail [Exam 70-643 only]
W10. Configuring Domain Name System (DNS) for Active Directory (16 percent) [Exam 70-640 only]
W10.1 Configure zones. -- May include but is not limited to: Dynamic DNS (DDNS), Non-dynamic DNS (NDDNS), and Secure Dynamic DNS (SDDNS); Time to Live (TTL); GlobalNames; Primary, Secondary, Active Directory Integrated, Stub; SOA; zone scavenging; forward lookup; reverse lookup [Exam 70-640 and 70-648 only]
W10.2. Configure DNS server settings. -- May include but is not limited to: forwarding; root hints; configure zone delegation; round robin; disable recursion; debug logging; server scavenging [Exam 70-640 only]
W10.3. Configure zone transfers and replication. -- May include but is not limited to: configure replication scope (forestDNSzone; domainDNSzone); incremental zone transfers; DNS Notify; secure zone transfers; configure name servers; application directory partitions [Exam 70-640, 70-648, and 70-649 only. (70-648 and 70-649 read “Configure custom application directory partitions.”)]
W11. Configuring the Active Directory Infrastructure (25 percent) [Exam 70-640 only] [Exams 70-640 (38%), 70-648 only]
W11.1. Configure a forest or a domain. -- May include but is not limited to: remove a domain; perform an unattended installation; Active Directory Migration Tool (ADMT) v3 (pruning and grafting); raise forest and domain functional levels; interoperability with previous versions of Active Directory; alternate user principal name (UPN) suffix; forestprep; domainprep [Exam 70-640 only]
W11.2. Configure trusts. -- May include but is not limited to: forest trust; selective authentication vs. forest-wide authentication; transitive trust; external trust; shortcut trust; SID filtering [Exam 70-640 only]
W11.3. Configure sites. -- May include but is not limited to: create Active Directory subnets; configure site links; configure site link costing; configure sites infrastructure [Exam 70-640 only]
W11.4. Configure Active Directory replication. -- May include but is not limited to: Distributed File System; one-way replication; Bridgehead server; replication scheduling; configure replication protocols; force intersite replication [Exam 70-640 only]
W11.5. Configure the global catalog. -- May include but is not limited to: Universal Group Membership Caching (UGMC); partial attribute set; promote to global catalog [Exam 70-640 and 70-649 only]
W11.6. Configure operations masters. -- May include but is not limited to: seize and transfer; backup operations master; operations master placement; Schema Master; extending the schema; time service [Exam 70-640 only]
W12. Configuring Additional Active Directory Server Roles (9 percent) [Exam 70-640 only]
W12.1. [W7.2.] Configure Active Directory Lightweight Directory Service (AD LDS). -- May include but is not limited to: migration to AD LDS; configure data within AD LDS; configure an authentication server; server core; Windows Server 2008 Hyper-V [Exam 70-640, 70-648, and 70-649 only]
W12.2. [W7.3.] Configure Active Directory Rights Management Service (AD RMS). -- May include but is not limited to: certificate request and installation; self-enrollments; delegation; Active Directory Metadirectory Services (AD MDS); Windows Server virtualization [Exam 70-640, 70-648, and 70-649 only]
W12.3. [W7.5.] Configure the read-only domain controller (RODC). -- May include but is not limited to: unidirectional replication; Administrator role separation; read-only DNS; BitLocker; credential caching; password replication; syskey; Windows Server virtualization [Exam 70-640, 70-648, and 70-649 only]
W12.4. [W7.7.] Configure Active Directory Federation Services (AD FS). -- May include but is not limited to: install AD FS server role; exchange certificate with AD FS agents; configure trust policies; configure user and group claim mapping; Windows Server virtualization [Exam 70-640, 70-648, and 70-649 only]
W13. Creating and Maintaining Active Directory Objects (24 percent) [Exam 70-640 only]
W13.1. Automate creation of Active Directory accounts. -- May include but is not limited to: bulk import; configure the UPN; create computer, user, and group accounts (scripts, import, migration); template accounts; contacts; distribution lists [Exam 70-640 only]
W13.2. Maintain Active Directory accounts. -- May include but is not limited to: configure group membership; account resets; delegation; AGDLP/AGGUDLP; deny domain local group; local vs. domain; Protected Admin; disabling accounts vs. deleting accounts; deprovisioning; contacts; creating organizational units (OUs); delegation of control [Exam 70-640 only]
W13.3. Create and apply Group Policy objects (GPOs). -- May include but is not limited to: enforce, OU hierarchy, block inheritance, and enabling user objects; group policy processing priority; WMI; group policy filtering; group policy loopback [Exam 70-640 only]
W13.4. Configure GPO templates. -- May include but is not limited to: user rights; ADMX Central Store; administrative templates; security templates; restricted groups; security options; starter GPOs; shell access policies [Exam 70-640 only]
W13.5. Configure software deployment GPOs. -- May include but is not limited to: publishing to users; assigning software to users; assigning to computers; software removal [Exam 70-640 only]
W13.6. Configure account policies. -- May include but is not limited to: domain password policy; account lockout policy; fine-grain password policies [Exam 70-640 only]
W13.7. Configure audit policy by using GPOs. -- May include but is not limited to: audit logon events; audit account logon events; audit policy change; audit access privilege use; audit directory service access; audit object access [Exam 70-640 and 70-648 only]
W14. Maintaining the Active Directory Environment (13 percent) [Exam 70-640 only] [Exams 70-640 (32%), 70-648, 70-649 only]
W14.1. Configure backup and recovery. -- May include but is not limited to: using Windows Server Backup; back up files and system state data to media; back up and restore by using removable media; perform an authoritative or non-authoritative Active Directory restore; linked value replication; Directory Services Recovery Mode (DSRM) (reset admin password); back up and restore GPOs [Exam 70-640, 70-648, and 70-649 only]
W14.2. Perform offline maintenance. -- May include but is not limited to: offline defragmentation and compaction; Restartable Active Directory; Active Directory database storage allocation [Exam 70-640, 70-648, and 70-649 only]
W14.3. Monitor Active Directory. -- May include but is not limited to: Network Monitor; Task Manager; Event Viewer; ReplMon; RepAdmin; Windows System Resource Manager; Reliability and Performance Monitor; Server Performance Advisor; RSOP [Exam 70-640 and 70-648 only]
W15. Configuring Active Directory Certificate Services (13 percent) [Exam 70-640 only]
W15.1. Install Active Directory Certificate Services. -- May include but is not limited to: standalone vs. enterprise; CA hierarchies—root vs. subordinate; certificate requests; certificate practice statement [Exam 70-640, 70-648, and 70-649 only (70-648 reads “Configure AD Certificate Services and PKI”; 70-649 reads “Configure Active Directory Certificate Services”)]
W15.2. Configure CA server settings. -- May include but is not limited to: key archival; certificate database backup and restore; assigning administration roles [Exam 70-640 only]
W15.3. Manage certificate templates. -- May include but is not limited to: certificate template types; securing template permissions; managing different certificate template versions; key recovery agent [Exam 70-640 only]
W15.4. Manage enrollments. -- May include but is not limited to: network device enrollment service (NDES); autoenrollment; Web enrollment; smart card enrollment; creating enrollment agents [Exam 70-640 only]
W15.5. Manage certificate revocations. -- May include but is not limited to: configure Online Responders; Certificate Revocation List (CRL); CRL Distribution Point (CDP); Authority Information Access (AIA) [Exam 70-640 only]
Here is a comparison between the 70-640/70-642/70-643 numbers any my previous 70-648/70-649 numbers:
W3. [W1.] Configuring Network Access [Exams 70-642 (49%), 70-648, 70-649]
W3.1. [W1.1.] Configure Remote Access. [Exams 70-648, 70-649]
W3.2. [W1.2.] Configure Network Access Protection (NAP) components. [Exams 70-648, 70-649]
W3.3. [W1.3.] Configure Network Authentication. [Exams 70-648, 70-649]
W3.4. [W1.4.] Configure data transmission protocols. [Exams 70-648, 70-649]
W3.5. [W1.5.] Configure wireless access. [Exams 70-648, 70-649]
W3.6. [W1.6.] Configure certificate services. [Exams 70-648, 70-649]
W1.2. [W1.7.] Configure DHCP. [Exams 70-648, 70-649]
W1.1. [W1.8.] Configure IPv4 and IPv6 addressing. [Exams 70-648, 70-649]
W1.3. [W1.9.] Configure routing. [Exams 70-648, 70-649]
W2. [W2.] Configuring the Domain Name System (DNS) [Exam 70-648]
W2.2./W10.1. [W2.1.] Configure zones. [Exam 70-648]
W2.4. [W2.2.] Configure zone resolution. [Exam 70-648]
W2.3. [W2.3.] Configure DNS client settings. [Exam 70-648]
W2.1. [W2.4.] Configure DHCP and WINS for DNS. [Exam 70-648]
W7. [W3.] Configuring Terminal Services [Exams 70-643 (32%), 70-649]
W7.1. [W3.1.] Configure Terminal Services Remote Programs. [Exam 70-649]
W7.2. [W3.2.] Configure Terminal Services Gateway. [Exam 70-649]
W7.3. [W3.3.] Configure Terminal Services load balancing. [Exam 70-649]
W7.4. [W3.4.] Configure resource allocation for Terminal Services. [Exam 70-649]
W7.5. [W3.5.] Configure Terminal Services licensing. [Exam 70-649]
W7.6. [W3.6.] Configure Terminal Services client connections. [Exam 70-649]
W7.7. [W3.7.] Configure Terminal Services server options. [Exam 70-649]
W8. [W4.] Configuring a Web Services Infrastructure [Exams 70-643 (30%), 70-649]
W8.3. [W4.1.] Configure File Transfer Protocol (FTP) Server. [Exam 70-649]
W4.4. [W4.2.] Configure backup. [Exam 70-649]
W8.1. [W4.3.] Configure Web applications. [Exam 70-649]
W8.1. [W4.4.] Configure Application Pools. [Exam 70-649]
W8.5. [W4.5.] Configure IIS components. [Exam 70-649]
W8.2. [W4.6.] Publish IIS Web sites. [Exam 70-649]
W4.7. Migrate sites and Web applications. [Exam 70-649]
W8.4. [W4.8.] Configure SMTP service. [Exam 70-649]
W4.9. Configure Universal Description, Discovery, and Integration (UDDI) service. [Exam 70-649]
W5. Configuring Security for Web Services [Exams 70-643 (38%), 70-649]
W5.1. Configure handlers to reduce attack surface. [Exam 70-649]
W5.2. Configure .NET Trust levels. [Exam 70-649]
W5.3. Configure authentication. [Exam 70-649]
W5.4. Configure rights. [Exam 70-649]
W5.5. Configure permissions. [Exam 70-649]
W5.6. Configure authorization. [Exam 70-649]
W5.7. Configure certificates. [Exam 70-649]
W6. [W6.] Deploying Servers [Exams 70-642 (51%), 70-648, 70-649: Deploying and Monitoring Servers]
W6.1. [W6.1.] Configure Windows Deployment Services (WDS). [Exams 70-648, 70-649]
W6.1. [W6.2.] Capture WDS images. [Exams 70-648, 70-649]
W6.1. [W6.3.] Deploy WDS images. [Exams 70-648, 70-649]
W6.2. [W6.4.] Configure Windows activation. [Exams 70-648, 70-649]
W6.3. [W6.5.] Create virtual machines. [Exams 70-648, 70-649]
W6.6. Configure Virtual Server settings. [Exams 70-648, 70-649]
W6.7. Install Windows Server Enterprise. [Exams 70-648, 70-649]
W6.8. Install server core. [Exams 70-648, 70-649]
W7. Configuring Server Roles [Exams 70-640 (30%), 70-648, 70-649]
W7.1. Implement server roles by using Server Manager. [Exams 70-648, 70-649]
W12.1. [W7.2.] Configure ADLDS. [Exams 70-648, 70-649]
W12.2. [W7.3.] Configure ADRMS. [Exams 70-648, 70-649]
W7.4. Configure the Active Directory server core. [Exams 70-648, 70-649]
W12.3. [W7.5.] Configure the read-only domain controller (RODC). [Exams 70-648, 70-649]
W15.1. [W7.6.] Configure AD Certificate Services and PKI. [Exams 70-648, 70-649: Configure Active Directory Certificate Services.]
W12.4. [W7.7.] Configure Active Directory Federation Services (ADFS). [Exams 70-648, 70-649]
W14. [W8.] Maintaining the Active Directory Environment [Exams 70-640 (32%), 70-648, 70-649]
W14.1. [W8.1.] Configure backup and recovery. [Exams 70-648, 70-649]
W14.2. [W8.2.] Perform offline maintenance. [Exams 70-648, 70-649]
W10.3. [W8.3.] Configure custom application directory partitions. [Exams 70-648, 70-649]
W8.4. Configure AD DS auditing. [Exam 70-648]
W13.7. [W8.5.] Configure audit policy by using GPOs. [Exam 70-648]
W14.3. [W8.6.] Monitor Active Directory. [Exam 70-648]
W11. [W9.] Configuring the Active Directory Infrastructure [Exams 70-640 (38%), 70-648]
W9.1. Configure communication security for Active Directory. [Exams 70-648, 70-649]
W9.2. Configure authentication. [Exam 70-648]
W11.5 [W9.3.] Configure the global catalog. [Exam 70-649]