Exam Essentials

 < Day Day Up > 



Know the best techniques for implementing and organizing security groups. You should be able to read a scenario and design the security grouping, which includes determining which groups will have permissions assigned to them. The best practice follows the AG(G)UDLP model.

Know when to use delegation instead of membership in administrative groups. You need to be able to recognize when it is more appropriate to delegate to a user or a group the ability to manage a container (for example, an organizational unit) rather than adding the respective user or group to an administrative group (for example, Domain Administrators).

Know the different permissions and how they apply to the securable objects. Know how to secure an NTFS volume locally and remotely, as well as the best ways to secure Active Directory objects.

Be comfortable designing a secure backup and recovery design. Remember that the data on the tape must be secured when it is active as well as when it is no longer useful.

Understand when the Encrypting File System (EFS) is useful. You will need to know what situations would be most advantageous for use with the Encrypting File System (EFS) and when it may not be suitable. Specifically machines that fall outside of the organization’s physical control, such as laptop computers, would typically be good candidates for the EFS.

Make sure that you know how to configure an audit policy based on requirements dictated in a scenario. You will need to be able to make the appropriate decisions as far as what resources to audit, whether you should audit success or failure, and what principals you will be auditing. Remember that on Windows Server 2003 domain controllers, auditing is turned on by default.



 < Day Day Up > 



MCSE. Windows Server 2003 Network Security Design Study Guide Exam 70-298
MCSE: Windows(r) Server 2003 Network Security Design Study Guide (70-298)
ISBN: 0782143296
EAN: 2147483647
Year: 2004
Pages: 168

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net