pass4sure microsoft mcse 70-220 v2.83

MCSE Designing Security for a Microsoft Windows 2000 Network : 70-220 Exam
DescriptionExam Number/Code: 70-220
Exam Name: MCSE Designing Security for a Microsoft Windows 2000 Network

“MCSE Designing Security for a Microsoft Windows 2000 Network”, also known as 70-220 exam, is a Microsoft certification. With the complete collection of questions and answers, Pass4sure has assembled to take you through 9 Case Studies (110 Q&A) to your 70-220 Exam preparation. In the 70-220 exam resources, you will cover every field and category in MCSE helping to ready you for your successful Microsoft Certification.
Exam news
Exam 70-220 became available on July 20, 2000.

• This exam retired in March 2008

Audience profile
Candidates for this exam operate in medium-sized to very large computing environments that use the Windows 2000 network operating system. They have a minimum of one year of experience implementing and administering network operating systems in environments that have the following characteristics:

• Supported users range from 200 to more than 26,000.

• Physical locations range from 5 to more than 150.

• Typical network services and applications include file and print, database, messaging, proxy server or firewall, dial-in server, desktop management, and Web hosting.

• Connectivity needs include connecting individual offices and users at remote locations to the corporate network and connecting corporate networks to the Internet.

Credit toward certification
When you pass the Designing Security for a Microsoft Windows 2000 Network exam, you achieve Microsoft Certified Professional status. You also earn credit toward the following certifications:

• Core or elective credit toward Microsoft Certified Systems Engineer on Windows 2000 certification

Preparation tools and resources
In addition to your hands-on experience working with the product, we recommend that you use the following tools and training to help you prepare for this exam.

Classroom training for this exam
• Course 2150: Designing a Security-Enhanced Microsoft Windows 2000 Network

• Course 2153B: Implementing a Microsoft Windows 2000 Network Infrastructure

• Course 2830: Designing Security for Microsoft Networks

Microsoft Press self-paced training products
• MCSE Training Kit (Exam 70-220): Designing Microsoft Windows 2000 Network Security

Microsoft certified practice tests
• MeasureUp: Visit the MeasureUp Web site to take a practice test.

• Self Test Software: Visit the Self Test Software Web site to take a practice test.

Microsoft online resources
• TechNet: Designed for IT professionals, this site includes how-to instructions, best practices, downloads, technical chats, and much more.

• MSDN: The Microsoft Developer Network (MSDN) is a reference for developers. It features code samples, technical articles, newsgroups, chats, and more.

• Training and certification newsgroups: There is a newsgroup for every Microsoft certification. By participating in the ongoing dialogue, you take advantage of a unique opportunity to exchange ideas with and ask questions of others, including more than 750 Microsoft Most Valuable Professionals (MVPs) worldwide.

Skills measured
This exam measures your ability to analyze the business requirements for security and design a security solution that meets business requirements. Security includes:

• Controlling access to resources

• Auditing access to resources

• Authentication

• Encryption

Before taking the exam, you should be proficient in the job skills listed in the following matrix. The matrix shows which Official Microsoft Learning Products may help you reach competency in the skills being tested in the exam.

KEY: = The course provides a general introductory overview of this task. You will need to supplement the course with additional work. = The course includes some material to prepare you for this task. You will need to supplement the course with additional work. = The course includes material to prepare you for this task.
Skills measured by Exam 70-220 Course 2150 Course 2153B Course 2830
Analyzing Business Requirements
Analyze the existing and planned business models.

• Analyze the company model and the geographical scope. Models include regional, national, international, subsidiary, and branch offices.

• Analyze company processes. Processes include information flow, communication flow, service and product life cycles, and decision-making.

Analyze the existing and planned organizational structures. Considerations include management model; company organization; vendor, partner, and customer relationships; and acquisition plans.

Analyze factors that influence company strategies.

• Identify company priorities.

• Identify the projected growth and growth strategy.

• Identify relevant laws and regulations.

• Identify the company’s tolerance for risk.

• Identify the total cost of operations.

Analyze business and security requirements for the end user.

Analyze the structure of IT management. Considerations include type of administration, such as centralized or decentralized; funding model; outsourcing; decision-making process; and change-management process.

Analyze the current physical model and information security model.

• Analyze internal and external security risks.

Analyzing Technical Requirements
Evaluate the company’s existing and planned technical environment.

• Analyze company size and user and resource distribution.

• Assess the available connectivity between the geographic location of work sites and remote sites.

• Assess the net available bandwidth.

• Analyze performance requirements.

• Analyze the method of accessing data and systems.

• Analyze network roles and responsibilities. Roles include administrative, user, service, resource ownership, and application.

Analyze the impact of the security design on the existing and planned technical environment.

• Assess existing systems and applications.

• Identify existing and planned upgrades and rollouts.

• Analyze technical support structure.

• Analyze existing and planned network and systems management.

Analyzing Security Requirements
Design a security baseline for a Windows 2000 network that includes domain controllers, operations masters, application servers, file and print servers, RAS servers, desktop computers, portable computers, and kiosks.

Identify the required level of security for each resource. Resources include printers, files, shares, Internet access, and dial-in access.

Designing a Windows 2000 Security Solution
Design an audit policy.

Design a delegation of authority strategy.

Design the placement and inheritance of security policies for sites, domains, and organizational units.

Design an Encrypting File System strategy.

Design an authentication strategy.

• Select authentication methods. Methods include certificate-based authentication, Kerberos authentication, clear-text passwords, digest authentication, smart cards, NTLM, RADIUS, and SSL.

• Design an authentication strategy for integration with other systems.

Design a security group strategy.

Design a Public Key Infrastructure.

• Design Certificate Authority (CA) hierarchies.

• Identify certificate server roles.

• Manage certificates.

• Integrate with third-party CAs.

• Map certificates.

Design Windows 2000 network services security.

• Design Windows 2000 DNS security.

• Design Windows 2000 Remote Installation Services (RIS) security.

Free PassGuide Practice Engine Demo Download Pass4sure offers free demos for each certification exam, including all IT vendors. You can check out the testing engine software, or pdf file question quality and usability of our practice exams before you decide to buy it. We are the only one site that offers demos for almost all IT certification exams.If you want to try p4s exam practice engine demo. http://demo.passguide.com/download

• Design Windows 2000 SNMP security.

• Design Windows 2000 Terminal Services security.

Designing a Security Solution for Access Between Networks
Provide security-enhanced access to public networks from a private network.

Provide external users with security-enhanced access to private network resources.

Provide security-enhanced access between private networks.

• Provide security-enhanced access within a LAN.

• Provide security-enhanced access within a WAN.

• Provide security-enhanced access across a public network.

Design Windows 2000 security for remote-access users.

Designing Security for Communication Channels
Design an SMB-signing solution.

Design an IPSec solution.

• Design an IPSec encryption scheme.

• Design an IPSec management strategy.

• Design negotiation policies.

• Design security policies.

• Design IP filters.

• Define security levels.

Topic 1, JUST TOGS, Scenario

Background:
Just Togs is a clothing retailer that has been in business for eight years. Last year’s total sales for all retail stores were $240 million. After tremendous growth during the past
eight years, the clothing business has slowed in its existing retail stores.

Organization: Headquarters:
Headquarters is located in San Jose, California. Headquarters employs 80 people. Twelve
of these employees are in the IT department. Retail Stores:
Retail stores are located in California. There are 50 employees at each retail store

Problem Statement: President:
Our old business model relied on expansion by building new retail stores. However, expansion takes time, and the area served by a single retail store is limited. The only way
to rapidly increase sales is to build a Web site. This site would allow customers from across the United States to buy our clothing.

IT Director:
We have three major areas of concern. First, we must ensure that the information on our Web server can be modified only with proper authorization and that the information is distributed only to those authorized. We also want to be informed when someone
accesses data on the Web server. Second, information must be secure as it travels from the customer’s computer to our server. We must prevent user IDs, passwords, and
financial information from being intercepted as this information travels to our server. Third, information that customers download must not damage their software or violate licensing agreements.
Our IT department will be expanded to include a Webmaster, who will administer the
Web site, Web developers who will write code for the Web pages, and Web authors who will create the Web content.

Marketing Director
We have developed an ActiveX control that customers will be able to download from the Web site. Customers can use this control to display different sizes of clothing on a 3D model. They can customize the model with their measurements. They can then dress the model with our clothes to show how the clothes will fit and select the correct size.
When people first view our Web site, they will be considered visitors. After visitors enter their name and address and receive an ID we will consider them customers.
From our Web site, we must include a method for the customer to view our clothes and place selected items in a shopping basket. We will need a checkout function that allows the customer to enter shipping and billing information. This should include the
customer’s name, address, phone number, and credit card number. This information, including the customer’s ID and password will be stored in a database.

When customers revisit our site, we will be able to identify them automatically by their
ID and password. They can then view the status of their orders or place additional orders. We should also let customers know that they are connected to the Just Togs Web site.
The entire transaction should be logged. The information will be stored in a
transaction-tracking file. This file will contain credit card numbers and other confidential customer information. The transaction-tracking file will allow us to bill the customer and
to provide information for our customer service employees if problems arise. Customer Service Director:
All customer service employees must have access to customer information. This includes customers’ personal information, such as name, address, phone number, and account number.

Existing IT Environment: Headquarters:
Headquarters has four Windows NT Server 4.0 computers. The remote access server is named JTRAS. The primary domain controller is named JTDC1. The other two servers are used to run applications.

Retail Stores:
Each retail store has two Windows NT Server 4 0 computers. One server controls all cash register functions. The second server handles inventory and word processing functions
and has a dial-up connection to headquarters. All retail stores use TCP/IP. Each office has its own user account for dial-up access. This connection is used to transmit daily sales and merchandise orders to headquarters.

Connectivity:
All computers in the headquarters LAN are connected through a 100-Mbps connection.
Each retail store is connected to headquarters through a WAN through a 56-Kbps dial-up connection.

Envisioned IT Environment: Headquarters:
The existing Windows NT Server domain controller will be upgraded to Windows 2000 native mode, and a single forest will be created. The envisioned placement of servers is shown in the exhibit. Click the exhibit button.

A DMZ will be set up between the public and private network. In addition, Just Togs plans to add six new Windows 2000 Server computers. A Web server named JTWEB will be multi-homed. A server named JTDEV will be used by programmers to develop the Web content. A server named JTDATA will contain all customer, inventory, and
order information. This information will be stored in Microsoft SQL Server databases. A
server named JTVPN will be used as the VPN server. JTDC2 will be a new domain controller.
The company wants to eliminate its remote access server and allow the retail stores to submit their data over the Internet through a VPN.

Retail Stores:
The hardware and software at the retail stores will remain the same.

Connectivity:
The WAN and LAN bandwidth will remain the same.

Topic 1, Just Togs (10 Questions)

QUESTION 1
Which audit policy should you use to detect possible intrusions into the Just Togs network?

A. Success and failure audit for process tracking
B. Success and failure audit for privilege use C. Success and failure audit for policy change D. Success and failure audit for logon events

Answer: D

pass4sure 70-220
Questions and Answers : 9 Case Studies (110 Q&A) Expected Date: October 22nd , 2008 Price: $129.99 $89.99 Pre-Buy price: $62.99 Save $27

Free download:pass4sure microsoft mcse 70-220 v2.83
Free download:testking microsoft mcse 70-220 v2.83

PassGuide provides high-quality test materials, for example, Cisco CCNA CCNP CCIE, Comptia A + NETWORK + Security +, Juniper jncia, jncis, Vmware VCP-410,certification practice exams and so on.We are committed to give full refund to candidates if they fail the exam with use of our products.And we are confident to make such a guarantee. Buy Best Practice Exam,high-quality ,100% Guarantee ,Pls contact me,Mail:Sales@passguide.com

P4S Free Downloads

Type	Exam Braindumps	New Questions & Answers	Latest Updated	Available link
	All Pass4sure's Exam Pack	858	1 days ago	Download Free Testing Engines