July 19, 2008

Preparation Guide for Exam 70-291

Preparation Guide for Exam 70-291
Implementing, Managing, and Maintaining a Windows Server 2003 Network Infrastructure
Updated: July 5, 2007
Related Links
Register for this exam
Take a practice test
Join an MCP newsgroup
Find a course
Buy a Microsoft Press book
On This Page
Exam newsExam news
Audience profileAudience profile
Credit toward certificationCredit toward certification
Preparation tools and resourcesPreparation tools and resources
Skills being measuredSkills being measured
Exam news

Exam 70-291 became available on August 14, 2003.
Top of pageTop of page
Audience profile

The Microsoft Certified Systems Administrator (MCSA) on Windows Server 2003 credential is intended for IT professionals who work in the typically complex computing environment of medium to large companies. An MCSA candidate should have 6 to 12 months of experience administering client and network operating systems in environments that have the following characteristics:


250 to 5,000 or more users


Three or more physical locations


Three or more domain controllers


Network services and resources such as messaging, database, file and print, proxy server, firewall, Internet, intranet, remote access, and client computer management


Connectivity requirements such as connecting branch offices and individual users in remote locations to the corporate network and connecting corporate networks to the Internet

Credit toward certification

When you pass the Implementing, Managing, and Maintaining a Windows Server 2003 Network Infrastructure exam, you achieve Microsoft Certified Professional (MCP) status. You also earn credit toward the following certifications:


Core credit toward Microsoft Certified Systems Administrator (MCSA) on Windows Server 2003 certification


Core credit toward Microsoft Certified Systems Engineer (MCSE) on Windows Server 2003 certification


Core credit toward Microsoft Certified Database Administrator (MCDBA) on Microsoft SQL Server 2000 certification

Preparation tools and resources

In addition to your hands-on experience working with the product, we recommend that you use the following tools and training to help you prepare for this exam.
Classroom training for this exam


Course 2276: Implementing a Windows Server 2003 Network Infrastructure: Network Hosts


Course 2277: Implementing, Managing, and Maintaining a Windows Server 2003 Network Infrastructure: Network Services
Microsoft Press self-paced training products


MCSA/MCSE Self-Paced Training Kit (Exam 70-291): Implementing, Managing and Maintaining a Microsoft Windows Server 2003 Network Infrastructure


MCSE Self-Paced Training Kit: Microsoft Windows Server 2003 Core Requirements, Exams 70-290, 70-291, 70-293, 70-294
Microsoft certified practice tests


Visit the Testkingdom.com Web site to take a practice test.


Self Test Software: Visit the Self Test Software Web site to take a practice test.
Microsoft online resources


TechNet: Designed for IT professionals, this site includes how-to instructions, best practices, downloads, technical chats, and much more.


MSDN: The Microsoft Developer Network (MSDN) is a reference for developers. It features code samples, technical articles, newsgroups, chats, and more.


Training and certification newsgroups: A newsgroup exists for every Microsoft certification. By participating in the ongoing dialogue, you take advantage of a unique opportunity to exchange ideas with and ask questions of others, including more than 750 Microsoft Most Valuable Professionals (MVPs) worldwide.

Skills being measured

This certification exam measures your ability to implement, manage, and maintain a Windows Server 2003 network infrastructure. Before taking the exam, you should be proficient in the job skills listed in the following matrix. The matrix shows which Official Microsoft Learning Products may help you reach competency in the skills being tested in the exam.
KEY:The course provides a general introductory overview of this task. You will need to supplement the course with additional work. = The course provides a general introductory overview of this task. You will need to supplement the course with additional work. The course includes some material to prepare you for this task. You will need to supplement the course with additional work. = The course includes some material to prepare you for this task. You will need to supplement the course with additional work. The course includes material to prepare you for this task. = The course includes material to prepare you for this task.
Skills measured by Exam 70-291Course 2276Course 2277
Implementing, Managing, and Maintaining IP Addressing

Configure TCP/IP addressing on a server computer.




Manage DHCP.


Manage DHCP clients and leases.


Manage DHCP Relay Agent.


Manage DHCP databases.


Manage DHCP scope options.


Manage reservations and reserved clients.




Troubleshoot TCP/IP addressing.


Diagnose and resolve issues related to Automatic Private IP Addressing (APIPA).


Diagnose and resolve issues related to incorrect TCP/IP configuration.




Troubleshoot DHCP.


Diagnose and resolve issues related to DHCP authorization.


Verify DHCP reservation configuration.


Examine the system event log and DHCP server audit log files to find related events.


Diagnose and resolve issues related to configuration of DHCP server and scope options.


Verify that the DHCP Relay Agent is working correctly.


Verify database integrity.




Implementing, Managing, and Maintaining Name Resolution

Install and configure the DNS Server service.


Configure DNS server options.


Configure DNS zone options.


Configure DNS forwarding.




Manage DNS.


Manage DNS zone settings.


Manage DNS record settings.


Manage DNS server options.




Monitor DNS. Tools might include System Monitor, Event Viewer, Replication Monitor, and DNS debug logs.




Implementing, Managing, and Maintaining Network Security

Implement secure network administration procedures.


Implement security baseline settings and audit security settings by using security templates.


Implement the principle of least privilege.




Install and configure software update infrastructure.


Install and configure software update services.


Install and configure automatic client update settings.


Configure software updates on earlier operating systems.




Monitor network protocol security. Tools might include the IP Security Monitor Microsoft Management Console (MMC) snap-in and Kerberos support tools.




Troubleshoot network protocol security. Tools might include the IP Security Monitor MMC snap-in, Event Viewer, and Network Monitor.




Implementing, Managing, and Maintaining Routing and Remote Access

Configure Routing and Remote Access user authentication.


Configure remote access authentication protocols.


Configure Internet Authentication Service (IAS) to provide authentication for Routing and Remote Access clients.


Configure Routing and Remote Access policies to permit or deny access.




Manage remote access.


Manage packet filters.


Manage Routing and Remote Access routing interfaces.


Manage devices and ports.


Manage routing protocols.


Manage Routing and Remote Access clients.




Manage TCP/IP routing.


Manage routing protocols.


Manage routing tables.


Manage routing ports.




Implement secure access between private networks.




Troubleshoot user access to remote access services.


Diagnose and resolve issues related to remote access VPNs.


Diagnose and resolve issues related to establishing a remote access connection.


Diagnose and resolve user access to resources beyond the remote access server.




Troubleshoot Routing and Remote Access routing.


Troubleshoot demand-dial routing.


Troubleshoot router-to-router VPNs.




Maintaining a Network Infrastructure

Monitor network traffic. Tools might include Network Monitor and System Monitor.

Troubleshoot connectivity to the Internet.

Troubleshoot server services.
Diagnose and resolve issues related to service dependency.


Use service recovery options to diagnose and resolve service-related issues.
Bookmark and Share