MCSE Windows 2000 Network Design Exam Cram

MCSE Windows 2000 Core Four Exam CramExam-focused and highly efficient study guide gets the candidate ready for the Designing a Microsoft Windows 2000 Network Infrastructure exam (70-221). Concise content explains key exam areas such as knowing the technical requirements for networking, evaluating network services, and analyzing existing and planned network environments. Includes proven test-taking strategies, warnings on trick questions, timesaving study tips and shortcuts, and other valuable test-taking strategies.

Contents

Introduction xxiii

Self-Assessment xxxv

Chapter 1
Microsoft Certification Exams 1

Assessing Exam-Readiness 2

The Exam Situation 3

Exam Layout and Design: New Case Study Format 4

Multiple-Choice Question Format 5

Build-List-and-Reorder Question Format 6

Create-a-Tree Question Format 8

Drag-and-Connect Question Format 10

Select-and-Place Question Format 11

Microsoft?s Testing Formats 12

Strategies for Different Testing Formats 14

The Case Study Exam Strategy 15

The Fixed-Length and Short-Form Exam Strategy 16

The Adaptive Exam Strategy 17

Question-Handling Strategies 18

Mastering the Inner Game 19

Additional Resources 20

Chapter 2
Overview 23

Changes in Windows 2000 24

The Way It Was 24

And Then Came TCP/IP 25

The Great Name-Resolution Debate 26

Going the Way of the Internet 28

New Service Requirements 28

Remote Access Connectivity 31

Routing Improvements 31

Using the Internet for Connectivity 31

NAT and Proxy Server 32

Designing Network Services 33

Practice Questions 34

Need to Know More? 39

Chapter 3
TCP/IP Networking Solutions 41

TCP/IP History and Review 42

The OSI Model 42

Physical Layer 43

Data Link Layer 43

Network Layer 44

Transport Layer 44

Session Layer 44

Presentation Layer 44

Application Layer 44

TCP/IP Addressing 45

Subnet Masks 45

Variable Length Subnet Mask 45

Supernetting 45

Addressing Schemes for Private and Public Networks 46

Public Networks 46

Private Networks 46

Designing Your TCP/IP Network 46

IP Configuration 48

DHCP 48

Automatic Private IP Addressing 49

TCP Performance Enhancements 49

Increased TCP Window Size 49

TCP Selective Acknowledgment (SACK) 49

Internet Control Message Protocol (ICMP) 50

Disabling NetBIOS over TCP/IP (NetBT) 50

Security 50

Filtering IP Traffic 50

Securing TCP/IP Traffic with IPSec 51

Quality of Service (QoS) 54

QoS Components 54

Practice Questions 56

Need to Know More? 64

Chapter 4
DHCP Design 65

DHCP Overview 66

Vendor-Specific Option Categories 67

Multicast Address Dynamic Client Allocation
Protocol (MADCAP) 68

Lease Time 70

DHCP Integration with Windows 2000 70

Designing a LAN DHCP Service 72

Designing WAN DHCP Services 73

One DHCP Server in a WAN 73

Multiple DHCP Servers in a WAN 73

Designing DHCP High Availability 74

Clustered DHCP Server 74

Multiple DHCP Servers 74

Enhancing DHCP Performance 74

Hardware Implementation 74

Software Implementation 75

Practice Questions 76

Need to Know More? 82

Chapter 5
DNS 83

Design Issues for DNS 84

The Importance of a Network Diagram 84

Documenting Your DNS Server Types 85

Adding to Your Network Diagram 86

Documenting Your DNS Client Types 86

Integration of Active Directory and DNS 87

No DNS or Starting Over 88

Same Namespace 88

Different Namespaces 88

Integration with non-Microsoft DNS Servers 88

Zones 89

Zone Types 89

Resource Records 90

Designing a Secure DNS System 91

Using Access Control Lists (ACLs) in DNS 92

Screened Subnets 92

Forwarding, Forwarder, and Slave Servers 93

Increasing DNS Performance 94

One DNS Server per Location 94

Zone Delegation 94

Load Balance Client Requests 95

Use Caching-Only Servers 95

Practice Questions 96

Need to Know More? 103

Chapter 6
WINS Design 105

WINS Basics 106

The NetBIOS Namespace 106

Broadcasts on a Network 107

Routers and Broadcasts 107

WINS-Provided Services 108

Placing and Configuring WINS Servers 108

WINS Name-Resolution Process 109

A Network Diagram 110

Future Plans for the Network 110

How Many WINS Servers Are Needed? 111

WINS Traffic 111

Spoke-and-Hub Design 112

Understanding WINS Replication 114

Configuring WINS Clients 117

Support for Non-WINS NetBIOS Clients 118

Using a WINS Proxy Agent 118

Improving Performance in a WINS Network 118

Keeping the WINS Database Current 118

The Importance of Tombstoning 119

Consistency Checks 119

Security in a WINS Environment 120

WINS over a VPN 120

Using WINS in a Screened Subnet 120

Taking WINS off the Network 121

Disabling NetBIOS on the Network 121

Decommissioning the WINS Servers 121

Practice Questions 122

Need to Know More? 129

Chapter 7
NAT Protocol Design 131

NAT Overview 132

NAT Implementation 132

Installing NAT 133

Configuring NAT 134

NAT in Action 135

Integrating NAT into Existing Networks 136

NAT and DNS 137

Routing and Remote Access Security for NAT 137

NAT Interface Security 137

VPN Security 139

Performance 139

Practice Questions 141

Need to Know More? 148

Chapter 8
Microsoft Proxy Server 2.0 149

What Does a Proxy Server Do? 150

Understanding Internet Connections 150

Protecting the Network 152

A Proxy vs. a Firewall 152

Microsoft Proxy Server 153

Proxy Server Software 153

Microsoft Proxy Server 2.0 and Windows 2000 153

The Local Address Table (LAT) 154

Services Provided by Proxy Server 154

Transparency 155

Improved Performance 155

Optimizing Cache Settings 156

Proxy Arrays 156

Cache Array Routing Protocol (CARP) 157

Security Services Provided by Proxy Server 157

For Outbound Access 157

Controlling Inbound Access 158

Preparing a Network for Proxy Server 159

Private Ranges of IP Addresses 160

The Network Diagram 160

Determining the Number of Proxy Servers 161

Chaining Proxy Server 161

Proxy Server Routes 161

Reverse Proxying 162

Placing Proxy Servers on the Network 163

Joining Disimilar Networks with Proxy Server 163

External Connections 163

Review of Proxy Services 165

Setting up Proxy Clients 165

Web Proxy Clients 165

WinSock and Socks Proxy Clients 165

Practice Questions 167

Need to Know More? 173

Chapter 9
Routing in a Windows 2000 Environment 175

Routing Overview 176

Dynamic vs. Static Routing 177

Enabling Windows 2000 Routing 178

Unicasts, Broadcasts, and Multicasts 179

IGMP 179

Routing Information Protocol (RIP) 180

Comparing RIP versions 1 and 2 180

Routing in a TCP/IP Environment 181

OSPF 181

Routing in a Mixed Environment 182

Routing in a Novell Environment 182

Service Advertising Protocol (SAP) 183

AppleTalk Routing 184

Comparing Routing Protocols 184

Routing in a WAN Environment 184

Demand-Dial Connections 185

Leased Line Connections 185

Integration 185

Internet Protocol Security (IPSec) 185

Routing and Remote Access 186

Active Directory 186

Security 186

Authentication 186

Virtual Private Network (VPN) 187

Availability 187

Performance 187

Practice Questions 189

Need to Know More? 194

Chapter 10
Dfs 195

Distributed File System (Dfs) Overview 196

DfsCapabilities 196

Common Uses 197

The Dfs Tree 197

Active Directory Integration 197

Requirements for Windows 2000 DFS 198

Installing Dfs Host Servers 199

Windows 2000 199

Windows NT 4 199

Client Software 200

Browsing a Dfs Tree 200

Administration Tools 201

Creating a Dfs Root 203

Dfs File System Security 204

Creating a New Link to a Shared Folder 204

Deleting a Link to a Shared Folder 205

Creating a Replica 205

Deleting a Replica 206

Dfs Command Index 206

Optimizing Your Dfs Design 206

Practice Questions 210

Need to Know More? 217

Chapter 11
Remote Access in a Windows 2000 Environment 219

Remote Access Overview 220

Remote Access Implementation 221

Virtual Private Network (VPN) 223

Encapsulation 224

Data Encryption 226

Authentication 226

Features 226

Integration 226

2000 Services 227

LAN Integration 228

WAN Integration 228

Remote Access Placement 228

Security 229

Availability 229

Performance 230

Practice Questions 231

Need to Know More? 238

Chapter 12
Understanding RADIUS 239

What Is RADIUS? 240

Tracking Remote Connections with RADIUS Accounting 240

RADIUS Service Basics 241

Components in a RADIUS Solution 241

Realms 242

RADIUS Servers 243

RADIUS Clients 243

Shared Secret 243

Network Diagram 244

Authentication Protocol 245

Data Encryption 246

Transport Protocols 246

Connection Methods 246

Persistence and Data Rate for Connections 246

Placing RADIUS Components 247

RADIUS Clients 247

Outsourcing RAS Connections 247

Connecting Roaming Users through an ISP 248

Using the Accounting Feature for Billing 249

Ensuring Security in a RADIUS Solution 250

Screened Subnets 250

Remote-Access Policies 251

Increasing RADIUS Availability 251

Configuring Backup IAS Servers 252

Optimizing the Logging Feature 252

Practice Questions 253

Need to Know More? 261

Chapter 13
Managing Network Services 263

Planning Management Strategies 264

Responding to Service Interruptions and Changes 264

Ensuring That the Current Environment Meets the
Design Criteria 265

Planned Expansion to Meet the Future Needs for the
Network Services 266

Implementing Network Status Monitoring 266

Getting Information on the Status of Services 267

Data Collection 267

Generated Events 268

Using Monitoring Tools 271

The System Console 271

Using Logs and Alerts 273

Using the Event Viewer 275

Windows 2000 Support for SNMP 277

Getting Statistics with Scripting and Programming Tools 277

Windows Script Host 277

Custom Applications 277

Windows Management Instrumentation (WMI) 278

Analyzing Collected Data 278

Analysis 278

Response Strategies 279

Proactive Response Strategies 279

Reactive Response 279

Practice Questions 280

Need to Know More? 285

Chapter 14
Combining Network Services 287

Goals of Combining Network Services 288

Combining Network Diagrams 289

Network Diagram Additions 289

Making Service Decisions 291

Hardware Resources 291

Applications on a Server 292

Using Fewer Servers 292

Combinations to Increase Security 293

Adding Screened Subnets to a Network 293

Remote Access Connections 295

Combinations to Increase Performance 295

Reducing Network Traffic 295

Combinations to Increase Availability 295

Windows Clustering 296

Practice Questions 297

Need to Know More? 306

Chapter 15
Putting It All Together 307

Evaluating Existing Network Infrastructure 308

Selecting Appropriate Network Services 308

Selecting Services 309

Selecting Appropriate Service Options 309

Server Placement 309

Creating a Secure Network Design 311

Enhancing Availability 311

Enhancing Performance 311

Identifying Network Services 312

Including Services in your Design 312

Practice Questions 317

Need to Know More? 321

Chapter 16
Sample Test 323

Chapter 17
Answer Key 345

Glossary 357

Index 371