subnet masks I-23

servers, monitoring, 6-16 to 6-30

designing PKI for, 11-10

DHCP, 6-17 to 6-20

enterprise CAs required by, 11-15

DNS, 6-20 to 6-22

overview of, 19-10

exam highlights, 6-47 to 6-48

Questions and Answers, 16-21, 16-23, 19-11

keeping services running, 6-16 to 6-17

SMS (Systems Management Server), 6-8

lesson review, 6-30

software

locating system bottlenecks, 6-25 to 6-27

backup, 6-33 to 6-35, 17-28

practice exercise, 6-28 to 6-29

certificates encountered when downloading, 11-6

Questions and Answers, 6-49 to 6-50

clustering and, 7-5

RRAS, 6-23 to 6-25

configuration testing, 10-3

WINS, 6-22 to 6-23

digital signatures and, 11-10

servers, role-based

IP address and subnet calculation, 2-29

application servers, 9-28

routers, 2-18

configuring security for, 14-6

update practices, 13-3 to 13-4

domain controllers, 9-19 to 9-23

Software Update Services. See SUS (Software Update

file and print servers, 9-26 to 9-28

Services)

infrastructure servers, 9-23 to 9-26

Source Port field, TCP/UDP headers, 18-17, 18-19, 18-21

planning security for, 14-16 to 14-17

SPAP (Shiva Password Authentication Protocol), 5-30, 16-11

practice exercise modifying GPO for Domain Controller

special identities, 8-21, 8-37

container, 9-28 to 9-30

spoofing, 12-7, 12-17, 12-48

Questions and Answers, 9-54, 14-7 to 14-9,

SPX (Sequenced Packet Exchange), 1-27 to 1-28

14-18 to 14-21

SRV (Service Location), 4-12

review, 9-28 to 9-31

SSL (Secure Sockets Layer), 12-18

service-dependent filtering, 12-48

stand-alone CAs

Service Location (SRV), 4-12

enterprise CAs compared to, 19-4

service packs

manual certificate enrollment, 11-21

software update and, 13-3 to 13-4

overview of, 11-15, 19-9

Windows Server 2003 SP1, 9-40

Questions and Answers, 11-34, 19-6, 19-8, 19-11, 19-13

services

standards, wireless, 13-15 to 13-16

configuring for member servers, 9-9 to 9-12

star topology

domain controllers, 9-23

UTP and, 1-15

planning secure baseline installation, 14-10

WAN topologies, 5-6

Windows Server 2003, 1-8

stateful applications, 7-2, 7-50. See also server clusters

Services console, 6-16 to 6-17

stateful packet inspection, 3-28, 3-42

Services file, 18-17 to 18-18

stateless applications, 7-4, 7-50

session layer, OSI reference model, 1-13

static NAT, 3-26, 3-45

Setup Security.inf, 10-13

static routing

SHA1 (Secure Hash Algorithm 1), 18-14, 18-16

compared with dynamic routing, 5-12 to 5-13

Shared Key authentication

defined, 2-15

defined, 18-30

overview of, 16-4

Questions and Answers, 18-31, 18-34

troubleshooting, 5-48 to 5-49

wireless networks, 13-20 to 13-21

storage area networks (SANs), 7-11, 7-31

share permissions, 8-22

storage subsystem

practice exercise creating, 8-31

bottlenecks, 17-10

Shiva Password Authentication Protocol (SPAP),

monitoring performance, 6-27

5-30, 16-11

Questions and Answers, 17-12

shutdown

stub zones, DNS, 4-34

security options for member servers, 9-14

subdomains. See also domains, DNS

user rights and, 9-22

combining internal/external domains, 4-22 to 4-23

signatures, digital, 11-3, 11-9

creating, 4-21

single-instance applications, 7-35, 7-36

DNS, 4-38 to 4-39

single-node clusters, 7-38, 7-42 to 7-44

planning name resolution strategy, 15-42

single-quorum device clusters, 7-38

subnet masks

sites, multiple GPOs and, 9-33

calculating, 2-30 to 2-31

Small Computer System Interface. See SCSI (Small

case scenario, 2-50 to 2-53, 2-62

Computer System Interface)

exam highlights, 2-54

smart cards

IP address classes, 2-26 to 2-27