Exam 70-648:

TS: Upgrading from Windows Server 2003 MCSA to, Windows Server 2008, Technology Specializations

Published:October 29, 2007
Language(s):English, German, Japanese
Audience(s):IT Professionals
Technology:Windows Server 2008
Type:Proctored Exam

How To Get It: Schedule your exam through the following exam provider:

Take exam

Preparing for an Exam
This exam is scheduled to retire on July 31, 2013.
 
The Microsoft Certification website and this preparation guide contain a variety of resources to help you prepare for an exam. Preparing for and Taking an Exam — FAQ provides answers to frequently asked questions about exam registration ,preparation ,scoring ,and policies , including:
  • The most effective way to prepare to take an exam.
  • The relationship between Microsoft training materials and exam content.
  • Microsoft policy concerning the incorporation of service pack and revision updates into exam content.
  • Exam question types and formats.
  • Exam time limits and number of questions asked.
We recommend that you review this preparation guide in its entirety and familiarize yourself with the FAQs and resources on the Microsoft Certification website before you schedule your exam.
Exam Topics Covered
Exam 70-648 is an upgrade exam that is a composite of two stand-alone exams: 70-640 and 70-642. Exam 70-648 validates skills related to the core technology features and functionality of Windows Server 2008 R2, from the existing knowledge base of a Microsoft Certified Systems Administrator (MCSA) on Windows Server 2003. The key topics for each source exam, plus the percentage of material per topic for each exam, are noted in the following lists. See the "Skills measured" section of this page to learn about the testing objectives of Exam 70-648.
Exam 70-640: TS: Windows Server 2008 Active Directory, Configuring
  • Configuring Additional Active Directory Server Roles (11 percent)
  • Maintaining the Active Directory Environment (15 percent)
  • Configuring Active Directory Certificate Services (14 percent)
Exam 70-642: TS: Windows Server 2008 Network Infrastructure, Configuring
  • Configuring IP Addressing and Services (24 percent)
  • Configuring Network Access (22 percent)
  • Monitoring and Managing a Network Infrastructure (14 percent)
Audience Profile
Exam 70-648 is intended for IT professionals who currently hold an MCSA on Windows Server 2003 certification and work in the complex computing environment of mid-sized to large companies. The MCSA on Windows Server 2003 certification is a prerequisite for this exam. Without it, your transcript will show that you passed the exam but will not show credit for the resulting certifications.
You should have at least one year of experience implementing and administering a network operating system in an environment that has the following characteristics:
  • 250 to 5,000 or more users
  • Three or more physical locations
  • Three or more domain controllers
  • Network services and resources such as messaging, a database, file and print, a proxy server, a firewall, the Internet, an intranet, remote access, and client computer management
  • Connectivity requirements such as connecting branch offices and individual users in remote locations to the corporate network and connecting corporate networks to the Internet
Credit Toward CertificationWhen you pass Exam 70-648: TS: Upgrading from Windows Server 2003 MCSA to, Windows Server 2008, Technology Specializations, you complete the requirements for the following certification(s):Exam 70-648: TS: Upgrading from Windows Server 2003 MCSA to, Windows Server 2008, Technology Specializations: counts as credit toward the following certification(s):
Note This preparation guide is subject to change at any time without prior notice and at the sole discretion of Microsoft. Microsoft exams might include adaptive testing technology and simulation items. Microsoft does not identify the format in which exams are presented. Please use this preparation guide to prepare for the exam, regardless of its format.
Skills Being MeasuredThis exam measures your ability to accomplish the technical tasks listed below.The percentages indicate the relative weight of each major topic area on the exam.The higher the percentage, the more questions you are likely to see on that content area on the exam.

The information after “This objective may include but is not limited to” is intended to further define or scope the objective by describing the types of skills and topics that may be tested for the objective. However, it is not an exhaustive list of skills and topics that could be included on the exam for a given skill area. You may be tested on other skills and topics related to the objective that are not explicitly listed here.
Configuring Additional Active Directory Server Roles
  • Configure Active Directory Lightweight Directory Service (AD LDS). May include but is not limited to: migration to AD LDS, configuring data within AD LDS, configuring an authentication server, server core, Windows Server 2008 Hyper-V
  • Configure Active Directory Rights Management Service (AD RMS). May include but is not limited to: certificate request and installation, self-enrollments, delegation, Active Directory Metadirectory Services (AD MDS), Windows Server virtualization
  • Configure the read-only domain controller (RODC). May include but is not limited to: unidirectional replication, Administrator role separation, read-only DNS, BitLocker, credential caching, password replication, syskey, Windows Server virtualization
  • Configure Active Directory Federation Services (AD FS). May include but is not limited to: install AD FS server role, exchange certificate with AD FS agents, configuring trust policies, configuring user and group claim mapping, Windows Server virtualization
Maintaining the Active Directory Environment
  • Configure backup and recovery. May include but is not limited to: using Windows Server Backup, backup files and system state data to media, backup and restore by using removable media, performing an authoritative or non-authoritative Active Directory restore, linked value replication, Directory Services Recovery Mode (DSRM) (reset admin password), backing up and restoring GPOs
  • Perform offline maintenance. May include but is not limited to: offline defragmentation and compaction, Restartable Active Directory, Active Directory database storage allocation
  • Monitor Active Directory. May include but is not limited to: Network Monitor, Task Manager, Event Viewer, ReplMon, RepAdmin, Windows System Resource Manager, Reliability and Performance Monitor, Server Performance Advisor, RSOP
Configuring Active Directory Certificate Services
  • Install Active Directory Certificate Services. May include but is not limited to: standalone versus enterprise, CA hierarchies—root versus subordinate, certificate requests, certificate practice statement
  • Configure CA server settings. May include but is not limited to: key archival, certificate database backup and restore, assigning administration roles
  • Manage certificate templates. May include but is not limited to: certificate template types, securing template permissions, managing different certificate template versions, key recovery agent
  • Manage enrollments. May include but is not limited to: network device enrollment service (NDES), autoenrollment, Web enrollment, smart card enrollment, creating enrollment agents
  • Manage certificate revocations. May include but is not limited to: configuring Online Responders, Certificate Revocation List (CRL), CRL Distribution Point (CDP), Authority Information Access (AIA)
Configuring IP Addressing and Services
  • Configure IPv4 and IPv6 addressing. May include but is not limited to: configuring IP options, subnetting, supernetting, alternative configuration
  • Configure Dynamic Host Configuration Protocol (DHCP). May include but is not limited to: DHCP options, creating new options, PXE boot, default user profiles, DHCP relay agents, exclusions, authorizing server in Active Directory, scopes, server core, Windows Server Hyper-V
  • Configure routing. May include but is not limited to: static routing, persistent routing, Routing Internet Protocol (RIP), Open Shortest Path First (OSPF)
  • Configure IPsec. May include but is not limited to: creating IPsec policy, IPsec Authentication Header (AH), IPsec Encapsulating Security Payload (ESP)
Configuring Network Access
  • Configure remote access. May include but is not limited to: dial-up, Remote Access Policy, Network Address Translation (NAT), Internet Connection Sharing (ICS), VPN, Routing and Remote Access Services (RRAS), inbound/outbound filters, configuring Remote Authentication Dial-In User Service (RADIUS) server, configuring RADIUS proxy, remote access protocols, Connection Manager
  • Configure Network Access Protection (NAP). May include but is not limited to: network layer protection, DHCP enforcement, VPN enforcement, configuring NAP health policies, IPsec enforcement, 802.1x enforcement, flexible host isolation
  • Configure network authentication. May include but is not limited to: LAN authentication by using NTLMv2 and Kerberos, WLAN authentication by using 802.1x, RAS authentication by using MS-CHAP, MS-CHAP v2, and EAP
  • Configure wireless access. May include but is not limited to: Set Service Identifier (SSID), Wired Equivalent Privacy (WEP), Wi-Fi Protected Access (WPA), Wi-Fi Protected Access 2 (WPA2), ad hoc versus infrastructure mode, group policy for wireless
  • Configure firewall settings. May include but is not limited to: incoming and outgoing traffic filtering, Active Directory account integration, identifying ports and protocols, Windows Firewall versus Windows Firewall with Advanced Security, configuring firewall by using group policy, isolation policy
Monitoring and Managing a Network Infrastructure
  • Configure Windows Software Update Services (WSUS) server settings. May include but is not limited to: updating type selection, client settings, Group Policy object (GPO), client targeting, software updates, test and approval, disconnected networks
  • Capture performance data. May include but is not limited to: Data Collector Sets, Performance Monitor, Reliability Monitor, monitoring System Stability Index
  • Monitor event logs. May include but is not limited to: custom views, application and services logs, subscriptions, DNS log
  • Gather network data. May include but is not limited to: Simple Network Management Protocol (SNMP), Baseline Security Analyzer, Network Monitor
Preparation Tools and ResourcesTo help you prepare for this exam, Microsoft Learning recommends that you have hands-on experience with the product and that you use the following training resources. These training resources do not necessarily cover all of the topics listed in the "Skills Measured" tab.
Learning Plans and Classroom Training
Microsoft E-Learning
Microsoft Press Books There are no Microsoft Press books currently available.
Practice Tests
Microsoft Online Resources
  • Learning Plan: Get started by creating a step-by-step study guide that is based on recommended resources for this exam.
  • Windows Server 2008 – Learning Portal: Find special offers and information on training and certification.
  • Product information: Visit the Windows Server 2008 Web site for detailed product information.
  • Microsoft Learning Community: Join newsgroups and visit community forums to connect with your peers for suggestions on training resources and advice on your certification path and studies.
  • TechNet: Designed for IT professionals, this site includes how-to instructions, best practices, downloads, technical resources, newsgroups, and chats.
  • MSDN: Designed for developers, the Microsoft Developer Network (MSDN) features code samples, technical articles, downloads, newsgroups, and chats.
Have Questions? For advice about training and certification, connect with peers: For questions about a specific certification, chat with a Microsoft Certified Professional (MCP): To find out about recommended blogs, Web sites, and upcoming Live Meetings on popular topics, visit our community site: