Vocab Mcts-70-642 Windows Server 2008 Network Infrastructure, Configuring

Front 1

6to4

Back 1

A tunneling protocol that enables two nodes running both IPv4 and
IPv6 across an IPv4 routing infrastructure to use a special address obtained by
combining the prefix 2002::/16 with the 32-bit public IPv4 address to form a
48-bit prefix of the form 2002:wwxx:yyzz::/48 in the case of a public IPv4 address
w.x.y.z. These nodes use this address type when communicating with each
other.

Front 2

802.1X authentication

Back 2

A series of standards that determine the acceptance of
connection requests to IEEE 802.11 wireless or IEEE 802.3 wired networks.

Front 3

access control list (ACL)

Back 3

A list of users and groups that can access an object,
such as a file, folder, or printer, and the type of access granted.

Front 4

access-based enumeration

Back 4

A technology that enables administrators to hide
folders that users do not have permission to access so that individual users can
see only those items that they are entitled to access.

Front 5

Active Directory-integrated zone

Back 5

A DNS zone that is hosted on a domain controller
and stored in one or more AD DS application directory partitions.

Front 6

active file screen

Back 6

A component of file screening that limits the file types that
users can save, and generates notifications when users attempt to save inappropriate
files.

Front 7

Address Resolution Protocol (ARP)

Back 7

A TCP/IP protocol that is used to resolve
the IP address of the destination computer to the physical or MAC address.
Also, the command-line utility that displays the MAC address of a computer.

Front 8

administrative shares

Back 8

A set of shared volumes or folders that are automatically
created in Windows Server 2008 and are suffixed with a dollar sign ($). These
shares do not show up when a user browses the computer resources using the
Computer or Network folders in Windows Explorer.

Front 9

alert

Back 9

A notification provided by the Data Collector Sets feature of Performance
Monitor that informs you when the value of a counter has exceeded a
preconfigured level.

Front 10

Alias (CNAME) record

Back 10

A DNS resource record that defines additional (canonical)
names that point to the same host. This is useful for servers such as web and FTP
servers that may need to function under additional names.

Front 11

Anycast IPv6 address

Back 11

A type of IPv6 address that is only utilized for a destination
address assigned to a router.

Front 12

application directory partition

Back 12

A partitioned section of Active Directory that is
replicated only to specified domain controllers. Application directory partitions are
used by applications to store their application-specific data.

Front 13

authentication

Back 13

A process whereby an individual or computer on a network proves
he is who he says he is. The authentication process validates the source and identity
of information and includes such tasks as confirming the identity of a user, computer,
or digital signature.

Front 14

authentication header (AH)

Back 14

An IPSec protocol component that provides for authentication,
integrity, and anti-replay of each packet. This is done without encrypting
the data; the data remains readable but is protected from modification.

Front 15

Automatic Private IP Addressing (APIPA)

Back 15

The dynamic IPv4 addressing system
used when DHCP is unavailable. It uses the IP address range of 169.254.y.z.

Front 16

backup catalog file

Back 16

A file that includes information such as the volumes that were
backed up and where the backups are located, and is used to locate specific files and
folders during a restore operation.

Front 17

bare metal backup

Back 17

A backup that includes all critical volumes so that the recovered
server is bootable. Optionally, this backup can include all the data volumes to
restore these volumes when restoring to a new hard disk.

Front 18

bare metal recovery

Back 18

A server recovery using a backup that contains critical volumes
and optionally data volumes that enable you to rebuild your server using new
hardware.

Front 19

BitLocker Drive Encryption

Back 19

A new feature of Windows Server 2008 that enables
you to encrypt the entire contents of your system partition. It is useful for protecting
computers from attackers who have physical access to a computer.

Front 20

Bootstrap Protocol (BOOTP)

Back 20

A UDP network protocol used by a network client to
obtain its IP address automatically. This is usually done during the bootstrap process
when a computer is starting up.

Front 21

BranchCache

Back 21

A new feature of Windows Server 2008 R2 and Windows 7 that enables
users at branch offices to cache shared files and folders from a remote server to
a local computer for faster access.

Front 22

broadcast

Back 22

A routing technology that transmits data to all possible destinations on
the local subnet. This permits the sender to send the data only once and all receivers
can copy it.

Front 23

caching-only server

Back 23

A DNS server that does not contain any zone information,
used to build the cache file as names are resolved.

Front 24

certificate

Back 24

A digital file that contains information verifying the identity of a user or
computer.

Front 25

Challenge Handshake Authentication Protocol (CHAP)

Back 25

An authentication protocol
that uses a hashed version of a user’s password so that the user’s credentials are not
sent over the wire in clear text.

Front 26

classless inter-domain routing (CIDR)

Back 26

A flexible method of stating IP addresses
and masks without needing to classify the addresses. An example of the CIDR format
is 192.168.1.0/24.

Front 27

client reservation

Back 27

A DHCP mechanism that ensures that a client always gets the
same reserved IP address.

Front 28

client-side targeting

Back 28

A means of creating computer groups for WSUS that uses
Group Policy to add computers to specified computer groups. New computers are
automatically added to the appropriate group when they first contact the WSUS
server.

Front 29

collector computer

Back 29

A computer that has been configured using the event log subscription
feature to receive event logs from one or more source computers. Use of a
collector computer enables you to keep track of event logs from many computers.

Front 30

computer groups

Back 30

Groups that you can configure on a WSUS server that enable
specific updates to be directed to different computers on the network. This concept
is useful for deploying updates to small test groups before deployment to the network
as a whole.

Front 31

conditional forwarding

Back 31

The relaying of a DNS request for zone information for
specific domains from one server to another one, when the first server is unable to
process the request.

Front 32

Connection Manager Administration Kit (CMAK)

Back 32

A versatile client dialer and connection
software that can be used to create an executable program, which can then
be installed on client computers to provide a preconfigured network connection for
dial-up or VPN access to the network.

Front 33

connection request policy

Back 33

A set of conditions and settings that enable you to designate
which RADIUS servers are entitled to perform the authentication and authorization
of connection requests that the NPS server receives from RADIUS clients.

Front 34

connection security rule

Back 34

A type of firewall rule that requires two computers to
authenticate with each other to establish a connection and secure their communications.
Windows Firewall uses IPSec to enforce these rules and secure the communication
channel.

Front 35

critical volumes

Back 35

The volumes that are required for recovering your server, including
the system and boot volumes. On a domain controller, they include the SYSVOL
volume, as well as the volumes that host the Ntds.dit database file and the
AD DS log files.

Front 36

custom view

Back 36

A filter in Event Viewer that has been named and saved for use with
the event log on another computer.

Front 37

data collector set

Back 37

A component of Performance Monitor that records computer
performance information into log files. This feature was known as Performance
Logs and Alerts in Windows 2000/XP/Server 2003.

Front 38

decryption

Back 38

Unscrambling the data in an encrypted file through use of an algorithm
so that the file can be read.

Front 39

default gateway

Back 39

The term applied to the router that leads to other networks.

Front 40

demand-dial interface

Back 40

A logical interface representing a point-to-point connection,
either a physical connection, such as two routers connected with an analog
phone line, or a logical connection, such as two routers using a virtual private network
(VPN) connection.

Front 41

devolution

Back 41

A type of host name search in which an unsuccessful query is retried
with a DNS suffix based on systematic reduction of the primary suffix; for example,
if the query for server1.accounting.certguide.com is unsuccessful, when devolution
is enabled a search for server1.certguide.com will be performed next, and
then a search for server1.com will be performed last.

Front 42

DFS folder

Back 42

Any shared folder that is contained within a DFS namespace.

Front 43

DFS folder target

Back 43

The UNC path of a shared folder that is contained within a
DFS namespace and replicated using DFS Replication.

Front 44

DFS Namespace

Back 44

A DFS technology that enables you to create logical groupings
of shared folders on different servers that facilitate the access to data by users on the
network. Such groupings are presented to users as a virtual folder tree or namespace.

Front 45

DFS Replication

Back 45

A DFS technology that provides an efficient multimaster replication
component that synchronizes data between servers with limited bandwidth
network links. The contents of folders are synchronized between servers so that users
receive the same version of files regardless of which folder target their computer
connects to.

Front 46

DHCP options

Back 46

Options that a DHCP server configures, such as the addresses of
the DNS and WINS servers.

Front 47

DHCP relay agent

Back 47

A server that is configured to relay DHCP broadcast messages
from one subnet to another. In Windows Server 2008, the DHCP relay agent service
is a component of RRAS.

Front 48

DHCP scope

Back 48

A range of IP addresses on a DHCP server that are available for the
server to lease to client computers. A scope generally defines a single physical subnet
on a network.

Front 49

dial-up networking

Back 49

The technology that enables a remote access client to create a
nonpermanent, dial-up connection to a physical port on a remote access server by
using the service of a telecommunications provider, such as an analog phone line or
ISDN.

Front 50

DirectAccess

Back 50

A new feature of Windows Server 2008 R2 and Windows 7 that enables
users to directly connect to corporate networks from any Internet connection
using a seamless, bidirectional, secured tunnel without the need for a virtual private
network (VPN) connection.

Front 51

disk quota

Back 51

A mechanism that enables you to track and control disk usage on a peruser,
per-drive letter (partition or volume) basis. You can also set quotas on shared
folders on a per-folder basis when configuring quotas from FSRM.

Front 52

Distributed File System (DFS)

Back 52

A Windows Server 2008 R2 server role that enables
administrators to group a large number of shared folders from different servers together
in a single tree that enables users to rapidly locate the share they need without
searching numerous servers.

Front 53

DNS Manager

Back 53

The Microsoft Management Console (MMC) snap-in from which
you can manage most of the activities associated with operating a DNS server.

Front 54

DNS Notify

Back 54

A process in which the master DNS server for a zone notifies secondary
servers of changes, so that the secondary servers can check to determine whether
they need to initiate a zone transfer.

Front 55

dnscmd

Back 55

A command-line tool that can perform most of the DNS server administrative
tasks in Windows Server 2008.

Front 56

DNSSEC (Domain Name System Security Extensions)

Back 56

A suite of DNS extensions
that adds security to the DNS protocol by providing origin authority, data integrity,
and authenticated denial of existence. It enables DNS servers to use digital signatures
to validate responses from other servers and resolvers.

Front 57

DnsUpdateProxy group

Back 57

A special group that includes all DNS servers authorized
to securely update any client’s A and PTR records whenever it updates the client’s
TCP/IP configuration.

Front 58

domain isolation policy

Back 58

A Group Policy setting that enables you to use IPSec
authentication to require each computer that is an AD DS domain member to positively
identify the other computer to which it connects.

Front 59

Domain Name System (DNS)

Back 59

A hierarchical name-resolution system that resolves
host names into IP addresses, and vice versa. DNS also makes it possible for the distributed
Active Directory database to function by allowing clients to query the locations
of services in the forest and domain.

Front 60

downstream server

Back 60

A WSUS server that synchronizes updates from another (upstream)
server that is used when you are implementing a hierarchy of WSUS servers.

Front 61

dynamic DNS (DDNS)

Back 61

An extension of DNS that allows all computers running
Windows 2000 and later to automatically register their A records with DNS at the
time they obtain an IP address from a DHCP server.

Front 62

Dynamic Host Configuration Protocol (DHCP)

Back 62

A service that allows an administrator
to specify a range of valid IP addresses to be used on a network, as well as
exclusion IP addresses that should not be assigned (for example, if they were already
statically assigned elsewhere). These addresses are automatically given out to computers
configured to use DHCP as they boot up on the network, thus saving the administrator
from having to configure static IP addresses on each individual network
device.

Front 63

dynamic IP address

Back 63

An IP address that is provided to a computer by a Dynamic
Host Configuration Protocol (DHCP) server when it needs to be connected to the
network.

Front 64

dynamic route

Back 64

A route that is dynamically calculated and created on a RRAS
server acting as a router.

Front 65

Encapsulating Security Payload (ESP)

Back 65

An IPSec protocol component that provides
everything that AH does, along with providing for the confidentiality of the packet
during transit. This authentication process ensures that the packet originated from
the apparent sender and ensures that it wasn’t viewed or modified during transit.

Front 66

Encrypting File System (EFS)

Back 66

An advanced attribute setting of Windows Server
2003/2008/R2 and Windows 2000/XP/Vista/7 for files and folders on an NTFSformatted
volume that provides certificate-based public key security for those files
and folders. EFS encrypts and decrypts files in a manner that is transparent to users.

Front 67

encryption

Back 67

Scrambling and rearranging data in a file through use of an algorithm
so the file cannot be read.

Front 68

event log subscription

Back 68

An Event Viewer feature that enables you to collect event
logs from a number of computers in a single, convenient location that helps you
keep track of events that occur on these computers.

Front 69

Event Viewer

Back 69

An administrative tool that enables an administrator to view and/or
archive event logs such as the operating system, application, setup, and security logs.
In Windows Server 2008, this tool also enables you to configure event log subscriptions
that collect events from several monitored computers together.

Front 70

exclusion

Back 70

A range of IP addresses within a scope that is configured to not be
leased by DHCP to clients. Typically, these are IP addresses of computers such as
servers that are configured with static or reserved IP addresses.

Front 71

Extensible Authentication Protocol (EAP)

Back 71

A general authentication protocol developed
for PPP. EAP can be used with IEEE 802, and is capable of heading other
authentication protocols, so it improves interoperability between RAS systems, RADIUS
servers, and RAS clients.

Front 72

Extensible Authentication Protocol-Transport Layer Security (EAP-TLS)

Back 72

A strong
authentication method that combines EAP with Transport Layer Security, which is
a protocol designed to allow users or applications to communicate over the Internet
privately. It is intended to secure and authenticate communications through data
encryption.

Front 73

failover cluster

Back 73

A group of servers that is configured as a cluster for purposes of
redundancy and fault tolerance. You can configure such a cluster as a single member
of a DFS replication group.

Front 74

file classification

Back 74

A component of FSRM that provides information on the types of
files stored on your file server, thereby providing insight into the data patterns present
in your organization.

Front 75

file screening

Back 75

A component of FSRM that limits the file types that users can save,
and generates notifications when users attempt to save inappropriate files.

Front 76

File Server Resource Manager (FSRM)

Back 76

A role service component of the File Server
role that enables you to perform management tasks on file serves such as setting
quotas, specifying file screening, classifying files, creating various file-management
reports, and creating scheduled file-management tasks.

Front 77

filter action

Back 77

A configured set of actions within a firewall rule that determines
whether the firewall will permit or block traffic attempting to cross it. You can also
choose an option to negotiate security based on several IPSec criteria, including
whether or not encryption is used.

Front 78

filtering

Back 78

The act of setting criteria for displaying events in an event log. You can
filter the event log so that events of importance are easier to find amidst the large
number of routine informational events that tend to be recorded in some logs, such
as the System log.

Front 79

firewall

Back 79

A system designed to prevent unauthorized access to or from a private
network. This can be either a dedicated hardware device or a software program installed
on a server or client computer.

Front 80

firewall profile

Back 80

A means of grouping firewall rules so that they apply to the affected
computers dependent on where the computer is connected.

Front 81

firewall rule

Back 81

A set of conditions used by Windows Firewall to determine whether
a particular type of communication is permitted. You can configure inbound rules,
outbound rules, and connection security rules from the Windows Firewall with Advanced
Security snap-in or from Group Policy.

Front 82

forward lookup query

Back 82

A DNS name-resolution process by which a host name is
resolved to an IP address.

Front 83

forwarding

Back 83

The relaying of a DNS request from one server to another one when
the first server is unable to process the request.

Front 84

full zone transfer (AXFR)

Back 84

A zone transfer in which the master server transmits the
entire zone database to that zone’s secondary servers.

Front 85

fully qualified domain name (FQDN)

Back 85

A DNS domain name that unambiguously describes
the location of the host within a domain tree. An example of an FQDN is the
computer www.certguide.com.

Front 86

global unicast IPv6 address

Back 86

An IPv6 address that uses a global routing prefix of 45
bits to identify a specific organization’s network, a 16-bit subnet ID, and a 64-bit interface
ID. These addresses are globally routable on the Internet and are equivalent
to public IPv4 addresses.

Front 87

GlobalNames zone

Back 87

A special type of Active Directory-integrated zone that enables
you to resolve static, global records with single-label names without the need for a
Windows Internet Name Service (WINS) server.

Front 88

health policies

Back 88

Policy conditions that are used by NAP in validating the health status
of client computers attempting to connect to or communicate on the network.

Front 89

Health Registration Authority (HRA)

Back 89

A Windows Server 2008 computer running
Internet Information Services (IIS) that is used in IPSec NAP enforcement. The
HRA validates client health and obtains health certificates from a certification authority
(CA) on behalf of compliant NAP client computers.

Front 90

hidden shares

Back 90

A shared folder that does not broadcast its presence and is not
browsable in the Network folder. A hidden share is indicated by a dollar sign ($) at
the end of the folder name.

Front 91

hop

Back 91

The trip taken by a data packet from one router to the next router as it passes
across an internetwork.

Front 92

host

Back 92

Any computing device that has been assigned an IP address.

Front 93

host name

Back 93

In DNS, the first or most specific name assigned to an individual computer.

Front 94

Host (A or AAAA) record

Back 94

A DNS resource record that defines the host name to
IPv4 (A) or IPv6 (AAAA) mapping for a computer on the network. Used to define
the IP address corresponding to a given host.

Front 95

HOSTS file

Back 95

A text file that maps host names to IP addresses. In modern Windows
computers, this file is stored in the %systemroot%\system32\drivers\etc
folder.

Front 96

IEEE 802.3

Back 96

A series of standards governing Ethernet-based wired networks using
the Carrier Sense Multiple Access with Collision Detection (CSMA/CD) Access
Method and Physical Layer Specifications.

Front 97

IEEE 802.11

Back 97

A series of standards governing wireless networks and their transmission
parameters.

Front 98

IGMP proxy

Back 98

A router that connects a single-router intranet to a multicast-capable
intranet or the Internet.

Front 99

incremental zone transfer (IXFR)

Back 99

A zone transfer in which the master server transmits
only the modified portion of each zone file to that zone’s secondary servers.

Front 100

instance

Back 100

One of a group of performance objects that represents multiple occurrences
of the same object, such as processors in a multiple processor computer or
hard disks in a computer with more than one hard disk.

Front 101

Internet Control Message Protocol (ICMP)

Back 101

A TCP/IP protocol that enables hosts
on a TCP/IP network to share status and error information. The ping and tracert
commands use ICMP to check connectivity to remote computers.

Front 102

Internet Group Management Protocol (IGMP)

Back 102

A TCP/IP protocol that is used at
the host level to report host group memberships to local multicast routers.

Front 103

Internet Key Exchange version 2 (IKEv2)

Back 103

A tunneling protocol that uses IPSec
Tunnel Mode over UDP port 500. This combination of protocols also supports
strong authentication and encryption methods.

Front 104

Internet layer

Back 104

The third layer of the TCP/IP layer stack, it is primarily concerned
with the routing and delivery of packets.

Front 105

Internet Protocol (IP)

Back 105

A TCP/IP protocol that handles, addresses, and routes packets
between hosts on a network. It performs this service for all other protocols in the
TCP/IP protocol suite.

Front 106

Intra-Site Automatic Tunnel Addressing Protocol (ISATAP)

Back 106

A tunneling technology
that enables unicast IPv6 connectivity between IPv6/IPv4 hosts over an IPv4
intranet. You do not need to perform any manual configuration actions on an ISATAP
host.

Front 107

IP address

Back 107

A logical address that is used to identify both a host and a network segment.
Each network adapter on an IP network requires a unique IP address.

Front 108

IP Security (IPSec)

Back 108

A suite of protocols that provide a mechanism for data integrity,
authentication, and privacy for the Internet Protocol. IPSec can provide either
message authentication and/or encryption.

Front 109

IP version 4 (IPv4)

Back 109

The version of the Internet Protocol that has been in use for
many years and provides a 32-bit address space formatted as four octets separated by
periods.

Front 110

IP version 6 (IPv6)

Back 110

A newer version of the Internet Protocol that provides a 128-
bit address space formatted as eight 16-bit blocks, each of which is portrayed as a
4-digit hexadecimal number and is separated from other blocks by colons.

Front 111

Ipconfig

Back 111

The command-line utility that provides detailed information about the
IP configuration of a Windows computer’s network adapters.

Front 112

IPv4-compatible address

Back 112

An IPv6 address represented in the form
0:0:0:0:0:0:w.x.y.z, where w.x.y.z is the IPv4 address in dotted decimal. This allows
communication between IPv4 and IPv6 networks.

Front 113

IPv4-mapped address

Back 113

An IPv4-only node is represented as ::ffff:.w.x.y.z to an IPv6
node. Used only for internal representation.

Front 114

iterative query

Back 114

A DNS query that gives the best answer it currently has back as a
response. The best answer is the address being sought or an address of a server that
would have a better idea of its address.

Front 115

Layer 2 Tunneling Protocol (L2TP)

Back 115

A protocol that is used to create VPN tunnels
across a public network. This protocol is used in conjunction with IPSec for security
purposes.

Front 116

lease

Back 116

A predefined interval of time for which an IP address obtained from a
DHCP server is valid. The lease must be renewed before this time interval expires
for the client to continue using it.

Front 117

link local IPv6 address

Back 117

A type of IPv6 address used for communication between
neighboring nodes on the same link. Equivalent to IPv4 addresses configured using
APIPA.

Front 118

Link Local Multicast Name Resolution (LLMNR)

Back 118

A mechanism that enables IPv6
hosts on a small network to resolve each other’s names without the need for a DNS
server.

Front 119

LMHOSTS file

Back 119

A local text file that maps NetBIOS names to IP addresses. In
modern
Windows computers, this file is stored in the %systemroot%\system32\
drivers\etc folder.

Front 120

local printer

Back 120

A printer that is connected directly to a computer.

Front 121

location-aware printing

Back 121

A printer setting that enables a user with a portable computer
to print to a printer physically located close to her computer; for example, to
the home printer when at the home location or to the office printer when in the office.

Front 122

logical unit number (LUN)

Back 122

A disk, a portion of a disk, an entire disk array, or a section
of a disk array in the subsystem included within a SAN. You can manage and
work with a LUN in much the same way as you would for a disk volume stored locally
on your server.

Front 123

Managed Address Configuration (M) flag

Back 123

A parameter that determines when DHCPv6
is used to obtain IPv6 stateful addresses. When set to 0, DHCPv6 is not used
and stateless addresses are obtained. When set to 1, DHCPv6 is used to assign stateful
addresses to IPv6 clients.

Front 124

Management Information Base (MIB)

Back 124

A database used by SNMP that holds the
information that a management system can request and the information returned
by agents. Included within the MIB is a set of objects that represent various types
of information about a network device, such as the number of active sessions or the
operating system version.

Front 125

metric

Back 125

A standard of measurement, such as a hop count, used by routing algorithms
to determine the optimal path to a destination.

Front 126

Microsoft Challenge Handshake Authentication Protocol version 2 (MS-CHAPv2)

Back 126

A Microsoft version of CHAP that uses the same type of challenge/response mechanism
as CHAP but uses a nonreversible encrypted password. This is done by using
MD5 algorithms to encrypt the challenge and the user’s password.

Front 127

Microsoft updates

Back 127

Updates that are available from Microsoft to make systems
more reliable or to fix a problem or bug.

Front 128

multicast

Back 128

This technology allows the sender to send a single transmission to the
multicast address, and the routers take care of making copies and sending them to all
receivers that have registered their interest in data from that sender.

Front 129

Multicast Address Dynamic Client Allocation Protocol (MADCAP)

Back 129

This technology
that multicast address assignment in a DHCP environment. When registered
clients are dynamically assigned an IP address through MADCAP, they can participate
efficiently in the data stream process, such as for real-time video or audio network
transmissions.

Front 130

multicast IPv6 address

Back 130

An IPv6 address that enables the delivery of packets to
each of multiple interfaces.

Front 131

Name Resolution Policy Table (NRPT)

Back 131

A Group Policy setting that includes rules
for names and namespaces that require special handling in DirectAccess for specific
portions of the DNS namespace; for example, intranet versus Internet web servers.

Front 132

Name Server (NS) record

Back 132

A DNS resource record that defines the DNS servers
that are authoritative in the domain. This includes both the primary DNS servers
and any secondary DNS servers.

Front 133

NetBIOS (Network Basic Input/Output System)

Back 133

An application-programming interface
(API) that operates at the session layer of the OSI model and enables user
applications to submit network I/O and control directives to underlying network
protocol software.

Front 134

netmask ordering

Back 134

A mechanism used by DNS servers for prioritizing local subnets
so that when a client queries for a host name mapped to multiple IP addresses, the
DNS server preferentially returns an IP address located on the same subnet as the
requesting client.

Front 135

netsh

Back 135

A command-line tool that enables you to configure TCP/IP networking
and addressing options. netsh also enables you to configure and display the status of
various networking server roles and components.

Front 136

Network Access Protection (NAP)

Back 136

A Windows Server 2008 role service that is designed
to determine and enforce the health status of client computers accessing the
network either locally or by remote access. NAP can prevent computers that fail to
meet health requirements from accessing resources on the network; it can also direct
these computers to a remediation network where they can install updates to render
them properly compliant.

Front 137

Network Address Translation (NAT)

Back 137

A specification in TCP/IP that maps the
range of private IPv4 addresses (192.168.0.1-192.168-0-254) to the public IP address
of an Internet-facing network adapter.

Front 138

Network File System (NFS)

Back 138

Technology that enables UNIX to share files and applications
across the network.

Front 139

network interface layer

Back 139

The bottom layer of the TCP/IP protocol stack, it provides
an interface for the Internet layer to the network media. This layer controls
the way frames are ultimately built and sent out on to the network media or received
from the network media and sent to the upper layers.

Front 140

network location server

Back 140

An intranet web server used by a DirectAccess client to
determine whether it is located on the corporate intranet or the Internet.

Front 141

Network Monitor

Back 141

A utility that enables you to capture, view, and analyze frames
transmitted across the network to network adapter cards on your computer. It is
useful for detecting incursions by unauthorized users and tracing their activity on
the network.

Front 142

Network Policy Server (NPS)

Back 142

Microsoft’s implementation of RADIUS that is used
in both the original and R2 versions of Windows Server 2008. It replaces the Internet
Authentication Service (IAS) server used with Windows Server 2003.

Front 143

network printer

Back 143

A printer that is equipped with its own network adapter card and
connected to the network.

Front 144

New Technology File System (NTFS)

Back 144

The file system originally provided with
Windows NT that supports volume mounting, compression, encryption, and
security.

Front 145

nmcap.exe

Back 145

The command-line version of Network Monitor. nmcap.exe enables
you to script execution of Network Monitor or run Network Monitor on a machine
running the Server Core version of Windows Server 2008.

Front 146

non-dynamic DNS

Back 146

A type of DNS that does not update automatically; an administrator
must enter updated zone data manually. This type of DNS was used by Windows
NT DNS servers.

Front 147

NPS template

Back 147

A template that helps you to create configuration components such
as client lists, shared secrets, connection conditions, and so on, which you can use
on a series of NPS servers. NPS makes six default templates available.

Front 148

nslookup

Back 148

A TCP/IP utility used in troubleshooting DNS name-resolution
problems.

Front 149

NTFS permissions

Back 149

The security feature available in NTFS that allows you to grant
or deny local access rights.

Front 150

offline files

Back 150

A feature built into Windows Server 2008/Windows 7 that enables you
to cache locally stored copies of shared files and folders, so that you can work with
them while offline and re-synchronize your changes when you go back online.

Front 151

Open Systems Interconnection (OSI) reference model

Back 151

A seven-layer reference
model that serves to describe the work of protocols in a standardized fashion.

Front 152

Other Stateful Configuration (O) flag

Back 152

A parameter that determines how additional
IPv6 configuration parameters are obtained. This includes such settings as the IPv6
addresses of DNS servers.

Front 153

packet filter

Back 153

A technology that enables you to specify destinations, ports, and protocols
of network packets that are either allowed to or forbidden from being transmitted
to or from your router.

Front 154

paging file

Back 154

Virtual memory stored on disk that enables Windows Server 2008 to
run more applications at one time than would be allowed by the computer’s physical
memory (RAM).

Front 155

passive file screening

Back 155

A component of file screening that sends configured notifications
to users who save specific file types but does not prevent users from saving
these files.

Front 156

performance counter

Back 156

A statistical measurement associated with a performance object,
such as %disk time, queue length, and so on.

Front 157

performance logs

Back 157

Collections of computer performance-monitoring data collected
by running Data Collector Sets. You can archive performance logs and view them in
Performance Monitor so that you can obtain a time-trend of a server’s performance.

Front 158

Performance Monitor

Back 158

A Microsoft Management Console (MMC) application that
contains several tools for monitoring your computer’s performance.

Front 159

performance object

Back 159

Hardware or software components that the Performance
Monitor can use for tracking performance data.

Front 160

persistent route

Back 160

A static route that has been defined so that it will remain on the
router even if the interface is deleted or the server is rebooted.

Front 161

Pointer (PTR) record

Back 161

A DNS resource record that defines the IP address to host
name mappings. Used to answer reverse lookup queries, where the user is requesting
the host name corresponding to a given IP address.

Front 162

Point-to-Point Protocol (PPP)

Back 162

A dial-up protocol that supports TCP/IP and IPX/
SPX and others with advanced compression and encryption functions.

Front 163

Point-to-Point Tunneling Protocol (PPTP)

Back 163

A protocol used to create VPN tunnels
across a public network and includes encryption and authentication.

Front 164

Preboot Execution Environment (PXE)

Back 164

A bootable ROM chip contained on compatible
NICs that enables client computers without an operating system to boot and
connect to the network for locating a Windows Deployment Services (WDS) server.

Front 165

primary DNS suffix

Back 165

The domain or zone name stored in DNS that is appended to
any unqualified host name in order to perform a search. By default, this is the AD
DS domain name for a domain member computer; on a standalone computer, you
can specify a primary DNS suffix from the DNS Suffix and NetBIOS Name dialog
box.

Front 166

primary zone

Back 166

A master copy of DNS zone data hosted on a server that is the primary
source of information for records found in this zone.

Front 167

print device

Back 167

The hardware device that produces the printed output.

Front 168

print driver

Back 168

The program that converts graphics commands into instructions a
given type of print device can understand.

Front 169

print driver isolation

Back 169

In Windows 7 and Windows Server 2008 R2, this improves
the reliability of the print service by enabling print drivers to run in separate processes
from the print spooler process.

Front 170

print pooling

Back 170

The act of setting up two or more physical printers (print devices),
each associated with a single printer.

Front 171

print queue

Back 171

The series of documents that have been scheduled to print to a specific
printer.

Front 172

print server

Back 172

Any computer on which printers have been configured. This can include
a client computer such as Windows 7, as well as a Windows Server 2008 R2 or
older server computer.

Front 173

print spooler

Back 173

An area on a computer’s hard drive where documents to be printed
are stored while awaiting printing. The spooler software formats the documents so
that the associated printer can print them properly.

Front 174

printer

Back 174

The software interface between the operating system and the print device
that determines various aspects of the printing process.

Front 175

printer pool

Back 175

A set of two or more identical print devices associated with a single
printer.

Front 176

printer priority

Back 176

A number from 1 to 99 that determines which document is printed
first. Printers with a higher priority print their documents first.

Front 177

private IPv4 network

Back 177

An IPv4 network that can be accessed only within a corporation
and cannot be accessed from the public Internet. Private IPv4 networks can be
configured with one of the following network addresses: 10.0.0.0/8, 172.16.0.0/16,
or 192.168.0.0/24.

Front 178

private key

Back 178

A digital code that is kept confidential and is used along with the public
key to secure data.

Front 179

Protected Extensible Authentication Protocol (PEAP)-Transport Layer Security
(PEAP-TLS)

Back 179

A remote access authentication and security protocol that provides
an encrypted authentication channel, dynamic keying material from TLS, fast reconnect
using cached session keys, and server authentication that protects against
the setup of unauthorized access points.

Front 180

protocol analyzer

Back 180

A hardware device or software program that enables you to
capture, store, and analyze each packet that crosses your network. Also known as a
network analyzer or packet analyzer. Network Monitor is Microsoft’s version of a
software-based protocol analyzer.

Front 181

public key

Back 181

A digital code available to everyone that is used along with a private key
to secure data.

Front 182

quota template

Back 182

A template that you can create using FSRM that simplifies quota
management by enabling you to apply similar quotas to many different shared folders
and volumes on different servers in your organization.

Front 183

RADIUS client

Back 183

A server or network access device that uses the RADIUS protocol
to communicate with RADIUS serves such as NPS servers. Remember that dial-up,
VPN, or other client-based computers, are not considered to be RADIUS clients.

Front 184

RADIUS proxy

Back 184

An NPS server that forwards RADIUS messages between RADIUS
clients and servers that perform user authentication, authorization, and
accounting.

Front 185

recovery agent

Back 185

A user who has been assigned permission to access and decrypt
files, folders, and volumes that have been encrypted using either EFS or BitLocker.

Front 186

recursion

Back 186

The name-resolution technique wherein a DNS server queries other
DNS servers on behalf of the requesting client to obtain the required FQDN, which
it returns to the client.

Front 187

referral

Back 187

An ordered list of targets that a user receives when she accesses a
namespace root or folder from a namespace server or domain controller.

Front 188

Reliability Monitor

Back 188

A Windows Server 2008 tool that provides a trend analysis of
your computer’s system stability with time. It shows how events such as hardware or
application failures, software installations or removals, and so on affect your computer’s
stability.

Front 189

remediation server

Back 189

A server that computers deemed to be noncompliant with
NAP policies can access in order to obtain security updates, antivirus or antispyware
signature files, or other updates required to achieve compliant status and receive unrestricted
network access.

Front 190

remote access policy

Back 190

The part of Routing and Remote Access Service that determines
the conditions, profile, and permissions under which users can dial in to
remotely access their networks for services.

Front 191

Remote Access Service (RAS)

Back 191

An integrated service that provides remote networking
access for telecommuters, mobile workers, system administrators, and so
on, and provides remote access to the network for services, such as file and printer
sharing, electronic mail, and database access.

Front 192

Remote Authentication Dial-In User Service (RADIUS)

Back 192

The industry standard client/
server protocol that enables remote access servers to communicate with a central
server and database to authenticate dial-in and VPN users and authorize their
access to the requested system or service.

Front 193

replication group

Back 193

In DFS Replication, a group of servers that are configured
to replicate folders among each other. The group can be configured with a huband-
spoke topology, in which members of the group replicate only with a central
server, or a full mesh topology, in which all members replicate with all other
members.

Front 194

replication member

Back 194

One server in a replication group that is configured to replicate
folders with other members of the group.

Front 195

replication scope

Back 195

The subset of DNS servers or domain controllers that actively
participate in replication of the specific zone.

Front 196

reporting mode

Back 196

A NAP mode setting that evaluates client computers for health
status but does not enforce restricted network access for noncompliant computers.
Useful for setting up and testing the operation of a NAP implementation.

Front 197

reservation

Back 197

An IP address that is configured so that DHCP always assigns it to a
specific DHCP client.

Front 198

Resource Monitor

Back 198

A monitoring tool that provides a summary of CPU, disk,
network, and memory performance statistics including mini graphs of recent performance
of these four components, as well as tabulated data pertaining to each of
these components.

Front 199

Resource record

Back 199

A standard database record type used in DNS zone database
files. Common types of resource records include Start of Authority (SOA), Address
(A or AAAA), Mail Exchanger (MX), and Name Server (NS), among others.

Front 200

reverse lookup query

Back 200

A DNS name-resolution process by which an IP address is
resolved to a host name.

Front 201

root hints

Back 201

A list of the names and IP addresses of DNS servers that are authoritative
for the Internet root domains. Used by a DNS server to forward queries for
Internet domains that it is unable to resolve from its own database.

Front 202

round robin

Back 202

A load-balancing mechanism used by DNS servers to distribute name
resolution activity among all available DNS servers.

Front 203

router

Back 203

A device that operates at Layer 3 of the OSI protocol stack and manages
the flow of data between network segments or subnets. RRAS in Windows Server
2008 is capable of acting as a completely functional router on small to medium-sized
networks.

Front 204

routing algorithm

Back 204

A mathematical algorithm that calculates optimal routes for
packets traversing an internetwork. Such algorithms take many factors into consideration,
including the speed, bandwidth, availability, and cost of each link.

Front 205

Routing and Remote Access service (RRAS)

Back 205

A Windows Server 2008 role service
that is part of the Network Policy and Access Services server role and enables the
server to function as a network router and remote access server.

Front 206

Routing Information Protocol (RIP)

Back 206

A distance-vector routing protocol that enables
the exchange of routing information within a small to medium sized network.

Front 207

routing table

Back 207

A table present on every Windows computer, server or client, that
provides a complete description of all routes available from or to the computer on
which it is displayed.

Front 208

secondary zone

Back 208

An additional copy of DNS zone data hosted on a DNS server
that is a secondary source for this zone information.

Front 209

secure dynamic DNS (SDDNS)

Back 209

An enhancement to DNS that enables you to permit
dynamic updates only from authorized client computers in an Active Directory–
integrated zone.

Front 210

Secure Socket Tunneling Protocol (SSTP)

Back 210

A tunneling protocol that uses Secure
Hypertext Transfer Protocol (HTTPS) over TCP port 443 to transmit traffic across
firewalls and proxy servers that might block PPTP and L2TP traffic.

Front 211

secure zone transfer

Back 211

A method of digitally signing zone transfers that enables secondary
DNS servers to verify that zone transfers are being received from a trusted
source.

Front 212

server isolation policy

Back 212

A Group Policy setting that enables you to use IPSec authentication
to isolate specific domain member servers to accept only authenticated
and secured communication from other computers within the domain.

Front 213

server-side targeting

Back 213

A means of creating computer groups for WSUS in which
you manually add computers to computer groups using the Update Services snap-in.

Front 214

service location (SRV) record

Back 214

A DNS resource record that provides information
about where computers that provide a specific service are located on the network.

Front 215

service set identifier (SSID)

Back 215

A unique configurable identification that allows clients
to communicate to the appropriate access point on an 802.11 network.

Front 216

shadow copies

Back 216

Also known as volume shadow copies, backup copies of files and
folders automatically created by Windows as you work on them, enabling you to restore
them should they become improperly modified, corrupted, or deleted.

Front 217

Share and Storage Management Console

Back 217

A new MMC snap-in that facilitates the
configuration and administration of shared folders and volumes in Windows Server
2008 R2.

Front 218

shared folder permissions

Back 218

The security feature available when sharing files and
folders across a network that allows you to grant or deny access rights to network
users.

Front 219

shared folders

Back 219

Folders that are made available for access by users who are working
at another computer on the network.

Front 220

Simple Network Management Protocol (SNMP)

Back 220

A network management protocol
that enables you to configure remote devices, monitor network performance, detect
network faults, detect inappropriate access, and audit network usage on devices such
as hubs, bridges, routers, and servers.

Front 221

SNMP agent

Back 221

A device such as a computer or network component on which SNMP
software has been installed. The SNMP agent gathers information in response to
requests from an SNMP management system.

Front 222

SNMP community

Back 222

A logical group of hosts that belong together and all run the
SNMP service. Every community includes at least one management system and
multiple agents.

Front 223

SNMP management system

Back 223

A computer on which you have installed SNMP management
software that sends information and update requests to devices configured
as SNMP agents.

Front 224

SNMP trap

Back 224

An unsolicited message sent by an SNMP agent to an SNMP management
system when the agent detects that a certain type of event has occurred locally
on the managed host.

Front 225

source computer

Back 225

Also called forwarding computer, a computer that has been configured
using an event log subscription to send its event logs to another computer.

Front 226

Start of Authority (SOA) record

Back 226

A DNS resource record that identifies the primary
name server within the domain. It also includes other properties such as an administrator
e-mail address and caching properties for the zone. This record is always the
first resource record in every zone file.

Front 227

Startup Repair

Back 227

A utility that provides options for repairing problems that are preventing
a computer from starting normally.

Front 228

stateful address configuration

Back 228

A type of IPv6 address autoconfiguration that uses a
stateful address configuration protocol such as DHCPv6 to obtain non-link-local
addresses and other IPv6 configuration parameters.

Front 229

stateful firewall

Back 229

A firewall that monitors the state of active connections and uses
the information gained to determine which network packets are allowed through
the firewall. Packets sent by an outside computer attempting to communicate with a
computer protected by a stateful firewall are dropped unless the packet or protocol
was granted access by an access control list (ACL).

Front 230

stateless address configuration

Back 230

A type of IPv6 address autoconfiguration that
uses Router Advertisement messages to configure link-local addresses and additional
addresses by exchanging Router Solicitation and Router Advertisement messages
with neighboring routers.

Front 231

statement of health (SoH)

Back 231

A declaration from a system health agent (SHA) on a
client computer that asserts the client’s health status to NAP. The SHA creates the
SoH and sends it to the corresponding system health validators (SHVs) on a NAP
health policy server.

Front 232

static IP address

Back 232

An IP address that is permanently assigned to a computer on the
network.

Front 233

static route

Back 233

An administrator-defined route that does not change and defines the
pathway from one network to another network.

Front 234

Storage Manager for SANs

Back 234

A server feature that enables you to create and manage
LUNs on storage area networks, thereby assisting you in managing your network.

Front 235

storage reports

Back 235

Reports generated by FSRM that provide information on the data
stored on your file server, assisting you in understanding file usage on your server.

Front 236

storage-area network (SAN)

Back 236

A discrete network that is dedicated to file storage
using devices, such as disk arrays or tape libraries, that provides dedicated storage
to servers in such a fashion that these devices appear to be locally attached to the
servers that reference them.

Front 237

stub zone

Back 237

A DNS zone that contains source information about authoritative name
servers for its zone only.

Front 238

subnet mask

Back 238

A set of numbers, 32-bits in length, that begins with 1s and ends
with 0s in binary notation. The number of 1s represents the number of bits that are
considered the subnet address. The bits that are 0s are the host address. Using a
subnet mask, you can create more subnets with a smaller number of computers per
subnet. All computers on a given subnet must have the same subnet mask. Using
dotted-decimal notation, a subnet mask is written as 255.255.0.0 (which is the default
mask for a Class B address).

Front 239

subnetting

Back 239

A process that enables you to reconfigure which portion of the subnet
mask constitutes the network portion and which portion constitutes the computer
portion.

Front 240

superscope

Back 240

A group of multiple scopes (child scopes) as a single administrative
entity used on DHCP servers.

Front 241

synchronizing files

Back 241

The act of copying files from a shared folder on the network
to an offline file cache on a computer, or copying the same files back to the shared
folder after a user has modified them.

Front 242

system health agent (SHA)

Back 242

A NAP-capable client software component that declares
a client computer’s health status to NAP in a statement of health (SoH).

Front 243

system health validator (SHV)

Back 243

A NAP health policy software that validates a client
computer’s health status by verifying the client’s SoH made by its corresponding
SHA.

Front 244

System Stability Index

Back 244

A numerical value that provides an indication of your computer’s
reliability over time, as measured by Reliability Monitor.

Front 245

System State data

Back 245

Operating system-specific data that is backed up by the Windows
Server Backup program as a unit. It contains the Registry, COM+ class registration
database, and system and boot files; on domain controllers, it also includes
the AD DS database and the SYSVOL folder.

Front 246

Teredo

Back 246

A tunneling communication protocol that enables IPv6 connectivity between
IPv6/IPv4 nodes across Network Address Translation (NAT) interfaces,
thereby improving connectivity for newer IPv6-enabled applications on IPv4 networks.

Front 247

Time to Live (TTL)

Back 247

A configurable retention time interval that specifies the length
of time that the server will retain cached information for a zone. The maximum default
TTL is one hour.

Front 248

Transmission Control Protocol (TCP)

Back 248

A TCP/IP protocol that provides connection-
oriented, reliable communication between two hosts, typically involving large
amounts of data.

Front 249

transport mode

Back 249

An IPSec mode that is used for end-to-end security between a
client and a server within a local area network. In transport mode, the entire packet
is not encrypted or signed; rather, only the data in the IP payload is encrypted and
signed.

Front 250

trust anchor

Back 250

A preconfigured public key associated with a specific zone in DNS.
Such a trust anchor is used to support the DNSKEY resource record on a Windows
Server 2008 R2 DNS server.

Front 251

Trusted Platform Module (TPM)

Back 251

A microchip that is built into a computer. It is
used to store cryptographic information, such as encryption keys.

Front 252

tunnel mode

Back 252

An IPSec mode that encrypts the IP header and the payload during
transit. In this way, tunnel mode provides protection for the entire packet.

Front 253

universal naming convention (UNC)

Back 253

A network naming scheme that uses NetBIOS
names for accessing shared resources on remote computers using the format
\\servername\sharename.

Front 254

update classifications

Back 254

Diverse types of updates available from Microsoft, such as
critical updates, definition updates, and security updates, which can be deployed to
client computers from a WSUS server.

Front 255

update synchronization

Back 255

The act of downloading updates from the Microsoft Update
website to a WSUS server for testing, approval, and distribution to client computers.

Front 256

upstream server

Back 256

A WSUS server that provides update files to downstream servers
when you are implementing a WSUS server hierarchy.

Front 257

user class

Back 257

An options class that is used to differentiate DHCP clients according to
their type, such as desktop, laptop, or server computer.

Front 258

User Datagram Protocol (UDP)

Back 258

A TCP/IP protocol that provides fast, non-connection-
oriented communications with no guarantee of delivery and no error checking.

Front 259

vendor class

Back 259

An options class that’s used to identify a client’s vendor type and
configuration when obtaining a DHCP lease. You can use the vendor class ID option
(code 60) to specify vendor classes.

Front 260

virtual private network (VPN)

Back 260

Using a protocol such as Point-to-Point Tunneling
Protocol or L2TP with IPSec to tunnel through a public network to connect to a
private network and maintain a secure connection.

Front 261

volume shadow copy service (VSS)

Back 261

Also known as volume snapshot copy, a Windows
service that automatically backs up copies of files and folders as you work on
them, enabling you to revert to an earlier version should you improperly modify or
delete them.

Front 262

VPN Reconnect

Back 262

A new feature of Windows Server 2008 R2 and Windows 7 that
utilizes IKEv2 technology to automatically reestablish a VPN connection when a
user has temporarily lost her Internet connection.

Front 263

vssadmin.exe

Back 263

A utility that enables you to manage volume shadow copies from
the command line.

Front 264

wbadmin.exe

Back 264

A command-line tool that enables you to perform backups and restores.
In Windows Server 2008, this is the only tool that you can use to perform
system state backups and restores.

Front 265

Weighting records

Back 265

The act of specifying a value used by the clients to determine
which server to contact, in cases where multiple records with the same
priority exist. You can enter a weight value each time you create a new SRV
resource
record.

Front 266

Wi-Fi Protected Access (WPA and WPA2)

Back 266

A wireless authentication protocol that
uses preshared network key encryption to ensure that only authorized users receive
access to the network.

Front 267

Windows Firewall

Back 267

The personal firewall software incorporated in Windows
Vista/7/Server 2008/R2 that filters incoming TCP/IP traffic. Windows Firewall was
first introduced in Windows XP SP2.

Front 268

Windows Firewall with Advanced Security

Back 268

A Microsoft Management Console
(MMC) snap-in that provides enhanced firewall management capabilities, including
the ability to create firewall rules that are specifically configured to protect a specific
type or source/destination path of network traffic.

Front 269

Windows Security Health Validator (WSHV)

Back 269

A system health validator included
with Windows Server 2008 that provides default NAP health validation settings for
firewall, antivirus, spyware, automatic updates, and security updates.

Front 270

Windows Server Backup

Back 270

A Windows Server 2008 server feature that provides a
centralized location and wizards for performing various types of backup and restore
procedures.

Front 271

Windows Server Update Services

Back 271

A Windows Server 2008 R2 server role that
supplies updates, hotfixes, and other patches automatically to computers on a network.
You can deploy and manage updated downloaded from the Microsoft Windows
Update website to WSUS servers running on your network. Client computers
simply connect to the local WSUS server to download and install updates.

Front 272

Windows Update

Back 272

An application that enables you to maintain your computer in an
up-to-date condition by automatically downloading and installing critical updates
as Microsoft publishes them. Also enables access to the WSUS server or Microsoft
website on which these updates are published.

Front 273

WINS (Windows Internet Name System)

Back 273

A Windows Server 2008 feature that
enables the dynamic resolution of NetBIOS names to the corresponding IP
addresses.

Front 274

wired equivalent privacy (WEP)

Back 274

A protocol that is used on 802.11-based wireless
networks to encrypt data sent between computers on a wireless network or between
a computer and its access point.

Front 275

wireless access policy

Back 275

A component of Group Policy that defines conditions that
wireless clients attempting to access a network through a RADIUS server must meet
in order to gain access.

Front 276

zone

Back 276

A discrete portion of the local or Internet-based DNS namespace, for which
a single DNS server is authoritative.

Front 277

zone delegation

Back 277

The act of creating a new subdomain that exists in its own DNS
zone and has one or more DNS servers specifically delegated to it as containing the
authoritative zone files. Resource records are created in other zones that point to
the authoritative DNS servers for the zone being delegated.

Front 278

zone file

Back 278

A file that includes all resource records needed to completely define a
zone and is kept on the DNS name server.

Front 279

zone transfers

Back 279

A mechanism that replicates and synchronizes all copies of the zone
files between DNS name servers.