Skills Measured

Configuring Domain Name System (DNS) for Active Directory (16 percent)

Configure zones

Configure DNS server settings

Configure zone transfers and replication

Configuring the Active Directory infrastructure (25 percent)

Configure a forest or a domain

Configure trusts

Configure sites

Configure Active Directory replication

Configure the global catalog

Configure operations masters

Configuring additional Active Directory server roles (9 percent)

Configure Active Directory Lightweight Directory Service (AD LDS)

Configure Active Directory Rights Management Service (AD RMS).

Configure the read-only domain controller (RODC).

Configure Active Directory Federation Services (AD FS).

Creating and maintaining Active Directory objects (24 percent)

Automate creation of Active Directory accounts

Maintain Active Directory accounts

Create and apply Group Policy objects (GPOs).

Configure GPO templates

Configure software deployment GPOs

Configure account policies

Configure audit policy by using GPOs.

Maintaining the Active Directory environment (13 percent)

Configure backup and recovery

Perform offline maintenance

Monitor Active Directory

Configuring Active Directory Certificate Services (13 percent)

Install Active Directory Certificate Services

Configure CA server settings

Manage certificate templates

Manage enrollments

Manage certificate revocations



Some links to the new R2 content for the 640 exam


Configuring the Active Directory Infrastructure
Configure Active Directory replication


Configuring Active Directory Roles and Services
Configure Active Directory Federation Services (AD FSv2)


Creating and maintaining Active Directory objects
Automate creation of Active Directory acounts

Deploy and manage software by using GPO's

Configure audit policy by using GPO's


Maintaining the Active Directory Environment
Configure backup and recovery

Configuring Active Directory Certificate Services
Manage enrollment