<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	xmlns:georss="http://www.georss.org/georss" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:media="http://search.yahoo.com/mrss/"
	>

<channel>
	<title>Getting IT Right - the unofficial voice of Meteor IT &#187; 70-298</title>
	<atom:link href="http://blog.meteorit.co.uk/tag/70-298/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.meteorit.co.uk</link>
	<description>Ramblings of a self-confessed geek</description>
	<lastBuildDate>Fri, 03 Sep 2010 17:03:43 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.com/</generator>
<cloud domain='blog.meteorit.co.uk' port='80' path='/?rsscloud=notify' registerProcedure='' protocol='http-post' />
<image>
		<url>http://1.gravatar.com/blavatar/f20aaf2e5a61cd42fe07e67a0f2a1c3f?s=96&#038;d=http://s2.wp.com/i/buttonw-com.png</url>
		<title>Getting IT Right - the unofficial voice of Meteor IT &#187; 70-298</title>
		<link>http://blog.meteorit.co.uk</link>
	</image>
	<atom:link rel="search" type="application/opensearchdescription+xml" href="http://blog.meteorit.co.uk/osd.xml" title="Getting IT Right - the unofficial voice of Meteor IT" />
	<atom:link rel='hub' href='http://blog.meteorit.co.uk/?pushpress=hub'/>
		<item>
		<title>Why IT design skills are important, and how to measure them</title>
		<link>http://blog.meteorit.co.uk/2008/02/29/why-it-design-skills-are-important-and-how-to-measure-them/</link>
		<comments>http://blog.meteorit.co.uk/2008/02/29/why-it-design-skills-are-important-and-how-to-measure-them/#comments</comments>
		<pubDate>Fri, 29 Feb 2008 12:10:14 +0000</pubDate>
		<dc:creator>Adam Vero</dc:creator>
				<category><![CDATA[Security and Malware]]></category>
		<category><![CDATA[Training + certification]]></category>
		<category><![CDATA[70-298]]></category>
		<category><![CDATA[design exam]]></category>
		<category><![CDATA[MCP]]></category>
		<category><![CDATA[security design]]></category>

		<guid isPermaLink="false">http://veroblog.wordpress.com/2008/02/29/why-it-design-skills-are-important-and-how-to-measure-them/</guid>
		<description><![CDATA[The comments on my earlier post about the MS Security Design exam 70-298 prompted me to add some more general thoughts. I agree with the comment made that the design exams do generally seem easier in some respects than the straight technical ones, as you don&#8217;t need to know the same level of detail of [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.meteorit.co.uk&amp;blog=646149&amp;post=145&amp;subd=veroblog&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
			<content:encoded><![CDATA[<p>The comments on my <a title="70-298 exam thoughts" href="http://veroblog.wordpress.com/2008/02/22/passed-70-298-designing-security-for-windows-2003/" target="_blank">earlier post about the MS Security Design exam 70-298</a> prompted me to add some more general thoughts.
<p>I agree with the comment made that the design exams do generally seem easier in some respects than the straight technical ones, as you don&#8217;t need to know the same level of detail of exactly how to do something in terms of making choices in a dialogue box. </p>
<p>On the other hand, the MS design exams do expect you to be able to take in, digest and interpret a load of business and technical requirements (some of the latter may only be implied from the former, some will be explicitly stated). The breadth of this is where the challenge lies in the real world, although the exam will often lead you in the right direction, rather than a blank sheet of paper on which to write an IT security plan. The nature of a computer-based exam does not lend itself to open questions; it would be very hard to make any kind of meaningful sense out of your answer to &#8220;How would you improve the security of the data for this organisation? (answer in no more than 200 words)&#8221;.</p>
<p><span id="more-145"></span></p>
<p>The other difference between these sort of exams and a real-world scenario is that in order to ensure there is a completely correct answer the requirements do not conflict. Sometimes one requirement might &#8220;trump&#8221; another, but will never directly oppose it. You won&#8217;t have the CEO saying that staff must not be required to carry anything for two-factor authentication while the CIO says all data must be encrypted and secured using smartcards. The reality of business is that overcoming these sort of conflicts is often the first hurdle for an IT manager to address through listening, discussion, understanding and education.</p>
<p>From a hardcore, old-school, hands-on technical point of view, this exam is not particularly challenging. It is really easy to say &#8220;just build a PKI infrastructure with subordinate CAs on every site, auto-enrol machines using Group Policy and then use IPSec to manage all access to secure data&#8221; &#8211; actually implementing such as plan is a bit more than an afternoon&#8217;s work, though!</p>
<p>Seeing the whole picture, understanding which bits of provided information are important and which less so, and knowing what can be done technically to address the needs is a different type of skill than the attention to detail needed for the technical exams. Much of this is learnt through experience, rather than from books. Reading widely around the subject at hand (security in this case, or Active Directory or Exchange design at enterprise level for those exams) and getting a feel for it from others is just as important.</p>
<p>In some ways, this design exam is a more realistic measure of your real ability to do this type of work than some of the technical exams. How many times have you had to learn some detail for an exam (such as the switches available for some command line tool), knowing that you have almost zero chance of ever needing that particular fact in your environment, and that if you ever did you would be able to look it up in minutes (most probably with a simple /?). Knowing that the tool exists, and the situations where it is used should be enough, and there seem to be too few exams which acknowledge this. </p>
<p>This learning of detail for its own sake is the reason why for me the 70-270 XP exam was one of the hardest to learn for. I have never done, and very likely never will do, an unattended (scripted) installation of Windows XP. I have used sysprep many times, creating &#8220;gold images&#8221; for cloning using tools such as Ghost, but never written an unattend.txt file. Yet for the exam I had to learn all the switches, what the files were called and where they were saved, and which one &#8220;won&#8221; if their configurations conflicted. To me, understanding the benefits and weaknesses of a variety of deployment methods is more important &#8211; should I be cloning? using RIS? writing unattend files and creating bootable install media? what advantages does Ghost multicast have over RIS? what disadvantages? how about SMS or SCCM? If I decide to use unattended installation, I can easily use reference books and internet resources to get the detail of how it is done. Knowing it is the right tool to use in the first place seems to me the bigger challenge.</p>
<p>In the end, I believe the design and technical exams share the same separation of skills as those of an architect and a builder. The architect needs to understand the building methods available and the benefits and limitations of them in order to be able to choose the appropriate ones for the required design to fit the customer brief from a two-bedroom house to a skyscraper or shopping mall. In doing so he will need to have some awareness of a whole range of trades such as building, plumbing, glazing, insulation, as well as understanding wider issues such as planning and environmental regulations. A builder has to implement the design through a deeper working knowledge and experience of actually laying bricks, pouring concrete or fitting steel structures together. A <em>good</em> builder will also be able to see the bigger picture and offer alternatives if his experience tells him that a better choice exists. The builder may also need to have some feel for where the plumbing will go or how the roof will be attached, but would not be expected to install the heating system or wire the alarms.</p>
<p>An IT team needs good builders, but without an architect who also understands the bigger picture, they will never get successful end-results, and somehow you have to be able to identify who has these skills and who does not.</p>
<br /><img alt="" border="0" src="http://feeds.wordpress.com/1.0/categories/veroblog.wordpress.com/145/" /> <img alt="" border="0" src="http://feeds.wordpress.com/1.0/tags/veroblog.wordpress.com/145/" /> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/veroblog.wordpress.com/145/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/veroblog.wordpress.com/145/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/veroblog.wordpress.com/145/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/veroblog.wordpress.com/145/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gofacebook/veroblog.wordpress.com/145/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/facebook/veroblog.wordpress.com/145/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gotwitter/veroblog.wordpress.com/145/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/twitter/veroblog.wordpress.com/145/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/veroblog.wordpress.com/145/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/veroblog.wordpress.com/145/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/veroblog.wordpress.com/145/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/veroblog.wordpress.com/145/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/veroblog.wordpress.com/145/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/veroblog.wordpress.com/145/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.meteorit.co.uk&amp;blog=646149&amp;post=145&amp;subd=veroblog&amp;ref=&amp;feed=1" width="1" height="1" />]]></content:encoded>
			<wfw:commentRss>http://blog.meteorit.co.uk/2008/02/29/why-it-design-skills-are-important-and-how-to-measure-them/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
	
		<media:content url="http://1.gravatar.com/avatar/786403437a56d6c7ecd26e885004d2ad?s=96&#38;d=wavatar&#38;r=PG" medium="image">
			<media:title type="html">AdamV</media:title>
		</media:content>
	</item>
		<item>
		<title>Passed 70-298 &quot;Designing Security for a Windows 2003 Network&quot;</title>
		<link>http://blog.meteorit.co.uk/2008/02/22/passed-70-298-designing-security-for-windows-2003/</link>
		<comments>http://blog.meteorit.co.uk/2008/02/22/passed-70-298-designing-security-for-windows-2003/#comments</comments>
		<pubDate>Fri, 22 Feb 2008 13:40:50 +0000</pubDate>
		<dc:creator>Adam Vero</dc:creator>
				<category><![CDATA[Security and Malware]]></category>
		<category><![CDATA[Training + certification]]></category>
		<category><![CDATA[70-298]]></category>
		<category><![CDATA[MCP]]></category>
		<category><![CDATA[security design]]></category>

		<guid isPermaLink="false">http://veroblog.wordpress.com/2008/02/22/passed-70-298-designing-security-for-windows-2003/</guid>
		<description><![CDATA[This morning I took and passed Microsoft exam 70-298 &#8220;Designing Security for a Windows 2003 Network&#8221;. Having not taken one of these scenario-style design exams before, I was a little cautious even though I was fairly confident of my knowledge of the material. The first section had 11 questions which was great as I had [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.meteorit.co.uk&amp;blog=646149&amp;post=144&amp;subd=veroblog&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
			<content:encoded><![CDATA[<p>This morning I took and passed Microsoft exam 70-298 &#8220;Designing Security for a Windows 2003 Network&#8221;. Having not taken one of these scenario-style design exams before, I was a little cautious even though I was fairly confident of my knowledge of the material. </p>
<p>The first section had 11 questions which was great as I had made loads of notes from the provided fictional case studies, and I sailed through with loads of time to spare. Unfortunately the format of these exams is that the time for each part is independent, so you don&#8217;t get to carry any spare time to the next set of questions and use it there. I had a couple of shorter sections where I maybe spent too long reading the materials and answered the last question with seconds to spare.</p>
<p>Overall I found this style of exam to be right up my street; taking in lots of information in a very short time and then applying my technical knowledge to this to come up with solutions to the business issues. Despite the rushed time on a couple of questions I came away with my best score to date on a Microsoft MCP exam, and won&#8217;t need to use my <a title="Free second shot to take Microsoft exams" href="http://veroblog.wordpress.com/2007/09/08/microsoft-exams-free-second-chance-offer/" target="_blank">second chance</a> to take this.</p>
<p>How do you find these design exams compare to the &#8216;normal&#8217; technical ones?</p>
<br /><img alt="" border="0" src="http://feeds.wordpress.com/1.0/categories/veroblog.wordpress.com/144/" /> <img alt="" border="0" src="http://feeds.wordpress.com/1.0/tags/veroblog.wordpress.com/144/" /> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/veroblog.wordpress.com/144/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/veroblog.wordpress.com/144/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/veroblog.wordpress.com/144/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/veroblog.wordpress.com/144/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gofacebook/veroblog.wordpress.com/144/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/facebook/veroblog.wordpress.com/144/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gotwitter/veroblog.wordpress.com/144/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/twitter/veroblog.wordpress.com/144/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/veroblog.wordpress.com/144/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/veroblog.wordpress.com/144/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/veroblog.wordpress.com/144/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/veroblog.wordpress.com/144/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/veroblog.wordpress.com/144/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/veroblog.wordpress.com/144/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.meteorit.co.uk&amp;blog=646149&amp;post=144&amp;subd=veroblog&amp;ref=&amp;feed=1" width="1" height="1" />]]></content:encoded>
			<wfw:commentRss>http://blog.meteorit.co.uk/2008/02/22/passed-70-298-designing-security-for-windows-2003/feed/</wfw:commentRss>
		<slash:comments>5</slash:comments>
	
		<media:content url="http://1.gravatar.com/avatar/786403437a56d6c7ecd26e885004d2ad?s=96&#38;d=wavatar&#38;r=PG" medium="image">
			<media:title type="html">AdamV</media:title>
		</media:content>
	</item>
	</channel>
</rss>