70-298: MCSE Guide to Designing Security for Microsoft Windows Server 2003 Network

, by Wright, Byron

Write a Review

Note: Supplemental materials are not guaranteed with Rental or Used book purchases.

ISBN: 9780619120214 | 0619120215
Cover: Paperback
Copyright: 9/1/2004

Buy New

Currently Available, Usually Ships in 24-48 Hours

$186.92

Summary

Supplemental Materials

Students will master the objectives for the new MCSE exam # 70-298.

Introduction

xix

Designing a Secure Network Framework

(48)

Introduction

(1)

Analyzing Business Requirements for Security Design

(10)

Analyzing Existing Security Policies and Procedures

(1)

Acceptable Use Policies

(1)

Privacy versus Security

(1)

Security versus Usability

(1)

Determining Requirements for Securing Data

(1)

The CIA Triad

(2)

Analyzing Current Security Practices

(1)

Using Resultant Set of Policy

(3)

Recognizing Internal Security Threats

(1)

Designing a Framework for Implementing Security

(18)

Predicting Threats to Your Network

(2)

Recognizing External Threats

(7)

What Motivates External Attackers?

(1)

Implementing Risk Analysis

(1)

Addressing Risks to the Corporate Network

(2)

Analyzing Security Requirements for Different Types of Data

(1)

Responding to Security Incidents

(1)

Recognizing Attack Indicators

(1)

Creating an Incident Response Plan

(3)

Recovering Network Services After an Attack

(1)

Analyzing Technical Constraints when Designing Security

(8)

Recognizing Capabilities of the Existing Infrastructure

(2)

Identifying Technology Limitations

(1)

Analyzing Interoperability Constraints

(1)

Interoperability with MIT Kerberos

(2)

Integrating UNIX DNS with Windows Server 2003

(2)

Summary of Exam Objectives

(1)

Exam Objectives Fast Track

(1)

Exam Objectives Frequently Asked Questions

(1)

SelfTest

(6)

SelfTest Quick Answer Key

(1)

Securing Servers Based on Function

(102)

Introduction

(1)

Defining a Baseline Security Template

(49)

Best Practices for Security Templates

(1)

Windows Server 2003 Predefined Security Templates

(2)

Default Security (setup security.inf)

(1)

Reapplying Default Security Settings

(1)

Domain Controller Default Security (DC security.inf)

(1)

Compatible (compat*.inf)

(1)

Secure (secure*.inf)

(2)

Highly Secure (hisec*.inf)

(3)

System Root Security (rootsec.inf)

(1)

No Terminal Server User SID (notssid.inf)

(3)

Configuring Security Templates

(1)

Account Policies

(2)

Local Policies

(2)

Event Log

(1)

Restricted Groups

(1)

System Services

(1)

Registry

(1)

File System

(1)

Configuring Security for Down-Level Clients

(1)

Deploying Security Templates

(1)

Using Group Policy to Deploy Security Settings

(6)

Reviewing the Result of Security Policy Settings

(3)

Using Security Configuration and Analysis to Review Security Settings

(3)

Using the secedit.exe Command-Line Tool

(1)

secedit configure

(2)

secedit analyze

(1)

secedit import

(1)

secedit export

(1)

secedit validate

(1)

secedit generaterollback

(1)

secedit refreshpolicy Replaced by gpupdate

(1)

Deploying Security Using Scripts

(4)

Design Security for Servers that Have Specific Roles

(39)

Common Server Roles

100

(2)

Server Security Best Practices

102

(4)

Configuring Security for Domain Controllers

106

(1)

Common Threats to Domain Controllers

107

(1)

Audit Backup and Restore Events

108

(1)

Restrict Access to Removable Media

108

(1)

Restricting Anonymous Access

109

(1)

Digitally Signing Authentication Traffic

110

(2)

Securing the Internet Information Server (IIS) Role

112

(1)

Using ``Configure Your Server'' to Set Up IIS

113

(1)

Basic Security for IIS

114

(1)

Using URLScan and IISLockdown

114

(2)

Configuring Security for POP3 Mail Servers

116

(1)

Security Levels

117

(1)

Authentication Methods

118

(1)

Securing Other Network Roles

118

(1)

Securing Network Infrastructure Servers

118

(2)

Securing DHCP Servers

120

(1)

Securing DNS Servers

120

(2)

WINS Servers

122

(1)

Securing File, Print, and Member Servers

123

(1)

Securing Terminal Servers

123

(2)

Securing Remote Access Servers

125

(3)

Streaming Media Server

128

(1)

Modifying Baseline Security Templates According to Role

129

(3)

Applying Security Across the Enterprise

132

(6)

Summary of Exam Objectives

138

(2)

Exam Objectives Fast Track

140

(2)

Exam Objectives Frequently Asked Questions

142

(1)

SelfTest

143

(6)

SelfTest Quick Answer Key

149

(2)

Designing a Secure Public Key Infrastructure

151

(42)

Introduction

152

(1)

Designing a Public Key Infrastructure

152

(20)

Understanding PKI

155

(3)

Designing a Certification Authority Implementation

158

(4)

Geographical Hierarchy

162

(1)

Organizational Hierarchy

163

(1)

Network Trust Hierarchy

164

(1)

Designing a Logical Authentication Strategy

165

(2)

Designing Security for CA Servers

167

(1)

Common Threats Against Certificate Services

167

(2)

Securing an Enterprise Hierarchy

169

(1)

Securing a Stand-Alone CA

170

(2)

Designing Certificate Distribution

172

(13)

Designing Enrollment and Distribution

177

(2)

Approving Certificates by CA Administrators

179

(1)

Revoking Certificates by CA Administrators

180

(1)

Establishing Renewal and Auditing

181

(4)

Summary of Exam Objectives

185

(1)

Exam Objectives Fast Track

186

(1)

Exam Objectives Frequently Asked Questions

187

(1)

SelfTest

188

(4)

SelfTest Quick Answer Key

192

(1)

Securing the Network Management Process

193

(48)

Introduction

194

(1)

Securing the Network Management Process

194

(16)

Managing the Risks of Network Administration

195

(2)

Security Policies for Administrators and IT Personnel

197

(1)

Delegating Authority Securely

197

(3)

Securing Common Administrative Tools

200

(1)

Microsoft Management Console

201

(1)

Terminal Server

201

(4)

Remote Desktop for Administration

205

(2)

Remote Assistance

207

(1)

Telnet

208

(1)

Designing Security for Emergency Management Services

208

(2)

Designing a Security Update Infrastructure

210

(7)

Designing a Software Update Service Infrastructure

211

(2)

Using Group Policy to Deploy Software Updates

213

(2)

Design a Strategy for Identifying Computers That Are Not at the Current Patch Level

215

(2)

Designing Trust Relationships Between Domains and Forests

217

(14)

Designing Forest and Domain Trust Models

221

(1)

Default Trust Relationships

222

(1)

External Trusts

222

(1)

Selecting the Scope of Authentication for Users

223

(1)

Realm Trusts

224

(1)

Shortcut Trusts

225

(1)

Designing Security for Interoperability

226

(5)

Summary of Exam Objectives

231

(1)

Exam Objectives Fast Track

232

(1)

Exam Objectives Frequently Asked Questions

233

(1)

SelfTest

234

(5)

SelfTest Quick Answer Key

239

(2)

Securing Network Services and Protocols

241

(110)

Introduction

242

(1)

Designing Network Infrastructure Security

243

(96)

Common Types of Attacks

247

(2)

Assessing Risk for Network Services

249

(2)

IPSec Overview

251

(1)

Security Associations

252

(1)

Phase I Security Association

252

(4)

Phase II Security Association

256

(1)

IPSec Modes

256

(1)

IPSec Protocols

257

(3)

Authentication Header

260

(1)

Encapsulated Security Payload

261

(2)

The IPSec Process

263

(1)

IPSec Policies Overview

264

(1)

Default IPSec Policies

264

(1)

IPSec Rules

264

(5)

Predefined Filter Lists

269

(1)

Predefined Filter Actions

270

(2)

IP Packet Filtering

272

(1)

netsh Commands

272

(1)

How IPSec Policy Is Applied

273

(2)

Assigning Domain-Based IPSec Policy

275

(1)

Exporting and Importing IPSec Policy

276

(1)

Assigning OU-Based IPSec Policy

277

(1)

Assigning Local IPSec Policy

277

(1)

IPSec Driver Modes

278

(4)

IPSec Best Practices

282

(2)

Designing IPSec Policies

284

(1)

Configuring IPSec Policy

285

(1)

Assigning IPSec Policy

285

(4)

Designing IP Filtering

289

(3)

Configuring a Firewall Configuration

292

(1)

Securing DNS

293

(1)

Common Threats to DNS

294

(1)

DNS Namespace

295

(1)

Single Namespace

295

(1)

Delegated Namespace

295

(1)

Internal Namespace

295

(1)

Segmented Namespace

296

(1)

Securing the Namespace

296

(1)

DNS Server Service

297

(3)

DNS Zones

300

(2)

DNS Resource Records

302

(1)

DNS Clients

303

(1)

Designing Security for Data Transmission

303

(1)

SSL/TLS

303

(6)

S/MIME

309

(1)

SMB Signing

309

(3)

Port Authentication for Switches

312

(1)

Using Segmented Networks

313

(1)

Design Security for Wireless Networks

313

(1)

Types of Wireless Networks

314

(1)

Brief Wireless History

315

(2)

Threats to Wireless Networks

317

(2)

Quick Review of PKI and RADIUS/IAS

319

(1)

Public Key Infrastructure

319

(1)

Remote Authentication Dial-In User Service and Internet Authentication Service

320

(1)

Designing Wireless LANs

321

(1)

Designing WLAN Network Infrastructure

321

(1)

Active Directory

322

(4)

DHCP Configuration

326

(1)

DNS Configuration

327

(1)

Public Key Infrastructure

327

(1)

RADIUS/IAS

328

(1)

Designing Authentication for Wireless Networks

328

(1)

802.11 Identity Verification and Authentication

328

(1)

802.11 Wired Equivalency Privacy (WEP) Encryption

329

(1)

802.1x Authentication

329

(1)

802.1x and Extensible Authentication Protocol

329

(2)

IAS Support for 802.1x Authentication

331

(1)

802.1x Group Policy Settings

331

(3)

Selecting User or Computer-Based Authentication

334

(2)

Designing and Testing Wireless Access Infrastructure

336

(3)

Summary of Exam Objectives

339

(1)

Exam Objectives Fast Track

340

(2)

Exam Objectives Frequently Asked Questions

342

(2)

SelfTest

344

(6)

SelfTest Quick Answer Key

350

(1)

Securing Internet Information Services

351

(58)

Introduction

352

(1)

Designing User Authentication for IIS

353

(22)

Designing Certificate Authentication

356

(1)

Directory Service Mapping

356

(1)

One-to-One Mapping

357

(2)

Many-to-One Mapping

359

(3)

Designing Windows Logon Authentication

362

(1)

Anonymous Authentication

362

(2)

Basic Authentication

364

(2)

Digest Authentication

366

(1)

Integrated Windows Authentication

367

(2)

Designing RADIUS Authentication

369

(1)

Using the Internet Authentication Server

370

(3)

Securing the RADIUS Implementation

373

(2)

Designing Security for IIS

375

(25)

Securing IIS Installations

376

(5)

Risks to IIS Servers and How to Harden IIS Against Them

381

(2)

Securing FTP

383

(1)

Securing NNTP

384

(1)

Securing SMTP

385

(1)

New Security Features in IIS 6.0

385

(4)

Designing a Monitoring Strategy for IIS

389

(1)

Creating a Monitoring Baseline

390

(8)

Identifying a Security Incident

398

(1)

Design a Content Management Strategy for Updating an IIS Server

399

(1)

Summary of Exam Objectives

400

(1)

Exam Objectives Fast Track

401

(2)

Exam Objectives Frequently Asked Questions

403

(2)

SelfTest

405

(3)

SelfTest Quick Answer Key

408

(1)

Securing VPN and Extranet Communications

409

(44)

Introduction

410

(1)

Designing Security for Communication Between Networks

411

(12)

Using Windows Server 2003 as a Router

411

(4)

Static Routes

415

(1)

RIP

416

(3)

Open Shortest Path First

419

(1)

Designing Demand Dial Routing between Internal Networks

420

(3)

Designing VPN Connectivity

423

(22)

Selecting Protocols for VPN Access

425

(1)

PPTP

425

(8)

L2TP

433

(5)

New Windows Server 2003 VPN Features

438

(1)

Using Remote Access Policies

439

(3)

Designing Routing between Internal Networks

442

(1)

Designing an Extranet Infrastructure

443

(1)

Cross-Certification of Certificate Services

444

(1)

Summary of Exam Objectives

445

(1)

Exam Objectives Fast Track

446

(1)

Exam Objectives Frequently Asked Questions

447

(1)

SelfTest

448

(4)

SelfTest Quick Answer Key

452

(1)

Securing Active Directory

453

(54)

Introduction

454

(1)

Designing an Access Control Strategy for Directory Services

454

(36)

Analyzing Risks to Directory Services

457

(1)

Assigning Rights and Permissions

458

(2)

Considerations for Using Administrative and Service Accounts

460

(2)

Designing Effective Password Policies

462

(1)

Establishing Account Security Policies

463

(1)

User Rights Assignments

463

(7)

Using Restricted Groups

470

(2)

Creating a Kerberos Policy

472

(2)

Establishing Password Security

474

(3)

Setting Password Complexity Requirements

477

(1)

Creating an Account Lockout Policy

478

(2)

Auditing User Account Activity

480

(2)

Creating an Auditing Policy

482

(1)

Auditing Logon Events

482

(2)

Auditing Object Access

484

(1)

Analyzing Auditing Data

485

(2)

Creating a Delegation Strategy

487

(1)

Service Administrators and Data Administrators

487

(1)

Isolation and Autonomy

487

(1)

Selecting a Delegation Structure

488

(2)

Designing the Appropriate Group Strategy for Accessing Resources

490

(6)

Designing a Permission Structure for Data

491

(1)

Using Global Groups

492

(1)

Using Domain Local Groups

492

(1)

Using Universal Groups

492

(1)

Combining and Nesting Groups

493

(1)

Domain and Forest Functional Levels

494

(2)

Summary of Exam Objectives

496

(3)

Exam Objectives Fast Track

499

(1)

Exam Objectives Frequently Asked Questions

500

(1)

SelfTest

501

(5)

SelfTest Quick Answer Key

506

(1)

Securing Network Resources

507

(120)

Introduction

508

(1)

Designing an Access Control Strategy for Files and Folders

508

(45)

Analyzing Risks to Data

509

(1)

Physical Loss of Data

509

(1)

Data Corruption

510

(1)

Viruses, Worms, and Other Software Attacks

510

(1)

Security Breaches

511

(1)

Auditing Practices

511

(1)

Reviewing Access Control and Access Control Lists

511

(1)

Permissions

512

(1)

User Rights

513

(1)

Object Auditing

513

(1)

Access Control Lists

513

(1)

Access Control Entry

513

(2)

Groups

515

(1)

Security Groups

515

(1)

Access to Resources

516

(1)

User / ACL

516

(1)

Account Group / ACL (AG / ACL)

517

(1)

Account Group / Resource Group

518

(1)

Role-Based Authorization

519

(1)

Selecting Domain Local Groups or Local Groups as Resource Groups

519

(2)

Working with Security Groups

521

(1)

Defining Security Group Creation Policy

521

(1)

Defining a Security Group Request Process

522

(1)

Defining a Security Group Naming Policy

522

(2)

Defining a Security Group Nesting Policy

524

(2)

Defining a Security Group Retirement Policy

526

(3)

Delegating Security Group Maintenance

529

(1)

Delegating Account and Resource Group Maintenance

529

(5)

Analyzing Auditing Requirements

534

(1)

Logon Event

535

(2)

Account Logon Event

537

(1)

Directory Service Access Event

538

(1)

Privilege Use Event

538

(1)

Object Access Event

539

(1)

System Events

539

(1)

Process Tracking Events

540

(1)

Policy Change Events

540

(1)

Design an Access Control Strategy for the Registry

541

(11)

Design a Permission Structure for Registry Objects

552

(1)

Designing the Encrypted File System

553

(36)

EFS Behavior

555

(1)

EFS Best Practices

556

(8)

Certificate Storage

564

(1)

Certificate Enrollment and Renewal

565

(1)

Using cipher.exe

566

(5)

Creating a Strategy for the Encryption and Decryption of Files and Folders

571

(1)

Increasing User Awareness

571

(3)

Configuring File Recovery Agents

574

(5)

Removing Recovery Agent Policy

579

(1)

Recovering Files

580

(1)

Backing Up Keys

580

(7)

Disabling EFS

587

(1)

Third-Party Encryption Options

588

(1)

Designing Security for a Backup and Recovery Strategy

589

(26)

Securing the Backup and Restore Process

589

(3)

Designing a Secure Backup Process

592

(2)

Best Practices for Backups

594

(2)

Creating an Automated System Recovery Backup Set

596

(2)

Disaster Recovery Best Practices

598

(3)

Securing Emergency Management Services

601

(1)

Console Redirection

602

(3)

Special Administration Console Environment

605

(1)

!Special Administration Console Environment

606

(1)

Enabling Emergency Management Services

606

(1)

Headless Servers

607

(1)

Terminal Concentrators

607

(1)

Uninterruptible Power Supplies

607

(1)

Securing the Remote Management Process

608

(1)

Out-of-Band Security

608

(1)

Best Practices for Securing Emergency Management Services

609

(1)

Securing the Recovery Console

610

(2)

Specifying Startup Options for Computers

612

(3)

Summary of Exam Objectives

615

(2)

Exam Objectives Fast Track

617

(2)

Exam Objectives Frequently Asked Questions

619

(2)

SelfTest

621

(5)

SelfTest Quick Answer Key

626

(1)

Securing Network Clients

627

(56)

Introduction

628

(1)

Securing Client Computers

628

(11)

Hardening Client Operating Systems

629

(1)

Minimizing Attack Vectors

629

(1)

Creating an Antivirus Protection Scheme

630

(1)

Enabling Patch Management

631

(3)

Securing Laptop Computers

634

(3)

Restricting User Access to Operating System Features

637

(2)

Designing a Client Authentication Strategy

639

(12)

Analyzing Authentication Requirements

640

(1)

Network Authentication

641

(4)

Securing User Accounts

645

(1)

Securing Account Naming Conventions

646

(1)

Choosing Authentication Protocols

646

(1)

Kerberos

647

(1)

NTLM Authentication

648

(2)

Digest Authentication

650

(1)

SSL/TLS

650

(1)

Designing a Secure Remote Access Plan

651

(20)

Choosing a Remote Access Method

652

(1)

Selecting a Remote Access Protocol

652

(2)

Designing Remote Access Policies

654

(1)

Understanding the Elements of a Remote Access Policy

655

(7)

Providing Access to Internal Network Resources

662

(1)

Using Internet Authentication Service

662

(1)

Authentication Protocols Supported by IAS

663

(2)

Using IAS for Dial-Up and VPN

665

(4)

Using IAS for Wireless Access

669

(1)

Using Network Access Quarantine Control

670

(1)

Remote Access Account Lockout

670

(1)

Summary of Exam Objectives

671

(1)

Exam Objectives Fast Track

672

(1)

Exam Objectives Frequently Asked Questions

673

(1)

SelfTest

674

(7)

SelfTest Quick Answer Key

681

(2)

Appendix A

683

(76)

Designing a Secure Network Framework

684

(7)

Securing Servers Based on Function

691

(11)

Designing a Secure Public Key Infrastructure

702

(5)

Securing the Network Management Process

707

(7)

Securing Network Services and Protocols

714

(10)

Securing Internet Information Services

724

(4)

Securing VPN and Extranet Communications

728

(6)

Securing Active Directory

734

(7)

Securing Network Resources

741

(9)

Securing Network Clients

750

(9)

Index

759

FREE SHIPPING

Rent More, Save More! Use code: BBRENTAL

5% off 1 book, 7% off 2 books, 10% off 3+ books

70-298: MCSE Guide to Designing Security for Microsoft Windows Server 2003 Network

Summary

Table of Contents

Supplemental Materials