Windows Server 2003 Network Security Design (70-298)

This 3-day course for MCSE 298 is designed to provide students with the knowledge and skills to analyze business requirements for a secure Microsoft Windows Server 2003 network infrastructure, and to design a security solution that meets those requirements. It is intended for systems engineers, network designers, and security specialists. This course will also prepare students for the MCSE 70-298 certification exam. This instructor's edition is designed for quick scanning in the classroom, and filled with interactive exercises

On this course, students will learn how to:

• Define a baseline security template for all systems, design security for servers that have specific roles, and create a plan to modify baseline security templates according to role.
• Design a public key infrastructure (PKI) using Certificate Services, design a logical authentication strategy, design security for CA servers, design a certification authority (CA) hierarchy implementation, design certificate distribution and enrollment and distribution processes and establish renewal, revocation, and auditing processes.
• Design security for communication between networks, select protocols for VPN access, design demand dial routing between internal networks, design VPN connectivity, design security for communication with external organizations, design an extranet infrastructure, and design a strategy for cross-certification of Certificate Services.
• Design an access control strategy for directory services, establish account and password requirements for security, analyze auditing requirements, create a delegation strategy, design the appropriate group strategy for accessing resources, and design a permission structure for directory service objects.
• Design an access control strategy for files and folders, analyze auditing requirements, design an access control strategy for the registry, design a permission structure for registry objects, design a strategy for the encryption and decryption of files and folders, and design security for a backup and recovery strategy

Course content

Designing a secure network framework Analyzing business requirements for security • Designing a framework for implementing security • Analyzing technical constraints when designing security

Securing servers based on function Defining a baseline security template • Deploying security templates • Designing security for servers that have specific roles

Designing a secure public key infrastructure Designing a public key infrastructure • Designing certificate distribution

Securing the network management process Designing security for network management • Designing a security update infrastructure • Designing trust relationships between domains and forests

Securing network services and protocols Designing network infrastructure security • IPSec policies overview • Designing security for data transmission • Design security for wireless networks

Securing Internet Information Services Designing user authentication for IIS • Designing security for IIS

Securing VPN and extranet communications Designing security for communication between networks • Designing VPN connectivity

Securing Active Directory Designing an access control strategy for directory services • Designing a group strategy for accessing resources

Securing network resources Designing a file and folder access control strategy • Designing to use an Encrypted File System • Designing security for a backup and recovery strategy

Securing network clients Securing client computers • Designing a client authentication strategy • Designing a secure remote access plan

About Courseware Company :: Instructor-led training courseware :: Self-study solutions :: Buy online today