MCSE 70-298 Exam Cram 2 Designing Security for a Windows Server 2003 Network

by Ferguson, Bill; Tittel, Ed

• ISBN13: 9780789730169
• ISBN10: 0789730162
• Edition: 1st
• Format: Paperback
• Copyright: 2004-05-18
• Publisher: Pearson IT Certification

Summary

Your resource to passing MCSE 70-298 Windows Sever 2003 Certification Exam!Join the ranks of readers who have trusted Exam Cram 2 to their certification preparation needs! TheMCSE Designing Security for a Microsoft Windows Server 2003 Network Exam Cram 2is focused on what you need to know to pass the 70-298 exam for Windows Server 2003. The Exam Cram 2 Method of Study provides you with a concise method to learn the exam topics. The book includes tips, exam notes, acronyms and memory joggers in order to help you pass the exam.Included in the MCSE Designing Security for a Microsoft Windows Server 2003 Network Exam Cram 2: A tear-out "Cram Sheet" for last minute test preparation. Two complete practice exams and answer keys with key explanations. The PrepLogic Practice Tests, test engine to simulate the testing environment and test your knowledge.Trust in the series that has helped many others achieve certification success -Exam Cram 2.

Author Biography

Bill Ferguson (MCT, MCSE, MCP+I), a 15-year veteran of the IT industry, is an independent contractor who teaches classes for several national and regional training companies. He has co-authored two other best-selling Exam Cram 2 titles.

Ed Tittel, Series Editor of the Training Guide Series and the Exam Cram 2 Series, has contributed to more than 100 books on various aspects of computing, including more than 50 titles on IT certifications. He is a two-time finalist for CertCities' Favorite Study Guide Author award.

Table of Contents

Introduction	xix
Self-Assessment	xxv
Chapter 1 Creating the Conceptual Design for Network Infrastructure Security	1	(30)
Analyzing Business Requirements for Designing Security	2	(9)
Security Policies	3	(1)
Organizational Requirements	4	(3)
Security of Data	7	(1)
Security of the Network	8	(3)
Designing a Framework for Designing and Implementing Security	11	(6)
Planning	11	(5)
Building	16	(1)
Managing	17	(1)
Analyzing Challenges of Designing Security	17	(8)
Not Enforced	18	(1)
Difficult to Read	18	(1)
Difficult to Find	19	(1)
Outdated	19	(1)
Too Vague	19	(1)
Too Strict	19	(1)
Not Supported by Management	19	(1)
Clear, Concise, and Simple Procedures	20	(1)
Business Continuity	20	(1)
Incentives	20	(1)
Enforcement Through Technology	20	(5)
Exam Prep Questions	25	(6)
Case 1: BFE Inc.	25	(6)
Chapter 2 Creating the Logical Design for Network Infrastructure Security	31	(28)
Designing a Public Key Infrastructure (PKI) That Uses Certificate Services	32	(14)
Defining Components of a Public Key Infrastructure	33	(5)
Designing a Certification Authority Hierarchy Implementation	38	(3)
Designing Security for CA Servers	41	(1)
Designing Enrollment and Distribution Processes	42	(3)
Establishing Renewal, Revocation, and Auditing Processes	45	(1)
Designing a Logical Authentication Strategy	46	(8)
Establishing Account and Password Requirements for Security	47	(1)
Designing Forest and Domain Trust Models	48	(4)
Designing Security That Meets Interoperability Requirements	52	(2)
Exam Prep Questions	54	(5)
Case 1: HSBC Inc.	54	(5)
Chapter 3 Designing Strategies for Security Management	59	(28)
Designing Security for Network Management	60	(14)
Managing the Risk of Managing Networks	60	(7)
Designing the Administration of Servers	67	(6)
Designing Security for Emergency Management Services	73	(1)
Designing a Security Update Infrastructure	74	(6)
Designing a Software Update Services Infrastructure	75	(2)
Designing Group Policy to Deploy Software Updates	77	(2)
Designing a Strategy for Identifying Computers That Are Not Up to the Current Patch Level	79	(1)
Exam Prep Questions	80	(7)
Case 1: WPX Inc.	80	(7)
Chapter 4 Creating the Physical Design for Network Infrastructure Security	87	(30)
Designing Network Infrastructure Security	88	(10)
Specifying the Required Protocols for Firewall Configuration	88	(1)
Designing IP Filtering	89	(2)
Designing the IPSec Policy for Secure Transmission of Data	91	(3)
Securing a DNS Implementation	94	(4)
Designing Security for Wireless Networks	98	(2)
Wired Equivalent Privacy	99	(1)
Wi-Fi Protected Access	99	(1)
Designing Security for Communication Between Networks	100	(6)
Virtual Private Network	101	(2)
Demand-Dial Routing	103	(3)
Designing Security for Communication with External Organizations	106	(1)
Designing an Extranet Infrastructure	106	(6)
Designing a Strategy for Cross-Certification of Certificate Services	109	(3)
Exam Prep Questions	112	(5)
Case JCMW Inc.	112	(5)
Chapter 5 Designing Server-Specific Security	117	(28)
Designing User Authentication for Internet Information Services	118	(6)
Anonymous	119	(1)
Basic	120	(1)
Digest	121	(1)
Advanced Digest	121	(1)
Integrated Windows	121	(1)
Certificate	122	(1)
UNC Passthrough	123	(1)
RADIUS	123	(1)
.NET Passport	124	(1)
Designing Security for IIS	124	(8)
Designing Security for Web Sites	125	(2)
Designing a Monitoring Strategy	127	(1)
Designing an IIS Baseline	128	(3)
Designing a Content Management Strategy	131	(1)
Designing Security by Server Role	132	(6)
Defining a Baseline Security Template for All Systems	134	(1)
Modifying Baseline Security Templates According to Server Roles	134	(4)
Exam Prep Questions	138	(7)
Case 1: MTX Inc.	138	(7)
Chapter 6 Designing an Access Control Strategy for Data	145	(28)
Designing an Access Control Strategy for Directory Services	146	(8)
Creating a Delegation Strategy	146	(3)
Analyzing Auditing Requirements	149	(2)
Designing an Appropriate Group Strategy for Accessing Resources	151	(2)
Designing a Permission Structure for Directory Service Objects	153	(1)
Designing an Access Control Strategy for Files and Folders	154	(9)
Designing a Strategy for the Encryption and Decryption of Files and Folders	155	(2)
Designing a Permission Structure for Files and Folders	157	(3)
Designing Security for a Backup and Recovery Strategy	160	(2)
Analyzing Auditing Requirements	162	(1)
Designing an Access Control Strategy for the Registry	163	(3)
Designing a Permission Structure for Registry Objects	164	(1)
Analyzing Auditing Requirements	164	(2)
Exam Prep Questions	166	(7)
Case 1: HACA Inc.	166	(7)
Chapter 7 Creating the Physical Design for Client Infrastructure Security	173	(22)
Designing a Client Authentication Strategy	174	(5)
Analyzing Authentication Requirements	175	(2)
Establishing Account and Password Security Requirements	177	(2)
Designing a Security Strategy for Client Remote Access	179	(6)
Designing Remote Access Policies	179	(4)
Designing Access to Internal Resources	183	(1)
Designing Remote Access with Internet Authentication Services	183	(2)
Designing a Strategy for Securing Client Computers	185	(4)
Designing a Strategy for Hardening Client Operating Systems	185	(2)
Designing a Strategy for Restricting User Access to Operating System Features	187	(2)
Exam Prep Questions	189	(1)
Case 1: MTC Inc.	189	(6)
Chapter 8 Practice Exam #1	195	(24)
Case 1: IntelliSync Inc.	195	(6)
IntelliSync Inc. Overview	195	(1)
Geographical Design and Locations	195	(1)
Current Network Infrastructure	195	(1)
Proposed Network Infrastructure	196	(1)
Security Concerns	196	(1)
Security Commentary	196	(5)
Case 2: ComForce	201	(6)
ComForce Overview	201	(1)
Geographical Design and Locations	201	(1)
Current Network Infrastructure	201	(1)
Proposed Network Infrastructure	201	(1)
Security Concerns	202	(1)
Security Commentary	202	(5)
Case 3: GWC Inc.	207	(6)
GWC Inc. Overview	207	(1)
Geographical Design and Locations	207	(1)
Current Network Infrastructure	207	(1)
Proposed Network Infrastructure	207	(1)
Security Concerns	208	(1)
Security Commentary	208	(5)
Case 4: PowerTran	213	(6)
PowerTran Overview	213	(1)
Geographical Design and Locations	213	(1)
Current Network Infrastructure	213	(1)
Proposed Network Infrastructure	213	(1)
Security Concerns	213	(1)
Security Commentary	214	(5)
Chapter 9 Answer Key to Practice Exam #1	219	(18)
Case 1: IntelliSync Inc.	219	(1)
Case 2: ComForce	219	(1)
Case 3: GWC Inc.	219	(1)
Case 4: PowerTran	219	(1)
Case 1: IntelliSync Inc.	220	(4)
Case 2 ComForce	224	(4)
Case 3: GWC Inc.	228	(4)
Case 4: PowerTran	232	(5)
Chapter 10 Practice Exam #2	237	(24)
Case 1: AUM Inc.	237	(6)
AUM Inc. Overview	237	(1)
Geographical Design and Locations	237	(1)
Current Network Infrastructure	237	(1)
Proposed Network Infrastructure	238	(1)
Security Concerns	238	(1)
Security Commentary	238	(5)
Case 2: BBF, Inc.	243	(5)
BBF Overview	243	(1)
Geographical Design and Locations	243	(1)
Current Network Infrastructure	243	(1)
Proposed Network Infrastructure	243	(1)
Security Concerns	244	(1)
Security Commentary	244	(4)
Case 3: SysCon	248	(6)
SysCon Overview	248	(1)
Geographical Design and Locations	249	(1)
Current Network Infrastructure	249	(1)
Proposed Network Infrastructure	249	(1)
Security Concerns	249	(1)
Security Commentary	250	(4)
Case 4: DC&H Consulting	254	(7)
DC&H Overview	254	(1)
Geographical Design and Locations	254	(1)
Current Network Infrastructure	254	(1)
Proposed Network Infrastructure	255	(1)
Security Concerns	255	(1)
Security Commentary	255	(6)
Chapter 11 Answer Key to Practice Exam #2	261	(16)
Case 1: AUM Inc.	261	(1)
Case 2: BBF, Inc.	261	(1)
Case 3: SysCon	261	(1)
Case 4: DC&H Consulting	261	(1)
Case 1: AUM Inc.	262	(3)
Case 2: $BF, Inc.	265	(4)
Case 3: SysCon	269	(4)
Case 4: DC&H Consulting	273	(4)
Appendix A What's on the CD	277	(8)
Using PrepLogic Practice Exams, Preview Edition	277	(1)
Exam Simulation	277	(1)
Question Quality	278	(1)
Interface Design	278	(1)
Effective Learning Environment	278	(1)
Software Requirements	278	(1)
Installing PrepLogic Practice Tests, Preview Edition	279	(1)
Removing PrepLogic Practice Exams, Preview Edition from Your Computer	279	(1)
Using PrepLogic Practice Exams, Preview Edition	280	(3)
Starting a Practice Test Mode Session	280	(1)
Starting a Flash Review Mode Session	281	(1)
Standard PrepLogic Practice Exams, Preview Edition Options	281	(1)
Time Remaining	282	(1)
Your Examination Score Report	282	(1)
Reviewing Your Exam	282	(1)
Obtaining More Exams	283	(1)
Contacting PrepLogic	283	(1)
Customer Service	283	(1)
Product Suggestions and Comments	283	(1)
License Agreement	283	(1)
Need to Know More?	284	(1)
Appendix B Suggested Readings and Resources	285	(4)
Appendix C Need to Know More?	289	(2)
Glossary	291	(16)
Index	307