MCSE Designing Security for a Windows Server 2003 Network (Exam 70-298)

Chapter 1 Designing a Secure Network Framework
Introduction
1.1 Analyzing Business Requirements for Security Design
1.1.1 Analyzing Existing Security Policies and Procedures
1.1.2 Determining Requirements for Securing Data
1.4 Analyzing Current Security Practices
1.2 Designing a Framework for Implementing Security
1.2.1 Predicting Threats to Your Network
1.1.3 Analyzing Security Requirements for Different
12.2 Responding to Security Incidents
1.2.4 Recovering Network Services After an Attack
1.3 Analyzing Technical Constraints when Designing Security
1.3.2 Identifying Technology Limitations
1.3.3 Analyzing Interoperability Constraints
Chapter 2 Securing Servers Based on Function
Introduction
3.7.1 Defining a Baseline Security Template
3.7 Design Security for Servers that Have Specific Roles
3.7.2 Modifying Baseline Security Templates According to Role
Chapter 3 Designing a Secure Public Key
Introduction
2.1 Designing a Public Key Infrastructure
2.1.1 Designing a Certification Authority Implementation
2.2 Designing a Logical Authentication Strategy
2.1.4 Designing Security for CA Servers
2.2.2 Designing Certificate Distribution
2.1.2 Designing Enrollment and Distribution
2.1.2 Approving Certificates by CA Administrators
2.1.3 Revoking Certificates by CA Administrators
2.1.3 Establishing Renewal and Auditing
Chapter 4 Securing the Network Management
Introduction
2.3 Securing the Network Management Process
2.3.1 Managing the Risks of Network Administration
2.3.2 Securing Common Administrative Tools
2.3.3 Designing Security for Emergency Management
2.4 Designing a Security Update Infrastructure
2.4.1 Designing a Software Update Service Infrastructure
2.4.2 Using Group Policy to Deploy Software Updates
2.4.3 Design a Strategy for Identifying Computers
2.2.2 Designing Trust Relationships Between Domains and Forests
2.2.3 Designing Security for Interoperability
Chapter 5 Securing Network Services and Protocols
Introduction
3.1 Designing Network Infrastructure Security
3.1.3 Designing IPSec Policies
3.1.2 Designing IP Filtering
3.1.1 Configuring a Firewall Configuration
3.1.5 Designing Security for Data Transmission
1.2.3 Using Segmented Networks
3.2 Design Security for Wireless Networks
3.2.1 Designing WLAN Network Infrastructure
3.2.2 Designing Authentication for Wireless Networks
Chapter 6 Securing Internet Information Services
Introduction
3.3 Designing User Authentication for IIS
3.3.1 Designing Certificate Authentication
3.3.2 Designing Windows Logon Authentication
3.3.3 Designing RADIUS Authentication
3.4 Designing Security for IIS
3.4.1 Securing IIS Installations
3.4.2 Designing a Monitoring Strategy for IIS
3.4.3 Creating a Monitoring Baseline
3.4.4 Design a Content Management Strategy for Updating
Chapter 7 Securing VPN and Extranet
Communications
Introduction
3.5 Designing Security for Communication Between Networks
3.5.1 Using Windows Server as a Router
3.5.3 Designing Demand Dial Routing between
3.5.2 Designing VPN Connectivity
3.6/3.6.1 Designing an Extranet Infrastructure
3.6.2 Cross-Certification of Certificate Services
Chapter 8 Securing Active Directory
Introduction
4.1 Designing an Access Control Strategy for Directory Services
2.2.4 Establishing Account Security Policies
2.2.4 Establishing Password Security
4.1.2 Analyzing Auditing Data
4.1.1 Creating a Delegation Strategy
4.1.3 Designing the Appropriate Group Strategy for Accessing Resources
4.1.4 Designing a Permission Structure for Data
Chapter 9 Securing Network Resources
Introduction
4.2 Designing an Access Control Strategy for Files and Folders
4.2.4/4.3.2 Analyzing Auditing Requirements
4.3 Design an Access Control Strategy for the Registry
4.3.1 Design a Permission Structure for Registry Objects
4.2.1 Creating a Strategy for the Encryption and Decryption of Files and Folders
4.2.3 Designing Security for a Backup and Recovery Strategy
Chapter 10 Securing Network Clients
Introduction
5.3 Securing Client Computers
5.3.1 Hardening Client Operating Systems
5.3.2 Restricting User Access to Operating System Features
5.1 Designing a Client Authentication Strategy
5.1.1/5.1.2 Analyzing Authentication Requirements
5.2 Designing a Secure Remote Access Plan
5.2.1 Designing Remote Access Policies
5.2.2 Providing Access to Internal Network Resources
5.2.3 Using Internet Authentication Service
Self Test
Self Test Quick Answer Key
Self Test Appendix
Index