Exam 70-298
Description
This three-day, instructor-led course provides you with the knowledge and skills to design a secure network infrastructure. Topics include assembling the design team, modeling threats, and analyzing security risks in order to meet business requirements for securing computers in a networked environment. The course encourages decision-making skills through an interactive tool that simulates real-life scenarios that the target audience may encounter. You are given the task of collecting the information and sorting through the details to resolve the given security requirement.
|
Objectives
After completing this course, you will be able to:
- Plan a framework for network security.
- Identify threats to network security.
- Analyze security risks.
- Design security for physical resources.
- Design security for computers.
- Design security for accounts.
- Design security for authentication.
- Design security for data.
- Design security for data transmission.
- Design security for network perimeters.
- Design an incident response procedure.
|
In addition, this course contains three teachable appendices that cover:
|
- Designing an acceptable use policy.
- Designing policies for managing networks.
- Designing an operations framework for managing security.
|
Prerequisites
This course requires that students meet the following prerequisites:
|
- A strong familiarity with Microsoft Windows 2000 core technologies, such as those covered in Implementing Microsoft Windows 2000 Professional and Server.
- A strong familiarity with Windows 2000 networking technologies and implementation, such as those covered in Implementing a Microsoft Windows 2000 Network Infrastructure.
- A strong familiarity with Windows 2000 directory services technologies and implementation, such as those covered in Implementing and Administering Microsoft Windows 2000 Directory Services.
|
Outline
Introduction to Designing Security
This module describes the basic framework for designing network security and introduces key concepts used throughout the course. It also introduces an ongoing case study that is utilized in the labs.
Creating a Plan for Network Security
This module discusses the importance of security policies and procedures in a security design. It also explains how a security design team must include representation from various members of your organization. After completing this module, you will be able use a framework for designing security and create a security design team.
Identifying Threats to Network Security
This module explains how to identify likely threats to a network and explains attacker motivations. After completing this module, you will be able to explain common threats and predict threats by using a threat model.
Analyzing Security Risks
This module explains how to determine what resources in an organization require protection and how to categorize them in order to assign an appropriate level of protection. After completing this module, you will be able to apply a framework for planning risk management.
Creating a Security Design for Physical Resources
This module describes threats and risks to physical resources in an organization, as well as how to secure facilities, computers, and hardware. After completing this module, you will be able to design security for physical resources.
Creating a Security Design for Computers
This module explains how to determine threats and analyze risks to computers on your network. After completing this module, you will be able to design security for computers.
Creating a Security Design for Accounts
This module describes the threats and risks to accounts in an organization. After completing this module, you will be able to design security for accounts.
Creating a Security Design for Authentication
This module describes threats and risks to authentication. After completing this module, you will be able to design security for authentication.
Creating a Security Design for Data
This module examines threats and risks to data. After completing this module, you will be able to design security for data.
Creating a Security Design for Data Transmission
This module discusses threats and risks to data transmission. After completing this module, you will be able to design security for data transmission.
Creating a Security Design for Network Perimeters
This module describes threats to the points where your network connects to other networks, such as the Internet. After completing this module, you will be able to design security for network perimeters.
Designing Responses to Security Incidents
This module provides information about auditing and creating procedures to direct how you respond to security incidents. After completing this module, you will be able to design an audit policy and an incident response procedure.