MS2150 Designing a Security-Enhanced Microsoft Windows 2000 Network

Describe the potential risks to different types of stored data.

Describe the potential risks from a denial of service.

Describe potential threats against network security.

Describe common industry standards for measuring network security.

Discuss methodologies to help protect a Windows 2000 network.

Describe how security features in Active Directory provide a framework for designing a security-enhanced Windows 2000 network.

Describe the authentication methods that Windows 2000 provides for user and computer accounts.

Identify the methods that can be used to help protect resource access in Windows 2000 networks.

Identify the encryption technologies that Windows 2000 supports.

Describe how encryption technologies are used to help protect stored and transmitted data in a Windows 2000 network.

Describe how a Public Key Infrastructure (PKI) can be used to create a security-enhanced network.

Select an administrative model for an organization.

Plan memberships in Windows 2000 administrative groups.

Plan security-enhanced local administrative access to the network.

Plan security-enhanced remote administrative access to the network.

Design an account policy and Group Policy strategy for user accounts.

Plan for the creation and location of user accounts within the domain and organizational unit (OU) structure.

Plan delegation of authority to user accounts.

Design an audit strategy that will track changes made to objects in Active Directory.

Plan physical measures to help protect Windows 2000-based computers.

Evaluate the security requirements for Windows 2000-based computers with respect to their roles in the network.

Design security configuration templates to enforce security settings.

Evaluate the existing security configuration of a Windows 2000-based computer.

Determine how to deploy security templates in a Windows 2000 network.

Describe the security provided in the file systems supported by Windows 2000.

Design a security strategy to help protect data such as files, folders, print resources, and the registry by using discretionary access control lists (DACLs).

Design a strategy for the protection and recovery of file resources encrypted with Encrypting File System (EFS).

Design an audit strategy to monitor file and print resource access.

Design a security-enhanced backup and restore procedure that allows for disaster recovery.

Plan for virus protection in a network security design.

Assess potential risks to transmitted data on the network wire in the local area network (LAN).

Design a strategy to help provide authentication and data privacy by applying security at the application layer.

Design a strategy to help provide authentication and data privacy by applying security at the Internet Protocol (IP) layer.

Design an Internet Protocol Security (IPSec) strategy for encrypting private network data transmissions.

Identify the risks associated with allowing UNIX clients access to a Windows 2000 network.

Identify the risks associated with allowing NetWare clients access to a Windows 2000 network.

Identify the risks associated with allowing Macintosh clients access to a Windows 2000 network.

Help protect common network services that are operating in a heterogeneous network.

Monitor a heterogeneous network for security breaches and identify the risks of unauthorized network monitoring.

Identify the risks associated with providing network access to remote users.

Design a security-enhanced network for remote users who access the network by using dial-up connections.

Design a security-enhanced network for remote users who access the network by using VPN connections.

Design a security-enhanced network for remote users by centralizing the security configuration of remote access servers.

Describe the difference between a private network and a public network.

Plan a security-enhanced connection between two remote networks by using routers.

Plan a security-enhanced connection between two remote networks by using a VPN.

Identify the security requirements that must be considered while planning security-enhanced connections between remote offices.

Analyze the potential threats that are introduced when a private network is connected to the Internet.

Design a firewall strategy to help protect private network resources.

Design a security-enhanced method for exposing private network resources to the Internet.

Plan to help protect public access to a screened subnet.

Design a strategy to help protect private network resources from the public network.

Plan which users, computers, and protocols are allowed access to the Internet.

Design the Microsoft Proxy Server settings for maintaining security when local network users access the Internet.

Design the client-side requirements for maintaining security when local network users access the Internet.

Describe the connection methods that can be used to provide access to partner organizations.

Describe the ways to provide security-enhanced access to data, applications, and communications shared with trusted partners.

Design a security-enhanced framework that allows partners to use tunnel connections, dial-up connections, and Terminal Services to access the private network.

Design an Active Directory directory service structure for partners.

Design a framework for authenticating partners from trusted domains.

Describe the basic components of a PKI.

Define how certificates can be used in a PKI to certify applications and services.

Define the basic functions of certificates within a certificate life cycle.

Choose between public and private certification authorities (CAs).

Plan a hierarchy for organizing CAs in a network.

Use certificate mapping to apply user permissions to users who are not included in your organization's Active Directory directory service.

Plan recovery and maintenance strategies for CAs.

Design a security plan that will meet the security requirements of an organization.

Define the security requirements for local and remote networks, public and private networks, and trusted business partners.

Develop strategies to maintain the network security plan.