Network +

Students will be able to:

• • Configure objects in Active Directory

  • Control logical access by configuring user account and account lockout policies

  • Configure day/time restrictions, computer restrictions, and expiration dates for user accounts

  • Enable and disable user accounts

  • Configure the password policy for a domain

  • View system logon activity by using a key logger tool

  • Using Group Policy Management, configure security settings such as password policy settings to define requirements for user passwords

  • Using Group Policy Management, configure user right assignments to identify actions users can perform on a system

  • Create a group and add members to the group

  • Enable and disable User Account Control (UAC)

  • Use alternate credentials to run programs that require elevated privileges

Students will know:

• • Common objects identified within the Active Directory

  • The difference between role-based access control and rule-based access control

  • The difference between authentication and identification

  • Common authentication types

  • Methods administrators use to control user account and password security

  • Methods hackers use to discover passwords

  • Strategies to protect against password attacks

  • The sequence for deploying physical security

Videos

Server 08 Install

Domain and Activate Directory Setup

Group Policy Setup and Modification

Worksheets

TestOut 0.2.1 Active Directory Introduction

TestOut 0.2.2 Active Directory Structure

TestOut 0.2.3 Viewing Active Directory

TestOut 0.2.5 Group Policy Overview

TestOut 0.2.6 Viewing Group Policy

TestOut 1.1.1 Access Control Models

TestOut 1.1.3 Implementing Discretionary Access Control

TestOut 1.2.1 Authentication

TestOut 1.2.3 Using a Biometric Scanner

TestOut 1.2.5 Using Single Sign-on

TestOut 1.3.1 User Accounts and Passwords

TestOut 1.3.3 Configuring User and Password Restrictions

TestOut 1.4.1 Authorization

TestOut 1.4.2 Cumulative Access

TestOut 1.4.4 Examining the Access Token TestOut 1.5.1 Physical Security TestOut 1.6.1 Access Control Best Practices

TestOut 1.6.3 Viewing Implicit Deny

Unit 1 Review

Labs

TestOut 0.2.8 Create and Link a GPO

TestOut 1.3.4 Configure User Account Restrictions

TestOut 1.3.5 Configure Account Policies

TestOut 1.4.5 Create a Group

Install Server 08

Setup AD and Join a Domain in VM

Modify GP Lab in VM

Control Policies Lab in VM

Unit 3 - Cryptography

This unit examines the fundamentals of cryptography. Students will become familiar with hashing, symmetric encryption, asymmetric encryption concepts and how they can be combined to take advantage of the strengths of each. Core concepts of Public Key Infrastructure (PKI) will be discussed as well as secure protocols that can be used to provide security services to new or existing protocols.

Objectives:

Students will be able to:

• • Generate a hash value for a file

  • Compare hash values to verify message integrity

  • Analyze the strength of passwords by using a rainbow table to perform a cryptanalysis attack on the hashed values of passwords

  • Perform a brute force analysis of encrypted data to recover original data

  • Manage certificates by requesting, approving, and installing certificates

  • Encrypt a file to secure data using EFS

  • Protect hard drive contents with BitLocker.

  • Configure settings to control BitLocker using Group Policy

  • Modify Web site settings to require SSL

  • Use SSL from a browser to create a secure connection

  • Enforce the use of IPSec through Connection Security Rules

Students will know:

• • Legitimate uses for cryptanalysis

  • The difference between a transposition cipher and a substitution cipher

  • Legitimate uses of steganography

  • Security goals or function of hashes

  • The difference between the MD-5 and SHA-1 hash

  • What a collision is and why it is undesirable in a hashing algorithm

  • How symmetric keys are typically exchanged between communication partner

  • The advantage and disadvantages of increasing the number of bits in the key

  • How does 3DES differ from DES

  • How public keys differ from private keys

  • The role of the Registration Authority (RA)

  • Who authorizes subordinate CAs

  • How to tell that a session with a Web server is using SSL