MCSE Designing Security for a Windows Server 2003 Network Exam 70-298

Short Description
tractors, or other sources can be even more damaging than external “hack …… D. Windows 2003 will not allow a password of more than eight characters. …

Website: www.syngress.com | Filesize: 399kb

Content
1
Designing a Secure
Network Framework
Chapter 1
MCSE 70-298
Exam Objectives in this Chapter:
1.1 Analyze business requirements for designing security.
1.1.1 Analyzing existing security polices and procedures.
1.1.2 Analyze the organizational requirements for security data.
1.1.4 Analyze risks to security within the current IT administration
structure and security practives
1.2 Design a framework for designing and implementing
security.
1.2.1 Predict threats to your network from internal and external
sources
1.1.3 Analyze the security requirements of different types of data.
1.2.2 Design a process for responding to incidents.
1.2.4 Design a process for recovering services.
1.3 Analyze technical constraints when designing security.
1.3.1 Identify capabilities of the existing infrastructure.
1.3.2 Identify technology limitations
1.3.3 Analyze interoperability constraints.www.syngress.com
2 Chapter 1 ?Designing a Secure Network Framework
Introduction
Securing a Windows Server 2003 enterprise network is hardly a small undertaking,
but it becomes quite manageable if you approach it in an organized and systematic
way. Before we can get into the specifics of configuring software, services, and protocols
to meet an organization’s security needs, we first need to determine what those
needs are. In the first chapter of this guide, we discuss the importance of understanding
the “Why?” of the security design process before plunging headlong into the
“What?” and “How.”
In attempting to answer that all-important “Why?” we open this chapter with a
look at analyzing a company’s business requirements for securing its network and
data.This includes examining any existing security policies and procedures with an
eye toward how they might be incorporated into the new design, or how they might
need to change to accommodate a new security framework.This step includes technical
elements such as analyzing security requirements for different kinds of data-
some financial or medical data might be subject to specific security or retention
policies that a network administrator will need to address-and…