Security Fundamentals

ABOUT THE AUTHOR Crystal Panek, MCP, MCP+I, MCSA, MCSE, MCTS, MCDBA has trained students and IT professionals at the MicroC, Stellacon Corporation, and the University of New Hampshire. For over 15 years, she served as vice-president of a large IT training company where she developed training materials and courseware to help 1000's of students get through their certification exams. She currently works on a contract basis creating courseware for several large IT training facilities.

• Introduction xixLesson 1 Understanding Security Layers 1Introducing Core Security Principles 3Understanding Confidentiality 4Understanding Integrity 4Understanding Availability 5Understanding the Principle of Least Privilege 7Understanding Separation of Duties 9Understanding an Attack Surface 10Performing an Attack Surface Analysis 10Understanding Social Engineering 12Linking Cost with Security 13Understanding Physical Security as the First Line of Defense 14Understanding Site Security 14Understanding Computer Security 19Performing Threat Modeling 23Skill Summary 25Knowledge Assessment 27Multiple Choice 27Fill in the Blank 29Matching and Identification 29Build List 30Business Case Scenarios 30Scenario 1-1: Designing a Physical Security Solution 30Scenario 1-2: Securing a Mobile Device 30Scenario 1-3: Understanding Confidentiality, Integrity, and Availability 30Scenario 1-4: Managing Social Engineering 30Lesson 2 Understanding Authentication, Authorization, and Accounting 33Starting Security with Authentication 35Configuring Multifactor Authentication 36Authentication Based on What a User Owns or Possesses 38Authentication Based on a User’s Physical Traits 38Introducing RADIUS and TACACS+ 39Running Programs as an Administrator 40Introducing Directory Services with Active Directory 41Understanding Domain Controllers 42Understanding NTLM 43Understanding Kerberos 44Using Organizational Units 44Understanding Objects 46Using Groups 49Understanding Web Server Authentication 52Comparing Rights and Permissions 52Understanding NTFS 54Using NTFS Permissions 54Understanding Effective NTFS Permissions 56Understanding Inheritance 60Copying and Moving Files 62Using Folder and File Owners 62Sharing Drives and Folders 64Share a Folder 64Understanding Special Shares and Administrative Shares 66Introducing the Registry 67Access Registry Permissions 70Using Encryption to Protect Data 70Types of Encryption 71Introducing Public Key Infrastructure (PKI) 72Encrypting Email 78Encrypting Files with EFS 79Encrypting Disks in Windows 82Understanding IPsec 87Encrypting with VPN Technology 89Introducing Smart Cards 92Set Up a Virtual TPM Smart Card Environment 93Create a Certificate Template 93Create a TPM Virtual Smart Card 94Enroll for the Certificate on the TPM Virtual Smart Card 94Configuring Biometrics, Windows Hello, and Microsoft Passport 95Set Up Windows Hello Facial Recognition 96Set Up Windows Hello Fingerprint Reader 96Using Auditing to Complete the Security Picture 97Audit Files and Folders 100Skill Summary 101Knowledge Assessment 105Multiple Choice 105Fill in the Blank 107Business Case Scenarios 108Scenario 2-1: Understanding Biometrics 108Scenario 2-2: Limiting Auditing 108Scenario 2-3: Assigning NTFS Permissions 108Scenario 2-4: Using EFS 108Lesson 3 Understanding Security Policies 111Using Password Policies to Enhance Security 113Using Password Complexity to Make a Stronger Password 113Using Account Lockout to Prevent Hacking 114Examining Password Length 115Using Password History to Enforce Security 115Setting Time Between Password Changes 116Using Password Group Policies to Enforce Password Security 118Configuring and Applying Password Settings Objects 119Establishing Password Procedures 121Understanding Common Attack Methods 122Protecting Domain User Account Passwords 125Install Hyper-V and Isolated User Mode on Windows 10 126Enable Device Guard and Credential Guard 126Skill Summary 127Knowledge Assessment 129Multiple Choice 129Fill in the Blank 131Business Case Scenarios 131Scenario 3-1: Understanding Long Passwords 131Scenario 3-2: Using Keys and Passwords 132Scenario 3-3: Managing User Accounts 132Scenario 3-4: Configuring a Local Security Policy 132Lesson 4 Understanding Network Security 133Using Dedicated Firewalls to Protect a Network 135Understanding the OSI Model 136Types of Hardware Firewalls and Their Characteristics 140Understanding When to Use a Hardware Firewall Instead of a Software Firewall 143Understanding Stateful Inspection and Stateless Inspection 145Using Isolation to Protect the Network 146Understanding VLANs 146Understanding Routing 148Understanding Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) 154Understanding Honeypots 155Understanding DMZ 156Understanding NAT 159Understanding VPN 160Understanding Other VPN Protocols 162Understanding Server and Domain Isolation 164Protecting Data with Protocol Security 165Understanding Tunneling 166Understanding DNS Security Extensions (DNSSEC) 167Understanding Protocol Spoofing 168Understanding Network Sniffing 168Understanding Common Attack Methods 170Understanding Denial-of-Service (DoS) Attacks 173Securing the Wireless Network 175Understanding Service Set IDentifier (SSID) 176Understanding Keys 176Understanding MAC Filters 178Understanding the Advantages and Disadvantages of Specific Security Types 178Skill Summary 179Knowledge Assessment 182Multiple Choice 182Fill in the Blank 184Business Case Scenarios 185Scenario 4-1: Using Windows Firewall 185Scenario 4-2: Using a Routing Table 185Scenario 4-3: Using Ports 185Scenario 4-4: Accessing and Configuring Wireless Settings 185Lesson 5 Protecting the Server and Client 187Protecting the Client Computer 189Protecting Your Computer from Malware 189Configuring Windows Updates 196Understanding User Account Control (UAC) 200Using Windows Firewall 203Using Offline Files 207Locking Down a Client Computer 207Managing Client Security Using Windows Defender 208Remove a Quarantined Item 210Schedule a Windows Defender Scan 212Protecting Your Email 213Managing Spam 214Email Spoofing 215Relaying Email 216Securing Internet Explorer 216Understanding Cookies and Privacy Settings 216Using Content Zones 219Understanding Phishing and Pharming 222Understanding Secure Sockets Layer (SSL) and Certificates 223Configuring Microsoft Edge 223Protecting Your Server 225Separating Services 225Using a Read-Only Domain Controller (RODC) 226Hardening Servers 226Understanding Secure Dynamic DNS 227Using Security Baselines 227Using Security Templates 228Using Security Compliance Manager 232Locking Down Devices to Run Only Trusted Applications 235Access AppLocker 236Create and Test an AppLocker Rule 238Export the Local Policy 240Import the Local Policy 240Managing Windows Store Apps 241Configuring the Windows Store 242Implementing Windows Store Apps 244Implementing Windows Store for Business 246Skill Summary 248Knowledge Assessment 251Multiple Choice 251Fill in the Blank 254Business Case Scenarios 255Scenario 5-1: Enforcing Physical Security 255Scenario 5-2: Programming Backdoors 255Scenario 5-3: Configuring a Windows Defender Quarantine 255Scenario 5-4: Protecting Your Resources 255Scenario 5-5: Reviewing Windows Updates 255Appendix Answer Key 257Lesson 1: Understanding Security Layers 258Answers to Knowledge Assessment 258Answers to Business Case Scenarios 259Lesson 2: Understanding Authentication, Authorization, and Accounting 260Answers to Knowledge Assessment 260Answers to Business Case Scenarios 261Lesson 3: Understanding Security Policies 263Answers to Knowledge Assessment 263Answers to Business Case Scenarios 264Lesson 4: Understanding Network Security 266Answers to Knowledge Assessment 266Answers to Business Case Scenarios 267Lesson 5: Protecting the Server and Client 270Answers to Knowledge Assessment 270Answers to Business Case Scenarios 271Index 273