MCSEClasses Certification Training Boot Camp

MCSE MCSD MCDBA Cisco CIW Linux Oracle Java Security

MCSE Security Certification Training

6 Certification - MCSA/MCSE: Windows 2003 Security Training Course

Course Length:	15 days
Certifications:	MCP MCSA MCSE MCSA: Security MCSE: Security CompTIA Security+
Number of Exams:	8

Class Schedule

03/10/12 - 03/24/12		Info/Enroll
05/12/12 - 05/26/12		Info/Enroll
09/08/12 - 09/22/12		Info/Enroll

Includes roundtrip airfare and lodging (for boot camps held in Georgia and Florida only)
Hands-on instruction by a certified instructor
Includes all course materials and practice exams
Includes all certification exams
Onsite Testing
Breakfast and Lunch provided each day

The MCSA/MCSE: Security exams support the release of Windows Server™ 2003 by identifying systems engineers who can successfully plan and implement a network infrastructure, Active Directory® infrastructure, and client deployment on the Windows 2003 platform, and perform maintenance at a high level for a medium- to large-sized Windows 2003 environment.

The MCSA/MCSE: Security on Windows Server™ 2003 credential offers IT professionals a competitive edge in today's constantly changing business environment by validating the specific experience required by the network and systems administrator job role. The certification provides employers with a means to identify those qualified individuals who have the appropriate skills set to do the job successfully.

CompTIA Security+ is the primary course you will need to take if your job responsibilities include securing network services, network devices, and network traffic. In this course, you'll build on your knowledge and professional experience with computer hardware, operating systems, and networks as you acquire the specific skills required to implement basic security services on any type of computer network.

Microsoft Exam 70-270
Microsoft Exam 70-290
Microsoft Exam 70-291
CompTIA Security+
Microsoft Exam 70-293
Microsoft Exam 70-294
Microsoft Exam 70-298
Microsoft Exam 70-299

Microsoft Exam 70-270

Installing, Configuring, and Administering Microsoft Windows XP Professional

Installing Windows XP Professional

Perform an attended installation of Windows XP Professional.
Perform an unattended installation of Windows XP Professional.
Upgrade from a previous version of Windows to Windows XP Professional.
Perform post-installation updates and product activation.
Troubleshoot failed installations.

Implementing and Conducting Administration of Resources

Monitor, manage, and troubleshoot access to files and folders.
Manage and troubleshoot access to shared folders.
Connect to local and network print devices.
Configure and manage file systems.
Manage and troubleshoot access to and synchronization of offline files.

Implementing, Managing, Monitoring, and Troubleshooting Hardware Devices and Drivers

Implement, manage, and troubleshoot disk devices.
Implement, manage, and troubleshoot display devices.
Configure Advanced Configuration Power Interface (ACPI).
Implement, manage, and troubleshoot input and output (I/O) devices.
Manage and troubleshoot drivers and driver signing.
Monitor and configure multiprocessor computers.

Monitoring and Optimizing System Performance and Reliability

Monitor, optimize, and troubleshoot performance of the Windows XP Professional desktop.
Manage, monitor, and optimize system performance for mobile users.
Restore and back up the operating system, System State data, and user data.

Configuring and Troubleshooting the Desktop Environment

Configure and manage user profiles and desktop settings.
Configure support for multiple languages or multiple locations.
Manage applications by using Windows Installer packages.

Implementing, Managing, and Troubleshooting Network Protocols and Services

Configure and troubleshoot the TCP/IP protocol.
Connect to computers by using dial-up networking.
Connect to resources using Internet Explorer.
Configure, manage, and implement Internet Information Services (IIS).
Configure, manage, and troubleshoot Remote Desktop and Remote Assistance.
Configure, manage, and troubleshoot an Internet Connection Firewall (ICF).

Configuring, Managing, and Troubleshooting Security

Configure, manage, and troubleshoot Encrypting File System (EFS).
Configure, manage, and troubleshoot a security configuration and local security policy.
Configure, manage, and troubleshoot local user and group accounts.
Configure, manage, and troubleshoot Internet Explorer security settings.

[ back to top ]

Microsoft Exam 70-290

Managing and Maintaining a Microsoft Windows Server 2003 Environment

Managing and Maintaining Physical and Logical Devices

Manage basic disks and dynamic disks.
Monitor server hardware. Tools might include Device Manager, the Hardware Troubleshooting Wizard, and appropriate Control Panel items.
Optimize server disk performance.
Install and configure server hardware devices.

Managing Users, Computers, and Groups

Manage local, roaming, and mandatory user profiles.
Create and manage computer accounts in an Active Directory environment.
Create and manage groups.
Create and manage user accounts.
Troubleshoot computer accounts.
Troubleshoot user accounts.
Troubleshoot user authentication issues.

Managing and Maintaining Access to Resources

Configure access to shared folders.
Troubleshoot Terminal Services.
Configure file system permissions.
Troubleshoot access to files and shared folders.

Managing and Maintaining a Server Environment

Monitor and analyze events. Tools might include Event Viewer and System Monitor.
Manage software update infrastructure.
Manage software site licensing.
Manage servers remotely.
Troubleshoot print queues.
Monitor system performance.
Monitor file and print servers. Tools might include Task Manager, Event Viewer, and System Monitor.
Monitor and optimize a server environment for application performance.
Manage a Web server.

Managing and Implementing Disaster Recovery

Perform system recovery for a server.
Manage backup procedures.
Recover from server hardware failure.
Restore backup data.
Schedule backup jobs.

[ back to top ]

Microsoft Exam 70-291

Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure

Implementing, Managing, and Maintaining IP Addressing

Configure TCP/IP addressing on a server computer.
Manage DHCP.
Troubleshoot TCP/IP addressing.
Troubleshoot DHCP.

Implementing, Managing, and Maintaining Name Resolution

Install and configure the DNS Server service.
Manage DNS.
Monitor DNS. Tools might include System Monitor, Event Viewer, Replication Monitor, and DNS debug logs.

Implementing, Managing, and Maintaining Network Security

Implement secure network administration procedures.
Monitor network protocol security. Tools might include the IP Security Monitor Microsoft Management Console (MMC) snap-in and Kerberos support tools.
Troubleshoot network protocol security. Tools might include the IP Security Monitor MMC snap-in, Event Viewer, and Network Monitor.

Implementing, Managing, and Maintaining Routing and Remote Access

Configure Routing and Remote Access user authentication.
Manage remote access.
Manage TCP/IP routing.
Implement secure access between private networks.
Troubleshoot user access to remote access services.
Troubleshoot Routing and Remote Access routing.

Maintaining a Network Infrastructure

Monitor network traffic. Tools might include Network Monitor and System Monitor.
Troubleshoot connectivity to the Internet.
Troubleshoot server services.

[ back to top ]

CompTIA Security+

The CompTIA Security+ Certification (SY0-301 exam) is a vendor neutral credential. The CompTIA Security+ exam is an internationally recognized validation of foundation-level security skills and knowledge, and is used by organizations and security professionals around the globe.

CompTIA Security+ demonstrates competency in:

Network security
Compliance and operational security
Threats and vulnerabilities
Application, data and host security
Access control and identity management
Cryptography

CompTIA Security+ not only ensures that candidates will apply knowledge of security concepts, tools, and procedures to react to security incidents, it ensures that security personnel are anticipating security risks and guarding against them.

The CompTIA Security+ exam (SY0-301) will certify that the successful candidate has the knowledge and skills required to identify risk and participate in risk mitigation activities, provide infrastructure, application, operational and information security, apply security controls to maintain confidentiality, integrity and availability, identify appropriate technologies and products, and operate with an awareness of applicable policies, laws and regulations.

Target Student: This course is targeted toward an Information Technology (IT) professional who has networking and administrative skills in Windows-based TCP/IP networks and familiarity with other operating systems and to those who want to further a career in IT by acquiring a foundational knowledge of security topics; prepare for the CompTIA Security+ Certification examination; or use Security+ as the foundation for advanced security certifications.

Prerequisites: CompTIA A+ and Network+ certifications, or equivalent knowledge. Experience in networking, including experience configuring and managing TCP/IP is helpful.

Course Content:

1.0 Network Security

1.1 Explain the security function and purpose of network devices and technologies

Firewalls
Routers
Switches
Load Balancers
Proxies
Web security gateways
VPN concentrators
NIDS and NIPS (Behavior based, signature based, anomaly based, heuristic)
Protocol analyzers
Sniffers
Spam filter, all-in-one security appliances
Web application firewall vs. network firewall
URL filtering, content inspection, malware inspection

1.2 Apply and implement secure network administration principles

Rule-based management
Firewall rules
VLAN management
Secure router configuration
Access control lists
Port Security
802.1x
Flood guards
Loop protection
Implicit deny
Prevent network bridging by network separation
Log analysis

1.3 Distinguish and differentiate network design elements and compounds

DMZ
Subnetting
VLAN
NAT
Remote Access
Telephony
NAC
Virtualization
Cloud Computing

1.4 Implement and use common protocols

IPSec
SNMP
SSH
DNS
TLS
SSL
TCP/IP
FTPS
HTTPS
SFTP
SCP
ICMP
IPv4 vs. IPv6

2.0 Compliance and Operational Security

2.1 Explain risk related concepts

Control types
False positives
Importance of policies in reducing risk
Quantitative vs. qualitative
Risk-avoidance, transference, acceptance, mitigation, deterrence
Risks associated to Cloud Computing and Virtualization

2.2 Carry out appropriate risk mitigation strategies

Implement security controls based on risk
Change management
Incident management
User rights and permissions reviews
Perform routine audits
Implement policies and procedures to prevent data loss or theft

2.3 Execute appropriate incident response procedures

Basic forensic procedures
Damage and loss control
Chain of custody
Incident response: first responder

2.4 Explain the importance of security related awareness and training

Security policy training and procedures
Personally identifiable information
Information classification: Sensitivity of data (hard or soft)
Data labeling, handling and disposal
Compliance with laws, best practices and standards
User habits
Threat awareness
Use of social networking and P2P

2.5 Compare and contrast aspects of business continuity

Business impact analysis
Removing single points of failure
Business continuity planning and testing
Continuity of operations
Disaster recovery
IT contingency planning
Succession planning

2.6 Explain the impact and proper use of environmental controls

HVAC
Fire suppression
EMI shielding
Hot and cold aisles
Environmental monitoring
Temperature and humidity controls
Video monitoring

2.7 Execute disaster recovery plans and procedures

Backup / backout contingency plans or policies
Backups, execution and frequency
Redundancy and fault tolerance
High availability
Cold site, hot site, warm site
Mean time to restore, mean time between failures, recovery time objectives and recovery point objectives

2.8 Exemplify the concepts of confidentiality, integrity and availability (CIA)

3.0 Threats and Vulnerabilities

3.1 Analyze and differentiate among types of malware

Adware
Virus
Worms
Spyware
Trojan
Rootkits
Backdoors
Logic bomb
Botnets

3.2 Analyze and differentiate among types of attacks

Man-in-the-middle
DDoS
DoS
Replay
Smurf attack
Spoofing
Spam
Phishing
Spim
Vishing
Spear phishing
Xmas attack
Pharming
Privilege escalation
Malicious insider threat
DNS poisoning and ARP poisoning
Transitive access
Client-side attacks

3.3 Analyze and differentiate among types of social engineering attacks

Shoulder surfing
Dumpster diving
Tailgating
Impersonation
Hoaxes
Whaling
Vishing

3.4 Analyze and differentiate among types of wireless attacks

Rogue access points
Interference
Evil twin
War driving
Bluejacking
Bluesnarfing
War chalking
IV attack
Packet sniffing

3.5 Analyze and differentiate among types of application attacks

Cross-site scripting
SQL injection
LDAP injection
XML injection
Directory traversal/command injection
Buffer overflow
Zero day
Cookies and attachments
Malicious add-ons
Session hijacking
Header manipulation

3.6 Analyze and differentiate among types of mitigation and deterrent techniques

Manual bypassing of electronic controls
Monitoring system logs
Physical security
Hardening
Port security
Security posture
Reporting
Detection controls vs. prevention controls

3.7 Implement assessment tools and techniques to discover security threats and vulnerabilities

Vulnerability scanning and interpret results
Tools
Risk calculations
Assessment types
Assessment technique

3.8 Within the realm of vulnerability assessments, explain the proper use of penetration testing versus vulnerability scanning

Penetration testing
Vulnerability scanning
Black box
White box
Gray box

4.0 Application, Data and Host Security

4.1 Explain the importance of application security

Fuzzing
Secure coding concepts
Cross-site scripting prevention
Cross-site Request Forgery (XSRF) prevention
Application configuration baseline (proper settings)
Application hardening
Application patch management

4.2 Carry out appropriate procedures to establish host security

Operating system security and settings
Anti-malware
Patch management
Hardware security
Host software baselining
Mobile devices
Virtualization

4.3 Explain the importance of data security

Data Loss Prevention (DLP)
Data encryption
Hardware based encryption devices
Cloud computing

5.0 Access Control and Identity Management

5.1 Explain the function and purpose of authentication services

RADIUS
TACACS
TACACS+
Kerberos
LDAP
XTACACS

5.2 Explain the fundamental concepts and best practices related to authentication, authorization and access control

Identification vs. authentication
Authentication (single factor) and authorization
Multifactor authentication
Biometrics
Tokens
Common access card
Personal identification verification card
Smart card
Least privilege
Separation of duties
Single sign on
ACLs
Access control
Mandatory access control
Discretionary access control
Role/rule-based access control
Implicit deny
Time of day restrictions
Trusted OS
Mandatory vacations
Job rotation

5.3 Implement appropriate security controls when performing account management

Mitigates issues associated with users with multiple account/roles
Account policy enforcement
Group based privileges
User assigned privileges

6.0 Cryptography

6.1 Summarize general cryptography concepts

Symmetric vs. asymmetric
Fundamental differences and encryption methods
Transport encryption
Non-repudiation
Hashing
Key escrow
Steganography
Digital signatures
Use of proven technologies
Elliptic curve and quantum cryptography

6.2 Use and apply appropriate cryptographic tools and products

WEP vs. WPA/WPA2 and preshared key
MD5
SHA
RIPEMD
AES
DES
3DES
HMAC
RSA
RC4
One-time-pads
CHAP
PAP
NTLM
NTLMv2
Blowfish
PGP/GPG
Whole disk encryption
TwoFish
Comparative strengths of algorithms
Use of algorithms with transport encryption

6.3 Explain the core concepts of public key infrastructure

Certificate authorities and digital certificates
PKI
Recovery agent
Public key
Private key
Registration
Key escrow
Trust models

6.4 Implement PKI, certificate management and associated components

Certificate authorities and digital certificates
PKI
Recovery agent
Public key
Private keys
Registration
Key escrow
Trust models

[ back to top ]

Microsoft Exam 70-293

Planning and Maintaining a Microsoft Windows Server 2003 Network Infrastructure

Planning and Implementing Server Roles and Server Security

Configure security for servers that are assigned specific roles.
Plan a secure baseline installation.
Plan security for servers that are assigned specific roles. Roles might include domain controllers, Web servers, database servers, and mail servers.
Evaluate and select the operating system to install on computers in an enterprise.

Planning, Implementing, and Maintaining a Network Infrastructure

Plan a TCP/IP network infrastructure strategy.
Plan and modify a network topology.
Plan an Internet connectivity strategy.
Plan network traffic monitoring. Tools might include Network Monitor and System Monitor.
Troubleshoot connectivity to the Internet.
Troubleshoot TCP/IP addressing.
Plan a host name resolution strategy.
Plan a NetBIOS name resolution strategy.
Troubleshoot host name resolution.

Planning, Implementing, and Maintaining Routing and Remote Access

Plan a routing strategy.
Plan security for remote access users.
Implement secure access between private networks.
Troubleshoot TCP/IP routing. Tools might include the route, tracert, ping, pathping, and netsh commands and Network Monitor.

Planning, Implementing, and Maintaining Server Availability

Plan services for high availability.
Identify system bottlenecks, including memory, processor, disk, and network related bottlenecks.
Implement a cluster server.
Monitor Network Load Balancing. Tools might include the Network Load Balancing Monitor Microsoft Management Console (MMC) snap-in and the WLBS cluster control utility.
Plan a backup and recovery strategy.

Planning and Maintaining Network Security

Configure network protocol security.
Configure security for data transmission.
Plan for network protocol security.
Plan secure network administration methods.
Plan security for wireless networks.
Plan security for data transmission.
Troubleshoot security for data transmission. Tools might include the IP Security Monitor MMC snap-in and the Resultant Set of Policy (RSoP) MMC snap-in.

Planning, Implementing, and Maintaining Security Infrastructure.

Configure Active Directory directory service for certificate publication.
Plan a public key infrastructure (PKI) that uses Certificate Services.
Plan a framework for planning and implementing security.
Plan a security update infrastructure. Tools might include Microsoft Baseline Security Analyzer and Microsoft Software Update Services.

[ back to top ]

Microsoft Exam 70-294

Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure

Planning and Implementing an Active Directory Infrastructure

Plan a strategy for placing global catalog servers.
Plan flexible operations master role placement.
Implement an Active Directory directory service forest and domain structure.
Implement an Active Directory site topology.
Plan an administrative delegation strategy.

Managing and Maintaining an Active Directory Infrastructure

Manage an Active Directory forest and domain structure.
Manage an Active Directory site.
Monitor Active Directory replication failures. Tools might include Replication Monitor, Event Viewer, and support tools.
Restore Active Directory directory services.
Troubleshoot Active Directory.

Planning and Implementing User, Computer, and Group Strategies

Plan a security group strategy.
Plan a user authentication strategy.
Plan an OU structure.
Implement an OU structure.

Planning and Implementing Group Policy

Plan Group Policy strategy.
Configure the user environment by using Group Policy.
Deploy a computer environment by using Group Policy.

Managing and Maintaining Group Policy

Troubleshoot issues related to Group Policy application. deployment. Tools might include RSoP and the gpresult command.
Maintain installed software by using Group Policy.
Troubleshoot the application of Group Policy security settings. Tools might include RSoP and the gpresult command.

[ back to top ]

Microsoft Exam 70-298

Designing Security for a Microsoft Windows Server 2003 Network

Creating the Conceptual Design for Network Infrastructure Security by Gathering and Analyzing Business and Technical Requirements

Analyze business requirements for designing security. Considerations include existing policies and procedures, sensitivity of data, cost, legal requirements, end-user impact, interoperability, maintainability, scalability, and risk.
Design a framework for designing and implementing security. The framework should include prevention, detection, isolation, and recovery.
Analyze technical constraints when designing security.

Creating the Logical Design for Network Infrastructure Security

Design a public key infrastructure (PKI) that uses Certificate Services.
Design a logical authentication strategy.
Design security for network management.
Design a security update infrastructure.

Creating the Physical Design for Network Infrastructure Security

Design network infrastructure security.
Design security for wireless networks.
Design user authentication for Internet Information Services (IIS).
Design security for Internet Information Services (IIS).
Design security for communication between networks.
Design security for communication with external organizations.
Design security for servers that have specific roles. Roles include domain controller, network infrastructure server, file server, IIS server, terminal server, and POP3 mail server.

Designing an Access Control Strategy for Data

Design an access control strategy for directory services.
Design an access control strategy for files and folders.
Design an access control strategy for the registry.

Creating the Physical Design for Client Infrastructure Security

Design a client authentication strategy.
Design a security strategy for client remote access.
Design a strategy for securing client computers. Considerations include desktop and portable computers.

[ back to top ]

Microsoft Exam 70-299

Implementing and Administering Security in a Microsoft Windows Server 2003 Network

Implementing, Managing, and Troubleshooting Security Policies

Plan security templates based on computer role. Computer roles include SQL Server computer, Microsoft Exchange Server computer, domain controller, Internet Authentication Service (IAS) server, and Internet Information Services (IIS) server.
Configure security templates.
Deploy security templates.
Troubleshoot security template problems.
Configure additional security based on computer roles. Server computer roles include SQL Server computer, Exchange Server computer, domain controller, Internet Authentication Service (IAS) server, and Internet Information Services (IIS) server. Client computer roles include desktop, portable, and kiosk.

Implementing, Managing, and Troubleshooting Patch Management Infrastructure

Plan the deployment of service packs and hotfixes.
Assess the current status of service packs and hotfixes. Tools include MBSA and the MBSA command-line tool.
Deploy service packs and hotfixes.

Implementing, Managing, and Troubleshooting Security for Network Communications

Plan IPSec deployment.
Configure IPSec policies to secure communication between networks and hosts. Hosts include domain controllers, Internet Web servers, databases, e-mail servers, and client computers.
Deploy and manage IPSec policies.
Troubleshoot IPSec.
Plan and implement security for wireless networks.
Deploy, manage, and configure SSL certificates, including uses for HTTPS, LDAPS, and wireless networks. Considerations include renewing certificates and obtaining self-issued certificates instead of publicly issued certificates.
Configure security for remote access users.

Planning, Configuring, and Troubleshooting Authentication, Authorization, and PKI

Plan and configure authentication.
Plan group structure.
Plan and configure authorization.
Install, manage, and configure Certificate Services.

[ back to top ]

MCSEClasses.com is your best choice for MCSE Security, MCSE Security training, MCSE Security certification, MCSE Security certification boot camp, MCSE Security boot camp, MCSE Security certification training, MCSE Security boot camp training, MCSE Security boot camp certification, MCSE Security certification course, MCSE Security course, training MCSE Security, certification MCSE Security, boot camp MCSE Security, certification MCSE Security boot camp, certification MCSE Security training, boot camp MCSE Security training, certification MCSE Security course.