1. Computer and Network Security Principles
1.1. Identifying and Analyzing Risk 2
1.2. Installing Windows XP Professional 6
1.3. Installing Windows Server 2003 9
1.4. Using Microsoft Security Baseline Analyzer 13
1.5. Viewing Local Security Policy 18
1.6. Creating a Written Security Policy 24
2. Network and Server Security
2.1. Managing Server Roles 28
2.2. Managing Services and Ports 34
2.3. Using Network Monitor 38
2.4. Configuring Windows Firewall 42
2.5. Designing Border Security 45
3. Cryptography
3.1. Understanding Cryptography Concepts 48
3.2. Managing Driver Signing 49
3.3. Using Encrypting File System 53
3.4. Installing Certificate Services 57
3.5. Managing Certificate Authority Trusts 63
3.6. Requesting and Issuing Certificates 67
3.7. Revoking Certificates 70
4. Authentication
4.1. Comparing Credentials 75
4.2. Creating User Accounts 76
4.3. Configuring an Active Directory Domain Controller 82
4.4. Joining a Domain 89
4.5. Managing Password and Account Lockout Policies 93
4.6. Managing Authentication Protocols 101
4.7. Managing Logon Restrictions 103
5. Authorization and Access Control
5.1. Comparing Access Control Models 111
5.2. Managing Groups 112
5.3. Assigning Permissions 117
5.4. Troubleshooting Effective Permissions 125
5.5. Viewing User Right Assignments 129
6. Securing Network Transmission
6.1. Designing Network Perimeters 133
6.2. Implementing IP Address Filtering on IIS 135
6.3. Using IPsec Default Policies 139
6.4. Implementing Packet Filtering with IPsec 143
6.5. Implementing IPsec Encryption 150
7. Remote Access and Wireless Security
7.1. Understanding Remote Access Protocols and Wireless Security 156
7.2. Designing Remote Access and Wireless Access 158
7.3. Enabling Routing and Remote Access 160
7.4. Configuring a Dial-up Client 166
7.5. Configuring a VPN Client 171
7.6. Defining Remote Access Policies 176
8. Server Roles and Security
8.1. Using Default Templates 183
8.2. Creating and Applying a Baseline Template 188
8.3. Creating and Applying an Incremental Template 193
8.4. Securing DNS 197
8.5. Securing a File Server 203
8.6. Securing a Web and FTP Server 209
9. Protecting Against Malware
9.1. Identifying Malware 217
9.2. Comparing Antivirus, Anti-Spyware, and Anti-Malware Programs 218
9.3. Creating a Managed Computer 221
9.4. Securing Internet Explorer 224
9.5. Securing Outlook Express 232
10. Ongoing Security Management
10.1. Configuring Automatic Updates 237
10.2. Configuring Auditing 241
10.3. Using Event Viewer 245
10.4. Performing Remote Management with MMC 250
10.5. Using Telnet 256
10.6. Using Remote Desktop for Administration 260
11. Disaster Recovery and Fault Tolerance
11.1. Planning for the Worst 264
11.2. Responding to a Security Incident 270
11.3. Configuring Backups 272
11.4. Planning a RAID Configuration 282
11.5. Eliminating Single Points of Failure 284
12. Intrusion Detection and Forensics
12.1. Understanding Terminology 288
12.2. Comparing Intrusion Detection System Types 290
12.3. Investigating the Honeynet Project 292
12.4. Using Forensics Tools 294
12.5. Investigating an Attack 299
