I have my MCSA and have worked as an IT Admin for around 6 months now. I enjoyed this book for many reasons. The best part I liked is how the writers have experience in the real world and they let you know tips about stuff that could happen to you, because it has happened to people in the past, including myself. All in all, it's a great book.
Author(s): Martin C. Brown, Chris McCain
Edition: 1
Publisher: McGraw-Hill Osborne Media
Year: 2003
Language: English
Pages: 418
Team DDU......Page 1
Contents......Page 9
Check-In......Page 19
I Server Security......Page 21
1 Planning and Implementing Server Roles and Security......Page 23
Objective 1.01 Evaluate and Select the Operating System to Install on Computers in an Enterprise......Page 25
Standard Edition......Page 26
Enterprise Edition......Page 27
Datacenter Edition......Page 28
Server Edition Comparison......Page 29
Identifying Minimum Configurations for Satisfying Security Requirements......Page 33
Enforcing System Default Security Settings......Page 35
Security Settings, Templates, and Default Security......Page 37
External Security......Page 38
Default Templates......Page 39
Objective 1.03 Plan Security for Servers That Are Assigned Specific Roles......Page 42
Deploying Security Configurations......Page 43
Account Security......Page 44
Evaluating Security for Individual Roles......Page 46
Securing Server Roles......Page 48
IIS Server Role......Page 49
Infrastructure Server Roles......Page 50
Objective 1.05 Plan a Security Update Infrastructure......Page 51
Microsoft Baseline Security Analyzer......Page 52
Patches and Updates......Page 55
Patch/Update Installation......Page 56
Windows Update......Page 57
Automatic Updates......Page 58
Microsoft Software Update Services......Page 59
CHECKPOINT......Page 63
REVIEW QUESTIONS......Page 64
REVIEW ANSWERS......Page 66
2 Planning and Implementing TCP/IP......Page 69
Objective 2.01 Designing a TCP/IP Network......Page 70
The IP Address......Page 73
IP Address Classes......Page 74
Subnets......Page 76
Subnet Masks......Page 77
Default Gateways and Routing......Page 79
TCP/IP Implementation......Page 80
Designing a Structured Addressing Scheme......Page 81
Addressing Model......Page 82
Public and Private Addresses......Page 87
Security Basics......Page 88
IP Multicasting......Page 89
Understanding IPv6......Page 90
Benefits of DHCP......Page 92
Manual IP Allocation......Page 93
Dynamic Addressing......Page 94
DHCP Server Configuration......Page 95
Server Availability......Page 97
Server Location......Page 98
Supporting Multiple Subnets......Page 100
CHECKPOINT......Page 101
REVIEW QUESTIONS......Page 102
REVIEW ANSWERS......Page 104
3 Planning a Host Resolution Strategy......Page 107
Objective 3.01 Planning a DNS Strategy......Page 108
Domain Zone Files......Page 109
Understanding Queries......Page 110
Mapping DNS to an Internal Network......Page 112
Stub Zones......Page 113
Plan a DNS Namespace Design......Page 114
Subdomain Name Choice......Page 115
Active Directory Integration......Page 116
Plan Zone Replication Requirements......Page 117
Plan a Forwarding Configuration......Page 118
Forwarding Requests......Page 120
Delegation......Page 121
Plan for DNS Security......Page 122
Security When Resolving Addresses......Page 124
Securing the DNS Server......Page 126
Zone Security......Page 128
AD Compatibility......Page 130
Objective 3.02 Planning a WINS Strategy......Page 131
NetBIOS......Page 132
Burst Mode Handling......Page 133
The Lmhosts File......Page 134
Name Resolution......Page 135
Plan a WINS Replication Strategy......Page 137
Automatic Partner Discovery......Page 138
Database Management......Page 139
Restoring the WINS Database......Page 140
Security Issues......Page 141
CHECKPOINT......Page 142
REVIEW QUESTIONS......Page 143
REVIEW ANSWERS......Page 145
II Network Infrastructure......Page 147
4 Planning, Implementing, and Maintaining a Network Infrastructure......Page 149
Objective 4.01 Plan and Modify a Network Topology......Page 150
Network Cable......Page 151
Switched Hubs......Page 153
Advanced Switches......Page 154
Virtual LANs......Page 155
Firewalls......Page 156
Bridges and Routers......Page 158
Wireless Gateways......Page 159
NWLink (IPX/SPX)......Page 161
DLC......Page 162
Servers......Page 163
Printers......Page 167
Planning for Future Growth......Page 168
Objective 4.02 Plan Network Traffic Monitoring......Page 170
Measuring Performance......Page 171
Monitoring Strategies......Page 173
Network Monitor (NetMon)......Page 174
Using NetMon......Page 175
Setting Up a Dedicated Network Monitor......Page 176
System Monitor......Page 177
Objective 4.03 Internet Connectivity Strategy......Page 178
xDSL/Cable Modem......Page 180
Branch Office to Internet......Page 182
Internet to Branch Office......Page 183
Internet Gateway Connectivity......Page 184
Internet Connection Sharing......Page 185
Network Address Translation......Page 186
Internet Security and Acceleration Server......Page 187
Network Address Translation (NAT) Issues......Page 189
Client Configuration Issues......Page 190
Client Computer Configuration Issues......Page 191
Client Allocation Problems......Page 194
Objective 4.06 Troubleshoot Host Name Resolution......Page 196
DNS Service Issues......Page 197
Using nslookup......Page 198
Dynamic Updates......Page 202
WINS Service Issues......Page 203
Client Computer Configuration Issues......Page 204
CHECKPOINT......Page 205
REVIEW QUESTIONS......Page 207
REVIEW ANSWERS......Page 211
5 Planning Routing and Remote Access......Page 213
Routing Fundamentals......Page 215
Routing and the Routing Tables......Page 218
Updating Routing Tables......Page 220
When to Use Routing......Page 221
Within a LAN......Page 222
Within a WAN......Page 223
Identify Routing Protocols to Use in a Specified Environment......Page 224
Understanding RIP......Page 225
Understanding OSPF......Page 226
Sample Routing Environments......Page 229
Multicast Forwarding......Page 230
Objective 5.02 Security for Remote Access Users......Page 231
Remote Access Conditions......Page 233
Remote Access Profile......Page 235
Analyze Protocol Security Requirements......Page 237
Plan Authentication Methods for Remote Access Clients......Page 238
Authentication Methods......Page 239
Objective 5.03 Implement Secure Access Between Private Networks......Page 241
Create and Implement an IPSec Policy......Page 244
Checking a Machine's Accessibility......Page 245
Using tracert......Page 247
Using pathping......Page 249
Using route......Page 250
The Net "Shell"......Page 251
CHECKPOINT......Page 252
REVIEW QUESTIONS......Page 253
REVIEW ANSWERS......Page 255
6 Planning Network Security......Page 257
Objective 6.01 Plan for Network Protocol Security......Page 258
Document Required Ports and Protocols......Page 259
Plan an IPSec Policy......Page 262
Objective 6.02 Plan Secure Network Administration Methods......Page 267
Create a Plan for Remote Assistance......Page 268
Plan Remote Administration Using Terminal Services......Page 269
Configure Protocol Security in Heterogeneous Client Computer Environment......Page 271
Objective 6.04 Plan Wireless Network Security......Page 274
WEP Security......Page 275
SSID Security......Page 276
Advanced Wireless Security......Page 277
Objective 6.05 Plan Security for Data Transmissions......Page 278
Using IPSec to Secure Data Transmissions......Page 281
Authentication......Page 282
SSL Sites......Page 285
Configure IPSec Policy Settings......Page 288
IP Security Monitor MMC Snap-in......Page 299
Resultant Set of Policy (RSOP) MMC Snap-in......Page 300
CHECKPOINT......Page 303
REVIEW QUESTIONS......Page 305
REVIEW ANSWERS......Page 308
III Security and Performance......Page 311
7 Planning Network Security Infrastructure......Page 313
Objective 7.02 Plan a Framework for Security......Page 314
Plan a Change and Configuration Management Framework......Page 316
Plan for Security Monitoring......Page 317
Objective 7.03 Plan a Public Key Infrastructure (PKI) Using Certificate Services......Page 318
Identify the Appropriate Type of Certificate Authority......Page 321
Plan Enrollment and Distribution of Certificates......Page 326
Planning and Implementing for Smart Cards......Page 331
Objective 7.04 Configure Active Directory for Certificate Publication......Page 334
Tools......Page 335
Microsoft Baseline Security Analyzer......Page 336
Microsoft Software Update Service......Page 338
CHECKPOINT......Page 346
REVIEW QUESTIONS......Page 347
REVIEW ANSWERS......Page 349
8 Planning Server Availability and Performance......Page 351
Objective 8.01 Plan Services for High Availability......Page 352
Supported Editions and Services......Page 353
Network Load Balancing......Page 355
NLB Management......Page 356
Port Rules and Affinity......Page 360
Virtual Clustering......Page 362
Planning Your NLB Cluster......Page 363
Execution Model......Page 364
Optimization......Page 366
Cluster Service Features......Page 367
Using Task Manager......Page 369
The Performance Tab......Page 370
System Monitor......Page 372
Backup Planning......Page 376
Backup Types......Page 377
Using Volume Shadow Copy Service......Page 379
Using Automated System Recovery Sets......Page 380
Critical Files......Page 381
Servers and Clients......Page 382
What Not to Back Up......Page 383
Time of Day......Page 384
Backup Methodologies......Page 385
Recovery Practices......Page 387
Recovering Entire Networks......Page 388
Restoring from a Volume Shadow Copy Backup......Page 389
REVIEW QUESTIONS......Page 390
REVIEW ANSWERS......Page 393
IV Appendixes......Page 395
Installing and Running MasterExam......Page 397
LearnKey Technical Support......Page 398
Networking Systems Exams......Page 399
Core Elective Exams......Page 400
NT 4.0 Upgrade Options......Page 401
For All the Latest Info......Page 402
Index......Page 403
