ABC Amber CHM Converter Trial version, http://www.thebeatlesforever.com/processtext/abcchm.html Contents Cover Page LOC General Networking and Security Concepts Lesson 1: The Big Picture Lesson 2: Identifying Threats Lesson 3: Intrusion Points Lesson 4: Defending Against Threats Lesson 5: Organizational and Operational Security 10 TCP/IP Basics 11 Lesson 1: Basic TCP/IP Principles 12 Lesson 2: TCP/IP Layers and Vulnerabilities 13 Certificate Basics 14 Lesson 1: Understanding Cryptography 15 Lesson 2: Using Cryptography 16 Lesson 3: Identifying the Components of a Public Key Infrastructure 17 Lesson 4: Understanding CA Trust Models 18 Lesson 5: Understanding Certificate Life Cycle and Key Management 19 Network Infrastructure Security 20 Lesson 1: Understanding Network Infrastructure Security 21 Lesson 2: Securing Network Cabling 22 Lesson 3: Securing Connectivity Devices 23 Lesson 4: Exploring Secure Topologies 24 Lesson 5: Securing and Monitoring Network Resources 25 Communications Security 26 Lesson 1: Understanding Remote Access Connectivity 27 Lesson 2: Providing Secure Remote Access 28 Lesson 3: Understanding Wireless Standards and Protocols 29 Application Security 30 Lesson 1: E-Mail Security 31 Lesson 2: Web Security 32 Lesson 3: File Transfer 33 User Security 34 Lesson 1: Understanding Authentication 35 Lesson 2: Understanding Access Control Models 36 Security Baselines 37 Lesson 1: Network Device and Operating System Hardening 38 Lesson 2: Server Application Hardening 39 Operational Security 40 Lesson 1: Physical Security 41 Lesson 2: Privilege Management 42 Lesson 3: Removable Media 43 Lesson 4: Protecting Business Continuity 44 Organizational Security 45 Lesson 1: Documentation 46 Lesson 2: Risk Assessment ABC Amber CHM Converter Trial version, http://www.thebeatlesforever.com/processtext/abcchm.html 47 Lesson 3: Security Education 48 Incident Detection and Response 49 Lesson 1: Attacks and Malicious Code 50 Lesson 2: Intrusion Detection Systems 51 Lesson 3: Incident Response 52 Questions and Answers 53 Ports and Protocol IDs 54 About This eBook Copyright 2003 by Microsoft Corporation ABC Amber CHM Converter Trial version, http://www.thebeatlesforever.com/processtext/abcchm.html PUBLISHED BY Microsoft Press A Division of Microsoft Corporation One Microsoft Way Redmond, Washington 98052-6399 Copyright 2003 by Microsoft Corporation All rights reserved No part of the contents of this book may be reproduced or transmitted in any form or by any means without the written permission of the publisher Library of Congress Cataloging-in-Publication Data Security+ Certification Training Kit / Microsoft Corporation p cm Includes index ISBN 0-7356-1822-4 Electronic data processing personnel Certification Computer security Examinations Study guides I Microsoft Corporation QA76.3 S43 005.8 dc21 2003 2002043072 Printed and bound in the United States of America QWT Distributed in Canada by H.B Fenn and Company Ltd A CIP catalogue record for this book is available from the British Library Microsoft Press books are available through booksellers and distributors worldwide For further information about international editions, contact your local Microsoft Corporation office or contact Microsoft Press International directly at fax (425) 936-7329 Visit our Web site at www.microsoft.com/mspress Send comments to tkinput@microsoft.com ActiveX, Microsoft, Microsoft Press, MSDN, Outlook, Windows, and Windows NT are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries Other product and company names mentioned herein may be the trademarks of their respective owners The example companies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted herein are fictitious No association with any real company, organization, product, domain name, e-mail address, logo, person, place, or event is intended or should be inferred ABC Amber CHM Converter Trial version, http://www.thebeatlesforever.com/processtext/abcchm.html Acquisitions Editor: Kathy Harding Project Editor: Jean Trenary Technical Editor: Bob Dean  About This Book Welcome to the Security+ Certification Training Kit This training kit introduces the basic concepts of computer security It is designed to prepare you to take the Security+ Certification exam administered by the Computing Technology Industry Association (CompTIA) The Security+ Certification program covers the computer security technologies most commonly used today Passing the Security+ Certification exam means you are certified as possessing the basic knowledge and skills needed to work in computer security However, this book is not just about getting you through the exam The lessons in these chapters also provide you with knowledge you'll use to create a more secure computing environment Each chapter in this book is divided into lessons Most lessons include hands-on procedures that allow you to practice or demonstrate a particular concept or skill Each lesson ends with a short summary and a set of review questions to test your knowledge of the lesson material Intended Audience This book is appropriate for anyone who has experience working on computer networks and wants to learn more about computer security This book is specifically designed for candidates preparing to take the CompTIA Security+ examination SY0-101 CompTIA describes the Security+ certified professional as follows: "Those holding the Security+ certification have demonstrated the aptitude and ability to master such knowledge areas as: general security concepts, communications security, infrastructure security, basics of cryptography, and operational/organizational security." Prerequisites No one is prevented from registering for or attempting the Security+ exam However, you are more likely to achieve the Security+ certification if you meet certain prerequisites At a minimum, you should be capable of installing, configuring, and connecting computers to the Internet before reading this book Security+ Certification candidates should also have A+ and Network+ certifications or equivalent knowledge and skills, in addition to at least two years of experience in computer networking, and a thorough knowledge of Transmission Control Protocol/Internet Protocol (TCP/IP) This book will make the most sense to people who meet those criteria ABC Amber CHM Converter Trial version, http://www.thebeatlesforever.com/processtext/abcchm.html Reference Materials Throughout this book, you will find references to RFC (Request for Comment), NIST (National Institute for Standards and Technology), and CC (Common Criteria) documents which supplement the topic being discussed Unless otherwise noted, these documents can be found at the following Web sites: CC: http://www.commoncriteria.org NIST: http://www.csrc.nist.gov/publications RFC: http://www.icann.rfceditor.org For your convenience, some key RFC, NIST, and CC documents are included on the Supplemental Course Materials CD-ROM These documents are provided as supplemental information However, we recommend that you go to the respective Web sites to get the most up-to-date documents if you intend to use the information to manage your security issues About the CD-ROM The Supplemental Course Materials CD-ROM contains a variety of informational aids that can be used throughout this book • eBook A complete electronic version of this training kit • Preview content Three preview chapters from the Microsoft Windows • Security Resource Kit are included on the CD-ROM in the \WinSecureRK folder • RFC articles Included on the CD-ROM in the \RFC folder • NIST publications Included on the CD-ROM in the \NIST folder • Common Criteria standards Included on the CD-ROM in the \CC folder • Practice test To practice taking the certification exam, you can use the practice test provided on the CD-ROM The sample questions help you assess your understanding of the concepts presented in this book For additional support information regarding this book and the CD-ROM, visit the Microsoft Press Technical Support Web site at www.microsoft.com/mspress/support You can also e-mail TKINPUT@MICROSOFT.COM or send a letter to Microsoft Press, Attn: Microsoft Press Technical Support, One Microsoft Way, Redmond, WA 98052-6399 Features of This Book Each chapter has a "Before You Begin" section, which prepares you for completing the chapter The chapters are broken into lessons Some lessons contain practice exercises that give you an opportunity to use the information presented or to explore the part of the application being described The "Lesson Summary" section at the end of each lesson identifies key points discussed in the text ABC Amber CHM Converter Trial version, http://www.thebeatlesforever.com/processtext/abcchm.html eBook uses Microsoft ® Internet Explorer to shrink the images down to fit within the content pane To see the larger 1:1 image, simply click on the image The 1:1 image will open in a separate window If you click on more than one image to view the 1:1 image, each image will open in a separate window, and remain open until that window is closed Search The CHM format allows full-text searching to better locate the information you need To conduct a search, open the eBook and click the Search tab In the Search Topics text box, type the word or topic on which you wish to search Click List Topics to display the search results To view a search result, either a) double-click on the result in the Select Topic list, or b) click on the result in the Select Topic list, and click Display The topic will then display in the content pane Search results are ranked by the number of times the words searched on occur within the topic results The highest-ranked topic will include the most references to the search criteria For advanced search options, open the drop-down list next to the search input box to clarify multiple search terms with the parameters AND, OR, NEAR, or NOT Favorites To save a topic for viewing later, select the topic so that it displays in the content pane Select the Favorites tab The topic title, or heading, will appear in the Current Topic box Click Add and the topic title will appear in the Topics pane To view a topic saved in Favorites, select the title, and click Display To remove a Favorite topic at any time, select it from the topic pane, and click Remove External Links This eBook may contain links to Web sites outside of the Microsoft domain All hyperlinks within the text were valid at the time this eBook was published Due to the nature of the World Wide Web, we cannot guarantee that all links to Web sites are still valid after the release date of the eBook Accessibility This eBook utilizes Internet Explorer to display content Internet Explorer offers many accessibility features, such as keyboard shortcuts and compatibility with Assistive Technology To find out more about accessibility within Internet Explorer, go to www.microsoft.com/enable/products and select the version of Internet Explorer installed on your computer Tell Us What You Think We need to hear from you regarding your experience with our eBooks Tell us what you like, don't like; which features you use, and which features you would like to see in future versions of our eBooks Send your comments to epublish@microsoft.com Please note that technical support is not offered through this alias About Microsoft Press Microsoft Press is a division of Microsoft Corporation and the leading source of comprehensive self-paced learning, training, evaluation, and support resources to help everyone from developers to IT professionals to end users get the most from Microsoft technology Choose from hundreds of current ABC Amber CHM Converter Trial version, http://www.thebeatlesforever.com/processtext/abcchm.html titles in print, multimedia, and network-ready formats learning solutions made by Microsoft, with the most timely and accurate information available For more information, visit www.microsoft.com/mspress ... Technology Industry Association (CompTIA) The Security+ Certification program covers the computer security technologies most commonly used today Passing the Security+ Certification exam means you... Book Welcome to the Security+ Certification Training Kit This training kit introduces the basic concepts of computer security It is designed to prepare you to take the Security+ Certification exam... Microsoft Press International directly at fax (425) 936-7329 Visit our Web site at www.microsoft.com/mspress Send comments to tkinput@microsoft.com ActiveX, Microsoft, Microsoft Press, MSDN, Outlook,