Designing a Microsoft SharePoint 2010 Infrastructure Vol 1 part 26 pptx

MCT USE ONLY. STUDENT USE PROHIBITED Designing a Physical Architecture 4-47 Lab: Designing a Physical Architecture Exercise 1: Planning the Physical Architecture Scenario Contoso Pharmaceuticals Research is requesting its own SharePoint farm. However, you have logically separated its Web and service applications, so you should now identify the most cost-effective solution that satisfies the Contoso Ltd requirements. The information that your team requires is detailed in the supplied documents. Use these documents to produce your physical SharePoint design. The main tasks for this exercise are as follows: 1. Read the supporting information. 2. Complete the Physical Architecture Planning worksheet. 3. Complete the Physical Architecture diagram. MCT USE ONLY. STUDENT USE PROHIBITED 4-48 Designing a Microsoft® SharePoint® 2010 Infrastructure f Task 1: Read the supporting information 1. Read the lab scenario. 2. Log on to 10231A-NYC-DC1-04 as CONTOSO\Ed with the password Pa$$w0rd. 3. In the E:\Labfiles\Lab04\Starter folder, review the Physical Architecture Requirements.docx file. f Task 2: Complete the Physical Architecture Planning worksheet • In the E:\Labfiles\Lab04\Starter folder, complete the details for all production, staging, and test servers in the Physical Architecture Planning Worksheet.xlsx file. f Task 3: Complete the Physical Architecture diagram • In the E:\Labfiles\Lab04\Starter folder, complete the farm design in the Physical Architecture Diagram.vsd file. Exercise 2: Troubleshooting a Name Resolution Problem Scenario Using the completed design, your team configured SharePoint in the lab environment. You can access the intranet site by navigating to http://nyc-dc1, but not http://intranet.contoso.com. You must resolve this problem and ensure that it does not recur in the production environment. The main tasks for this exercise are as follows: 1. Attempt to access the Contoso, Ltd intranet by using two different URLs. 2. Resolve the name resolution problem. f Task 1: Attempt to access the Contoso, Ltd intranet by using two different URLs 1. In Windows Internet Explorer®, go to http://nyc-dc1. You should be able to view the Contoso, Ltd home page. MCT USE ONLY. STUDENT USE PROHIBITED Designing a Physical Architecture 4-49 2. In Internet Explorer, go to http://intranet.contoso.com. You will receive an error page. f Task 2: Resolve the name resolution problem 1. Use SharePoint Central Administration to create an alternate access mapping for the SharePoint-80 Web application with the following settings: • Zone: Intranet • Address: http://intranet.contoso.com 2. Add a new host (A) record for intranet.contoso.com with the IP address 10.10.10.1. 3. Add intranet.contoso.com as a host header for the SharePoint-80 Web site in IIS. 4. In Internet Explorer, go to http://intranet.contoso.com. You should be able to view the Contoso, Ltd home page. MCT USE ONLY. STUDENT USE PROHIBITED 4-50 Designing a Microsoft® SharePoint® 2010 Infrastructure Module Review and Takeaways Review Questions 1. On which editions of Windows Server 2008 can you install SharePoint 2010? 2. Which SQL Server database recovery model is not suitable for SharePoint 2010 databases? 3. What is the maximum recommended size for a content database that contains multiple site collections? 4. Which tool must you use to add SSL certificates to SharePoint Web applications? MCT USE ONLY. STUDENT USE PROHIBITED Designing a Physical Architecture 4-51 Best Practices Related to Designing a SharePoint 2010 Physical Architecture Supplement or modify the following best practices for your own work situations: • Perform logical architecture design before physical architecture design. • Consider existing network and security policies. • If you are making content accessible to the Internet, carefully consider server placement and protecting the connection by using an application-layer gateway device. • Carefully size site collections so that they do not exceed database storage recommendations. MCT USE ONLY. STUDENT USE PROHIBITED MCT USE ONLY. STUDENT USE PROHIBITED Designing a Security Plan 5-1 Module 5 Designing a Security Plan Contents: Lesson 1: Designing Security for SharePoint 2010 5-3 Lesson 2: Planning for Service Accounts 5-8 Lesson 3: Planning Security for Users and Groups 5-18 Lesson 4: Planning for SSL 5-32 Lab: Designing a Security Plan 5-36 MCT USE ONLY. STUDENT USE PROHIBITED 5-2 Designing a Microsoft® SharePoint® 2010 Infrastructure Module Overview This module describes the key elements that you must consider when you design a security plan for Microsoft® SharePoint® 2010. A robust security plan is crucial to protect your SharePoint 2010 structure and the content that you store in it. You must plan how you will secure the service accounts that support SharePoint services, control access to SharePoint sites, and secure the traffic that passes between client and server. Objectives After completing this module, you will be able to: • Describe the security architecture in SharePoint 2010 and the importance of the principle of least privilege. • Identify and plan security for core service accounts. • Describe the considerations for implementing security for users and groups. • Explain the options for implementing Secure Sockets Layer (SSL) in SharePoint 2010. MCT USE ONLY. STUDENT USE PROHIBITED Designing a Security Plan 5-3 Lesson 1 Designing Security for SharePoint 2010 To design effective security for your SharePoint 2010 infrastructure, you must balance the need to reduce the risk of a security failure with the need to make SharePoint content and features accessible to users who need them. You must ensure that your security model provides the appropriate level of access for those who require it. You must also prevent inappropriate access. The principle of least privilege is the cornerstone of an effective security plan. This principle states that you should give users the permissions that they require to perform their job tasks and no more. It is important that you can apply the concepts of least privilege appropriately in SharePoint 2010. Objectives After completing this lesson, you will be able to: • Explain the principle of least privilege. • Describe the security architecture in SharePoint 2010. MCT USE ONLY. STUDENT USE PROHIBITED 5-4 Designing a Microsoft® SharePoint® 2010 Infrastructure What Is the Principle of Least Privilege? Key Points The principle of least privilege is the strategy of assigning a user the fewest possible permissions that still allow the user to perform all required actions. The principle applies regardless of how you grant the permissions—whether through membership of groups or roles, the effects of policies, or direct assignment to the user account. When you design a security plan for SharePoint 2010, you must apply this principle to standard user accounts, groups, service accounts, and administrator accounts. Designing for least privilege may incur some extra administrative effort; for example, you may decide to create a new service account so that you can control permissions for a particular service application. However, designing for least privilege will help you to ensure that your SharePoint deployment remains secure. You should apply the principle of least privilege to all of the elements in a SharePoint 2010 infrastructure. The following list describes some of the key areas that you should consider: . SharePoint 2 010 Infrastructure f Task 1: Read the supporting information 1. Read the lab scenario. 2. Log on to 10 23 1A- NYC-DC1-04 as CONTOSOEd with the password Pa$$w0rd. 3. In the E:LabfilesLab04Starter. PROHIBITED Designing a Physical Architecture 4-47 Lab: Designing a Physical Architecture Exercise 1: Planning the Physical Architecture Scenario Contoso Pharmaceuticals Research is requesting. the name resolution problem 1. Use SharePoint Central Administration to create an alternate access mapping for the SharePoint- 80 Web application with the following settings: • Zone: Intranet