This three-day instructor-led course provides you with the knowledge and skills to design a secure network infrastructure. Topics include assembling the design team, modeling threats, and analyzing security risks in order to meet business requirements for securing computers in a networked environment. The course encourages decision-making skills through real-life scenarios that the target audience may encounter. You are given the task of collecting the information and sorting through the details to resolve the given security requirement.
Target Audience:
This course is intended for IT systems engineers and security specialists who are responsible for establishing security policies and procedures for an organization. Students should have one to three years of experience designing related business solutions.
This module describes the basic framework for designing network security and introduces key concepts used throughout the course. It also introduces a fictional organization which the labs in the course use as an ongoing case study.
Lessons
Introduction to Designing Security for Microsoft Networks
Contoso Pharmaceuticals: A Case Study
After completing this module, students will be able to:
Provide an overview of designing security for Microsoft networks.
Describe the components of the case study for this course.
Module 2: Creating a Plan for Network Security
Plans for network security include documented security policies and procedures. These policies and procedures, when implemented, help to secure networks against compromises. This module describes the importance of security policies and procedures in a security design, and explains how a security design team must include representation from various members of the organization. The module also introduces the Microsoft Solutions Framework (MSF) process model, which provides a comprehensive framework that can be used to create a security design.
Exercise 2: Determining the Members of a Security Design Team
After completing this module, students will be able to:
Describe common elements of security policies and procedures.
Create a security design framework by using the MSF process model.
Create a security design team.
Module 3: Identifying Threats to Network Security
In this module, you will learn how to identify possible threats to a network and understand common motivations of attackers. The module introduces the STRIDE (Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege) threat model as an effective way to predict where threats may occur in an organization.
Lessons
Introduction to Security Threats
Predicting Threats to Security
Lab : Identifying Threats to Network Security
Exercise 1: Identifying and Categorizing Threats by Using a Threat Model
Exercise 2: Documenting Security Threats
After completing this module, students will be able to:
Explain common network vulnerabilities and how attackers can exploit them.
Predict threats to security by using a threat model.
Module 4: Analyzing Security Risks
In this module, you will learn how to determine what resources in your organization require protection and how to prioritize those resources based on their value. You will then develop a risk management plan, based on the MOF risk model, to identify and analyze risks proactively and to determine an appropriate level of protection for each resource.
Lessons
Introduction to Risk Management
Creating a Risk Management Plan
Lab : Analyzing Security Risks
Exercise 1: Applying Quantitative and Qualitative Risk Analysis
After completing this module, students will be able to:
Explain the purpose and operation of risk management.
Create a risk management plan.
Module 5: Designing Physical Security for Network Resources
In this module, you will determine threats and analyze physical risks to resources in an organization. You will then learn how to design security for facilities, computers, mobile devices, and hardware. You will also learn about implementing disaster recovery as a way to protect physical resources. This module focuses on physical access to resources and how to protect them. Other modules will focus on access to data and how to protect it.
Lessons
Creating a Plan for Physical Security
Creating a Design for Physical Security of Network Resources
Lab : Designing Physical Security for Network Resources
After completing this module, students will be able to:
Create a plan for physical security.
Create a design for physical security of network resources.
Module 6: Designing Security for Network Hosts
In this module, you will learn how to determine threats and analyze risks to network hosts in an organization. You will also learn how to design security for network hosts throughout their life cycles, from initial purchase to decommissioning.
Lessons
Creating a Security Plan for Network Hosts
Creating a Design for the Security of Network Hosts
Lab : Designing Security for Network Hosts
Exercise 1: Identifying Vulnerabilities When Applying Security Updates
Exercise 2: Identifying Vulnerabilities When Decommissioning Computers
After completing this module, students will be able to:
Create a security plan for network hosts.
Create a design for the security of network hosts.
Module 7: Designing Security for Accounts and Services
In this module, you will learn how to determine threats and analyze risks to accounts and services in an organization. You will also learn how to design security for accounts and services, including determining security requirements, creating policies, and designing strategies to manage security.
Lessons
Creating a Security Plan for Accounts
Creating a Security Plan for Services
Creating a Design for Security of Accounts and Services
Lab : Designing Security for Accounts and Services
After completing this module, students will be able to:
Create a security plan for accounts.
Create a security plan for services.
Create a design for security of accounts and services.
Module 8: Designing Security for Authentication
In this module, you will learn how to determine threats and analyze risks to authentication. You will learn how to design security for authenticating local users, remote users, and users who access your network across the Internet. You will also learn when to choose multifactor authentication for additional security.
After completing this module, students will be able to:
Create a security plan for authentication.
Create a design for security of authentication.
Module 9: Designing Security for Data
In this module, you will learn how to determine threats and analyze risks to data in an organization. You will learn how to design an access control model for files and folders in order to protect data that is stored on network servers. You will also learn about considerations for encrypting and managing data.
Lessons
Creating a Security Plan for Data
Creating a Design for Security of Data
Lab : Designing Security for Data
Exercise 1: Identifying Potential Data Vulnerabilities
Exercise 2: Designing Countermeasures
After completing this module, students will be able to:
Create a security plan for data.
Create a design for security of data.
Module 10: Designing Security for Data Transmission
In this module, you will learn how to determine threats and analyze risks to data transmission in an organization. You will also learn how to design security for various types of data transmission, including traffic on local area networks (LANs), wide area networks (WANs), Virtual Private Networks (VPNs), wireless networks, and the Internet.
Lessons
Creating a Security Plan for Data Transmission
Creating a Design for Security of Data Transmission
Lab : Designing Security for Data
Exercise 1: Identifying Potential Data Transmission Vulnerabilities
Exercise 2: Implementing Countermeasures
After completing this module, students will be able to:
Create a security plan for data transmission.
Create a design for security of data transmission.
Module 11: Designing Security for Network Perimeters
In this module, you will learn how to determine threats and analyze risks to network perimeters. You will also learn how to design security for network perimeters, including perimeter networks (also known as DMZs, demilitarized zones, and screened subnets), and for computers that connect directly to the Internet.
Lessons
Creating a Security Plan for the Perimeter of a Network
Creating a Design for Security of Network Perimeters
After completing this module, students will be able to:
Create a security plan for the perimeter of a network.
Create a design for security of network perimeters.
Module 12: Responding to Security Incidents
Network security for an organization is an exercise in prevention. A good security design that is properly implemented will prevent most of the most common attacks. However, it is very likely that an attacker will eventually penetrate the defenses that you design.
When an attack happens, the key to limiting damage is early detection and a rapid and orderly response. Auditing is an important tool to help you to detect network abnormalities that may indicate attacks. An incident response procedure is a series of steps that you design in advance to guide your organization during a security incident.
Lessons
Introduction to Auditing and Incident Response
Designing an Audit Policy
Designing and Incident Response Procedure
Lab : Responding to Security Incidents
Exercise 1: Identifying Potential Vulnerabilities
Exercise 2: Implementing an Incident Response Team
Exercise 3: Implementing an Incident Response Plan
After completing this module, students will be able to:
Describe auditing and incident response.
Design an audit policy.
Design an incident response procedure.
Module 13: Appendix A: Designing an Acceptable Use Policy
This appendix provides information about creating policies for acceptable use of network resources by users.
Lessons
Analyzing Risks That Users Introduce
Designing Security for Computer Use
Module 14: Appendix B: Designing Policies for Managing Networks
This appendix offers guidelines for ensuring that network administrators manage networks in a secure manner.
Lessons
Analyzing Risks to Managing Networks
Designing Security for Managing Networks
Module 15: Appendix C: Designing an Operations Framework to Manage Security
This appendix explains how to create a framework to ensure security of a network as the network changes and as the security requirements of the organization change.
Lessons
Analyzing Risks to Ongoing Network Operations
Designing a Framework for Ongoing Network Operations
