Tuesday, September 07, 2010
   
Text Size

Search Site

Courses:

77-553 Windows 2000 Designing a Secure Network

click here to download the course outline  

Windows 2000: Designing a Secure Network

Course Specifications

Course number: 077553

Software Version Number: 2000

Hardware/software required to run this course

Make sure all equipment is on the Microsoft Hardware Compatibility List (HCL) for Windows 2000

Server. See your manufacturer's reference manual for hardware considerations that apply to your

specific hardware setup. One computer for each student and two computers for the instructor. Each

computer will need:

 

A Pentium processor, 166 MHz or greater.

 

At least 128 MB of RAM (256 MB recommended).

 

A 2 GB hard disk or larger for students, 5 GB for Instructor.

 

A Super VGA (SVGA) or higher resolution monitor with at least a 4 MB video card.

 

A mouse or compatible tracking device.

 

A 3.5” 1.44 MB disk drive.

 

12X or faster CD-ROM drive.

 

A network interface card and network cabling.

 

A licensed copy of Microsoft Windows 2000 Server. (Note that in all cases throughout the

book, you can complete the hands on exercises using a licensed copy of Microsoft Windows

2000 Advanced Server.)

 

A licensed copy of the Microsoft Windows 2000 Server Resource Kit.

 

A licensed copy of Microsoft Internet Security and Acceleration (ISA) Enterprise Server 2000.

 

Optional: A licensed copy of Microsoft Visio 2000 Professional or Enterprise Edition. Students

can use this software to diagram Active Directory and diagram placements of firewalls when

designing a secure network. Although Microsoft produces four versions of Visio (Standard,

Technical, Professional, and Enterprise), only the Professional or Enterprise Editions contain

objects for diagramming Active Directory.

 

If students have used Visio in Element K course Windows 2000 Active Directory Design or

other courses this will be a nice addition to the course. There are no written exercises for Visio.

A suggestion would be to extend the exercises in this course, namely the Element K University

Active Directory design and the firewall placement exercises. You may need to give a short

demo of Visio for students that are unfamiliar with the product. Have students create Visio

diagrams for the exercises and place them on a share on securityclass. You can then display the

diagrams on the overhead and discuss as a class.

 

Internet access is highly recommended due to the numerous URLs referenced throughout the

book. Students will benefit from being able to access the latest information about security such

as new security tools and the latest security breaches to the Windows 2000 product line. Make

sure to use IP addresses that do not conflict with other portions of your network.

 

In addition, for the instructor's first computer only:

 

A display system to project the instructor's computer screen, which should be set to 800 x 600

screen resolution and 256 colors.

Course description

Overview: We designed

 

Windows 2000 Network Security Design to meet the needs of current

Windows 2000 system administrators who need to learn how to design a secure network for their

organizations based on business, management, and network factors. This course will also help you

prepare for the Microsoft Certified Systems Engineer Exam #70-220 Designing Security for a

Microsoft Windows 2000 Network. Students taking this course should be familiar with installing,

configuring, and administering an Active Directory domain.

Prerequisites: To ensure your success with this course, we recommend that you are comfortable with

the Windows 2000 user interface and doing basic Windows 2000 networking tasks such as browsing the

network and connecting to shared resources. Students are required to complete or have equivalent

knowledge of these four Element K courses:

 

Windows 2000: Network and Operating Systems Basics

 

Windows 2000: Installation and Administration

 

Windows 2000: Network Infrastructure Implementation and

 

Windows 2000: Administering the Active Directory.

If you are currently a Windows NT Administrator, instead of these four courses listed above, you are

required to complete or have equivalent knowledge of Element K course:

 

Windows 2000 for Windows NT Administrators.:

Delivery Method: Instructor-led, group-paced, classroom-delivery learning model with structured

hands-on activities.

Performance-based objectives

Lesson objectives help students become comfortable with the course, and also provide a means to

evaluate learning. Upon successful completion of this course, students will be able to:

 

Understand security concepts, technologies and industry standards.

 

Identify both internal and external security risks.

 

Use Windows 2000 technologies and features to secure resources and the network

infrastructure.

 

Design administrative control of resources by delegating authority.

 

Implement User and Group policies to tighten security.

 

Secure computers to allow access only to authorized users.

 

Prevent unauthorized access to sensitive data and printers.

 

Use IPSec and secure communication within the LAN.

 

Secure remote access to the network for clients connecting thru a Virtual Private Network

(VPN) or dialing in to the network.

 

Secure a WAN link.

 

Implement a firewall strategy to protect internal resources and external access to resources.

 

Plan and design a Windows 2000 network for Internet access.

 

Allow secure access to a private network from public network users.

 

Design strategies for authenticating partners on the network.

 

Design strategies for allowing partners access to resources on the network.

 

Design strategies for business to business and ecommerce communications.

 

Allow secure access to the network for other clients.

 

Plan and design a Windows 2000 security strategy.

Course content

Lesson 1: Overview of Design

Lesson Overview

The Role of Systematic Design in Development

The Role of Systematic Design in DevelopingEffective IT Solutions in Business

Lesson 2: Analyzing Business Requirements

Analyzing Existing and Planned Business Models

Analyzing Existing and Planned OrganizationalStructures

Analyzing Factors That Influence Company Strategies

Data Collection and Analysis

Lesson 3: Windows 2000 Security Fundamentals

Security Overview

Designing Active Directory for Security

Lesson 4: Establishing a Secure Management Model

Administrative Modeling

Using Administrative Tools

Planning Users and Groups for Security

Lesson 5: Windows 2000 Computer Security

Physical Security

Security Templates

File System and Printer Security

Encrypting File System (EFS) Design Strategies

Backup Planning and Virus Protection

Lesson 6: Public Key Infrastructure Design

Introduction to Cryptography

Installing Certificate Services

Using Certificates with IIS

Designing a PKI

Lesson 7: Using IP Security

Designing IP Layer Security with IPSec

Lesson 8: Remote Access Security

Designing a Plan for Remote Access Users

Lesson 9: Protecting Your Network with Firewalls

Introduction to Firewall Concepts

Network Server Placement

Microsoft Internet Security and Acceleration(ISA) Server and Microsoft Proxy Server

Lesson 10: Planning and Design for Internet Access

Deciding on How to Connect to an Internet ServiceProvider

Configuring Security in Internet Explorer

Lesson 11: Remote Authentication and Resource AccessScenarios

External Access to Internal Resources

Partner Authentication and Resource Access

Lesson 12: Security for Other Client Computer Types

Security and Non-Microsoft Clients

Appendix A: Security Links

Web Sites Referred to During this Course

Appendix B: Element K University

Scenario

Additional Info

If this course is being customized, be sure to include the Windows 2000 Security Fundamentals Lesson

as well as Appendix B as it defines an example university called Element K University which is used

throughout the course. Also, if you are customizing this course along with course 079-924 Analyzing

Business Requirements or 079-924 Developing Business Solutions, which are part of the Element K

developer track, be aware that the first two lessons have some overlapping concepts.

 

Online Content

CourseOutlinesonline


IL Training

CourseOutlines-Instructor

Online Ordering

Access Our LMS

Search Courseware