1-800-THE-TREE (1-800-843-8733)
TRAINING YOU CAN TRUST
 
 

Windows Server 2008 Security Infrastructure: Hands-On

 
Course: 964   Type: Hands-On Training   Duration: 4 Days
 
 

You Will Learn How To

  • Apply Windows Server 2008 features to secure your infrastructure
  • Deploy a Windows-based Public Key Infrastructure (PKI) as a foundation for security services
  • Enhance access controls with policy-based multifactor authentication
  • Build a scalable encryption solution that assures recovery of protected data
  • Install and configure Network Access Protection (NAP) to exclude unhealthy computers
  • Implement Domain Isolation to decrease network risk for sensitive servers

Course Benefits

Securing the network infrastructure has become a top priority and a major technical challenge for most organizations. Windows Server 2008 provides powerful and complex technologies for decreasing network risk and improving policy compliance. This course provides you with the knowledge and skills necessary to correctly implement these solutions.

Who Should Attend

IT professionals responsible for securing a Windows-based network infrastructure. Knowledge at the level of Course 960, "Windows Server 2008 Comprehensive Introduction," or practical experience configuring and managing Windows Server 2003, is assumed.

Hands-On Training

Extensive hands-on exercises provide practical experience designing and implementing a secure network infrastructure. Exercises include:
  • Deploying Certificate Servers to provide key escrow and Key Recovery Agents
  • Implementing policy-based, multifactor authentication
  • Restoring encrypted data with Data Recovery Agents and supporting policies
  • Configuring NAP to quarantine unhealthy computers
  • Remediating quarantined clients to allow full network access
  • Building a Domain Isolation solution to restrict access to sensitive servers

Related Courses

 
Windows Server is a registered trademark of Microsoft Corporation. 		 

Upcoming Dates

Feb 3 - 6, 2009
 New York
Feb 17 - 20, 2009
 Los Angeles
Feb 24 - 27, 2009
 Washington, DC (Reston, VA)
Mar 17 - 20, 2009
 Washington, DC (Alexandria, VA)
Mar 31 - Apr 3, 2009
 Toronto
Apr 21 - 24, 2009
 Chicago (Schaumburg)
Apr 21 - 24, 2009
 Ottawa
Apr 28 - May 1, 2009
 Washington, DC (Rockville, MD)
May 12 - 15, 2009
 New York
Jun 2 - 5, 2009
 Washington, DC (Reston, VA)
Jun 23 - 26, 2009
 Washington, DC (Alexandria, VA)
Jun 29 - Jul 2, 2009
 Los Angeles
Jul 7 - 10, 2009
 Toronto
Jul 21 - 24, 2009
 Ottawa
Jul 28 - 31, 2009
 Chicago (Schaumburg)

For complete schedule, please visit www.learningtree.com
 
http://www.learntree.com/courses/964pf.htm
 
 
1-800-THE-TREE (1-800-843-8733)
TRAINING YOU CAN TRUST
 
 

Windows Server 2008 Security Infrastructure: Hands-On

 
Course: 964   Type: Hands-On Training   Duration: 4 Days
 
 
Course 964 Content
 

Enterprise Security Infrastructure

Introduction to layered security

  • Identifying key features of a secure infrastructure
  • Distinguishing between enterprise and host-based security

Assessing security technologies

  • Applying Windows Server 2008 enhancements
  • Leveraging Windows Server 2008 server roles

Building a Public Key Infrastructure (PKI)

PKI fundamentals

  • Identifying security services provided by a PKI
  • Mining key business benefits of certificate services
  • Implementing public key encryption

Managing certificates

  • Creating and responding to certificate requests
  • Controlling certificate issuance with permissions
  • Securing web-based enrollment with HTTPS
  • Revoking compromised keys
  • Publishing a Certificate Revocation List (CRL)

Storing, archiving and recovering keys

  • Exporting certificates and private keys
  • Deploying Key Recovery Agent accounts
  • Maintaining secure key escrow
  • Providing secure storage for private keys

Leveraging MultiFactor Authentication

Extending authentication solutions

  • Installing domain support for multifactor authentication
  • Testing Kerberos with smart cards and biometrics

Authenticating with smart cards and tokens

  • Configuring smart card enrollment stations
  • Issuing smart card user certificates
  • Implementing a Certificate Hold on misplaced tokens
  • Rolling out domain-wide smart card user and computer policies

Credentialing with biometrics

  • Surveying available biometric technologies
  • Applying biometric authentication in the enterprise
  • Accommodating false negatives and minimizing false positives
  • Controlling access to exemplar databases
  • Auditing biometric user enrollment

Deploying a Scalable Data Protection Model

Identifying confidentiality solutions

  • Specifying information security requirements
  • Analyzing data protection technologies
  • Matching native solutions to enterprise requirements

Implementing EFS in the enterprise

  • Invoking Group Policy to control encryption
  • Assuring data access with Recovery Agents
  • Recovering lost or damaged keys from escrow
  • Selecting approved encryption algorithms in regulatory environments

Assuring BitLocker Data Recovery

  • Analyzing the business case
  • Planning enterprise BitLocker deployments
  • Compensating for EFS vulnerabilities
  • Maximizing data recovery in the event of BitLocker key loss

Implementing Network Access Protection

Maintaining network integrity with NAP

  • Integrating health-based decisions with enterprise security
  • Tailoring access policies for managed and unmanaged clients
  • Controlling access from inside and outside machines

Verifying client health compliance

  • Defining comprehensive client compliance policies
  • Authenticating health claims with the System Health Validator (SHV)
  • Remediating and ensuring ongoing compliance

Enforcing network access restrictions

  • Configuring NAP server components
  • Limiting network access to conformant machines using DHCP and VPN Quarantine Enforcement Clients (QEC)

Applying Domain and Server Isolation

Isolating high-value servers

  • Protecting intellectual property and personal privacy
  • Segregating servers with highly sensitive data

Securing Domain Access with IPsec

  • Calculating segmentation requirements
  • Building domain isolation on AD and Group Policy
  • Configuring exception servers for unmanaged computers
  • Maximizing security while minimizing user impact
 
http://www.learntree.com/courses/964pf.htm
 
 
1-800-THE-TREE (1-800-843-8733)
TRAINING YOU CAN TRUST
 
 

Windows Server 2008 Security Infrastructure: Hands-On Tuition

 
Course: 964   Type: Hands-On Training   Duration: 4 Days
 
 

Course Tuition
$ 2,790 Standard Tuition
Tuition with a Savings Plan
$ 1,800 10-Day Pass
$ 1,670 Training Passport
$ 1,700 Premium-Pass
$ 2,200 Voucher 10-Pack
$ 2,515 Alumni Gold Discount
$ 2,484 Government Discount
 

 

Your Course Tuition Entitles You To...

  • Class participation
  • Team workshops
  • Use of in-class hands-on equipment
  • Comprehensive course materials
  • Morning and afternoon refreshments
  • Course Completion Certificate awarding Continuing Education Units
  • FREE participation in Professional Certification
  • FREE participation in College Credit programs (including related exams)
  
 

Tuition Savings Plans

Training Passport
  • 3 courses in 12 months
  • As little as $1,670 per course
  • Savings as much as 40%
  • Only $5,000
Premium Pass
  • 4 courses in 24 months
  • As little as $1,700 per course
  • Save as much as 45%
10-Day Pass
  • A NEW way to save on training
  • 10 days of training for one person
  • Save as much as $990 per course
  • Only $4,500
Training Vouchers
  • Save as much as $990 per course
  • Fully transferable
  • As low as $2,200 per course
Alumni Gold Discount Attend your first course and you'll receive a personalized Alumni Gold Discount card, entitling you to save as much as $305 on each course you take within the following 12 months. Take just one course each year and you'll be entitled to ongoing discounts...year after year!

Your Guarantee of Satisfaction

Unless you feel 100% satisfied that Learning Tree delivered even more than you expected, there is no fee for your course attendance. Our Guarantee of Quality lets you experience the value of the course--and then pay only if you feel the course was well worth the tuition.

Enrolling is Easy and Flexible!

Enroll by phone or online. If your plans change, just let us know and, without a fee, you can transfer to another course or cancel your enrollment. Pay after you've taken the course, and then only if you are 100% satisfied.
 
http://www.learntree.com/courses/964pf.htm