MCSEGuidetoMicrosoftWindowsXPProfess……6节.pptVIP

Guide to MCSE 70-270, Second Edition, Enhanced * IP Security Policies Security measure added to TCP/IP Protects communications between two systems using that protocol Can be used over a RAS or WAN link Creates a secured point-to-point link between two systems Configured and enabled with Advanced TCP/IP Settings dialog box Guide to MCSE 70-270, Second Edition, Enhanced * IP Security Policies (continued) Modes: Transport Tunneling Predefined IPSec policies: Client (Respond Only) Server (Request Security) Secure Server (Require Security) Guide to MCSE 70-270, Second Edition, Enhanced * IP Security Policies (continued) Authentication methods: Kerberos version 5 Default and preferred Public key certificate authentication Preshared key Less secure Guide to MCSE 70-270, Second Edition, Enhanced * Administrative Templates Offer controls on a wide range of environmental functions and features Registry based group policy information Used to overwrite Registry to force compliance with group policy Guide to MCSE 70-270, Second Edition, Enhanced * User Configuration Subfolders: Software Settings Windows Settings folder Administrative Templates folder Guide to MCSE 70-270, Second Edition, Enhanced * Security Configuration and Analysis Tool MMC snap-in Used to: Analyze Configure Export Validate system security based on a security template Seven predefined security templates Guide to MCSE 70-270, Second Edition, Enhanced * Security Configuration and Analysis Tool (continued) Checks system’s current configuration against selected security template Produces a report of discrepancies Apply security templates to system Guide to MCSE 70-270, Second Edition, Enhanced * Secedit Command-line version of Security Configuration and Analysis tool Favored by administrators Can be scripted Four functions: Analyze Configure Export Validate Guide to MCSE 70-270, Second Edition, Enhanced * Auditing Security process Records occurrence of specific operating system events inSecurity log Every