Exercise 3: Supervise Administrators in Visual C#

Print QR in Visual C# Exercise 3: Supervise Administrators

1. A methodology for ensuring that administrators don t overstep their authority is required. What would you suggest

Audit administrators activities on the network, and assign administrators membership in spe cific groups that are granted only the necessary privileges that they need to do their jobs. Check the background and employee performance of the administrators in the organization. Providing administrators with only the access and privileges that they need is a good way to limit the abuse they can perform.

Exam Objectives in this :

Design a security update infrastructure:

Design a Software Update Services infrastructure. Design group policy to deploy software updates. Design a strategy for identifying computers that are not at the current patch level.

Ninety-five percent of all successful computer attacks where the cause can be determined are the result of vulnerabilities for which there already was a patch or other configuration mitigation (paraphrased from a statement made by CERT, the Com puter Emergency Response Team, at Carnegie Melon University to Security Watch, a weekly newsletter produced by 101 Communications). Every day, someone new learns about a vulnerability in a system, a default setting that needs improvement, or another potential way to break into your systems. Every day, someone uses that information. You must be that person. To stop these attacks, you must incorporate new security information into your network in the form of security updates. Lessons in this :

Lesson 1: Introduction to Designing a Security Update Infrastructure . . . . . . . .5-3 Lesson 2: Designing Client Configuration for the Security Update Infrastructure. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5-27 Lesson 3: Monitoring and Improving the Security Patch Update Process . . . . 5-34

This chapter presents the skills and concepts related to creating a security design framework. This training kit assumes that you have a minimum of 1 year of experience implementing and administering desktop operating systems and network operating system in environments that have the following characteristics:

5

Typical network services such as messaging, database, file and print, proxy server or firewall, Internet and intranet, remote access, and client computer management Three or more domain controllers Connectivity needs that include connecting branch offices and individual users in remote locations to the corporate network, and connecting corporate networks to the Internet

In addition, you should have experience designing a network infrastructure. Many design exercises are paper based; however, to understand the technical capabil ities that a design can incorporate, you should have some hands-on experience with products. Where specific hands-on instruction is given, you must have at least two computers configured as specified in the Getting Started section at the beginning of this book.

Updating security is not just patching, but patching does address the most immediate security needs. A well-designed, automated security-patch-updating infrastructure is a necessary component of your network. Microsoft Software Update Services (SUS) addresses many of the security updating needs for a Microsoft Windows based network. But to create a well-designed security update infrastructure that includes SUS, you must first understand all methods available for updating security and how to choose the best combination of methods, know the general guidelines for designing a security update infrastructure, and know what SUS is and how it works. Only then can you design a security update infrastructure using SUS that will fit your network s needs.

Explain the process for designing a security update infrastructure. List the changes that require security updates. Describe the methods for updating systems. Choose the best combination of update methods. Find the latest security vulnerability information. Explain the guidelines for designing a security update infrastructure. Explain the purpose of SUS and describe its components. Secure the SUS server. Design a software update infrastructure by using SUS.