課程模塊

課程內(nèi)容

實(shí)驗(yàn)內(nèi)容

Module1:

Preparing to Secure Information

Explaining How Assets Are Attacked

Explaining How Assets Are Secured

  Preparing to Secure Information

Module2:

Implementing Security-Enhanced Computing Baselines

Introduction to Trusted Computing Bases

  Establishing a Security Baseline

  Monitoring a Security Baseline

  Helping to Secure Computers Physically

  Maintaining a Security Baseline

  Maintaining Baseline Security

Module3:

Helping to Protect Information Using Authentication and Access Control

  Introduction to Access Control

  Implementing an Authentication Strategy

  Implementing an Access Control Strategy

  Securing Accounts (MBSA)

Module4:

Using Cryptography to Help Protect Information

  Introduction to Cryptography

  Using Symmetric Encryption

  Using Hash Functions

  Using Public Key Encryption

  Using Cryptography to Help Protect Information

Module5:

Using a PKI to Help Protect Information

  Introduction to Certificates

  Introduction to Public Key Infrastructure

  Deploying and Managing Certificates

  Using Certificates

Module6:

Securing Internet Applications and Components

  Helping to Protect Web Server

  Configuring Security for Common Internet Protocols

  Configuring Security for Web Browsers

  Configuring Security for Databases

  Securing Web Servers

  Protecting Clients from Active Content

Module7:

Implementing Security for E-Mail and Instant Messaging

  Securing E-Mail Servers

  Securing E-Mail Clients

  Securing Instant Messaging

  Securing Mail Servers

Module8:

Managing Security for Directory Services and DNS

  Helping protect Directory Services Against Common Threats

  Helping Protect DNS Against Common Threats

  Managing Security for Directory Services and DNS

Module9:

Securing Data Transmission

  Identifying Threats to Network Devices

  Implementing Security for Common Data Transmission

  Implementing Security for Remote Access

  Implementing Security for Wireless Network Traffic

  Securing Data Transmission

  Using IPSec to Secure Data Transmission

Module10:

Implementing and Monitoring Security for Network Perimeters

  Introduction to Network Perimeters

  Implementing Security on Inbound and Outbound Network Traffic

  Monitoring Network Traffic

  Implementing and Monitoring Security for Network Perimeters

Module11:

Managing Operational Security

  Establishing Security Policies and Procedures

  Educating Users about Security Policies

  Applying Security Policies to Operational Management

  Resolving Ethical Dilemmas When Helping to Protect Assets

  Managing Operational Security

Module12:

Preserving Business Continuity

  Preparing to Recover from Disasters

  Communicating the Impact of Risks

  Performing a Security-Enhanced Backup and Recovery

  Preserving Business Continuity

Module13:

Responding to Security Incidents

  Identifying Security Incidents

  Responding to Security Incidents

  Investigating Security Incidents

  Responding to Security Incidents