How To Evaluate Sample Baseline Security Template Recommendations

By Author: Shirley Green
Total Articles: 129
Comment this article

There are many design decisions to be made when using security templates to define MCSA Certification for servers. It is easy to give guidelines and provide thoughts for your consid-eration. It is more difficult to tell you exactly what to do.
Information security consultants are famous for responding to requests for specific settings with the words "it depends." To help you learn how to evaluate template recommendations, Table 8-4 provides explanations for some recommendations in the guide's templates—both as described in the document and also as explained elsewhere. Sections that are explained in other chapters—such as Password Policy, Account Lockout Policy, and Auditing—are not commented on here. Table 8-4 also provides commentary on the settings. For a comprehensive explanation, read the guide and refer to other resources, some of which are provided in the "Sources of Baseline Security Template Samples and Settings Recommendations" topic earlier in this lesson. To evaluate base?line security template recommendations, perform the following tasks:
Read ...
... the security template setting and the choices presented. Choices might be to simply enable or disable, or they might be free A+ exam questions more explicit.
Use resources to determine what the setting will do. Sometimes it will be self evident, such as the setting that states the minimum length for a password. Other settings might seem vague or might just need to be researched.
Use your own knowledge and other resources to determine the impact a specific setting might have when combined with other settings.
Determine whether the setting can restrict, lock down, or eliminate something and therefore make a server more secure.Determine whether the setting restricts, locks down, or eliminates something that might cause the server to not run.
Determine whether the setting adheres to or violates your organization's security policy.
Consider each setting in the template, and make a decision about whether changes are needed to make servers more secure or whether secure baseline settings free CIW exam questions should be reinforced by including them in the template.