Designing Security For Iis

By Author: unknownmem
Total Articles: 128
Comment this article

Web sites serve as easily identifiable targets for targeted MCSE 2003 exams(http://www.mcse-70-297.com)
and nontargeted attacks. Public Web servers, by their very definition, must be accessible to everyone, and thus attacks can easily be directed to them. Web servers also run standardized applications and must be able to respond to standard protocols. Because these applications are well-known and understood by many, it is easy for attackers to create or adapt readily available attacks at them. Also, because Web servers are both accessible by the public and often provide access to resources on the public network, they can provide unintended portals for attacks on the private network of your organization.
IIS is also a high-profile attack target simply because it is the most identifiable and accessible Microsoft product. You must provide superior hardening and protection for IIS and your Web-based applications. If you don't, you are hanging up a welcome sign—inviting every malicious hacker and disgruntled former and present employee in and providing them the opportunity to destroy your network.
This chapter ...
... presents the skills and concepts related to creating a security design framework. This training kit presumes that you have a minimum of 1 year of experience implementing and administering desktop operating systems and network operating systems in 70-297 Exam(http://www.mcse-70-297.com)
environments that have the following characteristics:
At least 250 supported users
Three or more physical locations
Typical network services such as messaging, database, file and print, proxy server or firewall, Internet and intranet, remote access, and client computer management
Three or more domain controllers
Connectivity needs that include connecting branch offices and individual users in remote locations to the corporate network, and connecting corporate networks to the Internet
In addition, you should have experience designing a network infrastructure.
Many design exercises are paper-based; however, to understand the technical capabilities that a design can incorporate, you should have some hands-on experience with products. Where specific hands-on instruction is given or desired Free Security+ practice exams(http://www.examshots.com/certification/Security+-67.html)
, you will need at least two computers configured as specified in the "Getting Started" section at the beginning of this book.