How Data In Transit Can Be Protected

By Author: unknownmem
Total Articles: 128
Comment this article

This section explains what data must be protected in transit. It then describes how MCSA Certification(http://www.mcsa-70-270.com)
is used to protect data, how IPSec is used to protect data, how a VPN is used to protect Web server data, and how a remote server is used to protect data.
What Data Needs to Be Protected in Transit?
Data on the Web server must be protected from unauthorized access and modification. Data exchanged between the Web server and its clients and between the Web server and any other servers that it interfaces with should also be protected. Examples of these needs include the following:
A client enters confidential information such as a Social Security number or credit card number into a form on a Web site.
Data is added to or retrieved from a SQL Server database by an application on the Web server.
Administration of Web servers is done remotely.
Content is added, replaced, or otherwise managed remotely.
Three technologies used to protect 70-270(http://www.mcsa-70-270.com)
data in transit are SSL (or TLS), IPSec, and virtual private networks (VPNs). ...
... All three may be used to protect data accessed by Web applications on remote servers.
For any specific Web site or Web application, running processes require access to Web pages, scripts, and other resources on the Web server and on other servers, such as databases and file servers. If you know the process identity of the application, you can control it via NTFS permissions. If you can participate in the design of the Web application and Web site, you can give administrators the ability to appropriately control and monitor Web site usage. For example, you can do the following:
Restrict access to specific Web pages or database content stored in SQL Server by requiring the process to run in the identity of the user
Isolate applications from one another by running them under the identity of the application pool Restrict anonymous access to the Web server by allowing the application to run under the l\JSR_computername account.
Tip The default application pool identity is the NetworkService account. This is a low privi?leged account. A unique account should be specified and needs to be added to the IIS_WPG group in order to have access to the IIS metabase and content. The IIS_WPG group has, by default, permissions that will allow
free Microsoft practice questions(http://www.examshots.com/vendor/Microsoft-1.html)
most Web sites and applications to run.