How A Remote Server Is Used To Protect Data

By Author: unknownmem
Total Articles: 127
Comment this article

It is possible to store Web site content on remote 70-291(http://www.mcsa-70-291.com)
servers and increase reliability, performance, and security. It is also possible to reduce security. In addition to placing data in a SQL Server database on a separate server, data can be stored on file servers and Network-Attached Storage (NAS) devices. Data on remote SQL Server databases and Windows file servers can be secured using SQL Server permissions, file system permissions, or both. Data on NAS devices will have to be secured using any methods provided by the device manufacturer.
An example of this type of storage is provided in Figures 13-7 and 13-8. In Figure 13-7, clients access IIS and all data is stored on remote databases. Although IIS is located on the perimeter network, the file servers are located on the internal network behind the interior firewall. If the IIS server is compromised, an attacker will have to 70-291 Exam(http://www.mcsa-70-291.com)
penetrate a second firewall to access the data. In Figure 13-8, data from several IIS servers at an ISP is stored on a high-end server with high-speed RAID. A ...
... similar configuration might store data on a file server cluster.
If data on remote servers should log access, or if it requires authenticated user access, user credentials can be forwarded by IIS to the remote servers. Use constrained delegation to limit the risk that code running on the remote servers might use the delegated user credentials for unintended or malicious activity.

An application pool identity is a user account that is the process identity for the worker processes that service an application pool.
Each application pool can and should have a separate application pool identity.Assign permissions to the application pool identity to restrict and grant the access to resources, such as files on an NTFS partition or data in a Microsoft SQL Server database. Web sites and applications running in the application pool have the same rights and permissions granted to the application pool identity. For more information on free CompTIA practice tests(http://www.examshots.com/vendor/CompTIA-4.html)
application pools and application pool identities, see the "How to Isolate Web Sites and Applications" section.