Choosing Security To Meet Business And Technical Needs

By Author: unknownmem
Total Articles: 128
Comment this article

Answer the following question.
1. As you start to do your security design, you realize that security issues you need to resolve fall into multiple categories. You make the following list of categories. Review the categories in how to get windows 7 for free(http://www.70-680.com)
, and then indicate the type of security that "will meet the business and technical needs of the Web site for each category.
The following table provides the answers.
What type of security will meet the business and technical needs of the Web site?
Anonymous access should be available. No other IIS authentication choice should be enabled. Certificate mapping should be enabled. This will allow employees who need access to special areas on the Web site to have it.
A separate server will be provided to allow FTP site creation. FTP user isolation will be used to allow authorized users for different parts of the Web site to upload content to unique locations. You will review content changes, make sure proper approval is obtained, and move the content to the production server.
Separate folders for static content and ...
... for executables will be maintained. Permissions will be set on the static content as Read. Permissions on executables will allow execution, but they won't allow Write permissions. Any data that users must enter free 70-680 test questions(http://www.70-680.com)
into forms will be written to databases on a SQL Server server, not to local Web pages. Some content is accessible only to certain users. These folders will be given Read permission but will be controlled through the use of NTFS.
NTFS permissions will parallel Web permissions when anonymous access is allowed. NTFS permissions will control Web access to restricted areas of the Web site and will deny access to the anonymous account. Other NTFS permissions will be set on folders and files that should not be Web accessible.
A SQL Server database will have to be installed and secured. IPSec policies will be written to secure data written to the database.
Remote administration will be allowed only via terminal services. An IPSec policy will be used to protect data and for computer authentication.
ASP will need to be enabled, but no other extensions will be enabled unless it is determined that some application requires them. The FTP service will not run on the Web server.
Data structures that identify permissions and indi?cate to whom they are assigned. ACEs are assigned to objects at object creation and can be modified by a security principal with the Change Permissions permis?sion. Each ACE contains a security identifier, a permission, and an action (either Allow or Deny).
In a site-to-site (router-to-router) virtual private network (VPN), the router that listens for the connection request, authenticates and authorizes the VPN connection, and then acts as a router by forwarding packets free CompTIA practice tests(http://www.examshots.com/vendor/CompTIA-4.html)
between nodes in its site and the calling router.