Designing The Logical Infrastructure

By Author: fiona
Total Articles: 191
Comment this article

Exam Objectives in this Chapter:
? Create the logical design for a security network infrastructure.
? Design a public key infrastructure (PKI) SY0-201 that uses Certificate Services.
? Design a Certification Authority (CA) hierarchy implementation. Types include
geographical, organizational, and trusted.
? Design enrollment and distribution processes.
? Establish renewal, revocation, and auditing processes.
? Design security for CA servers.
Why This Chapter Matters
If you don't base your security design on solid logic, it will fail. Before you think about protocols and proxies, you must think about authentication, confidentiality, and integrity. Before you think about hard-ware and software, you must think about availability, security, and privacy—and what these things mean to your organization. If you cannot describe the purpose of a secure Security+ exam infrastructure, what it is made up of, and how it will support business without hindering it, you doom your design ...
... (not to mention your career as a designer) from the start.
Lessons in this Chapter:
? Lesson 1: Building a Logical Security Infrastructure
by Using Certificate Services 2-5
? Lesson 2: Designing a CA Hierarchy 2-15
? Lesson 3: Designing the Certificate Enrollment Process 2-34
? Lesson 4: Designing the Renewal, Revocation, and Auditing Processes 2-50
? Lesson 5: Designing Security for the Certification Authority 2-65
Before You Begin
This chapter presents the skills and concepts related to designing the logical security infrastructure. This training kit assumes that you have a minimum of 1 year of experience implementing and administering desktop operating systems and network operating systems in environments that have the following characteristics:
? At least 250 supported users
? Three or more physical locations
? Typical network services such as messaging, database, file and print, proxy server
or firewall, Internet and intranet, remote access, and client computer management
? Three or more domain controllers
? Connectivity needs, including connecting branch offices and individual users in
remote locations to the corporate network and connecting corporate net-works to
the Internet
In addition, you should have experience designing a network infrastructure.
Many design exercises are paper-based; however, to understand the technical capabil?ities that a design can incorporate, you should have some hands-on SY0-201 Exam experience with products. Where specific hands-on instruction is given, you must have at least two computers configured as specified in the "Getting Started" section at the beginning of this book. This chapter presents additional topics and practices to teach you how to complete the major steps to put the design into production.