|
Topic:
|
Benefit:
|
- Explain common attacks against network assets, the associated threats and vulnerabilities, and what network security personnel do to secure assets.
|
- Keep the bad guys out by understanding the threats and methods of attack. Establish a baseline with no outside intrusion
|
- Explain how to use cryptography to help protect information and how to choose an appropriate encryption method for an organization.
|
- Implement security-enhanced computing baselines in an organization.
|
- Help protect information in an organization by using authentication and access control.
|
- Make sure those gaining access to the network have credentials and are who they say they are.
|
- Deploy and manage certificates.
|
- Help protect transmission of data by identifying threats to network devices and implementing security for common data transmission, remote access, and wireless network traffic
|
- Keep the bad guys out of information transmitted to others within the business and off the premises
|
- Help protect Web servers against common attacks and configure security for Web browsers.
|
- Keep web based information secure
|
- Help protect e-mail messages and instant messaging from common security threats.
|
- Keep gad guys from reading your email and instant messages
|
- Identify common security threats and vulnerabilities to directory services and DNS, and then apply security methods to help protect them.
|
- Keep the bad guys from learning the names of computers on your network while keeping the network names available to authorized users
|
- Identify network perimeter threats and monitor perimeter security for a network.
|
- Know how the bad guys attack and keep a watch for their attacks
|
- Identify types of security policies to manage operational security, and then use these policies to ensure compliance by users in an organization.
|
- Use policy to discourage or prevent attacks from within and from outside
|
- Preserve business continuity by implementing a security-enhanced disaster recovery strategy, communicating risks to others, and performing secure backup and recovery.
|
- Provide maximum security for information, maximum availability of information, with the ability to recover from attack with minimal disruption.
|
- Identify, respond to, and assist in the formal investigation of security incidents.
|
- Prepare to assist and prosecute in the event of a network breach
|