Exam 98-367: Security Fundamentals/Understanding Security Software

This lesson covers Understanding Security Software. It looks at client, e-mail, and server protection.

Activity 1 - Understand Client Protection

This objective may include but is not limited to: antivirus; User Account Control (UAC); keeping client operating system and software updated;encrypting offline folders; software restriction policies.

1. Read Microsoft Security Essentials.
2. Read Automatic Updates Policy Settings.
3. Read How to Encrypt Offline Files.
4. Read What is User Account Control?.

Activity 2 - Understand E-mail Protection

This objective may include but is not limited to: antispam; antivirus; spoofing, phishing, and pharming; client vs. server protection; SPF records; PTR records.

1. Read Exchange Server Tutorials.
2. Read Wikipedia: Phishing.
3. Read Microsoft Adds New Spam Filtering Technology Across E-Mail Platforms.

Activity 3 - Understand Server Protection

This objective may include but is not limited to: separation of services; hardening; keeping server updated; secure dynamic DNS updates; disabling unsecure authentication protocols; Read-Only Domain Controllers; separate management VLAN; Microsoft Baseline Security Analyzer (MBSA).

1. Read Microsoft Baseline Security Analyzer.
2. Read Security Tools for IT Pros.
3. Read What Is an RODC?.

References

• Exam 98-367 Security Fundamentals Student Study Guide
• Microsoft: Security Fundamentals Exam Details