List of Scenarios

---

Chapter 1: Analyzing Security Policies, Procedures, and Requirements

Design Scenario: Analyzing Security Risks

Real World Scenario: Adjusting Security Policies to Comply with Government Regulations

Real World Scenario: Pencils and Server Room Doors

Design Scenario: Analyzing Security Policies and Procedures

Design Scenario: Analyzing the Requirements for Securing Data

Real World Scenario: Exchange 2000 and Active Directory Distribution List

Design Scenario: Technical Constraints when Designing Security

Chapter 2: Identifying and Designing for Potential Security Threats

Design Scenario: Predicting Internal Threats to Your Network

Design Scenario: Predicting External Threats to Your Network

Real World Scenario: A Incident Response Procedure Will Prevent Mistakes

Design Scenario: Designing a Response to an Incident

Real World Scenario: Recovering Services by Making Hard Decisions

Real World Scenario: The Importance of Perimeter Security

Design Scenario: Segmenting Networks for Security

Chapter 3: Designing Network Infrastructure Security

Design Scenario: Designing for SSL on a Windows Server 2003 Network

Design Scenario: Designing for PPTP on a Windows Server 2003 Network

Real World Scenario: A W32.Slammer Worm Attack Prevented Because of Filters

Design Scenario: Designing for Filtering

Design Scenario: Choosing an Authentication Strategy

Design Scenario: Designing a VPN Solution

Design Scenario: Designing a Demand-Dial Solution for a Branch Office

Design Scenario: Designing a Connection Strategy with an External Organization

Design Scenario: Designing Wireless Security

Chapter 4: Designing an Authentication Strategy for Active Directory

Real World Scenario: Cleartext Passwords Across a Network.

Real World Scenario: Stored Credentials Are Easy to Exploit

Design Scenario: Evaluating Windows Authentication Methods

Design Scenario: Designing Client Authentication

Design Scenario: Designing Trust Models

Design Scenario: Analyzing Accounts

Design Scenario: Analyzing Account Risks by Cost Analysis

Design Scenario: Analyzing and Securing Accounts with Account Policies

Chapter 5: Designing an Access Control Strategy for Network Resources

Real World Scenario: Avoiding Deny Permissions

Design Scenario: Designing an Access Control Strategy for Active Directory Objects

Real World Scenario: Taking Advantage of Universal Groups

Design Scenario: Planning an Appropriate Group Strategy

Design Scenario: Delegating Permissions

Design Scenario: Designing an Access Control Strategy for Files and Folders

Real World Scenario: Preventing Internal Attacks through Auditing

Design Scenario: Designing an Audit Policy

Chapter 6: Designing a Public Key Infrastructure with Certificate Services

Design Scenario: Choosing Where to Host Certificates

Design Scenario: Choosing a CA Hierarchy

Real World Scenario: Establishing a Cross-Certificate Trust

Design Scenario: Designing an Enrollment and Distribution Strategy

Design Scenario: Designing a Renewing and Revocation Strategy

Design Scenario: Designing Security for a CA

Chapter 7: Designing Security for Internet Information Services

Design Scenario: Designing a Baseline Based on Business Requirements

Real World Scenario: Code Red Worm

Design Scenario: Designing for Minimum Services with IIS

Design Scenario: Designing an Authentication Strategy with IIS Authentication

Design Scenario: Designing an Authentication Strategy with Forms-Based Authentication

Design Scenario: Designing an Authentication Strategy with Certificate Authentication

Design Scenario: Designing an Authentication Strategy with RADIUS

Design Scenario: Designing a Monitoring and Auditing Strategy for IIS

Design Scenario: Designing a Content Update Strategy

Chapter 8: Designing Security for Servers with Specific Roles

Design Scenario: Determining the Security Environment

Design Scenario: Defining Custom Templates for Servers with Specific Roles

Real World Scenario: Preventing Attacks by Securing DNS Updates

Design Scenario: Securing the DNS Infrastructure

Chapter 9: Designing an Infrastructure for Updating Computers

Design Scenario: Designing an OU Model

Design Scenario: Designing Software Restriction Policies

Design Scenario: Using Groups to Restrict Access to the Operating System

Design Scenario: Selecting the Appropriate Template Setting

Design Scenario: Designing a Patch Management Solution

Design Scenario: Auditing Your Security Patch Solution

Chapter 10: Designing Secure Network Management Infrastructure

Design Scenario: Evaluating Remote Management Needs

Real World Scenario: Designing for Remote Access

Design Scenario: Evaluating Remote Management Security Needs

Design Scenario: Risks of Managing Networks

Real World Scenario: Using MMC to Manage Windows Server 2003

Real World Scenario: Designing for Secure Server Management with MMC

Real World Scenario: Using Remote Desktop for Administration

Design Scenario: Designing for Secure Server Management with Remote Desktop for Administration

Real World Scenario: Using Remote Assistance to Support Users

Design Scenario: Designing for Secure Remote Assistance

Real World Scenario: Using EMS to Manage Servers

Design Scenario: Designing for Emergency Management Services

---