Case Study

 < Day Day Up > 



You should give yourself 20 minutes to review this testlet, review the table, and complete the questions.

Overview

Odin Sports is a company that designs, manufactures, and distributes sports equipment to most countries in the world.

Locations

The company is headquartered in Albuquerque. In addition to the headquarters, the company has four other locations that operate as branch offices. These are located in New York, Beijing, Paris, and Rio de Janeiro. The company has approximately 4500 employees distributed as follows among the locations:

Location

Employees

Departments

Albuquerque

2500

Accounting, Marketing, HR, R&D, IT

New York

300

Sales

Beijing

500

Manufacturing, Sales

Paris

700

Design, Sales

Rio de Janeiro

500

Manufacturing, Sales

Current Environment

Odin Sports has two Active Directory domains: one for production and a test domain that is used to try new products and concepts. The production domain has two domain controllers in each location. The OU structure reflects the locations of the company and then the departments at that location. All computer, resource, and user accounts are kept in the OU for the department at that location. Active Directory is centrally managed by the IT staff.

The company prides itself in being up-to-date with technology. Windows Server 2003 is running on most of its servers, and the company has just finished deploying Windows XP to all desktops in Albuquerque, New York, and Paris. There is a mixture of Windows 98 and Windows XP in Beijing and Rio de Janeiro to support some legacy manufacturing applications, but the company is looking at technology to remove this dependence on Windows 98 due to maintenance headaches.

The internal network has a variety of applications, including a recently revamped intranet portal running on IIS 6 using ASP.NET.

Confidential research and development data is accessed through applications installed on terminal servers located in Albuquerque. That way, it does not get stored on local user hard drives that are difficult to secure.

Web applications in Albuquerque are used to exchange secure data between Odin Sports and its suppliers.

Interviews

CIO We have plans to roll out a wireless network in Albuquerque to support the staff from the boardrooms. We also have an upgrade to one of our manufacturing applications that will help us get rid of Windows 98 and make it possible to use Pocket PC devices to access the application from the manufacturing floor. This means we will be installing wireless in Beijing and Rio de Janeiro.

Network Administrator We are overworked maintaining the systems we have. There are no plans to hire more staff, so any solutions must be simple to maintain.

Chief Security Officer We are concerned about wireless security and need to implement a public key infrastructure to issue digital certificates for wireless authentication. The root certificate authority needs to be protected because, if it is compromised, our certificates are no good. We need to maintain and deploy certificates through this infrastructure without making more work for the network administrative staff.

We also need to make sure that all wireless communication is encrypted and secure. Trade secrets will be moved across the network. Again, we need to accomplish this without increasing work for the network administrators.

Business Requirements

The company’s security policy is written with the following requirements:

  • All users must be authenticated by a domain controller before accessing network resources.

  • Data used for research and development must have the highest level of protection for the company to stay competitive.

  • Wireless networks will not be deployed until the necessary security measures are in place.



 < Day Day Up > 



MCSE. Windows Server 2003 Network Security Design Study Guide Exam 70-298
MCSE: Windows(r) Server 2003 Network Security Design Study Guide (70-298)
ISBN: 0782143296
EAN: 2147483647
Year: 2004
Pages: 168

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net