Lesson 1: Identifying Security Threats

• Identify Social Engineering Attacks
• Classify Software Attacks
• Identify Hardware Attacks

Lesson 2: Hardening Internal Systems and Services

• Harden Base Operating Systems
• Harden Directory Services
• Harden DHCP Servers
• Harden Network File and Print Servers

Lesson 3: Hardening Internetwork Devices and Services

• Harden Internetwork Connection Devices
• Harden DNS and BIND Servers
• Harden Web Servers
• Harden FTP Servers
• Harden Network News Transport Protocol (NNTP) Servers
• Harden Email Servers
• Harden Conferencing and Messaging Servers

Lesson 4: Securing Network Communications

• Secure Network Traffic Using IP Security (IPSec)
• Secure Wireless Traffic
• Secure Client Internet Access
• Secure the Remote Access Channel

Lesson 5: Managing Public Key Infrastructure (PKI)

• Install a Certificate Authority (CA) Hierarchy
• Harden a Certificate Authority
• Back Up Certificate Authorities
• Restore a Certificate Authority

Lesson 6: Managing Certificates

• Enroll Certificates for Entities
• Secure Network Traffic Using Certificates
• Renew Certificates
• Revoke Certificates
• Back Up Certificates and Private Keys
• Restore Certificates and Private Keys

Lesson 7: Enforcing Organizational Security Policy

• Enforce Corporate Security Policy Compliance
• Enforce Legal Compliance
• Enforce Physical Security Compliance
• Educate Users

Lesson 8: Monitoring the Security Infrastructure

• Scan for Vulnerabilities
• Monitor for Intruders
• Set Up a Honeypot
• Respond to Security Incidents