Configuring Advanced Network Security Policy

Practice Labs Module
Difficulty
Intermediate

The Configuring Advanced Network Security Policy module provides you with the instruction and Server hardware to develop your hands on skills in the defined topics. This module includes the following exercises: Disabling Unnecessary Services, Protecting Management Interfaces and Applications, Renaming Unnecessary Accounts for Security.

Join over 3 million cybersecurity professionals advancing their career
Sign up with
or

Already have an account? Sign In »

Overview

Introduction

The Configuring Advanced Network Security Policy module provides you with the instruction and Server hardware to develop your hands on skills in the defined topics. This module includes the following exercises:

  • Disabling Unnecessary Services
  • Protecting Management Interfaces and Applications
  • Renaming Unnecessary Accounts for Security

Exam Objectives

The following exam objectives are covered in this lab:

  • 3.2 Compare and contrast common network vulnerabilities and threats (Unnecessary running services)
  • 3.3 Given a scenario, implement network hardening techniques (Security policies and Disable unneeded network services)

Exercise 1 - Disabling Unnecessary Services

In this exercise, you will disable unnecessary services on domain-joined computers to minimize their exposure and risks when they are used outside of the corporate network. It is essential that unneeded network services are turned off to minimize the number of ports that are open when these company-owned devices are connected to the public network such as the Internet.

Exercise 2 - Protecting Management Interfaces and Applications

In this exercise, you will use group policy objects to protect certain programs from being run by regular users. You will prevent some users to run applications that are not allowed by system administrators using Software Restriction Policy in group policy.

Exercise 3 - Renaming Unnecessary Accounts for Security

In this exercise, you will rename the Guest account which is common to all Windows devices. This account although disabled is provided with the system for convenience purposes-mostly useful for part time users of a network.

Learning Partner
Comprehensive Learning

See the full benefits of our immersive learning experience with interactive courses and guided career paths.