98-367: Security Fundamentals

Sobre este curso

well hello welcome to mark Academy security fundamentals yes that’s good I like it we got some Vanna White hand going on already we’ve just started just started nailing it already

see but that makes me want to make like a sidekick joke so it’s like you know fan away so one of the background what Pat Sajak’s in the limelight Christopher I’m always happy to be your sidekick I

won’t though because really at the end of the day I think you’re doing most of the work in these particular MTA and happy to do so happy to do so that’s good I am too I’m very much so so we’re

here to continue the series we’ve started on Microsoft technology associate certifications with security fundamentals we’ve done one of these prior up to this point the networking

fundamentals you can go take a look at that on Microsoft Virtual Academy calm and yeah if you want to see more and more Microsoft Virtual Academy content on MTA we’re going to be bringing it to

you over the next couple of weeks ah what’s next let’s see we jump right in to meet the presenters oh I I guess we want to look at some slides up for you over there

just I guess yeah wise art well a lot of think cuz you’re the one showing the deck and I’m the one talking so the slides aren’t okay so there’s first of course yes we’re good there’s our first

slide so Microsoft ecology so there we go magley wait let’s go back sorry sorry no it’s good nine eight – three six seven security fundamentals Christopher

Chapman meet Thomas Willingham gentleman next to me we’re talking about ourselves IT manager and implementer 15 years Nike doing pretty much everything you can do small medium business enterprise

consulting implementation hands-on I did phone support at one point everyone NIT you should do phone support for a small period of time it will teach you some of those valuable lessons in life at all

think anything else on here is really that pertinent instructor I am MC T I’ve been an MCP at MCS since the mt4 days I think that’s it I’ve taken the Microsoft Technology associated exams in the

infrastructure realm server administration operating system fundamentals they’re great tests are great knowledge they’re great for people starting out

career changers new to IT or maybe you’re in an IT role and you’re looking to advance into something a little more complicated these are a great way to do that get you started especially if

you’re new to certification I think because some of our certifications a little intimidating there a little little lots a little doughy they can be there meaning these ones not quite as

much so so they’re a good prep for even further certifications and my contact info is on here you can email me at Christopher MBA Microsoft comm or Twitter at Christopher MSL so you know

I’m totally okay with spending a little bit more time on your slide once again you have that like glamour shot going on that artist look I’m an artist versus me well we’ll go to the next slide I have

the hipster selfie there’s nothing wrong then notice notice the selfie there and I’m I’m pensive oh you say you seem more contemplative but yeah I’m a little more pensive uh and honestly one of my

favorite posters is in the background code to fame it was an old home server platform concept that they ran about coding but I just like the fact that somebody wrote code to fame wrote code

and fame on their hands I thought that was funny my background is I taught NCSC and Nobel CNE for and consulted for about 10 years I did some courseware authoring for Microsoft learning

currently I am a Content developer for remote desktop virtualization for about the last five years to contact me got Thomas at microsoft.com feel – feel free to contact me if you’ve had questions

I’ve had some people contact me and Microsoft or Microsoft Christopher I think you have also had some people contact you from previous courses ah we actually get back to people I’ve been

known to answer a question or two to help people out always always willing to help people up yes or feedback I will say I can give you a little funny here I got an email last week looking for tech

support like not the tech support team somebody emailed me and said I need help fixing something a camera wrote it was and I was like here’s a link to our support team they can help you out so if

you email me protect support not sure I’m going to be that I mean I’ll be responsive yes how helpful I’ll be will be relative well okay so sometimes when you receive a response

from somebody there’s two levels of Health there’s one here’s the help directly the second which i think is just as good is here’s a resource to the help you need I think that’s just as

good as the help itself I agree I agree we’ll see how the other emailer how they feel about it yeah when I get a response I think yeah okay let’s let you vennett enough of us we’re good with us yeah so

let’s dive on in course topics so 98 367 security fundamentals the first module will talk about understanding security layers module 2 authentication authorization

and accounting module 3 understanding security policies module for understanding network security and finally module 5 protecting servers and clients I think as an audience you’ll

find a lot of these modules will go relatively quickly so feel free to dig in you might want additional resources we’ll talk about those at towards the end of the deck or the end of the module

and this is just a start this is just to get people started so once you start having those questions feel free to use other resources to go further and go deeper well I was going to say to

qualify the you may find that this one goes rather quickly it’s because security is I mean in its own right it’s a career path you could spend the rest of an IT career just doing security this

course is really just an intro here are some terms you’re going to get familiar with here are some principles you’re going to get familiar with here are some ideas of things you’re going to do it’s

we are going to do some demos you’re going to feel over the hands-on but security such a massive topic that they try to keep it light enough that well I kind of suspect we kept the MCA light

enough to get you interested not scare you out of right right here’s here’s what 45 days of in classroom training you might have to do start here now this little easier security is a

conundrum especially when you’re talking about network security because networking is about allowing your users access to resources security is about keeping people away from resources

so when you put network security together it’s a little different it’s not just I need to keep people out there’s also the I need to ensure continued access I need to ensure that

the data isn’t corrupted I need to ensure physical protection so there’s numerous layers within the security so there’s some nuances in here then you need to take a look at well and all of

them withhold them because some people do have to get through to it exactly it’s really easy for me to lock down a network if I don’t anybody get any work done well that’s simple well so I’ve

heard that the definition of an a truly secured network is the network that isn’t plugged in exactly they didn’t need best way to secure your network just unplug the wire unplug everything

okay so let’s set expectations target audience IT Pro help deaf staff interested in moving into network systems administration anyone interested in learning more about networking

that should be any network professional at any time well this one I would say there’s a kind of a qualification you may be already in in this case a network or systems administration role may be a

junior administration role and security had them at focus especially if you work at a larger enterprise where they may have people doing security you get into larger larger networks when people have

more specific roles you may be doing something that may even be security based but not understand bigger security principles because someone else is doing it so I don’t want to say this is only

for IT people even or helpdesk staff even though it’s kind of a necessary again it’s an intro course so and there’s some prerequisites supporting material here some exams that you could

take Windows operating systems fundamentals networking fundamentals and the server administration fundamentals and a note about that because I put this when I built this slide I I struggled

with this because you’re going to see at the end of the modules additional resources and next steps and these are on there as well and the reason for that is these for MTA courses the security

the network fundamentals the operating system fundamentals and the server fundamentals are to some degree sort of interchangeable you could take them in any order you

really want to because they’re not interdependent so ward order you take them in is up to you so I put them here as prerequisites suggested prerequisites in supporting material and then again at

the end as additional resources depending on which one you’re taking first if you’re taking security first then these aren’t prereqs they’re going to be additional in next step if you’re

taking care you laughs these may have been your prerequisite so but you might find you get a little bit more out of security by having taken these first probably I we were talking about this

actually before we started recording today my preference I think we kind of all agreed us in the production staff networking and OS fundamentals are kind of going to be the starting point those

those first two you see on this list 349 and 366 and then server administration and security are going to be your next two again I won’t go too far into dictating in

order but that’s kind of the idea okay so we get to dive in now now is the time so Microsoft Virtual Academy module one understanding security layers so security layers we’ll talk about

security principles and we’ll talk about physical security so core security principles core security principles include CI a confidentiality integrity and availability confidentiality so

keeping the data and resources that you work with private so the data that you have access to insuring that unauthorized users do not have access to it and that authorized users do have

access to it so there were this was a while back there were some court cases that a hacker got onto a network and found that were argued that he was welcomed onto

the network when he came aboard so he got a login message he used someone else’s login and someone else’s password but when he accessed the network he were see a log in greeting for the network

hello welcome to the network so he argued to the court well I was welcomed on the network so not my fault actually he wants a fifth at work yeah that did work so what they did that’s

why nowadays a lot of the messages that you see are more confidentiality base welcome to the network if you hear the appropriate user if you’re the appropriate user continue to access

resources if you’re not the appropriate resource or the appropriate person you should log off at this time notice that I don’t remember what the date was but there was a shift from because before

Network messages used to be very welcoming hey welcome to the network come on in it’s great a metal ascendant shifted and it became welcome to the network if you’re the appropriate user

so that’s confidentiality integrity ensuring that the data stays intact is consistent is accurate is valid what do we mean by this well hard drives go bad content over the wire gets corrupted

ensuring that the data integrity stays appropriate or hasn’t been modified modified how someone changing it I mean in all fairness someone gets into your network they don’t necessarily want to

do well this would be a way to do damage they don’t wanna steal your information they want to change it in a way you don’t know about to impact business elsewhere or later on so possibly

changing figures values whatever in a database or something so yeah again that would affect integrity on the network anything to change your data and then finally availability describes resource

being accessible to the user so I we talked about uptime I’m sure you’ve heard the term uptime or service level agreement service level agreements basically refer to what availability and

integrity should the data have resources for users to connect to lending to be around how long is going to be around can I expect that it’s going to be available a certain

percentage of the time I well and in this case in fact here at Microsoft is a good example it’s a matter can I get to it when I need to if I go on vacation can I get email can I access file if I

have an emergency and I’m in the Caribbean which would be awesome and someone calls me and says hey it’s an emergency or if we need a document you’ve been working on can I get to that

document can I get that document to them another availability concern and it’s funny again we talked about how Security’s kind of contradictory on this slide confidentiality and availability

don’t don’t play well together we want to lock all this data down we want to keep it secret away from people but we also want to make it available and make sure people can get to it in as many

ways as possible in some cases but the appropriate level at the appropriate time let’s talk about lease privilege attack surface and social engineering least privilege deals with as a user

when I access the system I should only have least privilege as what’s needed if I constantly log into a system as the admin and I don’t need to whatever happens to me as that user on the system

as admin affects the whole system if I make a mistake I wipe out data it has greater impact if instead I log in as a user with less privilege and I get a virus I wipe out data I’m less likely to

have a system-wide impact and more just it affects me as opposed to it affects the system or and this is a classic one for me I love talking about this if you leave a computer lock and go get a drink

so I’ve worked a 90 department for a long time and the health desks I’ve worked on where we almost have punished people but we educated people in that you don’t want to walk away from your

desk and leave your computer unlocked well what happens if you walk away in your computers unlocked what does give others access to whatever you have access to so if you’re an administrator

or if you have access to things you shouldn’t or don’t need access to I sit at your desk I don’t have access to all of that it honestly to modify data to corrupt data to do something malicious

that can only take 10 to 30 seconds I mean you don’t need a long time to get something like that done I have a sort of an example although it’s not a least privileged issue because it was email

based an email you have to have access to but I did have a manager have to buy an entire team lunch because you walked away from his computer with the key word locked send an email to whole team you

guys are great you’re amazing you’re so good on a buy lunch for the whole team in appreciation he was not at his desk it’s time oh so he did it he wasn’t necessarily the

person who’s Oh which this this brings up a great example of when something is done with your user account it’s assumed that you did it whether you’re at your desk or not the lease privilege and

Christopher brings up a great idea of when you leave your computer you should probably lock it which kind of place the integrity integrity exactly attack surface what attack surface refers to is

computers servers workstations have areas that they can get to part of computer networking is allowing or enabling computers on the network to talk to each other this is awesome

except when computers try to maliciously interfere and it’s not necessarily computers but users on computers attack surface what could this refer to so you have a server that hosts a web server if

it’s hosting a web server there’s certain points the ports that you need open 83 89 84 HTTP 3 89 for HTTP which we talked about the networking fundamentals course oh we did we do that

MBA people notice we notice how I bring it together handout bringing it together so there are certain points ports I keep saying points there are certain ports that you

don’t need open and if they’re open that enables users to access those ports the mail port the RDP port if you don’t need those ports open you should probably close them so

ensuring that the surface that your computer projects to the Internet is as shut down and not even the Internet the network is a shutdown as possible and has as few entry areas as possible

social engineering one of my favorite I should people I never got into security it would have been this and people don’t even think of social engineering call them the help desk that’s why it works

yeah call the help desk hi I’m sitting at computer five and I can’t get on the network anymore my name is Oh Jane Doe and I’m locked out Jane you have a male voice oh I have a

little bit of a cold today which is why I was away from my desk but now that I’m back I’ve lost my password can you reset my password for you for me oh sure Jane were helpful happy to do

that they just helped us people for the most part want to help you is sometimes you don’t get to help you want it’s not like they’re sitting there thinking I don’t want to help this person they do

have you so you haven’t worked on a help desk is what you’re saying oh no I I’ve worked on and I’ve added but I’ve had those days I’m like okay that’s aren’t ways I can not help people

I got you fired a famous oh yeah I go to standards but yeah so they want to be helpful so social engineering is basically okay so one thing that was pointed out to me and I’m going to point

this out just to keep myself from doing it I said basically a ton last course a ton so I’m weaning myself all right well that word all I need some add I need like a quarter

jar or a lot of things quart yeah there you go there you go yep okay back to social engineering so just interacting with somebody in a friendly manner and the

problem here is is when somebody authoritative Lee comes to someone to request help normally people will help them and that’s where social engineers get their foot in the door is they come

and authoritative Lee say hey I belong in the network will you help me the helpdesk says oh sure I can help you with that and then they gain entrance into the network any other understated

we have examples any other good I got to be careful because it’s one of those topics we talk about all day social engineering is one my favorite oh yeah passwords on keyboards put your password

I actually kind of wish there was one here so I get picked up me like oh there’s one right here I had a customer years and years ago that it wasn’t even a matter of social engineering he would

just write his latest password on the bezel of his monitor so I didn’t have to try and get it somehow I could just walk in and see it ah yeah social engineering is it and you’ll see this disclaimer a

lot nowadays on websites and with a lot of different service companies asking for your password like the email there we go fishing is the best one an email from PayPal and everybody may have seen

this your accounts been compromised we need you to log in right now username and password click this link go this website and I’ll give him credit the last couple of years I’ve seen some

great ones oh they look mighty good I have really good even I am like oh I need to check the URL because the rest of this looks completely legitimate and they’re trying to your password by

looking like they are the authority and they need your information because they’ve been compromised and it’s the examples of social engineering are terrific I’m trying to think of some of

my favorite ones oh the the classic one watching someone type their password yes okay the answer – walking over my shoulder you can you look at that document for me oh yeah

yeah tick tick tick tick tick yeah so I actually keep a password that is I’ll tell some people kind of my standard password nine characters five letters one special two caps three

numbers and they’re all randomly array initially you’re talking about password stuff we have a password area we have about word section in the mud I think you’re you’re foreshadowing sort of but

in in the conversation of social engineering so I’ll tell people they can actually watch me type my password because it’s confusing enough and I type it fast enough that they’re not actually

able to sit there and figure it out unless I do it three or four times in a row the little trick most people want to do that though who here I wish would get a show of hands who here wants a

password that is a random arrangement of letters numbers and special characters yeah for the most part I don’t ya know most people don’t want that so instead all okay I’ll kind of give how I use my

passwords for my passwords I use two words one word static I actually found this out or I started using this when I was on a networking team so we were on a networking team we had one password that

was or one word that was static and then the second word is what would change so you could actually talk within the area of what that second word was so let’s say your static word is like plants

underscore plant so now when the password has changed I just come up to you and go hey Christopher it’s blue today so now you know blue underscore plants so we can all within our area

talk about the password openly but people still don’t have the overall password scheme that makes sense that actually makes it a bit easier here at Microsoft we have to change our

passwords every 90 days hundreds maybe there’s nine we have to change our password every so often it gets confusing after you’ve been here eight nine years you’re like oh wow what did I

use what having to use we’ll talk about password policies later I so you can’t repeat password egg becomes confusing about what you have in having is with these with these two

stage passwords I can leave my one password just taped to my monitor and people aren’t going to get it people aren’t going to get that second poor she’ll don’t do that yeah it’s not that

it’s not that I actually have a lock on my door so which we’re going to go bottom there here when we talk about physical music your beautiful Segway look at that see what professionals see

how we professionally do this this is what we do risk management so what we’re talking about here risk management is responsive first of all avoid except avoid what what are we avoiding risk

okay avoiding risk except the risk mitigate and transfer one thing that people don’t think about is you do not need high-level security to protect pictures

of your dog not that pictures of your dog or cat aren’t important but do you really need five-star security for it no you need an appropriate level of security for what you’re protecting

let’s say we’re let’s talk about protecting Social Security numbers of the employees at your company that needs five stars security that needs like the utmost and I’m saying five stars out of

five five being the highest just so we’re not confused it’s not a scale of 1 to 100 so 5 stars 5 level highest level security so use an appropriate level of security for the data that you’re

working with so avoidance so avoid data risk don’t leave your password out if you have your systems in a locked room don’t leave the door open except that there’s

going to be risk if somebody really wants it your data it’s possible that they can find a way to get it again implementing an appropriate measure for the data on hand well in a good example

that would be the avoidance one I can kind of figure these together the avoidance one you talked about attack surface if I have a server that’s serving webpages I don’t need to open

ports 2500 SMTP open I don’t need RDP open 3389 close those down that’s risk avoidance I don’t need these services turn them off no one’s coming in on for 25 or 25 closed acceptance is I’m

putting a web server on the Internet 80 has to be open that web server has to be I can’t not have the risk of that server being attacked in some way so it’s a matter of knowing what it is you’re

doing and what the risks are to go along with that putting up a web server has risks really just putting a web server on the Internet as is has risks regardless of any measures you’ve taken

to secure that server or the resources on an individual T you have to be ok with that or an open up web server it comes down to walking down the street on any given

day you could get hit by a bus you don’t wish to get hit for by a bus I don’t wish for anyone to get hit by a bus but we take reasonable precaution we walk on the sidewalk we don’t jaywalk you walk

in a light you walk when you when it says walk so you take a reasonable level of precaution for what you’re doing mitigation mitigation what does that mean to mitigate is to take an

appropriate level of action for something that’s kind of going sideways so you see you you use the web server so we have a web server up you see that the web server is starting to get maybe a

denial of service attack or something of that nature so you see the system that you’ve implemented being attacked somehow you have software that tells you you’ve been alerted the Ono’s have gone

up oh no attack ah so now we need to take an appropriate response and mitigate that attack whatever that may be hmm makes sense transfer live my

favorite one oh this is this is a huge security bug someone else’s fault let’s make them take care of it but summary and I make a joke out of that because you can but it’s true I’m gonna put my

servers in a data center let’s say I’m gonna put my servers in the hosted data center or good example a sure I’m also we can tie these things together in an awesome I spun up an azure service this

weekend there are risks spinning up a web service on the Internet secure servers can people actually get to the physical hardware I have no idea I’m transferring the risk of maintaining the

physical servers to Microsoft I don’t want to maintain the boxes 404 reasons updates cost security high availability I don’t want do any of that so I’m taking all the risk of all

those things and I’m transferring it to a host er in this case Microsoft well do you want to be in the data center business no no and I already am it ya arable so let somebody else do that so

transfer a responsibility to them and then focus on what it is you want to do and all the risks go with it exactly and that’s one of the benefits of azure is that we can transfer small medium and

even large businesses can transfer responsibility data center responsibility to another company in this case Microsoft to handle that and then they can focus on developers can

focus on developing and not the underlying technology and then my shop to go back to that list of for Microsoft gets to avoid and mitigate the risks exactly exactly

next physical security physical security is your first line of defense you can achieve this by using access control at different layers o layer sounds really technical it’s not really technical it’s

more conceptual I’ll show you here in just a second and then defense-in-depth approach so having a multi-tiered or multi-layered level of approach you know I will make a note here defense-in-depth

applies to physical security and logical or technological security so here we’re just putting it in the context of physical we’ll talk more about it as we go through other sections

defense-in-depth so external perimeter so can somebody even get on the property that your servers are hosted in and get in the building step one step one security card

dip we already you may have these you may are yes if you have your security card you swipe the security card it allows you to get in the building so now we have one level of security so

we have an external perimeter security this external perimeter security can be breached tailgating so I’ve never ever done that ever you’ve never forgotten a badge and

I well gated yn1 everybody I would never tailgate against the rules because I hate idiots my office because I was late to a meeting because that would be wrong would be it would be

wrong it’s the rules internal perimeter so once you’ve gotten into the building you may have another swipe to get into the room the physical data room you had an example of this you have a lock on

your office I have a lock in my office exactly exactly so I swipe to get into my building then I have additionally a lock on my office that I need to key into so now once you’re in the secure

area how is that secured area what’s in there they’re cameras are there spy infrared lights keeping okay I don’t even know why I just thought of this but I the

movie with Catherine zeta-jones where she’s flipping through the infrared lights I know what movie you’re Sean Connery up people in the back alpha and remember the name entrapment thank you

you know the movies totally fair but watching Catherine zeta-jones crawl through lights stop at the laser beam no blue laser beam shows flexibility it’s true

I don’t fence a security or hunting I’m just noting I’m not good or bad I’m just saying that there are people who are able to do some pretty crazy things that’s true so secure area and then your

servers in racks so having your servers in racks maybe the racks have doors interlocked so you physically can’t get to the server so you just see that there’s

there’s these tiers of security that you’re working with guys look gun possible I had customers or clients especially as a trainer students that worked in secure locations

where there’s a guy with gun that make sure you can’t go where you’re not supposed to go bring decent deterrent I would imagine I’ve never worked in a place where someone with a gun kept me

in or out of somewhere so luckily again what is the level of security that you need do you have pictures of your pets or do you have social security numbers and banking numbers for major companies

yeah so we’ve got external in this case in the examples given external network or external security cards lock doors internal security additional locks additional card readers maybe a person

here Microsoft we have a receptionist too is to some degree a security barrier even if I do get through the open door and here the doors work differently

depending on building you’re in but even if I’m going to that next door and I’m even have a badge and that badge may not work I scan it twice nothing happens scan it again nothing happens the

persons that front desk is going to say kind of help you what are you where you’re trying to get check to make sure your badge does work if for some reason is not working or

your valid it check the validity of your authorization maybe you worked here until last week and you’re trying to get in the building and we’re pretty quick I think about running off the person actor

but exactly Arius or malicious yep maybe we’re pretty good about turning those accesses office from what I understand have another experience again luckily external perimeter we’ve talked about

quite a few of these secured by using we talked about cameras parking lot lights and again we’re thinking like the parking lot area external to the building maybe there’s even a gate

military style that you have to get in get through the raised gate get in oh it even says gate with guard gate with access badge reader guard controls internal so once inside the building

locks on exterior or interior doors cameras badge readers guard deaths and patrols smoke detectors so that’s another area of security is environmental security smoke fire water

all of those can cause damages that you may not think that oh well somebody didn’t gain access to my system but remember part of the CIA confidentiality availability and integrity water smoke

electrical interruption electrical spike all those deal with availability and integrity so interruption tidal wave a flood a fire natural disaster of some kind Sambi

apocalypse or whatever that may be Katrina all of these can create situations to create heart and a negatively impact availability and data integrity the last

one we miss Laughlin I love this one I just talked about this last week I was at a conference we talked about man-traps and there were some people who don’t know to mantrap is ever been in a

man trap anybody here anybody in the back a man trap is you’ll see these in data centers pretty frequently you walk into and in some cases they’re they’re physically trapping in the way they’re

built but not always sometimes it’s just a series of doors you walk through one door that door closes lock eight doors with the guard in between yes some of them are step those are called man traps

well those rooms can be considered a man trap because once you’re in it you can’t go anywhere without authorization but they have better ones that are essentially a big cylinder with one door

built in that you walk into the door and the room rotates and you’re locked in like there’s not another door huh to go in or out of there’s just one so they turn it and you’re trapped in that room

this though is the ones with the two doors I can get out usually they’re panic bar door I can I can leave if I want to these rooms you walk in they close it and you’re not going anywhere

until someone says you can go somewhere and I’ve been in one of those ones well intimidating well see now I’ve been in the single door room where they basically door here opens you walk in it

shut and locks and locks and then you have to talk to the security guards at station right here and then once you’ve done appropriate ID appropriate authorization this door opens and then

you can yep that’s a man trap they’re awesome turnstiles a little less exciting they’re just a matter of well anybody’s been on a subway you’ve got bull turns value come up to

it you have to pay before you can go through we have those here some of our buildings have them secured areas so specific portions of the building may have a secure area server room server

room badge readers keypads another instance biometric technologies fingerprint scanning retinal scanners voice recognition systems security doors so could be a security door x-ray

scanner metal detector again to an or what you are not taking out of that room there could be cameras and then intrusion detection systems like being infrared microwave and or ultrasonic

case your lasers Catherine zeta-jones yes your lasers why flippin cool ooh there’s another one one of the oceans movies they had a scene like that oh did they the oceans movies are good like

them device security so servers ensuring that they’re physically lots so if somebody can come in and physically remove a device and take it then at that point they can take however long to get

in that they want you may say oh well my security to get into the system it’s pretty reasonable i but once they get in they can’t really do anything well you hear about people that yank ATMs from

stores so at that point they physically remove the device they take it to another location and then can take however long they want to get in to what they wanted absolutely desktop secured

to desks and then mobile devices docking station security cables safe I know one thing that you you don’t see this very often the desktop security desks and the mobile devices and docking stations with

the cables you don’t often see physically secured Hardware ethic client level desktops and laptops so a lot of it in this case the security you’re going to mitigate another way we have

this laptop we could buy some hardware and lock it to the desk which kind of defeats the purpose of being a laptop but it really makes them yeah hamper mobility you do so instead you build

systems that prevent sensitive data from being on that laptop in the first place ok make the device it occasionally security risk and make your access more of the focus more on the access focus

less on the device well there’s multiple ways that could be done you could use some type of hard drive securing Technic encryption technology so as you boot up you have to type in a key or a password

or we don’t think we have one of those i–but lock or something of that nature right we’re doing right so we have BitLocker as you boot up you have to type in a key

or if you have TPM it’ll hold it so if the drive is removed from that device it’s not going to be usable we have that scanning technologies another method that you mentioned is keeping the data

off the local system you hear periodically again part of having a laptop or having a mobile device is mobility so ensuring that the device is not only encrypted or if it’s not

encrypted that there’s no data on the device itself and you’re remotely accessing resources and data so if the device is taken there’s there’s no compromising information on it and

that’s something that as people watching this video may be coming into IT like said new to IT new to security one of the biggest pushes NIT right now is bring your own device we call it

people centric IT well centric IT a wonder that there’s BYOD bring your own device which means I have a phone in my pocket that is mine but I can bring to work or take out a work and maybe do

work on I get my work email on my personal phone Microsoft has to find a way to mitigate the risks associated with that there are ways that they can from their servers our servers control

certain aspects of my phone and in some cases you may have heard of different companies different technologies if I connect my phone to a corporate network to get email if my phone is lost they

can erase the whole phone remote wipe if they can wipe it gone done so it’s a bigger concern nowadays to make sure the device is not the risk but the device is access to your network is that is is

more where you’re focused on so much depends that’s the best recovery software so being able to locate your device if it gets stolen and laptop alarm so I see this laptop alarm and I

totally flash to Despicable Me 2 with the little minion book it around with the helmet with a flash and all be wewy or alarm like that right I did – yeah the minute something goes wrong I want a

little me in booking by wearing the helmet flashing with the Guru that would make IT work exponentially more exciting we have some good ideas here yeah we’re

doing they just need to get implemented I wonder yeah want to make some calls we have research department let’s find some email addresses what’s the end awesome so additional resources and next steps

as we mentioned before this course isn’t to cover everything it’s C get your feet wet give you some ideas one thing we want to ensure is that you from this course have the ability to go out and

become a bit more self-sufficient one of those resources is Microsoft comm / learning so look around on that website and you think you’ll find a lot of great resources yeah in fact on this slide

we’ve got instructor-led courses and exams and certifications in those second two columns to find all of that information you can go to Microsoft comm about learning and find it courses we

have a class locator that’ll help you find a place near you can take the course if you want to get in to get here your feet wet get your hands dirty X in this case because they’re going to be

hands-on courses and places to take schedule sign up for the actual exams once you’ve completed either this course or an instructor-led course the books usually find online we do ebooks a lot

different vendors sell different books Microsoft presses are obviously our preferred publisher for ebooks and I’m trying to get anything else in this case again to revisit what I talked about in

the prerequisites a lot of things here you saw in the prerequisites it really just depends on the order in which you’re doing these courses so some of these you may have already done at this

point if you’re watching this one some of you may not and I included at the bottom of the instructor letter in exam 2 0 4 1 0 installing and configuring Windows Server 2010 and exam 74 1 0 the

first of our MCS a serious Microsoft Certified systems I think it’s administrator these day administrator they change them from time to time this is where once you finish

the mta’s and you’re getting into really wanting to then dive in the Microsoft world learn about our technologies very specifically our implementations of security of networking the Mt I see

tracks where you’re going to start usually so that’s the first exam and course in that track and then the exams and certifications yep that’s all it’s all

same place and take course take tests we’ve had a couple people email us and tell us that this course prepared them for the MTA search so yeah which is grants terrific oh and by the way price

for MVA content how much does it cost to join the site or to take the courses nothing nothing at all knowledge for free exactly come take some classes at the end make a course azar really really

good taught by a ride typically subject matter expert online in taught by some of the best you can find you can’t beat that I mean you’re not going to fight that’s one of the benefits you’re not

going to find that in a classroom not that the instructors aren’t good and very knowledgeable but now you’re talking about you’re being taught a course by the people who are developing

the technology creating the technology can’t beat that you can’t most the time I don’t know we’ll see they may be good at creating and developing and designing technology but and that’s a good at

tolerability people he shoe about it may not be so kind to be seen now we’ve got great presenters MBA so all requires that every single course is amazing so come on back take some classes yeah way

back for module two at some point exactly great thanks for coming