Course length: 5 days

Certification
Exam #: SC0–411
Maps to: Hardening the Infrastructure, Security Certified Program Level 1: Defense
Course: 1 of 2 for Security Certified Network Professional (SCNP)

Course Description
Hardening the Infrastructure is designed to provide Network Administrators with an awareness of security-related issues and the essential skills they need to implement security in a given network. It is the first course offered in the first level of the Security Certified Program.
Target Student: We designed Hardening the Infrastructure for Network Administrators who are responsible for maintaining a wide range of network technologies, and who need to develop expertise in securing their networks.

Prerequisites

To ensure your success, we recommend you first take the following course or have equivalent knowledge:
• Security+ Certification

---

Course Outline

Lesson 1: Advanced TCP/IP
Topic 1A: TCP/IP Concepts
Topic 1B: Analyzing the Three-Way Handshake
Topic 1C: Capturing and Identifying IP Datagrams
Topic 1D: Capturing and Identifying ICMP Messages
Topic 1E: Capturing and Identifying TCP Headers
Topic 1F: Capturing and Identifying UDP Headers
Topic 1G: Analyzing Packet Fragmentation
Topic 1H: Analyzing an Entire Session
Topic 1I: Fundamentals of IPv6

Lesson 2: Implementing IPSec
Topic 2A: Internet Protocol Security
Topic 2B: IPSec Policy Management
Topic 2C: IPSec AH Implementation
Topic 2D: IPSec ESP Implementation
Topic 2E: Combining AH and ESP in IPSec

Lesson 3: Hardening Linux Computers
Topic 3A: Introduction to Linux Administration
Topic 3B: Fundamental Linux Security
Topic 3C: Access Control
Topic 3D: Securing Network Services
Topic 3E: Final OS Hardening

Lesson 4: Hardening Windows Computers
Topic 4A: Windows 2000 Infrastructure Security
Topic 4B: Windows 2000 Authentication
Topic 4C: Windows 2000 Security Configuration Tools
Topic 4D: Windows 2000 Resource Security
Topic 4E: Windows 2000 Auditing and Logging
Topic 4F: Windows 2000 EFS
Topic 4G: Windows 2000 Network Security

Lesson 5: Routers and Access Control Lists
Topic 5A: Fundamental Cisco Security
Topic 5B: Routing Principles
Topic 5C: Removing Protocols and Services
Topic 5D: Creating Access Control Lists
Topic 5E: Implementing Access Control Lists
Topic 5F: Logging Concepts

Lesson 6: Contingency Planning
Topic 6A: Continuity and Recovery
Topic 6B: Developing the Plan
Topic 6C: The Technologies of Staying On
Topic 6D: Backing up the Operating Systems

Lesson 7: Security on the Internet and the WWW
Topic 7A: Describing the Components of the Internet
Topic 7B: Identifying the Weak Points of the Internet
Topic 7C: Describing Web-Hacking Techniques
Topic 7D: Describing Methods Used to Attack Users

Lesson 8: Attack Techniques
Topic 8A: Network Reconnaissance
Topic 8B: Mapping the Network
Topic 8C: Sweeping the Network
Topic 8D: Scanning the Network
Topic 8E: Viruses, Worms, and Trojan Horses
Topic 8F: Malicious Web sites
Topic 8G: Gaining Control over the System
Topic 8H: Recording Keystrokes
Topic 8I: Cracking Encrypted Passwords
Topic 8J: Revealing Hidden Passwords
Topic 8K: Social Engineering
Topic 8L: Case Study: Social Engineering
Topic 8M: Gaining Unauthorized Access
Topic 8N: Hiding Evidence of an Attack
Topic 8O: Performing a Denial of Service