MOC-2787: Designing Security for Microsoft SQL Server 2005 Training

MOC 2787: Designing Security for Microsoft SQL Server 2005 Training Package Includes

• 6 CD-ROMs featuring live instructor-led classroom sessions with full audio, video and demonstration components
• Printable courseware
• Step-by-step hands-on-labs
• Comprehensive, understandable, and reusable as reference material
• Microsoft Authorized MeasureUp Exam Simulation
• Focused on practical solutions to real-world development problems

Course Introduction

Schedule our instructor led classroom training at your convenience and never miss another lecture or fall behind. You are in complete control. We invited the Best Microsoft-Certified Trainers in the industry to help us develop the ultimate training & certification program which includes everything you will need to succeed.

This instructor-led course enables database administrators who work with enterprise environments to design security for database systems using Microsoft SQL Server 2005. The course emphasizes that students should think about the whole environment, which includes business needs, regulatory requirements, network systems, and database considerations during design. Students will also learn how to monitor security and respond to threats.

List of Course Features

MOC 2787: Designing Security for Microsoft SQL Server 2005 Course Contents
 

Module 1 - Introduction to Designing SQL Server Security

Principles of Database Security
Principle of Least Privileges
International Common Criteria for Information Technology Security
C2 Compliance Requirements
Designing a SQL Server Security Policy
Benefits of a Security Policy
Monitoring SQL Server Security
Auditing Tools
Monitoring Tools
Module 1 - Review

Module 2 - Designing a SQL Server Systems Infrastructure Security Policy

Integration with Enterprise Authentication Systems
Determining the Appropriate Enterprise Authentication Method
Server-Level Security with Active Directory
Guidelines for Implementing a Server-Level Security Policy
High-Availability Solutions Security
Best Practices
Windows Server-Level Security Policies
Determining Service Accounts Permissions
Identifying Required Windows Services
Interacting with Network Firewalls
Planning the Physical Security of Servers
Secure Communication Policy
Choosing Network Libraries
Encryption Methods
Choosing an Appropriate Encryption Method
Securing Communication with Endpoints
SQL Server Security Monitoring Standards
Determining What to Monitor
Determining the Classification System for Alerts
Determining the Notification Policy
Lab 1 Introduction
Module 2 - Review

Module 3 - Designing Security Policies for Instances and Databases

Instance-Level Security Policy
Determining Authentication Modes and Login Security
Securing the SQL Server Agent Service
Maintaining Updated Hotfixes or Service Packs
Database-Level Security Policy
Database Schemas
Designing Database Schemas
Designing Database Users' Privileges
Securing Database-Level DDL Events
Object-Level Security Policy
Designing a Permission and Data Access Strategy
Securing Module Execution
Designing a Security Policy for CLR Objects
Security Monitoring Standards for Instances and Databases
Determining What to Monitor
Determining the Classification System for Alerts
Determining the Notification Policy
Lab 2 Introduction
Module 3 - Review

Module 4 - Integrating Data Encryption into a Database Security Design

Securing Data with Encryption and Certificates
What are Certificates?
Determining Data Security Methods
Data Encryption Policies
Impact of Data Encryption
Key Storage Method
Selecting a Key Storage Method
Lab 3 Introduction
Module 4 - Review

Module 5 - Designing a Security Exceptions Policy

Business and Regulatory Requirements
Gathering Business and Regulatory Requirements
Determine Variations
Exceptions and Their Impact
Determine Possible Exceptions
Evaluating the Impact of Exceptions
Lab 4 Introduction
Module 5 - Review

Module 6 - Designing a Response Strategy for Threats and Attacks

Designing a Response Policy for Virus and Worm Attacks
Threats by Viruses and Worms
Best Practices
Responding to Virus and Worm Attacks
Response Policy for Denial of Service Attacks
Symptoms
Possible Responses to a Denial of Service Attack
Response Policy for Internal and SQL Injection Attacks
Responding to Internal Attacks
Reducing the Likelihood of SQL Injection Attacks
Lab 5 Introduction
Module 6 - Review Closure