Reference no: EM133025458
Part 2
Windows Hardening Recommendations
Scenario
As a security administrator for Always Fresh, you have been instructed to ensure that Windows authentication, networking, and data access are hardened. This will help to provide a high level of security.
The following are issues to be addressed through hardening techniques:
- Previous attempts to protect user accounts have resulted in users writing long passwordsdown and placing them near their workstations. Users should not write down passwords or create passwords that attackers could easily guess, such as words founds in thedictionary.
- Every user, regardless of role, must have at least one unique user account. A user whooperates in multiple roles may have multiple unique user accounts. Users should use the account for its intended roleonly.
- Anonymous users of the web server applications should only be able to access servers located in the demilitarized zone (DMZ). No anonymous web application users should be able to accessany protected resources in the Always Fresh ITinfrastructure.
- To protect servers from attack, each server should authenticate connections based on thesource computer anduser.
Tasks
Create a summary report to management that describes a hardening technique that addresses each issue listed above. Provide rationale for each selection.
Part 1
Secure Windows Applications Policy
Scenario
One of the security improvements for the Always Fresh IT environment is to ensure all workstations and servers run secure applications. The company needs policies that set security requirements for the software. These policies will guide administrators in developing procedures to ensure all client and server software is as secure as possible.
Specifically, you will write two policies to ensure web server software and web browsers are secure. Your policy statements will describe the goals that define a secure application.
Consider the following questions for web server software and web browsers:
1. What functions should this software applicationprovide?
2. What functions should this software applicationprohibit?
3. What controls are necessary to ensure this applications software operates asintended?
4. What steps are necessary to validate that the software operates asintended?
Tasks
Create two policies-one for web server software and one for web browser clients. Remember, you are writing policies, not procedures. Focus on the high-level tasks, not the individual steps.
Use the following as a guide for both policies:
- Type of applicationsoftware
- Description of functions this software shouldallow
- Description of functions this software shouldprohibit
- Known vulnerabilities associated withsoftware
- Controls necessary to ensure compliance with desiredfunctionality
- Method to assess security controleffectiveness
Part 3
Evidence Collection Policy
Scenario
After the recent security breach, Always Fresh decided to form a computer security incident response team (CSIRT). As a security administrator, you have been assigned the responsibility of developing a CSIRT policy that addresses incident evidence collection and handling. The goal is to ensure all evidence collected during investigations is valid and admissible in court.
Consider the following questions for collecting and handling evidence:
1. What are the main concerns when collectingevidence?
2. What precautions are necessary to preserve evidencestate?
3. How do you ensure evidence remains in its initialstate?
4. What information and procedures are necessary to ensure evidence is admissible incourt?
Tasks
Create a policy that ensures all evidence is collected and handled in a secure and efficient manner. Remember, you are writing a policy, not procedures. Focus on the high-level tasks, not the individual steps.
Address the following in your policy:
- Description of information required for items ofevidence
- Documentation required in addition to item details (personnel, description of circumstances,and soon)
- Description of measures required to preserve initial evidenceintegrity
- Description of measures required to preserve ongoing evidenceintegrity
- Controls necessary to maintain evidence integrity instorage
- Documentation required to demonstrate evidenceintegrity.