Windows 2000 Competency Model: Security

Technical

Security Policy Management - Standards
Security Policy Review
Business Area Understanding
Security vs. Productivity Issue Process
Security Profiling
Security Procedures Education
Security Policy Modification
Windows 2000 Security Model
Windows 2000 Single Sign On
Windows 2000 Active Directory
Windows 2000 Security Configuration Manager
Windows 2000 Remote Access
Windows 2000 Smart Card Infrastructure
Windows 2000 IP Security Protocol
Windows 2000 User Administration / Group Policies
Windows 2000 Access Control Lists
Windows 2000 Public Key Certificate Server
Windows 2000 Encrypting File System

Security Monitoring - Hardware, Software, Network
Networking
Virus Types and Anti-Virus Methods
Security Product Offerings
Security Risk Monitoring
Security Audits
Asset Protection
Windows 2000 Security Model
Windows 2000 Kerberos 5 Authentication Capability
Windows 2000 Active Directory
Windows 2000 Remote Access
Security Planning - New Virus Protection
Business Area Understanding
Virus Types and Anti-Virus Methods
Security Breach Scenario Development
Security Consulting
Security Product Offerings
Windows 2000 Security Model
Windows 2000 Active Directory
Windows 2000 Remote Access
Windows 2000 Smart Card Infrastructure

Security Administration - Add New Users
Shared Areas Set-up - (on servers)
Security Modeling of Operating Platforms
Security Profiling
Authentication and Encryption
Windows 2000 Security Model
Windows 2000 Single Sign On
Windows 2000 Kerberos 5 Authentication Capability
Windows 2000 Active Directory
Windows 2000 Security Configuration Manager
Windows 2000 Remote Access
Windows 2000 Smart Card Infrastructure
Windows 2000 IP Security Protocol
Windows 2000 User Administration / Group Policies
Windows 2000 Access Control Lists
Windows 2000 Public Key Certificate Server
Windows 2000 NTFS
Windows 2000 Encrypting File System

Security Policy Review

Understanding of security policies and ability to review them for completeness.

1 v 2 3 4

1 2 v 3 4

1 2 3 v 4

Security vs. Productivity Issue Process

Ability to balance security issues with productivity issues in order to ensure that neither is lowered greatly by security policies.

1 v 2 3 4

1 2 3 v 4

1 2 v 3 4

Security Procedure Education

Ability to educate and inform employees about security procedures.

v 1 2 3 4

1 2 v 3 4

1 2 3 v 4

Windows 2000 Security Model

Windows 2000 Security Model
is the way in which security features are implemented in Windows 2000, i.e. how the different security features of the OS are interrelated and how changes in one security area can possibly affect other security areas.

Knowledge of the overall Windows 2000 Security Model, its benefits and its impact, and the rationale behind it.

1 v 2 3 4

1 2 3 v 4

1 2 v 3 4

Windows 2000 Single Sign On

Windows 2000 Single Sign-On
allows the user to use a single login for authentication to all network based resources.

Knowledge of the impact and of the benefits of the single sign-on capability of Windows 2000.

1 v 2 3 4

1 2 3 v 4

1 2 v 3 4

Ability to troubleshoot a single sign-on solution.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Competencies

IT Executive

IT Management

IT Workforce

Knowledge of the hierarchy structure used by Active Directory.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Ability to add/ change/ copy/ delete objects in an Active Directory structure, using the Microsoft Management Console or scripting automation.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Ability to create new directory object types via Active Directory's extensible schema.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Ability to interface Active Directory with other directory services including Novell Directory Services (NDS) and other LDAP-based directory services.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Ability to establish domain trust relationships using Active Directory.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Ability to configure and manage Active Directory replication.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Windows 2000 Security Configuration Manager

Windows 2000 Security Configuration Manager
is a one-stop security configuration and analysis tool for Windows 2000 Server.
allows configuration of various security-sensitive registry settings, access controls on files and registry keys, and security configuration of system services.

Knowledge of the benefits of the Windows 2000 Security Configuration Manager.

1 v 2 3 4

1 2 3 v 4

1 2 v 3 4

Ability to troubleshoot security issues using Security Configuration Manager.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Windows 2000 Remote Access

Windows 2000 Remote Access
offers integrated direct-dial and VPN access for individuals and branch offices over IPSec, PPTP and/or L2TP. This gives the flexibility to use direct dial, Internet-based VPN or both to connect remote systems the network.

Knowledge of the impact and the benefits of Windows 2000 Remote Access.

1 v 2 3 4

1 2 3 v 4

1 2 v 3 4

Ability to troubleshoot issues involving Remote Access.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Windows 2000 Smart Card Infrastructure

Windows 2000 Smart Cards
are a key component of the public-key infrastructure that Microsoft is integrating into the Windows platform.
enhance software-only solutions such as client authentication, single sign-on, and secure storage and system administration.

Knowledge of the impact and the benefits of Windows 2000 Smart Card Infrastructure.

1 v 2 3 4

1 2 3 v 4

1 2 v 3 4

Ability to troubleshoot issues involving Smart Card access.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Windows 2000 IP Security Protocol

Windows 2000 IP Security Protocol
is an IETF standard for encrypting TCP/IP traffic.
integrates IPSec with system policy management to enforce encryption between systems transparently to the end user.
can be used to secure communications within an intranet and to create Virtual Private Network solutions across the Internet.

Knowledge of the impact and the benefits of Windows 2000 support for the IP Security Protocol.

1 v 2 3 4

1 2 3 v 4

1 2 v 3 4

Ability to troubleshoot issues involving IP Security Protocol access.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Windows 2000 User Administration / Group Policies

Windows 2000 User Administration / Group Policies
is used by administrators to create managed desktop environments tailored to users' job responsibilities and level of experience with computers. The Group Policy snapin and its extensions are used to define Group Policy options for managed desktop configurations for computers and users.

Knowledge of the impact and the benefits of Windows 2000 Group Policies.

1 v 2 3 4

1 2 3 v 4

1 2 v 3 4

Ability to configure users' security settings/profiles/policies.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Ability to establish guidelines for the use of group policies.

v 1 2 3 4

1 2 v 3 4

1 2 3 v 4

Competencies

IT Executive

IT Management

IT Workforce

Ability to configure Access Control Lists.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Ability to establish guidelines for the use of Access Control Lists.

v 1 2 3 4

1 2 v 3 4

1 2 3 v 4

Competencies

IT Executive

IT Management

IT Workforce

Windows 2000 Encrypting File System

Windows 2000 Encrypting File System (NTFS)
provides protection for sensitive data.
can be enabled on a per-file or per-directory basis. (The encryption technology used is public key-based and runs as an integrated system service, making it easy to manage, difficult to attack and transparent to the user.)

Knowledge of the impact and the benefits of the Windows 2000 Encrypting File System

1 v 2 3 4

1 2 3 v 4

1 2 v 3 4

Networking

Knowledge of networking.

1 v 2 3 4

1 2 v 3 4

1 2 3 v 4

Security Product Offerings

Ability to work with vendors offering security solutions in order to evaluate product offerings.

v 1 2 3 4

1 2 v 3 4

1 2 3 v 4

Security Audits

Ability to conduct security audits.

1 2 3 4

1 2 v 3 4

1 2 3 v 4

Windows 2000 Security Model

Windows 2000 Security Model
is the way in which security features are implemented in Windows 2000, i.e. how the different security features of the OS are interrelated and how changes in one security area can possibly affect other security areas.

Knowledge of the overall Windows 2000 Security Model, its benefits and its impact, and the rationale behind it.

1 2 3 4

1 2 3 v 4

1 2 v 3 4

Windows 2000 Kerberos 5 Authentication Capability

Windows 2000 Kerberos 5 Authentication Capability
provides fast, single log-in to Windows 2000 Server-based enterprise resources, as well as other environments that support this protocol . Security policy settings allow configuration of Kerberos 5 protocol options, including maximum ticket lifetimes and ticket renewal options.

Knowledge of the impact and the benefits of Windows 2000 Kerberos 5 Authentication Capability.

1 v 2 3 4

1 2 3 v 4

1 2 v 3 4

Ability to troubleshoot a solution utilizing Kerberos 5 Authentication .

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Competencies

IT Executive

IT Management

IT Workforce

Knowledge of the hierarchy structure used by Active Directory.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Ability to add/ change/ copy/ delete objects in an Active Directory structure, using the Microsoft Management Console or scripting automation.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Ability to create new directory object types via Active Directory's extensible schema.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Ability to interface Active Directory with other directory services including Novell Directory Services (NDS) and other LDAP-based directory services.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Ability to establish domain trust relationships using Active Directory.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Ability to configure and manage Active Directory replication.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Windows 2000 Remote Access

Windows 2000 Remote Access
offers integrated direct-dial and VPN access for individuals and branch offices over IPSec, PPTP and/or L2TP. This gives the flexibility to use direct dial, Internet-based VPN or both to connect remote systems the network.

Knowledge of the impact and the benefits of Windows 2000 Remote Access.

1 v 2 3 4

1 2 3 v 4

1 2 v 3 4

Ability to troubleshoot issues involving Remote Access.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Business Area Understanding

Understanding of business areas and the type of data they deal with, to better work with them from a security standpoint.

1 v 2 3 4

1 2 v 3 4

1 2 3 v 4

Security Breach Scenario Development

Ability to develop scenarios which would require the security group to take action and to react swiftly in the event of a security breach.

1 v 2 3 4

1 2 v 3 4

1 2 3 v 4

Security Product Offerings

Ability to work with vendors offering security solutions in order to evaluate product offerings.

v 1 2 3 4

1 2 v 3 4

1 2 3 v 4

Windows 2000 Security Model

Windows 2000 Security Model
is the way in which security features are implemented in Windows 2000, i.e. how the different security features of the OS are interrelated and how changes in one security area can possibly affect other security areas.

Knowledge of the overall Windows 2000 Security Model, its benefits and its impact, and the rationale behind it.

1 v 2 3 4

1 2 3 v 4

1 2 v 3 4

Windows 2000 Active Directory

Windows 2000 Active Directory
is an enterprise-class directory service that is highly scaleable, built using Internet-standard technologies, and fully integrated at the operating system level.
is designed to be a consolidation point for isolating, migrating, centrally managing and reducing the number of directories that companies have .
allows a single point of administration for all published resources, which can include files, peripheral devices, host connections, databases, Web access, users, other arbitrary objects, services and so forth.
uses DNS as its locator service, organizes objects in domains into a hierarchy of OU's (Organizational Units), and allows multiple domains to be connected into a tree structure.

Knowledge of the impact and the benefits of Windows 2000 Active Directory.

1 v 2 3 4

1 2 3 v 4

1 2 v 3 4

Knowledge of the standard Active Directory objects.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Ability to configure security parameters for Active Directory objects.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Knowledge of the standards upon which Active Directory is based: DNS (Domain Name Service) and LDAP (Lightweight Directory Access Protocol).

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Ability to establish a multi-server, multi-domain Enterprise-wide Active Directory structure.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Knowledge of Active Directory's backwards compatibility with Windows NT 3.x/ 4.0 domain structures.

1 v 2 3 4

1 2 v 3 4

1 2 3 v 4

Ability to troubleshoot an Active Directory solution.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Competencies

IT Executive

IT Management

IT Workforce

Ability to configure, implement, and administer a solution involving Remote Access.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Windows 2000 Smart Card Infrastructure

Windows 2000 Smart Cards
are a key component of the public-key infrastructure that Microsoft is integrating into the Windows platform.
enhance software-only solutions such as client authentication, single sign-on, and secure storage and system administration.

Knowledge of the impact and the benefits of Windows 2000 Smart Card Infrastructure.

1 v 2 3 4

1 2 3 v 4

1 2 v 3 4

Ability to troubleshoot issues involving Smart Card access.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Shared Areas Set-Up (on-servers)

Ability to set up shared areas on various servers.

v 1 2 3 4

1 2 3 4

1 2 3 v 4

Security Profiling

Ability to set up security profiles for different groups of users.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Windows 2000 Security Model

Windows 2000 Security Model
is the way in which security features are implemented in Windows 2000, i.e. how the different security features of the OS are interrelated and how changes in one security area can possibly affect other security areas.

Knowledge of the overall Windows 2000 Security Model, its benefits and its impact, and the rationale behind it.

1 v 2 3 4

1 2 3 v 4

1 2 v 3 4

Windows 2000 Single Sign On

Windows 2000 Single Sign-On
allows the user to use a single login for authentication to all network based resources.

Knowledge of the impact and of the benefits of the single sign-on capability of Windows 2000.

1 v 2 3 4

1 2 3 v 4

1 2 v 3 4

Ability to troubleshoot a single sign-on solution.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Competencies

IT Executive

IT Management

IT Workforce

Ability to configure, implement, and administer a solution utilizing Kerberos 5 Authentification.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Windows 2000 Active Directory

Windows 2000 Active Directory
is an enterprise-class directory service that is highly scaleable, built using Internet-standard technologies, and fully integrated at the operating system level.
is designed to be a consolidation point for isolating, migrating, centrally managing and reducing the number of directories that companies have .
allows a single point of administration for all published resources, which can include files, peripheral devices, host connections, databases, Web access, users, other arbitrary objects, services and so forth.
uses DNS as its locator service, organizes objects in domains into a hierarchy of OU's (Organizational Units), and allows multiple domains to be connected into a tree structure.

Knowledge of the impact and the benefits of Windows 2000 Active Directory.

1 v 2 3 4

1 2 3 v 4

1 2 v 3 4

Knowledge of the standard Active Directory objects.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Ability to configure security parameters for Active Directory objects.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Knowledge of the standards upon which Active Directory is based: DNS (Domain Name Service) and LDAP (Lightweight Directory Access Protocol).

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Ability to establish a multi-server, multi-domain Enterprise-wide Active Directory structure.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Knowledge of Active Directory's backwards compatibility with Windows NT 3.x/ 4.0 domain structures.

1 v 2 3 4

1 2 v 3 4

1 2 3 v 4

Ability to troubleshoot an Active Directory solution.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Competencies

IT Executive

IT Management

IT Workforce

Ability to configure security settings using Security Configuration Manager.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Ability to establish guidelines for the use of the Security Configuration Manager.

v 1 2 3 4

1 2 v 3 4

1 2 3 v 4

Competencies

IT Executive

IT Management

IT Workforce

Ability to configure, implement, and administer a solution involving Remote Access.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Ability to establish guidelines for the use of Remote Access.

v 1 2 3 4

1 2 v 3 4

1 2 3 v 4

Competencies

IT Executive

IT Management

IT Workforce

Ability to configure, implement, and administer a solution involving Smart Cards.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Ability to establish guidelines for the use of Smart Cards.

v 1 2 3 4

1 2 v 3 4

1 2 3 v 4

Competencies

IT Executive

IT Management

IT Workforce

Ability to configure, implement, and administer a solution involving IP Security Protocol.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Ability to establish guidelines for the use of IP Security Protocol.

v 1 2 3 4

1 2 v 3 4

1 2 3 v 4

Competencies

IT Executive

IT Management

IT Workforce

Ability to configure, administer, and implement Windows 2000 Group Policies.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Ability to troubleshoot security issues surrounding user permissions.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Windows 2000 Access Control List (ACL)

Windows 2000 Access Control List (ACL)
is a list of entries that grant or deny specific access rights to individuals or groups located in the security descriptor.

Knowledge of the benefits of Windows 2000 Access Control Lists.

1 v 2 3 4

1 2 3 v 4

1 2 v 3 4

Ability to troubleshoot solutions involving Access Control Lists.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Windows 2000 Public Key Certificate Server

Windows 2000 Public Key Certificate Server
allows organizations to issue public-key certificates to their users without depending on commercial certificate authentication services.

Knowledge of the impact and benefits of the Windows 2000 Public Key Certificate Server.

1 v 2 3 4

1 2 3 v 4

1 2 v 3 4

Competencies

IT Executive

IT Management

IT Workforce

Ability to configure/administer the disk quota system in Windows 2000.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Ability to walk users through securing files using NTFS security.

v 1 2 3 4

1 v 2 3 4

1 2 3 v 4

Competencies

IT Executive

IT Management

IT Workforce