Visitors to VTC.com will be able to view all introductory videos for each training course.
Free Trial Members will gain access to first three chapters for each training course.
Full Access Members have full access to VTC.com�s entire library of video tutorials.
Security is one of those guaranteed topics you're going to get questioned about on the Network+ exam, and in this video I just want to go over some basic security facts, some basic security ideas, to keep foundational with everything as you study about this security stuff because it can get very confusing. First of all, let me state the obvious. There is no single security solution. Everybody wants one black box, one button that I push, and it turns a nice cool color like green or blue, and we have total security. It doesn't happen that way. Security is a network-wide solution, it is an employee-wide solution, and it's fluid. It will change over time. Now security on your network is required at a number of levels, and the reason I've done this video here is to help you as you go through what I'm going to talk about on the security side, and the things that you will read out there in preparing for this exam. Security is going to have to be developed, planned. You're going to have to do risk assessments. You're going to have to look for solutions at the individual user level, at every computer, at every service running on every computer, and then at the network level itself. And security will go a lot farther, but for the purposes of the Network+ exam these are the four areas. So when you're reading about something, be it EAP, MS-CHAP, RDP, anything like that, all of those various protocols and confusions, stop and think, now wait a minute. Is this working with the user, the computer, the service, or the network? And then sometimes it'll be more than one, but usually it's going to focus on one area. Now there are four basic aspects of security that we're always going to be dealing with in one form or another. The first one is Authentication, and the best way to describe Authentication is the who? Who is it? I want to authenticate to the network. I need to tell them who I am, and usually I'm going to use a username and a password, or some sort of biometrics or something. The next one is Authorization. What can a person do? Once I've proved who I am on the network, now I need some way to know what exactly can I do when I get there. The third one is Encryption. How do I keep my data private as it moves back and forth between me and the destination on the wire, on the network? How do I make sure that nobody can eavesdrop on it, do a man in the middle attack, or spoof, or anything like that? And then the last one is Non Repudiation. And that is, is what I receive from someone what they did, and how do I know this has not been changed en route, and by the basics on this, is going to be - we're talking about digital signatures - something has been signed digitally. We're doing some binary smoke and mirrors, or we're doing some sort of hash or something, and we're going to compare that on the other end. And if any of the characters have changed then the hash or the mathematical functions are going to show a different result. And we know something about this has changed since it was signed on the other end. So that's what we're always concerned with. So my best advice to you is, anytime you're reading something about security you want to, first of all, figure out are we talking about a user, a computer, a service, or the entire network? And, in each of those instances, are we talking about authentication, because we have to authenticate the users onto the machines, but we also need to authenticate our machines. We can have rogue servers, rogue DHCP servers, rogue DNS servers, all kinds of things can happen. Authorization, what can these different devices and people do? How do we encrypt the data between all these people and how do we make sure our data is what we thought it is, and it's who they, we believe it to be from. So those are kind of what security is wrapped around, and any time you read about security find where it fits in here and it will help you keep a lot of these things straight. Because you're going to see a lot of acronyms, and you'll hear a lot of terms that people will always say, for more information read this, for more information go there, take a class, do this, do that. So there's a lot to learn here, so we're going to work through the basics and I'm going to get you ready and point you toward information that you're going to see on the Network+ Exam.
| Course: | CompTIA Network+ (2009 Objectives) |
| Author: | Mark Long |
| SKU: | 34216 |
| ISBN: | 1-936334-90-9 |
| Release Date: | 2011-04-29 |
| Duration: | 6 hrs / 91 lessons |
| Work Files: |
Yes |
| Captions: | No |
| Compatibility: |
Vista/XP/2000, OS X, Linux QuickTime 7, Flash 8 |