Security Strategies in Windows Platforms and Applications Keywords (Chapter 11-15)

Directory Service Restore Mode (DSRM) (Chapter 11)

• A special mode that allows administrators to create an offline copy of Active Directory (AD).
• A rule that handles addressing and encryption issues.
• The process of making configuration changes and deploying controls to reduce the attack surface.
• A solution that defines and implements a policy that describes the requirements to access your network.

Encapsulating protocol (Chapter 11)

• A special mode that allows administrators to create an offline copy of Active Directory (AD).
• A rule that handles addressing and encryption issues.
• The process of making configuration changes and deploying controls to reduce the attack surface.
• A solution that defines and implements a policy that describes the requirements to access your network.

Hardening (Chapter 11)

• A special mode that allows administrators to create an offline copy of Active Directory (AD).
• A rule that handles addressing and encryption issues.
• The process of making configuration changes and deploying controls to reduce the attack surface.
• A solution that defines and implements a policy that describes the requirements to access your network.

Network access control (NAC) (Chapter 11)

• A special mode that allows administrators to create an offline copy of Active Directory (AD).
• A rule that handles addressing and encryption issues.
• The process of making configuration changes and deploying controls to reduce the attack surface.
• A solution that defines and implements a policy that describes the requirements to access your network.

nmap (Chapter 11)

• An open source utility used to scan one or more computers or network devices for open ports and other information.
• A rule that handles addressing and encryption issues.
• The process of making configuration changes and deploying controls to reduce the attack surface.
• A solution that defines and implements a policy that describes the requirements to access your network.

Role (Chapter 11)

• A predefined set of services, programs, and configuration settings that enable a computer to fulfill a specific set of requirements.
• A rule that handles addressing and encryption issues.
• The process of making configuration changes and deploying controls to reduce the attack surface.
• A solution that defines and implements a policy that describes the requirements to access your network.

Security Compliance Toolkit (SCT) (Chapter 11)

• A set of tools that help organizations secure Microsoft products and systems.
• A rule that handles addressing and encryption issues.
• The process of making configuration changes and deploying controls to reduce the attack surface.
• A solution that defines and implements a policy that describes the requirements to access your network.

Server core installation (Chapter 11)

• A Windows Server 2008 R2 installation option that provides a minimal environment that includes only programs necessary for the roles you select.
• A rule that handles addressing and encryption issues.
• The process of making configuration changes and deploying controls to reduce the attack surface.
• A solution that defines and implements a policy that describes the requirements to access your network.

Tunneling (Chapter 11)

• A technique that creates a virtual encrypted connection and allows applications to use any protocol to communicate with servers and services without having to worry about addressing or privacy concerns.
• A rule that handles addressing and encryption issues.
• The process of making configuration changes and deploying controls to reduce the attack surface.
• A solution that defines and implements a policy that describes the requirements to access your network.

Application software (Chapter 12)

• Computer software designed to allow users to perform specific tasks.
• An integrated collection of software programs that are used to manage many aspects of a business, including financials, human resources, assets, and business processes.
• A popular protocol used to transfer files from one computer to another.
• A secure application layer protocol used to transfer encrypted content between web browsers and web servers. HTTPS encrypts traffic by sending HTTP messages over SLS/TLS.