New Horizons Computer Learning Center
410-597-9722

2787: Designing Security for Microsoft SQL Server 2005

Course Length: 2 Days

Overview:
This two-day instructor-led course enables database administrators who work with enterprise environments to design security for database systems using Microsoft SQL ServerT 2005. The course emphasizes that students should think about the whole environment, which includes business needs, regulatory requirements, network systems, and database considerations during design. Students will also learn how to monitor security and respond to threats.

Prerequisites:
Writing Queries Using Microsoft SQL Server 2005 Transact-SQL
Course 2779: Implementing a Microsoft SQL Server 2005 Database
Course 2780: Maintaining a Microsoft SQL Server 2005 Database

Course Content

Lesson 1: Introduction to Designing SQL Server Security

• Principles of Database Security
• Methodology for Designing a SQL Server Security Policy
• Monitoring SQL Server Security

Lesson 2: Designing a SQL Server Systems Infrastructure Security Policy

• Integrating with Enterprise Authentication Systems
• Developing Windows Server-Level Security Policies
• Developing a Secure Communication Policy
• Defining SQL Server Security Monitoring Standards
• Lab 2A: Designing a SQL Server Systems Infrastructure Security Policy
• Developing Microsoft Windows Server-Level Security Policies
• Developing a Secure Communication Policy
• Integrating SQL Server Security Within the Active Directory Environment
• Integrating SQL Server Security With Firewall Configurations
• Discussing Systems Infrastructure Security Integration
• Lab 2B: Creating an Infrastructure Security Inventory
• Auditing the SQL Server Logins
• Auditing the Windows Local Password Policy
• Auditing SQL Server Service Accounts
• Monitoring Security at the Enterprise and Server Levels

Lesson 3: Designing Security Policies for Instances and Databases

• Designing an Instance-Level Security Policy
• Designing a Database-Level Security Policy
• Designing an Object-Level Security Policy
• Defining Security Monitoring Standards for Instances and Databases
• Lab 3A: Designing Security Policies for Instances and Databases
• Designing an Instance-Level Security Policy
• Designing a Database-Level Security Policy
• Designing an Object-Level Security Policy
• Discussing Database Security Exceptions
• Lab 3B: Validating Security Policies for Instances and Databases
• Auditing Existing Server Logins
• Auditing SQL Server Roles Membership
• Analyzing Existing Object Permissions
• Monitoring Security at the Instance and Database Level

Lesson 4: Integrating Data Encryption into a Database Security Design

• Securing Data by Using Encryption and Certificates
• Designing Data Encryption Policies
• Determining a Key Storage Method
• Lab 4: Integrating Data Encryption into a Database Security Design
• Selecting a Data Security Method
• Designing a Data Encryption Security Policy
• Selecting a Key Storage Method

Lesson 5: Designing a Security Exceptions Policy

• Analyzing Business and Regulatory Requirements
• Determining the Exceptions and their Impact
• Lab 5: Designing a Security Exceptions Policy
• Identifying Variations from the Security Policy
• Obtaining Approval of the Security Policy
• Discussing the Results of Policy Approval Presentations

Lesson 6: Designing a Response Strategy for Threats and Attacks

• Designing a Response Policy for Virus and Worm Attacks
• Designing a Response Policy for Denial-of-Service Attacks
• Designing a Response Policy for Internal and SQL Injection Attacks
• Lab 6: Designing a Response Strategy for Threats and Attacks
• Designing a Response Policy for Virus and Worm Attacks
• Designing a Response Policy for Denial-of-Service Attacks
• Designing a Response Policy for Internal Attacks
• Validating a Security Policy

6940 Tudsbury Road, Baltimore, MD 21244
P: 410-597-9722
www.nhbaltimore.com