Implementing Security Policies on Windows and Linux

CompTIA Security+ (SY601) Domain:

Domain 5.0: Governance, Risk, and Compliance

CompTIA Security+ (SY601) Objective Mapping:

Objective 5.5: Explain privacy and sensitive data concepts in relation to security

Overview

In this lab, you will secure operating systems running Microsoft Windows and Linux. You will learn how to secure the logon process and also use the highly vulnerable Metasploitable machine (from Rapid7) to do some basic security hardening on Linux.

OUTCOMES:

  1. Secure the Windows login process.
  2. Audit login failures.
  3. Secure Linux.

Key terms and descriptions

netplwiz
a command in Windows that will allow you to set logon parameters
gpedit.msc
opens the Group Policy Management Console on a Microsoft Windows operating system
Event Viewer
contains log files that contain information about activities on the computer
telnet
allows remote administration of Linux and Windows systems through the command line
useradd
a command to add a user on a Linux/Unix system