Patching, Securing Systems, and Configuring Anti-Virus

CompTIA Security+ (SY601) Domain:
Domain 3.0: Implementation

CompTIA Security+ (SY601) Objective Mapping:
Objective 3.2: Given a scenario, implement host or application security solutions.

Overview

In this lab, you will begin on the red team side by exploiting a Windows server that has not been properly patched. After seeing the damage that an attacker can do to an unpatched system firsthand, you will jump on the blue team side and you will harden and patch a Windows Server operating system to secure it from attack. 

outcomes

In this lab, you will learn to:

  1. Exploit a Windows server that is not properly patched
  2. Harden a Windows server by patching the vulnerability

Key terms and descriptions

netplwiz
a command in Windows that will allow you to set log on parameters
gpedit.msc
opens the Group Policy Management Console on a Microsoft Windows operating system
Event Viewer
contains log files that contain information about activities on the computer
telnet
allows remote administration of Linux and Windows systems through the command line
useradd
a command to add a user on a Linux/Unix system