Day 5 - Windows Security

Question 1

Day 5 - Windows Security

Answer 1

• Windows security infrastructure
• Lab- process hacker
• service packs, hotfixes, and backups
• windows access controls
• lab - microsoft baseline security analyzer
• enforcing security policy
• lab - secedit
• securing windows network services
• automation, auditing, and forensics
• lab - powershell scripting

Question 2

Key Protocols that you should memorize

Answer 2

Perimeter and host-based firewalls should filter out unwanted traffic

SMB
RPC
LDAP
Kerberos
DNS
RDP
SQL Server
NetBIOS
IPSec

Question 3

SMB

Answer 3

TCP 139/445

Question 4

RPC

Answer 4

TCP 135

Question 5

LDAP

Answer 5

TCP 389/636/3268/3269

Question 6

Kerberos

Answer 6

TCP/UDP 88

Question 7

DNS

Answer 7

UDP/TCP 53

Question 8

RDP

Answer 8

TCP 3389

Question 9

SQL Server

Answer 9

TCP/UDP 1433/1434

Question 10

NetBIOS

Answer 10

NetBIOS Name service TCP/UDP 137, 
NetBIOS Datagram service UDP 138, 
NetBIOS Session service TCP 139,
WINS TCP/UDP 1512, 
WINS replication TCP 42

Question 11

IPSec

Answer 11

UDP 500/4500 for IKE, Protocols 50 and 51 for ESP for AH

Question 12

SSL and TLS

Answer 12

TCP 443

Question 13

PPTP

Answer 13

TCP 1723, protocol 47

Question 14

Citrix ICA

Answer 14

TCP 1494