Section 9.2: Social Engineering

Number of Exam Questions

Total Time

Section 9.3: Authentication

Summary

• 
  Authentication credentials
  

• 
  Password
  
• 
  Smart card
  
• 
  Biometric
  
• 
  Password weaknesses
  
• 
  Strong password policy
  
• 
  Control passwords with policy settings:
  
• 
  Password Policy settings:
  
  • 
    Minimum password length
    
  • 
    Password complexity
    
  • 
    Maximum password age
    
  • 
    Minimum password age
    
  • 
    Enforce password history
    
• 
  Account Lockout Policy settings:
  
  • 
    Account lockout threshold
    
  • 
    Account lockout duration
    
  • 
    Reset account lockout counter after
    

• 
  Configure Password Policy and Account Lockout settings in the local security policy.
  
• 
  Use a biometric scanner to enroll (record) fingerprints that can be used for authentication.
  
• 
  Configure fingerprint settings to automate execution of an application.
  

A Essentials Objectives:

• 
  1.8 Install and configure peripherals and input devices
  
  • 
    Biometric devices
    
• 
  5.1 Explain the basic principles of security concepts and technologies
  
  • 
    Authentication technologies
    
    • 
      User name
      
    • 
      Password
      
    • 
      Biometrics
      
    • 
      Smart cards
      
• 
  5.2 Summarize the following security features
  
  • 
    Password management / password complexity
    
  • 
    Biometrics
    
    • 
      Fingerprint scanner
      

• 
  What is the difference between a password and a passphrase?
  
• 
  How is cognitive information typically used in an authentication system?
  
• 
  What additional information is typically required when authenticating with a smart card?
  
• 
  What type of credentials do biometric systems use for authentication? What are four examples of biometric credentials?
  
• 
  What tendency of human nature makes many passwords easier to crack?
  
• 
  What are the characteristics of a strong password policy?
  
• 
  What is the difference between password policy settings and account lockout settings?
  

Video/Demo Time

Lab/Activity

• 
  Enforce Password Settings
  

Number of Exam Questions

Total Time

Section 9.4: BIOS Security

Summary

• 
  Security-related features in the BIOS
  
  • 
    BIOS passwords
    
  • 
    Chassis intrusion detection
    
  • 
    Hard disk password
    
  • 
    Trusted Platform Module (TPM)
    

• 
  Configure BIOS and hard disk passwords.
  
• 
  Enable and reset chassis intrusion detection.
  
• 
  Initialize a TPM.
  

A Essentials Objectives:

• 
  5.2 Summarize the following security features
  
  • 
    BIOS Security
    

• 
  Drive lock
  
• 
  Passwords
  
• 
  Intrusion detection
  
• 
  TPM
  

• 
  What is the difference between a user and an administrator password in the BIOS?
  
• 
  Why do BIOS passwords offer little system protection?
  
• 
  How does chassis intrusion detection help to secure the BIOS?
  
• 
  How does a hard disk password differ from a BIOS password? What happens to the hard disk password if the disk is moved to another system?
  
• 
  What is the function of the TPM? Where is the TPM chip located?
  

Video/Demo Time

Lab/Activity

• 
  Configure BIOS Security
  

Number of Exam Questions

Total Time