CertTutor.net Live! UPDATE—brought to you by the Windows & .NET Magazine Network and CertTutor.net
http://www.certtutor.net

CertTutor.net Live! UPDATE contains the best of CertTutor.net Live!, the Internet's number-one certification discussion board. CertTutor.net Live! UPDATE features interesting posts and shares valuable information about how to make the most of the forums. Enjoy!


THIS ISSUE SPONSORED BY

Windows & .NET Magazine Mobile Edition
http://www.winnetmag.com/mobile


SPONSOR: WINDOWS & .NET MAGAZINE MOBILE EDITION

ON THE GO?
Introducing Windows & .NET Magazine Network Mobile Edition! Now you can get the latest news from WinInfo Daily UPDATE, commentary from respected sources like Windows & .NET Magazine UPDATE, and important security discoveries and alerts from Security UPDATE—delivered right to the palm of your handheld device. Sign up today!
http://www.winnetmag.com/mobile


July 17, 2002—In this issue:

1. COMMENTARY

  • #@$&% Security

2. FEATURED THREADS

  • Advertising Your Wares
  • XP Exams
  • Terminal Services and Exam 70-215
  • Filling in the Holes
  • When a Terminal Server Isn't Terminal Services
  • Real-World Supernetting
  • The Net Use Command

3. ANNOUNCEMENTS

  • Got Digital?
  • Enter the Windows & .NET Magazine/Transcender Sweepstakes!

4. FOLDERS EN EL FUEGO

  • Are Computer Certifications Really Necessary?
  • How Many of You Have Been Unemployed for 6+ Months?
  • Considering a Bachelors in CompSci
  • LAN Definition Wanted
  • The World's Easiest Quiz (Maybe)
  • Do Transcenders Make It Too Easy?

5. TIP OF THE WEEK

  • Turn Off the Preview Pane

6. FEATURED MEMBER

  • Tony Smejek

7. CONTACT US

  • See this section for a list of ways to contact us.

1. COMMENTARY
(contributed by Bob Muir, certtutor@bakerstconsulting.com)

  • #@$&% SECURITY

  • As you know, securing your networks requires vigilance and a lot of work. However, you ignore security at your peril, risking your job and possibly your company's entire future. But when you adopt the right mind-set, security tasks aren't so bad. What's important is to address security problems before it's too late.

    Best practice (and common sense) dictates that the best way to approach security is from the outside in. In other words, list all possible sources of security breaches and examine your network from the source's viewpoint. Sources might include intruders, customers, inhouse computer and network support technicians, and employees.

    The source of a security risk and his or her motivations will help you to determine which risks to address when implementing preventive measures. For low-profile locations, such as most small businesses, basic precautions are usually enough to keep casual intruders at bay. Although higher levels of security (e.g., border servers, gateways) are effective, they aren't usually worth the trouble and expense. At more high-profile institutions, such as local governments or schools, you must consider your resources tempting targets for local intruders. A casual intruder will give up after a port scan and a few probes, but a determined intruder might spend days, weeks, or longer attempting to access a target.

    Of course, you shouldn't ignore internal risk factors. Just one disgruntled employee can take down your system, delete your data, and destroy all onsite backups. Without the proper safeguards, you might not be able to identify the perpetrator—and even if you can, such people rarely have the financial resources to pay restitution. Sabotage is another insidious risk that you might never even detect. Proper safeguards are essential.

    The first step is to educate yourself—what you don't know can hurt you and your employer. After you gain an understanding of the risks and the sources, bring your employer into the loop. If you determine that you're sitting on a honeypot that will attract determined intruders, then the sooner you establish physical security, firewalls, and borders, the better off your organization will be. If your employer doesn't take the risks seriously, you might want to document your meetings. Don't take a fall for someone else's inaction.

    To begin your self-education, I highly recommend that you read the book "Hacking Exposed: Network Security Secrets & Solutions, Third Edition" (Osborne McGraw-Hill, 2001). The book might seem intimidating at first glance, but it's very accessible.
    http://amazon.com/exec/obidos/asin/0072193816

    Also, don't forget that the CertTutor.net Live! Security forum is always available and is the place to go for answers to any security- related questions you might have.
    http://certtutor.net/forums/categories.cfm?catid=46

    2. FEATURED THREADS

  • ADVERTISING YOUR WARES

  • As this thread reveals, when creating Windows Installer packages (.msi files), you need an understanding of advertising—but not the marketing advertising you encounter in the media. You can also see the Microsoft Web site for great information about .msi files and how to create them.
    http://certtutor.net/forums/messageview.cfm?catid=14&threadid=33810
    http://microsoft.com/windows2000/techinfo/planning/management/veritas.asp

  • XP EXAMS

  • If you haven't taken Exam 70-210: Installing, Configuring, and Administering Microsoft Windows 2000 Professional, consider taking Exam 70-270: Installing, Configuring, and Administering Microsoft Windows XP Professional instead. The two exams are very similar, but Exam 70-270 is more current.
    http://certtutor.net/forums/messageview.cfm?catid=14&threadid=33759

  • TERMINAL SERVICES AND EXAM 70-215

  • The objectives for Microsoft Exam 70-215: Installing, Configuring, and Administering Microsoft Windows 2000 Server includes Win2K Server Terminal Services. You probably use Terminal Services infrequently in your home labs, so you'll undoubtedly have some work to do. In this thread, Senior Guru offers good advice about meeting this objective.
    http://certtutor.net/forums/messageview.cfm?catid=15&threadid=33775

  • FILLING IN THE HOLES

  • As discovered, CertTutor.net's Question of the Day newsletter is a great way to round out your knowledge as you prepare for your next exam.
    http://certtutor.net/forums/messageview.cfm?catid=76&threadid=33707

    To sign up for the various Question of the Day newsletters, visit the Windows & .NET Magazine Web site.
    http://email.winnetmag.com/winnetmag/winnetmag_prefctr.asp

  • WHEN A TERMINAL SERVER ISN'T TERMINAL SERVICES

  • In this thread, Tutor provides an overview of reverse telnetting and some background on terminal server concepts.
    http://certtutor.net/forums/messageview.cfm?catid=76&threadid=33713

  • REAL-WORLD SUPERNETTING

  • has encountered a TCP/IP configuration that appears to have been set up with a noncompliant subnet scheme. Tutor , our resident TCP/IP guru, explains why this configuration is wrong and offers a possible solution.
    http://certtutor.net/forums/messageview.cfm?catid=10&threadid=33733

  • THE NET USE COMMAND

  • The Net command is powerful and useful, but perhaps the most popular Net command is Net Use. Net Use gives you an excellent way to ensure that your users have a consistent drive-mapping scheme. But what do you do when users change the mappings, which of course can cause your logon script to fail on reboot?
    http://certtutor.net/forums/messageview.cfm?catid=10&threadid=33718

    3. ANNOUNCEMENTS

  • GOT DIGITAL?

  • Have you downloaded your FREE digital issue of SQL Server Magazine yet? Our new digital delivery option gives you fast, uninterrupted access to the latest SQL Server info. Delivered monthly and stored right on your desktop, this new format is keyword searchable and allows for easy archive access. Try it today!
    http://www.zinio.com/offer?issn=1522-2187t&offer=pf1sqlt&rf=ei212xdu

  • ENTER THE WINDOWS & .NET MAGAZINE/TRANSCENDER SWEEPSTAKES!

  • Nothing can help you prepare for certification like Transcender products, and no one can help you master your job like Windows & .NET Magazine. Enter our combined sweepstakes contest, and you could win a Transcender Deluxe MCSE Core Pak (a $569 value) or one of several other great prizes. Sign up today!
    http://www.winnetmag.com/sub.cfm?code=swei202fus

    4. FOLDERS EN EL FUEGO
    The following threads from the past 10 days are "on fire":

  • ARE COMPUTER CERTIFICATIONS REALLY NECESSARY?

  • http://certtutor.net/forums/messageview.cfm?catid=37&threadid=33754

  • HOW MANY OF YOU HAVE BEEN UNEMPLOYED FOR 6+ MONTHS?

  • http://certtutor.net/forums/messageview.cfm?catid=2&threadid=33517

  • CONSIDERING A BACHELORS IN COMPSCI

  • http://certtutor.net/forums/messageview.cfm?catid=2&threadid=33770

  • LAN DEFINITION WANTED

  • http://certtutor.net/forums/messageview.cfm?catid=7&threadid=33805

  • THE WORLD'S EASIEST QUIZ (MAYBE)

  • http://certtutor.net/forums/messageview.cfm?catid=7&threadid=33779

  • DO TRANSCENDERS MAKE IT TOO EASY?

  • http://certtutor.net/forums/messageview.cfm?catid=37&threadid=33691

    5. TIP OF THE WEEK

  • TURN OFF THE PREVIEW PANE

  • The preview pane feature in Microsoft Outlook and Outlook Express is convenient, but it also introduces additional risk because it opens email messages that you select. Some viruses activate when you view them in the preview pane, and your antivirus application might not recognize the latest viruses, even if you update the application frequently. By turning off the preview pane, you can not only reduce your vulnerability to viruses but also speed your email processing. You can usually examine a sender's name or a subject line to determine whether an email message is spam or a possible virus, and it's much faster to scan a subject line and hit delete than it is to read through the message text before making a decision. To turn off the preview pane in Outlook, select View, Preview Pane. In Outlook Express, select View, Layout.

    6. FEATURED MEMBER

    Each week, we highlight the wonderful diversity of the community here at CertTutor.net Live! by selecting one of the board's members as our Featured Member. You might be next!

    Username:         axedbadly
    Real Name:        Tony Smejek
    Date Registered:  February 2, 2002
    Status:           Guru
    Total Posts:      78
    Occupation:       Self-Employed—Computer Consulting
                      (while job hunting at the same time)
    Certifications:   MCP (NT 4.0 Server), A+, and Network+,
                      A.S. Degree in Computer Science
    Location:         Tavares, FL (about an hour north of Orlando,FL)
    Interests:        Tae Kwon Do, paintball, computers, and bachelorhood.

    7. CONTACT US
    Here's how to reach us with your comments and questions:

    • ABOUT THE COMMENTARY — certtutor@bakerstconsulting.com
    • ABOUT THE NEWSLETTER IN GENERAL — rcarson@winnetmag.com

    (please mention the newsletter name in the subject line)

    • TECHNICAL QUESTIONS — http://www.certtutor.net/forums
    • QUESTIONS ABOUT YOUR CERTTUTOR.NET LIVE! SUBSCRIPTION?
      Customer Support — certutorupdate@winnetmag.com
    • WANT TO SPONSOR CERTTUTOR.NET LIVE! UPDATE?
      emedia_opps@winnetmag.com

    Receive the latest information about the Windows and .NET topics of your choice. Subscribe to our other FREE email newsletters.
    http://www.winnetmag.net/email

    Thank you for reading CertTutor.net Live! UPDATE.