MTA : Security Fundamental


This exam measures your ability to accomplish the technical tasks listed below. The percentages indicate the relative weight of each major topic area on the exam. The higher the percentage, the more questions you are likely to see on that content area on the exam. View video tutorials about the variety of question types on Microsoft exams.


After completing this course, students will be able to: • Understand Security Layers • Understand Operating System Security • Understand Network Security • Understand Security Software Objectives Understand core security principles • Confidentiality; integrity; availability; how threat and risk impact principles; principle of least privilege; social engineering; attack surface analysis; threat modelling • Understand physical security • Site security; computer security; removable devices and drives; access control; mobile device security; keyloggers • Understand Internet security • Browser security settings; secure websites • Understand wireless security • Advantages and disadvantages of specific security types; keys; service set identifiers (SSIDs); MAC filters • Multifactor authentication; physical and virtual smart cards; Remote Authentication Dial-In User Service (RADIUS); biometrics; use Run As to perform administrative tasks • Understand permissions • File system permissions; share permissions; registry; Active Directory; enable or disable inheritance; behavior when moving or copying files within the same disk or on another disk; multiple groups with different permissions; basic permissions and advanced permissions; take ownership; delegation; inheritance • Understand password policies • Password complexity; account lockout; password length; password history; time between password changes; enforce by using Group Policies; common attack methods; password reset procedures; protect domain user account passwords • Understand audit policies • Types of auditing; what can be audited; enable auditing; what to audit for specific purposes; where to save audit information; how to secure audit information • Understand encryption • Encrypting file system (EFS); how EFS-encrypted folders impact moving/copying files; BitLocker (To Go); TPM; software-based encryption; MAIL encryption and signing and other uses; virtual private network (VPN); public key/private key; encryption algorithms; certificate properties; certificate services; PKI/certificate services infrastructure; token devices; lock down devices to run only trusted applications • Understand malware • Buffer overflow; viruses, polymorphic viruses; worms; Trojan horses; spyware; ransomware; adware; rootkits; backdoors; zero day attacks • Types of hardware firewalls and their characteristics; when to use a hardware firewall instead of a software firewall; stateful versus stateless firewall inspection; Security Compliance Manager; security baselines • Understand network isolation • Routing; honeypot; perimeter networks; network address translation (NAT); VPN; IPsec; server and domain isolation • Understand protocol security • Protocol spoofing; IPsec; tunneling; DNSsec; network sniffing; denial-of-service (DoS) attacks; common attack methods




Practice Activities
Case Studies


Pre test
Post test


3 Days

Target Audience



Aug 2017Nov 2017