here it is don't get confused

profileJohn_matt
sample_paper_2.docx

1

RUNNING HEAD: MANAGING HOST BASED SECURITY IN WINDOWS 8.1

Lab Deliverable for Lab 2

a. Procedure to Manage Windows Defender

Operating Environment:

1. Operating System: Windows 8.1 Pro

2. Hardware: A Laptop

3. Software: VMware Horizon Client Installed

Description:

This window configuration project will require the sytem admin permission so as to access the programs and get to know how it is commanded to the action it should peform. Also, to use a virtual box one should have knowledge in how to operate the virtual box and explore the virtual programs

Notes, Warnings and Restrictions:

1. Windows Defender come with windows 8.1 software and are found in the control panel.

2. The application is used only when you login your system as an administarator or have permitted to act as the administrator.

3. For windows defender to run in the system it should be turned on and no other antivirus should be active

4. Scanning the system with windows defender deletes infected files. Also ensure you do the required scanning

5. If a different anti virus has been previously deleted, then windows defender needs to be turned off and to be restarted

Resources (Futher Reading):

Firewalls. (n.d.). Retrieved from https://technet.microsoft.com/en-us/library/cc700820.aspx

Microsoft Baseline Security Analyzer. (2011). Retrieved from https://dougvitale.wordpress.com/2011/11/18/microsoft-baseline-security-analyzer/

CloudFlare. (n.d.). Retrieved from https://www.winhelp.us/configure-windows-defender-in-windows-8.html

Procedures:

Windows defender

Window defender protects a computer system against any form of malware by running in the background of the computer system and gives notification if any suspicious item is found in the syatem for the user to take action. It can also be used by a computer to scan the system if the system has issues e.g becomes slow, switches off when not commanded to, hanging among other things. Windows defender should be updated over time so that it is not outdated and also to improve its performance.

Windows defender is found in the control panel icon, steps of opening are

i. Open control panel and select “windows defender”

ii. While you click on windows defender, the following page appears

a) To update the system click on “update”

b) Real time scanning

c) For the full scan results it will appear in the table as shown below

d) For quick results check the button just before you click on scan. Then the results will appear as shown below.

e) To scan removable device, select “setting” and click on advance

Then check the box just before removing any removable drivers and click save

b. Procedure to configure Windows Firewall for Windows 8.1

Operating Environment:

1. Operating System: Windows 8.1 Pro

2. Hardware: A Laptop

3. Software: VMware Horizon Client Installed

Descriptions:

Windows firewall is a protection application that protects against suspicious items, It helps in blocking suspicious programs and even network traffic.

Notes, Warning and Restrictions:

1. Windows firewall is an application that comes with windows 8/8.1 in the control panel list.

2. Windows firewall blocks some programs from running if they look suspicious or are from an untrusted site.

3. When windows firewall is off, it doesn’t work efficiently.

4. Always check the boxes to ensure you check the right boxes for what you want to enable and those you want to disable.

5. To protect the computer from viruses and spyware, ensure windows firewall is turned on

Resources (Futher Reading):

Firewalls - Springer. (n.d.). Retrieved from http://link.springer.com/referenceworkentry/10.1007%2F978-1-4419-5906-5_911

How to Start & Use The Windows Firewall with Advanced Security. (n.d.). Retrieved from http://www.digitalcitizen.life/gain-additional-control-using-windows-firewall-advanced-security

Windows Firewall Is Blocking a Program. (n.d.). Retrieved from https://technet.microsoft.com/en-us/library/cc766312(v=ws.10).aspx

Procedures:

Windows firewall

1. windows firewall has a policy design that enables the computer to accept or share data or create traffic with only the other computers or systems that are authorized. This protects the system from any intrusion from an outsider. This also helps the system from virus attacks. Windows firewall also have a policy termed as domain isolation, with this, traffic is created and information shared to the computers whose domains are recognized by the system. Server isolation policy in windows firewall restricts the server from distributing information to only certain machines

(a). Steps in configuring windows firewall

i. In the control panel select “windows firewall”

ii. Then click on “Allow an app or feature through windows firewall”

iii. In this window you choose the apps in the box and check those you need to communicate with.

(b)

i. In windows firewall settings click “advanced setting”

Advanced setting will display the window below

Choose “windows firewall properties” it will give you options of blocking or allowing connections.

For any application that you need to block or allow e.g network then click on outbound

Manage Vulnerabilities Using Microsoft Baseline Security Analyzer (MBSA)

Operating Environment:

1. Operating System: Windows 8.1 Pro

2. Hardware: A Laptop

3. Software: VMware Horizon Client Installed

Descriptions:

MBSA is a microsoft application product that can access the state of security in a computer system. It checks for security updates. It is also designed to give guidance on the security state of a system

Notes, Warning and Restrictions:

1. MBSA is operated only when one has administrator rights to access the computer system.

2. MBSA is installed differently to the system for additional security for the computer syatem.

3. Scanning in MBSA updates works only with connected network.

4. MBSA does not scan or report on missing non-security updates in a system.

5. If MBSA fails to open from the command prompt or the run application, you can still look for it in installed programs and open the program

Resources (Futher Reading):

How To: Use the Microsoft Baseline Security Analyzer. (n.d.). Retrieved from https://msdn.microsoft.com/en-us/library/ff647642.aspx

Rountree, D. (2010). Security for Microsoft Windows System Administrators: Introduction to key information security concepts. Rockland, MA: Syngress.

Security for Microsoft Windows System Administrators - ScienceDirect. (n.d.). Retrieved from http://www.sciencedirect.com/science/book/9781597495943

Procedures:

Manage Vulnerabilities Using Microsoft Baseline Security Analyzer (MBSA)

1. MBSA is an application supported by windows that helps in managing the security state in a system against recommendations of Microsoft. This application can easily detect misconfiguration security and missing security updates in Windows.

(Click Win+R) and type MBSAcli.exe command in the box

This opens MBSA application

While you Click on “scan a computer” the following box will appear in which you will check the boxes of what you want to scan

Then click on “start scan” of which it will display result after scanning

To see the results after scan then in the first page still select

It will then display results as shown below

C:\Program Files\Microsoft Baseline Security Analyzer 2\Graphics\excl_red.gif

Security assessment:

Incomplete Scan (Could not complete one or more requested checks.)

Computer name:

UMUC-CLOUD\SP16-CSIA-017

IP address:

10.5.2.103

Security report name:

UMUC-CLOUD - SP16-CSIA-017 (1-22-2016 11-38 PM)

Scan date:

1/22/2016 11:38 PM

Catalog synchronization date:

Security update catalog:

Microsoft Update

Security Updates

  Score  

Issue

Result