Contents
Overview 1
Lesson: Determining Threats and
Analyzing Risks to Physical Resources 2
Lesson: Designing Security for Physical
Resources 8
Lab A: Designing Security for Physical
Resources 15

Module 5: Creating a
Security Design for
Physical Resources Information in this document, including URL and other Internet Web site references, is subject to
change without notice. Unless otherwise noted, the example companies, organizations, products,
domain names, e-mail addresses, logos, people, places, and events depicted herein are fictitious,
and no association with any real company, organization, product, domain name, e-mail address,
logo, person, place or event is intended or should be inferred. Complying with all applicable
copyright laws is the responsibility of the user. Without limiting the rights under copyright, no
part of this document may be reproduced, stored in or introduced into a retrieval system, or
transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or
otherwise), or for any purpose, without the express written permission of Microsoft Corporation.

Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual
property rights covering subject matter in this document. Except as expressly provided in any

®
PowerPoint
®
file 2830A_05.ppt.

It is recommended that you use PowerPoint version 2002 or later to
display the slides for this course. If you use PowerPoint Viewer or an earlier
version of PowerPoint, all the features of the slides may not be displayed
correctly.

To prepare for this module:

Read all of the materials for this module.

Complete the practices.

Complete the lab and practice discussing the answers.

Read the additional reading for this module, located under Additional
Reading on the Web page on the Student Materials CD.

Visit the Web links that are referenced in the module.

Presentation:
60 minutes

Lab:
45 minutes
Required materials
Important

from becoming distracted by real-world details that were omitted for the sake of
brevity, such as depreciation of hardware.
Physical Resources to
Protect
Why Physical Security Is
Important
Common Threats to
Ph
ysical Security
Practice: Analyzing
Risks to Physical
Security
Module 5: Creating a Security Design for Physical Resources v

Lesson: Designing Security for Physical Resources
This section describes the instructional methods for teaching this lesson.
You can mention threats to radio frequency emanations from monitors and
keyboards in the context of physical security.
Emphasize that students must ensure that their backup media is secured
sufficiently. Also, explain that if students maintain cold spares and facilities,
they must ensure that those resources are kept up to date with the latest
firmware and other required updates.
Answers may vary. Use the security responses that students give to generate
classroom discussion.
Use this page to review the content of the module. Students can use the
checklist as a basic job aid. The phases mentioned on the page are from MSF.
Use this page to emphasize that students must perform threat analysis and risk
assessment on their own networks for the topic covered in this module, and then
they must design security responses to protect the network.
Assessment

Checklist
Note
General lab su
ggestions
vi Module 5: Creating a Security Design for Physical Resources

Customization Information
This section identifies the lab setup requirements for a module and the
configuration changes that occur on student computers during the labs. This
information is provided to assist you in replicating or customizing Microsoft
Official Curriculum (MOC) courseware.
This module includes only computer-based interactive lab exercises, and as a
result, there are no lab setup requirements or configuration changes that affect
replication or customization.

The lab in this module is also dependent on the classroom
configuration that is specified in the Customization Information section at the
end of the Automated Classroom Setup Guide for Course 2830A, Designing
Security for Microsoft Networks.

Lab Setup
There are no lab setup requirements that affect replication or customization.
Lab Results
There are no configuration changes on student computers that affect replication
or customization.
Important
Module 5: Creating a Security Design for Physical Resources 1

Overview


buildings, and server closets, he can easily penetrate your network and access
your organization’s confidential or secret information. Securing physical access
requires diligence and awareness of threats that an attacker can easily perform
on unsuspecting employees.
After completing this lesson, you will be able to:

Describe physical resources to protect.

Explain why physical security is important.

List threats to physical security.

Introduction
Lesson objectives
Module 5: Creating a Security Design for Physical Resources 3

Physical Resources to Protect

*****************************
ILLEGAL FOR NON
-
TRAINER USE
******************************
The key to securing physical resources is to secure access to those resources.
Most of the protection on a computer or network is provided by software. If an
attacker can gain physical access to a computer or network, there is generally
little stopping the attacker from penetrating your network.
You should physically secure access to your organization for:

Buildings.