Securing and Auditing Virtualized Environments
Securing and Auditing Virtualized Environments
This course focuses on ESX and Hyper-V security, it examines virtualization basics, hardware considerations, ways to secure servers, access to the management console, logging and other configuration issues that ensure stability and security.
Upcoming start dates
Suitability - Who should attend?
Information Security Managers, Analysts, and Administrators; IT Managers, Architects, and Developers/Integrators; IT Auditors; Network and System Administrators; Security Architects and Engineers; Application Certification/Quality Assurance Specialists; Consultants; Compliance Officers; Project Managers
Prerequisites
A working knowledge of operating system security, networking concepts, and associated logical access controls, Network Security Essentials (ASG203), Intermediate Audit School (ITG241) or equivalent experience
Outcome / Qualification etc.
NASBA Certified CPE: 40 Credits Auditing
IT Audit Certificate, Information Security Certificate
What You'll Learn
You will learn about virtualization configuration and hardware considerations, different versions and best practices for ESX and Hyper-V security, and how to audit them effectively.
Training Course Content
1. Virtualization Basics:
- what is server virtualization?
- advantages and disadvantages of server virtualization
- hardware considerations
- backup strategies
- potential hypervistor attacks
- ESX and Hyper-V
2. vSphere/ESXi Basics:
- ESXi Basics
- ESXi Versions
- ESXi OS Support
- ESXi Hardware Considerations
- ESXi Backup
- Hardening ESXi
- vCenter Security
3. Hyper-V Basics:
- Hyper-V Basics
- Hyper-V Versions
- Hyper-V Guest OS Support
- Hyper-V Host Hardware Considerations
- Hyper-V Clustering
- Hyper-V Hardening
4. Virtualization and Disaster Recovery:
- benefits of incorporating virtualization into your disaster recovery plan.
- physical versus virtual server recovery times.
- hyperconvergence and disaster recovery
- architecting your production environment to simplify disaster recovery
- Recovery Point Objectives (RPO)
- Recovery Time Objectives (RTO)
- testing your disaster recovery plan
5. Developing an Audit Program for ESX:
- auditing host hardware
- auditing the host configuration
- auditing virtual host management computers
- auditing the UPS configuration.
- auditing the backup.
- auditing the physical to virtual migrations
- auditing clusters
- auditing virtual servers
6. ESX Case Study
Customer Outreach Award
We believe that it should be easy for you to find and compare training courses.
Our Customer Outreach Award is presented to trusted providers who are excellent at responding to enquiries, making your search quicker, more efficient and easier, too.
Reviews by course attendees
Average rating 5
The course gives a very comprehensive overview of virtual environments. IT Auditor - Information Technology Authority
Very detailed course which is good for virtualization specialists and IT Auditors. Material is well presented and explained. Senior Security Engineer - Aspire Zone Foundation
Great overview of how virtual environments are working and how they should be set up. Steve is excellent. IT Auditor - GE Money Bank