MOAC 70-687 - Configuring Windows 8 Lab Manual LAB 12 CONFIGURING AND MAINTAINING NETWORK SECURITY

THIS LAB CONTAINS THE FOLLOWING EXERCISES AND ACTIVITIES:

Exercise 12.1 Installing Internet Information Server

Exercise 12.2 Testing IIS Connectivity

Exercise 12.3 Allowing a Program Through the Firewall

Lab Challenge Creating Windows Firewall Rules

Exercise 12.1 Installing Internet Information Server Overview Because this is only a test deployment, you will be using a Windows 8 computer to function as the web server. In this exercise, you will install Internet Information Services on your workstation and then configure it to host two websites. Mindset Internet Information Services enables you to configure websites to use specific port numbers. This makes it possible to test the functionality of Windows Firewall. Completion time 15 minutes MOAC 70-687 - Configuring Windows 8 Lab Manual

What URLs could you use in your computer’s browser to test the functionality of the intranet website you just created? Question 1

21. Take a screen shot of the Internet Information Services (IIS) Manager console, showing the new site you created, by pressing Alt+Prt Scr, and then paste the resulting image into the Lab 12 worksheet file in the page provided by pressing Ctrl+V.

[copy screen shot over this text]

Exercise 12.2 Testing IIS Connectivity Overview In this exercise, you will test the functionality of the web server you just installed.

Mindset The way to test the functionality of a web server is to attempt to connect to it. Completion time 15 minutes

What is the result, and what does the result indicate? Question 2

What is the result, and what does it indicate? Question 3

Question What is the result? 4 MOAC 70-687 - Configuring Windows 8 Lab Manual

What is the result? Question 5

List three possible reasons as to why you might be unable to connect to your computer’s web server using a browser on Question another computer. 6

10. Take a screen shot of the Customize settings for each type of network window, showing the setting you just modified, by pressing Alt+Prt Scr, and then paste the resulting image into the Lab 12 worksheet file in the page provided by pressing Ctrl+V.

[copy screen shot over this text]

What are the results, and what do the results indicate? Question 7

What other test could you perform to prove that it was your computer’s firewall that was blocking the connection and not Question the firewall on the computer you are using as a client? 8

Question Why is it necessary to clear the cache before you retest the MOAC 70-687 - Configuring Windows 8 Lab Manual

web server connections?

9

Why can you not simply leave Windows Firewall turned off when you deploy an actual web server? Question 10

Exercise 12.3 Allowing a Program Through the Firewall Overview Windows Firewall is preventing clients from connecting to your web server. To enable client access, you will use the Windows Firewall control panel to allow access to the web server. Mindset The Windows Firewall control panel provides access to basic functions of the firewall, but for complete control, you must use the Windows Firewall with Advanced Security console, which you’ll see in the Lab Challenge. Completion time 10 minutes

Why are you now able to connect to the website from the client? Question 11

Why are you unable to connect to the intranet site from the client? Question 12 MOAC 70-687 - Configuring Windows 8 Lab Manual

Lab Challenge Creating Windows Firewall Rules Overview The port you opened in Exercise 12.3 enables clients to access the default website hosted by your web server, but not the Intranet website. In this challenge, you must configure your web server to allow traffic to the Intranet website. Mindset Windows 8 often provides more than one way to complete a given task. The Windows Firewall control panel provides a relatively simple interface to the firewall, but it is not a comprehensive one, as we saw in the previous Exercise. Completion time 20 minutes

To complete this challenge, you must use the Windows Firewall With Advanced Security console to configure WKSTN-MBR-B to allow traffic to both the default website and the Intranet website you created in Exercise 12.1.

To complete the challenge, perform the following tasks:

1. List the steps you took to complete the task.

2. Take a screen shot of the interface you used to create the firewall rules by pressing Alt+Prt Scr and then paste it into your Lab 12 worksheet file in the page provided by pressing Ctrl+V.

[copy screen shot over this text]

3. Answer the following questions.

Why are there two separate rules for the World Wide Web Services in the Inbound Rules container? Question 13

Question How would the opening of the port you performed in Exercise 14 12.3 affect the World Wide Web Services (HTTP Traffic-In) rules in the Inbound Rules container? MOAC 70-687 - Configuring Windows 8 Lab Manual

How would the rule creation procedure you just performed differ if you wanted to restrict client access to the intranet Question website to computers on the local network only? 15