Securing and Auditing Virtualized Environments
Overview
This course focuses on ESX and Hyper-V security. The course begins with virtualization basics, hardware virtualization considerations, and different versions of ESX. It examines best practices for securing ESX servers, access to the management console, ESX logging, and other configuration issues to ensure the ESX virtual server hosts are secure and stable. It then covers Hyper-V and best practices for securing a Hyper-V environment. It also covers the benefits and synergy of virtualization when implementing the organization’s disaster recovery strategy. Participants tie these concepts together by formulating a suggested audit program of ESX/Hyper-V and the virtual server environment. The course includes case studies using a combination of live demonstrations and exercises that reinforce important virtualization concepts and associated audit points addressed in real audit projects.
Why you should take this course
For users with an intermediate knowledge of this topic, and are searching for a deeper understanding of its evolving complexities.
Here are the topics we'll cover.
-
Virtualization Basics
- What is Server Virtualization?
- Advantages and Disadvantages of Virtualization
- Hardware Considerations
- Backup Strategies
- Potential Hypervisor Attacks
- ESX and Hyper-V
-
VMWare vSphere/ESXi Basics
- ESX Basics
- ESX Versions
- ESX OS Support
- ESX Hardware Considerations
- ESX Backup
- Hardening ESX
- vCenter Security
-
Hyper-V and Disaster Recovery
- Hyper-V Basics
- Hyper-V Versions
- Hyper-V Guest OS Support
- Hyper-V Host Hardware Considerations
- Hyper-V Clustering
- Hyper-V Hardening
- Virtualization and Disaster Recovery
-
Developing an Audit Program for ESXi
- Auditing Host Hardware
- Auditing the Host Configuration
- Auditing Virtual Host Management Computers
- Auditing the UPS Configuration
- Auditing the Backup
- Auditing PtoV Migrations
- Auditing Clusters
- Auditing Virtual Servers
-
Minimum Items to Review in a Virtualization Audit
- Minimum Audit Guidelines
-
ESX Case Study
Learning Style
Level
Who this course is for
NASBA Certified CPE
Field of Study
Length of course
Advanced Preparation
Here are the learning objectives we'll cover
- List key characteristics, advantages, and disadvantages of virtualization.
- Assess key considerations when preparing audit programs of virtualized environments.
- Outline key considerations when preparing audit programs of virtualization disaster recovery programs.
- List key risks and controls related to virtualized environments.