SUMMARY:   This 3-day course covers in detail how to effectively design and implement security for Microsoft SQL Server 2005 Databases. AUDIENCE:   Technology professionals responsible for or interested in learning about techniques and methods for designing and implementing security for Microsoft SQL Server 2005 Databases. DURATION:   3 days. APPROACH:   Instructor-led lecture coupled with relevant individual activities. OBJECTIVES:   Learn Techniques for Designing and Managing SQL Server 2005 Security Define Infrastructure Security Policies Define Security Policies for SQL Server 2005 Instances, Databases, and Objects Define Encryption Requirements Implementing Security Policies in SQL Server 2005 Learn to Audit SQL Server 2005 Define and Validate Security Exceptions Define Policies for Threat and Attack Response COURSE CONTENT:   Introduction Designing Microsoft SQL Server 2005 Security Principles of Database Security Designing and SQL Server 2005 Security Policy Monitoring and Managing SQL Server Security Lab 1.1: SQL Server 2005 Security Settings Lab 1.2: Managing SQL Server 2005 Security Designing a SQL Server Systems Infrastructure Security Policy Integration with Enterprise Authentication Systems Developing Windows Server-level Security Policies Developing a Secure Communications Policy Defining SQL Server 2005 Security Monitoring Requirements Lab 2.1: Designing a SQL Server 2005 Systems Infrastructure Security Policy Lab 2.2: Creating an Infrastructure Security Inventory Designing SQL Server 2005 Security Policies Designing an Instance-Level Security Policy Designing a Database-Level Security Policy Designing an Object-Level Security Policy Defining Monitoring Requirements for Instances and Databases Lab 3.1: Designing Security Policies for Instances and Databases Lab 3.2: Auditing Security Policies for Instances and Databases Using Data Encryption with a SQL Server 2005 Database Using Encryption and Certificates Creating Encryption Policies Defining Key Storage Methods Lab 4.1: Selecting Data Security Methods Lab 4.2: Designing an Encryption Security Policy Lab 4.3: Selecting a Key Storage Method Defining Security Exceptions Understanding Business and Regulatory Requirements Determining Exceptions and the Risks of Associated Exceptions Lab 5.1: Identifying Security Policy Exceptions Lab 5.2: Implementing Security Policy Exceptions Responding to Threats and Attacks Designing Policies for Virus, Worm, and Malicious Code Attacks Designing Policies for Denial of Service Attacks Designing Policies for Internal and SQL Injection Attacks Lab 6.1: Designing Virus, Worm, and Malicious Code Attack Policies Lab 6.2: Designing Response Policies for Denial of Service Attacks Lab 6.3: Designing Response Policies for Internal and SQL Injection Attacks Lab 6.4: Validating Security Policies MS/2009