INDEX 211 authentication systems , 113 biometrics , 113­22 remote access policies and authentication , 113 methods , 109 access control , 110 auditing , 111 authentication , 110 Network design elements , 61 Demilitarized zone (DMZ) , 69­70 firewalls , 66­9 network access control (NAC) , 71­2 network access protection , 71­2 network address translation (NAT) , 71 telephony , 72 VLANs , 70­1 Network File System (NFS) , 54 Network keys , 120­1 Network mapping tools , 129 Network ports and protocols , 62 Intrusion detection and preventions systems , 72­3 protocol analyzer , 74 Network services and risks , 62 Network-based IDS (NIDS) , 6 NIST (National Institute of Standards and Technology) , 137 NNTP servers , 24 Non-repudiation , 110 , 140 Non-secret encryption , 136 NT Hash , 138 NTFS (New Technology File System) , 148 NTLM , 138 Null sessions , 63 services and protocols, enabling and disabling , 23 workstation OS , 27 user rights and groups , 27­8 P Packet filtering , 66 Packet sniffers , 42 Paravirtualization , 51 Password Authentication Protocol (PAP) , 117­18 Password changes and restrictions , 196 Password complexity , 195 administrator accounts , 196 password changes and restrictions , 196 strong passwords , 195 Password crackers , 128­9 Password management , 195 Password policies , 111 Patches , 19­20 O Off-site storage , 182 One -Time Pads , 142 One-factor authentication , 111 Online Certificate Status Protocol