Changes to Patch Tuesday underscore bigger shakeup in Microsoft security

Some see bad signs in Microsoft's changes to its security reporting processes.

Microsoft has made a change in its Patch Tuesday reporting, along with changing the name of the initiative, and some people see it as a sign that things are getting shaky within the company.

For the first time since it initiated Patch Tuesday, Microsoft did not issue a widespread alert on the Thursday prior to the monthly fixes. Normally, Microsoft issues an email alert through its Advanced Notification Service, or ANS, on the content of Patch Tuesday, which takes place on the second Tuesday of every month. The ANS warning said which Microsoft products would be impacted and how severe the bugs were. It cautiously omitted key details to keep from tipping off malicious hackers as to where to look for the bugs.

However, this month Microsoft put the alerts and information to customers who pay for premium support. "Moving forward, we will provide ANS information directly to Premier customers and current organizations involved in our security programs, and will no longer make this information broadly available through a blog post and Web page," Chris Betz, senior director at the Microsoft Security Response Center (MSRC) wrote in a blog post.

Betz explained that Microsoft was dropping the public ANS notifications because customers weren't using them.

"Customer feedback indicates that many of our large customers no longer use ANS in the same way they did in the past due to optimized testing and deployment methodologies," he wrote. "While some customers still rely on ANS, the vast majority wait for Update Tuesday, or take no action, allowing updates to occur automatically."

As his quote shows, Microsoft now refers to its monthly bug fixes as "Update Tuesday." Apparently it didn't like the term "Patch Tuesday," even if it was accurate.

When I asked for a comment, a Microsoft spokesperson stuck to the statement made by Betz. "We understand why some question this change after more than a decade. The feedback we've received indicates that many of our customers no longer use ANS in the same way they did in the past, due to optimized testing and deployment methodologies," the company said.

To be honest, they have a point. I never read the Thursday notices, either. The fixes always showed up on the second Tuesday right on time, and Microsoft hasn't changed anything about that except the name.

But with other events, it does show that security in general seems to be undergoing a real shakeup at Microsoft. The company shut down its Trustworthy Computing group last September, and in December it had to withdraw two Patch Tuesday fixes because they caused more harm than good.

Some people are pretty upset with this, as was documented in a story over on Computerworld. The folks I spoke with weren't as judgmental.

"Indeed this situation is weird, but maybe it is just that they are trying to include a last-minute patch and do not want to say anything until they know for sure if it is going to be included," Luis Corrons, technical director of PandaLabs, says.

Chris Goettl, product manager with Shavlik, says, "I do not like the move to be sure. It will cut a lot of lead time for companies who care about what is coming and want to plan well for it...I have long been a proponent for the standard of disclosure that Microsoft had set. I have openly criticized vendors who do not disclose enough information to stress the importance of what they are updating. Others, like Adobe and Oracle, had started adopting many of the same practices of predictable release schedules, some advanced warnings or notifications, etc. Will this change send a message back to other late adopters of this mentality?"

Adam Kujawa, head of malware intelligence for Malwarebytes Labs, saw both sides of the issue. Google has been publicly disclosing vulnerabilities, including those in Windows, which Microsoft has slammed.

"The vulnerability disclosure and vulnerability patching processes are very broken at this point...The arguments from Microsoft's side and from Google's side are both valid. Google wants Microsoft to fix the bug so bad guys can't use it. Microsoft wants to fix the bug too but also wants to make sure that it's done in a fashion that protects their users. Either way, the threat approach doesn't do much but force software developers to release quick fixes that could potentially harm systems in the future, and when the demands of the identifier are not met, releasing the knowledge to the public means that the bad guys will be employing it that much sooner," he said.

---

Best Microsoft MCTS Certification, Microsoft MCITP Training at certkingdom.com

How to set up 802.1X client settings in Windows

802.1X provides security for wired and Wi-Fi networks

Understanding all the 802.1X client settings in Windows can certainly help during deployment and support of an 802.1X network. This is especially true when manual configuration of the settings is required, such as in a domain environment or when fine-tuning wireless roaming for latency-sensitive clients and applications, like VoIP and video.

An understanding of the client settings can certainly be beneficial for simple environments as well, where no manual configuration is required before users can login. You still may want to enable additive security measures and fine-tune other settings.

Though the exact network and 802.1X settings and interfaces vary across the different versions of Windows, most are quite similar between Windows Vista and Windows 8.1. In this article, we show and discuss those in Windows 7.

+ ALSO ON NETWORK WORLD: WHAT IS 802.1X +
Protected EAP (PEAP) Properties

Let’s start with the basic settings for Protected EAP (PEAP), the most popular 802.1X authentication method.
111714 network connection dialog

On a Network Connection’s Properties dialog window you can access the basic PEAP settings by clicking the Settings button.

Next, you move through the settings on this PEAP Properties dialog window.

Validate server certificate: When enabled, Windows will try to ensure the authentication server that the client uses is legitimate before passing on its login credentials. This server certificate validation tries to prevent man-in-the-middle attacks, where someone sets up a fake network and authentication server so they can capture your login credentials.

By default, server certificate validation is turned on and we certainly recommend keeping it enabled, but temporarily disabling it can help troubleshoot client connectivity issues.

Connect to these servers: When server certificate validation is used, here you can optionally define the server name that should match the one identified on the server’s certificate. If matching, the authentication process proceeds, otherwise it doesn’t.

Typically, Windows will automatically populate this field based upon the server certificate used and trusted the first time a user connects.

Trusted Root Certification Authorities: This is the list of certification authority (CA) certificates installed on the machine. You select which CA the server’s certificate was issued by, and authentication proceeds if it matches.

Typically, Windows will also automatically choose the CA used by the server certificate the first time a user connects.

Do not prompt user to authorize new servers or trusted certification authorities: This optional feature will automatically deny authentication to servers that don’t match the defined server name and chosen CA certificate. When this is disabled, users would be asked if they’d like to trust the new server certificate instead, which they likely won’t understand.

We recommend this additive security as well. It can help users from unknowingly connecting to a fake network and authentication server, falling victim to a man-in-the-middle attack. Unlike the two previous settings, you must manually enable this one.

The next setting is where you choose the tunneled authentication method used by PEAP. Since Secured password (EAP-MSCHAP v2) is the most popular, we’ll go through it. Clicking the Configure button shows one setting for EAP-MSCHAP v2: Automatically use my Windows logon name and password (and domain if any).
111714 geier eap mschap

This is the dialog box you see after clicking the Configure button for the EAP-MSCHAP v2 authentication method.

This should only be enabled if your Windows login credentials match those in the authentication server, for instance if the server is connected to Active Directory. After connecting to an 802.1X network for the first time, Windows should automatically set this appropriately.

Back on the PEAP Properties dialog window, under the authentication method, are four more settings:

Enable Fast Reconnect: Fast Reconnect, also referred to as EAP Session Resumption, caches the TLS session from the initial connection and uses it to simplify and shorten the TLS handshake process for re-authentication attempts. Since it helps prevent clients roaming between access points from having to do full authentication, it reduces overhead on the network and improves roaming of sensitive applications.

Fast Reconnect is usually enabled by default when a client connects to an 802.1X network that supports it, but if you push network settings to clients you may want to ensure Fast Reconnect is enabled.

Enforce Network Access Protection: When enabled, this forces the client to comply with the Network Access Protection (NAP) policies of a NAP server setup on the network. For instance, NAP can restrict connections of clients that don’t have antivirus, a firewall, the latest updates, or other health related vulnerabilities.

Disconnect if server does not present cryptobinding TLV: When manually enabled, this requires the server use cryptobinding Type-Length-Value (TLV), otherwise the client won’t proceed with authentication. For RADIUS servers that support cryptobinding TLV, it increases the security of the TLS tunnel in PEAP by combining the inner method and the outer method authentications so that attackers cannot perform man-in-the-middle attacks.

Enable Identify Privacy: When using tunneled EAP authentication (like PEAP), the username (identity) of the client is sent twice to the authentication server. First, it’s sent unencrypted, called the outer identity, and then inside an encrypted tunnel, called the inner identity. In most cases, you don’t have to use the real username on the outer identity, which prevents any eavesdroppers from discovering it. However, depending upon your authentication server you may have to include the correct domain or realm.

This setting is disabled by default and I recommend manually enabling it. After enabling identify privacy, you can type whatever you want as the username, such as “anonymous”. Alternatively, if the domain or realm is required: “anonymous@domain.com”.
Advanced 802.1X Settings

On a Network Connection’s Properties dialog window you can access advanced settings by clicking the Advanced Settings button.
111714 geier advanced 8021x

The first tab is the advanced 802.1X settings.
On the 802.1X Settings tab, you can specify the authentication mode: User, Computer, User or Computer, or Guest authentication.

User authentication will use only the credentials provided by the user, while Computer authentication uses only the computer’s credentials. Guest authentication allows connections to the network that are regulated by the restrictions and permissions set for the Guest user account.

Using the combined User or Computer authentication option allows the computer to log into the network before a user logs into Windows and then also enables the user to login with their own credentials afterward. This enables, for instance, the ability to use 802.1X within a domain environment, as the computer can connect to the network and domain controller before a user actually logs into Windows.

When User only authentication is used, you can click the Save Credentials button to input the username and password. Additionally, you can remove saved credentials by marking the Delete credentials for all users checkbox.

The second section of the 802.1X Settings tab is where you can enable and configure Single Sign On functionality. If the system and network are set up properly, using this feature eliminates the need to provide separate login credentials for Windows and 802.1X. Instead of having to input a username and password during the 802.1X authentication, it uses the Windows account credentials. Single sign-on (SSO) features save time for both users and administrators and help to create an overall more secure network.

Advanced 802.11 Settings
On the Advanced Settings dialog box you’ll see an 802.11 settings tab if WPA2 security is used. First are the Fast Roaming settings:
111714 geier advanced 80211

The second tab on the Advanced Settings window is the advanced 802.1X settings.
Enable Pairwise Master Key (PMK) Caching: This allows clients to perform a partial authentication process when roaming back to the access point the client had originally performed the full authentication on. This is typically enabled by default in Windows, with a default expiration time of 720 minutes (12 hours).

This network uses pre-authentication: When both the client and access points supports pre-authentication, you can manually enable this setting so the client doesn’t have to perform a full 802.1X authentication process when connecting or roaming to new access points on the network. This can help make the roaming process even more seamless, useful for sensitive clients and traffic, such as voice and video. Once a client authenticates via one access point, the authentication details are conveyed to the other access points. Basically it's like doing PMK caching with all access points on the network after connecting to just one.

Enable Federal Information Processing Standard (FIPS) compliance for this network: When manually enabled, the AES encryption will be performed in a FIPS 140-2 certified mode, which is a government computer security standard. It would make Windows 7 perform the AES encryption in software, rather than relying on the wireless network adapter.

---

Best comptia A+ Training, Comptia A+ Certification at Certkingdom.com

Apple mobile devices in China targeted by WireLurker malware

Researchers at Palo Alto Networks said they've discovered an impressive malware attack against Apple devices, which for now appears to be limited to users of a Chinese application store.

The campaign revolves around infecting Mac OS X applications with "WireLurker," which collects call logs, phone book contacts and other sensitive information on Apple mobile devices.

MORE: Apple iOS, OS X universe reacts to WireLurker malware threat

Some 467 Mac OS X applications offered on a Chinese third-party application store called Maiyadi were found to have been seeded with WireLurker, including "The Sims 3," "International Snooker 2012" and "Pro Evolution Soccer 2014," according to Palo Alto's research paper.

Over the last six months, those applications and others have been downloaded 356,104 times "and may have impacted hundreds of thousands of users," the paper said.

Apple advises that users stick to downloading applications from its App Store, which it closely vets, and stay away from third-party stores for security reasons.

It would appear some people turn to the Maiyadi store because it offers applications for free, said Ryan Olson, intelligence director for Palo Alto Network's Unit 42, the company's threat intelligence branch.

Palo Alto analyzed three versions of WireLurker, each of which were improvements on the previous one, Olson said in a phone interview Wednesday. But it doesn't appear the WireLurker attack progressed beyond collecting data from mobile devices.

"We think we sort of caught someone developing the attack, and they haven't gotten to the point of launching the full attack," Olson said. "From our perspective, it still looks like an information gathering operation."

The WireLurker attack is notable for how it leverages desktop Mac applications as part of the attack on iOS. If someone downloaded a Mac OS X desktop application from Maiyadi, WireLurker came along with it.

WireLurker then waits for when an iOS device is connected by a USB cable. A second version of WireLurker checks if the Apple device was "jailbroken," the term for removing restrictions that Apple uses to prevent users from running applications it has not approved.

Then it would look to see if applications such as Taobao, Alipay or Meitu, a photo editing application, were installed, Olson said. If so, it would copy the application to the desktop Mac, infect it with WireLurker and copy it back to the device.

The third iteration of WireLurker targets iOS devices that are not jailbroken as well. In that version, WireLurker used a digital certificate that Apple issues to enterprise developers so they can run their own applications in-house that do not appear on the App Store.

Using the digital certificate means iOS would allow a third-party application to be installed, although it would display a warning to users, Olson said. If a user approves the installation, WireLurker could be installed along with a legitimate application.

Olson said Palo Alto Networks has been in contact with Apple in the last few days, which is now aware of WireLurker.

"There's no vulnerability here for them to patch, but they certainly want to be aware of malware and how it works," Olson said.

Apple could first revoke the enterprise digital certificate that WireLurker's creators are using, Olson said. The company could also issue an update to detect WireLurker in XProtect, Apple's antivirus engine, he said.

---

Best Microsoft MCTS Certification, Microsoft MCITP Training at certkingdom.com

MCTS certification – improved prospect

A MCTS certification is usually a profession-enhancing accomplishment for just about any IT carried out. This should get bigger is in any esteem events a main concern for all professionals who're committed in using Microsoft merchandise. To become in a location to get a+ certification MCTS, the Microsoft finding out Middle extends to be verified to provide provision and overview time span for prospective candidates. Although, a good deal in the accomplishment for all IT individuals to proceed the ascertain lies on their one-by-one need and organising.

Microsoft supplies a MCTS certification for trained candidates who will move their in writing tests with farthest rankings. Utilising the worldwide utilization of MS merchandise, the enterprise is searching ahead to a data Know-how natural environment precisely where staff flourish with excellence. IT graduates advance on to function for some enterprises which is often mindfully affiliated to MS programs program design and hardware. For a conclusion, there is a relentless desire for individual know-how and capability to help hold the goods prized in the course of the programs program approach. MCTS Certification is really a entire allotment essential documentation to set up management for a good deal of IT professionals who desire to excel interior their position of choice.

Microsoft business establishes a comprehending centre which mostly appears in to the abilities of all IT graduates who're pledged in utilising MS pieces. These persons should have a smallest of a yr of substantial functioning know-how in facts and figures technologies. The tutorial class of those folks nonetheless yarns enhancement and enhancement. The introduction of most latest technological merchandise may be the prime goal why IT professionals really should maintain on comprehending and modifying. Absolutely understand in the brand-new inventions at Microsoft delivers IT staff and brim interior the bureau. To conceive all IT persons powerful, a MCTS certification is conceived obtainable for in writing test passers. A vocation in facts and figures technologies could likely be a worthwhile one if pros are passionate ample to appreciate the actually worth of MCTS certification.

The undertaking of course for obtaining a complete-licensed MS expert starts from within. If a person has that flaming select to get that MCTS course certificate, he'll do just about every little component inside his shows to competently precede any supplied in writing test. The will to cross actually should be in the start off inside the thoughts of an examiner. Without having that insight, absolutely not anything can inspire an IT accurate one-by-one to precede all of the way. The psychological conditioning of a one-by-one to proceed by means of a sequence of harmful get a have a look at is substantial in the main heading of attaining an aim. No school or comprehending coronary heart can location with each other an IT taught to pass an check. The provision of assets is easily a supporting catalyst interior the course of competently getting a+ MCTS certification.


The Microsoft exam for Middle provision a very wide kind of examinations for IT pros to investigate their abilities within their chosen areas. What assists make this centre precious will be the way it assists enthralled examinees in conceiving for that investigation correct. Equitably a whole allotment of quotation components and overview techniques for MCTS certification are getting provided round the internet to ensure the candidate's readiness to tolerate an intensive psychological enquiry of assorted MS merchandise. Amidst the allotments of amount of exams introduced, there is wholeheartedly a prevalent ascertain which measures a person’s widespread show in each authored and intelligent evaluations. The deductions of this foundational in writing check will expected be applied because the idea in course of getting a MCTS training from The Knowledge Academy.

---

Microsoft MCTS Certification, MCITP Certification and over 3000+
Exams with Life Time Access Membership at http://www.actualkey.com

Matchbox computers: Small is beautiful (and powerful)

If you like to build your own PC or just want something extremely portable, these tiny devices can be very useful.

You could sum up most of the history of computing in one word: smaller. Each successive generation of computing devices has been tinier, more energy-efficient and more powerful than the previous one. Now we've reached a point where an entire PC can be crammed into a space not much larger than a matchbox or a stick of gum.

This new wave of "matchbox computers" (also known as "thumb PCs") has ushered in not just new form factors but new kinds of applications. Hobbyists have flocked to these tiny systems, attracted by their size, low cost and inherent hackability.
Raspberry Pi
Raspberry Pi was one of the first open-source matchbox computers: inexpensive, tiny and energy-efficient.

Many of these devices are built either on open, freely reproducible architectures, or with well-documented components. Their appeal isn't just limited to the U.S., either: the Raspberry Pi was developed in the UK, and the Odroid is a South Korean product.

Even big PC makers are now getting into the game: Dell's Project Ophelia, an Android device on a stick, will run Android-based apps when plugged into a display's HDMI port. It debuted at CES this year; the developer's version should ship this month and the consumer version in July. It is expect to have a $100 price tag.
What led to matchbox devices?

Matchbox computing owes its existence to the confluence of several different trends:

Linux, GNU and FOSS. The Linux kernel and the GNU toolchain, products of the culture of free/open-source software (FOSS), have been used as the common substrate for any number of hardware designs. These range from set-top boxes and networking gear (with a little help from derivative projects like BusyBox) to Android-powered devices. Android itself, too, has been put to use in the same way.
Want to see what they look like?

Check out our slideshow:

16 matchbox PCs: Small but powerful.

From the most bare-bones and hobbyist-oriented to full-blown, ready-to-run PCs, a device for almost every price range and level of technical expertise.

Consequently, many matchbox devices are powered either by a Linux distribution of some kind, or by a stock edition of Android. Linux alone is most widely used on devices where the user interface is either minimal -- no more than a command-line interface is needed, if even that -- or where one needs to be custom-built for the device. Android, on the other hand, is useful for system-on-chip devices with built-in multimedia -- graphics, sound, HDMI-out, etc.

System-on-chip (SoC) devices. A good deal of the most recent engineering for SoCs has been for the smartphone and ultrabook market, with smartphones showing off SoC designs at their most compact, power-efficient and feature-laden. And since SoCs consist of very few components by design, that makes them easier to build a device around. Wireless networking is also included by default in most SoC designs, which makes them even more compact because a network port doesn't have to be included.

Standard interfaces. The standardization of interfaces for power, data and networking on most computers has made it easier for matchbox devices to implement those features consistently. USB, for instance, can be used both to supply power and to attach external devices, which means one less connector type needs to be provisioned on the device, making it smaller and less complex. The same goes for HDMI for video and audio, and SD card slots for external storage.

Hardware hackers. The subculture of tinkerers -- making devices do things that weren't intended by the manufacturer -- isn't by itself new. But the combination of open or standardized hardware designs plus free/open software on top of that has opened up whole new realms of possibility for what could be built and what those devices could be used for.
Many matchbox uses

Like computers themselves, matchbox devices have been finding a broad range of applications:

Replacing a full PC. Whether or not you can replace a full-blown PC with a matchbox system depends entirely on what you're using it for. For those who have already built a good deal of their workflow inside Linux or Android, using a matchbox system isn't much of a stretch. Users need to bring their own keyboards and displays (and sometimes software and operating systems), but those things aren't hard to add.

It's also possible for these systems to run as servers and not just workstations. Most matchbox devices have only the CPU and memory to handle modest user loads, but for certain applications (such as remote control) that may be all that's needed.

Media playback. Many matchbox systems have storage extensions, either in the form of an SD card slot or a port for an external USB drive. Such a system can be docked with a display and sound system via a USB or HDMI port -- or even a conventional audio jack -- and used to play back music or videos on the go. Matchbox systems can also be used to build full-blown media centers.

Prototyping. Matchbox systems can be used as the basis for hardware prototypes for devices yet to be built. The final product could incorporate the matchbox hardware itself, or be custom-made using the same core components as the matchbox system (in other words, the same SoC, just in a different configuration). The makers of the Raspberry Pi device, for instance, have an entire forum dedicated to discussions of projects that can be built with the board.

Low-power scenarios. Running a full PC, even a laptop, requires a power draw that might not be possible in some circumstances -- for example, if you need a system to run for a long time on a single battery charge. Matchbox systems draw very little power and can often be powered by no more than the wattage provided by a USB port.

Robotics and control. Many matchbox systems are used not just to build devices, but to be the control systems for other devices. The Gumstix Users wiki, for example, tracks Gumstix projects related to robotics, and various Raspberry Pi projects have been created to do things like control room lighting or water plants.

Obviously, matchbox systems aren't going to challenge any of the consumer-targeted systems currently in the market, even low-cost ones such as the $249 Samsung Chromebook. However, hobbyists, developers and tinkerers may find some of these tiny computers an intriguing challenge and/or a useful tool.

We've assembled a slideshow of sixteen matchbox devices, from the most bare-bones and hobbyist-oriented to full-blown, ready-to-run PCs. Check it out -- there's a device for most every price range and level of technical expertise out there.

---

Best Microsoft MCTS Certification, Microsoft MCITP Training at certkingdom.com

HP0-084: HP Integrity Server Multi-OS Installation & Deployment

QUESTION 1
Which EFI menu option do you use to remove the boot options before installing an operating
system?

A. Boot option Maintenance Menu
B. EFI Shell
C. Manage Boot Option Menu
D. System Configuration Menu

Answer: A

---

QUESTION 2
You are trying to enable Virus Throttle support for Windows Server 2003 on an Integrity System,
but you are not able to activate it. What must you do to enable the virus throttle feature?

A. Install a valid Integrity Essentials Intelligent Networking Pack license
B. Install SNMP support with Web-BasedEnterprise Management (WBEM) functionality
C. Install HP System Management Homepage support
D. Install and configure Network Adapter Teaming First

Answer: A

---

QUESTION 3
Which components are used in a Virtual Server Environment (VSE)? ( Choose three.)

A. Virtualization Manager
B. Performance Management Pack
C. Capacity Advisor
D. Global Workload Manager
E. Operations Manager
F. Data Collector Agent

Answer: A,C,D

---

QUESTION 4
An Integrity rx2620 server with Windows Server 2003 is running terminal services but has stopped
responding. Which MP command do you use to shutdown gracefully and power off the server?

A. pc -g
B. rs -g
C. rs -off
D. pc off

Answer: A

---

QUESTION 5
You replaced a DIMM in an integrity rx640 server that was previously deconfigured by the
operating system. How can you reconfigure the DIMM before booting to the Operating System, if it
is not reconfigured automatically?

A. Use the ss command at the Management processor command menu
B. Use the Offline Diagnostics Environment (ODE) Utility MEMDIAG
C. Use the memconfig command at the EFI shell
D. You can't manually reconfigure the DIMM before booting the operating system
E. At the EFI Boot Manager menu, go to System Configuration, then choose Set System Defaults

Answer: D

---

QUESTION 6
.Where is the EFI user interface shell program stored on an Integrity rx640 server?

A. EFI System partition (ESP)
B. Hardware System BIOS
C. System Firmware
D. HP-UX 11i system partition

Answer: C

---

Best HP Certification, HP0-084 Training at certkingdom.com

Certkingdom 10% Discount on Life Time Membership

Certkingdom 10% Discount on Life Time Membership

Certkingdom Exam Preparation includes:
Comprehensive study tools with complete detailed explanations of all the questions (when available) Questions accompanied by exhibits Verified Answers Questions and answers are backed by top training teaching staff's GUARANTEED , including multiple-choice questions (MCQs), Scenario Based, Case Studies, Complete Realistic Labs, and more study material will provide you with exam questions and verified answers with explanation that reflect the actual test.

Promotion coupon/voucher: : PKYM-Liokkj_kiu87_iuj

Direct link to discounted offer page : http://www.certkingdom.com/checkout.php


$50 Our Unlimited life time membership included.
* Testing Engine Included
* Over 3000+ exams training
* Instant Downloads
* Free Unlimited update for life
* SSL Secure ordering
* Verified Answers Researched by Industry Experts
* Hands on all Future added exams and training tools
* 100% Guaranteed Success on first attempt
* 24/7 Support

---

Best Microsoft MCTS Certification, Microsoft MCITP Training at certkingdom.com