Information Technology

CompTIA Security+ (SY0-601) - ML

E-Learning 10 Agenda

Description

This course will prepare students for the CompTIA Security+ SY0-601 exam. Topics covered include understanding threats, analyzing attacks, cryptography, implementing secure networks, operational procedures, forensics, and more.

Course Overview

Course Agenda

10 Title

Course Agenda 10

Lesson Id	Title	Description
1	Understanding Threats, Attacks, and Vulnerabilities	Instructor Introduction<br />Course Introduction<br />Understanding Threats, Attacks, and Vulnerabilities<br />Topic A: Introduction to Security Concepts<br />Security Fundamentals<br />Security Terms<br />Topic B: Identifying Threat Actors and Vectors<br />Actors and Threats<br />Hackers<br />Actor Attributes<br />Attack Vectors<br />Information Gathering<br />Intelligence Sources<br />Research Sources<br />Demo - Research Sources<br />Topic C: Understanding Vulnerabilities<br />Vulnerability Fundamentals<br />Security Impacts<br />Vulnerability Types<br />Vulnerability Types (cont.)<br />Topic D: Understanding Attack Types<br />Attack Types<br />Understanding Malware Types<br />Attacking Passwords and User Credentials<br />Physical Attacks<br />Other Attack Types<br />Topic E: Identifying Social Engineering Techniques<br />Social Engineering Principles<br />Phishing<br />Other Social Engineering Types<br />Other Social Engineering Types (cont.)<br />Chapter 1 Review
2	Analyzing Attacks	Analyzing Attacks<br />Topic A: Security Assessment Tools and Techniques<br />Understanding Assessments<br />Threat Hunting<br />Vulnerability Scanning<br />Syslog and SIEM<br />SIEM Components<br />Topic B: Application Attacks<br />Application Attacks<br />Privilege Escalation<br />Cross<br />-Site Scripting<br />Injections<br />Application Attack Issues<br />Session Attacks<br />Additional Attacks<br />Topic C: Network Attacks<br />Introduction to Network Attacks<br />Wireless Network Attacks<br />Layer 2 Attacks<br />Service Attacks<br />Demo<br />- DNS Poisoning<br />Malicious Code Topic D: Penetration Testing<br />Penetration Testing<br />Environment Types<br />Pentesting Concepts<br />Network Reconnaissance<br />Exercise Types<br />Chapter 2 Review
3	Architecture and Design	Architecture and Design<br />Topic A: Enterprise Security Architecture<br />Enterprise Standardization Needs<br />Configuration Management<br />Data Protection<br />Additional Security Concepts<br />Disaster Recovery<br />Deception and Disruption<br />Topic B: Designing Authentication and Authorization<br />Authentication and Authorization<br />Authentication Methods<br />Authentication Technologies<br />Biometrics<br />Multifactor Authentication<br />Demo<br />- Multifactor Authentication<br />Topic C: Designing Resiliency<br />Resiliency and Cybersecurity<br />Redundancy Concepts<br />Replication Concepts<br />Backup Concepts<br />Additional Resiliency Options<br />Topic D: Cloud and Virtualization Concepts<br />Cloud Models<br />Cloud Types<br />Cloud Service Providers<br />Additional Cloud Concepts<br />Additional Cloud Concepts (cont.)<br />Demo<br />- Cloud Computing Security<br />Topic E: Securing Application Development and Deployment<br />Application Development Environments<br />Secure Coding Techniques<br />Automation Techniques<br />Application Design Concepts<br />Chapter 3 Review<br />
4	Physical and System Security	Physical and System Security<br />Topic A: Physical Security Controls<br />Importance of Physical Controls<br />Standard Controls<br />Security Monitoring<br />Security Personnel<br />Secure Areas<br />Secure Data Destruction<br />Demo<br />- Data Destruction Software<br />Topic B: Securing Embedded and Specialized Systems<br />Embedded Systems<br />Specialized Systems<br />Additional System Types<br />Communication Considerations<br />Constraints<br />Chapter 4 Review
5	Cryptography	Cryptography<br />Topic A: Cryptographic Concepts<br />Introduction to Cryptography<br />Common Use Cases<br />Integrity Verification<br />Understanding Keys<br />Crypto Limitations<br />Quantum<br />Additional Cryptographic Types<br />Topic B: Public Key Infrastructures<br />Introduction to PKIs<br />Certificate Authorities<br />Certificates<br />Certificate Verification<br />Certificate Formats<br />Demo<br />- Implementing PKI<br />Additional Concepts<br />Chapter 5 Review
6	Implementing Secure Networks	Implementing Secure Networks<br />Topic A: Implement Secure Protocols<br />Network Protocols<br />Use Cases<br />Application Layer Protocols<br />IP Security<br />Topic B: Implement Secure Network Designs<br />Network Segmentation<br />High Availability<br />Virtual Private Networks<br />Secure Network Appliances<br />Firewalls<br />Demo- Configuring a Host -Based Firewall<br />Additional Network Security Concepts<br />Topic C: Implementing Security in the Cloud<br />Cloud Security Controls<br />Cloud Storage Security<br />Cloud Network Security<br />Compute Security<br />Additional Cloud Solutions<br />Topic D: Implement Wireless Security<br />Cryptographic Protocols<br />Authentication Protocols<br />Authentication Methods<br />Installation Considerations<br />Topic E: Implement Secure Mobile Solutions<br />Deployment Models<br />Connection Methods and Receivers<br />Mobile Device Management (MDM)<br />Mobile Devices<br />Enforcement and Monitoring<br />Additional Controls<br />Chapter 6 Review<br />
7	Implementing Secure Hosts and Identities	Implementing Secure Hosts and Identities<br />Topic A: Implement Authentication and Authorization Systems<br />Understanding Identity<br />Access Control Methods<br />Demo<br />- Role<br />-Based Access Control<br />Authentication Management<br />Remote Access Authentication<br />Authentication and Authorization Protocols<br />Topic B: Implement Identity and Account Management Controls<br />Account Types<br />Account Policies<br />Demo<br />- Configuring Account Policies<br />Additional Identity Terms<br />Topic C: Implement Host and Application Security Solutions<br />Endpoint Protection<br />Client Level Protections<br />Network Level Protections<br />Boot Integrity<br />Database Security<br />System Hardening<br />Application Security<br />Chapter 7 Review<br />
8	Operational Procedures	Operational Procedures<br />Topic A: Using Tools to Assess Security<br />Network Reconnaissance and Discovery<br />Network Tools<br />Network Tools (cont.)<br />Demo<br />- Using Network Tools<br />File Manipulation Tools<br />Packet Capture and Relay<br />Shell and Script Environments<br />Forensics Tools<br />Topic B: Utilizing Data Sources for Investigation<br />Vulnerability Scan Output<br />SIEM Dashboards<br />Log Files<br />Additional Monitoring<br />Topic C: Applying Mitigation Techniques<br />Reconfiguring Endpoint Solutions<br />Configuration Changes<br />Additional Mitigation Techniques<br />Chapter 8 Review<br />
9	Incident Response and Forensics	Incident Response and Forensics<br />Topic A: Incident Response Policies and Procedures<br />Incident Response Plans<br />Incident Response Process<br />Exercises<br />Attack Frameworks<br />Additional Plans<br />Demo<br />- Examining IRPs<br />Topic B: Understanding Digital Forensics<br />Introduction to Forensics<br />Evidence Categories<br />Documentation and Evidence<br />Acquisition Concepts<br />Integrity<br />Additional Concepts<br />Chapter 9 Review
10	Governance, Risk, and Compliance	Governance, Risk, and Compliance<br />Topic A: Introduction to Control Types<br />Security Controls<br />Control Categories<br />Control Types<br />Topic B: Understanding Governance<br />Introduction to Governance<br />Regulations and Standards<br />Key Frameworks<br />Benchmarks<br />Demo - Data Loss Prevention (DLP)<br />Topic C: Implementing Security Policies<br />Personnel-Based Policies<br />Personnel-Based Policies (cont.)<br />Third-Party Risk Management<br />Data<br />Credential Policies<br />Topic D: Implementing Risk Management<br />Risk Types<br />Risk Management Strategies<br />Risk Analysis<br />Risk Analysis (cont.)<br />Disasters<br />Business Impact Analysis<br />Topic E: Compliance with Privacy and Sensitive Data<br />Organizational Consequences<br />Data Types<br />Privacy Enhancing Technologies<br />Roles and Responsibilities<br />Chapter 10 Review<br />Course Closure

Understanding Threats, Attacks, and Vulnerabilities

Instructor Introduction
Course Introduction
Understanding Threats, Attacks, and Vulnerabilities
Topic A: Introduction to Security Concepts
Security Fundamentals
Security Terms
Topic B: Identifying Threat Actors and Vectors
Actors and Threats
Hackers
Actor Attributes
Attack Vectors
Information Gathering
Intelligence Sources
Research Sources
Demo - Research Sources
Topic C: Understanding Vulnerabilities
Vulnerability Fundamentals
Security Impacts
Vulnerability Types
Vulnerability Types (cont.)
Topic D: Understanding Attack Types
Attack Types
Understanding Malware Types
Attacking Passwords and User Credentials
Physical Attacks
Other Attack Types
Topic E: Identifying Social Engineering Techniques
Social Engineering Principles
Phishing
Other Social Engineering Types
Other Social Engineering Types (cont.)
Chapter 1 Review

Analyzing Attacks

Analyzing Attacks
Topic A: Security Assessment Tools and Techniques
Understanding Assessments
Threat Hunting
Vulnerability Scanning
Syslog and SIEM
SIEM Components
Topic B: Application Attacks
Application Attacks
Privilege Escalation
Cross
-Site Scripting
Injections
Application Attack Issues
Session Attacks
Additional Attacks
Topic C: Network Attacks
Introduction to Network Attacks
Wireless Network Attacks
Layer 2 Attacks
Service Attacks
Demo
- DNS Poisoning
Malicious Code Topic D: Penetration Testing
Penetration Testing
Environment Types
Pentesting Concepts
Network Reconnaissance
Exercise Types
Chapter 2 Review

Architecture and Design

Architecture and Design
Topic A: Enterprise Security Architecture
Enterprise Standardization Needs
Configuration Management
Data Protection
Additional Security Concepts
Disaster Recovery
Deception and Disruption
Topic B: Designing Authentication and Authorization
Authentication and Authorization
Authentication Methods
Authentication Technologies
Biometrics
Multifactor Authentication
Demo
- Multifactor Authentication
Topic C: Designing Resiliency
Resiliency and Cybersecurity
Redundancy Concepts
Replication Concepts
Backup Concepts
Additional Resiliency Options
Topic D: Cloud and Virtualization Concepts
Cloud Models
Cloud Types
Cloud Service Providers
Additional Cloud Concepts
Additional Cloud Concepts (cont.)
Demo
- Cloud Computing Security
Topic E: Securing Application Development and Deployment
Application Development Environments
Secure Coding Techniques
Automation Techniques
Application Design Concepts
Chapter 3 Review

Physical and System Security

Physical and System Security
Topic A: Physical Security Controls
Importance of Physical Controls
Standard Controls
Security Monitoring
Security Personnel
Secure Areas
Secure Data Destruction
Demo
- Data Destruction Software
Topic B: Securing Embedded and Specialized Systems
Embedded Systems
Specialized Systems
Additional System Types
Communication Considerations
Constraints
Chapter 4 Review

Cryptography

Cryptography
Topic A: Cryptographic Concepts
Introduction to Cryptography
Common Use Cases
Integrity Verification
Understanding Keys
Crypto Limitations
Quantum
Additional Cryptographic Types
Topic B: Public Key Infrastructures
Introduction to PKIs
Certificate Authorities
Certificates
Certificate Verification
Certificate Formats
Demo
- Implementing PKI
Additional Concepts
Chapter 5 Review

Implementing Secure Networks

Implementing Secure Networks
Topic A: Implement Secure Protocols
Network Protocols
Use Cases
Application Layer Protocols
IP Security
Topic B: Implement Secure Network Designs
Network Segmentation
High Availability
Virtual Private Networks
Secure Network Appliances
Firewalls
Demo- Configuring a Host -Based Firewall
Additional Network Security Concepts
Topic C: Implementing Security in the Cloud
Cloud Security Controls
Cloud Storage Security
Cloud Network Security
Compute Security
Additional Cloud Solutions
Topic D: Implement Wireless Security
Cryptographic Protocols
Authentication Protocols
Authentication Methods
Installation Considerations
Topic E: Implement Secure Mobile Solutions
Deployment Models
Connection Methods and Receivers
Mobile Device Management (MDM)
Mobile Devices
Enforcement and Monitoring
Additional Controls
Chapter 6 Review

Implementing Secure Hosts and Identities

Implementing Secure Hosts and Identities
Topic A: Implement Authentication and Authorization Systems
Understanding Identity
Access Control Methods
Demo
- Role
-Based Access Control
Authentication Management
Remote Access Authentication
Authentication and Authorization Protocols
Topic B: Implement Identity and Account Management Controls
Account Types
Account Policies
Demo
- Configuring Account Policies
Additional Identity Terms
Topic C: Implement Host and Application Security Solutions
Endpoint Protection
Client Level Protections
Network Level Protections
Boot Integrity
Database Security
System Hardening
Application Security
Chapter 7 Review

Operational Procedures

Operational Procedures
Topic A: Using Tools to Assess Security
Network Reconnaissance and Discovery
Network Tools
Network Tools (cont.)
Demo
- Using Network Tools
File Manipulation Tools
Packet Capture and Relay
Shell and Script Environments
Forensics Tools
Topic B: Utilizing Data Sources for Investigation
Vulnerability Scan Output
SIEM Dashboards
Log Files
Additional Monitoring
Topic C: Applying Mitigation Techniques
Reconfiguring Endpoint Solutions
Configuration Changes
Additional Mitigation Techniques
Chapter 8 Review

Incident Response and Forensics

Incident Response and Forensics
Topic A: Incident Response Policies and Procedures
Incident Response Plans
Incident Response Process
Exercises
Attack Frameworks
Additional Plans
Demo
- Examining IRPs
Topic B: Understanding Digital Forensics
Introduction to Forensics
Evidence Categories
Documentation and Evidence
Acquisition Concepts
Integrity
Additional Concepts
Chapter 9 Review

Governance, Risk, and Compliance

Governance, Risk, and Compliance
Topic A: Introduction to Control Types
Security Controls
Control Categories
Control Types
Topic B: Understanding Governance
Introduction to Governance
Regulations and Standards
Key Frameworks
Benchmarks
Demo - Data Loss Prevention (DLP)
Topic C: Implementing Security Policies
Personnel-Based Policies
Personnel-Based Policies (cont.)
Third-Party Risk Management
Data
Credential Policies
Topic D: Implementing Risk Management
Risk Types
Risk Management Strategies
Risk Analysis
Risk Analysis (cont.)
Disasters
Business Impact Analysis
Topic E: Compliance with Privacy and Sensitive Data
Organizational Consequences
Data Types
Privacy Enhancing Technologies
Roles and Responsibilities
Chapter 10 Review
Course Closure

This course includes:

Full lifetime access

CompTIA Security+ (SY0-601) - ML

Description

Course Overview

Course Prerequisites

Course Agenda