CompTIA Security+ Certification Preparation: CyberSecurity

Name: CompTIA Security+ Certification Preparation: CyberSecurity
Rating: 4.1 (255 reviews)

Launch yourself into an IT security career. Learn essential principles for network security and risk management.

Created byBally Kehal (Cybertraining365), Samy Mkacher

Last updated 12/2016

English

What you'll learn

Identify the fundamental concepts of computer security.
Identify security threats and vulnerabilities.
Manage data, application, and host security.
Implement network security.
Identify and implement access control and account management security measures.
Manage certificates.
Identify and implement compliance and operational security measures.
Manage risk.
Troubleshoot and manage security incidents.
Plan for business continuity and disaster recovery.

Course content

15 sections • 106 lectures • 10h 29m total length

Security Fundamentals7:32
This lecture covers pre-requisites and supplemental material to complete the Security+ Certification.
Introduction to Security Part 16:40
This lecture covers Challenges of Securing Information and Today’s Security Attacks
Introduction to Security Part 27:07
This lecture continues covering today’s Security Attacks and Difficulties in Defending against Attacks
What is Information Security? Part 14:40
This lecture defines Information Security, Information Security Layers, and Information Security Terminology.
What is Information Security? Part 25:10
This lecture covers Information Security Terminology.
Understanding the Importance of Information Security Part 15:40
This lecture covers Data Theft and Identity Theft, Avoiding Legal Consequences, and Maintaining Productivity
Understanding the Importance of Information Security Part 26:43
Understanding the Importance of Information Security Part 34:18
Understanding the Importance of Information Security Part 45:02
Attacks and Defenses6:17
This lecture covers Steps of an Attack and the Defenses against Attacks.
Information Security Careers and the Security+ Certification.4:26
This lecture covers the Security+ Certification, the 6 domains covered by the exam, and Types of Information Security Jobs.

Software-based Attacks Part 15:36
This lecture continues covering the types of computer viruses, Worms, Trojans, and Rootkits.
Software-based Attacks Part 26:42
This lecture covers Malware (Malicious software), Viruses, and Types of computer viruses
Software-based Attacks Part 35:11
This lecture covers Logic Bombs, Privilege Escalation, and Spam.
Software-based Attacks Part 45:20
This lecture covers Evading Spam Filters, Malware for Profit, Blocking Spam, and Spyware.
Software-based Attacks Part 55:10
This lecture covers Adware, Hardware Keyloggers, Software Keyloggers, and Botnets.
Hardware-based Attacks7:02
This lecture covers BIOS Attacks, USB Devices, IEEE 1667, Network Attached Storage (NAS), Storage Area Network (SAN), NAS and SAN Security, and Cell Phone Attacks.
Attacks on Virtual Systems Part 15:09
This lecture covers What is Virtualization and Virtual Machines.
Attacks on Virtual Systems Part 25:48
This lecture covers Virtual Servers, how Attackers use Virtual Machines, Security of Virtual Machines.

Protecting Systems Overview8:29
This lecture covers a case study of Drive-by downloads and Objectives of the course.
Hardening the Operating System Part 16:26
This lecture covers Managing Operating System Updates.
Hardening the Operating System Part 25:18
This lecture covers Updated Terminology, Patch Management Techniques, and Automated Patch Updated Services
Hardening the Operating System Part 36:26
This lecture covers Buffer Overflow Protection.
Hardening the Operating System Part 47:35
This lecture covers Date Execution Prevention (DEP), Address Space Layout Randomization (ASLR), and Configuring Operating System Protection.
Preventing Attacks that Target the Web Browser Part 16:47
This lecture covers attack techniques that target the browser including Cookies and JavaScript
Preventing Attacks that Target the Web Browser Part 27:29
This lecture covers Java, ActiveX, and Cross-site scripting.
Preventing Attacks that Target the Web Browser Part 38:05
This lecture continues covering Cross-site scripting along with, SQL Injection, Hardening Web Servers, and SMTP Open Relays.
Preventing Attacks that Target the Web Browser Part 45:59
This lecture continues covering SMTP Open Relays along with, Instant Messaging, and Peer-to-Peer (P2P) Networks.
Preventing Attacks that Target the Web Browser Part 54:22
This lecture continues covering Peer-to-Peer (P2P) Networks along with, Applying Software Security Applications like Antivirus, Popup Blockers, and Anti-Spam.
Preventing Attacks that Target the Web Browser Part 64:02
This lecture continues covering Anti-Spam, Personal Software Firewalls and Host Intrusion Detection Systems (HIDS).

Network Vulnerabilities Part 17:14
This lecture covers Media-Based Vulnerabilities, Port Mirroring, Sniffers, Network Taps, and Sniffing Attacks.
Network Vulnerabilities Part 26:42
This lecture covers Ways to Redirect Switched Traffic, Network Device Vulnerabilities, Characteristics of Weak Passwords, Network Device Vulnerabilities, ATM Passwords, Hardware Trojans, Network Device Vulnerabilities.
Categories of Attacks Part 17:00
This lecture covers Denial of Service (DoS), Real DDoS Attack, Wireless DoS, and an Easier Wireless DoS.
Categories of Attacks Part 25:00
This lecture covers Spoofing, Man-in-the-Middle Attacks, Replay Attacks, Wall of Sheep, and Sidejacking.
Methods of Network Attacks Part 17:39
This lecture covers SNMP (Simple Network Management Protocol), DNS (Domain Name System), DNS Poisoning, Local DNS Poisoning, DNS Cache Poisoning, and Sending Extra DNS Records.
Methods of Network Attacks Part 25:59
This lecture covers DNS Transfers, Protection from DNS Attacks, ARP (Address Resolution Protocol), ARP Cache Poisoning, and Results of ARP Poisoning Attacks.
Methods of Network Attacks Part 38:07
This lecture covers TCP/IP Hijacking and Wireless Attacks
Other Attacks and Frauds3:26
This lecture covers Null Sessions and Domain Name Kiting.

Crafting a Secure Network Part 15:42
This lecture covers security through network design, Subnetting at CCSF, and advantages of Subnetting.
Crafting a Secure Network Part 25:34
This lecture covers VLAN Security, Network Convergence, Vulnerabilities in Converged Networks, and Demilitarized Zone (DMZ).
Crafting a Secure Network Part 36:27
This lecture covers Network Address Translation (NAT), Port Address Translation (PAT), NAT with PAT, Network Access Control (NAC).
Applying Network Security Devices Part 16:37
This lecture covers Network Security Devices, Firewalls, Stateless Firewall Rules, Stateful Firewall Rules, Inbound and Outbound Traffic Filtering.
Applying Network Security Devices Part 26:30
This lecture covers Proxy Server, Reverse Proxy, Honeypot, Network Intrusion Detection Systems (NIDS).
Applying Network Security Devices Part 34:49
This lecture covers Intrusion Prevention Systems, Host Intrusion Prevention Systems (HIPS), and Network Intrusion Prevention Systems (NIPS).
Applying Network Security Devices Part 46:02
This lecture covers Protocol Analyzers, Internet Content Filters, and Integrated Network Security Hardware.

IEEE 802.11 Wireless Security Protections Part 15:06
This lecture covers the course Objectives, Institute of Electrical and Electronics Engineers (IEEE), IEEE 802.11 WLAN Standard, Controlling Access to a WLAN, Controlling Access, MAC Address Filtering, Wired Equivalent Privacy (WEP), and WEP Keys.
IEEE 802.11 Wireless Security Protections Part 23:37
This lecture covers WEP Encryption Process, Transmitting with WEP, Device Authentication
Vulnerabilities of IEEE 802.11 Security3:43
This lecture covers Open System Authentication, Turning Off Beaconing, MAC Address Filtering Weaknesses, WEP, and cracking WEP.
Personal Wireless Security8:13
This lecture covers WPA Personal Security, Temporal Key Integrity Protocol (TKIP), Message Integrity Check (MIC), WPA2 Personal Security, PSK Key Management Weaknesses, Pre-Shared Key Weakness, Cracking WPA, and WPA and WPA2 Compared.
Enterprise Wireless Security5:33
This lecture covers IEEE 802.11i, 802.1x Authentication, WPA Enterprise Security, WPA2 Enterprise Security, Enterprise and Personal Wireless Security Models, Enterprise Wireless Security Devices, Rogue Access Point Discovery Tools, and Types of Wireless Probes.

What is Access Control Part 15:47
This lecture covers the course objectives, Access Control, and Access Control Terminology.
What is Access Control Part 25:53
This lecture covers Access Control Models, Mandatory Access Control (MAC) model, Discretionary Access Control (DAC) model, DAC Weaknesses, User Account Control (UAC), Role Based Access Control (RBAC) model, Rule Based Access Control (RBAC) model, and Best Practices for Access Control.
Logical Access Control Methods Part 16:36
This lecture cover Access Control Methods, Access Control List (ACL), Windows Access Control Entries (ACEs), Advanced Security Settings in Windows, Group Policy, Account Restrictions, Access Control Terminology: Family Safety filter in Windows, Access Control Terminology: Parent Control, Wireless Access Point Restrictions, Passwords, Password Myths, Attacks on Passwords and How to Get the Hashes.
Logical Access Control Methods Part 27:29
This lecture cover Access Control Methods, Access Control List (ACL), Windows Access Control Entries (ACEs), Advanced Security Settings in Windows, Group Policy, Account Restrictions, Access Control Terminology: Family Safety filter in Windows, Access Control Terminology: Parent Control, Wireless Access Point Restrictions, Passwords, Password Myths, Attacks on Passwords and How to Get the Hashes.
Physical Access Control Part 15:32
This lecture covers Physical Access Control, Physical Computer Security, Rack-Mounted Server, KVM Switch, Door Security, and Deadbolt locks.
Physical Access Control Part 26:30
This lecture covers Lock Best Practices, Lockpicking at DEFCON, Cipher Lock, Cipher Lock Disadvantages, Tailgate Sensor, Physical Tokens, RFID: Radio-frequency identification, Mantrap, Mantrap, Video Surveillance, and Physical Access Logs.

Definition of Authentication6:17
This lecture covers Objectives, Password-Guessing Attacks Surge, Definition of Authentication, Authentication and Access Control Terminology, Authentication, Authorization, and Accounting (AAA), and Uses of Accounting DATA.
Authentication Credentials Part 16:13
This lecture covers Authentication Credentials, One-Time Passwords, and One-Time Passwords: OTP.
Authentication Credentials Part 28:25
This lecture covers Challenge-Based OTPs, Standard Biometrics, Dynamic Fingerprint Scanners, Behavioral Biometrics, Keystroke Dynamics, Behavioral Biometrics, Computer Footprinting in Online Banking, and Cognitive Biometrics.
Authentication Models4:25
This lecture covers Single and multi-factor authentication, Single sign-on, Windows Live ID, Windows CardSpace, OpenID.
Authentication Servers6:36
This lecture covers Authentication Servers, RADIUS (Remote Authentication Dial in User Service), RADIUS Authentication, Kerberos, Terminal Access Control Access Control System (TACACS+), and Lightweight Directory Access Protocol (LDAP).
Extended Authentication Protocols (EAP)3:55
This lecture covers Extended Authentication Protocols (EAP), Authentication Legacy Protocols, EAP Weak Protocols, and EAP Strong Protocols.
Remote Authentication and Security7:16
This lecture covers Remote Authentication and Security, Remote Access Services (RAS), Virtual Private Networks (VPNs), VPN Advantages, VPN Disadvantages, and Remote Access Policies.

Performing Vulnerability Assessments Part 15:05
This lecture covers the course Objectives, Risk Management, Assessment, and Mitigation, What Is Risk, Definition of Risk Management, Steps in Risk Management, Attributes of Assets, Hardware and Software Attributes, Determining Relative Value.
Performing Vulnerability Assessments Part 24:43
This lecture covers Threat Identification, Common Threat Agents, and Attack Trees.
Performing Vulnerability Assessments Part 36:23
This lecture covers Vulnerability Appraisals, Risk Assessment, Vulnerability Impact Scale, Anticipated Losses, Risk Mitigation.
Performing Vulnerability Assessments Part 47:59
This lecture covers Steps in Risk Management, Identifying Vulnerabilities, Vulnerability Scanning, IP Addresses and Ports, and TCP/IP Ports.
Performing Vulnerability Assessments Part 54:43
This lecture covers Port Scanners, Network Mappers, and Network Mapper Graphical Output.
Performing Vulnerability Assessments Part 67:20
This lecture covers Protocol Analyzers, Vulnerability Scanners, Acunetix Web Vulnerability Scanner, and Open Vulnerability and Assessment Language (OVAL).
Performing Vulnerability Assessments Part 77:23
This lecture continues covering OVAL, Password Crackers, Shadow File, Penetration Testing, and SATAN.

Privilege Auditing Part 15:51
This lecture covers the course Objectives, Privilege Auditing, Privilege Management, Centralized and Decentralized Structures, Assigning Privileges, Auditing System Security Settings, Auditing System Security Settings, User Access and Rights Review (continued), Windows & UNIX File/Folder Permissions, and Group Policies
Privilege Auditing Part 23:16
This lecture covers Group Policy Objects (GPOs), Policy Inheritance Flaws, Storage and Retention Policies, HIPPA Sanction for Unlocked Dumpsters, Information Lifecycle Management (ILM), and Data Categories.
Usage Auditing8:16
This lecture covers Usage Auditing, Privilege Inheritance, GPO Inheritance, Log Management, Application and Hardware Logs, Antivirus Logs, DNS Logs, Firewall Logs, Operating System Logs, System Events, Windows 10 Event Logs, Log Management Benefits, Log Management Challenges, Log Management Solutions, Change Management, Change Management Team (CMT), and CMT Duties.
Monitoring Methodologies and Tools4:19
This lecture covers Anomaly-based Monitoring, Signature-based Monitoring, Behavior-based Monitoring, Monitoring Tools, System Monitor, and Protocol Analyzers.

Requirements

Basic IT Skills

Description

Course Description

CompTIA’s S+ certificate is globally recognized for validating foundational, vendor-neutral IT security knowledge and skills. Led by certified instructors, students gain essential knowledge of the principles for network security and risk management with competency in the following:

Organizational security
System security
Access controls
Network infrastructure

The S+ certification by CompTIA is an internationally recognized credential ensuring ground-level security proficiency as well as skills for organization and security professionals to provide information, infrastructure, application and operational security. These courses prepare the student for the CompTIA S+ Certification Exam SY0-401.

What You Will Learn

The curriculum for CompTIA’s S+ Certification Course begins with supplemental material covering pre-requisites to complete the SY0-401 exam course work. After a thorough breakdown of what Security and Information are, we discuss Attacks and Defenses as well as Information Security Careers and the Security+ Certification to give students a wealth of background knowledge before diving into Systems Threats and Risks. This section covers Software-Based Attacks as well as Hardware-Based Attacks and Attacks on Virtual Systems. Once an understanding of various attacks are developed, we look at Protecting Systems by Hardening The Operating System and Preventing Attacks That Target the Web Browser; studying Network Vulnerabilities, Categories of Attacks, Methods of Network Attacks, and Other Attacks and Frauds leads us to Network Security. In the Network Security section, students learn how to Craft a Secure Network and Apply Network Security Devices. Following similar study formats about Wireless Network Security and Access Control Fundamentals brings us to more practical subjects such as Authentication, Performing Vulnerability Assessments and Conducting Security Audits. We finish the course with comprehensive overviews of Cryptography, Business Continuity and, finally, Security Policies and Training. At the end of this course, a student walks away having had practical experience and comprehensive knowledge allowing confident execution of the CompTIA S+ SY0-401 exam.

Who this course is for:

Security Engineers
Security Consultants
Network Administrators
Early Career Security Professionals
IT Technicians Or Managers
Those Desiring Vendor-Neutral Knowledge Of Information Security

CompTIA Security+ Certification Preparation: CyberSecurity

What you'll learn

Explore related topics

Course content

Security Fundamentals11 lectures • 1hr 4min

Systems Threats and Risks8 lectures • 46min

Protecting Systems11 lectures • 1hr 11min

Network Defenses8 lectures • 51min

Network Security7 lectures • 42min

Wireless Network Security5 lectures • 26min

Access Control Fundamentals6 lectures • 38min

Authentication7 lectures • 43min

Performing Vulnerability Assessments7 lectures • 44min

Conducting Security Audits4 lectures • 22min

Requirements

Description

Who this course is for: