InfosecTrain Education, profile picture
Uploaded byInfosecTrain Education
732 views

CompTIA Security+ (Plus) Certification Training Course

The InfosecTrain CompTIA Security+ SY0-701 course offers 40 hours of expert-led training covering essential domains in information security, including security concepts, threats, architecture, operations, and program management. The course provides practical exercises and hands-on labs to prepare participants for the SY0-701 certification exam, which evaluates capabilities to manage security in enterprise environments. Recommended prerequisites include at least two years of IT administration focused on security, and the course is suitable for various IT roles such as system administrators, security engineers, and network administrators.

Embed presentation

Downloaded 72 times
www.infosectrain.com + Security SY0-701 CERTIFICATION TRAINING
www.infosectrain.com CO UR SE highlights 40 Hrs of Instructor-led Training Blended Learning Model CompTIA Authorized Training Partner Certified & Experienced Trainers 4
www.infosectrain.com The CompTIA Security+ SY0-701 course from InfosecTrain, provides a comprehensive and expert-led training experience, covering five key domains that are essential for understanding and excelling in the field of information security. Participants will delve into general security concepts, threats, vulnerabilities, mitigations, security architecture, security operations, and security program management. The course features practical exercises and hands-on labs to develop participant’s skills, ensuring that participants are well-prepared for the SY0-701 certification exam. COURSE DESCRIPTION Overview
www.infosectrain.com •System Administrators •Security Engineers and Consultants •Network Administrators •IT Auditors/Penetration Testers • CompTIA A+ and CompTIA Network+ • It is recommended to have at least 2 years of experience in IT administration with a focus on security, hands-on experience with technical information security, and broad knowledge of security concepts. www.infosectrain.com PRE-Requisites TARGET-Audience
www.infosectrain.com EXAM Exam Code SY0-601 SY0-701 Launch Date 12th, November 2020 7th, November 2023 Exam Description The CompTIA Security+ certification exam ensures that candidates possess the expertise and proficiencies necessary to evaluate the security standing of enterprise environments, suggest and execute suitable security solutions, oversee and secure hybrid environments that encompass cloud, mobile, and IoT, and conduct operations in alignment with relevant laws and regulations, encompassing governance, risk management, and compliance principles. Furthermore, it attests to candidates’ ability to effectively identify, assess, and manage security events and incidents. Recommended Experience CompTIA Network+ and two years of experience in IT administration with a security focus CompTIA Network+ and two years of experience working in a security/ systems administrator job role Number of Questions Maximum of 90 Questions Exam Format Multiple Choice and Performance-Based Exam Duration 90 Minutes Passing Score 750 (on a scale of 100-900) Languages English, Japanese, Portuguese, and Spanish Retirement July 2024 TBD – Usually three years after launch Information
www.infosectrain.com COMPTIA SECURITY+ SY0-701 COURSE OBJECTIVES  Develop a comprehensive understanding of foundational security concepts and principles that serve as the cornerstone of cybersecurity.  Learn to identify, assess, and mitigate various threats, vulnerabilities, and risks that can compromise the security of digital environments.  Master the principles and practices of designing, implementing, and managing a robust security architecture that can withstand diverse cyber threats.  Gain expertise in day-to-day security operations, including incident response, monitoring, and safeguarding critical assets.  Acquire the knowledge and skills required to oversee and manage a security program effectively, ensuring compliance, governance, and the protection of valuable data. www.infosectrain.com
www.infosectrain.com URSE CONTENT Domain 1 General Security Concepts (12%) Domain 2 Threats, Vulnerabilities, and Mitigations (22%) Domain 3 Security Architecture (18%) Domain 4 Security Operations (28%) Domain 5 Security Program Management and Oversight (20%) CO
www.infosectrain.com 1.1: Compare and Contrast Various Types of Security Controls 1.2: Summarize Fundamental Security Concepts  Categories  Confidentiality, Integrity, and Availability (CIA)  Non-Repudiation  Authentication, Authorization, and Accounting (AAA)  Control •Technical •Managerial •Operational •Physical •Preventive •Deterrent •Detective •Corrective •Compensating •Directive •Authenticating People •Authenticating Systems •Authorization Models  Gap Analysis  Zero Trust General Security Concepts Domain 01
www.infosectrain.com  Physical Security •Adaptive Identity •Threat Scope Reduction •Policy-Driven Access Control •Policy Administrator •Policy Engine •Implicit Trust Zones •Subject/System •Policy Enforcement Point  Infrared  Pressure  Microwave  Ultrasonic  Control Plane •Bollards •Access Control Vestibule •Fencing •Video Surveillance •Security Guard •Access Badge •Lighting •Sensors  Data Plane
www.infosectrain.com •Honeypot •Honeynet •Honeyfile •Honeytoken  Deception and Disruption Technology  Business Processes Impacting Security Operation  Technical Implications •Approval process •Ownership •Stakeholders •Impact Analysis •Test Results •Backout Plan •Maintenance Window •Standard Operating Procedure •Allow Lists/Deny Lists •Restricted Activities •Downtime •Service Restart •Application Restart •Legacy Applications •Dependencies 1.3: Explain the Importance of Change Management Processes and the Impact to Security
www.infosectrain.com  Documentation  Version Control •Updating Diagrams •Updating Policies/Procedures •Public Key •Private Key •Key Escrow •Full-Disk •Partition •File •Volume •Database •Record  Level •Transport/Communication •Asymmetric •Symmetric •Key Exchange •Algorithms •Key length  Public Key Infrastructure (PKI)  Encryption 1.4: Explain the Importance of Using Appropriate Cryptographic Solutions
www.infosectrain.com •Trusted Platform Module (TPM) •Hardware Security Module (HSM) •Key Management System •Secure Enclave •Steganography •Tokenization •Data Masking •Certificate Authorities •Certificate Revocation Lists (CRLs) •Online Certificate Status Protocol (OCSP) •Self-Signed •Third-Party •Root of Trust •Certificate Signing Request (CSR) Generation •Wildcard  Tools •Hashing •Salting •Digital Signatures •Key Stretching •Blockchain •Open Public Ledger •Certificates  Obfuscation
www.infosectrain.com Domain 02  Threat Actors  Attributes of Actors  Motivations •Nation-State •Unskilled Attacker •Hacktivist •Insider Threat •Organized Crime •Shadow IT •Internal/External •Resources/Funding •Level of Sophistication/Capability •Data Exfiltration •Espionage •Service Disruption •Blackmail •Financial Gain •Philosophical/Political Beliefs •Ethical •Revenge •Disruption/Chaos •War Threats, Vulnerabilities, and Mitigations 2.1: Compare and Contrast Common Threat Actors and Motivations
www.infosectrain.com  Message-Based •Image-Based •File-Based •Voice Call •Removable Device •Vulnerable Software •Unsupported Systems and Applications •Unsecure Networks •Open Service Ports •Default Credentials •Supply Chain •Email •Short Message Service (SMS) •Instant Messaging (IM) •Wireless •Wired •Bluetooth •Managed Service Providers (MSPs) •Vendors •Suppliers  Client-Based vs. Agentless 2.2: Explain Common Threat Vectors and Attack Surfaces
www.infosectrain.com •Human Vectors/Social Engineering •Phishing •Vishing •Smishing •Misinformation/Disinformation •Impersonation •Business Email Compromise •Pretexting •Watering Hole •Brand Impersonation •Typosquatting •Time-of-Check (TOC) •Time-of-Use (TOU)  Application •Operating System (OS)-Based •Web-Based •Memory Injection •Buffer Overflow •Race Conditions •Malicious Update 2.3: Explain Various Types of Vulnerabilities
www.infosectrain.com •Hardware •Cryptographic •Misconfiguration •Mobile Device •Zero-Day •Virtualization •Cloud-Specific •Supply Chain •Structured Query Language (SQL) Injection •Cross-Site Scripting (XSS) •Firmware •End-of-Life •Legacy •Virtual Machine (VM) Escape •Resource Reuse •Service Provider •Hardware Provider •Software Provider •Side Loading •Jailbreaking
www.infosectrain.com  Malware Attacks  Physical Attacks  Network Attacks •Ransomware •Trojan •Worm •Spyware •Bloatware •Virus •Keylogger •Logic Bomb •Rootkit •Brute Force •Radio Frequency Identification (RFID) Cloning •Environmental •Domain Name System (DNS) Attacks •Wireless •On-Path •Credential Replay •Malicious Code •Amplified •Reflected •Distributed Denial-of-Service (DDoS) 2.4: Given a Scenario, Analyze Indicators of Malicious Activity
www.infosectrain.com  Application Attacks  Cryptographic Attacks  Password Attacks  Indicators •Injection •Buffer Overflow •Replay •Privilege Escalation •Forgery •Directory Traversal •Downgrade •Collision •Birthday •Spraying •Brute Force •Account Lockout •Concurrent Session Usage •Blocked Content •Impossible Travel •Resource Consumption •Resource Inaccessibility •Out-of-Cycle Logging •Published/Documented •Missing Logs
www.infosectrain.com  Segmentation  Access Control •Application Allow List •Isolation •Patching •Encryption •Monitoring •Least Privilege •Configuration Enforcement •Decommissioning •Hardening Techniques •Access Control List (ACL) •Permissions •Encryption •Installation of Endpoint Protection •Host-Based Firewall •Host-Based Intrusion Prevention System (HIPS) •Disabling Ports/Protocols •Default Password Changes •Removal of Unnecessary Software 2.5: Explain the Purpose of Mitigation Techniques Used to Secure the Enterprise
www.infosectrain.com Domain 03 •Responsibility Matrix •Hybrid Considerations •Third-Party Vendors •On-Premises •Centralized vs. Decentralized •Containerization •Virtualization •IoT •Industrial Control Systems (ICS)/ •Supervisory Control and Data Acquisition (SCADA) •Real-Time Operating System (RTOS) •Embedded Systems •High availability  Architecture and Infrastructure Concepts •Cloud •Infrastructure as Code (IaC) •Serverless •Microservices •Network Infrastructure Security Architecture 3.1: Compare and Contrast Security Implications of Different Architecture Models
www.infosectrain.com  Considerations •Availability •Resilience •Cost •Responsiveness •Scalability •Ease of Deployment •Risk Transference •Ease of Recovery •Patch Availability •Inability to Patch •Power •Compute  Infrastructure Considerations •Device Placement •Security Zones •Attack Surface •Connectivity •Failure Modes  Device Attribute •Fail-Open •Fail-Closed •Active vs. Passive •Inline vs. Tap/Monitor 3.2: Given a Scenario, Apply Security Principles to Secure Enterprise
www.infosectrain.com •Jump Server •Proxy Server •Intrusion Prevention System (IPS)/Intrusion Detection System (IDS) •Load Balancer •Sensor •802.1X •Extensible Authentication •Web Application Firewall (WAF) •Unified Threat Management (UTM) •Next-Generation Firewall (NGFW) •Layer 4/Layer 7 •Virtual Private Network (VPN) •Remote Access •Tunneling •Software-Defined Wide Area Network (SD-WAN) •Secure Access Service Edge (SASE) •Transport Layer Security (TLS) •Internet Protocol Security (IPSec)  Network Appliances  Port Security  Firewall Types  Secure Communication/Access  Selection of Effective Controls
www.infosectrain.com  Data Types  Data Classifications  General Data Considerations •Regulated •Trade Secret •Intellectual Property •Legal Information •Financial Information •Human and Non-Human-Readable •Sensitive •Confidential •Public •Restricted •Private •Critica •Data States •Data Sovereignty •Geolocation •Data at Rest •Data in Transit •Data in Use 3.3: Compare and Contrast Concepts and Strategies to Protect Data
www.infosectrain.com  High Availability •Site Considerations •Platform Diversity •Multi-Cloud Systems •Continuity of Operations •Capacity Planning  Methods to Secure Data •Load Balancing vs. Clustering •Hot •Cold •Warm •Geographic Dispersion •Geographic Restrictions •Encryption •Hashing •Masking •Tokenization •Obfuscation •Segmentation •Permission Restrictions 3.4: Explain the Importance of Resilience and Recovery in Security Architecture
www.infosectrain.com •People •Technology •Infrastructure •Tabletop Exercises •Fail over •Simulation •Parallel Processing •Onsite/Offsite •Frequency •Encryption •Snapshots •Recovery •Replication •Journaling •Generators •Uninterruptible Power Supply (UPS)  Testing  Backups  Power
www.infosectrain.com Domain 04  Secure Baselines  Hardening Targets  Wireless Devices •Establish •Deploy •Maintain •Mobile Devices •Workstations •Switches •Routers •Cloud Infrastructure •Servers •ICS/SCADA •Embedded Systems •RTOS •IoT devices •Installation Considerations •Site Surveys •Heat Maps Security Operations 4.1: Given a Scenario, Apply Common Security Techniques to Computing
www.infosectrain.com  Mobile Solutions  Wireless Security Settings  Application Security •Sandboxing •Monitoring •Bring your Own Device (BYOD) •Corporate-Owned, Personally Enabled (COPE) •Choose Your Own Device (CYOD) •Cellular •Wi-Fi •Bluetooth •Mobile Device Management (MDM) •Deployment Models •Wi-Fi Protected Access 3 (WPA3) •AAA/Remote Authentication •Dial-In User Service (RADIUS) •Cryptographic Protocols •Authentication Protocols •Input Validation •Secure Cookies •Static Code Analysis •Code Signing  Connection Methods
www.infosectrain.com •Ownership •Classification •Inventory •Enumeration •Sanitization •Destruction •Certification •Data retention •Vulnerability Scan •Application Security  Acquisition/Procurement Process  Assignment/Accounting  Identification Methods •Static Analysis •Dynamic Analysis •Package Monitoring  Monitoring/Asset Tracking •Disposal/Decommissioning 4.2: Explain the Security Implications of Proper Hardware, Software, and Data Asset Management 4.3: Explain Various Activities Associated with Vulnerability Management
www.infosectrain.com  Threat Feed •Confirmation  Penetration Testing  Responsible Disclosure Program •Prioritize •Common Vulnerability Scoring System (CVSS) •Common Vulnerability Enumeration (CVE) •Vulnerability Classification •Exposure Factor •Environmental Variables •Industry/Organizational Impact •Risk Tolerance •System/Process Audit •Open-Source Intelligence (OSINT) •Proprietary/Third-Party •Information-Sharing Organization •Dark Web  False Positive  False Negative •Bug Bounty Program •Analysis
www.infosectrain.com •Patching •Insurance •Segmentation •Compensating Controls •Exceptions and Exemptions •Rescanning •Audit •Verification  Vulnerability Response and Remediation  Reporting  Validation of Remediation •Systems •Applications •Infrastructure •Log Aggregation •Alerting •Scanning •Reporting  Monitoring Computing Resources  Activities 4.4: Explain Security Alerting and Monitoring Concepts and Tools
www.infosectrain.com  Archiving  Alert Response and Remediation/ Validation •Security Content Automation Protocol (SCAP) •Benchmarks •Agents/Agentless •Security Information and Event Management (SIEM) •Antivirus •Data Loss Prevention (DLP) •Simple Network Management Protocol (SNMP) Traps •NetFlow •Vulnerability Scanners •Rules •Access Lists •Ports/Protocols •Screened Subnets •Quarantine •Alert Tuning •Tools  Firewall 4.5: Given a Scenario, Modify Enterprise Capabilities to Enhance Security
www.infosectrain.com •Trends •Signatures •Agent-Based •Centralized Proxy •Universal Resource Locator (URL) Scanning •Content Categorization •Block Rules •Reputation •Group Policy •SELinux •Protocol Selection •Port Selection •Transport Method •Domain-based Message •Authentication Reporting and Conformance (DMARC) •Domain Keys Identified Mail (DKIM) •Sender Policy Framework (SPF) •Gateway  IDS/IPS  Web Filter  Operating System Security  Implementation of Secure Protocols  DNS Filtering  Email Security
www.infosectrain.com •File Integrity Monitoring •DLP •Network Access Control (NAC) •Endpoint Detection and Response (EDR)/Extended Detection and Response (XDR) •User Behavior Analytics •Lightweight Directory Access Protocol (LDAP) •Open Authorization (OAuth) •Security Assertions Markup Language (SAML)  Provisioning/De-provisioning user Accounts  Permission Assignments and Implications  Identity Proofing  Federation  Single Sign-On (SSO)  Interoperability  Attestation  Access Controls 4.6: Given a Scenario, Implement and Maintain Identity and Access Management
www.infosectrain.com •Mandatory •Discretionary •Role-Based •Rule-Based •Attribute-Based •Time-of-Day Restrictions •Least Privilege •Implementations •Password Best Practices • Factors  Multi Factor Authentication  Password Concepts •Biometrics •Hard/Soft Authentication Tokens •Security Keys •Length •Complexity •Reuse •Expiration •Age •Something You Know •Something You Have •Something You Are •Somewhere You Are
www.infosectrain.com •Password Managers •Passwordless  Privileged Access Management Tools •Just-in-Time Permissions •Password Vaulting •Ephemeral Credentials •User Provisioning •Resource Provisioning •Guard Rails •Security Groups •Ticket Creation •Escalation •Enabling/Disabling Services and Access •Continuous Integration and Testing •Integrations and Application Programming Interfaces (APIs) •Efficiency/Time Saving •Enforcing Baselines •Standard Infrastructure Configurations •Scaling in a Secure Manner  Use Cases of Automation and Scripting  Benefits 4.7: Explain the Importance of Automation and Orchestration Related to Secure Operations
www.infosectrain.com •Employee Retention •Reaction Time •Workforce Multiplier •Complexity •Cost •Single Point of Failure •Technical Debt •Ongoing Supportability •Preparation •Detection •Analysis •Containment •Eradication •Recovery •Lessons learned •Tabletop Exercise •Simulation  Process  Training  Testing  Other Considerations 4.8: Explain Appropriate Incident Response Activities
www.infosectrain.com  Root Cause Analysis  Threat Hunting  Digital Forensics  Log Data  Data Sources •Legal Hold •Chain of Custody •Acquisition •Reporting •Preservation •E-Discovery •Firewall Logs •Application Logs •Endpoint Logs •OS-Specific Security Logs •IPS/IDS Logs •Network Logs •Metadata •Vulnerability Scans •Automated Reports •Dashboards •Packet Captures 4.9: Given a Scenario, Use Data Sources to Support an Investigation
www.infosectrain.com Domain 05  Guidelines  Policies  Standards  Procedures •Acceptable Use Policy (AUP) •Information Security Policies •Business Continuity •Disaster Recovery •Incident Response •Software Development Lifecycle (SDLC) •Change Management •Password •Access Control •Physical Security •Encryption •Change Management •Onboarding/Offboarding •Playbooks Security Program Management and Oversight 5.1: Summarize Elements of Effective Security Governance
www.infosectrain.com  External Considerations  Monitoring and Revision  Types of Governance Structures  Roles and Responsibilities for Systems and Data •Regulatory •Legal •Industry •Local/Regional •National •Global •Boards •Committees •Government Entities •Centralized/Decentralized •Owners •Controllers •Processors •Custodians/Stewards
www.infosectrain.com •Ad hoc •Recurring •One-Time •Continuous •Qualitative •Quantitative •Single Loss Expectancy (SLE) •Annualized Loss Expectancy (ALE) •Annualized Rate of Occurrence (ARO) •Probability •Likelihood •Exposure Factor •Key Risk Indicators •Risk Owners •Risk Threshold  Risk Identification  Risk Assessment  Risk Analysis  Risk Register  Risk Tolerance  Risk Appetite 5.2: Explain Elements of the Risk Management Process
www.infosectrain.com •Expansionary •Conservative •Neutral •Transfer •Accept •Avoid •Mitigate •Recovery Time Objective (RTO) •Recovery Point Objective (RPO) •Mean Time to Repair (MTTR) •Mean Time Between Failures (MTBF)  Risk Management Strategies  Risk Reporting  Business Impact Analysis •Exemption •Exception
www.infosectrain.com •Penetration Testing •Right-to-Audit Clause •Evidence of Internal Audits •Independent Assessments •Supply Chain Analysis •Due Diligence •Conflict of Interest •Service-Level Agreement (SLA) •Memorandum of Agreement (MOA) •Memorandum of Understanding (MOU) •Master Service Agreement (MSA) •Work Order (WO)/Statement of Work (SOW) •Non-Disclosure Agreement (NDA) •Business Partners Agreement (BPA)  Vendor Assessment  Vendor Selection  Agreement Types  Vendor Monitoring  Questionnaires  Rules of Engagement 5.3: Explain the Processes Associated with Third-Party Risk Assessment and Management
www.infosectrain.com  Attestation  Internal  External •Active •Passive  Penetration Testing •Compliance •Audit Committee •Self-Assessments •Regulatory •Examinations •Assessment •Independent Third-Party Audit •Physical •Offensive •Defensive •Integrated •Known Environment •Partially Known Environment •Unknown Environment •Reconnaissance 5.4: Explain Types and Purposes of Audits and Assessments
www.infosectrain.com  Phishing  Anomalous Behavior Recognition  User Guidance and Training  Development  Execution  Reporting and Monitoring •Campaigns •Recognizing a Phishing Attempt •Responding to Reported Suspicious Messages •Risky •Unexpected •Unintentional •Initial •Recurring •Policy/Handbooks •Situational Awareness •Insider Threat •Password Management •Removable Media and Cables •Social Engineering •Operational Security •Hybrid/Remote Work Environments 5.5: Given a Scenario, Implement Security Awareness Practices
www.infosectrain.com System Administrator Network Administrator Security Administrator Security Specialist Security Consultant Security Engineer $84,363 $88,410 $125,000 $55,540 $114,658 $123,975 Source: Indeed, Glassdoor COURSE benefits
www.infosectrain.com www.infosectrain.com I sales@infosectrain.com

More Related Content

PDF
CompTIA-Security-Study-Guide-with-over-500-Practice-Test-Questions-Exam-SY0-7...
byemestica1
 
PPTX
2023.06 - CompTIA Security+ Everything you need to know about the new exam .pptx
byInfosec
 
PDF
Security+ SY0-701 CERTIFICATION TRAINING.pdf
byinfosecTrain
 
PDF
CompTIA Security+ SY0-601 Domain 1
byShivamSharma909
 
PPTX
CompTIA Security+.pptx
byKiranKumar24546
 
PDF
ComPTIA Overview | Comptia Security+ Book SY0-701
bybronxfugly43
 
PDF
CyberSecurity Certifications | CyberSecurity Career | CyberSecurity Certifica...
byEdureka!
 
PDF
Cybersecurity Career Paths | Skills Required in Cybersecurity Career | Learn ...
byEdureka!
 
CompTIA-Security-Study-Guide-with-over-500-Practice-Test-Questions-Exam-SY0-7...
byemestica1
 
2023.06 - CompTIA Security+ Everything you need to know about the new exam .pptx
byInfosec
 
Security+ SY0-701 CERTIFICATION TRAINING.pdf
byinfosecTrain
 
CompTIA Security+ SY0-601 Domain 1
byShivamSharma909
 
CompTIA Security+.pptx
byKiranKumar24546
 
ComPTIA Overview | Comptia Security+ Book SY0-701
bybronxfugly43
 
CyberSecurity Certifications | CyberSecurity Career | CyberSecurity Certifica...
byEdureka!
 
Cybersecurity Career Paths | Skills Required in Cybersecurity Career | Learn ...
byEdureka!
 

What's hot

PDF
SSL Pinning and Bypasses: Android and iOS
byAnant Shrivastava
 
PPTX
Zero trust Architecture
byAddWeb Solution Pvt. Ltd.
 
PDF
SC-900+2022.pdf
byRitish H
 
PPTX
Security Audit View
byPLN9 Security Services Pvt. Ltd.
 
PDF
HIPAA HiTech Security Assessment
bydata brackets
 
PDF
Cloud security
byBikashPokharel3
 
PPTX
NGIPS(Next Generation Intrusion Prevention System) in Network security presen...
byUzairAhmad81
 
PDF
Embedded Systems Security
byMalachi Jones
 
PPTX
Preparing your enteprise for Hybrid AD Join and Conditional Access
byJason Condo
 
PDF
ATT&CK Updates- ATT&CK for ICS
byMITRE ATT&CK
 
PDF
iXGuard
byTopher Jordan
 
PPTX
Webauthn Authentication
byOkta-Inc
 
PPTX
Kerberos Authentication Protocol
byBibek Subedi
 
PDF
Cybersecurity in Industrial Control Systems (ICS)
byJoan Figueras Tugas
 
PDF
Mapping to MITRE ATT&CK: Enhancing Operations Through the Tracking of Interac...
byMITRE ATT&CK
 
PPTX
6 Most Popular Threat Modeling Methodologies
byEC-Council
 
PPTX
CLOUD NATIVE SECURITY
byMaganathin Veeraragaloo
 
PPTX
(ISC)2 CCSP - Certified Cloud Security Professional
byHatem ElSahhar
 
PPTX
cyber-security-reference-architecture
byBirendra Negi ☁️
 
PPTX
SC-900 Intro
byFredBrandonAuthorMCP
 
SSL Pinning and Bypasses: Android and iOS
byAnant Shrivastava
 
Zero trust Architecture
byAddWeb Solution Pvt. Ltd.
 
SC-900+2022.pdf
byRitish H
 
Security Audit View
byPLN9 Security Services Pvt. Ltd.
 
HIPAA HiTech Security Assessment
bydata brackets
 
Cloud security
byBikashPokharel3
 
NGIPS(Next Generation Intrusion Prevention System) in Network security presen...
byUzairAhmad81
 
Embedded Systems Security
byMalachi Jones
 
Preparing your enteprise for Hybrid AD Join and Conditional Access
byJason Condo
 
ATT&CK Updates- ATT&CK for ICS
byMITRE ATT&CK
 
iXGuard
byTopher Jordan
 
Webauthn Authentication
byOkta-Inc
 
Kerberos Authentication Protocol
byBibek Subedi
 
Cybersecurity in Industrial Control Systems (ICS)
byJoan Figueras Tugas
 
Mapping to MITRE ATT&CK: Enhancing Operations Through the Tracking of Interac...
byMITRE ATT&CK
 
6 Most Popular Threat Modeling Methodologies
byEC-Council
 
CLOUD NATIVE SECURITY
byMaganathin Veeraragaloo
 
(ISC)2 CCSP - Certified Cloud Security Professional
byHatem ElSahhar
 
cyber-security-reference-architecture
byBirendra Negi ☁️
 
SC-900 Intro
byFredBrandonAuthorMCP
 

Similar to CompTIA Security+ (Plus) Certification Training Course

PDF
Cybersecurity Awareness 2.0 Enterprise Training.pdf
byinfosec train
 
PDF
Cybersecurity Awareness Enterprise Training
bypriyanshamadhwal2
 
PDF
𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐀𝐰𝐚𝐫𝐞𝐧𝐞𝐬𝐬 𝟐.𝟎 𝐄𝐧𝐭𝐞𝐫𝐩𝐫𝐢𝐬𝐞 𝐓𝐫𝐚𝐢𝐧𝐢𝐧𝐠!
byMansi Kandari
 
PDF
CompTIA Security+ SY0-601 Domain 2
byShivamSharma909
 
PDF
cissp-course content.pdf & cissp description
byMansi Kandari
 
PDF
CISSP _Course _Description and course overview
bypriyanshamadhwal2
 
PDF
Cyber security course in Trivandrum.ppt.
bysafvandotin16
 
PDF
SOC Analyst Hands on Training by InfosecTrain
bypriyanshamadhwal2
 
PDF
SOC Analyst Online Training InfosecTrain.pdf
byinfosec train
 
PPTX
cybersecurityandthe importance of the that
byJayachanduHNJc
 
PPTX
CompTIA CySA Domain 5 Compliance and Assessment.pptx
byInfosectrain3
 
PPTX
CompTIA CySA Domain 1 Threat and Vulnerability Management.pptx
byInfosectrain3
 
PPTX
Starting your Career in Information Security
byAhmed Sayed-
 
PPTX
Top 25 SOC Analyst interview questions that You Should Know.pptx
byInfosectrain3
 
PPTX
INFS2701 T2 2025 Lecture 1 Data Warehousing.pptx
bysaniyagadekar12
 
PDF
Course Slides for CS_6035_01_Security Mindset (1)
byleoyang0406
 
PDF
Beginner to Advanced Cyber Security Course in Delhi.pdf
bymanisha06650
 
PDF
An Introduction of CompTIA Security+ (SY0-701) Domain 1.pdf
byinfosecTrain
 
PDF
Comptia security plus domain SYO 701.pdf
bypriyanshamadhwal2
 
PDF
CYBER SECURITY Enginnering course .pdf
byfekiy64690
 
Cybersecurity Awareness 2.0 Enterprise Training.pdf
byinfosec train
 
Cybersecurity Awareness Enterprise Training
bypriyanshamadhwal2
 
𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐀𝐰𝐚𝐫𝐞𝐧𝐞𝐬𝐬 𝟐.𝟎 𝐄𝐧𝐭𝐞𝐫𝐩𝐫𝐢𝐬𝐞 𝐓𝐫𝐚𝐢𝐧𝐢𝐧𝐠!
byMansi Kandari
 
CompTIA Security+ SY0-601 Domain 2
byShivamSharma909
 
cissp-course content.pdf & cissp description
byMansi Kandari
 
CISSP _Course _Description and course overview
bypriyanshamadhwal2
 
Cyber security course in Trivandrum.ppt.
bysafvandotin16
 
SOC Analyst Hands on Training by InfosecTrain
bypriyanshamadhwal2
 
SOC Analyst Online Training InfosecTrain.pdf
byinfosec train
 
cybersecurityandthe importance of the that
byJayachanduHNJc
 
CompTIA CySA Domain 5 Compliance and Assessment.pptx
byInfosectrain3
 
CompTIA CySA Domain 1 Threat and Vulnerability Management.pptx
byInfosectrain3
 
Starting your Career in Information Security
byAhmed Sayed-
 
Top 25 SOC Analyst interview questions that You Should Know.pptx
byInfosectrain3
 
INFS2701 T2 2025 Lecture 1 Data Warehousing.pptx
bysaniyagadekar12
 
Course Slides for CS_6035_01_Security Mindset (1)
byleoyang0406
 
Beginner to Advanced Cyber Security Course in Delhi.pdf
bymanisha06650
 
An Introduction of CompTIA Security+ (SY0-701) Domain 1.pdf
byinfosecTrain
 
Comptia security plus domain SYO 701.pdf
bypriyanshamadhwal2
 
CYBER SECURITY Enginnering course .pdf
byfekiy64690
 

More from InfosecTrain Education

PDF
Protect Your Online World: Essential Tips to Stay Secure
byInfosecTrain Education
 
PDF
Top 12 Free and Open-Source Tools for Threat Hunting.pdf
byInfosecTrain Education
 
PDF
Top 12 Open Source Tools for Port Scanning: Boost Your Network Security Today
byInfosecTrain Education
 
PDF
Blockchain Security: Application and Challenges .pdf
byInfosecTrain Education
 
PDF
Ace the CISA Exam: Must-Know Insights for Success
byInfosecTrain Education
 
PDF
How to make a complaint to the police for Social Media Fraud.pdf
byInfosecTrain Education
 
PDF
Master the Essentials: Top 40+ Linux Commands by InfosecTrain for IT Pros! .pdf
byInfosecTrain Education
 
PDF
Demystifying Records of Processing Activities (ROPA): Essential Transparency ...
byInfosecTrain Education
 
PDF
Master DevSecOps: Join InfosecTrain’s Practical Online Training!
byInfosecTrain Education
 
PDF
Mastering CISM, CISSP, Azure Security, and CISA Exams: Your Ultimate Guide to...
byInfosecTrain Education
 
PDF
Master Your Next Audit Interview: Scenario-Based Questions Unveiled
byInfosecTrain Education
 
PDF
How to Stay Cyber Safe While Traveling: Expert Tips.pdf
byInfosecTrain Education
 
PDF
Top 10 Cybersecurity Resolutions for 2024 .pdf
byInfosecTrain Education
 
PDF
Cloud vs. Local Storage - Choose Your Data Destination.pdf
byInfosecTrain Education
 
PDF
Embrace the Core Layers of Enterprise Information Security Architecture (EISA)
byInfosecTrain Education
 
PDF
Demystifying Detection: Essential Cybersecurity Terms You Need to Know
byInfosecTrain Education
 
PDF
Navigating Cloud Data Breaches: A Strategic Approach.pdf
byInfosecTrain Education
 
PDF
Comprehensive Guide to Cybersecurity Risk Metrics: Stay Ahead of Threats.pdf
byInfosecTrain Education
 
PDF
Privacy Tech Revolution: 10 Cutting-Edge Solutions You Need to Know
byInfosecTrain Education
 
PDF
Top Event IDs Every SOC Professional Should Know
byInfosecTrain Education
 
Protect Your Online World: Essential Tips to Stay Secure
byInfosecTrain Education
 
Top 12 Free and Open-Source Tools for Threat Hunting.pdf
byInfosecTrain Education
 
Top 12 Open Source Tools for Port Scanning: Boost Your Network Security Today
byInfosecTrain Education
 
Blockchain Security: Application and Challenges .pdf
byInfosecTrain Education
 
Ace the CISA Exam: Must-Know Insights for Success
byInfosecTrain Education
 
How to make a complaint to the police for Social Media Fraud.pdf
byInfosecTrain Education
 
Master the Essentials: Top 40+ Linux Commands by InfosecTrain for IT Pros! .pdf
byInfosecTrain Education
 
Demystifying Records of Processing Activities (ROPA): Essential Transparency ...
byInfosecTrain Education
 
Master DevSecOps: Join InfosecTrain’s Practical Online Training!
byInfosecTrain Education
 
Mastering CISM, CISSP, Azure Security, and CISA Exams: Your Ultimate Guide to...
byInfosecTrain Education
 
Master Your Next Audit Interview: Scenario-Based Questions Unveiled
byInfosecTrain Education
 
How to Stay Cyber Safe While Traveling: Expert Tips.pdf
byInfosecTrain Education
 
Top 10 Cybersecurity Resolutions for 2024 .pdf
byInfosecTrain Education
 
Cloud vs. Local Storage - Choose Your Data Destination.pdf
byInfosecTrain Education
 
Embrace the Core Layers of Enterprise Information Security Architecture (EISA)
byInfosecTrain Education
 
Demystifying Detection: Essential Cybersecurity Terms You Need to Know
byInfosecTrain Education
 
Navigating Cloud Data Breaches: A Strategic Approach.pdf
byInfosecTrain Education
 
Comprehensive Guide to Cybersecurity Risk Metrics: Stay Ahead of Threats.pdf
byInfosecTrain Education
 
Privacy Tech Revolution: 10 Cutting-Edge Solutions You Need to Know
byInfosecTrain Education
 
Top Event IDs Every SOC Professional Should Know
byInfosecTrain Education
 

Recently uploaded

PPTX
" Jaya : Silence as Resistance " - That long silence
bydharabhandari35
 
PDF
Risks and opportunities of artificial intelligence in education: A critical view
byYannis
 
PDF
Oscillations /Revision notes prepared by K sandeep swamy (Msc,BEd)/For online...
bySandeep Swamy
 
PDF
Fast Followers Project, Embedding Net Zero into Wakefield Metropolitan Distri...
byAssociation for Project Management
 
PDF
Infrared Spectroscopy (IR spectroscopy).ppt
byLife sciences
 
PPTX
Day 2 ppt english.powerpoint presentation ppt
byJeahMaeMedez
 
PDF
VIVA or SHORT ANSWER QUESTIONS or 2 MARKS QUESTIONS CHILD HEALTH NURSING.pdf
byPRADEEP ABOTHU
 
PDF
Beak Modifications by Dr. Ramzan Virani pptx.pdf
byDr. Ramzan Virani
 
PPTX
ALL London Event, January 17th 2026, at the British Film Institite, South Bank.
bySteve Smith
 
PPTX
Poster Based Ethical Reflection - Dharma and Values Poster.pptx
byRajshreeBeneymadoo
 
PPTX
Statistical Data Analysis using R Programming.pptx
byVETRISELVIP1
 
PPTX
Metabolism ( BIOCHEMISTRY & CLINICAL PATHOLOGY )
byBushraDeshpande
 
PPTX
Ultrasound .pptx by Nagmani ojha (paramedical department)(Radiation technolog...
bynagmaniojha8
 
PDF
Lamarckism: Theory of Evolution, Principles, Examples, Objections and Neo-Lam...
byIPGDCWA,NAMPALLY
 
PPTX
Mohan - "A man of silence and authority"
bynidhibachauhan46
 
PPTX
Toba Tek Singh - Visualising Partition through Manto's Lens
byMiral Joshi
 
PPTX
christal dinesha (1).ppt seminar topic..
bychristaldinesha
 
PPTX
PREVENTIVE PEDIATRICS.pptx
byBANDITA PATRA
 
PDF
U.S. Departments of Education and Treasury fact sheet
byMebane Rash
 
PPTX
How to Create & Manage Wizard in Odoo 18
byCeline George
 
" Jaya : Silence as Resistance " - That long silence
bydharabhandari35
 
Risks and opportunities of artificial intelligence in education: A critical view
byYannis
 
Oscillations /Revision notes prepared by K sandeep swamy (Msc,BEd)/For online...
bySandeep Swamy
 
Fast Followers Project, Embedding Net Zero into Wakefield Metropolitan Distri...
byAssociation for Project Management
 
Infrared Spectroscopy (IR spectroscopy).ppt
byLife sciences
 
Day 2 ppt english.powerpoint presentation ppt
byJeahMaeMedez
 
VIVA or SHORT ANSWER QUESTIONS or 2 MARKS QUESTIONS CHILD HEALTH NURSING.pdf
byPRADEEP ABOTHU
 
Beak Modifications by Dr. Ramzan Virani pptx.pdf
byDr. Ramzan Virani
 
ALL London Event, January 17th 2026, at the British Film Institite, South Bank.
bySteve Smith
 
Poster Based Ethical Reflection - Dharma and Values Poster.pptx
byRajshreeBeneymadoo
 
Statistical Data Analysis using R Programming.pptx
byVETRISELVIP1
 
Metabolism ( BIOCHEMISTRY & CLINICAL PATHOLOGY )
byBushraDeshpande
 
Ultrasound .pptx by Nagmani ojha (paramedical department)(Radiation technolog...
bynagmaniojha8
 
Lamarckism: Theory of Evolution, Principles, Examples, Objections and Neo-Lam...
byIPGDCWA,NAMPALLY
 
Mohan - "A man of silence and authority"
bynidhibachauhan46
 
Toba Tek Singh - Visualising Partition through Manto's Lens
byMiral Joshi
 
christal dinesha (1).ppt seminar topic..
bychristaldinesha
 
PREVENTIVE PEDIATRICS.pptx
byBANDITA PATRA
 
U.S. Departments of Education and Treasury fact sheet
byMebane Rash
 
How to Create & Manage Wizard in Odoo 18
byCeline George
 

CompTIA Security+ (Plus) Certification Training Course

  • 1.
  • 2.
    www.infosectrain.com CO UR SE highlights 40 Hrs of Instructor-ledTraining Blended Learning Model CompTIA Authorized Training Partner Certified & Experienced Trainers 4
  • 3.
    www.infosectrain.com The CompTIA Security+SY0-701 course from InfosecTrain, provides a comprehensive and expert-led training experience, covering five key domains that are essential for understanding and excelling in the field of information security. Participants will delve into general security concepts, threats, vulnerabilities, mitigations, security architecture, security operations, and security program management. The course features practical exercises and hands-on labs to develop participant’s skills, ensuring that participants are well-prepared for the SY0-701 certification exam. COURSE DESCRIPTION Overview
  • 4.
    www.infosectrain.com •System Administrators •Security Engineersand Consultants •Network Administrators •IT Auditors/Penetration Testers • CompTIA A+ and CompTIA Network+ • It is recommended to have at least 2 years of experience in IT administration with a focus on security, hands-on experience with technical information security, and broad knowledge of security concepts. www.infosectrain.com PRE-Requisites TARGET-Audience
  • 5.
    www.infosectrain.com EXAM Exam Code SY0-601SY0-701 Launch Date 12th, November 2020 7th, November 2023 Exam Description The CompTIA Security+ certification exam ensures that candidates possess the expertise and proficiencies necessary to evaluate the security standing of enterprise environments, suggest and execute suitable security solutions, oversee and secure hybrid environments that encompass cloud, mobile, and IoT, and conduct operations in alignment with relevant laws and regulations, encompassing governance, risk management, and compliance principles. Furthermore, it attests to candidates’ ability to effectively identify, assess, and manage security events and incidents. Recommended Experience CompTIA Network+ and two years of experience in IT administration with a security focus CompTIA Network+ and two years of experience working in a security/ systems administrator job role Number of Questions Maximum of 90 Questions Exam Format Multiple Choice and Performance-Based Exam Duration 90 Minutes Passing Score 750 (on a scale of 100-900) Languages English, Japanese, Portuguese, and Spanish Retirement July 2024 TBD – Usually three years after launch Information
  • 6.
    www.infosectrain.com COMPTIA SECURITY+ SY0-701 COURSEOBJECTIVES  Develop a comprehensive understanding of foundational security concepts and principles that serve as the cornerstone of cybersecurity.  Learn to identify, assess, and mitigate various threats, vulnerabilities, and risks that can compromise the security of digital environments.  Master the principles and practices of designing, implementing, and managing a robust security architecture that can withstand diverse cyber threats.  Gain expertise in day-to-day security operations, including incident response, monitoring, and safeguarding critical assets.  Acquire the knowledge and skills required to oversee and manage a security program effectively, ensuring compliance, governance, and the protection of valuable data. www.infosectrain.com
  • 7.
    www.infosectrain.com URSE CONTENT Domain 1General Security Concepts (12%) Domain 2 Threats, Vulnerabilities, and Mitigations (22%) Domain 3 Security Architecture (18%) Domain 4 Security Operations (28%) Domain 5 Security Program Management and Oversight (20%) CO
  • 8.
    www.infosectrain.com 1.1: Compare andContrast Various Types of Security Controls 1.2: Summarize Fundamental Security Concepts  Categories  Confidentiality, Integrity, and Availability (CIA)  Non-Repudiation  Authentication, Authorization, and Accounting (AAA)  Control •Technical •Managerial •Operational •Physical •Preventive •Deterrent •Detective •Corrective •Compensating •Directive •Authenticating People •Authenticating Systems •Authorization Models  Gap Analysis  Zero Trust General Security Concepts Domain 01
  • 9.
    www.infosectrain.com  Physical Security •AdaptiveIdentity •Threat Scope Reduction •Policy-Driven Access Control •Policy Administrator •Policy Engine •Implicit Trust Zones •Subject/System •Policy Enforcement Point  Infrared  Pressure  Microwave  Ultrasonic  Control Plane •Bollards •Access Control Vestibule •Fencing •Video Surveillance •Security Guard •Access Badge •Lighting •Sensors  Data Plane
  • 10.
    www.infosectrain.com •Honeypot •Honeynet •Honeyfile •Honeytoken  Deception andDisruption Technology  Business Processes Impacting Security Operation  Technical Implications •Approval process •Ownership •Stakeholders •Impact Analysis •Test Results •Backout Plan •Maintenance Window •Standard Operating Procedure •Allow Lists/Deny Lists •Restricted Activities •Downtime •Service Restart •Application Restart •Legacy Applications •Dependencies 1.3: Explain the Importance of Change Management Processes and the Impact to Security
  • 11.
    www.infosectrain.com  Documentation  VersionControl •Updating Diagrams •Updating Policies/Procedures •Public Key •Private Key •Key Escrow •Full-Disk •Partition •File •Volume •Database •Record  Level •Transport/Communication •Asymmetric •Symmetric •Key Exchange •Algorithms •Key length  Public Key Infrastructure (PKI)  Encryption 1.4: Explain the Importance of Using Appropriate Cryptographic Solutions
  • 12.
    www.infosectrain.com •Trusted Platform Module(TPM) •Hardware Security Module (HSM) •Key Management System •Secure Enclave •Steganography •Tokenization •Data Masking •Certificate Authorities •Certificate Revocation Lists (CRLs) •Online Certificate Status Protocol (OCSP) •Self-Signed •Third-Party •Root of Trust •Certificate Signing Request (CSR) Generation •Wildcard  Tools •Hashing •Salting •Digital Signatures •Key Stretching •Blockchain •Open Public Ledger •Certificates  Obfuscation
  • 13.
    www.infosectrain.com Domain 02  ThreatActors  Attributes of Actors  Motivations •Nation-State •Unskilled Attacker •Hacktivist •Insider Threat •Organized Crime •Shadow IT •Internal/External •Resources/Funding •Level of Sophistication/Capability •Data Exfiltration •Espionage •Service Disruption •Blackmail •Financial Gain •Philosophical/Political Beliefs •Ethical •Revenge •Disruption/Chaos •War Threats, Vulnerabilities, and Mitigations 2.1: Compare and Contrast Common Threat Actors and Motivations
  • 14.
    www.infosectrain.com  Message-Based •Image-Based •File-Based •Voice Call •RemovableDevice •Vulnerable Software •Unsupported Systems and Applications •Unsecure Networks •Open Service Ports •Default Credentials •Supply Chain •Email •Short Message Service (SMS) •Instant Messaging (IM) •Wireless •Wired •Bluetooth •Managed Service Providers (MSPs) •Vendors •Suppliers  Client-Based vs. Agentless 2.2: Explain Common Threat Vectors and Attack Surfaces
  • 15.
    www.infosectrain.com •Human Vectors/Social Engineering •Phishing •Vishing •Smishing •Misinformation/Disinformation •Impersonation •BusinessEmail Compromise •Pretexting •Watering Hole •Brand Impersonation •Typosquatting •Time-of-Check (TOC) •Time-of-Use (TOU)  Application •Operating System (OS)-Based •Web-Based •Memory Injection •Buffer Overflow •Race Conditions •Malicious Update 2.3: Explain Various Types of Vulnerabilities
  • 16.
    www.infosectrain.com •Hardware •Cryptographic •Misconfiguration •Mobile Device •Zero-Day •Virtualization •Cloud-Specific •Supply Chain •StructuredQuery Language (SQL) Injection •Cross-Site Scripting (XSS) •Firmware •End-of-Life •Legacy •Virtual Machine (VM) Escape •Resource Reuse •Service Provider •Hardware Provider •Software Provider •Side Loading •Jailbreaking
  • 17.
    www.infosectrain.com  Malware Attacks Physical Attacks  Network Attacks •Ransomware •Trojan •Worm •Spyware •Bloatware •Virus •Keylogger •Logic Bomb •Rootkit •Brute Force •Radio Frequency Identification (RFID) Cloning •Environmental •Domain Name System (DNS) Attacks •Wireless •On-Path •Credential Replay •Malicious Code •Amplified •Reflected •Distributed Denial-of-Service (DDoS) 2.4: Given a Scenario, Analyze Indicators of Malicious Activity
  • 18.
    www.infosectrain.com  Application Attacks Cryptographic Attacks  Password Attacks  Indicators •Injection •Buffer Overflow •Replay •Privilege Escalation •Forgery •Directory Traversal •Downgrade •Collision •Birthday •Spraying •Brute Force •Account Lockout •Concurrent Session Usage •Blocked Content •Impossible Travel •Resource Consumption •Resource Inaccessibility •Out-of-Cycle Logging •Published/Documented •Missing Logs
  • 19.
    www.infosectrain.com  Segmentation  AccessControl •Application Allow List •Isolation •Patching •Encryption •Monitoring •Least Privilege •Configuration Enforcement •Decommissioning •Hardening Techniques •Access Control List (ACL) •Permissions •Encryption •Installation of Endpoint Protection •Host-Based Firewall •Host-Based Intrusion Prevention System (HIPS) •Disabling Ports/Protocols •Default Password Changes •Removal of Unnecessary Software 2.5: Explain the Purpose of Mitigation Techniques Used to Secure the Enterprise
  • 20.
    www.infosectrain.com Domain 03 •Responsibility Matrix •HybridConsiderations •Third-Party Vendors •On-Premises •Centralized vs. Decentralized •Containerization •Virtualization •IoT •Industrial Control Systems (ICS)/ •Supervisory Control and Data Acquisition (SCADA) •Real-Time Operating System (RTOS) •Embedded Systems •High availability  Architecture and Infrastructure Concepts •Cloud •Infrastructure as Code (IaC) •Serverless •Microservices •Network Infrastructure Security Architecture 3.1: Compare and Contrast Security Implications of Different Architecture Models
  • 21.
    www.infosectrain.com  Considerations •Availability •Resilience •Cost •Responsiveness •Scalability •Ease ofDeployment •Risk Transference •Ease of Recovery •Patch Availability •Inability to Patch •Power •Compute  Infrastructure Considerations •Device Placement •Security Zones •Attack Surface •Connectivity •Failure Modes  Device Attribute •Fail-Open •Fail-Closed •Active vs. Passive •Inline vs. Tap/Monitor 3.2: Given a Scenario, Apply Security Principles to Secure Enterprise
  • 22.
    www.infosectrain.com •Jump Server •Proxy Server •IntrusionPrevention System (IPS)/Intrusion Detection System (IDS) •Load Balancer •Sensor •802.1X •Extensible Authentication •Web Application Firewall (WAF) •Unified Threat Management (UTM) •Next-Generation Firewall (NGFW) •Layer 4/Layer 7 •Virtual Private Network (VPN) •Remote Access •Tunneling •Software-Defined Wide Area Network (SD-WAN) •Secure Access Service Edge (SASE) •Transport Layer Security (TLS) •Internet Protocol Security (IPSec)  Network Appliances  Port Security  Firewall Types  Secure Communication/Access  Selection of Effective Controls
  • 23.
    www.infosectrain.com  Data Types Data Classifications  General Data Considerations •Regulated •Trade Secret •Intellectual Property •Legal Information •Financial Information •Human and Non-Human-Readable •Sensitive •Confidential •Public •Restricted •Private •Critica •Data States •Data Sovereignty •Geolocation •Data at Rest •Data in Transit •Data in Use 3.3: Compare and Contrast Concepts and Strategies to Protect Data
  • 24.
    www.infosectrain.com  High Availability •SiteConsiderations •Platform Diversity •Multi-Cloud Systems •Continuity of Operations •Capacity Planning  Methods to Secure Data •Load Balancing vs. Clustering •Hot •Cold •Warm •Geographic Dispersion •Geographic Restrictions •Encryption •Hashing •Masking •Tokenization •Obfuscation •Segmentation •Permission Restrictions 3.4: Explain the Importance of Resilience and Recovery in Security Architecture
  • 25.
    www.infosectrain.com •People •Technology •Infrastructure •Tabletop Exercises •Fail over •Simulation •ParallelProcessing •Onsite/Offsite •Frequency •Encryption •Snapshots •Recovery •Replication •Journaling •Generators •Uninterruptible Power Supply (UPS)  Testing  Backups  Power
  • 26.
    www.infosectrain.com Domain 04  SecureBaselines  Hardening Targets  Wireless Devices •Establish •Deploy •Maintain •Mobile Devices •Workstations •Switches •Routers •Cloud Infrastructure •Servers •ICS/SCADA •Embedded Systems •RTOS •IoT devices •Installation Considerations •Site Surveys •Heat Maps Security Operations 4.1: Given a Scenario, Apply Common Security Techniques to Computing
  • 27.
    www.infosectrain.com  Mobile Solutions Wireless Security Settings  Application Security •Sandboxing •Monitoring •Bring your Own Device (BYOD) •Corporate-Owned, Personally Enabled (COPE) •Choose Your Own Device (CYOD) •Cellular •Wi-Fi •Bluetooth •Mobile Device Management (MDM) •Deployment Models •Wi-Fi Protected Access 3 (WPA3) •AAA/Remote Authentication •Dial-In User Service (RADIUS) •Cryptographic Protocols •Authentication Protocols •Input Validation •Secure Cookies •Static Code Analysis •Code Signing  Connection Methods
  • 28.
    www.infosectrain.com •Ownership •Classification •Inventory •Enumeration •Sanitization •Destruction •Certification •Data retention •Vulnerability Scan •ApplicationSecurity  Acquisition/Procurement Process  Assignment/Accounting  Identification Methods •Static Analysis •Dynamic Analysis •Package Monitoring  Monitoring/Asset Tracking •Disposal/Decommissioning 4.2: Explain the Security Implications of Proper Hardware, Software, and Data Asset Management 4.3: Explain Various Activities Associated with Vulnerability Management
  • 29.
    www.infosectrain.com  Threat Feed •Confirmation Penetration Testing  Responsible Disclosure Program •Prioritize •Common Vulnerability Scoring System (CVSS) •Common Vulnerability Enumeration (CVE) •Vulnerability Classification •Exposure Factor •Environmental Variables •Industry/Organizational Impact •Risk Tolerance •System/Process Audit •Open-Source Intelligence (OSINT) •Proprietary/Third-Party •Information-Sharing Organization •Dark Web  False Positive  False Negative •Bug Bounty Program •Analysis
  • 30.
    www.infosectrain.com •Patching •Insurance •Segmentation •Compensating Controls •Exceptions andExemptions •Rescanning •Audit •Verification  Vulnerability Response and Remediation  Reporting  Validation of Remediation •Systems •Applications •Infrastructure •Log Aggregation •Alerting •Scanning •Reporting  Monitoring Computing Resources  Activities 4.4: Explain Security Alerting and Monitoring Concepts and Tools
  • 31.
    www.infosectrain.com  Archiving  AlertResponse and Remediation/ Validation •Security Content Automation Protocol (SCAP) •Benchmarks •Agents/Agentless •Security Information and Event Management (SIEM) •Antivirus •Data Loss Prevention (DLP) •Simple Network Management Protocol (SNMP) Traps •NetFlow •Vulnerability Scanners •Rules •Access Lists •Ports/Protocols •Screened Subnets •Quarantine •Alert Tuning •Tools  Firewall 4.5: Given a Scenario, Modify Enterprise Capabilities to Enhance Security
  • 32.
    www.infosectrain.com •Trends •Signatures •Agent-Based •Centralized Proxy •Universal ResourceLocator (URL) Scanning •Content Categorization •Block Rules •Reputation •Group Policy •SELinux •Protocol Selection •Port Selection •Transport Method •Domain-based Message •Authentication Reporting and Conformance (DMARC) •Domain Keys Identified Mail (DKIM) •Sender Policy Framework (SPF) •Gateway  IDS/IPS  Web Filter  Operating System Security  Implementation of Secure Protocols  DNS Filtering  Email Security
  • 33.
    www.infosectrain.com •File Integrity Monitoring •DLP •NetworkAccess Control (NAC) •Endpoint Detection and Response (EDR)/Extended Detection and Response (XDR) •User Behavior Analytics •Lightweight Directory Access Protocol (LDAP) •Open Authorization (OAuth) •Security Assertions Markup Language (SAML)  Provisioning/De-provisioning user Accounts  Permission Assignments and Implications  Identity Proofing  Federation  Single Sign-On (SSO)  Interoperability  Attestation  Access Controls 4.6: Given a Scenario, Implement and Maintain Identity and Access Management
  • 34.
    www.infosectrain.com •Mandatory •Discretionary •Role-Based •Rule-Based •Attribute-Based •Time-of-Day Restrictions •Least Privilege •Implementations •PasswordBest Practices • Factors  Multi Factor Authentication  Password Concepts •Biometrics •Hard/Soft Authentication Tokens •Security Keys •Length •Complexity •Reuse •Expiration •Age •Something You Know •Something You Have •Something You Are •Somewhere You Are
  • 35.
    www.infosectrain.com •Password Managers •Passwordless  PrivilegedAccess Management Tools •Just-in-Time Permissions •Password Vaulting •Ephemeral Credentials •User Provisioning •Resource Provisioning •Guard Rails •Security Groups •Ticket Creation •Escalation •Enabling/Disabling Services and Access •Continuous Integration and Testing •Integrations and Application Programming Interfaces (APIs) •Efficiency/Time Saving •Enforcing Baselines •Standard Infrastructure Configurations •Scaling in a Secure Manner  Use Cases of Automation and Scripting  Benefits 4.7: Explain the Importance of Automation and Orchestration Related to Secure Operations
  • 36.
    www.infosectrain.com •Employee Retention •Reaction Time •WorkforceMultiplier •Complexity •Cost •Single Point of Failure •Technical Debt •Ongoing Supportability •Preparation •Detection •Analysis •Containment •Eradication •Recovery •Lessons learned •Tabletop Exercise •Simulation  Process  Training  Testing  Other Considerations 4.8: Explain Appropriate Incident Response Activities
  • 37.
    www.infosectrain.com  Root CauseAnalysis  Threat Hunting  Digital Forensics  Log Data  Data Sources •Legal Hold •Chain of Custody •Acquisition •Reporting •Preservation •E-Discovery •Firewall Logs •Application Logs •Endpoint Logs •OS-Specific Security Logs •IPS/IDS Logs •Network Logs •Metadata •Vulnerability Scans •Automated Reports •Dashboards •Packet Captures 4.9: Given a Scenario, Use Data Sources to Support an Investigation
  • 38.
    www.infosectrain.com Domain 05  Guidelines Policies  Standards  Procedures •Acceptable Use Policy (AUP) •Information Security Policies •Business Continuity •Disaster Recovery •Incident Response •Software Development Lifecycle (SDLC) •Change Management •Password •Access Control •Physical Security •Encryption •Change Management •Onboarding/Offboarding •Playbooks Security Program Management and Oversight 5.1: Summarize Elements of Effective Security Governance
  • 39.
    www.infosectrain.com  External Considerations Monitoring and Revision  Types of Governance Structures  Roles and Responsibilities for Systems and Data •Regulatory •Legal •Industry •Local/Regional •National •Global •Boards •Committees •Government Entities •Centralized/Decentralized •Owners •Controllers •Processors •Custodians/Stewards
  • 40.
    www.infosectrain.com •Ad hoc •Recurring •One-Time •Continuous •Qualitative •Quantitative •Single LossExpectancy (SLE) •Annualized Loss Expectancy (ALE) •Annualized Rate of Occurrence (ARO) •Probability •Likelihood •Exposure Factor •Key Risk Indicators •Risk Owners •Risk Threshold  Risk Identification  Risk Assessment  Risk Analysis  Risk Register  Risk Tolerance  Risk Appetite 5.2: Explain Elements of the Risk Management Process
  • 41.
    www.infosectrain.com •Expansionary •Conservative •Neutral •Transfer •Accept •Avoid •Mitigate •Recovery Time Objective(RTO) •Recovery Point Objective (RPO) •Mean Time to Repair (MTTR) •Mean Time Between Failures (MTBF)  Risk Management Strategies  Risk Reporting  Business Impact Analysis •Exemption •Exception
  • 42.
    www.infosectrain.com •Penetration Testing •Right-to-Audit Clause •Evidenceof Internal Audits •Independent Assessments •Supply Chain Analysis •Due Diligence •Conflict of Interest •Service-Level Agreement (SLA) •Memorandum of Agreement (MOA) •Memorandum of Understanding (MOU) •Master Service Agreement (MSA) •Work Order (WO)/Statement of Work (SOW) •Non-Disclosure Agreement (NDA) •Business Partners Agreement (BPA)  Vendor Assessment  Vendor Selection  Agreement Types  Vendor Monitoring  Questionnaires  Rules of Engagement 5.3: Explain the Processes Associated with Third-Party Risk Assessment and Management
  • 43.
    www.infosectrain.com  Attestation  Internal External •Active •Passive  Penetration Testing •Compliance •Audit Committee •Self-Assessments •Regulatory •Examinations •Assessment •Independent Third-Party Audit •Physical •Offensive •Defensive •Integrated •Known Environment •Partially Known Environment •Unknown Environment •Reconnaissance 5.4: Explain Types and Purposes of Audits and Assessments
  • 44.
    www.infosectrain.com  Phishing  AnomalousBehavior Recognition  User Guidance and Training  Development  Execution  Reporting and Monitoring •Campaigns •Recognizing a Phishing Attempt •Responding to Reported Suspicious Messages •Risky •Unexpected •Unintentional •Initial •Recurring •Policy/Handbooks •Situational Awareness •Insider Threat •Password Management •Removable Media and Cables •Social Engineering •Operational Security •Hybrid/Remote Work Environments 5.5: Given a Scenario, Implement Security Awareness Practices
  • 45.
  • 46.