CompTIA Security+ – CO-SE+
CompTIA Security+
Course Code: CO-SE+
CompTIA Security+ is the first security certification a candidate should earn. It establishes the core knowledge required of any cybersecurity role and provides a springboard to intermediate-level cybersecurity jobs. Security+ incorporates best practices in hands-on troubleshooting, ensuring candidates have practical security problem-solving skills required to: – Assess the security posture of an enterprise environment and recommend and implement appropriate security solutions – Monitor and secure hybrid environments, including cloud, mobile, and IoT – Operate with an awareness of applicable laws and policies, including principles of governance, risk, and compliance – Identify, analyse, and respond to security events and incidents
- Duration: 5 Day
- Level: Foundation
- Technology: Security
- Delivery Method: Instructor Led
- Training Credits: NA
This course is targeted toward the information technology (IT) professional who has networking and administrative skills in Windows-based Transmission Control Protocol/Internet Protocol (TCP/IP) networks; familiarity with other operating systems, such as MacOS, Unix, or Linux; and who wants to further a career in IT by acquiring foundational knowledge of security topics; preparing for the CompTIA Security+ SY0-601 certification examination; or using Security+ as the foundation for advanced security certifications or career roles.
Before attending this course delegates should possess basic Windows user skills and a fundamental understanding of computer and networking concepts. Additionally, delegates should have:Â
− Either attended the CompTIA Network+ course, or have equivalent knowledge or;Â
− Have a minimum of two years of technical networking experience, with an emphasis on securityÂ
In this course, delegates will describe the major networking technologies and systems of modern networks, and configure, manage, and troubleshoot modern networks. In addition, delegates will be able to:
– Assess attacks, threats and vulnerabilities
– Identify various threats to information security
– Conduct security assessments to detect vulnerabilities
– Implement secure cloud solutions
– Implement security for hosts and software
– Implement security for networks
– Implement cryptographic solutions in the organization
– Implement security at the operational level
– Ensure the continuity of business operations in the event of an incident
– Explain data privacy and protection concepts
This course will prepare delegates to write the CompTIA Security+ SY0-601 exam. Successfully passing this exam will result in the attainment of the CompTIA Security+ certification.
Modules
– Compare and Contrast Information Security Roles
– Compare and Contrast Security Control and Framework Types Â
– Explain Threat Actor Types and Attack VectorsÂ
– Explain Threat Intelligence Sources
– Assess Organisational Security with Network Reconnaissance Tools
– Explain Security Concerns with General Vulnerability TypesÂ
– Summarize Vulnerability Scanning TechniquesÂ
– Explain Penetration Testing Concepts
– Compare and Contrast Social Engineering TechniquesÂ
– Analyse Indicators of Malware-Based Attacks
– Compare and Contrast Cryptographic Ciphers
– Summarise Cryptographic Modes of OperationÂ
– Summarise Cryptographic Use Cases and WeaknessesÂ
– Summarise Other Cryptographic Technologies
– Implement Certificates and Certificate AuthoritiesÂ
– Implement PKI Management
– Summarise Authentication Design ConceptsÂ
– Implement Knowledge-Based AuthenticationÂ
– Implement Authentication TechnologiesÂ
– Summarise Biometrics Authentication Concepts
– Implement Identity and Account TypesÂ
– Implement Account PoliciesÂ
– Implement Authorisation SolutionsÂ
– Explain the Importance of Personnel Policies
– Implement Secure Network DesignsÂ
– Implement Secure Switching & RoutingÂ
– Implement Secure Wireless InfrastructureÂ
– Implement Load Balancers
– Implement Firewalls and Proxy ServersÂ
– Implement Network Security MonitoringÂ
– Summarise the Use of SIEM
– Implement Secure Network Operations ProtocolsÂ
– Implement Secure Application ProtocolsÂ
– Implement Secure Remote Access Protocols
– Implement Secure FirmwareÂ
– Implement Endpoint SecurityÂ
– Explain Embedded System Security Implications
– Implement Mobile Device ManagementÂ
– Implement Secure Mobile Device Connections
– Analyse Indicators of Application AttacksÂ
– Analyse Indicators of Web Application AttacksÂ
– Summarise Secure Coding PracticesÂ
– Implement Secure Script Environments
– Summarise Deployment and Automation Concepts
– Summarise Secure Cloud and Virtualisation ServicesÂ
– Apply Cloud Security Solutions
– Summarise Infrastructure as Code Concepts
– Explain Privacy and Data Sensitivity ConceptsÂ
– Explain Privacy and Data Protection Controls
– Summarise Incident Response ProceduresÂ
– Utilise Appropriate Data Sources for Incident ResponseÂ
– Apply Mitigation Controls
– Explain Key Aspects of Digital Forensics DocumentationÂ
– Explain Key Aspects of Digital Forensics Evidence Acquisition
– Explain Risk Management Processes and Concepts
– Explain Business Impact Analysis Concepts
– Implement Redundancy StrategiesÂ
– Implement Backup StrategiesÂ
– Implement Cybersecurity Resiliency Strategies
– Explain the Importance of Physical Site Security ControlsÂ
– Explain the Importance of Physical Host Security ControlsÂ
