Cybersecurity Foundations

Course code: 9701

Exam Code: 9701

Duration: 40 Hours

In this cybersecurity course, you will gain a global perspective of the challenges of designing a secure system, touching on all the cyber roles needed to provide a cohesive security solution. Through lecture, labs, and breakout discussion groups, you will learn about current threat trends across the Internet and their impact on organizational security. You will review standard cybersecurity terminology and compliance requirements, examine sample exploits, and gain hands-on experience mitigating controls. In a contained lab environment, you will work with live viruses, including botnets, worms, and Trojans.

Objective
  • Current cyber threats and cybersecurity site references
  • Cyber roles required to successfully design secure systems
  • The attack cycle perpetrated by malicious hackers
  • Enterprise policy requirements
  • Best strategies for securing the enterprise with layered defenses
  • How security zones and detailed logging augment information assurance
  • Forensic challenges and incident response planning
  • Risk management process
  • Goals achievable with auditing, scanning, and testing systems
  • Industry recommendations for maintaining secure access control
  • Standards-based cryptographic solutions for securing communications
  • Government-mandated directives and compliance requirements
Target Audience

Network professionals looking to advance their knowledge and explore cybersecurity as a career path.
Executives and managers looking to increase their ability to communicate with security professionals and implement a robust security solution at the organizational level.
Individuals wants to improve their understanding of cybersecurity fundamentals, including threats, mitigating controls, and organizational responsibilities.

Outline
  • What is security?
  • Confidentiality, integrity, and availability
  • Security baselining
  • Security concerns: Humans
  • Types of threats
  • Security controls
  • What is hacking?
  • Risk management
  • Data in motion vs. data at rest
  • Module review
  • Networking review
  • Discovery, footprinting, and scanning
  • Common vulnerabilities and exposures
  • Security policies
  • Vulnerabilities
  • Module review
  • What is hardening?
  • Types of systems that can be hardened
  • Security baselines
  • How to harden systems
  • Hardening systems by role
  • Mobile devices
  • Hardening on the network
  • Analysis tools
  • Authentication, authorization, and accounting
  • Physical security
  • Module review
  • Security architecture
  • Network devices
  • Network zones
  • Network segmentation
  • Network Address Translation
  • Network Access Control
  • Module review
  • Cryptography
  • Principles of permissions
  • Steganography
  • Module review
    • Public key infrastructure
    • Certification authorities
    • Enabling trust
    • Certificates
    • CA management
    • Module review
    • What is identity management?
    • Personally, identifiable information
    • Authentication factors
    • Directory services
    • Kerberos
    • Windows NT LAN Manager
    • Password policies
    • Cracking passwords
    • Password assessment tools
    • Password managers
    • Group accounts
    • Service accounts
    • Federated identities
    • Identity as a Service
    • Module review
    • Limiting remote admin access
    • AAA: Administrative access
    • Simple Network Management Protocol
    • Network segmentation
    • Limiting physical access
    • Establishing secure access
    • Network devices
    • Fundamental device protection summary
    • Traffic filtering best practices
    • Module review
    • What is malware?
    • Infection methods
    • Types of malware
    • Backdoors
    • Countermeasures
    • Protection tools
    • Module review
    • What is social engineering?
    • Social engineering targets
    • Social engineering attacks
    • Statistical data
    • Information harvesting
    • Preventing social engineering
    • Cyber awareness: Policies and procedures
    • Social media
    • Module review
    • Software engineering
    • Security guidelines
    • Software vulnerabilities
    • Module review
    • Monitoring
    • Monitoring vs. logging
    • Monitoring/logging benefits
    • Logging
    • Metrics
    • Module review

o What is physical security?
o Defense in depth
o Types of physical security controls
o Device security
o Human security
o Security policies
o Equipment tracking
o Module review

    • Disaster types
    • Incident investigation tips
    • Business continuity planning
    • Disaster recovery plan
    • Forensic incident response
    • Module review
    • Regulatory compliance
    • Cybercrime
    • Module review
    • Cybersecurity design constraints
    • Cyber driving forces
    • How connected are you?
    • How reliant on connectivity are you?
    • Identity management
    • Cybersecurity standards
    • Cybersecurity training
    • Looking back
    • Looking forward
    • Planning your journey
  •  
  •  
Labs

Lab 1: Explore HR Security
Lab 2: Interpret Scanning Results
Lab 3: Harden Servers and Workstations
Lab:4 Security Architecture
Lab 5: Protect Data
Lab 6: Configure a PKI
Lab 7: Manage Passwords
Lab 8: Explore Hardening Recommendations and Known Vulnerabilities
Lab 9: Detect Malware
Lab 10: Social Engineering
Lab 11: Privilege Escalation
Lab 12: Monitor a System
Lab 13: Implement Physical Security
Lab 14: Incident Response
Lab 15: Review Legal Considerations

Prerequisites

TCP/IP Networking or equivalent knowledge

Understanding Networking Fundamentals

TCP/IP Networking Training Course

Have questions or need more information?

Please complete the form and let us know what you’re looking for.

* denotes required field

By entering your email address, you agree to receive information by email from Sanisoft Training including newsletters and information about offers and specials. You may unsubscribe at any time.

Alternatively, you may contact us through quicker ways.