CompTIA Security+

CompTIA Security+ is a global, vendor-neutral certification that validates ability in:

• Network security
• Compliance and operative safety
• Threats and weaknesses
• Application, data and host safety
• Access control and identity management
• Cryptography

By undergoing this training, candidates can apply security controls to maintain integrity, confidentiality, and availability. Delegates will be aware of applicable policies, laws, and regulations.

Examination:

The course covers the essential basic principles for the safety of a network and management of risks. The main important topics for the examination point of view are Access control, identity management, and cryptography. It also includes mitigation and deterrent methods to address network attacks and susceptibilities. Security concerns linked with cloud computing, BYOD and SCADA are addressed in the SY0-401 exam.

Course Content

Security Threats and Controls

• An introduction to Security Threats
• Need of Security
• An introduction to Security Controls
• Recognising Identification, Authentication, and Authorization
• An overview of Threats and Attacks
• Recognising threats and risks
• Types of Attacks
• Recognising Assessment tools and methods

Cryptography and Access Control

• An introduction to Cryptography
• Uses of Cryptography
• Recognising Hash Functions
• Difference between Symmetric and Asymmetric Encryption
• Recognizing Steganography
• An overview of Public Key Infrastructure
• Implementation of PKI
• Creation and management of Keys
• Key Recovery Agents and Revocations
• Recognising password Authentication
• Understanding PAP and CHAP
• Password protection and attacks
• An overview of strong authentication
• Various kinds of authentication
• Understanding RADIUS and TACACS+
• An overview of Authorization and Account Management
• Understanding Privilege Policies
• An overview of Directory Services
• Managing user and group accounts
• Lab included

Network Security

• Defining network topologies
• Understanding Demilitarized Zones
• An overview of Switches
• Understanding Routers and Network Address Translation
• An overview of Security Appliances and Applications
• Various kinds of firewalls
• An overview of Intrusion Detection Systems
• An overview of Wireless Network Security
• Recognising wireless LANs and wireless authentication
• Understanding WEP and WPA
• An overview of VPN and Remote Access Security
• Recognising Virtual Private Networks and IPsec
• An introduction to Network Application Security
• DHCP, DNS, and SNMP Security
• Difference between IPv4 and IPv6
• Lab Included

Host, Data, and Application Security

• An overview of Host Security
• Understanding computer and OS hardening
• Understanding Patch Management
• An overview of Network Access Control
• An overview of Data Security
• Data encryption and Handling
• Data Loss Prevention and Data Wiping
• An overview of Web Services Security
• Understanding SSL / TLS
• Recognising Web Servers and Load Balancers
• An overview of Web Application Security
• Web Application Databases and Exploits
• Understanding Virtualization and Cloud Security
• Defining Virtualization Technologies and Virtual Platform  Applications
• Using cloud computing
• Risks of cloud computing

Operational Security

• Understanding Site Layout and Access
• An introduction to Gateways and Locks
• Recognising hardware security
• Defining Environmental Control
• An overview of Mobile and Embedded Device Security
• Understanding BYOD model
• Defining Mobile Device Security and Mobile Device Management
• An overview of risk management
• Performing risk calculation and mitigation
• Change and configuration management
• Disaster Recovery Planning and Clusters
• An overview of Incident Responses procedure
• Preparation, detection, analysis and contamination
• Lab included