CompTIA Security+

Security Threats and Controls

• An introduction to Security Threats
• Need of Security
• An introduction to Security Controls
• Recognising Identification, Authentication, and Authorization
• An overview of Threats and Attacks
• Recognising threats and risks
• Types of Attacks
• Recognising Assessment tools and methods

Cryptography and Access Control

• An introduction to Cryptography
• Uses of Cryptography
• Recognising Hash Functions
• Difference between Symmetric and Asymmetric Encryption
• Recognizing Steganography
• An overview of Public Key Infrastructure
• Implementation of PKI
• Creation and management of Keys
• Key Recovery Agents and Revocations
• Recognising password Authentication
• Understanding PAP and CHAP
• Password protection and attacks
• An overview of strong authentication
• Various kinds of authentication
• Understanding RADIUS and TACACS+
• An overview of Authorization and Account Management
• Understanding Privilege Policies
• An overview of Directory Services
• Managing user and group accounts
• Lab included

Network Security

• Defining network topologies
• Understanding Demilitarized Zones
• An overview of Switches
• Understanding Routers and Network Address Translation
• An overview of Security Appliances and Applications
• Various kinds of firewalls
• An overview of Intrusion Detection Systems
• An overview of Wireless Network Security
• Recognising wireless LANs and wireless authentication
• Understanding WEP and WPA
• An overview of VPN and Remote Access Security
• Recognising Virtual Private Networks and IPsec
• An introduction to Network Application Security
• DHCP, DNS, and SNMP Security
• Difference between IPv4 and IPv6
• Lab Included

Host, Data, and Application Security

• An overview of Host Security
• Understanding computer and OS hardening
• Understanding Patch Management
• An overview of Network Access Control
• An overview of Data Security
• Data encryption and Handling
• Data Loss Prevention and Data Wiping
• An overview of Web Services Security
• Understanding SSL / TLS
• Recognising Web Servers and Load Balancers
• An overview of Web Application Security
• Web Application Databases and Exploits
• Understanding Virtualization and Cloud Security
• Defining Virtualization Technologies and Virtual Platform  Applications
• Using cloud computing
• Risks of cloud computing

Operational Security

• Understanding Site Layout and Access
• An introduction to Gateways and Locks
• Recognising hardware security
• Defining Environmental Control
• An overview of Mobile and Embedded Device Security
• Understanding BYOD model
• Defining Mobile Device Security and Mobile Device Management
• An overview of risk management
• Performing risk calculation and mitigation
• Change and configuration management
• Disaster Recovery Planning and Clusters
• An overview of Incident Responses procedure
• Preparation, detection, analysis and contamination
• Lab included