CompTIA Security+

Course Overview:

The CompTIA Security+ certification is a worldwide credential that attests to the fundamental abilities required to carry out security duties and work in the field of IT security.

Prerequisite:

• At least 2 years of work experience in IT systems administration with a focus on security
• Hands-on technical information security experience
• Broad knowledge of security concepts

Audience:

• • Systems Administrator
  • Network Administrator
  • Security Administrator
  • Junior IT Auditor/Penetration Tester
  • Security Specialist
  • Security Consultant
  • Security Engineer

Topic 1: Attacks, Threats, and Vulnerabilities

• Social engineering techniques
• Potential indicators and type of attack
• Potential indicators associated with application attacks
• Potential indicators associated with network attacks
• Threat actors, vectors, and intelligence sources
• Types of vulnerabilities
• Security assessments
• Penetration testing

Topic 2: Architecture and Design

• Security concepts in an enterprise environment
• Virtualization and cloud computing concepts
• Application development, deployment, and automation concepts
• Authentication and authorization design concepts
• Cybersecurity resilience
• Security implications of embedded and specialized systems
• Physical security controls
• Cryptographic concepts

Topic 3: Implementation

• Secure protocols
• Host or application security solutions
• Secure network designs
• Wireless security settings
• Secure mobile solutions
• Cybersecurity solutions to the cloud
• Identity and account management controls
• Authentication and authorization solutions
• Public key infrastructure

Topic 4: Operations and Incident Response

• Tool to assess organizational security
• Policies, processes, and procedures for incident response
• Appropriate data sources to support an investigation
• Mitigation techniques or controls to secure an environment
• Key aspects of digital forensics

Topic 5: Governance, Risk, and Compliance

• Types of controls
• Regulations, standards, or frameworks that impact organizational security posture
• Policies to organizational security
• Risk management processes and concepts
• Privacy and sensitive data concepts in relation to security