Oreilly - CompTIA Security+ (SY0-501): Complete Course and Practice Exam

Oreilly - CompTIA Security+ (SY0-501): Complete Course and Practice Exam

by Jason Dion | Publisher: Packt Publishing | Release Date: March 2019 | ISBN: 9781838826352

https://www.oreilly.com/library/view/comptia-security-sy0-501/9781838826352/

CompTIA Security+ Bootcamp: Your preparation course for the most popular cyber security certification in the world!About This VideoPassing the CompTIA Security+ certification exam with confidenceUnderstand computer security, its functions, and its components.In Detail This course is designed to help prepare you for the CompTIA Security+ (SY0-501) certification exam and covers the six domains for the Security+ (SY0-501) certification exam:Threats, Attacks, and VulnerabilitiesTechnologies and ToolsArchitecture and DesignIdentity and Access ManagementRisk ManagementCryptography and PKIYou will learn the fundamentals of cybersecurity and gain experience in the configuration, management, and troubleshooting of common wired and wireless networks. All the code files are placed at https://github.com/PacktPublishing/CompTIA-Security-SY0-501-Complete-Course-and-Practice-Exam

Chapter 1 : Overview of Security
- Welcome 00:04:26
- Overview of Security 00:02:59
- CIA Triad 00:03:58
- AAA of Security 00:03:09
- Security Threats 00:03:00
- Mitigating Threats 00:02:31
- Hackers 00:04:56
- Threat Actors 00:03:15
Chapter 2 : Malware
- Malware 00:00:43
- Viruses 00:06:24
- Worms 00:02:13
- Trojans 00:02:52
- Demo: Viruses and Trojans 00:06:19
- Ransomware 00:02:33
- Spyware 00:02:42
- Rootkits 00:03:32
- Spam 00:02:59
- Summary of Malware 00:02:05
Chapter 3 : Malware Infections
- Malware Infections 00:04:15
- Common Delivery Methods 00:04:30
- Demo: Phishing 00:05:22
- Botnets and Zombies 00:03:33
- Active Interception and Privilege Escalation 00:02:32
- Demo: Privilege Escalation 00:05:44
- Backdoors and Logic Bombs 00:03:51
- Symptoms of Infection 00:04:13
- Removing Malware 00:05:05
- Preventing Malware 00:05:59
Chapter 4 : Security Applications and Devices
- Security Applications and Devices 00:00:36
- Software Firewalls 00:04:19
- Demo: Software Firewalls 00:06:48
- IDS 00:05:06
- Pop-up Blockers 00:03:12
- Data Loss Prevention (DLP) 00:03:46
- Securing the BIOS 00:03:59
- Securing Storage Devices 00:03:30
- Disk Encryption 00:04:54
Chapter 5 : Mobile Device Security
- Mobile Device Security 00:01:17
- Securing Wireless Devices 00:01:33
- Mobile Malware 00:06:22
- SIM Cloning & ID Theft 00:04:04
- Bluetooth Attacks 00:02:11
- Mobile Device Theft 00:03:13
- Security of Apps 00:05:09
- BYOD 00:05:00
- Hardening Mobile Devices 00:03:55
Chapter 6 : Hardening
- Hardening 00:01:51
- Unnecessary Applications 00:03:14
- Restricting Applications 00:02:59
- Demo: Unnecessary Services 00:05:38
- Trusted Operating System 00:02:00
- Updates and Patches 00:03:29
- Patch Management 00:03:52
- Group Policies 00:02:37
- Demo: Group Policies 00:04:09
- File Systems and Hard Drives 00:03:21
Chapter 7 : Virtualization
- Virtualization 00:02:10
- Hypervisors 00:02:40
- Demo: How to create a VM 00:04:42
- Threats to VMs 00:03:46
- Securing VMs 00:03:50
- Demo: Securing VMs 00:04:44
Chapter 8 : Application Security
- Application Security 00:01:46
- Web Browser Security 00:06:43
- Web Browser Concerns 00:03:22
- Demo: Web Browser Configuration 00:05:23
- Securing Applications 00:04:52
Chapter 9 : Secure Software Development
- Software Development 00:08:38
- SDLC Principles 00:06:26
- Testing Methods 00:07:03
- Software Vulnerabilities and Exploits 00:03:47
- Buffer Overflows 00:06:18
- Demo: Buffer Overflow Attack 00:06:29
- XSS and XSRF 00:03:11
- SQL Injection 00:06:28
- Demo: SQL Injection 00:07:16
Chapter 10 : Network Design
- Network Security 00:00:48
- The OSI Model 00:06:04
- Switches 00:03:36
- Routers 00:02:30
- Network Zones 00:03:29
- Network Access Control 00:02:43
- VLANs 00:01:33
- Subnetting 00:01:54
- Network Address Translation 00:02:30
- Telephony 00:06:01
Chapter 11 : Perimeter Security
- Perimeter Security 00:00:50
- Firewalls 00:08:05
- Demo: SOHO Firewall 00:04:07
- Proxy Servers 00:04:15
- Honeypots and Honeynets 00:01:25
- Data Loss Prevention 00:01:38
- NIDS and NIPS 00:04:14
- Unified Threat Management 00:01:55
Chapter 12 : Cloud Security
- Cloud Computing 00:03:32
- Cloud Types 00:02:55
- As a Service 00:07:07
- Cloud Security 00:02:28
- Defending Servers 00:04:35
Chapter 13 : Network Attacks
- Network Attacks 00:00:41
- Ports and Protocols 00:04:27
- Memorization of Ports 00:11:34
- Unnecessary Ports 00:03:24
- Denial of Service 00:07:59
- DDoS 00:01:39
- Stopping a DDoS 00:02:30
- Spoofing 00:01:19
- Hijacking 00:03:48
- Replay Attack 00:01:30
- Demo: Null Sessions 00:02:27
- Transitive Attacks 00:01:28
- DNS Attacks 00:04:37
- ARP Poisoning 00:01:34
Chapter 14 : Securing Networks
- Securing Networks 00:00:52
- Securing Network Devices 00:06:46
- Securing Network Media 00:08:51
- Securing WiFi Devices 00:04:25
- Wireless Encryption 00:05:34
- Wireless Access Points 00:06:15
- Wireless Attacks 00:04:19
- Demo: Wireless Attack 00:07:42
- Other Wireless Technologies 00:06:05
Chapter 15 : Physical Security
- Physical Security 00:01:34
- Surveillance 00:02:54
- Door Locks 00:03:51
- Demo: Lock Picking 00:01:40
- Biometric Readers 00:04:18
Chapter 16 : Facilities Security
- Facilities Security 00:00:40
- Fire Suppression 00:06:24
- HVAC 00:02:27
- Shielding 00:02:38
- Vehicles 00:02:06
Chapter 17 : Authentication
- Authentication 00:05:57
- Authentication Models 00:05:21
- 802.1x 00:03:47
- LDAP and Kerberos 00:02:29
- Remote Desktop Services 00:01:54
- Remote Access Service 00:02:06
- VPN 00:03:05
- RADIUS vs TACACS+ 00:02:21
- Authentication Summary 00:02:07
Chapter 18 : Access Control
- Access Control 00:00:53
- Access Control Models 00:08:17
- Best Practices 00:05:47
- Users and Groups 00:09:15
- Permissions 00:03:44
- Usernames and Passwords 00:02:39
- Demo: Policies 00:04:37
- User Account Control 00:01:57
Chapter 19 : Risk Assessments
- Risk Assessments 00:08:37
- Qualitative Risk 00:04:09
- Quantitative Risk 00:05:31
- Methodologies 00:02:52
- Security Controls 00:06:52
- Vulnerability Management 00:07:53
- Penetration Testing 00:04:30
- OVAL 00:01:37
- Vulnerability Assessments 00:06:55
- Demo: Nmap Scanning 00:08:53
- Demo: Vulnerability Scanning 00:09:36
- Password Analysis 00:05:57
- Demo: Password Cracking 00:02:39
Chapter 20 : Monitoring and Auditing
- Monitoring Types 00:02:57
- Performance Baselining 00:04:38
- Protocol Analyzers 00:03:01
- SNMP 00:03:44
- Demo: Analytical Tools 00:04:30
- Auditing 00:01:57
- Demo: Auditing Files 00:03:56
- Logging 00:03:43
- Log Files 00:05:17
- SIEM 00:02:57
Chapter 21 : Cryptography
- Cryptography 00:04:59
- Symmetric vs Asymmetric 00:06:15
- Symmetric Algorithms 00:05:00
- Public Key Cryptography 00:03:12
- Asymmetric Algorithms 00:03:47
- Pretty Good Privacy 00:01:49
- Key Management 00:02:15
- One-Time Pad 00:04:22
- Demo: Steganography 00:03:54
- Hashing 00:08:31
- Demo: Hashing 00:03:07
- Hashing Attacks 00:03:18
- Increasing Hash Security 00:01:30
Chapter 22 : Public Key Infrastructure
- Public Key Infrastructure 00:03:56
- Digital Certificates 00:06:46
- Demo: Certificates 00:03:34
- Certificate Authorities 00:04:16
- Web of Trust 00:02:38
Chapter 23 : Security Protocols
- Security Protocols 00:00:24
- S/MIME 00:01:33
- SSL and TLS 00:05:51
- SSH 00:02:31
- VPN Protocols 00:06:41
- Demo: Setting up a VPN 00:01:37
Chapter 24 : Planning for the Worst
- Planning for the Worst 00:02:13
- Redundant Power 00:03:11
- Backup Power 00:03:09
- Data Redundancy 00:04:42
- Demo: RAIDs 00:03:39
- Network Redundancy 00:02:07
- Server Redundancy 00:01:46
- Redundant Sites 00:02:23
- Data Backup 00:02:57
- Tape Rotation 00:03:56
- Disaster Recovery Plan 00:05:42
Chapter 25 : Social Engineering
- Social Engineering 00:00:56
- Demo: Pretexting 00:04:18
- Insider Threat 00:02:13
- Phishing 00:01:16
- More Social Engineering 00:04:04
- User Education 00:04:40
Chapter 26 : Policies and Procedures
- Policies and Procedures 00:05:56
- Data Classifications 00:06:45
- PII and PHI 00:06:23
- Security Policies 00:10:23
- User Education 00:04:05
- Vendor Relationships 00:07:55
- Disposal Policies 00:05:07
- Incident Response Procedures 00:04:39
- Data Collection Procedures 00:03:14
- Demo: Disk Imaging 00:06:59
- IT Security Frameworks 00:03:21
Chapter 27 : Conclusion
- Conclusion 00:03:50
- Exam Tricks 00:04:13