CompTIA Security+ SY0-501 Certification Training in Doha, Qatar

Comptia Security+ 701

• Domain 01: General Security Concepts

  • Introduction to Security Concepts

  • CIA

  • Non-Repudiation

  • AAA (Authentication, Authorization, and Accounting)

  • Gap Analysis

  • Zero Trust Architecture and Defense in Depth

  • Physical Security

  • Deceptive Technology

  • Types of Security Controls

  • Importance of Change Management Processes and the Impact to Security

  • Introduction to Cryptography

  • Cryptography around Us

  • Cryptography Fundamentals

  • Steganography

  • Masking, Obfuscation and Tokenization

  • Symmetric and Asymmetric Cryptography

  • Hashing Process

  • Digital Signature Process

  • Public Key Infrastructure

  • Key Management

  • Block Chain and Open Ledger

• Domain 02: Threats, Vulnerabilities, and Mitigations

  • Threat Actors

  • Attributes of Actors

  • Intent or Motivation

  • Attack Vectors

  • Common Threat Vectors and Attack Surfaces

  • Assisted Practice: Enhancing Server Security

  • Indicators, Indicators of Compromise and Indicators of Attack

  • Assisted Practice: Investigating DoS and MITM Attacks Using Wireshark

  • Malware Attack

  • Assisted Practice: Analyzing Malware Reports Using VirusTotal

  • Physical Attack

  • Network Attack

  • Cryptographic Attacks

  • Password Attacks

  • Application Attacks

  • Mitigation Techniques to Secure the Enterprise

  • Assisted Practice: Implementing Public Key Infrastructure

  • Assisted Practice: Generating a Web Server Certificate

• Domain 03: Security Architecture

  • Security Implications of Different Architecture Models

  • Security Principles to Secure Enterprise Infrastructure

  • Firewall Categories

  • Unified Threat Management (UTM)

  • Next-Generation Firewall (NGF)

  • Web Application Firewall

  • Proxy Server

  • Intrusion Detection and Prevention System

  • Virtual Private Network

  • Network Access Control

  • Concepts and Strategies to Protect Data

  • Privacy Regulations

  • Data Protection Controls

  • Data Classification

  • Business Continuity Planning

  • High Availability

  • Site Consideration

  • Backups

  • Power

  • Cloud Data Replications

  • Testing

  • Platform Diversity

  • Multicloud

  • Capacity Management

• Domain 04: Security Operations

  • Establishing Baselines

  • Hardening of Devices

  • Wireless Technologies

  • Mobile Management and Security

  • Application Security

  • Sandboxing

  • Monitoring

  • Security Implications of Proper Hardware, Software, and Data Asset Management

  • Vulnerability Assessment

  • System and Process Audit

  • Assisted Practice: Scanning Local VM Using Nessus

  • Assisted Practice: Scanning Local VM Using Nessus Security Alerting and Monitoring Concepts and Tools

  • Modifying Enterprise capabilities to Enhance Security

  • Web Application Firewall

  • Intrusion Detection and Prevention System

  • OSI, TCP/IP and Protocols

  • Web Filtering Technologies

  • Operating System Security

  • Email Security

  • Antivirus, Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR)

  • Secure Protocols

  • Assisted Practice: Configuring Proton VPN

  • Assisted Practice: Implementing Network Segmentation and VLANs

  • Implementing and Maintaining Identity and Access Management

  • Multi-Factor Authentication (MFA)

  • Assisted Practice: Implementing Multi-Factor Authentication (MFA)

  • Type 1 Authentication: Password

  • Type 2 Authentication: Tokens

  • Type 3 Authentication: Biometric

  • Passwordless Authentication

  • Authorization and Accounting

  • Federation Identity Management

  • Federation Identity Management Standards

  • Single Sign On

  • Privilege Access Management

  • Implementing and Managing Authorization Mechanisms

  • Manage the Identity and Access Provisioning Lifecycle

  • Assisted Practice: Installing Active Directory and Creating a User

  • Assisted Practice: Configuring Logon Hours in Active Directory

  • Importance of Automation and Orchestration Related to Secure Operations

  • Incident Response Activities

  • Digital Forensics

  • Use of Data Sources to Support Investigations

  • Assisted Practice: Using Event Viewer to Implement Logging and Forensic Analysis

  • Assisted Practice: Implementing encryption solutions for data at rest using AESCrypt

  • Assisted Practice: Using ROHOS Disk Encryption

• Domain 05: Security Program Management and Oversight

  • Security Policy, Standards, Procedures, and Guidelines

  • Different types of Policies

  • Standards

  • Procedures

  • Guidelines

  • External Factors

  • Monitoring and Revision

  • Roles and Responsibilities for Systems and Data

  • Governance

  • Elements of the Risk Management Process

  • Third-Party Risk Assessment and Management

  • Vendor Assessment

  • Vendor Selection

  • Agreement Types

  • Vendor Monitoring, Questionnaires and Rules of Engagement

  • Summarize Elements of Effective Security Compliance.

  • Consequences of Noncompliance

  • Compliance Monitoring

  • Privacy

  • Types and Purposes of Audits and Assessments

  • Phishing

  • Anomalous Behavior Recognition

  • User Guidance and Training

  • Reporting and Monitoring