
Explore core security concepts like ransomware, phishing, and data breaches, with practical steps for training, password hygiene, and basic hardening.
Learn the essential duties of a cyber security professional, including risk assessments, policy creation, network monitoring, incident investigation, and implementing CIA triad based controls to guard against insider threats.
Explore the cyber security threat landscape, identify actors from organized crime to government groups, and learn key defense concepts like phishing and insider risk.
Explore how social engineering, phishing, and password and website attacks threaten security, and learn defenses like awareness training, multi-factor authentication, and layered protections against physical and supply-chain threats.
Identify who you are and enforce who may access what by applying authentication and authorization, least privilege, and robust credential practices across Active Directory, LDAP, RADIUS, tokens, and biometrics.
Secure switches, routers, servers, and telecom rooms behind locked doors to protect data. Build layered physical security with camouflage, fencing, guards, bollards, logs, lighting, cameras, sensors, alarms, and access controls.
Learn to configure device access with local usernames and passwords on Cisco devices, using enable secret with SHA-256, algorithm type, and login local for vty and console access.
Configure switch port security with sticky MAC, a single allowed device per port, and violation handling to prevent unauthorized bring-your-own-device access, highlighting corporate owned versus bring-your-own-device policies.
Configure vacls by creating named extended access control lists for icmp and telnet, build vlan access maps, and apply them to vlan 20 to filter inter-vlan traffic.
Explore types of access control lists, including standard, extended, and named ACLs, with wild card masking, implicit deny, and best practices for applying them on interfaces or vty lines.
Configure a standard access list to block a specific host from reaching the remote network, apply it on g0/1 outbound, and permit a single host to telnet via vty lines.
Explore extended ACLs versus standard ACLs, create a three-line permit for a host to access a server on port 80, and apply it nearest the source on G0/1 outbound.
Configure named extended ACLs to replace numbered ones, with remarks, permitting tcp from a host to another on port 80, and apply the list on g0/1 using flexible sequence numbers.
Configure a secured wlan with layered wireless security. Change the router password, set a proper ip scheme, and apply wpa2 enterprise with a radius server, mac filtering, and firewall.
Install and configure Active Directory on Windows Server 2016 by adding the domain services role, promoting the server to a domain controller, and configuring DNS and group policy.
Create and manage Active Directory users and computers by configuring naming conventions, passwords, and login policies. Enforce role-based access with groups and organizational units, and explore domain policies and automation.
Learn to create domain local and global groups, add members, organize users into organizational units, and apply ntfs permissions and group policy objects to centralize security across domains.
Configure switches and routers with ACLs or VLAN ACLs, practice the labs, and use the free Microsoft server 90-day trial to build a solid IPv4 security foundation against ACP snooping.
Introduction to the Course
- "Through this course, we will give you a comprehensive introduction to Network Security. Indeed, we will explain the technical concepts; the level will therefore be accessible to everyone. If you already have computer prerequisites, this will undoubtedly be useful, but it is not mandatory."
Starting with the Basics
- "In the first learning section, we will speak on the security professional, threats to cyber security, types of security attacks, and physical security."
Mitigation Techniques
"Next, we will discuss several topics on how we can mitigate attacks through the use of ACLs, VACLs, and also a variation of Named ACLs as well as look into securing WLAN networks."
Dive into Microsoft Server and Active Directory
- "Through the final section, we will briefly look into the Microsoft server, specifically the active directory to centralize the login, and security for all user accounts and end devices."
- "Understanding active directories when working in a Microsoft environment is crucial to the company. Within an active directory not only can you harden user accounts through the use of GPOs and file sharing permissions, but also an array of many other security enhancements that AD provides, such as CAs, group permissions, and creating least privileged policies."
Conclusion and Key Takeaways
- "In conclusion, this course will give you a lot of technical and conceptual information for you to be able to secure a network with at least the minimum guidelines. When it comes to security, you must use a layered approach and add some sort of security from top to bottom."