Your cart is empty.
Keep shopping
Teach on Udemy
Turn what you know into an opportunity and reach millions around the world.
Learn MoreCompTIA Advanced Security Practitioner (Part 1 of 2)
Rating: 4.2 out of 54.2(54 ratings)
342 students
CompTIA Advanced Security Practitioner (Part 1 of 2)
CompTIA Advanced Security Practitioner (Exam CAS-002) (Part 1 of 2)
Created byStone River eLearning
Last updated 9/2018
English
What you'll learn
- After successfully completing this course, the students shall be able to:
- Manage security in an enterprise network
- Integrate IT with business in an enterprise
- Conduct research and analysis of the threats to enterprise security
- Implement cryptographic techniques to secure data
- Implement security controls and policies for applications, compute and storage
- Conduct vulnerability assessments
- Respond effectively to incidents and emergencies
- Implement advances authentication and authorization techniques
Explore related topics
Course content
11 sections • 535 lectures • 17h 7m total length
- Introduction0:10
- Course Introduction1:49
Download file to get access to PART2
- Instructor Introduction1:45
- The Enterprise Security Architecture0:18
Download files here
- Topic A: The Basics of Enterprise Security0:59
- The Enterprise3:08
- Enterprise Security4:12
- Business Goals and Security1:58
- Common Enterprise Security Principles10:24
- Enterprise Threat Intelligence2:28
- What to Protect?6:55
- Defense in Depth9:30
- Common Components of an Enterprise Security Solutions2:35
- Policies, Standards, and Procedures1:03
- Enterprise Policy Types14:30
- Topic B: The Enterprise Structure0:31
- Organizational Structures2:02
- The Management Team0:20
- Network Administrator2:14
- The DBA3:42
- Programmers1:29
- Stakeholders1:18
- Finance1:47
- Human Resources3:03
- Physical Security and Facilities Roles1:58
- Discipline Collaboration2:55
- Topic C: Enterprise Security Requirements0:14
- Legal Compliance1:36
- PII1:08
- Privacy Requirements4:38
- Organizational Security Requirements0:49
- Lesson 01 Review0:10
- Lesson 01 - Quiz
- Common Enterprise Security Components11:44
- Topic A: Common Network Security Components and Technologies0:34
- VoIP Integration5:18
- IPv6 Migration and Integration8:06
- VLAN Integration4:31
- DNS Security Techniques2:28
- Secure Directory Services2:53
- NIDS2:48
- NIPS1:45
- The NIPS Process4:38
- ESB1:20
- The ESB Process1:16
- DAM2:54
- Topic B: Communications and Collaboration Security0:57
- UC Security2:52
- UC Attacks2:46
- UC Components1:13
- Traffic Prioritization (QoS)6:14
- Security Solutions for Data Flow6:15
- VoIP Security0:47
- The VoIP Implementation Process2:41
- VoIP Implementation Considerations1:08
- Remote Access Security2:25
- VPN Solutions1:43
- External Communications Security1:37
- Collaboration Platform Security Issues1:56
- Demo - Least Privilege4:11
- Common Mobile Devices1:12
- Enterprise Security Methods for Mobile Devices2:02
- Topic C: Cryptographic Tools and Techniques0:49
- Cryptography in the Enterprise1:17
- Considerations for Cryptography in the Enterprise3:04
- Demo - File Encryption2:35
- Cryptographic Methods and Design4:04
- Basic Approaches to Encryption14:41
- Transport Encryption Methods4:22
- Security Implications for Encryption2:07
- Digital Signature Techniques2:58
- Advanced PKI Components7:54
- Code Signing2:16
- Attestation0:17
- Entropy2:07
- PRNG1:14
- PFS3:51
- Confusion and Diffusion1:43
- Topic D: Advanced Authentication0:22
- Advanced Authentication Within the Enterprise1:42
- Certificate -Based Authentication0:49
- SAML4:10
- SPML1:34
- XACML1:37
- SOAP2:23
- WSS1:11
- Lesson 02 Review0:10
- Lesson 02 - Quiz
- Enterprise Resource Technology0:23
- Topic A: Enterprise Storage Security Issues1:03
- Common Enterprise Storage Technologies6:07
- NAS Security Implications1:05
- SAN Security Implications0:55
- vSAN Security Implications1:07
- Virtual Storage2:36
- Security Implications of Virtual Storage5:35
- Cloud Storage1:51
- Security Implications of Cloud Storage4:21
- Data Warehousing1:55
- Security Implications of Data Warehousing1:58
- Data Archiving2:06
- Security Implications of Data Archiving2:53
- iSCSI Security Implications3:31
- iSCSI4:31
- Security Implications of iSCSI1:49
- FCoE Security Implications1:34
- FCoE1:01
- Security Implications of FCoE0:37
- vSAN2:09
- Security Implications of vSAN0:49
- LUN1:56
- LUN Masking in the Security Architecture2:05
- Redundancy1:59
- Dynamic Disk Pools1:35
- LUN Masking and Mapping3:35
- HBA Allocations1:10
- Multipath1:06
- Offsite and Multisite Replication2:57
- Additional Storage Security Implications5:05
- Snapshots2:03
- Deduplication3:17
- Guidelines for Ensuring Secure Storage Management1:35
- Topic B: Distributed, Shared, and Virtualized Computing0:33
- Why Virtualization?3:58
- Advantages of Virtualization2:03
- VLANs1:11
- VMs4:53
- VDI3:56
- Terminal Services0:59
- Virtualization Vulnerabilities3:28
- Vulnerabilities of Hosting VMs for Multiple Companies2:32
- Virtual Environment Security Methods2:06
- Topic C: Cloud Computing and Security0:14
- Cloud Computing0:33
- Cloud Computing Service Models2:54
- Cloud Storage Considerations1:15
- Security Vulnerabilities of Cloud Computing1:50
- Secure Use of Cloud Computing Within the Enterprise2:18
- Lesson 03 Review0:10
- Lesson 03 - Quiz-
- Security Design and Solutions0:18
- Topic A: Network Security Design0:58
- Network Design Types and Techniques0:45
- Network Design Considerations4:49
- Data Network Types4:15
- A Data Network Topology1:16
- Data Network Topology Types7:59
- A Network Diagram2:47
- Data Network Media Types2:13
- Network Transmission Methodologies5:44
- Physical Security3:13
- Building Layout3:41
- Facilities Management2:00
- Unified Threat Management1:53
- NIDS2:38
- NIPS2:00
- Inline Network Encryptor2:20
- Security Information and Event Management2:33
- SIEM Capabilities2:24
- Network-Attached HSM2:27
- Application and Protocol Aware Technologies6:49
- Virtual Networking and Security Components3:33
- Device Placement3:08
- Guidelines for Analyzing Network Security Components and Devices1:45
- Guidelines for Analyzing Network Security Components and Devices (Cont.)1:14
- Building Automation Systems1:26
- Hardware Attacks1:10
- Environmental Threats and Vulnerabilities1:10
- Sensors0:41
- Physical Access Control Systems1:44
- Scientific and Industrial Equipment0:39
- A/V Systems0:35
- IP Video0:46
- Network Attacks4:59
- SCADA1:38
- Secure Infrastructure Design3:17
- Storage Integration Considerations1:28
- Guidelines for Analyzing Network-Enabled Devices1:29
- Remote Access1:46
- IPv6 and Associated Transitional Technologies8:16
- Network Authentication4:11
- 802.1X3:15
- Software-Defined Networking3:14
- Cloud-Managed Networks1:09
- Guidelines for Analyzing Advanced Network Design2:56
- Network Baselining1:16
- Configuration Lockdown1:31
- Change Monitoring2:19
- Availability Controls2:42
- ACLs1:34
- DMZ1:12
- Separation of Critical Assets0:40
- Data Flow Enforcement3:23
- Network Device Configuration2:42
- Network Access Control1:16
- Critical Infrastructure and Industrial Control Systems1:52
- Network Management and Monitoring Tools0:33
- Guidelines for Configuring Controls for Network Security2:16
- Topic B: Conduct a Security Assessment0:31
- Malware Sandboxing2:05
- Memory Dumping0:36
- Runtime Debugging0:59
- Vulnerability Assessment7:40
- Penetration Testing2:06
- Hacking Steps6:28
- Penetration Testing Techniques1:04
- Fingerprinting3:37
- Types of Social Engineering2:44
- Vulnerability Scanners1:04
- Port Scanners1:08
- Protocol Analyzers1:04
- Network Enumerators0:40
- Password Crackers1:03
- Fuzzers0:25
- HTTP Interceptors1:56
- Exploitation Tools and Frameworks0:48
- Passive Reconaissance and Intelligence Gathering Tools0:48
- Code Review Methods3:52
- A Social Engineering Test5:09
- Security Assessment Tools6:55
- How to Conduct a Security Assessment2:32
- Topic C: Host Security0:43
- Host-Based Security Controls2:17
- Host-Based Firewalls1:42
- Firewall Rules2:26
- Demo - Firewalls4:53
- TPM2:18
- Trusted OS1:02
- Endpoint Security0:45
- Endpoint Security Software2:24
- Guidelines for Selecting Host Hardware and Software2:38
- Security and Group Policy Implementations1:58
- Standard Operating Environment0:58
- Command Shell Restrictions0:52
- Patch Management2:52
- Out-of-Band Communication1:55
- Peripheral Restrictions0:48
- Communications Protocols Used by Peripherals0:47
- Full Disk Encryption0:46
- Trusted OS (Cont.)3:41
- Endpoint Security (Cont.)2:27
- Anti-Malware Software0:48
- Host Hardening1:13
- Guidelines for Hardening Hosts1:07
- Operating System Security2:18
- Host Hardening Action Steps2:14
- Asset Management1:08
- HIDS1:26
- HIPS0:40
- Host Monitoring1:52
- Virtualization Platforms2:15
- Hypervisors1:17
- Container-Based Virtualization0:37
- VDI2:24
- Security Implications of VDI2:22
- Terminal Services1:00
- Application Delivery Services2:16
- vTPM0:38
- VM Vulnerabilities1:33
- Guidelines for Virtualizing Servers and Desktops2:10
- Cloud Services1:08
- Cloud Security Services1:29
- Hash Matching1:33
- Content Filtering0:37
- Guidelines for Implementing Cloud Augmented Security Services1:20
- BIOS1:26
- UEFI1:02
- Secure Boot1:11
- Measured Launch1:01
- IMA0:26
- Lesson 04 Review0:43
- Lesson 04 - Quiz
- Managing Risk in Projects0:21
- Topic A: Create a Risk Management Plan1:02
- Risk0:33
- Risk Exposure1:36
- Risk Analysis Methods1:45
- Risks Facing an Enterprise2:03
- Project Buffer2:05
- Classification of Risks2:39
- Business Risk vs. Insurable Risk1:45
- Risk Tolerance0:55
- Probability Scale0:54
- Impact Scale0:33
- RBS0:15
- RBS (Cont.)1:50
- Enterprise Security Architecture Frameworks1:43
- ESA Framework Assessment Process2:29
- New Products and Technologies1:41
- New and Changing Business Models1:55
- Partnership Model2:00
- Outsourcing Model1:07
- Cloud Model0:32
- Mergers1:46
- Demergers and Divestitures1:24
- Integration of Diverse Industries1:12
- Third-Party Providers1:40
- Internal and External Influences0:50
- De-perimeterization0:59
- Risk Determinations6:19
- Guidelines for Assessing Risk1:32
- Classes of Information2:31
- Classification of Information Types into CIA Levels0:59
- Stakeholder Input for CIA Decisions0:47
- Technical Controls2:08
- Aggregate CIA Score2:41
- Extreme Scenario Planning and Worst Case Scenarios2:04
- System-Specific Risk Analysis1:38
- Risk Response Techniques1:57
- Risk Management Processes2:21
- Continuous Monitoring and Improvement0:24
- Risk Management0:40
- The Risk Management Plan0:58
- Components of a Risk Management Plan0:42
- How to Create a Risk Management Plan1:01
- IT Governance0:50
- IT Governance A0:45
- Guidelines for Mitigating Risk1:26
- Policy Development0:43
- Process and Procedure Development0:34
- Best Practices to Incorporate in Security Policies and Procedures2:52
- Legal Compliance and Advocacy0:56
- General Privacy Principles0:34
- Topic B: Identify Risks and Their Causes0:25
- Triggers0:47
- Information Gathering Techniques1:01
- Documentation Reviews1:31
- SWOT Analysis0:35
- Risk Analysis0:27
- Risk Register1:27
- Components of a Risk Register1:27
- Risk Categories1:18
- How to Identify Risks and Their Causes2:07
- Topic C: Analyze Risks0:43
- Qualitative Risk Analysis1:15
- Quantitative Risk Analysis0:45
- Risk Probability and Impact Assessment1:25
- The Probability and Impact Risk Rating Matrix1:09
- The Ongoing Risk Assessment Process0:43
- Project Risk Ranking1:25
- Data Collection and Representation Techniques0:51
- Basics of Probability1:20
- Probability Distribution0:35
- Quantitative Analysis Methods1:07
- Qualitative Analysis Methods1:04
- Risk Data Quality Assessment1:49
- Risk Urgency Assessment0:24
- Simulation1:15
- Monte Carlo Analysis1:52
- How to Analyze Risks0:44
- How to Analyze Risks A0:37
- Topic D: Develop a Risk Response Plan0:22
- Negative Risks0:21
- Negative Risk Strategies0:42
- Positive Risks0:44
- Positive Risk Strategies0:49
- Contingency Plan0:40
- The BCP0:39
- DRP0:20
- Contingency Reserve0:15
- Risk-Related Contract Decisions0:52
- How to Develop a Risk Response Plan A0:43
- How to Develop a Risk Response Plan B0:21
- Lesson 05 Review0:44
- Lesson 05- Quiz
- Integrating Advanced Authentication and Authorization Techniques0:30
- Topic A: Implement Authentication and Authorization Technologies0:09
- Authentication0:32
- Certificate-Based Authentication2:20
- SSO1:26
- Authorization1:06
- OAuth0:39
- The OAuth Process0:35
- XACML0:55
- SPML0:30
- Trust Models1:12
- RADIUS Configurations3:27
- LDAP1:26
- Active Directory0:30
- Kerberos2:12
- Guidelines for Implementing Authentication and Authorization1:30
- Topic B: Implement Advanced Identity Management0:27
- Attestation1:19
- Identity Propagation0:51
- Identity Federation1:50
- Identity Federation Methods0:48
- Guidelines for Implementing Advanced Identity Management1:22
- Lesson 06 Review0:57
- Lesson 06 - Quiz
- Implementing Cryptographic Techniques0:17
- Topic A: Describe Cryptographic Concepts0:27
- Confidentiality1:41
- Integrity1:39
- Non-repudiation1:46
- Entropy1:11
- Confusion0:57
- Diffusion1:10
- Chain of Trust2:32
- Root of Trust0:46
- Steganography2:41
- Advanced PKI Concepts3:24
- Topic B: Choose Cryptographic Techniques1:00
- Cryptographic Applications4:02
- Cryptographic Methods4:09
- Block Cipher Modes1:35
- Cryptographic Design Considerations2:10
- Data at Rest Encryption0:53
- Transport Encryption Protocols4:02
- Transport Encryption0:54
- Hashing3:07
- Hash Functions1:05
- Key Stretching0:39
- Digital Signatures2:58
- Code Signing1:16
- Pseudorandom Number Generation0:43
- Perfect Forward Secrecy1:35
- Guidelines for Choosing Cryptographic Techniques0:57
- Topic C: Choose Cryptographic Implementations0:34
- DRM1:19
- Digital Watermarking0:33
- SSL/TLS0:49
- SSH0:50
- PGP and GPG0:53
- S/MIME0:55
- Guidelines for Choosing Cryptographic Implementations0:58
- Lesson 07 Review0:43
- Lesson 07 - Quiz
- Integrating Hosts, Storage, Networks, and Applications in a Secure Enterprise Ar0:41
- Topic A: Implement Security Standards in the Enterprise0:21
- Standards3:17
- Categories of Standards1:14
- Interoperability Issues1:36
- Data Flow Security3:10
- Guidelines for Implementing Standards in the Enterprise2:16
- Topic B: Select Technical Deployment Models0:36
- Deployment Models0:59
- Cloud and Virtualization and Hosting Options0:53
- Elastic Cloud Computing1:19
- Data Remnants in the Cloud1:56
- Data Aggregation2:34
- Data Isolation3:55
- Resource Provisioning and De-provisioning2:47
- Virtual Machine Vulnerabilities2:07
- Virtual Environment Security3:05
- Virtual Environment Security (Cont.)1:54
- Network Segmentation0:41
- Network Delegation1:27
- Mergers and Acquisitions1:40
- Guidelines for Selecting Technical Deployment Models1:35
- Topic C: Secure the Design of the Enterprise Infrastructure0:32
- Infrastructure Design Security4:19
- Deployment Diagrams2:23
- Storage Integration1:04
- Guidelines for Securing the Design of the Enterprise Infrastructure1:23
- Topic D: Secure Enterprise Application Integration Enablers0:56
- Customer Relationship Management1:48
- Enterprise Resource Planning2:16
- Governance, Risk, and Compliance1:52
- Enterprise Service Bus2:32
- Service Oriented Architecture1:22
- Directory Services1:04
- Domain Name System3:29
- Configuration Management Database1:59
- Content Management System1:48
- Guidelines for Securing Enterprise Application Integration Enablers1:29
- Lesson 08 Review0:35
- Lesson 08 - Quiz
- Security Research and Analysis0:37
- Topic A: Perform an Industry Trends and Impact Analysis1:47
- Industry Best Practices4:30
- Demo - Security Research2:21
- Research Methods2:18
- Technology Evolution2:38
- New Technologies, Security Systems, and Services2:50
- New Security Technology Types3:38
- Global IA Industry and Community2:47
- Security Requirements for Contracts1:49
- Guidelines for Determining Industry Trends and Effects on the Enterprise3:04
- Situational Awareness0:42
- Situational Awareness Considerations2:18
- Emerging Business Tools1:59
- Social Media as an Emerging Business Tool0:17
- Mobile Devices as Emerging Business Tools0:33
- Emerging Security Issues2:12
- The Global Impact Analysis Industry1:55
- Security Requirements for Business Contracts1:54
- How to Perform an Industry Trends Impact Analysis0:53
- Topic B : Perform an Enterprise Security Analysis1:31
- Benchmarking1:44
- Network Traffic Analysis2:19
- Types of Network Traffic Analysis3:13
- Prototyping and Testing1:06
- Cost -Benefit Analysis2:54
- Security Analysis Strategies1:31
- Security Solution Analysis0:57
- Lessons Learned Review0:21
- How to Perform an Enterprise Security Analysis0:48
- Review Existing Security1:42
- Reverse Engineering1:37
- Solution Attributes1:16
- After -Action Report1:14
- Guidelines for Analyzing Scenarios to Secure the Enterprise3:26
- Lesson 09 Review0:24
- Lesson 09 - Quiz
Requirements
- The course does not have any formal pre-requisites, however, students are advised to attend a basic and foundation level course regarding basic network technologies such as TCP/IP, routing, and switching.
- Alternatively, students having one year experience in networking can opt for this course without any preliminary training.
Description
CompTIA Advanced Security Practitioner (CAS-002) is the course that teaches the students about securing complex enterprise environments. In this course, the students will expand their knowledge of IT security and learn about the more advanced tools and techniques to keep any organization safe and secure.
The CompTIA Advanced Security Practitioner (CAS-002) course will enable the students to meet the growing demands of today’s IT environment. The course helps the students to develop their skills and perform their jobs as advanced security professionals in their organizations. The course is designed for IT security professionals who want to acquire the technical knowledge and skills needed to conceptualize, engineer, integrate, and implement secure solutions across complex enterprise environments.
Who this course is for:
- The course is primarily intended for the candidates appearing in the CAS-002: CompTIA Advances Security Practitioner exam.
- The course will helps the candidates to prepare the exam topics and successfully complete the certification.
- In addition to this, the IT professionals looking to increase their knowledge of enterprise security can also register.