CompTIA Security+ (SY0-701) Practical Skills

Explore file integrity monitoring (FIM) concepts through a trainer knowledge share video, breaking down labs and real-world scenarios for work, including PCI DSS use cases and incident response.

Introduces security concept fundamentals, detailing the cia triad, aaa, raid 1 for availability, and file integrity monitoring with siem integration through hands-on lab exercises.

Configure raid 1 across two unformatted virtual hard drives on Windows 11 using software-based raid to provide redundancy, data protection, and high availability.

Configure and test file integrity monitoring using an open source security platform, deploying a Windows agent, and validating change detection, baseline monitoring, and alert generation through log observations.

Learn cryptographic solutions that protect data through digital signatures and certificates, and practice creating and verifying signatures, generating private/public key pairs, and submitting certificate signing requests to certificate authorities.

Create and verify a digital signature using OpenSSL, deriving a private and public key pair, hashing a file, and validating authenticity and integrity of digital content.

learn to generate a rsa 2048 private key and certificate signing request for sag plus llc, then have a certificate authority approve it to return a signed certificate.

Develop practical hands-on skills in identifying threat vectors and attack surfaces, closing unnecessary open ports, mitigating vulnerabilities, patching vulnerable applications, and incident response through labs.

Identify threat vectors and attack surfaces to protect the network environment. Learn to discover unnecessary open ports, default credentials, and vulnerable applications, then apply mitigations.

Identify unnecessary open ports with nmap and close them using Windows Defender Firewall, securing http 80, https 443, and MySQL 3306 to prevent attacker access.

Identify and mitigate default credentials and guest accounts by discovering and disabling them on assets, using Active Directory tools and server management to prevent unauthorized access.

Identify unapproved newly installed vulnerable applications and observe indicators of attack using a metasploit-delivered malicious pdf, then review event viewer logs.

Identify security vulnerabilities through hands-on practice in module 3.0, exploring misconfigurations, LM hashes, and DNS zone transfers to protect data and ensure compliance.

Identify security vulnerabilities, including LM hash storage and DNS transfer misconfigurations, to protect data, ensure business continuity, and support compliance within cybersecurity risk management through the CIA triad.

Identify LM hash vulnerabilities by extracting domain credential hashes with Impact Secrets. Observe LM hashes are not stored, then enable LM hashes and crack with John the Ripper.

Explore DNS transfer vulnerabilities by creating DNS records, testing zone transfers with dig, and deliberately misconfiguring a DNS server to allow arbitrary zone transfers, exposing sensitive domain data.

Identify indicators of brute force, command injection, and synchronized flood attacks, and develop practical detection and response skills through module exercises and tickets.

Identify indicators of compromise and malicious activity in network and application attacks, including brute force, command injection, and syn flood, through hands-on exercises.

Simulate an SMB brute force attack, enumerate the service, perform login attempts, and observe Windows Event Viewer security logs for failed logins to identify indicators of attack.

Observe normal network activity and demonstrate a syn flood attack using Metasploit; monitor indicators via task manager and netstat to understand tcp handshake disruption and ddos risk.

Master hands-on router hardening, access control, encryption, and monitoring to secure enterprise networks. Practice configuring router access, logging, and SSH remote access while aligning with compliance and network time synchronization.

Master mitigation techniques for securing the enterprise network by implementing segmentation, access control, patching, encryption, monitoring, and hardening through router configuration, SSH access, disabled services, and logging.

For CompTIA Security+ (SY0-701) practical skills, harden a router for production networks by configuring hostname, banners, and secure remote ssh access with local credentials, enable secret, and ssh version 2.

Hardening router access by disabling unused services and applying an ACL to restrict SSH access, allowing only designated hosts to reach the router.

Configure a local log buffer and NTP on the router, enable precise time stamps, test log generation, and compare configurations to enhance auditability, accountability, and identification of security incidents.

Master hands-on security skills in virtualization and containerization within the CompTIA Security+ SY0-701 practical skills course, featuring Hyper-V, Ubuntu VM, Docker, Portainer, and ticket-based lab exercises.

Explore security architecture models, focusing on virtualization and containerization for efficient resource use, rapid deployment, flexibility, and scalability, using Ubuntu VMs with Hyper-V, Docker, and Portainer via CLI and GUI.

Create a Hyper-V virtual machine on Windows 11, configure a generation two VM with 2048 MB RAM and a 25 GB VHD, then boot from the Ubuntu ISO and install.

Compare virtual machines and containers, and learn to create and manage containers from the CLI with Docker, and from the GUI with Portainer, including images and Kali Linux containers.

CompTIA Security+ practical skills module 8.0 teaches techniques to secure enterprise infrastructure, including vpn server configuration, vpn user setup in Active Directory, and l2tp ipsec vpn testing with firewall considerations.

Learn to secure enterprise infrastructures with encryption and remote access, and install and configure a vpn server and client, manage vpn users in Active Directory, and test l2/tcp/ipsec vpn.

Install and configure a vpn server for remote access, enable ipv4 static addressing, and set up logging and windows defender firewall monitoring using Event Viewer to filter rsa client events.

Create and configure a vpn user in Active Directory and test a Windows built-in vpn client connection to 192.168.0.2, demonstrating routing and remote access setup.

Configure and test a L2TP/IPsec VPN by combining L2TP with IPsec for encrypted, authenticated tunneling, using EAP for authentication and a pre-shared key with a security association.

Explore data protection strategies to safeguard confidentiality, integrity, and availability through encryption, hashing, and code obfuscation, with hands-on practice in risk-based security labs.

Explore data protection strategies, including encryption, hashing, and code obfuscation, through risk management to protect confidentiality, integrity, and availability of data.

Encrypt files and folders on Windows using EFS with NTFS, via File Explorer or Cypher.X in the Command Prompt, and manage per user access and decryption.

Explore hashing as a digital fingerprint that yields fixed-length codes to detect tampering. Manually compute md5, sha1, sha256, and sha512 on Windows and Linux, observing output lengths.

Learn to apply JavaScript code obfuscation using obfuscator.io in Visual Studio Code, then execute both original and obfuscated code in Node.js to confirm identical functionality.