Networking Fundamentals for Cybersecurity

Master the OSI model's seven layers from physical to application, and how each handles data. Apply Wireshark for analysis, plus core topics in troubleshooting, security, cloud, and interview questions.

Explore how the OSI model's seven layers affect troubleshooting, from application layer issues like DNS and firewalls to presentation, session cookies, transport ports, and physical cabling.

Explore how to use Wireshark to capture packets, view MAC and IP addresses, apply display filters for protocols like TCP, DNS, and HTTP, and map traffic to OSI layers.

Examine how the OSI layers secure networks, from physical and switch protections to application-layer defenses against sql injections, xss, and phishing, with tls and ssh mitigations.

Explore how OSI layers map to cloud services, from the physical layer through hypervisors and containerization to software defined data centers.

Explore tcp vs udp in the transport layer, contrast three-way handshake-driven reliability with connectionless speed, and cover sequencing, acknowledgement, windowing, and port-based protocols in the tcp/ip and osi models.

Delve into the tcp/udp troubleshooting landscape, map port numbers and protocols, and use ping, traceroute, ip config, netstat, telnet, and wireshark to diagnose network issues.

Explain tcp and udp behavior through wireshark, detailing flags like syn, ack, push, reset; illustrate a tcp three way handshake, ftp over port 21, and filtering conversations with sequence numbers.

Analyze tcp sync flood, tcp reset, and session hijacking as denial-of-service threats, and learn mitigations with robust filtering and rate-limiting, plus udp flood patterns and icmp port-unreachable responses.

Learn why you should not replicate lab setups; analyze how routers, servers, and devices are configured to understand real-world networks, preparing for practical cybersecurity labs using Linux.

Explore how the IPv4 header enables routing, fragmentation, and quality of service within the network layer, and review fields like version, header length, TTL, protocol, and source and destination IP.

Learn IPv4 addressing basics and subnetting concepts for cybersecurity troubleshooting, including 32 bit addresses, dotted decimal notation, network versus host portions, and the role of subnet masks such as 255.255.255.0.

Explains IPv4 subnetting, including IP addresses, network and host portions, subnet masks, and private addresses, with binary conversions and labs for calculating networks and hosts.

Master IPv4 troubleshooting by verifying firewall permissions and correct IP addressing. Configure proper default gateways, monitor subnetting, and block RFC 1918 traffic with ACLs.

Explore IPv6 in a nutshell, covering what IPv6 is, its address space, network and host portions, zero compression, and a comparison with IPv4, plus ARP and neighbor discovery.

Understand the IPv6 header and its fields, observe IPv6 traffic with Wireshark, and examine cloud security challenges and the absence of NAT for IPv6.

Watch and analyze the introductory labs to learn how devices like routers and servers are configured, without replicating every setup, and prepare for practical cybersecurity work.

Explore the dhcp process in a nutshell, what dhcp is and how it works, plus security, troubleshooting, apipa, dhcp relay, nic-based assignments, and dhcp client identifier.

Understand enterprise and wide area networks and see how dhcp auto assigns ip addresses via the Dora process (discover, offer, request, acknowledgement) and learn dns services.

Watch a Wireshark demo of the DHCP lifecycle—discover, offer, request, and acknowledge—over UDP ports 67 and 68, with broadcasts and unicast. Explore cloud implications, including DHCP starvation attacks.

Explore the domain name system (dns) from fundamentals to troubleshooting, network security and cloud perspectives, guided by two videos that explain how dns works from scratch.

Learn how the domain name system translates fully qualified domain names into IP addresses, enabling browsers to locate sites via caching, host files, routers, and root and top level servers.

Explore how the DNS resolves a domain by querying root servers, org servers, and hosting servers, while caching the public IP addresses for faster access.

Explains how a DNS query travels from a client to resolvers and authoritative servers, using Wireshark to filter IPv6 AAAA records, UDP port 53, and recursion.

Master practical DNS troubleshooting—from cables to ping tests and flush DNS—to restore connectivity, then explore DNS security, flooding, tunneling, hijacking, and cloud integration with Route 53.

Learn how the ping tool, an ICMP based utility, tests reachability using echo requests and replies, and analyzes TTL and RTT to troubleshoot networks and security issues with command options.

Explore ICMP in Wireshark, showing echo request and echo reply (type 8 and 0) and destination unreachable and time exceeded messages, observed during a ping between a PC and a router.

Examine how the ping tool and ICMP relate to denial-of-service risks like ping of death and oversized packets, and apply reassembly checks and buffer sizing as remedies.

Explore the tracer tool to map a packet’s real-time path across hops, diagnose TTL-related issues, and use tracert options to control resolution and maximum hops.

Explore the netstat command to view network connections and sockets, and use options like -n, -a, -b, and -f to reveal ports, processes, and host names.

Explore the CIA triad—confidentiality, integrity, availability—alongside defense in depth and threats like internal and external attackers, ransomware, and signature-based IDS and IPS.

Explore firewall fundamentals: security levels and trusted versus untrusted zones, and how packet filtering, stateful, next-gen, web application, and cloud firewalls protect networks.

Explore how bugs and misconfigurations create vulnerabilities that attackers exploit with exploit kits to access systems and deploy malware. Understand zero-day attacks, patching, and advanced persistent threats in long-term campaigns.

Analyze Windows firewall logs to identify block events, source and destination IPs, ports, and top talkers, then explore how Splunk enables indexing, searching, and visualizing such data.

Explore Cisco switches and ports, including catalyst models, LEDs, speed and duplex, poe, SFP and gbic modules, and front-back panel layouts.

Examine how switches replace bus networks by building a cam table to manage mac addresses, creating multiple collision domains and a single broadcast domain, with flooding, forwarding, and filtering.

Explore how traditional arp discovers mac addresses for a given ipv4 address by broadcasting requests, mapping ip to mac, and populating the arp cache for subsequent unicast communication.

Explore how ARP spoofing enables man-in-the-middle attacks, session hijacking, and denial of service, and review defenses like dynamic ARP inspection and ARP rate limiting.

Explore Cisco routers, their front and back panels, LED indicators, and modular hardware, then compare ISR and ASR families across small business to service provider deployments.

Explore why cloud security matters as organizations move to hybrid or cloud environments, covering cloud administration, virtual machines, on-prem connections, and guidance toward AWS or Azure security specialization.

Plan ahead for incidents with a structured incident response process: preparation, identification, containment, investigation, eradication, recovery, and follow-up, plus documentation, monitoring, staff training, tabletop exercises, and backups.

Explore how security groups act as virtual firewalls for EC2 instances, controlling inbound and outbound traffic at the subnet level with configurable rules (SSH, http/https, RDP, ICMP) for associated instances.

Configure logging for cloud resources to gain visibility, monitor changes, and support incident response with centralized logs, snmp data, and audit logging.

Explore Azure Monitor to gain real-time log analytics across subscriptions, resource groups, and resources, using dashboards, Log Analytics, and queries to improve cloud security visibility and incident response.

Watch this video to learn how security professionals configure routers, servers, and devices without replicating lab steps. Analyze these setups to understand real-world configurations for future Linux-focused practice.

Configure secure shell access to switches and routers in a practice lab using PuTTY from a Windows server, setting up VLAN management, hostname, domain, RSA keys, and enable secret.

Learn to implement a standard access list to permit only a single IP for secure shell access to a switch, and verify connectivity through a hands-on lab.

Learn to secure switch ports with mac-address based port security on Cisco switches using sticky learning and shutdown on violations, and explore its role in network access control.

Discover snmp, the simple network management protocol, and its versions one through three, focusing on security. Configure snmp on a Cisco router with community strings, traps, and saving the setup.

Compare standard and extended access control lists, including source and destination filtering and ports, and perform a lab applying a standard ACL on a router interface to permit traffic.

Analyze network protocol and port activity to identify open ports and traffic on a target host. Use Nmap Zenmap GUI to scan and mitigate attacks by blocking unnecessary ports.

Explore password and account lockout policies and configure them with group policy in a Windows domain, applying length, history, age, complexity, and reversible encryption settings.

Explore define and configure account lockout policy to counter brute force attacks, apply a password policy via group policy, and update policy for domain users with gpupdate.

Explore the Udemy bonus lecture to access CompTIA exam vouchers for Network+ and related tracks. Gain ten days of practice, coaching services, and a labs membership on Job Skillshare.