Security+ (SY0-701) Plus 601 Bonus - Self-paced Course!

Non-repudiation, a key cybersecurity control demonstrated by digital signatures, expands beyond the CIA triad, and the lecture highlights terminology and domain changes from 601 to 701.

Conduct gap analysis to evaluate security controls against objectives, preserve the CIA of information and systems, identify gaps as risks, and plan remediation within time and resources for physical controls.

Learn about directive controls, a security control type that informs employees through policies and procedures to meet security objectives, alongside preventive, deterrence, detective, corrective, and compensating controls.

Examine data protection concepts across data at rest, data in motion (data in transit), and data in use, noting terminology changes between 601 and 701 and memory read risks.

Learn how data loss prevention systems operate in two environments, agent based and agent less, with host based DLP using agents and network DLP without agents.

Explain access restrictions, including geographic and permission restrictions, to limit resource access by location or user role, and use segmentation with VLANs and ACLs to isolate systems.

Explore the hats hackers wear (authorized attackers (white hats), unauthorized attackers (black hats), and semi authorized attackers (gray hats)) and note domain changes in 701 and 601.

Explore common threat actors in the cyber security landscape, from unskilled attackers and hacktivists to organized crime and nation-state actors. Examine their motivations and the tactics they use.

Explore threat vectors and attack surfaces, including phishing, smishing, direct access to wired and wireless networks, removable media, cloud, and supply chain risks; learn defenses.

Explore threat data and intelligence to help security professionals stay proactive, using OSINT and commercial sources, threat feeds, CVEs, vulnerability databases, and indicators of compromise to assess risks.

Ransomware is malware that takes over a computer and demands ransom, including crypto malware that encrypts files; defend with offline backups and indicators of compromise.

Understand trojan horses as malware disguised as legitimate software that tricks users into installing them, enabling remote access tools and Triada-like behavior to gather device data.

Spyware is malware designed to obtain information about individuals or systems, including stalking and monitoring tools; defenses rely on user awareness and anti-spyware features in anti-malware software.

Identify and remove unwanted pre-installed applications, or bloatware, to prevent wasted resources and potential back doors. Create a backup or clean OS image to restore if needed.

Explore social engineering and human vectors, unpacking authority, intimidation, consensus, scarcity, familiarity, trust, and urgency, to prevent phishing and information theft through human factors.

Explore social engineering techniques such as phishing, spear phishing, whaling, brand impersonation, and typosquatting, and study defender strategies including awareness and trust-based responses.

Explore password attacks, including brute force, dictionary attacks, and rainbow tables, and learn to strengthen security with long, complex passwords and multi-factor authentication.

Explore non-repudiation as a key cyber security control, defined as proving a sender performed an action, with digital signatures illustrating origin, alongside revisiting confidentiality, integrity, and availability.

Perform a gap analysis to compare control objectives with designs, identify gaps as risks, and remediate using four security control categories, including physical controls such as fences and locks.

Directive controls, a key security control type, inform employees and others what they should do to achieve security objectives through policies, procedures, and training.

Compare 601 and 701 terminology on data protection, defining data at rest, data in transit (data in motion), and data in use (data actively in memory) and its implications.

Learn how data loss prevention (DLP) enforces handling policies in two environments: agent-based and agent-less network-based DLP, compared to host-based DLP with installed agents.

Explore access restrictions, including geographic restrictions and permission restrictions, to limit access to sensitive resources. See how segmentation and isolation, with VLANs and port controls, enforce least privilege.

explains the hats hackers wear, detailing authorized attackers (white hats), unauthorized attackers (black hats), and gray hats, while highlighting terminology changes across chapters and domains in 701 and 601.

Explore threat actors in the cyber security landscape, from unskilled attackers and hacktivists to organized crime and advanced persistent threats, and examine motivations like data exfiltration, espionage, and service disruption.

Explore threat vectors and attack surfaces, focusing on phishing across email, text, and voice calls, and assess wireless and removable media risks to harden endpoints.

Explore threat data and intelligence to proactively assess risks using OSINT and commercial sources, indicators of compromise, CVE data, and vulnerability databases.

Identify ransomware and its techniques, such as crypto malware and phishing campaigns, and implement effective defenses like backups and IOCs awareness.

Examine trojans that masquerade as legitimate apps and enable remote access by installing rats, including Triada disguised in modified WhatsApp, and joining devices to botnets and command-and-control networks.

Examine spyware as malware that collects information on individuals and systems, enabling identity theft and stalkerware, and learn mitigation through awareness and anti-malware tools.

Identify bloatware, pre-installed unwanted applications that clutter your system, and learn to remove them with a clean OS image and backups. Prioritize performance by removing unnecessary software.

Explore the CIA triad—confidentiality, integrity, and availability—of assets, assess breach risks, and apply technical, operational, and managerial controls to mitigate security threats.

Explore the evolving cybersecurity threat landscape by differentiating threats, attacks, and vulnerabilities, and identify internal and external actors—from insiders to APTs—across vectors like email, social media, and direct access.

Explore the cyber security threat landscape with open source intelligence, vulnerability databases, and CVEs. Learn to identify, analyze, prioritize, and manage threats using threat feeds and risk management practices.

Identify and assess cyber threat intelligence from multiple sources, evaluating timeliness, accuracy, and relevance, and apply confidence scores using STIX 2.0, TAXII, and Open IOC; consult information sharing centers.

Explore malicious code, including ransomware, trojans, worms, rootkits, spyware, and remote access tools, and learn indicators and a plan of action.

Explore backdoors and social engineering as attack methods, examine botnets, keyloggers, and spyware, and learn about signs, logging, and supply chain risks to defend against malicious code.

Explore how PowerShell, Bash, Python, and AppLocker can host malicious code, and learn defenses like constrained language mode, logging, Defender tools, rootkit detection, and encryption considerations.