Home - CompTIA Certifications - Security+ Certification
CompTIA Security+ Certification Training Video CBT
Today, dangerous security threats to public and private networks have become commonplace. It should therefore come as no surprise that more and more companies in the IT industry are looking to hire networking professionals with top-notch computer security qualifications. The CompTIA Security+ exam is the most widely recognized credentialing system in the world designed to certify your competence working with network infrastructure, systems security, access control, cryptography, and more. Because CompTIA uses a vendor-neutral approach emphasizing core security skills applicable to any professional environment, this desirable exam is taught all across the world by top universities and industry training centers. Although the Security+ exam subject area is challenging and complex, UpperTraining's computer based training program helps you prepare to master the material with ease.
With our computer-based video training, you won't be forced to sit in a boring classroom or to pore over textbooks – instead, you'll be learning through interactive, hands-on lessons taught by top certified Security+ professionals. You'll also enjoy full-motion video demonstrations that will clarify key concepts and processes in systems security, as well as discussions, laboratory sessions, and more.
The CompTIA Security+ 2009 is the industry-standard preparation for security professionals who are already working in the field or who are just getting started. As security becomes increasingly relevant to contemporary information technology, employers will seek more and more certified professionals to fill open positions. Don't let your lack of certification hold you back – let UpperTraining's CBT program for the Security+ exam get you ready for your future.
Security+ Training Videos Package Features:
- 3 DVDs featuring live instructor-led classroom sessions with full audio, video and demonstration components with over 80 hours of content
- Interactive Hands-on-lab simulations
- Printable Courseware
- Exclusive LearningZone Live Mentor (Value at $695) Help whenever you need it! Exclusive LearningZone - Why wait for email support? Chat Live with our Certified Instructors anytime around the clock (24x7)
- Proven technique- Actual Exam Secrets Review
- Security+ Certification Pass Guarantee
- Free course upgrade for one year
Technology Weaknesses
Configuration Weaknesses
Policy Weaknesses
Human Error and Malice
Securing the Operating System
Microsoft Update
Windows Update Categories
Demo - A-2: Updating the Operating System
Patch Management
Demo - A-3: Managing Software Patches
Service Packs
Demo - A-4: Checking for and Installing Service Packs
BIOS Version
BIOS Update
Demo - A-5: Determining Whether you Need to Update your Computer's BIOS
Windows Firewall
User Account Control
Demo - A-6: Configuring Windows Firewall
Countermeasures
Demo - B-1: Managing Application Security
Smart Card and Reader
Fingerprint Scanner
Biometric Devices
Plant Security
Cipher Lock
Man-trap
Malware Effects
Anti-malware
Antivirus Software
Anti-malware Products
Demo - D-2: Installing Antivirus Software
Windows Defender
Demo - D-3: Scanning your System for Spyware
Topic E: Social Engineering
Social Engineering
Types of Social Engineering
Social Engineering Countermeasures
Phishing
Demo - E-2: Examining Phishing
Spam
Social Networking
Unit 01 Review
ROT13 Cipher
Keys
Symmetric Encryption in Action
Common Symmetric Ciphers
Hashes
Uses for Hashes
MD5 Hash Algorithm
SHA
Hash Vulnerabilities
Demo - A-2: Calculating Hashes
Steganography
Demo - A-3: Sharing a Secret Message with Steganography
Asymmetric Encryption in Action
Common Asymmetric Ciphers
Demo - B-1: Exploring Public Key Cryptography
Digital Signatures
Signature Process
Features of Signatures
Digital Certificates
Certificate Types
Demo - B-2: Examining Certificates
Public Key Infrastructure
Certificate Policy
Certificate Practice Statement
Trust Models
Single-authority Trust Model
Hierarchical Trust Model
Web of Trust Model
Demo - B-3: Examining Certificate Trusts Single- and Dual-key Certificates
Quantum Cryptography
Unit 02 Review
Authentication Factors
One-factor Authentication
Two-factor Authentication
Three-factor Authentication
Considerations
Identification and Authentication
Identity Proofing
Single Sign-on
NTLM
NTLM Challenge-response
NTLM Vulnerabilities
Kerberos
Kerberos System Composed of:
Kerberos Data Types:
Kerberos Authentication Process
Cross-realm Authentication
Kerberos Security Weaknesses
Null Sessions
Secure Passwords
Password Realities
Least Privilege
Demo - C-1: Identifying Authentication Vulnerabilities
Wireshark
Demo - C-2: Capturing Passwords with a Protocol Analyzer
Password Cracking
Password Guessing
SAM and SYSTEM Files
Demo - C-3: Cracking Passwords
Unit 03 Review
Demo - A-1: Using MBSA to Analyze Security
Group Policy Settings
Local GPO Types
GPO Editor
Local Computer GPO Nodes
Demo - A-2: Creating a Console to Manage Local Security Policies
Policy Properties Dialog Box
Container Types
Types of Domain GPOs
GPOs Applied in this Order
Demo - A-3: Using the GPMC
Demo - B-1: Creating Users and Groups Based on Security Needs
Permissions
File System Security
Access Control Models
Demo - B-2: Securing File Resources
Unit 04 Review
File-level Encryption
Demo - A-1: Enabling File-based Encryption
Whole Disk Encryption
Windows BitLocker
BitLocker Life Cycle
Recovery
Other Disk Encryption Tools
Demo - A-2: Creating an Encrypted Volume
Demo - A-3: Mounting, Using, and Dismounting an Encrypted Volume
USB Drives
Laptops
Shredding Standards
Demo - B-2: Using Windows Policies to Mitigate the Risks of Peripherals
Additional Concerns
Mitigating Risks
Screen Lock
Android Security Settings
WaveSecure
Risks and Threats
Unit 05 Review
Setup and Initialization Phase
Administration Phase
Cancellation and Key History
Administrative Responsibilities
AD Integration Options
CA Role
Demo - B-1: Installing a Standalone Root Certificate Authority
Demo - B-2: Installing an Enterprise Subordinate CA
Demo - B-3: Implementing a File-based Certificate Request
Demo - B-4: Managing your Certificate Server
User Certificates
Demo - B-5: Requesting a User Certificate
Certificate Revocation
Demo - B-6: Revoking a Certificate
Key Escrow and Recovery
Key Recovery Agent
Demo - B-7: Enabling the EFS Recovery Agent Template
Demo - B-8: Enrolling for a Recovery Agent Certificate
Demo - B-9: Enabling Key Archival
Demo - B-10: Re-enrolling All Certificates
Commercial Certificate
Demo - C-1: Requesting and Installing a Web Server Certificate
Demo - C-2: Enabling SSL for the Certificate Server Website
HTTPS Connections
Demo - C-3: Making a Secure Connection
Demo - C-4: Requesting a Client Certificate via the Web
Unit 06 Review
Programmer's Perspective
Administrator's Perspective
User's Perspective
Application Attacks
E-mail Application Security
Demo - B-2: Configuring an E-mail Client to Use Secure Authentication
Signed and Encrypted Mail
PGP
PGP Certificates
S/MIME
X.509 Certificates
PGP vs. S/MIME
Demo - B-3: Examining S/MIME Features
Using PGP
Demo - B-4: Installing Gnu Privacy Guard and Enigmail
Demo - B-5: Creating an OpenPGP Certificate and Key Pair
Signed Message
Demo - B-6: Sending a Signed Message
Instant Messaging
IM Ports
Unit 07 Review
Application-layer Protocols
HTTP
HTTPS Connections
FTP
Trivial File Transfer Protocol
SFTP
Telnet
DNS
Additional Protocols
Transport-layer Protocols
Port Numbers
Service Port Numbers
Demo - A-3: Using Port Numbers
IPv4 Classes
IPv4 Header
CIDR and NAT
IPv6 Header
IPv6 Scopes
IPv6 Address Types
Demo - A-4: Comparing IPv4 and IPv6 Packets
TCP Three-way Handshake
Smurf Attack
Ping-of-Death Attacks
Xmas Attacks
Demo - B-1: Preventing Common Protocol-based Attacks
DDoS Attacks
DDoS Attack Protection
Demo - B-2: Assessing your Vulnerability to DDoS Attacks
Man-in-the-Middle Attacks
Spoofing
IP Address Spoofing
Demo - B-3: Scanning Ports
ARP Poisoning
Demo - B-4: Checking the ARP Cache
Spoofing Attacks
Replay Attacks
TCP/IP Hijacking
Unit 08 Review
Networking Devices
Repeaters, Hubs, Switches
Switch Security
Routers
Router State Management
NAT and PAT
Port Address Translation
Firewalls and Proxies
Firewall Categories
Security Issues
Overcoming Weaknesses
Intranet Zone
Perimeter Network
DMZ Options
Screened Host
Bastion Host
Three-homed Firewall
Back-to-back Firewalls
Dead Zone
Traffic Filtering
Network Bridging
VLAN
Network Access Control
VPN
IPSec Encryption
Rule Planning
Demo - C-1: Configuring Firewall Rules
Port Security
Demo - C-2: Blocking Ports with the Windows Firewall
VLAN Security
Secure Router Configuration
Citrix XenServer
Virtualization Concerns and Risks
Cloud Computing
Cloud Deployment
Cloud Categories
Risks and Concerns
Unit 09 Review
802.11 Family
802.11 Networking
Wireless Security Threats
Wireless Security
Transmission Encryption
Configuration Options
Demo - A-2: Configuring a Wireless Access Point
Configuring Wireless Clients
RADIUS
Demo - A-3: Configuring a Wireless Client
Wireless Network Vulnerabilities
Wi-Fi Scanners
War Chalking Symbols
Protecting Against Attacks
Unit 10 Review
RADIUS
RADIUS Authentication
Realms
RADIUS Security
RADIUS Benefits
LDAP and Remote Access
LDAP Security
LDAP Authentication/Authorization
TACACS+
TACACS+ versus RADIUS
802.1X
Network Policy Server (NPS)
Demo - A-5: Installing Network Policy and Access Services
Demo - A-6: Configuring an NPS Network Policy
Demo - A-7: Configuring NPS Accounting
VPN Technologies
VPN Security Models
VPN Protocols
PPTP versus L2TP
IPSec Protocols
Encryption Modes
Secure Shell (SSH)
VPN Solutions
Service Provider Tunneling
Demo - B-2: Installing Routing and Remote Access Services
Demo - B-3: Enabling a VPN
Demo - B-4: Configuring NPS to Provide RADIUS Authentication for your VPN
Unit 11 Review
Vulnerability Assessments
Vulnerability Testing Tools
Penetration Testing
Penetration vs. Vulnerability
Demo - A-2: Scanning the Network
Windows Server 2008 Event Viewer
Events
Event Types
Event Details
Demo - B-1: Viewing Event Logs
Device and Application Logging
Events
NIDS
IDScenter for Snort
Example Snort Rule
HIDS
HIDS Advantages Over NIDS
Honeypots and Honeynets
Honeypot Examples
Honeypot Deployment
Evidence-Gathering Principles
Chain of Custody
Remediation
Unit 12 Review
Control Types
Risk Assessment
Security Policy Contents
Acceptable-Use Policy
Due Care
Privacy
Separation of Duties
Need to Know
Password Management
Service-level Agreement
Disposal and Destruction
Human Resources Policies
Incident Response Policy
Incident Response Policy Contents
Preparation
Detection
Containment
Eradication
Recovery
Follow-up
Hiring
Employee Review and Maintenance
Post-employment
Code of Ethics
Change Management
Change Documentation
Communication
User Awareness
Types of Training
Data Security and Destruction
Disposal of Electronics
Disposal of Computer Equipment
Unit 13 Review
Threats
Business Continuity Teams
Contingency Plan
Documentation
Disaster or Service Failure
Utility Services
Redundant Locations
Disaster Recovery Exercises
RAID Level 0
RAID Level 1
RAID Level 3
RAID Level 5
RAID 0+1 (or RAID 01)
RAID 1+0 (or RAID 10)
RAID Considerations
Level-specific Considerations
Software vs. Hardware RAID
Backup Tools
Backup Types
Backup Media
Backup Storage
Grandfather Method
Tower of Hanoi
Incremented Media Backup
Backup Storage (Cont.)
Data Restoration
Demo - B-4: RAID Configuration (Software)
Fire Extinguisher Classes
Fire Extinguisher Contents
Extinguisher Label
Safety Guidelines
HVAC
Shielding
Unit 14 Review
Course Closure









