CompTIA Training | CompTIA Security+ Certification in Taipei

CompTIA Security+ Certification Course Outline

Domain 1: General Security Concepts 

Module 1: Security Controls

• Comparing Technical
• Preventive
• Managerial
• Deterrent
• Operational
• Detective
• Physical
• Corrective
• Compensating and Directive Controls

Module 2: Fundamental Concepts

• Summarising Confidentiality
• Integrity and Availability (CIA)
• Non-repudiation
• Authentication
• Authorisation and Accounting (AAA)
• Zero Trust and Deception/Disruption Technology

Module 3: Change Management

• Explaining Business Processes
• Technical Implications
• Documentation and Version Control

Module 4: Cryptographic Solutions

• Using Public Key Infrastructure (PKI)
• Encryption
• Obfuscation
• Hashing
• Digital Signatures and Blockchain

Domain 2: Threats, Vulnerabilities, and Mitigations 

Module 5: Threat Actors and Motivations

• Comparing Nation-states
• Unskilled Attackers
• Hacktivists
• Insider Threats
• Organised Crime
• Shadow IT and Motivations Like Data Exfiltration
• Espionage and Financial Gain

Module 6: Threat Vectors and Attack Surfaces

• Explaining Message-based
• Unsecure Networks
• Social Engineering
• File-based
• Voice Call
• Supply Chain and Vulnerable Software Vectors

Module 7: Vulnerabilities

• Explaining Application
• Hardware
• Mobile Device
• Virtualisation
• Operating System (OS)-based
• Cloud-specific
• Web-based and Supply Chain Vulnerabilities

Module 8: Malicious Activity

• Analysing Malware Attacks
• Password Attacks
• Application Attacks
• Physical Attacks
• Network Attacks and Cryptographic Attacks

Module 9: Mitigation Techniques

• Using Segmentation
• Access Control
• Configuration Enforcement
• Hardening
• Isolation
• Patching

Domain 3: Security Architecture 

Module 10: Architecture Models

• Comparing On-premises
• Cloud
• Virtualisation
• Internet Of Things (IoT)
• Industrial Control Systems (ICS) and Infrastructure As Code (IaC)

Module 11: Enterprise Infrastructure

• Applying Security Principles To Infrastructure Considerations
• Control Selection and Secure Communication/Access

Module 12: Data Protection

• Comparing Data Types
• Securing Methods
• General Considerations and Classifications

Module 13: Resilience and Recovery

• Explaining High Availability
• Site Considerations
• Testing
• Power
• Platform Diversity
• Backups and Continuity Of Operations

Domain 4: Security Operations 

Module 14: Computing Resources

• Applying Secure Baselines
• Mobile Solutions
• Hardening
• Wireless Security
• Application Security
• Sandboxing and Monitoring

Module 15: Asset Management

• Explaining Acquisition
• Disposal
• Assignment and Monitoring/Tracking Of Hardware
• Software and Data Assets

Module 16: Vulnerability Management

• Identifying
• Analysing
• Remediating
• Validating and Reporting Vulnerabilities

Module 17: Alerting and Monitoring

• Explaining Monitoring Tools and Computing Resource Activities

Module 18: Enterprise Security

• Modifying Firewalls
• IDS/IPS
• DNS Filtering
• DLP (Data Loss Prevention)
• NAC (Network Access Control) and EDR/XDR (Endpoint/Extended Detection and Response)

Module 19: Identity and Access Management:

• Implementing Provisioning
• SSO (Single Sign-on)
• MFA and Privileged Access Tools

Module 20: Automation and Orchestration

• Explaining Automation Use Cases
• Scripting Benefits and Considerations

Module 21: Incident Response

• Implementing Processes
• Training
• Testing
• Root Cause Analysis
• Threat Hunting and Digital Forensics

Module 22: Data Sources

• Using Log Data and Other Sources To Support Investigations

Domain 5: Security Program Management and Oversight

Module 23: Security Governance

• Summarising Guidelines
• Policies
• Standards
• Procedures
• External Considerations
• Monitoring
• Governance Structures and Roles/Responsibilities

Module 24: Risk Management

• Explaining Risk Identification
• Assessment
• Analysis
• Register
• Tolerance
• Appetite
• Strategies
• Reporting and Business Impact Analysis (BIA)

Module 25: Third-party Risk

• Managing Vendor Assessment
• Selection
• Agreements
• Monitoring
• Questionnaires and Rules of Engagement

Module 26: Security Compliance

• Summarising Compliance Reporting
• Consequences of Non-compliance
• Monitoring and Privacy

Module 27: Audits and Assessments

• Explaining Attestation
• Internal/External Audits and Penetration Testing

Module 28: Security Awareness

• Implementing Phishing Training
• Anomalous Behaviour Recognition
• User Guidance
• Reporting and Monitoring

Who should attend this CompTIA Security+ Certification Training Course?

The CompTIA Security+ Certification Course is designed for individuals pursuing a career in the field of Information Security. This certification is widely recognised and respected in the IT industry and covers a broad range of security topics. This CompTIA Certification can benefit a wide range of professionals, including:

• IT Professionals in Security Roles
• Security Analysts
• Network Engineers
• Security Consultants
• System Administrators
• Security Administrators
• IT Managers
• Network Managers

Prerequisites of the CompTIA Security+ Certification Training Course

There are no formal prerequisites for attending this CompTIA Security+ Certification Training Course. However, the delegates who have completed the CompTIA Network+ Certification and have at least two years of experience in IT administration with a security focus will benefit greatly from the course.

CompTIA Security+ Certification Course Overview

In today's digital landscape, cybersecurity is of paramount importance, with businesses facing a constant threat of cyberattacks and data breaches. Skilled IT Security Specialists are vital for safeguarding an organisation's internal systems. This course is designed for individuals looking to advance their careers in IT security. As the number of security threats continues to rise, the demand for CompTIA Security+ certified professionals is higher than ever.

Professionals in the field of Information Technology, Cybersecurity, and Network Administration should aim to master the CompTIA Security+ Certification Course. This certification not only validates their expertise but also enhances their career prospects, as organisations across industries seek qualified individuals to safeguard their digital assets and sensitive information.

This comprehensive 4-Day CompTIA Security+ Certification offered by The Knowledge Academy covers a wide range of topics, including network security, cryptography, threat detection, and risk management. Delegates will benefit from hands-on training, real-world scenarios, and expert guidance, enabling them to successfully pass the CompTIA Security+ exam and apply their knowledge in practical cybersecurity settings.

Course Objectives

• To understand the fundamentals of cybersecurity principles and practices
• To identify common security threats and vulnerabilities in networks and systems
• To implement appropriate security controls to protect data and information assets
• To demonstrate proficiency in cryptography, access control, and identity management
• To develop skills in risk assessment, incident response, and disaster recovery
• To prepare delegates for the CompTIA Security+ Certification exam
• To train delegates in implementing secure network architecture and design
• To enhance understanding of identity management and access control mechanisms

Upon completing CompTIA Security+ Certification, delegates will be well-equipped to pursue rewarding careers in cybersecurity, with opportunities ranging from entry-level positions to advanced roles such as security analyst, security engineer, or cybersecurity consultant.

What’s included in this CompTIA Security+ Certification Training Course?

• World-Class Training Sessions from Experienced Instructors 
• Digital Delegate Pack