CompTIA Security+ Training for Exam SY0-301 - Course Outline

Instructor - James Stewart (MCT, CTT+, CISSP, Security+, MCSE+S, MCSE NT & 2000, TICSA, CCNA, CIWSA, i-Net+)
Estimated Time to Complete - 50 hours

 Lecture Videos: 39 Lessons (4 Hrs 26 Mins)
 Demonstration Videos: 71 Lessons (4 Hrs 50 Mins)
 Hands-on Labs: 64 Scenarios (Student lab activities)
 Fact Sheets: 33 (each with 1 or more printable pages)
 Exam Questions: 302 (each with answers and explanations)
 Exams: 32 Practice Tests (each with detailed reporting)

0.0 Introduction (4 questions)
This section introduces the concepts upon which security relies.

• 0.1 Introduction to Security 
  
   0.1.1 Introduction to Security (7 Mins 14 Secs)
  
  0.2 Access Control Models 
  
   0.2.1 Access Control Models (6 Mins 26 Secs)
   0.2.2 Access Control Model Comparison 
   0.2.3 ExamSim Questions - Section 0.2 
  
  0.3 Active Directory 
  
   0.3.1 Creating Local User Accounts (2 Mins 17 Secs)
   0.3.2 Create a Local User Account 
   0.3.3 Change the Account Type 
   0.3.4 Tour of Active Directory (4 Mins 41 Secs)
   0.3.5 Configuring Group Policy Settings (4 Mins 38 Secs)
   0.3.6 Managing Domain User Accounts (6 Mins 55 Secs)
   0.3.7 Create a Domain User Account 
   0.3.8 Disable a User Account 
   0.3.9 Reset the Password 
   0.3.10 Using the Run As Option (2 Mins 31 Secs)
  
  0.4 eDirectory 
  
   0.4.1 Tour of eDirectory (3 Mins 39 Secs)
   0.4.2 Creating an eDirectory User (1 Min 03 Secs)
   0.4.3 Create a User

1.0 Network Vulnerabilities and Attacks (29 questions) 
This section covers the ways in which networks are exposed to security risks.

• 1.1 System Attacks 
  
   1.1.1 Denial of Service (12 Mins 38 Secs)
   1.1.2 Authentication Attacks (7 Mins 00 Secs)
   1.1.3 Malicious Code (5 Mins 31 Secs)
   1.1.4 System Exploitation (5 Mins 22 Secs)
   1.1.5 Attack Types 
   1.1.6 Hacking Resources (3 Mins 28 Secs)
   1.1.7 Examining a Denial of Service Attack (4 Mins 42 Secs)
   1.1.8 Keystroke Logging (4 Mins 01 Sec)
   1.1.9 Using a Virus Scanner (5 Mins 26 Secs)
   1.1.10 Scanning for SpyWare (3 Mins 37 Secs)
   1.1.11 ExamSim Questions - Section 1.1 
  
  1.2 Social Engineering 
  
   1.2.1 Social Engineering (3 Mins 07 Secs)
   1.2.2 Social Engineering Facts 
   1.2.3 Researching Virus Hoaxes (5 Mins 34 Secs)
   1.2.4 ExamSim Questions - Section 1.2

2.0 Cryptography (27 questions) 
This section covers the methods used to establish security through data encryption.

• 2.1 Cryptographic Methods 
  
   2.1.1 Cryptography Goals (4 Mins 25 Secs)
   2.1.2 Symmetric Cryptography (5 Mins 53 Secs)
   2.1.3 Asymmetric Cryptography (11 Min 37 Secs)
   2.1.4 Hashing Cryptography (4 Mins 34 Secs)
   2.1.5 Cryptographic Methods 
   2.1.6 ExamSim Questions - Section 2.1 
  
  2.2 Cryptographic Attacks 
  
   2.2.1 Cryptographic Attacks (5 Mins 35 Secs)
   2.2.2 Cryptographic Attack Facts 
   2.2.3 Password Cracking (4 Mins 10 Secs)
   2.2.4 ExamSim Questions - Section 2.2 
  
  2.3 Logon Security 
  
   2.3.1 Configuring Domain Password Settings (Active Directory) (3 Mins 42 Secs)
   2.3.2 Configuring Account Lockout (Active Directory) (3 Mins 38 Secs)
   2.3.3 Enforce Password Settings 
   2.3.4 Configure Account Lockout 
   2.3.5 Disable Last Logon Name 
   2.3.6 Configuring Login Security (eDirectory) (4 Mins 07 Secs)
   2.3.7 Modify Password Properties 
   2.3.8 Restrict Logon Hours

3.0 Public Key Infrastructure (PKI) (21 questions) 
This section covers the combination of public and private key cryptography to provide authentication, confidentiality, integrity, and non-repudiation.

• 3.1 PKI Concepts 
  
   3.1.1 PKI and Certificates (6 Mins 31 Secs)
   3.1.2 Key Management (7 Mins 04 Secs)
   3.1.3 PKI Facts 
   3.1.4 ExamSim Questions - Section 3.1 
  
  3.2 Managing Certificates 
  
   3.2.1 Requesting a Digital ID from VeriSign (4 Mins 29 Secs)
   3.2.2 Installing a Certificate Authority (3 Mins 27 Secs)
   3.2.3 Requesting a Certificate (1 Min 19 Secs)
   3.2.4 Approving Pending Certificates (3 Mins 38 Secs)
   3.2.5 Revoking Certificates (1 Min 37 Secs)

4.0 Authentication (11 questions) 
This section covers the authentication as a means of confirming a user’s identity,
including the factors of authentication and implementation.

• 4.1 Authentication 
  
   4.1.1 Authentication Types (9 Mins 51 Secs)
   4.1.2 Protecting Authentication (7 Mins 49 Secs)
   4.1.3 Authentication Facts 
   4.1.4 Enforce NTLM Authentication 
   4.1.5 ExamSim Questions - Section 4.1

5.0 Network Infrastructure Security (23 questions) 
This section covers the security considerations behind network design.

• 5.1 Network Components 
  
   5.1.1 Network Components (10 Mins 29 Secs)
   5.1.2 Security Zones (7 Mins 13 Secs)
   5.1.3 Network Component Facts 
   5.1.4 ExamSim Questions - Section 5.1 
  
  5.2 Network Address Translation (NAT) 
  
   5.2.1 Sharing a Connection (3 Mins 37 Secs)
   5.2.2 Share an Internet Connection 
   5.2.3 Configuring NAT (4 Mins 04 Secs)
   5.2.4 Configure NAT 
   5.2.5 Private IP Addresses 
   5.2.6 ExamSim Questions - Section 5.2 
  
  5.3 Firewalls 
  
   5.3.1 Firewalls (8 Mins 00 Secs)
   5.3.2 Firewall Facts 
   5.3.3 TCP/IP Protocols and Ports 
   5.3.4 Configuring ICF (4 Mins 15 Secs)
   5.3.5 Enable ICF 
   5.3.6 Open ICF Ports 
   5.3.7 Close Open Ports 
   5.3.8 Prevent ICMP Events 
   5.3.9 Using Zone Alarm (6 Mins 36 Secs)
   5.3.10 ExamSim Questions - Section 5.3 
  
  5.4 Packet Filters 
  
   5.4.1 Configuring Packet Filters (5 Mins 07 Secs)
   5.4.2 Create a Packet Filter 1 
   5.4.3 Create a Packet Filter 2 
   5.4.4 Configuring Access Control Lists (ACL) (11 Min 40 Secs)
   5.4.5 Apply Access Lists to Interfaces 
   5.4.6 Restrict Traffic from Specific Hosts 
   5.4.7 Restrict Traffic from Specific Networks 
  
  5.5 Virtual LANs (VLANs) 
  
   5.5.1 Configuring VLANs (7 Mins 31 Secs)
   5.5.2 Create a VLAN and Assign Ports 
   5.5.3 Exploring VLAN Communication 
  
  5.6 Media Security 
  
   5.6.1 Media Security (3 Mins 29 Secs)
   5.6.2 Media Security Facts 
   5.6.3 Cleaning Media (3 Mins 15 Secs)
   5.6.4 ExamSim Questions - Section 5.6

6.0 Network and Application Hardening (11 questions) 
This section covers the security considerations behind network design.

• 6.1 Hardening Concepts 
  
   6.1.1 OS and Network Hardening (6 Mins 44 Secs)
   6.1.2 Application Hardening (5 Mins 22 Secs)
   6.1.3 Network and Application Hardening Facts 
   6.1.4 ExamSim Questions - Section 6.1 
  
  6.2 Network Hardening 
  
   6.2.1 Telnet Enumeration (2 Mins 40 Secs)
   6.2.2 Exploiting NetBIOS (4 Mins 52 Secs)
   6.2.3 Managing Network Components (4 Mins 11 Secs)
   6.2.4 Disable File and Printer Sharing 
   6.2.5 Uninstall a Component 
   6.2.6 Disable NetBIOS over TCP/IP 
   6.2.7 Capturing Packets (4 Mins 21 Secs)
   6.2.8 Configuring SMB Signing (3 Mins 00 Secs)
   6.2.9 Enforce SMB Signing 
  
  6.3 Operating System Hardening 
  
   6.3.1 Researching Security Issues (5 Mins 02 Secs)
   6.3.2 Applying Windows Updates (3 Mins 17 Secs)
   6.3.3 Using MBSA (3 Mins 09 Secs)
   6.3.4 Using Security Configuration and Analysis (3 Mins 30 Secs)
   6.3.5 Creating and Applying Templates (4 Mins 29 Secs)
   6.3.6 Managing Services (4 Mins 45 Secs)
   6.3.7 Stop and Disable Services 
   6.3.8 Using Process Explorer (5 Mins 55 Secs)
  
  6.4 Protecting Files (Microsoft) 
  
   6.4.1 Using NTFS (4 Mins 31 Secs)
   6.4.2 Format a Drive 
   6.4.3 Convert a Drive 
   6.4.4 Configuring NTFS Permissions (3 Mins 00 Secs)
   6.4.5 Change NTFS Permissions 
   6.4.6 Configure NTFS Permissions 
   6.4.7 Encrypting Files and Folders (2 Mins 43 Secs)
   6.4.8 Encrypt a File 
   6.4.9 Encrypt a Folder and Contents 
  
  6.5 Protecting Files (Novell) 
  
   6.5.1 Setting File Rights (2 Mins 16 Secs)
   6.5.2 Modify File System Rights 
   6.5.3 Add a Trustee and Rights 
   6.5.4 Configuring File Attributes (1 Min 29 Secs)
   6.5.5 Modify Folder Attributes

7.0 Auditing and Intrusion Detection (14 questions) 
This section covers the methods used to track network activity and to respond to network attacks.

• 7.1 Auditing 
  
   7.1.1 Auditing (4 Mins 49 Secs)
   7.1.2 Auditing Systems (3 Mins 46 Secs)
   7.1.3 Enable Auditing 1 
   7.1.4 Enable Auditing 2 
   7.1.5 Managing Security Logs (3 Mins 59 Secs)
   7.1.6 Save the Audit Log 
   7.1.7 Change Log Properties 
   7.1.8 Configure the System to Shut Down 
   7.1.9 Scanning for Open Ports (4 Mins 21 Secs)
   7.1.10 ExamSim Questions - Section 7.1 
  
  7.2 Intrusion Detection 
  
   7.2.1 Intrusion Detection (7 Mins 24 Secs)
   7.2.2 Intrusion Detection Methods 
   7.2.3 ExamSim Questions - Section 7.2

8.0 Communication Security (53 questions) 
This section covers the vulnerabilities in a network that allows users to connect to it remotely. The section also covers the tools available to protect remote access.

• 8.1 Remote Access 
  
   8.1.1 Remote Access (6 Mins 45 Secs)
   8.1.2 Remote Access Facts 
   8.1.3 Configuring a Remote Access Server (4 Mins 26 Secs)
   8.1.4 Configure a Remote Access Server 
   8.1.5 Configuring Remote Access Policies (4 Mins 31 Secs)
   8.1.6 Create a Remote Access Policy 
   8.1.7 Creating a Dialup Connection (4 Mins 30 Secs)
   8.1.8 Create a Dialup Connection 
   8.1.9 Configure Advanced Authentication 
   8.1.10 Configure Smart Card for Authentication 
   8.1.11 Configuring RADIUS (4 Mins 42 Secs)
   8.1.12 ExamSim Questions - Section 8.1 
  
  8.2 Virtual Private Networking (VPN) 
  
   8.2.1 Virtual Private Networking (VPN) (4 Mins 19 Secs)
   8.2.2 VPN Facts 
   8.2.3 Configuring a VPN Server (6 Mins 17 Secs)
   8.2.4 Configure a VPN Server 
   8.2.5 Disable PPTP Ports 
   8.2.6 Creating a Client VPN Connection (5 Mins 55 Secs)
   8.2.7 Create a Client VPN Connection 
   8.2.8 Customize the Tunneling Protocol 
   8.2.9 Configuring IPSec (4 Mins 04 Secs)
   8.2.10 Analyzing IPSec Traffic (2 Mins 01 Sec)
   8.2.11 ExamSim Questions - Section 8.2 
  
  8.3 Internet Communications 
  
   8.3.1 Internet Communication Security (3 Mins 08 Secs)
   8.3.2 Web Communication Protocols 
   8.3.3 ExamSim Questions - Section 8.3 
  
  8.4 Wireless Security 
  
   8.4.1 Wireless Security (5 Mins 55 Secs)
   8.4.2 Wireless Security Facts 
   8.4.3 ExamSim Questions - Section 8.4

9.0 Internet Services Security (49 questions) 
This section covers the security risks the come from Web-based services.

• 9.1 Web Server Security 
  
   9.1.1 Web Server Security (5 Mins 26 Secs)
   9.1.2 Web Server Security Facts 
   9.1.3 Configuring IIS Authentication (4 Mins 09 Secs)
   9.1.4 Configure Web Site Authentication 
   9.1.5 Configure Web Folder Authentication 
   9.1.6 Configuring IIS Permissions (3 Mins 33 Secs)
   9.1.7 Configure IIS Permissions 
   9.1.8 ExamSim Questions - Section 9.1 
  
  9.2 FTP Security 
  
   9.2.1 FTP Server Security (3 Mins 51 Secs)
   9.2.2 FTP Security Facts 
   9.2.3 Securing an FTP Server (4 Mins 06 Secs)
   9.2.4 Uploading and Downloading Files (7 Mins 00 Secs)
   9.2.5 ExamSim Questions - Section 9.2 
  
  9.3 Messaging Security 
  
   9.3.1 E-mail Security (6 Mins 36 Secs)
   9.3.2 Instant Messaging Security (6 Mins 52 Secs)
   9.3.3 Internet Communication Security 
   9.3.4 Using PGP (2 Mins 31 Secs)
   9.3.5 Uninstalling Instant Messaging (2 Mins 51 Secs)
   9.3.6 ExamSim Questions - Section 9.3 
  
  9.4 Browser Security 
  
   9.4.1 Clearing the Cache (4 Mins 45 Secs)
   9.4.2 Clear the Browser Cache 
   9.4.3 Configuring Security Zones (6 Mins 06 Secs)
   9.4.4 Add a Trusted Site 
   9.4.5 Add a Restricted Site 
   9.4.6 Customize Zone Settings 
   9.4.7 Configuring Cookie Handling (2 Mins 29 Secs)
   9.4.8 Change the Cookie Level 
   9.4.9 Customize Cookie Handling 
   9.4.10 Configuring Advanced IE Settings (2 Mins 59 Secs)
   9.4.11 Configure Browser Security 
   9.4.12 Clear Temporary Internet Files 
  
  9.5 Directory Services Security 
  
   9.5.1 Directory Services Security (3 Mins 59 Secs)
   9.5.2 Directory Services Security Facts 
   9.5.3 ExamSim Questions - Section 9.5

10.0 Operational Security (14 questions) 
This section covers planning procedures for events that disrupt normal business operations. It also covers the methods for disaster recovery, like recovery and salvage team responsibilities and secondary site establishment.

• 10.1 Business Continuity 
  
   10.1.1 Business Continuity (10 Mins 38 Secs)
   10.1.2 Business Continuity Facts 
   10.1.3 ExamSim Questions - Section 10.1 
  
  10.2 Physical Security 
  
   10.2.1 Physical Security and Backup (13 Mins 04 Secs)
   10.2.2 Backing Up Data (2 Mins 41 Secs)
   10.2.3 Restoring Data (2 Mins 08 Secs)
   10.2.4 Recovering Lost Files (4 Mins 10 Secs)
   10.2.5 Physical Security Facts 
   10.2.6 Backup Facts 
   10.2.7 ExamSim Questions - Section 10.2

11.0 Security Planning (43 questions) 
This section covers security policy planning, risk analysis, and incident response, including investigatory procedures and evidence handling.

• 11.1 Security Planning 
  
   11.1.1 The Security Policy (10 Mins 09 Secs)
   11.1.2 Security Planning Facts 
   11.1.3 Risk Planning (8 Mins 24 Secs)
   11.1.4 Risk Planning Facts 
   11.1.5 Privilege Management and Education (4 Mins 13 Secs)
   11.1.6 Privilege Management and Education Facts 
   11.1.7 ExamSim Questions - Section 11.1 
  
  11.2 Incident Response 
  
   11.2.1 Incident Response (8 Mins 44 Secs)
   11.2.2 Incident Response Facts 
   11.2.3 ExamSim Questions - Section 11.2

ExamSim (302 questions)

• Preparing for Certification 
  
   Exam Objectives 
   Exam FAQs 
   How to Register for an Exam 
   Exam-taking Hints and Tips 
  
   Domain 1, All Questions (60 questions) 
   Domain 2, All Questions (89 questions) 
   Domain 3, All Questions (55 questions) 
   Domain 4, All Questions (36 questions) 
   Domain 5, All Questions (62 questions) 
   Typical Exam