CompTIA Security Training Course

Leave a review

SKU: 4538

Format: Training Course

Tests your skills and knowledge to install and configure systems to secure devices, applications and networks.
Learn how to troubleshoot security events and incidents.
Train without the travel with our instructor-led online or classroom/online combination courses giving you all the benefits of classroom study without the hassle, uncertainty and cost of travel.
Successful completion of the course and included exam leads to the CompTIA Security+ certification.
Please note: Once purchased one of our team will contact you to finalise your booking arrangements and confirm a suitable date and location for your course.

Ways to learn | In-house

Buy now, pay later | Apply for an IT Governance corporate account today.

PayPal Credit | Get 0% interest for 4 months with PayPal Credit. Apply now.

Guaranteed price match on any like-for-like course for the best quality training at the best price. T&C’s apply*

Price: £3,420.00

ex. VAT

Description

Training course outline

CompTIA Security+ is an internationally recognised qualification that demonstrates that individuals have the knowledge required to identify security risks, participate in risk mitigation activities, and deliver infrastructure, application, and operational security.

It also confirms that the holder can apply security controls to maintain confidentiality, integrity and availability, identify appropriate technologies, troubleshoot security incidents, and operate with an awareness of applicable policies, laws and regulations.

CompTIA Security+ course benefits

Globally recognised course

Globally recognised qualification by employers in over 147 countries.

Gain a popular qualification

Strong demand for qualified information security professionals.

Advance your career

Enhanced career advancement in an existing organisation.

Boost your potential

Higher salaries and remuneration.

Who should attend this course?

IT professionals who wish to build on their existing knowledge of IT networks and develop a career as an information security professional. It is also suitable for existing information security professionals who wish to gain an industry-recognised qualification.

Your Learning Path

Find out how the CompTIA Security+ Training Course will help you start or enhance your knowledge and career.

This course is an essential component of the following learning path:

Cyber Security roles

Course details

What does this course cover?

Identify network attack strategies and defences.
Understand the principles of organisational security and the elements of effective security policies.
Know the technologies and uses of cryptographic standards and products.
Identify network- and host-based security technologies and practices.
Describe how wireless and remote access security is enforced.
Describe the standards and products used to enforce security on web and communications technologies.
Identify strategies for ensuring business continuity, fault tolerance, and disaster recovery.
Summarise application and coding vulnerabilities and identify development and deployment methods designed to mitigate them.

Percentages indicate approximate weight given to each topic in the exam.

View full course content

Module 1 / Threats, Attacks, and Vulnerabilities

Indicators of Compromise

Why is Security Important?
Security Policy
Threat Actor Types
The Kill Chain
Social Engineering
Phishing
Malware Types
Trojans and Spyware
Open Source Intelligence

Labs:

VM Orientation
Malware Types

Critical Security Controls

Security Control Types
Defence in Depth
Frameworks and Compliance
Vulnerability Assessments and Pen tests
Security Assessment Techniques
Pen Testing Concepts
Vulnerability Scanning Concepts
Exploit Frameworks

Labs:

Using Vulnerability Assessment Tools

Security Posture Assessment Tools

Topology Discovery
Service Discovery
Packet Capture & Packet Capture Tools
Remote Access Trojans
Honeypots and Honeynets

Labs:

Using Network Scanning Tools 1
Using Network Scanning Tools 2
Using Steganography Tools

Incident Response:

Incident Response Procedures
Preparation Phase
Identification Phase
Containment Phase
Eradication and Recovery Phases

Module 2 / Identity and Access Management

Cryptography

Uses of Cryptography
Cryptographic Terminology and Ciphers
Cryptographic Products
Hashing Algorithms
Symmetric Algorithms
Asymmetric Algorithms
Diffie-Hellman and Elliptic Curve
Transport Encryption
Cryptographic Attacks

Labs:

Implementing Public Key Infrastructure

Public Key Infrastructure (PKI)

PKI Standards
Digital Certificates
Certificate Authorities
Types of Certificate
Implementing PKI
Storing and Distributing Keys
Key Status and Revocation
PKI Trust Models
PGP / GPG

Labs:

Deploying Certificates and Implementing Key Recovery

Identification and Authentication:

Access Control Systems
Identification
Authentication
LAN Manager / NTL
Kerberos
PAP, CHAP, and MS-CHAP
Password Attacks
Token-based Authentication
Biometric Authentication
Common Access Card

Labs:

Using Password Cracking Tools

Identity and Access Services:

Authorization
Directory Services
RADIUS and TACACS+
Federation and Trusts
Federated Identity Protocols

Account Management:

Formal Access Control Models
Account Types
Windows Active Directory
Creating and Managing Accounts
Account Policy Enforcement
Credential Management Policies
Account Restrictions
Accounting and Auditing

Labs:

Using Account Management Tools

Module 3 / Architecture and Design (1)

Secure Network Design

Network Zones and Segments
Subnetting
Switching Infrastructure
Switching Attacks and Hardening
Endpoint Security
Network Access Control
Routing Infrastructure
Network Address Translation
Software Defined Networking

Labs:

Implementing a Secure Network Design

Firewalls and Load Balancers:

Basic Firewalls
Stateful Firewalls
Implementing a Firewall or Gateway
Web Application Firewalls
Proxies and Gateways
Denial of Service Attacks
Load Balancers

Labs:

Implementing a Firewall

IDS and SIEM:

Intrusion Detection Systems
Configuring IDS
Log Review and SIEM
Data Loss Prevention
Malware and Intrusion Response

Labs:

Using an Intrusion Detection System

Secure Wireless Access:

Wireless LANs
WEP and WPA
Wi-Fi Authentication
Extensible Authentication Protocol
Additional Wi-Fi Security Settings
Wi-Fi Site Security
Personal Area Networks

Physical Security Controls:

Site Layout and Access
Gateways and Locks
Alarm Systems
Surveillance
Hardware Security
Environmental Controls

Module 4 / Architecture and Design (2)

Secure Protocols and Services

DHCP Security
DNS Security
Network Management Protocols
HTTP and Web Servers
SSL / TSL and HTTPS
Web Security Gateways
Email Services
S/MIME
File Transfer
Voice and Video Services (VoIP and VTC)

Labs:

Implementing Secure Network Addressing Services
Configuring a Secure Email Service

Secure Remote Access:

Remote Access Architecture
Virtual Private Networks
IPSec
Remote Access Servers
Remote Administration Tools
Hardening Remote Access Infrastructure

Labs:

Implementing a Virtual Private Network

Secure Systems Design:

Trusted Computing
Hardware / Firmware Security
Peripheral Device Security
Secure Configurations
OS Hardening
Patch Management
Embedded Systems
Security for Embedded Systems

Secure Mobile Device Services

Mobile Device Deployments
Mobile Connection Methods
Mobile Access Control Systems
Enforcement and Monitoring

Secure Virtualization and Cloud Services

Virtualization Technologies
Virtualization Security Best Practices
Cloud Computing
Cloud Security Best Practices

Module 5 / Risk Management

Forensics:

Forensic Procedures
Collecting Evidence
Capturing System Images
Handling and Analysing Evidence

Labs:

Using Forensic Tools

Disaster Recovery and Resiliency:

Continuity of Operations Plans
Disaster Recovery Planning
Resiliency Strategies
Recovery Sites
Backup Plans and Policies
Resiliency and Automation Strategies

Risk Management:

Business Impact Analysis
Identification of Critical Systems
Risk Assessment
Risk Mitigation

Secure Application Development:

Application Vulnerabilities
Application Exploits
Web Browser Exploits
Secure Application Design
Secure Coding Concepts
Auditing Applications
Secure DevOps

Labs:

Identifying a Man-in-the-Browser Attack

Organizational Security:

Corporate Security Policy
Personnel Management Policies
Interoperability Agreements
Data Roles
Data Sensitivity Labelling and Handling
Data Wiping and Disposal
Privacy and Employee Conduct Policies
Security Policy Training

What’s included in this course?

Full course materials;
A professional training venue;
Final exam preparation with example practice questions; and
A certificate of attendance.

What equipment should I bring?

Our course materials are provided as a PDF with comments enabled. You should bring a laptop or tablet with you should you wish to make notes.

Course duration and times

5 days

Course locations:

Live-online instructor led.

How to book

Once purchased one of our team will contact you to finalise your booking arrangements and confirm a suitable date and location for your course.

Alternatively, you can call us on 0333 800 7000 to make your booking.

CPD/CPE points

This course does not qualify for CPD/CPE points.

Exams and qualifications

CompTIA Security+ exam

Practical examples and sample exam questions for each topic will be presented and discussed in the context of its application to the security of a sample organisation. At the end of the course, all delegates are asked to sit a full practice examination which is subsequently marked and reviewed in a group environment.

This training course can be booked with a CompTIA Security+ Exam Voucher, which is used to book and take the online examination at a local Pearson VUE testing centre.

What qualifications will I receive?

Successful candidates will be awarded the CompTIA Security+ certification directly by CompTIA. Please note that this qualification is valid for a period of three years and can be renewed by fulfilling the requirements of the CompTIA Continuing Education (CE) Program.

Prerequisites

Are there any prerequisites for this course?

While there are no formal entry requirements, the CompTIA Security+ course is designed for delegates who have at least two years of networking experience and possess a thorough knowledge of TCP/IP.

Experience in implementing technical information security solutions is also highly desirable, and it is recommended that students already hold a CompTIA Network+ certificate.

Is there any recommended-reading?

There is no recommended reading needed for this course.

Customer Reviews

Please login to your account to leave a review.

CompTIA Security Training Course

You may also be interested in

Training course outline

CompTIA Security+ course benefits

Globally recognised course

Gain a popular qualification

Advance your career

Boost your potential

Who should attend this course?

Your Learning Path

What does this course cover?

Module 1 / Threats, Attacks, and Vulnerabilities

Module 2 / Identity and Access Management

Module 3 / Architecture and Design (1)

Module 4 / Architecture and Design (2)

Module 5 / Risk Management

What’s included in this course?

What equipment should I bring?

Course duration and times

Course locations:

How to book

CPD/CPE points

CompTIA Security+ exam

What qualifications will I receive?

Are there any prerequisites for this course?

Is there any recommended-reading?

Customer Reviews

Your basket: 0 Items

Your basket: 0 Items