CompTIA Security+ (SY0-601) Cert Prep: 8 Network Security Design and Implementation

Introduction

• Network security
• What you need to know
• Study resources

1. TCP/IP Networking

• Introducing TCP/IP
• IP addresses and DHCP
• Domain name system (DNS)
• Network ports
• ICMP

2. Secure Network Design

• Security zones
• VLANs and network segmentation
• Security device placement
• Software-defined networking (SDN)

3. Network Security Devices

• Routers, switches, and bridges
• Firewalls
• Proxy servers
• Load balancers
• VPNs and VPN concentrators
• Network intrusion detection and prevention
• Protocol analyzers
• Unified threat management

4. Network Security Techniques

• Restricting network access
• Network access control
• Firewall rule management
• Router configuration security
• Switch configuration security
• Maintaining network availability
• Network monitoring
• SNMP
• Isolating sensitive systems
• Deception technologies

5. Transport Encryption

• TLS and SSL
• IPsec
• Securing common protocols

6. Wireless Networking

• Understanding wireless networking
• Wireless encryption
• Wireless authentication
• Wireless signal propagation
• Wireless networking equipment

7. Network Attacks

• Denial of service attacks
• Eavesdropping attacks
• DNS attacks
• Layer 2 attacks
• Network address spoofing
• Wireless attacks
• Propagation attacks
• Preventing rogues and evil twins
• Disassociation attacks
• Understanding Bluetooth and NFC attacks
• RFID security

8. Mobile Device Security

• Mobile connection methods
• Mobile device security
• Mobile device management
• Mobile device tracking
• Mobile application security
• Mobile security enforcement
• Bring your own device (BYOD)
• Mobile deployment models

9. Network Tools

• Ping and traceroute
• DNS tools
• Ipconfig, ifconfig, and route
• netstat
• netcat
• ARP
• curl
• theHarvester
• Cuckoo
• Port scanners
• Vulnerability scanners

Conclusion

• Continuing your studies