CASP+ (CAS-004) Cert Prep: 1 Security Architecture

Course details

The CASP+ (CompTIA Advanced Security Practitioner+) (CAS-004) certification is a vendor-neutral certification that validates your knowledge and ability to conduct advanced-level cybersecurity skills. Designed for the advanced-level technical cybersecurity professional certification, the certification exam tests your ability to implement solutions within cybersecurity policies and frameworks. This course from information technology and cybersecurity expert Jason Dion focuses on the security architecture aspects of the exam. He covers important topics like securing networks and architectures, infrastructure design, cloud security, and cryptography. He also discusses the security concerns of newer and emerging technologies like 3D printing and quantum computing. Whether you’re prepping for the exam, or are looking to improve your cybersecurity skills, join Jason in this course to gain valuable lessons and improve your readiness against cyber attacks.

Concepts

Introduction

Welcome
About the exam

Securing Networks

Securing networks
Switches
Routers
Wireless and mesh
Firewalls
Proxies
Gateways
IDS and IPS
Network access control
Remote access
Unified communication
Cloud vs. on-premises
DNSSEC
Load balancer

Securing Architectures

Securing architectures
Traffic mirroring
Network sensors
Host sensors
Layer 2 segmentation
Network segmentation
Server segmentation
Zero trust
Merging networks
Software-defined networking

Infrastructure Design

Infrastructure design
Scalability
Resiliency issues
Automation
Performance design
Virtualization
Containerization

Cloud and Virtualization

Cloud and virtualization
Cloud deployment models
Cloud service models
Deployment considerations
Provider limitations
Extending controls
Provisioning and deprovision
Storage models
Virtualization

Software Applications

Software applications
Systems development lifecycle
Software development lifecycle
Development approaches
Software assurance
Baselines and templates
Best practices
Integrating applications

Data Security

Data security
Data lifecycle
Data classification
Labeling and tagging
Deidentification
Data encryption
Data loss prevention (DLP)
DLP detection
Data loss detection

Authentication and Authorization

Authentication and authorization
Access control
Credential management
Password policies
Multi-factor authentication
Authentication protocols
Federation
Root of trust
Attestation
Identity proofing

Cryptography

Cryptography
Privacy and confidentiality
Integrity
Compliance and policy
Data states
Cryptographic use cases
PKI use cases

Emerging Technology

Emerging technology
Artificial intelligence and machine learning
Deep learning
Big data
Blockchain distributed consensus
Passwordless authentication
Homomorphic encryption
Virtual and augmented reality
3D printing
Quantum computing

Conclusion

Conclusion