Certiport Network Security

This accelerated Certiport Network Security Information Technology Specialist program is a way for students validate entry level IT skills sought after by employers. The IT Specialist program is aimed at candidates who are considering or just beginning a path to a career in information technology.

Candidates for this exam will demonstrate foundational security knowledge and skills, including an understanding of core security principles operating system security, network and device security, and secure computing practices.

At the end of this course, you’ll achieve your Certiport Network Security certification.

Through Firebrand’s Lecture | Lab | Review methodology you’ll certify at twice the speed of traditional training and get access to courseware, learn from certified instructors, and train in a distraction-free environment.

40% faster

Distraction-free environment

Audience

Candidates for this exam will demonstrate foundational security knowledge and skills, including an understanding of core security principles operating system security, network and device security, and secure computing practices.

1. Defense in Depth

1.1 Identify core security principles

• Confidentiality, integrity, availability, non-repudiation, threat, risk, vulnerability, principle of least privilege, attack surfaces including IoT

1.2 Define and enforce physical security

• Site security, computer security, removable devices and drives, mantraps

1.3 Identify security policy types

• Administrative controls, technical controls

1.4 Identify attack types

• Buffer overflow, viruses, polymorphic viruses, worms, Trojan horses, spyware, ransomware, adware, rootkits, backdoors, zero day attacks/ vulnerabilities, denial-of-service (DoS) attacks, common attack methods, types of vulnerability, cross-site scripting (XSS), SQL injection, brute force attack, man-in-the-middle (MITM) and man-in-the-browser (MITB), social engineering, keyloggers (software and hardware), logic bombs

1.5 Identify backup and restore types

• Full, incremental, differential

2. Operating System Security

2.1 Identify client and server protection

• Separation of services, hardening, patch management, reducing the attack surface, group policy (gpupdate and gpresult), secure dynamic Domain Name System (DNS) updates, User Account Control (UAC), keeping client operating system and software updated, encrypting offline folders, software restriction policies

2.2 Configure user authentication

• Multifactor authentication, enforcing password policies, remote access, using secondary sign-on to perform administrative tasks (Run As, sudo), domain and local user and group creation, Kerberos

2.3 Manage permissions in Windows and Linux

2.4 Facilitate non-repudiation using audit policies and log files

• Types of auditing, what can be audited, enabling auditing, what to audit for specific purposes, where to save audit information, reviewing log files

2.5 Demonstrate knowledge of encryption

• File and folder encryption, how encryption impacts moving/copying files and folders, drive encryption, TPM, secure communication processes (email, texting, chat, social media), virtual private network (VPN) encryption methods, public key/private key, certificate properties and services, Bitlocker

3. Network Device Security

3.1 Implement wireless security

3.2 Identify the role of network protection devices

• Purpose of firewalls, hardware vs. software firewalls, network vs. host firewalls, stateful vs. stateless firewall inspection, security baselines, intrusion detection system (IDS), intrusion prevention system (IPS), security information and event manager (SIEM), content filtering, blacklisting/ whitelisting

3.3 Identify network isolation methods

• Routing, honeynet, perimeter networks (DMZ), NAT/PAT, VPN, IPsec, air gap network, DirectAccess, virtual LAN (VLAN)

3.4 Identify protocol security concepts

• Tunneling, DNSSEC, network sniffing, well-known ports (FTP, HTTP, HTTPS, DNS, RDP, Telnet, SSH, LDAP, LDAPS, SNMP, SMTP, IMAP, SFTP)

4. Secure Computing

4.1 Implement email protection

• Antispam, spoofing, phishing, and pharming, client protection, user training

4.2 Manage browser security

• Browser settings, cache management, private browsing

4.3 Install and configure anti-malware and antivirus software

• Installing, uninstalling, reinstalling, and updating; remediation, scheduling scans, investigating alerts

This exam validates that a candidate has fundamental security knowledge and skills. Candidates are expected to have some hands-on experience with client operating systems, security applications, firewalls, devices, and network ports. Candidates should have at least 150 hours of instruction or hands-on experience with network security.

To be successful on the test, the candidate is also expected to have the following prerequisite knowledge and skills:

• 8th grade reading skills
• Practical knowledge of operating systems and networking
• Critical thinking and problem-solving skills

As part of your accelerated course, you’ll sit the following exam at the Firebrand Training centre, covered by your Certification Guarantee:

ITS-102

35 - 45 MCQ

Duration - 50 Minutes