by Stone River eLearning | Publisher: Stone River eLearning | Release Date: January 2017 | ISBN: 100000006A0507

CompTIA's CASP - CompTIA Advanced Security Practitioner , is a vendor-neutral certification that validates IT professionals with advanced-level security skills and knowledge. This certification course covers the technical knowledge and skills required to conceptualize, design, and engineer secure solutions across complex enterprise environments. It involves applying critical thinking and judgment across a broad spectrum of security disciplines to propose and implement solutions that map to enterprise drivers, while managing risk.

1. Module 0
   • Course Introduction 00:00:22
2. Module 1
   • Business Influences and Associated Security Risks 00:00:18
   • Risk Management 00:01:40
   • Business Model Strategies 00:02:01
   • Integrating Diverse Industries 00:01:03
   • Third Party Information Security and Providers 00:02:23
   • Internal and External Influences 00:03:01
   • Impact of De-Perimeterization 00:01:22
3. Module 2
   • Risk Mitigation Planning - Strategies and Controls 00:00:15
   • CIA Triad 00:02:30
   • Business Classifications 00:02:12
   • Information Life Cycle and Steak-Holder Input 00:02:00
   • Implementing Technical Controls 00:04:44
   • Determine Aggregate CIA Score 00:01:39
   • Worst Case Scenario Planning 00:03:34
   • Calculation Tools and Attacker Motivation 00:02:56
   • Return Of Investment 00:03:07
   • Total Cost of Ownership and Risk Strategies 00:02:25
   • Risk Management Process 00:01:26
   • Identifying Vulnerabilities and Threats 00:01:41
   • Security Architecture Frameworks 00:02:37
   • Business Continuity Planning 00:01:46
   • IT Governance 00:01:38
   • Security Policies 00:02:43
4. Module 3
   • Security-Privacy Policies and Procedures Part1 00:00:16
   • Security-Privacy Policies and Procedures Part2 00:00:27
   • Policy Development Updates 00:03:36
   • Developing Processes and Procedures 00:01:50
   • Legal Compliance Part1 00:04:02
   • Legal Compliance Part2 00:04:17
   • Security Policy Business Documents 00:05:05
   • Outage Impact and Estimating Downtime Terms 00:07:11
   • Sensitive Information-Internal Security Policies 00:03:54
   • Incident Response Process 00:03:45
   • Forensic Tasks 00:02:34
   • Employment and Termination Procedures 00:02:58
   • Network Auditing 00:01:55
5. Module 4
   • Incident Response and Recovery Procedures 00:00:11
   • E-Discovery and Data Retention Policies 00:05:30
   • Data Recovery-Storage and Backup Schemes 00:08:42
   • Data Owner and Data Handling 00:01:45
   • Disposal Terms and Concepts 00:01:19
   • Data Breach and Data Analysis 00:01:17
   • Incident Response Guidelines 00:04:50
   • Incident and Emergency Response 00:02:10
   • Media-Software and Network Analysis 00:03:20
   • Order of Volatility 00:01:04
6. Module 5
   • Industry Trends Overview 00:00:19
   • Performing Ongoing Research 00:01:14
   • Security Practices 00:02:33
   • Evolution of Technology 00:00:55
   • Situational Awareness and Vulnerability Assessments 00:03:45
   • Researching Security Implications 00:02:17
   • Global Industry Security Response 00:01:01
   • Threat Actors 00:01:49
   • Contract Security Requirements 00:00:56
   • Contract Documents 00:01:07
7. Module 6
   • Securing the Enterprise Overview 00:00:14
   • Benchmarks and Baselines 00:02:06
   • Prototyping and Testing Multiple Solutions 00:01:34
   • Cost/Benefit Analysis 00:01:01
   • Metrics Collection and Trend Data 00:02:04
   • Security Controls-Reverse Engineering and Deconstructing 00:01:40
   • Security Solutions Business Needs 00:01:29
   • Lesson Learned- After Action Report 00:01:22
8. Module 7
   • Assessment Tools and Methods 00:00:20
   • Port Scanners and Vulnerability Scanners 00:03:15
   • Protocol Analyzer- Network Enumerator-Password Cracker 00:02:42
   • Fuzzers and HTTP Interceptors 00:02:11
   • Exploitation Tools 00:01:45
   • Passive Reconnaissance Tools 00:05:28
   • Vulnerability Assessments and Malware Sandboxing 00:02:03
   • Memory Dumping and Penetration Testing 00:03:50
   • Reconnaissance and Fingerprinting 00:01:52
   • Code Review 00:01:11
   • Social Engineering 00:01:58
9. Module 8
   • Social Cryptographic Concepts and Techniques 00:00:15
   • Cryptographic Benefits and Techniques 00:03:03
   • Hashing Algorithms 00:05:47
   • Message Authentication Code 00:01:11
   • Cryptographic Concepts 00:04:15
   • Transport Encryption Protocol 00:02:08
   • Symmetric Algorithms 00:05:21
   • Asymmetric Algorithms 00:02:55
   • Hybrid Encryption and Digital Signatures 00:03:15
   • Public Key Infrastructure 00:05:12
   • Digital Certificate Classes and Cypher Types 00:01:27
   • Des Modes 00:04:54
   • Cryptographic Attacks 00:04:56
   • Strength vs Performance and Cryptographic Implementations 00:01:55
10. Module 9
    • Enterprise Storage 00:00:16
    • Virtual Storage Types and Challenges 00:02:24
    • Cloud Storage 00:04:39
    • Data Warehousing 00:01:54
    • Data Archiving 00:02:14
    • Storage Area Networks (SANs) and (VSANs) 00:02:31
    • Network Attached Storage (NAS) 00:01:38
    • Storage Protocols and Fiber Channel over Ethernet (FCoE) 00:02:55
    • Storage Network File Systems 00:01:48
    • Secure Storage Management Techniques 00:05:04
    • LUN Masking/Mapping and HBA Allocation 00:02:00
    • Replication and Encryption Methods 00:02:49
11. Module 10
    • Network and Security Components-Concepts-Security Architectures 00:00:16
    • Remote Access Protocols 00:05:36
    • IPv6 and Transport Encryption 00:04:15
    • Network Authentication Methods 00:04:24
    • 802.1x and Mesh Networks 00:02:49
    • Security Devices 00:05:55
    • Network Devices 00:05:09
    • Firewalls 00:03:30
    • Wireless Controllers 00:01:51
    • Router Security and Port Numbers 00:01:53
    • Network Security Solutions 00:03:31
    • Availability Controls-Terms and Techniques 00:06:27
    • Advanced Router and Switch Configuration 00:03:28
    • Data Flow Enforcement of Applications and Networks 00:01:09
    • Network Device Accessibility and Security 00:06:58
12. Module 11
    • Security Controls for Hosts 00:00:17
    • Trusted Operation Systems 00:01:55
    • Endpoint Security Software and Data Loss Prevention 00:04:01
    • Host Based Firewalls 00:01:03
    • Log Monitoring and Host Hardening 00:02:00
    • Standard Operating Environment and Group Policy Security 00:04:00
    • Command Shell Restrictions 00:01:07
    • Configuring and Managing Interface Security 00:03:24
    • USB-Bluetooth-Firewire Restrictions and Security 00:03:16
    • Full Disk Encryption 00:01:54
    • Virtualization Security 00:02:37
    • Cloud Security Services 00:03:26
    • Boot Loader Protections 00:02:29
    • Virtual Host Vulnerabilities 00:01:32
    • Virtual Desktop Infrastructure 00:01:40
    • Terminal Services 00:00:27
    • Virtual TPM 00:01:34
13. Module 12
    • Application Vulnerabilities and Security Controls 00:00:20
    • Web Application Security Design 00:01:08
    • Specific Application Issues 00:02:36
    • Session Management 00:01:21
    • Input Validation 00:02:34
    • Web Vulnerabilities and Input Mitigation Issues 00:02:23
    • Buffer Overflow and other Application Issues 00:03:25
    • Application Security Framework 00:01:44
    • Web Service Security and Secure Coding Standards 00:01:12
    • Software Development Methods 00:04:32
    • Monitoring Mechanisms and Client-Server Side Processing 00:02:04
    • Browser Extensions and Other Web Development Techniques 00:02:45
14. Module 13
    • Host-Storage-Network and Application Integration 00:00:14
    • Securing Data Flows 00:01:52
    • Standards Concepts 00:01:24
    • Interoperability Issues 00:01:40
    • In House Commercial and Customized Applications 00:00:49
    • Cloud and Virtualization Models 00:03:24
    • Logical and Physical Deployment Diagrams 00:01:05
    • Secure Infrastructure Design 00:03:20
    • Storage Integration Security 00:00:47
    • Enterprise Application Integration Enablers 00:03:14
15. Module 14
    • Authentication and Authorization Technologies 00:00:13
    • Authentication and Identity Management 00:02:02
    • Password Types-Management and Policies 00:03:48
    • Authentication Factors 00:01:11
    • Biometrics 00:03:02
    • Dual-Multi Factor and Certificate Authentication 00:01:41
    • Single Sign On Issues 00:01:05
    • Access Control Models and Open Authorization 00:03:31
    • Extensible Access Control Markup Language (XACML) 00:01:38
    • Service Provisioning Markup Language (SPML) 00:00:52
    • Attestation and Identity Propagation 00:01:53
    • Federation and Security Assertion Markup Language (SAML) 00:01:38
    • OpenID-Shibboleth and WAYF 00:02:09
    • Advanced Trust Models 00:01:29
16. Module 15
    • Business Unit Collaboration 00:00:13
    • Identifying and Communicating Security Requirements 00:07:45
    • Security Controls Recommendations 00:00:47
    • Secure Solutions Collaboration 00:00:35
17. Module 16
    • Secure Communication and Collaboration 00:00:16
    • Web-Video Conferencing-Instant Messaging 00:06:09
    • Desktop Sharing 00:02:36
    • Presence Guidelines 00:01:44
    • Email Messaging Protocol 00:02:32
    • Telephony-VoIP and Social Media 00:03:17
    • Cloud Based Collaboration 00:02:34
    • Remote Access and IPsec 00:04:04
    • Mobile and Personal Device Management 00:02:31
    • Over Air Technology Concerns 00:02:23
    • WLAN Concepts-Terms-Standards 00:03:56
    • WLAN Security and Attacks 00:05:05
18. Module 17
    • Security Across the Technology Life Cycle 00:00:15
    • End to End Solution Ownership 00:05:10
    • System Development Life Cycle 00:05:43
    • Security Implications of Software Development Methodologies 00:02:20
    • Asset Management 00:01:19
    • Course End 00:00:06