Communication and Network Security
CISSP Domain 4 in depth: the OSI and TCP/IP models, IPv4 and IPv6 addressing and routing, the weaknesses of core protocols and DNSSEC, segmentation, DMZs and zero trust under NIST SP 800-207, firewalls, proxies, IDS and IPS and network access control, Wi-Fi, Bluetooth, cellular and satellite security, IPsec, TLS VPNs, WireGuard, voice and email authentication, operational technology, IoT and storage networks, cloud, SDN and Kubernetes networking, denial of service, on-path and BGP attacks, and network monitoring under US law including CIRCIA, ending in a capstone network design.
CISSP-113 12 lessons · 5 h 58 min
Offered by HSM University · CISSP Exam Prep
This is the American version of this course. See the Canadian version.
What you'll learn
- Map protocols, devices and attacks to the OSI and TCP/IP models and use the models to place controls at the right layer
- Read and design IPv4 and IPv6 address plans, apply subnetting and routing concepts, and manage IPv6 deliberately
- Explain the weaknesses of core protocols such as ARP, DHCP, DNS, TCP, UDP and ICMP and select controls including DNSSEC and secure replacements
- Design segmented network architectures with DMZs, VLANs, micro-segmentation and zero trust principles based on NIST SP 800-207
- Select and secure transmission media, switches, routers, firewalls, proxies, IDS and IPS, and govern firewall rule bases
- Secure wireless, Bluetooth, cellular and satellite communications, including WPA3 and 802.1X with EAP-TLS
- Implement secure channels with IPsec, TLS VPNs and WireGuard, protect remote access, voice and collaboration, and authenticate email with SPF, DKIM and DMARC
- Protect converged and specialized networks, including operational technology, IoT, storage networks and content delivery networks
- Secure software-defined, cloud and container networks using security groups, network policies, infrastructure as code and posture management
- Recognize denial of service, on-path, spoofing, routing and naming attacks and justify countermeasures with risk analysis
- Plan network monitoring, operations and change management within Canadian and US legal and regulatory requirements
- Design, prioritize and defend a segmented network for an organization and apply effective strategies to Domain 4 exam questions
Course content
12 lessons · 5 h 58 min total · final exam
- 1 Network models: OSI and TCP/IP for security professionals 30 min · quiz
- 2 IP networking, addressing and IPv6 29 min · quiz
- 3 Core protocols and their security 29 min · quiz
- 4 Secure network architecture: segmentation and zero trust 32 min · quiz
- 5 Network components and transmission media 31 min · quiz
- 6 Wireless, cellular and satellite networks 27 min · quiz
- 7 Secure communication channels 33 min · quiz
- 8 Converged and specialized networks 28 min · quiz
- 9 Cloud and software-defined networking 28 min · quiz
- 10 Network attacks and countermeasures 30 min · quiz
- 11 Network monitoring, operations and regulation 30 min · quiz
- 12 Capstone: designing and defending a segmented network 31 min · quiz
- E Final exam 20 questions
Requirements
Recommended background. You can start any course at any time.
Description
CISSP Domain 4 in depth: the OSI and TCP/IP models, IPv4 and IPv6 addressing and routing, the weaknesses of core protocols and DNSSEC, segmentation, DMZs and zero trust under NIST SP 800-207, firewalls, proxies, IDS and IPS and network access control, Wi-Fi, Bluetooth, cellular and satellite security, IPsec, TLS VPNs, WireGuard, voice and email authentication, operational technology, IoT and storage networks, cloud, SDN and Kubernetes networking, denial of service, on-path and BGP attacks, and network monitoring under US law including CIRCIA, ending in a capstone network design.