CompTIA SecurityX (อบรมพร้อมสอบ)

เนื้อหาการอบรม

• วันที่ 1
  • Lesson 1: Security Governance and Program Management
    • Security Governance, Policies, Standards, and Procedures
    • Security Program Management and Awareness Training
    • Governance Frameworks: COBIT and ITIL
    • Change and Configuration Management
    • Governance, Risk, and Compliance (GRC) Tools
  • Lesson 2: Enterprise Risk Management and Compliance
    • Risk Assessment and Risk Management
    • Business Impact Analysis and Risk Prioritization
    • Third-Party and Supply Chain Risk Management
    • Business Continuity and Disaster Recovery
    • Security Compliance, Regulations, and Industry Standards
    • Security Audits, Assessments, and Certifications
  • Lesson 3: Threat Modeling and AI Security
    • Threat Actors, Motivations, and Capabilities
    • Threat Modeling Frameworks: MITRE ATT&CK, STRIDE, and Cyber Kill Chain
    • Attack Surface Identification and Threat Analysis
    • AI Security Governance and Privacy Considerations
    • AI Threats: Prompt Injection, Data Poisoning, and Model Theft
    • AI-Enabled Attacks and Security Risks
• วันที่ 2
  • Lesson 4: Enterprise Security Architecture and Secure Design
    • Enterprise Security Architecture and Resilient Systems
    • Security Components and Infrastructure Design
    • Secure System Development Life Cycle (Secure SDLC)
    • Application Security Testing: SAST, DAST, IAST, and RASP
    • DevSecOps and CI/CD Pipeline Security
    • Defense-in-Depth and Security Control Integration
  • Lesson 5: Identity, Access Management, and Zero Trust Architecture
    • Identity and Access Management (IAM)
    • Authentication, Authorization, and Access Control Models
    • Federation, Single Sign-On (SSO), and Conditional Access
    • Public Key Infrastructure (PKI) and Certificate Management
    • Zero Trust Architecture and Microsegmentation
    • Secure Access Service Edge (SASE) and Software-Defined Networking
  • Lesson 6: Cloud Security Architecture and Implementation
    • Cloud Security Architecture and Shared Responsibility Model
    • Cloud Access Security Broker (CASB) and Shadow IT
    • Cloud Identity, API, and Data Security
    • Container Security and Container Orchestration
    • Infrastructure as Code (IaC): Terraform and Ansible
    • Serverless Security and Cloud Security Controls
• วันที่ 3
  • Lesson 7: Endpoint, Server, and Network Security Engineering
    • Endpoint and Server Security Architecture
    • Endpoint Detection and Response (EDR)
    • Host-Based Security Controls and System Hardening
    • Network Infrastructure Security and Troubleshooting
    • DNS, Email, and Transport Layer Security
    • Network Security Monitoring and Misconfiguration Analysis
  • Lesson 8: Hardware, Specialized Systems, and Legacy Security
    • Hardware Security and Root of Trust
    • Trusted Platform Module (TPM) and Hardware Security Module (HSM)
    • Secure Boot, Measured Boot, and Hardware Encryption
    • Operational Technology (OT), ICS, and SCADA Security
    • Internet of Things (IoT) and Embedded Systems Security
    • Legacy System Security and Risk Mitigation
  • Lesson 9: Security Automation and Advanced Cryptography
    • Security Automation with PowerShell, Bash, and Python
    • Infrastructure as Code and Configuration Automation
    • Security Orchestration, Automation, and Response (SOAR)
    • Automated Vulnerability Scanning and Patch Management
    • Advanced Cryptography and Post-Quantum Cryptography (PQC)
    • Encryption, Digital Signatures, and Cryptographic Key Management
• วันที่ 4
  • Lesson 10: Security Monitoring and Vulnerability Management
    • Security Information and Event Management (SIEM)
    • Security Log Collection, Correlation, and Analysis
    • Security Monitoring and Behavioral Analytics
    • Vulnerability Assessment and Attack Surface Analysis
    • Common Vulnerabilities and Exploitation Techniques
    • Vulnerability Mitigation and Security Remediation
  • Lesson 11: Threat Intelligence and Threat Hunting
    • Cyber Threat Intelligence (CTI) Fundamentals
    • Internal and External Threat Intelligence Sources
    • Threat Intelligence Platforms (TIPs)
    • Indicators of Compromise (IoCs) and Indicators of Attack (IoAs)
    • Threat Hunting Techniques and Hypothesis-Based Hunting
    • Threat Intelligence Sharing: STIX, TAXII, Sigma, and YARA
  • Lesson 12: Incident Response and Digital Forensics
    • Incident Response and Threat Response Activities
    • Malware Analysis and Sandboxing
    • Reverse Engineering and Malware Attribution
    • Digital Forensics and Evidence Analysis
    • Network, Host, and Memory Analysis
    • Timeline Reconstruction and Root Cause Analysis
  • การเตรียมความพร้อมเพื่อสอบ CompTIA SecurityX