In this section of the course,
we're going to discuss some network security fundamentals.
Now up to this point, we have really focused
on making our networks functional and working
in order to support our business needs.
But we haven't really focused on security yet,
and so we need to understand the basics of security,
the threats against our networks,
and how to manage that risk
so we can effectively use our networks
to meet our operational needs of our businesses
and its users while making sure our data remains secure.
So in this section, we're going to be focused solely
on domain four network security,
and we'll be covering two different objectives.
Objective 4.1 states that you must be able to explain
the importance of basic network security concepts.
We'll also jump briefly into objective 4.3,
which states that given a scenario
you must be able to apply network security features,
defense techniques, and solutions
with our coverage for device hardening.
Now, first we're going to look at the CIA Triad,
which is focused on how we can ensure the confidentiality,
integrity, and availability in our networks.
Then we'll discuss threats
and vulnerabilities in our networks
and how you can't have a risk without both a threat
and a matching vulnerability.
Next, we're going to learn about risk management
and how we can use it to guide our work
as network administrators
to best protect our networks against attacks.
After that, we're going to be exploring audits
and compliance, as well as discussing
some contractual requirements and regulations
associated with both PCIDSS and GDPR.
Then we'll cover device hardening,
including how you can disable unused ports,
disable unused services, and change your default password
on your devices to increase the security of your endpoints,
your clients, and your network devices.
I'll also perform a hands-on demonstration,
so you can learn how you can implement device hardening
on your own network clients too.
Next, we'll take a look at physical security
and its importance in our networks.
After that, we'll explore honeypots
and active defense methods
that we can use to gather information and intelligence
on our attacker's techniques and processes.
Finally, we're going to take a short quiz
to see what you learned during this section of the course
and review your answers to ensure
you know why the right answer was right
and why the wrong answer was wrong.
So if you're ready, let's get started with our coverage
of network security fundamentals
in this section of the course.