In this section of the course,
we're going to discuss logical security.
Now, logical security refers to the non-physical measures
that are implemented to protect digital data,
restrict unauthorized access, and ensure data integrity
and confidentiality through various different methods.
Now, in this section, we're going to be focused on Domain 1,
networking concepts and Domain 4, network security.
Objective, 1.4 states that you must be able to explain
common networking ports, protocols,
services, and traffic types.
And Objective 4.1 states that you must be able
to explain the importance of basic
network security concepts.
And Objective 4.3 states that given a scenario,
you must be able to apply network security features,
defense techniques, and solutions.
Now, first we're going to look at IAM,
or identity and access management.
Now, identity and access management
is a framework of policies and technologies that ensure
that the right individuals have the appropriate access
to technology resources within an organization.
Then, we're going to discuss multifactor authentication.
Multifactor authentication, also known as MFA,
is a security system that requires
two or more methods of authentication
from independent categories of credentials
to verify your user's identity when they try to log in
or access a resource.
Next, you're going to learn about the different
authentication methods used in our networks,
and after that, we're going to explore some security principles
used in our networks like utilizing least privilege
and utilizing the right type of access control methods
for your specific use case.
Then, we're going to cover encryption
and discuss both symmetric and asymmetric encryption methods
and their specific use cases.
Next, we'll look at IPSec, or internet protocol security,
and how it works, and the use of authentication headers
and encapsulating security payloads
to better securely transmit our network's data
over an untrusted network.
After that, we're going to explore PKI,
or the public key infrastructure, which is at the heart
of all of our digital certificates, digital signatures,
and asymmetric encryption technologies that we use today.
Then, we're going to discuss digital certificates,
including the different types
and when you should use each type of digital certificate
inside of your networks.
I'll also perform a quick demonstration
so you can better understand how to read the contents
of a digital certificate for some famous websites
like Google.com and Apple.com.
Next, we're going to explore key management
and how you can securely create, manage,
and destroy your security keys throughout their lifecycle.
Finally, we'll take a short quiz to see what you learned
during this section of the course,
and review your answers to ensure you know
why the right answers were right
and the wrong answers were wrong.
So if you're ready, let's get started with our coverage
of logical security in this section of the course.