All Episodes

Final Objectives Update: What Changed When CompTIA Finalized SY0-801 (Update)

Full-Course Review: The SY0-801 Memory Map (Review)

PBQ Strategy: Turning Objectives into Scenario Decisions (Review)

Awareness Delivery and Effectiveness: LMS, Self-Service, Metrics, Behavior Risk Scoring, BEC, BYOD, and Remote Work (5.6)

Security Awareness Training: Onboarding, Ongoing, Targeted, and Corrective Training (5.6)

Penetration Testing, Reconnaissance, Frameworks, Functional Testing, and Behavioral Testing (5.5)

Audit Scope and Engagements: Charters, Gap Analysis, Internal Reviews, External Reviews, and Benchmarking (5.5)

Audit Data Gathering: Sampling, Questionnaires, Interviews, Assertions, and Reference Sources (5.5)

Non-Compliance, Privacy Rights, Legal Holds, Legal Orders, and Retention (5.4)

Compliance Training and Monitoring: Data Handling, AML/CTF, Anti-Bribery, and Attestations (5.4)

Vendor Constraints and Rules of Engagement: Jurisdiction, ROI, Lock-In, and Assurance Mechanisms (5.3)

Agreements and Monitoring: SLA, SLO, MOU, MOA, NDA, MSA, SOW, and Right to Audit (5.3)

Third-Party Risk: Vendor Selection, RFP, RFI, RFQ, EOI, Due Diligence, and Conflicts (5.3)

Risk Treatment and Business Impact: Transfer, Accept, Avoid, Mitigate, BIA, Appetite, Residual Risk, SLE, ALE, and ARO (5.2)

Risk Analysis and Registers: Impact, Likelihood, Owners, Current Mitigations, and Qualitative vs. Quantitative Risk (5.2)

Risk Identification and Assessment: Assets, Stakeholders, Scoring, and Categorization (5.2)

Plans and Policies: BCP, DRP, BYOD, AUP, Clean Desk, Incident Response, Data Retention, Access Control, and Privacy (5.1)

Standards and Procedures: Baselines, Passwords, Physical Security, RFCs, Encryption, SOPs, and Runbooks (5.1)

GRC Artifacts: Guidelines, Benchmarks, Advisories, Implementation Guides, and Reference Architectures (5.1)

Evidence and Stakeholders: File Integrity, Memory Dumps, Bit Copies, Snapshots, HR, Legal, and Log Parsing (4.8)

Investigation Sources: Vulnerability Scans, Automated Reports, NetFlow/IPFIX, Surveillance, and Packet Captures (4.8)

Investigation Data Types: Access, Device, Server, Application, Authentication, Communication, and Audit Logs (4.8)

Containment Through Post-Incident: Isolation, Negotiation, Recovery, Reporting, Lessons Learned, and RCA (4.7)

Identification and Investigation: Detection, Advisories, Threat Hunting, Forensics, and Chain of Custody (4.7)

Incident Response Preparation: Training, Tabletop Exercises, Playbooks, Simulations, and Roles (4.7)

AI in SecOps: Agentic AI, Chatbots, Predictive Analysis, AI-Augmented Baselines, and CI/CD (4.6)

Automation Risks and Guardrails: Logic, Complexity, Financial Risk, and Process Risk (4.6)

Automation Use Cases: Provisioning, Desired State, Anomaly Detection, and Ticketing (4.6)

Access Models and Modern Authentication: JIT Access, Passkeys, Passwordless, and Credential Monitoring (4.5)

MFA: Tokens, Biometrics, OTPs, Backup Codes, and Bypass Risks (4.5)

Account Types and Privilege Models: User, Privileged, Service, Third-Party, and Emergency Access (4.5)

Federation and SSO: SAML, LDAP, and OAuth (4.5)

IAM Lifecycle: Provisioning, Deprovisioning, Permissions, and Identity Proofing (4.5)

Monitoring Protocols and Data Flow: NetFlow, SNMP, Syslog, SCAP, Port Mirroring, and Dashboards (4.4)

Monitoring Tools: SIEM, DLP, Vulnerability Scanners, Orchestration, and Packet Analyzers (4.4)

Alerting Operations: Scanning, Archiving, Reporting, and Alert Tuning (4.4)

Monitoring Resources: Systems, Applications, Infrastructure, and Log Aggregation (4.4)

External Reporting: Bug Bounties and Responsible Disclosure (4.3)

Remediation, Verification, and Internal Reporting (4.3)

Prioritization: Severity, Business Impact, and Pen Test Report Review (4.3)

Vulnerability Management Overview: Scanning, IPAM, CSPM, and Source Code Review (4.3)

Planning, Procurement, Assignment, Tracking, Disposal, and Decommissioning (4.2)

Asset Management: Hardware, Software, and Data Life Cycle (4.2)

Email and OS Security: DMARC, SPF, DKIM, BIMI, Group Policy, and SELinux (4.1)

Repository, Application, and Code Security: Secrets Scanning, Input Validation, Secure Cookies, Static Analysis, and Code Signing (4.1)

Endpoint and Network Access Control: EDR, XDR, Antivirus, Captive Portals, 802.1X, and Posture (4.1)

Firewalls and Filtering: WAF, UTM, Layer 4/Layer 7, Rate Limiting, and DLP (4.1)

Monitoring, MDM, Allow Lists, Block Lists, IDS, IPS, and WIPS (4.1)

Deception and Disruption: Honeypots, Honeynets, Honeyfiles, Honeytokens, and Canary Accounts (4.1)

Mitigating Controls Overview: Segmentation, Access Control, Hardening, and Sandboxing (4.1)

Recovery Metrics: RTO, RPO, MTTR, and MTBF (3.4)

Disaster Recovery and Business Continuity: Failover, Simulation, Parallel Processing, and Capacity Planning (3.4)

Power, Storage, Backups, Immutability, and Restoration Testing (3.4)

Platform Diversity, Load Balancing, Clustering, Autoscaling, and High Availability (3.4)

Resilience Sites: Hot, Warm, Cold, and Environmental Planning (3.4)

Data Handling, Geofencing, Lifecycle, Retention, Disposal, and Compliance (3.3)

Data Protection Roles: Owner, Custodian, Steward, Operator, Controller, and Subprocessor (3.3)

Securing Data: Masking, Hashing, Filtering, Tokenization, Encryption, and Obfuscation (3.3)

Data Classification: Public to Top Secret, Sensitive to Restricted (3.3)

Data Types and States: Structured, Unstructured, At Rest, In Use, and In Transit (3.3)

Identity Architecture: gMSAs, Least Privilege Accounts, Privilege Creep, and Failure Modes (3.2)

Out-of-Band Management, File Transfer, and Security Service Edge (3.2)

Secure Access: VPNs, Remote Access, Tunneling, and Encrypted Messaging (3.2)

Zero Trust Architecture: User, Device, and Application Decisions (3.2)

Infrastructure Protection: Device Placement, Security Zones, Attack Surface, and Diversity (3.2)

Scalability, Environmental Requirements, Risk, and Recovery Decisions (3.1)

Business Architecture Tradeoffs: Data Sovereignty, Classification, Cost, and Ownership (3.1)

Technical Architecture Tradeoffs: Availability, Resilience, Open Source, and Usability (3.1)

OT, Air-Gapped Networks, Microservices, and Segmentation (3.1)

Serverless, Multicloud, and Infrastructure as Code (3.1)

Architecture Models: Cloud, On-Premises, Hybrid, Private, Public, and Community Cloud (3.1)

AI Abuse: Jailbreaking, Evasion, Privacy, Session Hijacking, and Code Execution (2.6)

AI Failure Risks: Data Loss, Bias, Explainability, Hallucinations, and Ethics (2.6)

AI Threats: Model Manipulation, Poisoning, and Prompt Injection (2.6)

Credential Attacks: Password Spraying, Brute Force, User Enumeration, and MFA Bypass (2.5)

Application Attacks: Injection, Buffer Overflow, Replay, Privilege Escalation, Forgery, and Traversal (2.5)

Indicators of Compromise: Hashes, Domains, Timestamps, Log Manipulation, and Impossible Travel (2.5)

Social Engineering Indicators: Smishing, Vishing, Whaling, Quishing, and Deepfakes (2.5)

Physical and Network Attack Indicators (2.5)

Malware Indicators: Ransomware, Trojans, Worms, Spyware, and Fileless Malware (2.5)

LLMs, Misconfigurations, Public Repositories, and Public Object Storage (2.4)

Stale Credentials, Rogue Devices, Shadow IT, Wireless, Mobile, and Identity Provider Risks (2.4)

Code Weaknesses: Hardcoded Secrets and Unsafe Exception Handling (2.4)

Ports, Services, Applications, Race Conditions, and Malicious Updates (2.4)

Unsupported, Unpatched, Obsolete, and Unmanaged Systems (2.4)

Supply Chain, SaaS, USB, Human, IoT, OT, Physical, Bluetooth, RF, and NFC Threats (2.3)

Network, Remote Access, and Endpoint Threat Sources (2.3)

Browser-Based Attacks: Extensions, JavaScript, Cookies, Password Managers, and Session Tokens (2.3)

Image and Attachment Attacks: QR Codes, CAPTCHA Abuse, Macros, PDFs, and RTF (2.3)

Message-Based Attacks: Email, SMS, RCS, IM, and Collaboration Tools (2.3)

APTs and the Modern Threat Vector Map (2.3)

Motivations and Capabilities: Money, Espionage, Ideology, and Extortion (2.2)

State-Sponsored, Competitors, Accidental, and Unskilled Attackers (2.2)

Threat Actors: Organized Crime, Terrorists, Hacktivists, and Insiders (2.2)

Vulnerability Types and Risk-Based Decisions (2.1)

Vulnerability Scoring: CVSS, CVEs, and Prioritization (2.1)

Threat Feeds and Intelligence Sources (2.1)

Threats vs. Vulnerabilities: Likelihood, Impact, and Life Cycle (2.1)

Hashing, Salting, Digital Signatures, Obfuscation, and Crypto Tools (1.3)

Key Exchange, Algorithms, Key Length, and Protocol Selection (1.3)