Add files using upload-large-folder tool

.gitattributes

@@ -33,3 +33,35 @@ saved_model/**/* filter=lfs diff=lfs merge=lfs -text
 *.zip filter=lfs diff=lfs merge=lfs -text
 *.zst filter=lfs diff=lfs merge=lfs -text
 *tfevents* filter=lfs diff=lfs merge=lfs -text
+01[[:space:]]-[[:space:]]Introduction/001[[:space:]]Course[[:space:]]Layout.mp4 filter=lfs diff=lfs merge=lfs -text
+01[[:space:]]-[[:space:]]Introduction/002[[:space:]]30[[:space:]]Day[[:space:]]Study[[:space:]]Plan.mp4 filter=lfs diff=lfs merge=lfs -text
+01[[:space:]]-[[:space:]]Introduction/003[[:space:]]Exam[[:space:]]Information.mp4 filter=lfs diff=lfs merge=lfs -text
+01[[:space:]]-[[:space:]]Introduction/005[[:space:]]30-Day-study-Plan.pdf filter=lfs diff=lfs merge=lfs -text
+01[[:space:]]-[[:space:]]Introduction/004[[:space:]]Exam[[:space:]]Domains.mp4 filter=lfs diff=lfs merge=lfs -text
+01[[:space:]]-[[:space:]]Introduction/005[[:space:]]Course-Notes.pdf filter=lfs diff=lfs merge=lfs -text
+01[[:space:]]-[[:space:]]Introduction/005[[:space:]]Security-Last-Minute-Cram-Guide.pdf filter=lfs diff=lfs merge=lfs -text
+01[[:space:]]-[[:space:]]Introduction/005[[:space:]]comptia-security-sy0-701-exam-objectives-5-0.pdf filter=lfs diff=lfs merge=lfs -text
+02[[:space:]]-[[:space:]]Lesson[[:space:]]1[[:space:]]IT[[:space:]]Security[[:space:]]Fundamentals/001[[:space:]]Introduction[[:space:]]IT[[:space:]]Security[[:space:]]Fundamentals[[:space:]]OB[[:space:]]1.2.mp4 filter=lfs diff=lfs merge=lfs -text
+02[[:space:]]-[[:space:]]Lesson[[:space:]]1[[:space:]]IT[[:space:]]Security[[:space:]]Fundamentals/002[[:space:]]CIA[[:space:]]Triad[[:space:]]OB[[:space:]]1.2.mp4 filter=lfs diff=lfs merge=lfs -text
+02[[:space:]]-[[:space:]]Lesson[[:space:]]1[[:space:]]IT[[:space:]]Security[[:space:]]Fundamentals/003[[:space:]]Confidentiality[[:space:]]OB[[:space:]]1.2.mp4 filter=lfs diff=lfs merge=lfs -text
+02[[:space:]]-[[:space:]]Lesson[[:space:]]1[[:space:]]IT[[:space:]]Security[[:space:]]Fundamentals/004[[:space:]]Integrity[[:space:]]OB[[:space:]]1.2.mp4 filter=lfs diff=lfs merge=lfs -text
+02[[:space:]]-[[:space:]]Lesson[[:space:]]1[[:space:]]IT[[:space:]]Security[[:space:]]Fundamentals/006[[:space:]]DAD[[:space:]]Triade[[:space:]]OB[[:space:]]1.2.mp4 filter=lfs diff=lfs merge=lfs -text
+02[[:space:]]-[[:space:]]Lesson[[:space:]]1[[:space:]]IT[[:space:]]Security[[:space:]]Fundamentals/005[[:space:]]Availability[[:space:]]OB[[:space:]]1.2.mp4 filter=lfs diff=lfs merge=lfs -text
+02[[:space:]]-[[:space:]]Lesson[[:space:]]1[[:space:]]IT[[:space:]]Security[[:space:]]Fundamentals/008[[:space:]]Non-Repudiation[[:space:]]OB[[:space:]]1.2.mp4 filter=lfs diff=lfs merge=lfs -text
+02[[:space:]]-[[:space:]]Lesson[[:space:]]1[[:space:]]IT[[:space:]]Security[[:space:]]Fundamentals/007[[:space:]]Zero[[:space:]]Trust[[:space:]]OB[[:space:]]1.2.mp4 filter=lfs diff=lfs merge=lfs -text
+02[[:space:]]-[[:space:]]Lesson[[:space:]]1[[:space:]]IT[[:space:]]Security[[:space:]]Fundamentals/009[[:space:]]Authentication[[:space:]]OB[[:space:]]1.2.mp4 filter=lfs diff=lfs merge=lfs -text
+02[[:space:]]-[[:space:]]Lesson[[:space:]]1[[:space:]]IT[[:space:]]Security[[:space:]]Fundamentals/010[[:space:]]Authorization[[:space:]]OB[[:space:]]1.2.mp4 filter=lfs diff=lfs merge=lfs -text
+02[[:space:]]-[[:space:]]Lesson[[:space:]]1[[:space:]]IT[[:space:]]Security[[:space:]]Fundamentals/012[[:space:]]Accountability[[:space:]]OB[[:space:]]1.2.mp4 filter=lfs diff=lfs merge=lfs -text
+02[[:space:]]-[[:space:]]Lesson[[:space:]]1[[:space:]]IT[[:space:]]Security[[:space:]]Fundamentals/011[[:space:]]Accounting[[:space:]]OB[[:space:]]1.2.mp4 filter=lfs diff=lfs merge=lfs -text
+02[[:space:]]-[[:space:]]Lesson[[:space:]]1[[:space:]]IT[[:space:]]Security[[:space:]]Fundamentals/013[[:space:]]Gap[[:space:]]analysis[[:space:]]OB[[:space:]]1.2.mp4 filter=lfs diff=lfs merge=lfs -text
+03[[:space:]]-[[:space:]]Security[[:space:]]Controls[[:space:]]Categories[[:space:]]and[[:space:]]Types/002[[:space:]]Control[[:space:]]Types[[:space:]]OB[[:space:]]1.1.mp4 filter=lfs diff=lfs merge=lfs -text
+03[[:space:]]-[[:space:]]Security[[:space:]]Controls[[:space:]]Categories[[:space:]]and[[:space:]]Types/001[[:space:]]Control[[:space:]]Categories[[:space:]]OB[[:space:]]1.1.mp4 filter=lfs diff=lfs merge=lfs -text
+03[[:space:]]-[[:space:]]Security[[:space:]]Controls[[:space:]]Categories[[:space:]]and[[:space:]]Types/003[[:space:]]Defense[[:space:]]in[[:space:]]Depth[[:space:]]OB[[:space:]]1.1.mp4 filter=lfs diff=lfs merge=lfs -text
+04[[:space:]]-[[:space:]]Threats/002[[:space:]]Threats[[:space:]]OB[[:space:]]2.1.mp4 filter=lfs diff=lfs merge=lfs -text
+04[[:space:]]-[[:space:]]Threats/001[[:space:]]Threats[[:space:]]Motivation[[:space:]]OB[[:space:]]2.1.mp4 filter=lfs diff=lfs merge=lfs -text
+04[[:space:]]-[[:space:]]Threats/003[[:space:]]Attributes[[:space:]]of[[:space:]]Actors[[:space:]]OB[[:space:]]2.1.mp4 filter=lfs diff=lfs merge=lfs -text
+04[[:space:]]-[[:space:]]Threats/005[[:space:]]Unskilled[[:space:]]Attacker[[:space:]]OB[[:space:]]2.1.mp4 filter=lfs diff=lfs merge=lfs -text
+04[[:space:]]-[[:space:]]Threats/004[[:space:]]Nation-state[[:space:]]OB[[:space:]]2.1.mp4 filter=lfs diff=lfs merge=lfs -text
+04[[:space:]]-[[:space:]]Threats/006[[:space:]]Hacktivist[[:space:]]OB[[:space:]]2.1.mp4 filter=lfs diff=lfs merge=lfs -text
+04[[:space:]]-[[:space:]]Threats/007[[:space:]]Organized[[:space:]]Crime[[:space:]]OB[[:space:]]2.1.mp4 filter=lfs diff=lfs merge=lfs -text
+04[[:space:]]-[[:space:]]Threats/008[[:space:]]Shadow[[:space:]]IT[[:space:]]OB[[:space:]]2.1.mp4 filter=lfs diff=lfs merge=lfs -text

01 - Introduction/001 Course Layout.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:40ca94e4c14019c5944b32c20151709a537d7010d2fe6498f765fe9261e30d31
+size 175684496

01 - Introduction/001 Course Layout_en.srt

@@ -0,0 +1,660 @@
+1
+00:00:00,000 --> 00:00:05,000
+Okay, before we dive into the material, I want to go over the actual interface that you're going to
+
+2
+00:00:05,000 --> 00:00:10,000
+be using to navigate this course, how the courses laid out, what should you be expecting at the end
+
+3
+00:00:10,000 --> 00:00:14,000
+of every lecture and all the resources that's available to you?
+
+4
+00:00:14,000 --> 00:00:15,000
+Let's get started.
+
+5
+00:00:15,000 --> 00:00:18,000
+Now the first thing I want to mention is the layout of this course.
+
+6
+00:00:18,000 --> 00:00:24,000
+So if you're watching this on the Udemy platform, you're very, very familiar with the layout of this
+
+7
+00:00:24,000 --> 00:00:27,000
+particular class or the Udemy interface.
+
+8
+00:00:27,000 --> 00:00:35,000
+In other words, so what it is is that the course is separated into 27 sections sections, the first
+
+9
+00:00:35,000 --> 00:00:41,000
+one being the introduction all the way to section 25 covers all the exam topics.
+
+10
+00:00:41,000 --> 00:00:43,000
+Section 26 is called labs.
+
+11
+00:00:43,000 --> 00:00:48,000
+Labs are going to allow you to practice what I have been talking about for 25 sections or.
+
+12
+00:00:48,000 --> 00:00:52,000
+And then finally the last one at the bottom says Mock exam.
+
+13
+00:00:52,000 --> 00:00:55,000
+I know I'm blocking my camera here, seems to be blocking it.
+
+14
+00:00:55,000 --> 00:01:01,000
+Um, there's one mock exam in this course that you guys should be taking when you finish the entire
+
+15
+00:01:01,000 --> 00:01:02,000
+course.
+
+16
+00:01:02,000 --> 00:01:04,000
+Now let's take a look at one of these sections.
+
+17
+00:01:04,000 --> 00:01:11,000
+So these sections are basically labeled with some kind of security topics like section nine is secure
+
+18
+00:01:11,000 --> 00:01:11,000
+and IT assets.
+
+19
+00:01:11,000 --> 00:01:13,000
+Section 11 security principles.
+
+20
+00:01:13,000 --> 00:01:15,000
+Section 12 data protection.
+
+21
+00:01:15,000 --> 00:01:20,000
+Every time you open a section, you're going to find a series of lectures next to the name of every
+
+22
+00:01:20,000 --> 00:01:21,000
+lecture.
+
+23
+00:01:21,000 --> 00:01:23,000
+You're going to see something that says OB and then a number.
+
+24
+00:01:24,000 --> 00:01:28,000
+This refers to the exam objectives that is coming from.
+
+25
+00:01:28,000 --> 00:01:33,000
+And I'll explain to you guys in a few minutes what exactly are those exam objectives?
+
+26
+00:01:34,000 --> 00:01:38,000
+At the end of every single one of the sections, you're going to have what's called a quick quiz.
+
+27
+00:01:38,000 --> 00:01:44,000
+This is five questions that basically tested your knowledge on those particular topics that you just
+
+28
+00:01:44,000 --> 00:01:45,000
+learned about in the section.
+
+29
+00:01:45,000 --> 00:01:49,000
+So every one of the sections have a quick quiz located there.
+
+30
+00:01:50,000 --> 00:01:52,000
+Um, so keep that in mind.
+
+31
+00:01:52,000 --> 00:01:57,000
+Every single lecture has a number that comes after it.
+
+32
+00:01:57,000 --> 00:01:59,000
+That number is the exam objectives.
+
+33
+00:01:59,000 --> 00:02:02,000
+For example cryptography is objective 1.4.
+
+34
+00:02:02,000 --> 00:02:04,000
+So that's how this is laid out.
+
+35
+00:02:04,000 --> 00:02:07,000
+And you just basically click on it and it plays a video for you and you just watch it.
+
+36
+00:02:08,000 --> 00:02:10,000
+Now what are the resources that comes with it?
+
+37
+00:02:10,000 --> 00:02:15,000
+If there's one thing I did in this course is that I'm going to be giving you guys tons of resources
+
+38
+00:02:15,000 --> 00:02:16,000
+that comes with it.
+
+39
+00:02:16,000 --> 00:02:19,000
+So let's go to the resource section and see what they are.
+
+40
+00:02:19,000 --> 00:02:23,000
+So in it it's in the introduction.
+
+41
+00:02:23,000 --> 00:02:27,000
+And number three says course objectives notes and Cram Guide download.
+
+42
+00:02:27,000 --> 00:02:29,000
+Now you just got to click on this.
+
+43
+00:02:29,000 --> 00:02:30,000
+Click on every one of them.
+
+44
+00:02:30,000 --> 00:02:32,000
+There's four things to download and just download it.
+
+45
+00:02:32,000 --> 00:02:35,000
+They're all PDFs and let's go through what they are.
+
+46
+00:02:36,000 --> 00:02:41,000
+So the first one up that you should be getting is this CompTIA Security+ exam objectives now.
+
+47
+00:02:42,000 --> 00:02:44,000
+This CompTIA Security+.
+
+48
+00:02:44,000 --> 00:02:46,000
+I've already downloaded it.
+
+49
+00:02:46,000 --> 00:02:50,000
+This is the exam objectives that this entire course is based on.
+
+50
+00:02:50,000 --> 00:02:59,000
+You guys are studying for Sio 701 or the 701 series of exam, and all the topics that I cover in this
+
+51
+00:02:59,000 --> 00:02:59,000
+course.
+
+52
+00:02:59,000 --> 00:03:00,000
+This is where I got it from.
+
+53
+00:03:00,000 --> 00:03:05,000
+CompTIA publishers publishes this document absolutely free.
+
+54
+00:03:05,000 --> 00:03:06,000
+You don't have to download it here.
+
+55
+00:03:06,000 --> 00:03:08,000
+You could download it from Comptia's website.
+
+56
+00:03:08,000 --> 00:03:10,000
+If you notice I covered some of this already.
+
+57
+00:03:11,000 --> 00:03:13,000
+We talked about the exam stats.
+
+58
+00:03:13,000 --> 00:03:15,000
+We talked about the domains that it has.
+
+59
+00:03:15,000 --> 00:03:20,000
+But if I scroll down, you'll notice that it covers a lot more stuff.
+
+60
+00:03:20,000 --> 00:03:27,000
+For example, in domain 1.0, general security concepts, it's that itself is broken down into four
+
+61
+00:03:27,000 --> 00:03:33,000
+sections into 1.1, 1.2, 1.3 and 1.4.
+
+62
+00:03:33,000 --> 00:03:36,000
+If you remember when we looked at cryptography.
+
+63
+00:03:38,000 --> 00:03:45,000
+This is a three hour and 35 minute lesson, and in this one you have a 30 lectures actually.
+
+64
+00:03:45,000 --> 00:03:49,000
+And you notice this is all objective 1.4, 1.41.4.
+
+65
+00:03:49,000 --> 00:03:50,000
+What am I referring to these things?
+
+66
+00:03:50,000 --> 00:03:56,000
+1.4 if I look at the next section social engineering.
+
+67
+00:03:56,000 --> 00:03:59,000
+Social engineering is objective 2.2.
+
+68
+00:03:59,000 --> 00:04:04,000
+So if I look back here and I look at 2.2, here it is social engineering.
+
+69
+00:04:04,000 --> 00:04:10,000
+So when you look at every lecture those numbers refers to this document, these things.
+
+70
+00:04:10,000 --> 00:04:12,000
+This is the exam objective.
+
+71
+00:04:12,000 --> 00:04:18,000
+Now what's good about the exam objective is that every single one of your questions will come from these
+
+72
+00:04:18,000 --> 00:04:19,000
+exam objectives.
+
+73
+00:04:19,000 --> 00:04:26,000
+No question should or would actually come from something outside of these objectives.
+
+74
+00:04:26,000 --> 00:04:31,000
+If you want to test something that is foreign all right.
+
+75
+00:04:31,000 --> 00:04:33,000
+They wouldn't put it on this exam.
+
+76
+00:04:33,000 --> 00:04:35,000
+They wouldn't put it on this security+ test.
+
+77
+00:04:35,000 --> 00:04:38,000
+Because technically speaking, they could only test you.
+
+78
+00:04:38,000 --> 00:04:40,000
+What's on this exam objectives.
+
+79
+00:04:40,000 --> 00:04:43,000
+Now it's from this objective that I create the other guides.
+
+80
+00:04:43,000 --> 00:04:43,000
+All right.
+
+81
+00:04:43,000 --> 00:04:44,000
+And I'll show you what I mean.
+
+82
+00:04:45,000 --> 00:04:48,000
+So make sure you download this and just give a quick review to this.
+
+83
+00:04:49,000 --> 00:04:52,000
+The other one here I have is going to be.
+
+84
+00:04:53,000 --> 00:04:54,000
+Course notes.
+
+85
+00:04:54,000 --> 00:04:55,000
+Now this is really good.
+
+86
+00:04:55,000 --> 00:04:57,000
+You guys are going to love this one.
+
+87
+00:04:57,000 --> 00:04:58,000
+Course notes.
+
+88
+00:04:58,000 --> 00:05:02,000
+Course notes are every single text.
+
+89
+00:05:02,000 --> 00:05:06,000
+So when I'm presenting you see me point on this section over here.
+
+90
+00:05:06,000 --> 00:05:08,000
+And you notice that they're text that appears here.
+
+91
+00:05:08,000 --> 00:05:10,000
+And I explained the text and we talk about it.
+
+92
+00:05:10,000 --> 00:05:13,000
+And I tell you what you need to know for your exam and so on and so on.
+
+93
+00:05:13,000 --> 00:05:15,000
+Those texts is this course notes.
+
+94
+00:05:15,000 --> 00:05:17,000
+Now it is a lot.
+
+95
+00:05:17,000 --> 00:05:21,000
+It is 850 pages of notes.
+
+96
+00:05:21,000 --> 00:05:28,000
+As you can see, this is a great set of tools that or I should say content that you can use just to
+
+97
+00:05:28,000 --> 00:05:28,000
+study.
+
+98
+00:05:28,000 --> 00:05:32,000
+If you don't like me, you don't like the way I sound is Andrew, you're too ugly.
+
+99
+00:05:32,000 --> 00:05:34,000
+You need to get some hair on your head.
+
+100
+00:05:34,000 --> 00:05:35,000
+Basically, you can read this.
+
+101
+00:05:35,000 --> 00:05:39,000
+I mean, whatever I'm covering is going to be here, so make sure to review this.
+
+102
+00:05:39,000 --> 00:05:40,000
+This is a great thing.
+
+103
+00:05:40,000 --> 00:05:41,000
+It's 850.
+
+104
+00:05:41,000 --> 00:05:47,000
+And every single text that I'm going to be covering, every single text that you see on the right side
+
+105
+00:05:47,000 --> 00:05:50,000
+of me as I'm teaching is in that PDF.
+
+106
+00:05:50,000 --> 00:05:55,000
+If you think that's pretty cool, I got something even cooler for you that I'm really proud about because
+
+107
+00:05:55,000 --> 00:05:56,000
+I think it's pretty cool.
+
+108
+00:05:58,000 --> 00:06:02,000
+That's going to be this thing, the security plus the last minute cram guide.
+
+109
+00:06:02,000 --> 00:06:09,000
+So the last minute cram guide is actually a book that I sell on Amazon.
+
+110
+00:06:10,000 --> 00:06:18,000
+Um, and this particular book, basically it's 84 pages and it explains every single one of the exam
+
+111
+00:06:18,000 --> 00:06:19,000
+objectives for you.
+
+112
+00:06:20,000 --> 00:06:23,000
+So here's what I did I took the exam objectives.
+
+113
+00:06:24,000 --> 00:06:24,000
+All right.
+
+114
+00:06:24,000 --> 00:06:30,000
+If you remember, there's five domains and I explained every single one.
+
+115
+00:06:30,000 --> 00:06:31,000
+So here's objective 1.1.
+
+116
+00:06:32,000 --> 00:06:37,000
+And technical security controls managerial security controls operations security physical security controls.
+
+117
+00:06:37,000 --> 00:06:39,000
+And I explained every single one there.
+
+118
+00:06:39,000 --> 00:06:42,000
+So if you look at the exam objectives.
+
+119
+00:06:44,000 --> 00:06:45,000
+Where is it.
+
+120
+00:06:45,000 --> 00:06:51,000
+Let's say one okay so 1.1 categories technical managerial operational physical.
+
+121
+00:06:51,000 --> 00:06:54,000
+If you notice in my cram guide.
+
+122
+00:06:56,000 --> 00:06:57,000
+Where is my gram guide?
+
+123
+00:06:58,000 --> 00:07:00,000
+Here we go in my gram guide.
+
+124
+00:07:00,000 --> 00:07:02,000
+I explain it to you just like that.
+
+125
+00:07:03,000 --> 00:07:04,000
+You see this?
+
+126
+00:07:04,000 --> 00:07:09,000
+Technical, managerial, physical, operational.
+
+127
+00:07:09,000 --> 00:07:10,000
+All explained there.
+
+128
+00:07:10,000 --> 00:07:11,000
+All right.
+
+129
+00:07:11,000 --> 00:07:15,000
+Preventative deterrent, detective corrective.
+
+130
+00:07:15,000 --> 00:07:17,000
+I just explained that.
+
+131
+00:07:17,000 --> 00:07:19,000
+And if you look in your exam objectives, that's the way you see it.
+
+132
+00:07:19,000 --> 00:07:21,000
+So this guide is absolutely amazing.
+
+133
+00:07:21,000 --> 00:07:25,000
+This guide explains every single thing you need to know to pass your test.
+
+134
+00:07:25,000 --> 00:07:27,000
+Now, I took this exam.
+
+135
+00:07:27,000 --> 00:07:30,000
+I'm one of the few teachers that actually takes the test that they teach.
+
+136
+00:07:30,000 --> 00:07:31,000
+Oddly enough.
+
+137
+00:07:31,000 --> 00:07:37,000
+Now on this particular exam, they're going to acronym you to death.
+
+138
+00:07:37,000 --> 00:07:42,000
+There's tons of acronym on the Security Plus exam, and they don't explain them on the test.
+
+139
+00:07:42,000 --> 00:07:43,000
+They'll just say SLA.
+
+140
+00:07:43,000 --> 00:07:44,000
+You better know what it means.
+
+141
+00:07:44,000 --> 00:07:49,000
+So what I did was I went to the exam objectives and they actually give you a list of the acronyms.
+
+142
+00:07:49,000 --> 00:07:53,000
+And I put it into my document and I explained every one for you.
+
+143
+00:07:53,000 --> 00:07:55,000
+So at the end of this cram guide.
+
+144
+00:07:56,000 --> 00:07:59,000
+You have all these acronyms and you're probably saying, oh my God, that is a lot.
+
+145
+00:07:59,000 --> 00:08:02,000
+Yeah, I didn't even realize there were so many acronyms.
+
+146
+00:08:03,000 --> 00:08:03,000
+It's a lot.
+
+147
+00:08:04,000 --> 00:08:04,000
+It's a lot.
+
+148
+00:08:04,000 --> 00:08:06,000
+So you got you want to make sure you review this.
+
+149
+00:08:06,000 --> 00:08:07,000
+You know what these acronyms are.
+
+150
+00:08:07,000 --> 00:08:09,000
+Because these acronyms could pop up on your exam.
+
+151
+00:08:09,000 --> 00:08:11,000
+And if you don't know what they mean, you're not going to get the question right.
+
+152
+00:08:11,000 --> 00:08:13,000
+So it's quite a lot.
+
+153
+00:08:13,000 --> 00:08:16,000
+And trust me, as you go through the course I'm basically going to cover all of them.
+
+154
+00:08:16,000 --> 00:08:19,000
+So by the time you come to the cram guide, you're probably going to know it.
+
+155
+00:08:19,000 --> 00:08:22,000
+So this is absolutely free of charge for you guys.
+
+156
+00:08:22,000 --> 00:08:26,000
+I do charge a price on Amazon for this free of charge just for taking my course.
+
+157
+00:08:26,000 --> 00:08:29,000
+Now the last thing is going to be the study plan.
+
+158
+00:08:29,000 --> 00:08:31,000
+Now I'm going to do another video on the study plan.
+
+159
+00:08:32,000 --> 00:08:34,000
+How do you pass your exam in 30 days?
+
+160
+00:08:34,000 --> 00:08:35,000
+This is the plan for it.
+
+161
+00:08:35,000 --> 00:08:38,000
+I'm going to do a whole video on it, uh, right after this.
+
+162
+00:08:39,000 --> 00:08:39,000
+Okay.
+
+163
+00:08:39,000 --> 00:08:41,000
+So that is everything you need to know.
+
+164
+00:08:41,000 --> 00:08:43,000
+How is the course laid out?
+
+165
+00:08:43,000 --> 00:08:48,000
+And of course, all the amazing resources that I'm going to be giving you to pass your test.
+

01 - Introduction/002 30 Day Study Plan.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:46213b5af735d10f09bf5b8ec1fd92c5e832ed74fabfb214a4f1b8f8e550e689
+size 296593312

01 - Introduction/002 30 Day Study Plan_en.srt

@@ -0,0 +1,704 @@
+1
+00:00:00,000 --> 00:00:01,000
+Let me ask you guys a question.
+
+2
+00:00:02,000 --> 00:00:09,000
+If I told you that if you study for just two hours a day, you can be security+ certified in less than
+
+3
+00:00:09,000 --> 00:00:10,000
+30 days.
+
+4
+00:00:10,000 --> 00:00:11,000
+Would you believe me?
+
+5
+00:00:11,000 --> 00:00:16,000
+Well, what if I give you an actual document that gives you the layout for that and tell you what you
+
+6
+00:00:16,000 --> 00:00:20,000
+need to study every single day for 30 days?
+
+7
+00:00:20,000 --> 00:00:23,000
+You just got to put in about two hours of work.
+
+8
+00:00:23,000 --> 00:00:29,000
+If you can put in two hours of work for 30 days, actually more like 28 days, you're going to actually
+
+9
+00:00:29,000 --> 00:00:31,000
+pass your security plus exam.
+
+10
+00:00:31,000 --> 00:00:35,000
+My study plan has helped thousands of students pass their exam on the first try.
+
+11
+00:00:35,000 --> 00:00:38,000
+And in this course, I'm going to give you that study plan free of charge.
+
+12
+00:00:38,000 --> 00:00:42,000
+All you got to do is just follow it, follow it and actually apply it.
+
+13
+00:00:42,000 --> 00:00:43,000
+And you're going to pass your exam.
+
+14
+00:00:43,000 --> 00:00:47,000
+Let's take a look at what it is now in the course.
+
+15
+00:00:47,000 --> 00:00:49,000
+Go to the introduction section of the course.
+
+16
+00:00:49,000 --> 00:00:54,000
+And in one of those you're going to find course objectives notes and Cram Guide download.
+
+17
+00:00:54,000 --> 00:00:57,000
+One of the download is called a 30 day study plan.
+
+18
+00:00:57,000 --> 00:01:01,000
+So I want to review that study plan with you now when you download this.
+
+19
+00:01:03,000 --> 00:01:04,000
+It should open this up.
+
+20
+00:01:04,000 --> 00:01:05,000
+So here it is.
+
+21
+00:01:05,000 --> 00:01:10,000
+So this 30 day study plan is what I wrote that helps my students to pass.
+
+22
+00:01:10,000 --> 00:01:18,000
+And you should be studying about two hours a day to actually get it done within 30 days.
+
+23
+00:01:18,000 --> 00:01:21,000
+Now this plan is designed to take 1 to 2 months.
+
+24
+00:01:21,000 --> 00:01:21,000
+You're saying.
+
+25
+00:01:21,000 --> 00:01:22,000
+But you just said 30 days.
+
+26
+00:01:22,000 --> 00:01:25,000
+Well, you you may not study every day.
+
+27
+00:01:25,000 --> 00:01:28,000
+You may study for six days a week, six days a week.
+
+28
+00:01:29,000 --> 00:01:31,000
+Over 30 days, about five weeks or so.
+
+29
+00:01:31,000 --> 00:01:32,000
+So keep that in mind.
+
+30
+00:01:32,000 --> 00:01:34,000
+You may not study every single day.
+
+31
+00:01:34,000 --> 00:01:36,000
+So that's why I didn't name it Monday through Friday.
+
+32
+00:01:36,000 --> 00:01:38,000
+I just put day one, day two, day three.
+
+33
+00:01:38,000 --> 00:01:42,000
+Now, if you're good and you're really into it, you can get this done in less than a month.
+
+34
+00:01:42,000 --> 00:01:48,000
+But if your schedule doesn't allow it, and sometimes you just need time to just relax a little bit,
+
+35
+00:01:48,000 --> 00:01:52,000
+maybe study for six days a week or five days at a minimum and just get it over with.
+
+36
+00:01:52,000 --> 00:01:53,000
+Let me tell you guys something.
+
+37
+00:01:54,000 --> 00:01:58,000
+I believe in six weeks you better be certified fully.
+
+38
+00:01:58,000 --> 00:02:00,000
+Most of you should do this in less than a month.
+
+39
+00:02:00,000 --> 00:02:02,000
+Okay, keep that in mind.
+
+40
+00:02:02,000 --> 00:02:05,000
+So let's go back here.
+
+41
+00:02:05,000 --> 00:02:07,000
+You notice the first day of studying.
+
+42
+00:02:07,000 --> 00:02:09,000
+What are you doing on the first day of studying?
+
+43
+00:02:09,000 --> 00:02:12,000
+You're registering for the actual test.
+
+44
+00:02:12,000 --> 00:02:14,000
+In 30 days from now.
+
+45
+00:02:14,000 --> 00:02:15,000
+This is a must do.
+
+46
+00:02:15,000 --> 00:02:16,000
+I put it as a must do.
+
+47
+00:02:16,000 --> 00:02:17,000
+What do you mean by that?
+
+48
+00:02:18,000 --> 00:02:19,000
+Let me tell you guys something.
+
+49
+00:02:19,000 --> 00:02:20,000
+I'm a slacker.
+
+50
+00:02:20,000 --> 00:02:22,000
+But I got 66 certifications.
+
+51
+00:02:22,000 --> 00:02:24,000
+I've taken over 100 exams.
+
+52
+00:02:24,000 --> 00:02:25,000
+No, I didn't fail a lot.
+
+53
+00:02:25,000 --> 00:02:28,000
+It's just that some exams needs multiple.
+
+54
+00:02:28,000 --> 00:02:30,000
+Some certifications needs multiple exams.
+
+55
+00:02:30,000 --> 00:02:32,000
+Like the Omcs needed seven exams.
+
+56
+00:02:32,000 --> 00:02:36,000
+Now here's what I believe.
+
+57
+00:02:36,000 --> 00:02:38,000
+I don't trust myself.
+
+58
+00:02:38,000 --> 00:02:39,000
+Do you trust yourself?
+
+59
+00:02:39,000 --> 00:02:40,000
+I don't trust myself.
+
+60
+00:02:40,000 --> 00:02:42,000
+I work better when I'm under pressure.
+
+61
+00:02:42,000 --> 00:02:44,000
+So here's what I'm going to do.
+
+62
+00:02:44,000 --> 00:02:50,000
+Anytime I want to take a certification exam, I actually go and schedule it before I actually study
+
+63
+00:02:50,000 --> 00:02:51,000
+for it.
+
+64
+00:02:51,000 --> 00:02:53,000
+Yeah, it sounds crazy, but it's true.
+
+65
+00:02:53,000 --> 00:02:55,000
+And I want you guys to do the same.
+
+66
+00:02:55,000 --> 00:02:56,000
+Here's what I want you guys to do.
+
+67
+00:02:56,000 --> 00:02:59,000
+If you're watching this video, you're already enrolled in the course.
+
+68
+00:02:59,000 --> 00:03:00,000
+Here's what here's what you're going to do.
+
+69
+00:03:00,000 --> 00:03:06,000
+Go right now to Pearson Vue Vue e.com okay here's what you do.
+
+70
+00:03:06,000 --> 00:03:11,000
+You go to view vue.com and what you're going to do.
+
+71
+00:03:11,000 --> 00:03:12,000
+You're going to search for CompTIA.
+
+72
+00:03:13,000 --> 00:03:15,000
+And you're going to have to pay the fee for the exam here.
+
+73
+00:03:15,000 --> 00:03:17,000
+Because this is where it gets serious.
+
+74
+00:03:18,000 --> 00:03:22,000
+If you have a login, if you've taken a previous CompTIA go ahead and log in.
+
+75
+00:03:23,000 --> 00:03:25,000
+Uh, if not just click log in anyhow.
+
+76
+00:03:25,000 --> 00:03:27,000
+And uh you can go ahead and sign up.
+
+77
+00:03:27,000 --> 00:03:29,000
+Now make make an account with them.
+
+78
+00:03:29,000 --> 00:03:32,000
+Follow your on screen directions from here.
+
+79
+00:03:32,000 --> 00:03:36,000
+And you can then select the 701 when you're doing the 701 exam.
+
+80
+00:03:36,000 --> 00:03:38,000
+And I want you guys to do this.
+
+81
+00:03:38,000 --> 00:03:41,000
+Ask yourself how many days can you commit.
+
+82
+00:03:41,000 --> 00:03:44,000
+Can you commit six days a week?
+
+83
+00:03:44,000 --> 00:03:47,000
+Well, Andrew said it's going to take me about 30 days.
+
+84
+00:03:47,000 --> 00:03:49,000
+The study plan is actually 28 days.
+
+85
+00:03:49,000 --> 00:03:49,000
+All right.
+
+86
+00:03:49,000 --> 00:03:54,000
+I say 30 days because maybe you're not going to commit every day.
+
+87
+00:03:54,000 --> 00:03:58,000
+So I actually lay it out over 28 day period.
+
+88
+00:03:58,000 --> 00:04:00,000
+So maybe you want to schedule it from four weeks from now.
+
+89
+00:04:00,000 --> 00:04:03,000
+Or if your schedule is really busy, schedule it for five weeks from now.
+
+90
+00:04:03,000 --> 00:04:06,000
+But I want you to schedule it.
+
+91
+00:04:06,000 --> 00:04:13,000
+If you don't schedule this exam right now, you are not going to study as much as you want.
+
+92
+00:04:13,000 --> 00:04:16,000
+The exam is not reality until you actually pay for it.
+
+93
+00:04:17,000 --> 00:04:18,000
+Go and pay for it and schedule it.
+
+94
+00:04:18,000 --> 00:04:22,000
+The worst case scenario, I promise you, is you're not going to fail.
+
+95
+00:04:22,000 --> 00:04:25,000
+Worst case scenario is if you can't stick to my study plan.
+
+96
+00:04:25,000 --> 00:04:27,000
+Because things happen in life.
+
+97
+00:04:27,000 --> 00:04:28,000
+You lose your job.
+
+98
+00:04:28,000 --> 00:04:35,000
+Something bad happened with the family, you know, whatever it is, uh, you can just reschedule it,
+
+99
+00:04:35,000 --> 00:04:35,000
+all right?
+
+100
+00:04:35,000 --> 00:04:36,000
+You can just reschedule it.
+
+101
+00:04:36,000 --> 00:04:39,000
+They're going to charge you a fee of about 20, $30, I believe.
+
+102
+00:04:39,000 --> 00:04:40,000
+It's not a lot.
+
+103
+00:04:40,000 --> 00:04:41,000
+They're going to charge you a little fee.
+
+104
+00:04:41,000 --> 00:04:46,000
+Consider it the tax you have to pay because you don't want to take it right away because you were slacking
+
+105
+00:04:46,000 --> 00:04:47,000
+off or whatever it was.
+
+106
+00:04:47,000 --> 00:04:49,000
+So schedule it.
+
+107
+00:04:49,000 --> 00:04:50,000
+This will force you to study.
+
+108
+00:04:50,000 --> 00:04:54,000
+This will push you to study, because then you're always going to say to yourself.
+
+109
+00:04:55,000 --> 00:04:55,000
+I'm going to start.
+
+110
+00:04:55,000 --> 00:04:56,000
+I'm tired today.
+
+111
+00:04:56,000 --> 00:04:59,000
+I'm going to study tomorrow and I'm going to study four hours tomorrow, Andrew said.
+
+112
+00:04:59,000 --> 00:05:03,000
+Study two, I'm gonna study four hours and the tomorrow comes on study six hours.
+
+113
+00:05:03,000 --> 00:05:04,000
+And then you know what?
+
+114
+00:05:04,000 --> 00:05:05,000
+On this weekend I'm going to put extra time.
+
+115
+00:05:05,000 --> 00:05:08,000
+You never get around to it before, you know, two months, three months go by.
+
+116
+00:05:08,000 --> 00:05:09,000
+You're not certified this way.
+
+117
+00:05:09,000 --> 00:05:11,000
+I guarantee you're going to take your test.
+
+118
+00:05:11,000 --> 00:05:12,000
+So please schedule your exam.
+
+119
+00:05:12,000 --> 00:05:14,000
+I always do it.
+
+120
+00:05:14,000 --> 00:05:16,000
+Quick tip or quick thing about me.
+
+121
+00:05:16,000 --> 00:05:17,000
+What?
+
+122
+00:05:17,000 --> 00:05:18,000
+I want to take an exam.
+
+123
+00:05:18,000 --> 00:05:23,000
+I would schedule the exam before I even buy the book or before I even before I buy the book, or before
+
+124
+00:05:23,000 --> 00:05:25,000
+I even know what what is on that test.
+
+125
+00:05:25,000 --> 00:05:27,000
+I go ahead and I schedule it that way.
+
+126
+00:05:27,000 --> 00:05:29,000
+I'm forced to actually do it.
+
+127
+00:05:30,000 --> 00:05:32,000
+And then you just follow the study plan.
+
+128
+00:05:32,000 --> 00:05:34,000
+So here we go.
+
+129
+00:05:34,000 --> 00:05:35,000
+Section two.
+
+130
+00:05:35,000 --> 00:05:39,000
+So day one every day is about two hours of work.
+
+131
+00:05:39,000 --> 00:05:43,000
+So you notice they want I got you doing section two, three and four.
+
+132
+00:05:43,000 --> 00:05:44,000
+So let's take a look at that.
+
+133
+00:05:44,000 --> 00:05:49,000
+So section two 41 minutes three 14 minutes for 40 minutes.
+
+134
+00:05:49,000 --> 00:05:52,000
+So combined these are about two hours.
+
+135
+00:05:53,000 --> 00:05:57,000
+Uh section one day two you're doing two sections.
+
+136
+00:05:57,000 --> 00:06:00,000
+Sections five and six vulnerabilities and signs of attacks.
+
+137
+00:06:00,000 --> 00:06:03,000
+So vulnerabilities uh signs of attack.
+
+138
+00:06:04,000 --> 00:06:06,000
+So this one's going to be a little bit longer, right.
+
+139
+00:06:06,000 --> 00:06:10,000
+It's going to come out to close to 2.5 hours I believe.
+
+140
+00:06:11,000 --> 00:06:13,000
+And then section day three and four.
+
+141
+00:06:13,000 --> 00:06:16,000
+Cryptography is tough, so I actually broke it into two days for you.
+
+142
+00:06:16,000 --> 00:06:18,000
+Uh, and then this this keeps on going.
+
+143
+00:06:18,000 --> 00:06:20,000
+You just follow the entire.
+
+144
+00:06:20,000 --> 00:06:23,000
+Just keep following this, keep on going through with it.
+
+145
+00:06:23,000 --> 00:06:29,000
+And now coming down towards the end of it, you'll notice the 19.
+
+146
+00:06:29,000 --> 00:06:31,000
+I got the mock exam in the course.
+
+147
+00:06:32,000 --> 00:06:32,000
+All right.
+
+148
+00:06:32,000 --> 00:06:35,000
+Now the mock exam I'm talking about is in this course.
+
+149
+00:06:35,000 --> 00:06:36,000
+It's at the bottom here.
+
+150
+00:06:36,000 --> 00:06:37,000
+Mock exam.
+
+151
+00:06:37,000 --> 00:06:39,000
+In this particular course.
+
+152
+00:06:39,000 --> 00:06:41,000
+So you do this one.
+
+153
+00:06:41,000 --> 00:06:45,000
+Now remember there is another course on Udemy that is mock exams.
+
+154
+00:06:45,000 --> 00:06:47,000
+Get that course from me.
+
+155
+00:06:47,000 --> 00:06:48,000
+That's also my course.
+
+156
+00:06:48,000 --> 00:06:49,000
+Make sure it comes from me.
+
+157
+00:06:49,000 --> 00:06:52,000
+It's the um security plus practice and there's six of them there.
+
+158
+00:06:52,000 --> 00:06:53,000
+Notice I have one.
+
+159
+00:06:53,000 --> 00:06:54,000
+You doing one every day.
+
+160
+00:06:55,000 --> 00:06:58,000
+Because they take 90 minutes and you're going to want to review what you get wrong.
+
+161
+00:06:58,000 --> 00:07:00,000
+So there you go with the two hours.
+
+162
+00:07:00,000 --> 00:07:04,000
+And then day 2627 you're reviewing the cramped the last minute guide.
+
+163
+00:07:05,000 --> 00:07:07,000
+Now I just spoke about the last minute guide.
+
+164
+00:07:08,000 --> 00:07:11,000
+The last minute guide, if you forgot was this download.
+
+165
+00:07:11,000 --> 00:07:19,000
+And inside of this download you have every single one of the exam objectives that's covered.
+
+166
+00:07:19,000 --> 00:07:22,000
+And you have the acronym list that you want to do a quick review on.
+
+167
+00:07:22,000 --> 00:07:25,000
+So all the exam objectives and the acronym list.
+
+168
+00:07:27,000 --> 00:07:31,000
+I give you two days to review this, to do maybe 40 page, 40 pages, and then day 28, take the test
+
+169
+00:07:31,000 --> 00:07:32,000
+and get it over with.
+
+170
+00:07:33,000 --> 00:07:36,000
+So this is follow the study plan the way you see it.
+
+171
+00:07:36,000 --> 00:07:41,000
+And if you can do that you're going to ace your exam I promise you.
+
+172
+00:07:41,000 --> 00:07:41,000
+All right.
+
+173
+00:07:41,000 --> 00:07:46,000
+Tons of my students, thousands of my students have used this study plan from my previous one.
+
+174
+00:07:46,000 --> 00:07:48,000
+When I teach the live class, I give them all this.
+
+175
+00:07:48,000 --> 00:07:51,000
+I didn't use to do it before my e-learning class, but now it's here.
+
+176
+00:07:51,000 --> 00:07:57,000
+So do this and I guarantee you you are going to ace your exam on the first try.
+

01 - Introduction/003 Exam Information.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ad2492a214f6c9acd6fe654f163609569083986724d8f6219cab527675a298ea
+size 174300628

01 - Introduction/003 Exam Information_en.srt

@@ -0,0 +1,568 @@
+1
+00:00:00,000 --> 00:00:05,000
+The Security+ certification is offered by a company called CompTIA, which stands for Comp.
+
+2
+00:00:05,000 --> 00:00:10,000
+It stands for the Computer to Technology Industry Association.
+
+3
+00:00:10,000 --> 00:00:14,000
+Now CompTIA has been around for about, I think three decades now.
+
+4
+00:00:14,000 --> 00:00:18,000
+And their most famous certification is the A+ certification.
+
+5
+00:00:18,000 --> 00:00:22,000
+Now, their second most famous is probably going to be Network+ or Security+.
+
+6
+00:00:22,000 --> 00:00:25,000
+And I think Security+ is more famous now.
+
+7
+00:00:25,000 --> 00:00:29,000
+So if you want to become Security+ certified, I'm going to walk you through some of the things you
+
+8
+00:00:29,000 --> 00:00:30,000
+have to do in this video.
+
+9
+00:00:30,000 --> 00:00:35,000
+And one good thing is that you only have to take one exam in order to be certified.
+
+10
+00:00:35,000 --> 00:00:39,000
+You just got to pass one certification exam.
+
+11
+00:00:39,000 --> 00:00:42,000
+And let's take a look at the stats on this exam.
+
+12
+00:00:42,000 --> 00:00:47,000
+Now, this particular course is designed to help you pass the CIO 701.
+
+13
+00:00:47,000 --> 00:00:52,000
+You want to make sure that you know this particular number as that's the exam you're taking.
+
+14
+00:00:52,000 --> 00:00:55,000
+Depending on when you're watching this video and when you're taking this course.
+
+15
+00:00:55,000 --> 00:00:59,000
+As this video is being made, there is a 601 exam or the older exam.
+
+16
+00:00:59,000 --> 00:01:04,000
+So this course is for this current, this newer exam I should say 701.
+
+17
+00:01:04,000 --> 00:01:06,000
+So remember that's the exam you're taking.
+
+18
+00:01:06,000 --> 00:01:06,000
+Why.
+
+19
+00:01:06,000 --> 00:01:11,000
+Because when you go to register and at the end of this video I'll talk about where to register for the
+
+20
+00:01:11,000 --> 00:01:12,000
+exam.
+
+21
+00:01:12,000 --> 00:01:17,000
+Now when you're ready to register for the exam you're going to make sure you select this exam.
+
+22
+00:01:17,000 --> 00:01:23,000
+Now the exam is 90 minutes in duration, as you can see here with a maximum of 90 questions.
+
+23
+00:01:23,000 --> 00:01:26,000
+Now, I did take this exam a few days after it came out.
+
+24
+00:01:26,000 --> 00:01:29,000
+I think it came out like November 6th, 2023.
+
+25
+00:01:29,000 --> 00:01:32,000
+I took it like November 8th or November 9th I did.
+
+26
+00:01:32,000 --> 00:01:36,000
+I'm going to do a video on that on the YouTube channel that talks about my experience.
+
+27
+00:01:36,000 --> 00:01:38,000
+Now in my exam, I got 77 questions.
+
+28
+00:01:38,000 --> 00:01:43,000
+So some of you guys may get less than 90 questions or up to 90 questions.
+
+29
+00:01:43,000 --> 00:01:46,000
+So keep that in mind maximum of 90 questions.
+
+30
+00:01:46,000 --> 00:01:50,000
+Now keep in mind that you're probably going to get a lot less, maybe 80 something questions or the
+
+31
+00:01:50,000 --> 00:01:52,000
+late 70 questions.
+
+32
+00:01:52,000 --> 00:01:54,000
+Now your exam have three types of question.
+
+33
+00:01:54,000 --> 00:01:59,000
+What's called multiple choice drag and drop, and performance based or simulation based questions.
+
+34
+00:01:59,000 --> 00:02:02,000
+These here are pretty simple multiple choice questions.
+
+35
+00:02:02,000 --> 00:02:05,000
+You're just going to choose one of those choices that is there.
+
+36
+00:02:05,000 --> 00:02:07,000
+Some of the questions is going to have you choose MultiChoice.
+
+37
+00:02:07,000 --> 00:02:10,000
+So it's going to say choose two or choose three.
+
+38
+00:02:10,000 --> 00:02:12,000
+They never do choose all or choose many.
+
+39
+00:02:12,000 --> 00:02:15,000
+They'll just say uh, choose two or choose three.
+
+40
+00:02:15,000 --> 00:02:16,000
+You're not going to get a lot of those.
+
+41
+00:02:16,000 --> 00:02:18,000
+So let's say the test had 90 questions.
+
+42
+00:02:19,000 --> 00:02:22,000
+I'm telling you guys, 80 of them is going to be choose one answer.
+
+43
+00:02:22,000 --> 00:02:25,000
+Maybe three, 4 or 5 of them is going to be multi choice.
+
+44
+00:02:25,000 --> 00:02:30,000
+And you're probably going to get as soon as the exam begins, you're going to get a drag and drop or
+
+45
+00:02:30,000 --> 00:02:31,000
+a performance based simulator.
+
+46
+00:02:31,000 --> 00:02:37,000
+Now again it depends when you're watching this video I did get a drag and drop questions where you had
+
+47
+00:02:37,000 --> 00:02:40,000
+to match attacks to how to mitigate this attack.
+
+48
+00:02:40,000 --> 00:02:41,000
+So to give you a scenario.
+
+49
+00:02:41,000 --> 00:02:42,000
+And they said, what attack is this?
+
+50
+00:02:42,000 --> 00:02:44,000
+And you had to match it to that.
+
+51
+00:02:44,000 --> 00:02:45,000
+And then how would you fix that attack.
+
+52
+00:02:45,000 --> 00:02:47,000
+That's basically a drag and drop.
+
+53
+00:02:47,000 --> 00:02:51,000
+The other one you're going to have is sometimes you get a performance based simulator where you may
+
+54
+00:02:51,000 --> 00:02:57,000
+have to read some kind of text file and decode what that says.
+
+55
+00:02:57,000 --> 00:02:58,000
+Is this machine hacked?
+
+56
+00:02:58,000 --> 00:02:59,000
+Is it good?
+
+57
+00:02:59,000 --> 00:03:01,000
+Here is the log files that go with that.
+
+58
+00:03:01,000 --> 00:03:03,000
+So that's what this is.
+
+59
+00:03:03,000 --> 00:03:05,000
+Now these are pretty they're pretty simple in my opinion.
+
+60
+00:03:05,000 --> 00:03:07,000
+Especially if you do some of the labs.
+
+61
+00:03:07,000 --> 00:03:08,000
+They're pretty simple.
+
+62
+00:03:08,000 --> 00:03:14,000
+The drag and drop to me is even more simple that you just have to know, uh, know how to fix problems
+
+63
+00:03:14,000 --> 00:03:16,000
+or know how to resolve a particular attack.
+
+64
+00:03:16,000 --> 00:03:20,000
+Now, this exam is pretty scary because of this right here.
+
+65
+00:03:20,000 --> 00:03:26,000
+You see, right here you need 750 out of 900 points.
+
+66
+00:03:26,000 --> 00:03:32,000
+Now that basically comes out to 83% is what you have to score on it.
+
+67
+00:03:32,000 --> 00:03:35,000
+Now, when I took this exam, I didn't find it difficult.
+
+68
+00:03:35,000 --> 00:03:38,000
+It was mostly just terminologies.
+
+69
+00:03:38,000 --> 00:03:39,000
+If you know the terminology.
+
+70
+00:03:39,000 --> 00:03:41,000
+This course comes with a study guide.
+
+71
+00:03:41,000 --> 00:03:43,000
+So make sure to review that study guide.
+
+72
+00:03:43,000 --> 00:03:47,000
+And I think you're going to be just fine as the course as the exam is basically just terminology off
+
+73
+00:03:47,000 --> 00:03:48,000
+of the objectives.
+
+74
+00:03:48,000 --> 00:03:52,000
+So if you know that I think you can accomplish this score pretty quick.
+
+75
+00:03:52,000 --> 00:03:56,000
+Now the question is where do you take this exam.
+
+76
+00:03:56,000 --> 00:04:00,000
+Now this exam is given at a company called Pearson Vue.
+
+77
+00:04:00,000 --> 00:04:04,000
+Now Pearson Vue administers the exam for CompTIA.
+
+78
+00:04:04,000 --> 00:04:08,000
+So I want you to hear these two terms CompTIA and Vue.
+
+79
+00:04:08,000 --> 00:04:10,000
+Vue Aecom I'm going to show you the website in a minute.
+
+80
+00:04:10,000 --> 00:04:11,000
+So.
+
+81
+00:04:12,000 --> 00:04:17,000
+CompTIA is the person, the company that's going to certify you okay.
+
+82
+00:04:17,000 --> 00:04:22,000
+They're the one that created the exam, the objectives and all that good stuff.
+
+83
+00:04:22,000 --> 00:04:25,000
+Pearson Vue is the people that administers the exam.
+
+84
+00:04:25,000 --> 00:04:29,000
+So when you're ready to take the test, you're going to want to go to Pearson Vue and take the test
+
+85
+00:04:29,000 --> 00:04:29,000
+with them.
+
+86
+00:04:29,000 --> 00:04:31,000
+How do you do that?
+
+87
+00:04:31,000 --> 00:04:32,000
+Well let's go.
+
+88
+00:04:32,000 --> 00:04:34,000
+I'm going to show you guys my desktop.
+
+89
+00:04:34,000 --> 00:04:35,000
+Here we are at my desktop.
+
+90
+00:04:35,000 --> 00:04:42,000
+I am going to go to Pearson Vue as soon as my browser opens up here at some point in the future.
+
+91
+00:04:43,000 --> 00:04:44,000
+All right.
+
+92
+00:04:45,000 --> 00:04:45,000
+Okay.
+
+93
+00:04:45,000 --> 00:04:47,000
+I'll open up on the other screen.
+
+94
+00:04:47,000 --> 00:04:47,000
+Okay.
+
+95
+00:04:47,000 --> 00:04:48,000
+So here we are at Pearson Vue.
+
+96
+00:04:48,000 --> 00:04:51,000
+So the website is just vue.com.
+
+97
+00:04:51,000 --> 00:04:56,000
+So we're going to go here and we're going to say let's type in CompTIA.
+
+98
+00:04:57,000 --> 00:05:00,000
+And this is how you're going to register for the test by the way.
+
+99
+00:05:00,000 --> 00:05:01,000
+You just go to CompTIA.
+
+100
+00:05:01,000 --> 00:05:07,000
+Now if you have taken a previous CompTIA exam you would say login okay.
+
+101
+00:05:07,000 --> 00:05:13,000
+If you have never, ever taken a comp t exam, you follow the on screen prompts here and you're going
+
+102
+00:05:13,000 --> 00:05:17,000
+to create an account on this website in order to.
+
+103
+00:05:17,000 --> 00:05:19,000
+So you you could just basically click login.
+
+104
+00:05:19,000 --> 00:05:21,000
+And then it's going to say, hey, don't have an account.
+
+105
+00:05:21,000 --> 00:05:22,000
+You can sign up.
+
+106
+00:05:22,000 --> 00:05:25,000
+If you don't have one, you can sign up for one right on their website.
+
+107
+00:05:25,000 --> 00:05:27,000
+Now where do you take the test?
+
+108
+00:05:27,000 --> 00:05:33,000
+Well, this exam is going to be given online at your home.
+
+109
+00:05:33,000 --> 00:05:36,000
+That's where I tell most people to take the test.
+
+110
+00:05:36,000 --> 00:05:40,000
+I don't recommend for you to take this exam at a testing center.
+
+111
+00:05:40,000 --> 00:05:44,000
+So when you register, you're going to have the chance to go to a Pearson Vue testing center in your
+
+112
+00:05:44,000 --> 00:05:47,000
+local neighborhood, and you can take the test there.
+
+113
+00:05:47,000 --> 00:05:48,000
+I'm not a fan of that.
+
+114
+00:05:48,000 --> 00:05:56,000
+The reason is because going to a testing center to take the exam is going to require you to travel to
+
+115
+00:05:56,000 --> 00:05:57,000
+the testing center.
+
+116
+00:05:57,000 --> 00:06:00,000
+You're going to have to make sure that you don't be late.
+
+117
+00:06:00,000 --> 00:06:02,000
+If not, you're going to forfeit the exam.
+
+118
+00:06:02,000 --> 00:06:04,000
+It's a pretty stressful environment.
+
+119
+00:06:04,000 --> 00:06:09,000
+Their chairs are uncomfortable, their computer sucks, their keyboard is nasty, their screen is too
+
+120
+00:06:09,000 --> 00:06:10,000
+small.
+
+121
+00:06:10,000 --> 00:06:11,000
+It's a lot of security.
+
+122
+00:06:11,000 --> 00:06:13,000
+They're going to pat you down.
+
+123
+00:06:13,000 --> 00:06:15,000
+They're going to put a metal detector against you.
+
+124
+00:06:15,000 --> 00:06:19,000
+They might hand scan you or take a biometric print of you.
+
+125
+00:06:19,000 --> 00:06:22,000
+It's pretty much it's pretty stressful environment.
+
+126
+00:06:22,000 --> 00:06:24,000
+If you do it at home, you're going to need two things.
+
+127
+00:06:24,000 --> 00:06:27,000
+You're going to microphone and you're going to need a webcam on your computer.
+
+128
+00:06:28,000 --> 00:06:30,000
+Technically three things because you need a quiet room.
+
+129
+00:06:30,000 --> 00:06:31,000
+If you got that, you're good.
+
+130
+00:06:31,000 --> 00:06:35,000
+If you have a laptop that comes with a built in micro camera, you're good.
+
+131
+00:06:35,000 --> 00:06:41,000
+You can also if you have a all laptops pretty much nowadays have a microphone built in, you're fine.
+
+132
+00:06:41,000 --> 00:06:46,000
+If not, you can just buy like a $50 webcam and just take the exam at home.
+
+133
+00:06:46,000 --> 00:06:49,000
+Basically, they're going to install a piece of software on your computer, uh, a couple of minutes
+
+134
+00:06:49,000 --> 00:06:51,000
+before the exam starts.
+
+135
+00:06:51,000 --> 00:06:55,000
+They're going to test it, and you just sit and take it at home and you're certified directly from the
+
+136
+00:06:55,000 --> 00:06:59,000
+comfort of your home, your chair, your computer, and a whole lot less stressful.
+
+137
+00:06:59,000 --> 00:07:00,000
+All right.
+
+138
+00:07:00,000 --> 00:07:01,000
+So keep that in mind.
+
+139
+00:07:01,000 --> 00:07:04,000
+These things I do recommend to take the exam at home.
+
+140
+00:07:04,000 --> 00:07:05,000
+Remember that.
+
+141
+00:07:05,000 --> 00:07:08,000
+And then don't forget 90 minutes 90 questions.
+
+142
+00:07:08,000 --> 00:07:12,000
+And you need 83% to pass to become certified.
+

01 - Introduction/004 Exam Domains.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:58c158a7a21ad26e9756520ff56a8f0091449cf0d55e1d770930954844448451
+size 144894608

01 - Introduction/004 Exam Domains_en.srt

@@ -0,0 +1,456 @@
+1
+00:00:00,000 --> 00:00:05,000
+Now, before we get into every single one of the topics in the exam objectives, I want to just give
+
+2
+00:00:05,000 --> 00:00:08,000
+you a brief overview of what exactly is covered on this test.
+
+3
+00:00:08,000 --> 00:00:12,000
+So here I have this document or I should say this table.
+
+4
+00:00:12,000 --> 00:00:15,000
+Now I got this out of the exam objectives.
+
+5
+00:00:15,000 --> 00:00:20,000
+Now you can download the Sy0 701 exam objectives from the CompTIA website.
+
+6
+00:00:20,000 --> 00:00:26,000
+Or if it's dependent on the platform that this video is hosted on, you could probably probably just
+
+7
+00:00:26,000 --> 00:00:27,000
+attach it as a PDF.
+
+8
+00:00:27,000 --> 00:00:29,000
+Again, it depends where this video is hosted on.
+
+9
+00:00:29,000 --> 00:00:30,000
+I may or may not be able to do that.
+
+10
+00:00:30,000 --> 00:00:34,000
+If not, you can get the exam objective from Comptia's website.
+
+11
+00:00:34,000 --> 00:00:36,000
+So let's go over what exactly is this.
+
+12
+00:00:36,000 --> 00:00:43,000
+And you can see that we got five domains that makes up all of the exam questions.
+
+13
+00:00:43,000 --> 00:00:44,000
+So let's go over this.
+
+14
+00:00:44,000 --> 00:00:47,000
+The first thing up I have is that general security concept.
+
+15
+00:00:47,000 --> 00:00:48,000
+This is 12%.
+
+16
+00:00:48,000 --> 00:00:52,000
+This is a domain that you're just going to learn basic terms like what is authentication.
+
+17
+00:00:52,000 --> 00:00:54,000
+What is identification.
+
+18
+00:00:54,000 --> 00:00:55,000
+What is confidentiality.
+
+19
+00:00:56,000 --> 00:01:00,000
+Um, it does talk a little bit about physical security and how to classify different kinds of controls
+
+20
+00:01:00,000 --> 00:01:01,000
+is going to be here.
+
+21
+00:01:01,000 --> 00:01:06,000
+Now as a security professional, you're going to have to know all the different threats that affect
+
+22
+00:01:06,000 --> 00:01:12,000
+your network, such as what's the DDoS attack, what's cross-site scripting, what SQL injections,
+
+23
+00:01:12,000 --> 00:01:18,000
+what are the different threats, what makes your systems vulnerable, such as outdated or unpatched
+
+24
+00:01:18,000 --> 00:01:21,000
+machines, and what can we do to fix those things?
+
+25
+00:01:21,000 --> 00:01:21,000
+Right.
+
+26
+00:01:21,000 --> 00:01:24,000
+What what can we implement to keep our systems more secure?
+
+27
+00:01:24,000 --> 00:01:28,000
+Such as, hey, maybe you should at least patch your computers or keep them up to date at least.
+
+28
+00:01:28,000 --> 00:01:32,000
+How do we design secure systems?
+
+29
+00:01:32,000 --> 00:01:33,000
+Right?
+
+30
+00:01:33,000 --> 00:01:39,000
+If we go out and we build a network, what should we be doing as we build secure networks?
+
+31
+00:01:39,000 --> 00:01:40,000
+Is what number three are.
+
+32
+00:01:40,000 --> 00:01:44,000
+Cover number four is security operations and day to day things that we should be doing.
+
+33
+00:01:44,000 --> 00:01:48,000
+Like how do you secure and harden a router or switch for example, is going to be covered here.
+
+34
+00:01:48,000 --> 00:01:52,000
+Notice this is one of the biggest domain with 28%.
+
+35
+00:01:52,000 --> 00:01:54,000
+So quite a lot is covered in domain four.
+
+36
+00:01:54,000 --> 00:01:56,000
+Now domain five is pretty simple.
+
+37
+00:01:56,000 --> 00:02:01,000
+This is more administrative things such as understanding different types of policies and what security
+
+38
+00:02:01,000 --> 00:02:04,000
+policies are what guidelines are also risk management.
+
+39
+00:02:05,000 --> 00:02:10,000
+You're going to learn about how do we deal and manage with risk, how do we respond to certain risks,
+
+40
+00:02:10,000 --> 00:02:13,000
+how do we deal and manage with vendors, for example?
+
+41
+00:02:13,000 --> 00:02:19,000
+And finally, we'll take a look at user training in this particular section for a total of 100 points.
+
+42
+00:02:19,000 --> 00:02:22,000
+Now I want you guys to remember that this is the weight of it.
+
+43
+00:02:22,000 --> 00:02:27,000
+And in theory, in theory you should get questions by the weights.
+
+44
+00:02:27,000 --> 00:02:33,000
+If CompTIA, for example, said there is up to 90 questions, technically you should get 18 questions
+
+45
+00:02:33,000 --> 00:02:35,000
+from this domain.
+
+46
+00:02:35,000 --> 00:02:37,000
+That's 20% of 90.
+
+47
+00:02:37,000 --> 00:02:38,000
+And so on and so on.
+
+48
+00:02:39,000 --> 00:02:44,000
+Um, but keep in mind that CompTIA really doesn't publish those numbers, doesn't say what you're going
+
+49
+00:02:44,000 --> 00:02:49,000
+to get all these questions, uh, on on this particular topic, it's all scattered out all over the
+
+50
+00:02:49,000 --> 00:02:50,000
+exam.
+
+51
+00:02:51,000 --> 00:02:51,000
+Okay.
+
+52
+00:02:51,000 --> 00:02:57,000
+So one of the things that you should you guys should be doing is going through the exam objectives.
+
+53
+00:02:57,000 --> 00:03:03,000
+Now I have the exam objectives here that you can download from Comptia's website.
+
+54
+00:03:03,000 --> 00:03:07,000
+And I want to show you guys what that document looks like.
+
+55
+00:03:08,000 --> 00:03:08,000
+All right.
+
+56
+00:03:08,000 --> 00:03:09,000
+So I do have it open.
+
+57
+00:03:09,000 --> 00:03:10,000
+Let's take a look.
+
+58
+00:03:10,000 --> 00:03:16,000
+So here's the um here's Comptia's exam objectives.
+
+59
+00:03:17,000 --> 00:03:18,000
+Let me just make this bigger.
+
+60
+00:03:18,000 --> 00:03:22,000
+And again, this is for the Sci 0701.
+
+61
+00:03:23,000 --> 00:03:26,000
+Now you can see that this is the table I just showed you.
+
+62
+00:03:26,000 --> 00:03:28,000
+We just went over this.
+
+63
+00:03:28,000 --> 00:03:32,000
+Uh, we also went over this, the 1990 questions, 90 minutes and so on.
+
+64
+00:03:32,000 --> 00:03:41,000
+But if we go down here, you guys see these, uh, all of these topics like general security, number
+
+65
+00:03:41,000 --> 00:03:46,000
+1.1, it goes through categories of controls, control types.
+
+66
+00:03:46,000 --> 00:03:50,000
+1.2, you got to know what CIA is, a confidentiality, integrity and availability.
+
+67
+00:03:50,000 --> 00:03:52,000
+You have to know what zero trust is.
+
+68
+00:03:52,000 --> 00:03:54,000
+If I go down it goes into more and more.
+
+69
+00:03:54,000 --> 00:03:58,000
+Now this document is very, very large.
+
+70
+00:03:58,000 --> 00:04:01,000
+Um, and you can see that it covers quite a lot of topics.
+
+71
+00:04:01,000 --> 00:04:04,000
+This is why this course is incredibly long.
+
+72
+00:04:05,000 --> 00:04:08,000
+And you can see it's a lot for me to go over.
+
+73
+00:04:08,000 --> 00:04:11,000
+Every one of these topics will take a very, very long time.
+
+74
+00:04:11,000 --> 00:04:15,000
+Now, at the bottom of it, I do want to point out this section.
+
+75
+00:04:16,000 --> 00:04:19,000
+You see this section here that comes with acronyms.
+
+76
+00:04:19,000 --> 00:04:22,000
+You guys see that all of these acronyms.
+
+77
+00:04:23,000 --> 00:04:27,000
+Now throughout the course I will be covering these acronyms.
+
+78
+00:04:28,000 --> 00:04:30,000
+And you can see it's quite a lot.
+
+79
+00:04:30,000 --> 00:04:32,000
+And I'm going to give you guys a quick tip here.
+
+80
+00:04:32,000 --> 00:04:34,000
+So here's a quick tip.
+
+81
+00:04:34,000 --> 00:04:41,000
+I took this exam and I was stunned to see how many acronyms was on that test.
+
+82
+00:04:41,000 --> 00:04:45,000
+I'm talking about crazy acronyms and they don't tell you the meaning of them.
+
+83
+00:04:45,000 --> 00:04:50,000
+So before you take this exam, you want to make sure you review these objectives.
+
+84
+00:04:50,000 --> 00:04:53,000
+And again you can download this or it might be attached to this video.
+
+85
+00:04:53,000 --> 00:04:54,000
+Just type.
+
+86
+00:04:54,000 --> 00:05:00,000
+If you don't know how to use Comptia's website just go to Google Type CompTIA Security+ 701 exam objectives
+
+87
+00:05:00,000 --> 00:05:01,000
+and you'll get a link to it.
+
+88
+00:05:01,000 --> 00:05:07,000
+Now these particular acronyms you need to know them before you walk into that exam room.
+
+89
+00:05:07,000 --> 00:05:09,000
+Make sure you know them.
+
+90
+00:05:09,000 --> 00:05:15,000
+The other point I want to point out about these exam objectives is that every single thing in the exam
+
+91
+00:05:15,000 --> 00:05:17,000
+comes from this objective.
+
+92
+00:05:17,000 --> 00:05:21,000
+Every single question will come from the objectives.
+
+93
+00:05:21,000 --> 00:05:22,000
+You have to remember that.
+
+94
+00:05:22,000 --> 00:05:23,000
+All right.
+
+95
+00:05:23,000 --> 00:05:29,000
+So if you know everything in this exam objectives you will be able not should you will be able to pass
+
+96
+00:05:29,000 --> 00:05:30,000
+the exam.
+
+97
+00:05:30,000 --> 00:05:33,000
+But you're saying well how well do I need to know it?
+
+98
+00:05:33,000 --> 00:05:38,000
+Well, the good thing is in Security+ you don't need to be an expert at the topic.
+
+99
+00:05:38,000 --> 00:05:40,000
+All I need you to do is be able to explain that.
+
+100
+00:05:40,000 --> 00:05:42,000
+Be able to tell me what that is.
+
+101
+00:05:42,000 --> 00:05:44,000
+I don't need you to go configure a firewall.
+
+102
+00:05:44,000 --> 00:05:46,000
+I just need you to tell me what does a firewall do?
+
+103
+00:05:46,000 --> 00:05:48,000
+I don't need you to tell me.
+
+104
+00:05:49,000 --> 00:05:49,000
+I'm sorry.
+
+105
+00:05:49,000 --> 00:05:54,000
+I don't need you to, uh, set up a different kinds of IDs systems.
+
+106
+00:05:54,000 --> 00:05:55,000
+I just need you to tell me.
+
+107
+00:05:55,000 --> 00:05:57,000
+Hey, how does those systems get updated?
+
+108
+00:05:57,000 --> 00:05:59,000
+What's the point of that?
+
+109
+00:05:59,000 --> 00:06:00,000
+What's the point of DLP?
+
+110
+00:06:00,000 --> 00:06:01,000
+Do you know the meaning of that?
+
+111
+00:06:01,000 --> 00:06:02,000
+Do you even know the purpose it serves?
+
+112
+00:06:02,000 --> 00:06:06,000
+That's what you need to know for this particular exam.
+
+113
+00:06:06,000 --> 00:06:10,000
+Now make sure once again, I can't emphasize this enough.
+
+114
+00:06:10,000 --> 00:06:13,000
+Know your acronyms to pass your exam.
+

01 - Introduction/005 30-Day-study-Plan.pdf

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d66e4361263e47f2f1599f5c079ffe5e794985c72b7ba944856ac205db669b9c
+size 201165

01 - Introduction/005 Course Objectives, Notes and Cram Guide Download.html

@@ -0,0 +1,69 @@
+<!DOCTYPE html>
+<html lang="en">
+    <head>
+        <meta charset="UTF-8" />
+        <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+        <title>Course Objectives, Notes and Cram Guide Download</title>
+
+        <style>
+            * {
+                box-sizing: border-box;
+                margin: 0;
+                padding: 0;
+            }
+            body {
+                font-family: var(--font-stack-text);
+                font-weight: 400;
+                line-height: 1.4;
+                font-size: 1.6rem;
+                color: #2d2f31;
+            }
+            .container {
+                position: relative;
+                height: 100%;
+                overflow-y: auto;
+            }
+            .content {
+                padding: 3.2rem 4.8rem;
+                word-break: break-word;
+                max-width: 69.6rem;
+                margin: 0 auto;
+            }
+            .heading {
+                margin-bottom: 24px;
+                font-family: -apple-system, BlinkMacSystemFont, Roboto, "Segoe UI", Helvetica, Arial, sans-serif,
+                    "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";
+                font-weight: 700;
+                line-height: 1.2;
+                letter-spacing: 0;
+                font-size: 32px;
+                max-width: 36em;
+            }
+            .article-asset-container {
+                padding: 2.4rem;
+            }
+            .article-asset-container p {
+                font-size: 19px;
+            }
+            code {
+                background-color: #fff;
+                border: 1px solid #d1d7dc;
+                color: #b4690e;
+                font-size: 80%;
+                padding: 0.2rem 0.4rem;
+                font-family: sfmono-regular, Consolas, liberation mono, Menlo, Courier, monospace;
+            }
+            p {
+                font-weight: 400;
+            }
+        </style>
+    </head>
+    <body>
+        <div class="container">
+            <div class="content">
+                <div class="heading">Course Objectives, Notes and Cram Guide Download</div>
+                <div class="article-asset-container"><p>Please download all attachment.</p><p>Passing your exam requires doing a lot of practice exams. Get my 6 full-length mock exam course here on Udemy to practice your knowledge gain in this class. If you can score a minimum of 80% on all of the mock exams you will ace your exam. Here is the link:</p><p><a href="https://www.udemy.com/course/securitypluspracticeexams/" rel="noopener noreferrer" target="_blank">https://www.udemy.com/course/securitypluspracticeexams/</a></p><p><br></p><p>-AR</p></div>
+            </div>
+        </div>
+    </body>
+</html>

01 - Introduction/005 Course-Notes.pdf

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:1d34db2b70c0ea7381dd5d3b094c82efe43f684a395b058e3a442f18ce509f64
+size 14673478

01 - Introduction/005 Security-Last-Minute-Cram-Guide.pdf

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:fa966c6b9f54507b6094a771990edabf4c210aad69c3f910b984a9a3e9a12da9
+size 934774

01 - Introduction/005 comptia-security-sy0-701-exam-objectives-5-0.pdf

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:64e5a75df0e6105c724990476b678cf63533d241261538f53d99d2cc73690eba
+size 191074

02 - Lesson 1 IT Security Fundamentals/001 Introduction IT Security Fundamentals OB 1.2.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:fca859ed882120f6c1ab557a39e5bbe6a288a5e5ac35a4de44eae4728f3e32e4
+size 17971296

02 - Lesson 1 IT Security Fundamentals/001 Introduction IT Security Fundamentals OB 1.2_en.srt

@@ -0,0 +1,44 @@
+1
+00:00:00,000 --> 00:00:04,000
+Welcome to the first section of the course IT Security Fundamentals.
+
+2
+00:00:04,000 --> 00:00:09,000
+Now I want you guys to pay really careful attention in this particular section.
+
+3
+00:00:09,000 --> 00:00:15,000
+You see in this section I'm going to be reviewing some concepts such as CIA and triple A that you're
+
+4
+00:00:15,000 --> 00:00:17,000
+going to need for the entire rest of the course.
+
+5
+00:00:17,000 --> 00:00:23,000
+Terms such as confidentiality, integrity, availability, authentication, authorizations are terms
+
+6
+00:00:23,000 --> 00:00:28,000
+that we're going to use throughout the entire class to cover all the other lessons.
+
+7
+00:00:28,000 --> 00:00:30,000
+This section gives you the foundation.
+
+8
+00:00:30,000 --> 00:00:33,000
+You're going to need to understand the rest of the course.
+
+9
+00:00:33,000 --> 00:00:39,000
+So my recommendation is to maybe watch this section maybe two times, or at least understand every part
+
+10
+00:00:39,000 --> 00:00:41,000
+of it so you can be successful in the rest of the class.
+
+11
+00:00:41,000 --> 00:00:43,000
+So with that in mind, let's get started.
+

02 - Lesson 1 IT Security Fundamentals/002 CIA Triad OB 1.2.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:6172a91d2913d73fec34b2d2bc2e567dc80d574bf722b9a0982f50e3aa4b2bb7
+size 90102008

02 - Lesson 1 IT Security Fundamentals/002 CIA Triad OB 1.2_en.srt

@@ -0,0 +1,136 @@
+1
+00:00:00,000 --> 00:00:01,000
+When you think of it.
+
+2
+00:00:01,000 --> 00:00:03,000
+Security, what comes to mind?
+
+3
+00:00:03,000 --> 00:00:04,000
+You know what comes to my mind?
+
+4
+00:00:04,000 --> 00:00:07,000
+Protecting my secret information.
+
+5
+00:00:07,000 --> 00:00:08,000
+Yeah, I have a lot of secret information.
+
+6
+00:00:08,000 --> 00:00:09,000
+And so do you.
+
+7
+00:00:09,000 --> 00:00:16,000
+Credit card information, health care information, passwords to specific website products I buy, and
+
+8
+00:00:16,000 --> 00:00:17,000
+so on and so on.
+
+9
+00:00:17,000 --> 00:00:20,000
+All of this private data that I need to keep secret.
+
+10
+00:00:20,000 --> 00:00:25,000
+You see, protecting your private information from eyes that don't need to see it is a concept we call
+
+11
+00:00:25,000 --> 00:00:26,000
+confidentiality.
+
+12
+00:00:26,000 --> 00:00:30,000
+But confidentiality is only one of the three main goals of IT.
+
+13
+00:00:30,000 --> 00:00:31,000
+Security.
+
+14
+00:00:31,000 --> 00:00:36,000
+You see it security revolves around three main concepts.
+
+15
+00:00:36,000 --> 00:00:39,000
+And that concept is right here.
+
+16
+00:00:39,000 --> 00:00:41,000
+This is called the CIA triad.
+
+17
+00:00:41,000 --> 00:00:45,000
+The CIA triad tells us that the word CIA is just an acronym.
+
+18
+00:00:45,000 --> 00:00:50,000
+It's not actually a word that tells us the three main goals of it security.
+
+19
+00:00:50,000 --> 00:00:52,000
+That's going to be confidentiality.
+
+20
+00:00:52,000 --> 00:00:54,000
+We just mentioned integrity.
+
+21
+00:00:54,000 --> 00:00:59,000
+This is ensuring that, hey, unauthorized people don't edit our information or change it.
+
+22
+00:00:59,000 --> 00:01:01,000
+And then of course we want data to be available.
+
+23
+00:01:01,000 --> 00:01:02,000
+Availability.
+
+24
+00:01:02,000 --> 00:01:09,000
+You see all that we're going to be studying throughout this entire course, all your ways to keep your
+
+25
+00:01:09,000 --> 00:01:16,000
+data secure and to make them available and to keep them from not being altered, such as firewalls and
+
+26
+00:01:16,000 --> 00:01:22,000
+encryption, intrusion detection system, malware protection, and all the great things that we're going
+
+27
+00:01:22,000 --> 00:01:28,000
+to be learning to secure our networks, secure our data, secure people is all about revolving against
+
+28
+00:01:28,000 --> 00:01:30,000
+these three concepts here.
+
+29
+00:01:30,000 --> 00:01:35,000
+So in the next series of videos, let's get more in depth into these particular three things.
+
+30
+00:01:35,000 --> 00:01:39,000
+Because on your exam, I want you guys to know this on your exam.
+
+31
+00:01:39,000 --> 00:01:43,000
+Sometimes they may just say CIA triad, or they might just say CIA.
+
+32
+00:01:43,000 --> 00:01:47,000
+And you want to make sure, you know, it's not the Central Intelligence Agency, but it's actually
+
+33
+00:01:47,000 --> 00:01:50,000
+confidentiality, integrity and availability.
+
+34
+00:01:50,000 --> 00:01:53,000
+So let's keep going to learn more about these particular terms.
+

02 - Lesson 1 IT Security Fundamentals/003 Confidentiality OB 1.2.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:562120d0a9cd657c905f68f5b128491e05b8399bbeec87ad67c408d63fcae534
+size 112277736

02 - Lesson 1 IT Security Fundamentals/003 Confidentiality OB 1.2_en.srt

@@ -0,0 +1,296 @@
+1
+00:00:00,000 --> 00:00:05,000
+When 99% of people think about it security, they're thinking about confidentiality.
+
+2
+00:00:05,000 --> 00:00:09,000
+You see, confidentiality is about keeping secret data secret.
+
+3
+00:00:09,000 --> 00:00:17,000
+It's to ensure that only authorized individuals or systems or entities has access to the right data,
+
+4
+00:00:17,000 --> 00:00:20,000
+and it keeps away unauthorized folks.
+
+5
+00:00:20,000 --> 00:00:24,000
+So confidentiality is one of the core tenets of IT security.
+
+6
+00:00:24,000 --> 00:00:33,000
+In fact, many of the controls, whether it's a firewall, an IDs system, antivirus software, a security
+
+7
+00:00:33,000 --> 00:00:40,000
+guard badge, access to get into a building, a lot of these controls that we're going to be applying,
+
+8
+00:00:40,000 --> 00:00:44,000
+we're going to be doing it to keeping our secret data secret.
+
+9
+00:00:44,000 --> 00:00:48,000
+And only only authorized individuals should have access to it.
+
+10
+00:00:48,000 --> 00:00:51,000
+Let's take a look here at the definition for confidentiality.
+
+11
+00:00:51,000 --> 00:00:58,000
+So refers to the refers to the measures taken to ensure that sensitive information is not disclosed
+
+12
+00:00:58,000 --> 00:01:01,000
+to unauthorized individuals, entities or processes.
+
+13
+00:01:02,000 --> 00:01:07,000
+It involves preserving, in other words, keeping authorized restrictions.
+
+14
+00:01:07,000 --> 00:01:11,000
+So we have to place restrictions on our information.
+
+15
+00:01:11,000 --> 00:01:12,000
+Well, what are those restrictions?
+
+16
+00:01:12,000 --> 00:01:14,000
+Well, I have some of them listed here.
+
+17
+00:01:14,000 --> 00:01:15,000
+We'll go through those in a little while.
+
+18
+00:01:16,000 --> 00:01:20,000
+It involves preserving authorized restrictions on the information.
+
+19
+00:01:20,000 --> 00:01:27,000
+Access disclosure, and we want to make sure that we keep our personal privacy and proprietary information
+
+20
+00:01:27,000 --> 00:01:27,000
+secure.
+
+21
+00:01:27,000 --> 00:01:30,000
+Now, how do we do this in the world of it?
+
+22
+00:01:30,000 --> 00:01:34,000
+How are we going to keep our secret data secret?
+
+23
+00:01:34,000 --> 00:01:35,000
+Here are a few ways.
+
+24
+00:01:35,000 --> 00:01:37,000
+These are not the only ways, but there are a few.
+
+25
+00:01:37,000 --> 00:01:39,000
+That's pretty pretty popular.
+
+26
+00:01:39,000 --> 00:01:41,000
+The first thing up we'll talk about is access control.
+
+27
+00:01:41,000 --> 00:01:43,000
+What exactly is that?
+
+28
+00:01:43,000 --> 00:01:48,000
+This is a firm you're going to hear about throughout this entire course, or any IT security course.
+
+29
+00:01:48,000 --> 00:01:49,000
+You're going to take about that.
+
+30
+00:01:49,000 --> 00:01:50,000
+You're going to be taken.
+
+31
+00:01:50,000 --> 00:01:54,000
+So in the world of computing, there's two things.
+
+32
+00:01:54,000 --> 00:01:57,000
+Something called a subject and an object.
+
+33
+00:01:57,000 --> 00:01:59,000
+Subjects wants to access objects.
+
+34
+00:01:59,000 --> 00:02:01,000
+Who's a subject.
+
+35
+00:02:01,000 --> 00:02:06,000
+You're the subject I'm the subject I want to use this computer to make this video.
+
+36
+00:02:07,000 --> 00:02:08,000
+So there's the subject.
+
+37
+00:02:08,000 --> 00:02:12,000
+The object is what you want to is is what you want to access.
+
+38
+00:02:12,000 --> 00:02:16,000
+Maybe a file or a folder, maybe a particular system that you want to access.
+
+39
+00:02:16,000 --> 00:02:22,000
+How do we control subjects access and objects with access control?
+
+40
+00:02:22,000 --> 00:02:27,000
+Access controls things such as a password is a type of an access control.
+
+41
+00:02:27,000 --> 00:02:27,000
+Right.
+
+42
+00:02:27,000 --> 00:02:31,000
+Because what the password does is that it controls your access to that machine.
+
+43
+00:02:31,000 --> 00:02:35,000
+If you know the password, you can get into the machine, don't know the password, you can't access
+
+44
+00:02:35,000 --> 00:02:36,000
+it.
+
+45
+00:02:36,000 --> 00:02:42,000
+So access control, such as a password or some kind of biometric will stop you from accessing a particular
+
+46
+00:02:42,000 --> 00:02:43,000
+system.
+
+47
+00:02:43,000 --> 00:02:47,000
+In other words, if you don't have authorization, you can't see the data on there preserving confidentiality.
+
+48
+00:02:48,000 --> 00:02:53,000
+Another thing here that we have is going to be that falls in here that you should be familiar with is
+
+49
+00:02:53,000 --> 00:02:56,000
+something called an ACL, an access control list.
+
+50
+00:02:56,000 --> 00:03:01,000
+If you work in an organization today and you try to access a file, maybe, or a folder, you double
+
+51
+00:03:01,000 --> 00:03:04,000
+click on it and it says boom, access denied.
+
+52
+00:03:04,000 --> 00:03:05,000
+That's an access control list.
+
+53
+00:03:05,000 --> 00:03:10,000
+Later on in the course, I'm going to show you what access control list looks like on files and folder
+
+54
+00:03:10,000 --> 00:03:13,000
+here on windows and of course on your different routers and firewalls.
+
+55
+00:03:14,000 --> 00:03:16,000
+Now encryption.
+
+56
+00:03:16,000 --> 00:03:20,000
+This is something that plays a huge part of our life.
+
+57
+00:03:20,000 --> 00:03:25,000
+When you buy on Amazon, you buy the latest gadget, you put your credit card information in, you put
+
+58
+00:03:25,000 --> 00:03:28,000
+your address, and Amazon ships that product.
+
+59
+00:03:28,000 --> 00:03:32,000
+Well, when you put your credit card information in, you are sitting at your computer.
+
+60
+00:03:32,000 --> 00:03:35,000
+So your credit card information went across the internet to Amazon.
+
+61
+00:03:35,000 --> 00:03:39,000
+Hopefully nobody saw that information from your house to the Amazon web server.
+
+62
+00:03:39,000 --> 00:03:45,000
+Well, they did see the information, but what they saw was an encrypted session.
+
+63
+00:03:45,000 --> 00:03:50,000
+And because of encryption, if they when they read it, they're not going to get anything out of it
+
+64
+00:03:50,000 --> 00:03:52,000
+because the data is fully encrypted.
+
+65
+00:03:52,000 --> 00:03:59,000
+So encryption is an amazing way to ensure that only authorized party can read the information.
+
+66
+00:03:59,000 --> 00:04:05,000
+So secure communication combined with encryption, we're going to use protocols or security protocols
+
+67
+00:04:05,000 --> 00:04:11,000
+such as SSL or TLS, basically the same thing in order to keep our data secure.
+
+68
+00:04:11,000 --> 00:04:18,000
+So these are some technical ways here that we're going to ensure confidentiality by using things such
+
+69
+00:04:18,000 --> 00:04:22,000
+as encryption, uh, access control.
+
+70
+00:04:22,000 --> 00:04:26,000
+And there are a bunch of physical ways to we'll get into those later on okay.
+
+71
+00:04:26,000 --> 00:04:28,000
+So just remember something about confidentiality.
+
+72
+00:04:28,000 --> 00:04:34,000
+It's all about keeping secret information secret and how to and how do we do that with a wide variety
+
+73
+00:04:34,000 --> 00:04:39,000
+of technical things and physical things that we're going to be using, that you're going to be learning
+
+74
+00:04:39,000 --> 00:04:42,000
+a lot more in the course to keep your secret data secret.
+

02 - Lesson 1 IT Security Fundamentals/004 Integrity OB 1.2.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:49aeced5d62772206c3adc5c4d98bb3a2d6baa5a1ba8fbafe0fdfb8bb50b9eb4
+size 68409165

02 - Lesson 1 IT Security Fundamentals/004 Integrity OB 1.2_en.srt

@@ -0,0 +1,192 @@
+1
+00:00:00,000 --> 00:00:06,000
+One of the most important concepts in IT security is to ensure that there is only authorized changes
+
+2
+00:00:06,000 --> 00:00:11,000
+to information, basically, accuracy of information you see on systems.
+
+3
+00:00:11,000 --> 00:00:16,000
+Today, you're going to have tons and tons of data from people, Social Security numbers to secret memos
+
+4
+00:00:16,000 --> 00:00:18,000
+or business plans on a system.
+
+5
+00:00:18,000 --> 00:00:23,000
+We want to ensure that only authorized individuals can edit that information.
+
+6
+00:00:24,000 --> 00:00:29,000
+You see, viewing the information and seeing it, that's confidentiality, but changes and manipulation
+
+7
+00:00:29,000 --> 00:00:29,000
+of the data.
+
+8
+00:00:29,000 --> 00:00:32,000
+This is known as integrity.
+
+9
+00:00:32,000 --> 00:00:37,000
+So integrity is about protecting data from unauthorized changes to ensure it's reliable and correct.
+
+10
+00:00:37,000 --> 00:00:42,000
+That means that, hey, we want to stop unauthorized people from changing and editing information,
+
+11
+00:00:42,000 --> 00:00:49,000
+but we also want to make sure that we give authorized people the way or the method to change the data.
+
+12
+00:00:49,000 --> 00:00:55,000
+Now this really comes back to one core thing in integrity.
+
+13
+00:00:55,000 --> 00:00:59,000
+When you think integrity for your exam, I want you to think data accuracy.
+
+14
+00:00:59,000 --> 00:01:04,000
+How do we ensure that the data that you're getting that you're receiving is accurate?
+
+15
+00:01:04,000 --> 00:01:06,000
+Let me give you an example.
+
+16
+00:01:06,000 --> 00:01:08,000
+Let's say the CEO writes a memo.
+
+17
+00:01:08,000 --> 00:01:11,000
+He gives it to the to his assistant.
+
+18
+00:01:11,000 --> 00:01:13,000
+That memo is then distributed to the company.
+
+19
+00:01:13,000 --> 00:01:17,000
+But the upcoming goals of the business, let's say it has some secret business plans in there that only
+
+20
+00:01:17,000 --> 00:01:20,000
+companies I should see when you receive it.
+
+21
+00:01:20,000 --> 00:01:22,000
+And you're a much lower down the ladder than the CEO here.
+
+22
+00:01:22,000 --> 00:01:26,000
+So it had to go through many eyes and many hands.
+
+23
+00:01:26,000 --> 00:01:32,000
+How are you so sure that what's in this memo actually came from the CEO?
+
+24
+00:01:32,000 --> 00:01:34,000
+How do you ensure that it was never changed or modified?
+
+25
+00:01:35,000 --> 00:01:36,000
+This is the concept of integrity.
+
+26
+00:01:36,000 --> 00:01:39,000
+How do you sure that the data that you're receiving is accurate?
+
+27
+00:01:39,000 --> 00:01:40,000
+Is it consistent.
+
+28
+00:01:40,000 --> 00:01:45,000
+So consistency with what the CEO wrote and how can you trust it?
+
+29
+00:01:45,000 --> 00:01:50,000
+Well, one of the ways of doing this in the world of it that we're going to discuss later in this course
+
+30
+00:01:50,000 --> 00:01:52,000
+is called a digital signature.
+
+31
+00:01:52,000 --> 00:01:59,000
+If the CEO had used something such as a digital signature, you'll note that the data was never modified
+
+32
+00:01:59,000 --> 00:02:01,000
+and it actually came from him.
+
+33
+00:02:01,000 --> 00:02:03,000
+This helps to form integrity.
+
+34
+00:02:03,000 --> 00:02:09,000
+Another thing that we can use to stop people from changing or manipulating data that they shouldn't
+
+35
+00:02:09,000 --> 00:02:10,000
+be is access controls.
+
+36
+00:02:10,000 --> 00:02:16,000
+So access controls is basically controlling the access between subjects and objects.
+
+37
+00:02:16,000 --> 00:02:21,000
+So I can go in there in my computer and say, Mary, she can write to the data.
+
+38
+00:02:21,000 --> 00:02:26,000
+She has a, she has the, the, the permission to write to the information.
+
+39
+00:02:26,000 --> 00:02:30,000
+But Bob, he doesn't have access to write to the data.
+
+40
+00:02:30,000 --> 00:02:36,000
+He can see it though, so they could both see it, but only one person can write to it this way.
+
+41
+00:02:36,000 --> 00:02:40,000
+Mary is an authorized, authorized individual for integrity.
+
+42
+00:02:40,000 --> 00:02:41,000
+Bob is not.
+
+43
+00:02:41,000 --> 00:02:43,000
+So don't get the concepts confused.
+
+44
+00:02:43,000 --> 00:02:46,000
+There was two concepts so far confidentiality and integrity.
+
+45
+00:02:46,000 --> 00:02:49,000
+Confidentiality allows you to view the information.
+
+46
+00:02:49,000 --> 00:02:53,000
+Integrity allows you to manipulate and change the information.
+
+47
+00:02:53,000 --> 00:02:54,000
+So keep that in mind.
+
+48
+00:02:54,000 --> 00:02:57,000
+Confidentiality view it and integrity is about changing it.
+

02 - Lesson 1 IT Security Fundamentals/005 Availability OB 1.2.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c729741a4cbc53b331814879bd94ceb1083176a0b13ac387a2e05591fe3ba7ca
+size 154740853

02 - Lesson 1 IT Security Fundamentals/005 Availability OB 1.2_en.srt

@@ -0,0 +1,232 @@
+1
+00:00:00,000 --> 00:00:03,000
+One concept that's missed a lot when talking about it.
+
+2
+00:00:03,000 --> 00:00:05,000
+Security is availability.
+
+3
+00:00:05,000 --> 00:00:09,000
+You see, when most people think it security, they're thinking confidentiality.
+
+4
+00:00:09,000 --> 00:00:11,000
+And some may even think of about about availability.
+
+5
+00:00:11,000 --> 00:00:15,000
+But it doesn't matter how secure your information is.
+
+6
+00:00:15,000 --> 00:00:20,000
+For example, you could secure your information by writing it on a piece of paper.
+
+7
+00:00:20,000 --> 00:00:22,000
+Take it off computer, put in a vault, put it inside the earth.
+
+8
+00:00:23,000 --> 00:00:27,000
+It's going to be super secure, but then not much people can access it.
+
+9
+00:00:27,000 --> 00:00:32,000
+It's not very useful if your security is so good that no one can use it when they actually need to use
+
+10
+00:00:32,000 --> 00:00:35,000
+it to make some money or to grow your organization.
+
+11
+00:00:35,000 --> 00:00:42,000
+So visibility is really this concept that ensures that data systems and services are accessible to authorized
+
+12
+00:00:42,000 --> 00:00:44,000
+users when needed.
+
+13
+00:00:44,000 --> 00:00:51,000
+Now we want to make sure to understand this concept, because there are a lot of attacks against networks
+
+14
+00:00:51,000 --> 00:00:55,000
+that can bring down an entire system, and then it's not very useful.
+
+15
+00:00:55,000 --> 00:00:58,000
+For example, what if there is a DDoS attack?
+
+16
+00:00:58,000 --> 00:01:01,000
+The distributed denial of service that takes out the Amazon website?
+
+17
+00:01:01,000 --> 00:01:03,000
+If you don't know what this is, don't worry, cover it.
+
+18
+00:01:04,000 --> 00:01:04,000
+Cover this more later.
+
+19
+00:01:04,000 --> 00:01:09,000
+Just know it's a type of attack that sends a lot of traffic to a website and takes it offline for malicious
+
+20
+00:01:09,000 --> 00:01:10,000
+reasons.
+
+21
+00:01:10,000 --> 00:01:16,000
+Now Amazon can't make money, or maybe your organization can't make money because the website is offline.
+
+22
+00:01:16,000 --> 00:01:25,000
+We want to protect our systems from unauthorized access, confidentiality, unauthorized changes, integrity,
+
+23
+00:01:25,000 --> 00:01:29,000
+and we want to make sure that it's available when needed.
+
+24
+00:01:29,000 --> 00:01:30,000
+How are we going to do that?
+
+25
+00:01:30,000 --> 00:01:32,000
+Well, here are a couple of ways.
+
+26
+00:01:32,000 --> 00:01:37,000
+Number one, we could build systems that can take a hit and keep on going.
+
+27
+00:01:37,000 --> 00:01:37,000
+All right.
+
+28
+00:01:37,000 --> 00:01:40,000
+They can continuously operate even if something goes wrong.
+
+29
+00:01:40,000 --> 00:01:44,000
+For example, you may have a server that has a dual power supply.
+
+30
+00:01:44,000 --> 00:01:47,000
+One of the first things that fails on a computer is the power supply.
+
+31
+00:01:47,000 --> 00:01:49,000
+So put two power supply.
+
+32
+00:01:49,000 --> 00:01:51,000
+Another common thing that fails is a hard drive.
+
+33
+00:01:51,000 --> 00:01:52,000
+Have a Raid system.
+
+34
+00:01:52,000 --> 00:01:54,000
+If you don't know what those are, talk about those later.
+
+35
+00:01:55,000 --> 00:01:57,000
+Another thing is you want to make sure you have backup of your information.
+
+36
+00:01:57,000 --> 00:02:01,000
+So if the system ever dies, you can always restore a backup.
+
+37
+00:02:02,000 --> 00:02:06,000
+If there's no backup, there's no restoration, and there's no you're going to lose a ton of data.
+
+38
+00:02:06,000 --> 00:02:08,000
+But if you have a backup, there's going to be no data loss.
+
+39
+00:02:08,000 --> 00:02:11,000
+So availability is a really important concept.
+
+40
+00:02:11,000 --> 00:02:15,000
+And there are many things that we're going to talk about later in the course that we're going to be
+
+41
+00:02:15,000 --> 00:02:18,000
+doing in order to maintain high availability.
+
+42
+00:02:18,000 --> 00:02:19,000
+All right.
+
+43
+00:02:19,000 --> 00:02:21,000
+So remember something.
+
+44
+00:02:21,000 --> 00:02:25,000
+The CIA triad confidentiality keep secret data secret.
+
+45
+00:02:25,000 --> 00:02:31,000
+Only authorized individuals can access the data, prevents unauthorized access integrity.
+
+46
+00:02:31,000 --> 00:02:38,000
+Only authorized individuals can edit the information prevents unauthorized changes or manipulation of
+
+47
+00:02:38,000 --> 00:02:39,000
+data availability.
+
+48
+00:02:39,000 --> 00:02:46,000
+Keeping systems online ensure there's no unauthorized downtime of information, such as the system failure
+
+49
+00:02:46,000 --> 00:02:48,000
+or data corruption.
+
+50
+00:02:48,000 --> 00:02:52,000
+Remember, these are going to be the three main concepts of IT security.
+
+51
+00:02:52,000 --> 00:02:56,000
+And if you're wondering, well, how is this going to fit in with the rest of the course, are all that
+
+52
+00:02:56,000 --> 00:02:57,000
+I'm about to learn?
+
+53
+00:02:58,000 --> 00:03:03,000
+Because believe this or not, every single thing that you're going to be learning.
+
+54
+00:03:03,000 --> 00:03:06,000
+For the next many, many, many hours.
+
+55
+00:03:06,000 --> 00:03:09,000
+It's going to be about protecting these three things.
+
+56
+00:03:09,000 --> 00:03:17,000
+It's going to be about how do we, uh, prevent unauthorized access, manipulation and high uptime on
+
+57
+00:03:17,000 --> 00:03:18,000
+availability?
+
+58
+00:03:18,000 --> 00:03:21,000
+This is the core concept of IT security.
+

02 - Lesson 1 IT Security Fundamentals/006 DAD Triade OB 1.2.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d4b5553ab5e0906328439265fd51cfeaea5389e19db61b4ca3016e20daf1e4cf
+size 48749088

02 - Lesson 1 IT Security Fundamentals/006 DAD Triade OB 1.2_en.srt

@@ -0,0 +1,136 @@
+1
+00:00:00,000 --> 00:00:02,000
+I generally consider myself a good person.
+
+2
+00:00:02,000 --> 00:00:08,000
+I generally work with organizations to prevent unauthorized access, confidentiality, unauthorized
+
+3
+00:00:08,000 --> 00:00:14,000
+changes, integrity, and ensuring uptimes high uptimes under system availability.
+
+4
+00:00:14,000 --> 00:00:17,000
+But there are those of us or bad people.
+
+5
+00:00:17,000 --> 00:00:20,000
+Not a lot, but there are some bad people that we work against.
+
+6
+00:00:20,000 --> 00:00:27,000
+Every single thing in this course that we're going to learn about is to preserve the CIA and to stop
+
+7
+00:00:27,000 --> 00:00:30,000
+the D&D or the D&D triad.
+
+8
+00:00:30,000 --> 00:00:32,000
+You see, there is the opposite of the CIA.
+
+9
+00:00:32,000 --> 00:00:36,000
+So if we're working to preserve CIA, then what are we working against this?
+
+10
+00:00:36,000 --> 00:00:39,000
+If you are a bad person, this is what you do.
+
+11
+00:00:39,000 --> 00:00:41,000
+If you're a good person, you do CIA.
+
+12
+00:00:41,000 --> 00:00:42,000
+So what is this?
+
+13
+00:00:42,000 --> 00:00:43,000
+Well, this is the opposite.
+
+14
+00:00:43,000 --> 00:00:47,000
+This tells us so we have confidentiality, integrity and availability.
+
+15
+00:00:47,000 --> 00:00:51,000
+The opposite of those are going to be disclosure alteration and denial.
+
+16
+00:00:52,000 --> 00:00:59,000
+For example the opposite of confidentiality which is going to be, uh, preventing unauthorized access
+
+17
+00:00:59,000 --> 00:01:05,000
+is going to be allowing this unauthorized access or exposure of data, the opposite of integrity, which
+
+18
+00:01:05,000 --> 00:01:11,000
+is going to be something such as unauthorized, preventing unauthorized manipulation or changes.
+
+19
+00:01:11,000 --> 00:01:13,000
+This is going to allow authorized changes.
+
+20
+00:01:13,000 --> 00:01:17,000
+Alteration and availability is ensuring that you always have access.
+
+21
+00:01:17,000 --> 00:01:21,000
+How about if I deny you access to this actual information.
+
+22
+00:01:21,000 --> 00:01:26,000
+So this gives you just a quick a quick summary of what I just stated.
+
+23
+00:01:26,000 --> 00:01:27,000
+So what exactly is it.
+
+24
+00:01:27,000 --> 00:01:28,000
+Disclosure.
+
+25
+00:01:28,000 --> 00:01:30,000
+This goes against confidentiality.
+
+26
+00:01:30,000 --> 00:01:32,000
+This allows unauthorized access alteration.
+
+27
+00:01:32,000 --> 00:01:38,000
+This is against integrity unauthorized changes and denial is when they take your system offline.
+
+28
+00:01:38,000 --> 00:01:43,000
+By the way, I want to mention that sometimes depending on the book you read, denial may have they
+
+29
+00:01:43,000 --> 00:01:47,000
+may replace denial with the word destruction because that will also take data offline.
+
+30
+00:01:47,000 --> 00:01:53,000
+So sometimes you might see that, okay, just be familiar that there is such a thing as the D&D triad.
+
+31
+00:01:53,000 --> 00:01:56,000
+You may see it on your exam as just D&D triad.
+
+32
+00:01:56,000 --> 00:01:58,000
+Just remember that is where the bad guy works.
+
+33
+00:01:58,000 --> 00:02:02,000
+That's everything that we're going to be doing in this course.
+
+34
+00:02:02,000 --> 00:02:06,000
+That we're going to be working to stop the D&D triad.
+

02 - Lesson 1 IT Security Fundamentals/007 Zero Trust OB 1.2.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:1a77d9929feab6395cbd63db5ee5bbca15560ce0d80dad8bdf24343237e7d10e
+size 320464412

02 - Lesson 1 IT Security Fundamentals/007 Zero Trust OB 1.2_en.srt

@@ -0,0 +1,616 @@
+1
+00:00:00,000 --> 00:00:05,000
+If you make a visit to Tia offices in Midtown Manhattan, and you come to pay us a visit, and you want
+
+2
+00:00:05,000 --> 00:00:10,000
+to gain access to some of our network resources, such as maybe internet or some files and folders on
+
+3
+00:00:10,000 --> 00:00:13,000
+our corporate systems or admin network.
+
+4
+00:00:13,000 --> 00:00:15,000
+You're going to have to go through a device like this.
+
+5
+00:00:15,000 --> 00:00:21,000
+Now, this is a sonic wall, and this sonic wall basically is a firewall, but it does include a switch,
+
+6
+00:00:21,000 --> 00:00:22,000
+as you can see at the back.
+
+7
+00:00:22,000 --> 00:00:24,000
+And it does have an access point.
+
+8
+00:00:24,000 --> 00:00:27,000
+We're going to talk a lot more about this devices as the course.
+
+9
+00:00:27,000 --> 00:00:27,000
+Go on.
+
+10
+00:00:27,000 --> 00:00:31,000
+Let me put this down here for a minute though, because there's something I want to talk to you guys
+
+11
+00:00:31,000 --> 00:00:33,000
+about, getting access to networks.
+
+12
+00:00:33,000 --> 00:00:38,000
+You see, in today's world, if you're going to a network and you plug your computer into it, as long
+
+13
+00:00:38,000 --> 00:00:43,000
+as you're in that particular network, you're probably going to get at least an internet connection.
+
+14
+00:00:43,000 --> 00:00:48,000
+So you're going to be able to do some kind of work, and you may have access to certain files and folders.
+
+15
+00:00:48,000 --> 00:00:55,000
+So what what essentially is happening is that you're basically getting access to resources such as the
+
+16
+00:00:55,000 --> 00:01:00,000
+internet or particular files and folders, without anybody authenticating you or knowing who the hell
+
+17
+00:01:00,000 --> 00:01:01,000
+you are.
+
+18
+00:01:01,000 --> 00:01:07,000
+You see, that is the default setup, especially on networks that uses small business devices like this
+
+19
+00:01:08,000 --> 00:01:10,000
+Sonicwall that I have here.
+
+20
+00:01:10,000 --> 00:01:12,000
+What we want to do is we want to change that.
+
+21
+00:01:12,000 --> 00:01:18,000
+What we want to do is have a different mindset, a different method of managing our network.
+
+22
+00:01:18,000 --> 00:01:22,000
+And that brings me to today's lesson zero trust.
+
+23
+00:01:22,000 --> 00:01:23,000
+What exactly is this?
+
+24
+00:01:23,000 --> 00:01:29,000
+Well, it centers on the belief that organizations should not automatically trust anything inside or
+
+25
+00:01:29,000 --> 00:01:31,000
+outside of their network.
+
+26
+00:01:31,000 --> 00:01:36,000
+So, for example, if you come into my network and because you're physically standing in it, you plug
+
+27
+00:01:36,000 --> 00:01:42,000
+your device into it, you're going to gain access to something the internet, internet, certain files
+
+28
+00:01:42,000 --> 00:01:44,000
+and folders, maybe even access to printers.
+
+29
+00:01:44,000 --> 00:01:49,000
+But on a zero trust, when you come into my network and you take your computer and you plug it into
+
+30
+00:01:49,000 --> 00:01:55,000
+the port, or you connect to the access point that that's on this device, you're not going to get anything.
+
+31
+00:01:55,000 --> 00:02:00,000
+We're going to have to authenticate you, or we're going to have to trust who you are or find out who
+
+32
+00:02:00,000 --> 00:02:03,000
+are you before this device is going to give you access to the network.
+
+33
+00:02:03,000 --> 00:02:07,000
+So zero trust is they shouldn't trust anything.
+
+34
+00:02:07,000 --> 00:02:09,000
+In other words, nothing is trusted.
+
+35
+00:02:09,000 --> 00:02:11,000
+Let me ask you a question.
+
+36
+00:02:11,000 --> 00:02:17,000
+As you sit here and you watch this video, if I come to your house and I connect to your network.
+
+37
+00:02:17,000 --> 00:02:17,000
+All right.
+
+38
+00:02:17,000 --> 00:02:22,000
+So I take out my laptop and I plug it into the switcher on your network, on your router or your cable
+
+39
+00:02:22,000 --> 00:02:23,000
+modem or whatever.
+
+40
+00:02:23,000 --> 00:02:24,000
+Do I get internet access?
+
+41
+00:02:24,000 --> 00:02:26,000
+Do I get access to things in your house?
+
+42
+00:02:26,000 --> 00:02:29,000
+If the answer is yes, you don't have zero trust with zero trust.
+
+43
+00:02:29,000 --> 00:02:31,000
+When people connect, they have nothing.
+
+44
+00:02:31,000 --> 00:02:35,000
+Not even internet organizations trust no one.
+
+45
+00:02:35,000 --> 00:02:41,000
+So they instead they verify every anything and everything trying to connect to its system.
+
+46
+00:02:41,000 --> 00:02:43,000
+Now, how are they going to do that?
+
+47
+00:02:43,000 --> 00:02:47,000
+Well, they're going to do very strict identity verification.
+
+48
+00:02:47,000 --> 00:02:51,000
+That's identifying users principles of least privileges.
+
+49
+00:02:51,000 --> 00:02:55,000
+That way when people connect, they have very little privileges on a network, just what they need to
+
+50
+00:02:55,000 --> 00:02:58,000
+do, just what they need to do a particular job.
+
+51
+00:02:58,000 --> 00:03:00,000
+Multi-factor authentication can be used here.
+
+52
+00:03:00,000 --> 00:03:04,000
+And of course, in Zero Trust, you're going to want to monitor and log all traffic.
+
+53
+00:03:04,000 --> 00:03:13,000
+Now, to take this a little further, I want to go in to a particular model that was that is given to
+
+54
+00:03:13,000 --> 00:03:15,000
+us by NIST documentation.
+
+55
+00:03:15,000 --> 00:03:20,000
+So NIST documentation and particularly NIST SP 800 207.
+
+56
+00:03:20,000 --> 00:03:21,000
+This is on page nine.
+
+57
+00:03:21,000 --> 00:03:23,000
+I took this diagram from there.
+
+58
+00:03:23,000 --> 00:03:30,000
+And this diagram breaks down how we can do a zero trust model using a specific set of components.
+
+59
+00:03:30,000 --> 00:03:33,000
+Now I'm going to come back to this model here in a minute.
+
+60
+00:03:33,000 --> 00:03:35,000
+Let me cover some terms first.
+
+61
+00:03:35,000 --> 00:03:41,000
+So the first thing I want to mention is that you're going to come to understand that you have to break
+
+62
+00:03:41,000 --> 00:03:48,000
+down your network into two layers, what's called a data layer and a control layer, or what's called
+
+63
+00:03:48,000 --> 00:03:50,000
+data planes and control planes.
+
+64
+00:03:50,000 --> 00:03:54,000
+Now I want to go back and I want to look at this particular diagram that we have here.
+
+65
+00:03:56,000 --> 00:03:58,000
+Let me put on my trusty pen.
+
+66
+00:03:58,000 --> 00:03:59,000
+Here we go with my trusty pen.
+
+67
+00:03:59,000 --> 00:04:01,000
+So I want you guys to take a look at this.
+
+68
+00:04:01,000 --> 00:04:06,000
+So notice you have what's called a data plane and a control plane.
+
+69
+00:04:06,000 --> 00:04:10,000
+Now as you go through your network and you connect to the network.
+
+70
+00:04:10,000 --> 00:04:17,000
+So let's say your subjects who are subjects, subjects, um, the subjects comes out of the data plane.
+
+71
+00:04:17,000 --> 00:04:19,000
+Subjects are entities requesting access.
+
+72
+00:04:19,000 --> 00:04:23,000
+So this is like you request an access to my particular network.
+
+73
+00:04:24,000 --> 00:04:26,000
+Now you're going to go on to a system, right?
+
+74
+00:04:26,000 --> 00:04:29,000
+You're going to be logged in to a laptop.
+
+75
+00:04:29,000 --> 00:04:32,000
+You're sitting at your laptop, you're sitting at your desktop.
+
+76
+00:04:32,000 --> 00:04:33,000
+So that's going to be your system.
+
+77
+00:04:33,000 --> 00:04:36,000
+You're going to be in what's called an untrusted zone.
+
+78
+00:04:36,000 --> 00:04:41,000
+So you're the subject and the system is untrusted by default on a zero trust.
+
+79
+00:04:41,000 --> 00:04:45,000
+Remember it's called zero trust, which means you're not trusted to our system.
+
+80
+00:04:45,000 --> 00:04:49,000
+So you come in and you say, hey, can you give me access to your network?
+
+81
+00:04:49,000 --> 00:04:57,000
+Well, the request to get access to my network is going to send to send to what we call a policy enforcement
+
+82
+00:04:57,000 --> 00:04:57,000
+point.
+
+83
+00:04:57,000 --> 00:04:59,000
+Now, what exactly is a policy enforcement point?
+
+84
+00:04:59,000 --> 00:05:05,000
+What that is, what's going to be responsible for enabling, monitoring and eventually terminating connections.
+
+85
+00:05:05,000 --> 00:05:13,000
+So you notice this policy enforcement point sits between you and the resource you want.
+
+86
+00:05:13,000 --> 00:05:14,000
+Let's say this resource is a printer.
+
+87
+00:05:16,000 --> 00:05:16,000
+All right.
+
+88
+00:05:16,000 --> 00:05:18,000
+So you want to access a particular printer.
+
+89
+00:05:18,000 --> 00:05:23,000
+Well, this policy enforcement point sits between you and accessing that particular resource.
+
+90
+00:05:23,000 --> 00:05:30,000
+So at the data plane of the network what is there in that data plane is just a subject accessing the
+
+91
+00:05:30,000 --> 00:05:30,000
+resource.
+
+92
+00:05:30,000 --> 00:05:34,000
+And there's something in between them that's saying, hey, you know what, you can access this or you
+
+93
+00:05:34,000 --> 00:05:35,000
+can't.
+
+94
+00:05:36,000 --> 00:05:40,000
+Now there is something we call an implicit trust.
+
+95
+00:05:40,000 --> 00:05:48,000
+So an implicit trust is let's say you're already trusted to log into the accounting network, an implicit
+
+96
+00:05:48,000 --> 00:05:50,000
+trust because you're logged in there.
+
+97
+00:05:50,000 --> 00:05:55,000
+The company already the company will give you then access to the financial network.
+
+98
+00:05:55,000 --> 00:05:57,000
+You don't need to re-authenticate it there.
+
+99
+00:05:57,000 --> 00:06:00,000
+So this has what's called an implicit trust between zones.
+
+100
+00:06:01,000 --> 00:06:03,000
+Now control plane.
+
+101
+00:06:03,000 --> 00:06:07,000
+The control plane is where all the magic happens.
+
+102
+00:06:07,000 --> 00:06:10,000
+You see the control plane has three components.
+
+103
+00:06:10,000 --> 00:06:12,000
+What's called a policy decision point.
+
+104
+00:06:12,000 --> 00:06:14,000
+This is what the whole thing is going to be about.
+
+105
+00:06:14,000 --> 00:06:17,000
+Should we let this guy go or not?
+
+106
+00:06:17,000 --> 00:06:19,000
+You have a policy engine and a policy administrator.
+
+107
+00:06:20,000 --> 00:06:25,000
+Now, when you log into a network, there is something we call an adaptive identity.
+
+108
+00:06:25,000 --> 00:06:27,000
+Adaptive means changing, right.
+
+109
+00:06:27,000 --> 00:06:31,000
+So we are going to dynamically adjust how we identify you.
+
+110
+00:06:31,000 --> 00:06:35,000
+Maybe we're going to identify you based on an IP address along with a username.
+
+111
+00:06:35,000 --> 00:06:39,000
+Maybe we're going to identify you based on where you're located and a particular username.
+
+112
+00:06:39,000 --> 00:06:44,000
+So I know this username should always log in from the United States or somewhere else.
+
+113
+00:06:44,000 --> 00:06:50,000
+There are some things this is all going to be done using what's called a policy driven access control.
+
+114
+00:06:50,000 --> 00:06:54,000
+All the access control that we have that we're going to allow you to access.
+
+115
+00:06:54,000 --> 00:06:59,000
+This particular printer has to go through a certain policy set up generally by your network administrator.
+
+116
+00:06:59,000 --> 00:07:03,000
+Now comes the, uh, policy administrator.
+
+117
+00:07:04,000 --> 00:07:05,000
+Oops.
+
+118
+00:07:05,000 --> 00:07:07,000
+The policy administrator and the policy engine.
+
+119
+00:07:07,000 --> 00:07:13,000
+So the policy administrator this is responsible for establishing or shutting down the communication
+
+120
+00:07:13,000 --> 00:07:16,000
+path between the between you, the subject and the resource.
+
+121
+00:07:16,000 --> 00:07:22,000
+The printer and the policy engine is responsible for the decision to whether to allow you to grant access
+
+122
+00:07:22,000 --> 00:07:23,000
+or not.
+
+123
+00:07:23,000 --> 00:07:25,000
+Now, let me go back to this.
+
+124
+00:07:25,000 --> 00:07:27,000
+I want to erase.
+
+125
+00:07:28,000 --> 00:07:29,000
+And I want to put this all together.
+
+126
+00:07:29,000 --> 00:07:32,000
+I know you're confused right now because this looks complex.
+
+127
+00:07:32,000 --> 00:07:40,000
+So you log in, you and your system try to gain access to this printer.
+
+128
+00:07:41,000 --> 00:07:46,000
+So what you do is you send your request to a policy enforcement point.
+
+129
+00:07:46,000 --> 00:07:49,000
+The policy enforcement point sends it to the administrator.
+
+130
+00:07:49,000 --> 00:07:56,000
+Now the administrator is responsible for allow for allowing that, uh, communication between you and
+
+131
+00:07:56,000 --> 00:07:57,000
+the actual printer.
+
+132
+00:07:57,000 --> 00:08:02,000
+But the policy administrator is not the one making the actual decision.
+
+133
+00:08:02,000 --> 00:08:04,000
+That's going to be the policy engine.
+
+134
+00:08:04,000 --> 00:08:10,000
+The policy engine is going to say allow or deny access after verifying the system, knowing who the
+
+135
+00:08:10,000 --> 00:08:13,000
+system is generally based on some kind of policy.
+
+136
+00:08:13,000 --> 00:08:17,000
+The policy engine tells the administrator, hey, allow this guy to gain access.
+
+137
+00:08:17,000 --> 00:08:23,000
+The policy enforcement point says, okay, the policy decision point, the place at the top says, you
+
+138
+00:08:23,000 --> 00:08:23,000
+know what?
+
+139
+00:08:23,000 --> 00:08:27,000
+You can gain access and now you gain access to it.
+
+140
+00:08:27,000 --> 00:08:32,000
+So this is what a zero trust model will look like in full implementation.
+
+141
+00:08:32,000 --> 00:08:36,000
+Now there is something here we call threat scope reduction.
+
+142
+00:08:36,000 --> 00:08:38,000
+This is going to be minimizing network attack surfaces.
+
+143
+00:08:38,000 --> 00:08:41,000
+What you want to do is you know where can you enter a network.
+
+144
+00:08:41,000 --> 00:08:43,000
+How many entry points do you have in a network.
+
+145
+00:08:43,000 --> 00:08:45,000
+The less entry points into a network.
+
+146
+00:08:45,000 --> 00:08:50,000
+For example, if you have no wireless, there's a lot less vulnerabilities or or entry points into a
+
+147
+00:08:50,000 --> 00:08:51,000
+network.
+
+148
+00:08:52,000 --> 00:08:52,000
+Okay.
+
+149
+00:08:53,000 --> 00:08:54,000
+The Zero Trust.
+
+150
+00:08:54,000 --> 00:08:59,000
+I would suggest for you to review this video one more time to make sure that you understand some of
+
+151
+00:08:59,000 --> 00:09:02,000
+the terms on it, that some of these terms may or may not appear on your exam.
+
+152
+00:09:03,000 --> 00:09:10,000
+But what will appear on your exam is probably the concept of zero trust, in which case no one can access
+
+153
+00:09:10,000 --> 00:09:14,000
+anything on your network without first being authenticated and verified that they should have access
+
+154
+00:09:14,000 --> 00:09:16,000
+to those particular resources.
+

02 - Lesson 1 IT Security Fundamentals/008 Non-Repudiation OB 1.2.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:223b6716912eb7ce86f06dc01fc8a700e4ab0c347105d8269c243082c4de95db
+size 63283884

02 - Lesson 1 IT Security Fundamentals/008 Non-Repudiation OB 1.2_en.srt

@@ -0,0 +1,192 @@
+1
+00:00:00,000 --> 00:00:01,000
+In the world of security.
+
+2
+00:00:01,000 --> 00:00:07,000
+When somebody does something and we tell them, hey, you did something wrong, we want to ensure that
+
+3
+00:00:07,000 --> 00:00:09,000
+they can't say, it wasn't me.
+
+4
+00:00:09,000 --> 00:00:14,000
+We want to put so much quote unquote controls, or we want to put so much protection mechanisms.
+
+5
+00:00:14,000 --> 00:00:18,000
+They don't want to come to you and says, hey, Bob, you stole that pen off the desk.
+
+6
+00:00:18,000 --> 00:00:20,000
+And Bob is like, was it me?
+
+7
+00:00:20,000 --> 00:00:21,000
+And I'm like, well, here's the camera footage.
+
+8
+00:00:21,000 --> 00:00:22,000
+You did it.
+
+9
+00:00:22,000 --> 00:00:27,000
+I want Bob to not deny that they did something.
+
+10
+00:00:27,000 --> 00:00:29,000
+You see, there is a terme in it.
+
+11
+00:00:29,000 --> 00:00:32,000
+Security we call non-repudiation.
+
+12
+00:00:32,000 --> 00:00:39,000
+Non-repudiation is when an entity cannot deny that an event has taken place.
+
+13
+00:00:39,000 --> 00:00:41,000
+They can't repudiate that.
+
+14
+00:00:41,000 --> 00:00:46,000
+So, for example, let's say I like this tablet.
+
+15
+00:00:46,000 --> 00:00:46,000
+All right.
+
+16
+00:00:46,000 --> 00:00:47,000
+There's a camera on this wall.
+
+17
+00:00:47,000 --> 00:00:48,000
+Camera in front of me.
+
+18
+00:00:48,000 --> 00:00:51,000
+I pick up this tablet, I put it in my bag, and I run out the room.
+
+19
+00:00:51,000 --> 00:00:56,000
+All right, I steal it, and I run out of the room, and the police comes after me and the police says,
+
+20
+00:00:56,000 --> 00:00:58,000
+Andrew, you stole that tablet.
+
+21
+00:00:58,000 --> 00:01:00,000
+And I'm like, no, I didn't, right?
+
+22
+00:01:00,000 --> 00:01:01,000
+Because I'm a bad person.
+
+23
+00:01:01,000 --> 00:01:02,000
+I'm a liar, obviously.
+
+24
+00:01:02,000 --> 00:01:07,000
+And the police says, well, here's the camera footage of you stealing it.
+
+25
+00:01:08,000 --> 00:01:11,000
+And I'm going to say, oh, you're right, I did steal that.
+
+26
+00:01:11,000 --> 00:01:15,000
+I guess I forgot, so I can't deny it anymore.
+
+27
+00:01:15,000 --> 00:01:20,000
+Okay, so in the world of IT security, this is called non-repudiation.
+
+28
+00:01:20,000 --> 00:01:27,000
+So non-repudiation is that when a party in a communication cannot, cannot deny the authenticity of
+
+29
+00:01:27,000 --> 00:01:30,000
+their signature on a document or sending of a message that the originator.
+
+30
+00:01:30,000 --> 00:01:36,000
+So they can't deny that they send something, they can't deny that this didn't come from them.
+
+31
+00:01:36,000 --> 00:01:43,000
+Now, this is really important because when you receive messages from places like Amazon, right when
+
+32
+00:01:43,000 --> 00:01:48,000
+you go to a website and you receive a confirmation from Amazon that, hey, your credit card went through
+
+33
+00:01:48,000 --> 00:01:54,000
+or you go to a website, how are you so sure that's Amazon, how does your computer know that's Amazon?
+
+34
+00:01:54,000 --> 00:01:59,000
+You see that's going to fall into the world of non-repudiation because those websites have something
+
+35
+00:01:59,000 --> 00:02:03,000
+we call certificates, which are digitally signed, a digital signature.
+
+36
+00:02:03,000 --> 00:02:04,000
+We're going to get more into it.
+
+37
+00:02:04,000 --> 00:02:06,000
+If you want to skip to this, it's going to be in the cryptography section.
+
+38
+00:02:06,000 --> 00:02:14,000
+But a digital signature is when you attach something to a document, a certificate that when you send
+
+39
+00:02:14,000 --> 00:02:17,000
+it, people are 100% sure it came from you.
+
+40
+00:02:17,000 --> 00:02:18,000
+All right.
+
+41
+00:02:18,000 --> 00:02:20,000
+That way that person can't deny that it came from them.
+
+42
+00:02:20,000 --> 00:02:22,000
+And you are sure that it came from them.
+
+43
+00:02:22,000 --> 00:02:26,000
+So that's one way of providing non-repudiation.
+
+44
+00:02:26,000 --> 00:02:27,000
+So remember what non-repudiation is.
+
+45
+00:02:27,000 --> 00:02:36,000
+Non-repudiation is going to be a concept that an entity, a subject cannot deny that a particular event
+
+46
+00:02:36,000 --> 00:02:37,000
+has taken place.
+
+47
+00:02:37,000 --> 00:02:42,000
+We do this in IT security most of the time by just using a digital signature.
+
+48
+00:02:42,000 --> 00:02:43,000
+Know that one for your exam.
+

02 - Lesson 1 IT Security Fundamentals/009 Authentication OB 1.2.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:467be145f0cd86815836570a5564fedec1be478b5dbe8248b1294e7b07fa0688
+size 75714389

02 - Lesson 1 IT Security Fundamentals/009 Authentication OB 1.2_en.srt

@@ -0,0 +1,164 @@
+1
+00:00:00,000 --> 00:00:06,000
+When working on a system, you're going to want to make sure that three main concepts are applied to
+
+2
+00:00:06,000 --> 00:00:06,000
+that system.
+
+3
+00:00:06,000 --> 00:00:11,000
+When a user logs into a computer, you want to make sure that they have the right password.
+
+4
+00:00:11,000 --> 00:00:16,000
+In other words, they're authenticated, they have access to the correct information authorization,
+
+5
+00:00:16,000 --> 00:00:18,000
+and you're tracking what they're doing.
+
+6
+00:00:18,000 --> 00:00:22,000
+You see, these concepts is referred to as triple A.
+
+7
+00:00:22,000 --> 00:00:26,000
+Triple A talks about authentication authorization and accounting.
+
+8
+00:00:26,000 --> 00:00:28,000
+Now authentication is a really important terms.
+
+9
+00:00:28,000 --> 00:00:30,000
+We have a whole dedicated video on it.
+
+10
+00:00:30,000 --> 00:00:31,000
+Coming up next.
+
+11
+00:00:31,000 --> 00:00:37,000
+This is the process of verifying the identity of a user, device or other entity to a particular system.
+
+12
+00:00:38,000 --> 00:00:40,000
+Another concept is authorization.
+
+13
+00:00:40,000 --> 00:00:46,000
+So authorization is really going to be about ensuring that an authorized individual has access to this
+
+14
+00:00:46,000 --> 00:00:46,000
+data.
+
+15
+00:00:46,000 --> 00:00:53,000
+For example, let's say you log in to a computer at your workplace and there's a folder on the desktop,
+
+16
+00:00:53,000 --> 00:00:54,000
+you double click on it.
+
+17
+00:00:54,000 --> 00:00:56,000
+Do you have access to that data?
+
+18
+00:00:56,000 --> 00:01:02,000
+The system has to perform some kind of a check to see, well, this user account, Bob, has access
+
+19
+00:01:02,000 --> 00:01:03,000
+to this particular folder.
+
+20
+00:01:03,000 --> 00:01:05,000
+Can you read what's in there?
+
+21
+00:01:05,000 --> 00:01:08,000
+Can you write to what's in there or can you just read.
+
+22
+00:01:08,000 --> 00:01:10,000
+This is called authorization.
+
+23
+00:01:10,000 --> 00:01:11,000
+We got to make sure that you have access to that data.
+
+24
+00:01:11,000 --> 00:01:15,000
+You try to go to a particular website, open up a particular application.
+
+25
+00:01:15,000 --> 00:01:19,000
+We have to make sure that only authorized people.
+
+26
+00:01:19,000 --> 00:01:25,000
+Has or is permitted to access certain types of information.
+
+27
+00:01:25,000 --> 00:01:29,000
+This is done generally using some kind of thing called we call an access control list.
+
+28
+00:01:29,000 --> 00:01:32,000
+Another thing we want to do is we want to track what you're doing.
+
+29
+00:01:32,000 --> 00:01:38,000
+We want to see that when you log in to a particular system, everything you do, we're going to know
+
+30
+00:01:38,000 --> 00:01:45,000
+as IT security professionals, we need to know that Bob logged in at 8:00 in the morning.
+
+31
+00:01:45,000 --> 00:01:47,000
+He accessed this file at 802.
+
+32
+00:01:47,000 --> 00:01:49,000
+He changed this one at 803.
+
+33
+00:01:49,000 --> 00:01:51,000
+He deleted this at 804, and so on and so on.
+
+34
+00:01:51,000 --> 00:01:54,000
+We want to keep track of every single thing you're doing.
+
+35
+00:01:54,000 --> 00:02:00,000
+This is going to help lead to keeping you accountable to what is happening on our systems.
+
+36
+00:02:00,000 --> 00:02:01,000
+So accountability is a big thing.
+
+37
+00:02:01,000 --> 00:02:03,000
+We'll talk about that later though in the course.
+
+38
+00:02:03,000 --> 00:02:03,000
+All right.
+
+39
+00:02:03,000 --> 00:02:05,000
+So remember what exactly is triple A.
+
+40
+00:02:06,000 --> 00:02:09,000
+Triple A refers to authentication authorization and accounting.
+
+41
+00:02:09,000 --> 00:02:15,000
+And every system that we have in our network today should have these particular three things.
+

02 - Lesson 1 IT Security Fundamentals/010 Authorization OB 1.2.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:f1c4515ebc370ba6b64ba57e77635683f0d7b33ef92a5bf036841f967890e0f4
+size 137044412

02 - Lesson 1 IT Security Fundamentals/010 Authorization OB 1.2_en.srt

@@ -0,0 +1,268 @@
+1
+00:00:00,000 --> 00:00:04,000
+When a user logs into a system, what can they do?
+
+2
+00:00:04,000 --> 00:00:05,000
+What can they access?
+
+3
+00:00:05,000 --> 00:00:07,000
+Can they access a certain application?
+
+4
+00:00:07,000 --> 00:00:09,000
+Are they denied access to a particular thing?
+
+5
+00:00:10,000 --> 00:00:12,000
+You see, this is called authorization.
+
+6
+00:00:12,000 --> 00:00:17,000
+An authorization is all about ensuring that users have access to the right information.
+
+7
+00:00:17,000 --> 00:00:21,000
+Remember authentication is just about getting them into the system, but what can they access?
+
+8
+00:00:21,000 --> 00:00:25,000
+I want to show you a quick demonstration of authorization at play.
+
+9
+00:00:25,000 --> 00:00:27,000
+So here I am at my windows desktop.
+
+10
+00:00:27,000 --> 00:00:30,000
+I have two folders message and I have homework.
+
+11
+00:00:30,000 --> 00:00:34,000
+You notice that if I try to double click on messages watch what happens.
+
+12
+00:00:34,000 --> 00:00:39,000
+It says you don't you you don't currently have permission to access this folder.
+
+13
+00:00:39,000 --> 00:00:43,000
+That means that the system is denying me access to this particular folder.
+
+14
+00:00:44,000 --> 00:00:44,000
+All right.
+
+15
+00:00:44,000 --> 00:00:46,000
+Now you notice homework.
+
+16
+00:00:46,000 --> 00:00:49,000
+If I double click on this, I have full access to this.
+
+17
+00:00:49,000 --> 00:00:50,000
+I can access this.
+
+18
+00:00:50,000 --> 00:00:52,000
+I can go in here.
+
+19
+00:00:52,000 --> 00:00:54,000
+Maybe I can add a add a text file to this.
+
+20
+00:00:54,000 --> 00:00:55,000
+Wouldn't the other one.
+
+21
+00:00:55,000 --> 00:00:56,000
+I couldn't even open it.
+
+22
+00:00:57,000 --> 00:01:03,000
+The system is doing this by using something files and permissions on a access control list.
+
+23
+00:01:03,000 --> 00:01:05,000
+I want to show you what that looks like.
+
+24
+00:01:05,000 --> 00:01:10,000
+You see, if I right click on homework and I go to properties and I go to security.
+
+25
+00:01:10,000 --> 00:01:15,000
+You'll notice this list here of all the users and what they can do.
+
+26
+00:01:15,000 --> 00:01:16,000
+You notice I'm listed here.
+
+27
+00:01:17,000 --> 00:01:20,000
+And it says that I have full control and I can edit this.
+
+28
+00:01:20,000 --> 00:01:25,000
+Now if you're the administrator of the system like I am, you can actually add and remove permissions
+
+29
+00:01:25,000 --> 00:01:26,000
+as needed.
+
+30
+00:01:27,000 --> 00:01:30,000
+If I look at messages though, I right click I go to properties.
+
+31
+00:01:30,000 --> 00:01:32,000
+You'll notice this one doesn't have anybody.
+
+32
+00:01:33,000 --> 00:01:33,000
+All right.
+
+33
+00:01:33,000 --> 00:01:34,000
+Nobody is listed here.
+
+34
+00:01:34,000 --> 00:01:40,000
+So the administrator of the machine which is me can now go in here and add the permissions or edit permissions
+
+35
+00:01:40,000 --> 00:01:41,000
+to this.
+
+36
+00:01:41,000 --> 00:01:47,000
+So to give you a quick demonstration I'm going to show you how we can add a user to a particular system
+
+37
+00:01:47,000 --> 00:01:49,000
+or add users to a particular folder.
+
+38
+00:01:49,000 --> 00:01:50,000
+I would just say edit.
+
+39
+00:01:51,000 --> 00:01:52,000
+Add.
+
+40
+00:01:53,000 --> 00:01:57,000
+And then I would say advanced because I just want a quick list of users find now.
+
+41
+00:01:57,000 --> 00:02:01,000
+And you notice all the users in the machine will show up in this list.
+
+42
+00:02:01,000 --> 00:02:02,000
+I'm looking for myself.
+
+43
+00:02:02,000 --> 00:02:06,000
+So I'm going to click on me, say okay, okay one more time because it found me.
+
+44
+00:02:06,000 --> 00:02:12,000
+And then I'm going to give myself full control and say, okay, now when I try to access this, you
+
+45
+00:02:12,000 --> 00:02:13,000
+notice it opens right up.
+
+46
+00:02:13,000 --> 00:02:16,000
+And I can now go in there and add another message if I want.
+
+47
+00:02:16,000 --> 00:02:20,000
+This is the process of what's known as authorization.
+
+48
+00:02:20,000 --> 00:02:28,000
+So authorization is is going to be that process where we're going to determine what a user is allowed
+
+49
+00:02:28,000 --> 00:02:30,000
+to do by establishing their rights and privileges.
+
+50
+00:02:30,000 --> 00:02:31,000
+How are we going to do that?
+
+51
+00:02:31,000 --> 00:02:34,000
+By using what I just showed you permissions and privileges.
+
+52
+00:02:34,000 --> 00:02:35,000
+All right.
+
+53
+00:02:35,000 --> 00:02:41,000
+It involves granting permission to specific folders devices, applications.
+
+54
+00:02:41,000 --> 00:02:44,000
+And then we can say whether they can read to read to it or write to it.
+
+55
+00:02:44,000 --> 00:02:49,000
+So you got to remember that now I just showed you a small sample of that.
+
+56
+00:02:49,000 --> 00:02:54,000
+Rights and permissions are generally going to be done by assigning it to some kind of what's called
+
+57
+00:02:54,000 --> 00:02:55,000
+an ACL.
+
+58
+00:02:55,000 --> 00:02:58,000
+Now access control lists are going to be used by firewalls.
+
+59
+00:02:58,000 --> 00:03:03,000
+It's going to be used by, uh, routers to ensure who can come in and out of your network.
+
+60
+00:03:04,000 --> 00:03:10,000
+There are something we call an authorized auth authorization model.
+
+61
+00:03:10,000 --> 00:03:13,000
+And things such as Mac or Dak systems fall into this category.
+
+62
+00:03:13,000 --> 00:03:19,000
+I'm not going to cover this topic now because I have a whole I have a whole lecture coming up on different
+
+63
+00:03:19,000 --> 00:03:24,000
+forms of access control models coming up later in the in the course.
+
+64
+00:03:24,000 --> 00:03:26,000
+So just keep in mind that these do fall in here.
+
+65
+00:03:26,000 --> 00:03:27,000
+All right.
+
+66
+00:03:27,000 --> 00:03:33,000
+So remember now for your exam that when it comes to to authorization it's just about ensuring that the
+
+67
+00:03:33,000 --> 00:03:37,000
+right user has the right access to the correct resources.
+

02 - Lesson 1 IT Security Fundamentals/011 Accounting OB 1.2.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:28a0b1152a42a6f3bcb0b80720711c36fbe806dd2b51f3b19b6e7d013ffadf41
+size 67696549

02 - Lesson 1 IT Security Fundamentals/011 Accounting OB 1.2_en.srt

@@ -0,0 +1,144 @@
+1
+00:00:00,000 --> 00:00:02,000
+Any time you log into a system.
+
+2
+00:00:02,000 --> 00:00:05,000
+I'm pretty sure every single thing you do on that system is tracked.
+
+3
+00:00:05,000 --> 00:00:06,000
+What do I mean by that?
+
+4
+00:00:06,000 --> 00:00:12,000
+Well, you open a file, you open a folder, you delete a file, you add a file to it.
+
+5
+00:00:12,000 --> 00:00:17,000
+More than likely, your organization is keeping track of all the activities you're doing in the world
+
+6
+00:00:17,000 --> 00:00:18,000
+of IT security.
+
+7
+00:00:18,000 --> 00:00:20,000
+We're going to call this thing accounting.
+
+8
+00:00:20,000 --> 00:00:27,000
+So accounting refers to tracking of user activity and resources within that system.
+
+9
+00:00:27,000 --> 00:00:28,000
+How are we tracking it.
+
+10
+00:00:28,000 --> 00:00:32,000
+Well in things like windows you have these log files and particularly the security log file.
+
+11
+00:00:32,000 --> 00:00:37,000
+And in that file depending on how your system is set up, I'm going to be able to see that you logged
+
+12
+00:00:37,000 --> 00:00:38,000
+in at 8:00.
+
+13
+00:00:38,000 --> 00:00:40,000
+You access this file at 802.
+
+14
+00:00:40,000 --> 00:00:42,000
+You change this file at 803.
+
+15
+00:00:42,000 --> 00:00:46,000
+I'm going to see all the actions you did, including all the things you deleted.
+
+16
+00:00:46,000 --> 00:00:53,000
+So log in is really important in helping keeping you accountable for the actions you took on the system.
+
+17
+00:00:53,000 --> 00:01:01,000
+So accounting along with authentication, authorization and identification then leads into this concept
+
+18
+00:01:01,000 --> 00:01:03,000
+of accountability, which we'll cover next.
+
+19
+00:01:03,000 --> 00:01:08,000
+So just for now, or I should say just in this video, I need you guys to understand that accounting
+
+20
+00:01:08,000 --> 00:01:11,000
+is about keeping track of everything you do.
+
+21
+00:01:11,000 --> 00:01:13,000
+It's on servers like windows.
+
+22
+00:01:13,000 --> 00:01:18,000
+We'll set up user tracking or auditing on them to see in the security log files.
+
+23
+00:01:18,000 --> 00:01:24,000
+And then of course, you can set up auditing and log in in many other devices such as firewalls, uh,
+
+24
+00:01:24,000 --> 00:01:27,000
+access points, routers and others.
+
+25
+00:01:27,000 --> 00:01:28,000
+So how is this done?
+
+26
+00:01:28,000 --> 00:01:29,000
+Well, user activity tracking.
+
+27
+00:01:29,000 --> 00:01:30,000
+When did you log in?
+
+28
+00:01:30,000 --> 00:01:31,000
+When did you log off?
+
+29
+00:01:31,000 --> 00:01:33,000
+What application you use?
+
+30
+00:01:33,000 --> 00:01:34,000
+When did you use it?
+
+31
+00:01:34,000 --> 00:01:36,000
+We're going to store these things in the system log files.
+
+32
+00:01:36,000 --> 00:01:39,000
+And particularly like in windows in the security log file.
+
+33
+00:01:39,000 --> 00:01:43,000
+You see users should be aware of this.
+
+34
+00:01:43,000 --> 00:01:49,000
+All users on a system should be aware that all actions they take is logged by the system log files,
+
+35
+00:01:49,000 --> 00:01:54,000
+and can be viewed by the authorized professionals, such as the administrators or senior management.
+
+36
+00:01:54,000 --> 00:01:58,000
+Because it's with accounting, are we going to be able to hold users accountable?
+

02 - Lesson 1 IT Security Fundamentals/012 Accountability OB 1.2.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:22939ae9693ee8d035054da5412de3af3b7cc7d126222a92dea24ac7ee8a8058
+size 72878164

02 - Lesson 1 IT Security Fundamentals/012 Accountability OB 1.2_en.srt

@@ -0,0 +1,240 @@
+1
+00:00:00,000 --> 00:00:01,000
+When it comes to it security.
+
+2
+00:00:01,000 --> 00:00:05,000
+One of the things we have to have is going to be accountability.
+
+3
+00:00:05,000 --> 00:00:08,000
+So what exactly is accountability?
+
+4
+00:00:08,000 --> 00:00:14,000
+Well, accountability is when we're going to be able to ensure that individuals or entities are held
+
+5
+00:00:14,000 --> 00:00:16,000
+responsible for their actions.
+
+6
+00:00:16,000 --> 00:00:21,000
+The thing is, accountability is not something you're going to get by doing nothing, right.
+
+7
+00:00:21,000 --> 00:00:26,000
+Accountability has a particular set of steps that must be done.
+
+8
+00:00:26,000 --> 00:00:29,000
+If it's hard to, it's hard to point out where these things are.
+
+9
+00:00:29,000 --> 00:00:33,000
+Uh, that must be done in order for us to get right here.
+
+10
+00:00:33,000 --> 00:00:35,000
+So let's let's take a look at this.
+
+11
+00:00:35,000 --> 00:00:41,000
+So in order to get accountable or in order to hold you accountable for it, the first thing I need to
+
+12
+00:00:41,000 --> 00:00:43,000
+do is to identify who are you?
+
+13
+00:00:43,000 --> 00:00:44,000
+What's your name?
+
+14
+00:00:44,000 --> 00:00:49,000
+Oh, you're Bob, I need to prove to ensure that you prove that you are Bob.
+
+15
+00:00:49,000 --> 00:00:50,000
+So that's authentication.
+
+16
+00:00:50,000 --> 00:00:53,000
+This is going to be done maybe with a password or your thumbprint.
+
+17
+00:00:53,000 --> 00:00:58,000
+And then I want to make sure that I give you the right access to particular things.
+
+18
+00:00:58,000 --> 00:00:59,000
+Authorization.
+
+19
+00:00:59,000 --> 00:01:03,000
+And once I know you have access to it I'm going to track that you did it.
+
+20
+00:01:03,000 --> 00:01:05,000
+That's going to give me accountability.
+
+21
+00:01:05,000 --> 00:01:10,000
+Now, here's why all of these things are important to get to accountability.
+
+22
+00:01:10,000 --> 00:01:11,000
+And the reason is this.
+
+23
+00:01:12,000 --> 00:01:17,000
+If any of these blue boxes are broken, you're not going to get accountability.
+
+24
+00:01:17,000 --> 00:01:21,000
+For example, let's say everybody was using the same username.
+
+25
+00:01:21,000 --> 00:01:23,000
+Then there's no real identification.
+
+26
+00:01:23,000 --> 00:01:26,000
+There's no real way to say that's Bob and that's Mary, right.
+
+27
+00:01:26,000 --> 00:01:30,000
+Let's say everybody used the same password, but they had different usernames.
+
+28
+00:01:30,000 --> 00:01:32,000
+Everybody knew each other password.
+
+29
+00:01:32,000 --> 00:01:34,000
+So when I say, hey Mary, you are still our data.
+
+30
+00:01:34,000 --> 00:01:36,000
+Mary is going to be like, honestly, your data.
+
+31
+00:01:36,000 --> 00:01:37,000
+Everybody knows my password.
+
+32
+00:01:38,000 --> 00:01:39,000
+I can't hold you accountable.
+
+33
+00:01:39,000 --> 00:01:41,000
+If you never had access to something you're going to.
+
+34
+00:01:41,000 --> 00:01:44,000
+I'm going to say, hey man, you stole our data, Bob.
+
+35
+00:01:44,000 --> 00:01:46,000
+And Bob is going to say, I never had access to the data.
+
+36
+00:01:46,000 --> 00:01:48,000
+That's authorization.
+
+37
+00:01:48,000 --> 00:01:53,000
+I'm going to say, hey, Bob, you stole the data, and Bob is going to be like, so prove that I actually
+
+38
+00:01:53,000 --> 00:01:54,000
+stole the data.
+
+39
+00:01:54,000 --> 00:01:59,000
+That's accounting account is going to track what they did when they did it, how they did it right with
+
+40
+00:01:59,000 --> 00:02:00,000
+those log files.
+
+41
+00:02:00,000 --> 00:02:07,000
+So for us to get here to get accountability, we need to have all of these particular things done.
+
+42
+00:02:07,000 --> 00:02:13,000
+And if any one of those blue boxes are broken, you can best bet that you're not going to get the black
+
+43
+00:02:13,000 --> 00:02:13,000
+box.
+
+44
+00:02:13,000 --> 00:02:15,000
+You're not going to get accountability.
+
+45
+00:02:15,000 --> 00:02:19,000
+So I want to make sure these things here are absolutely correct.
+
+46
+00:02:19,000 --> 00:02:20,000
+Now you got to remember something.
+
+47
+00:02:20,000 --> 00:02:23,000
+Accountability is a core concept of security.
+
+48
+00:02:23,000 --> 00:02:24,000
+Remember this.
+
+49
+00:02:24,000 --> 00:02:30,000
+If you know you're going to be held accountable for something, you're less likely to commit that crime
+
+50
+00:02:30,000 --> 00:02:31,000
+driving down the highway.
+
+51
+00:02:32,000 --> 00:02:36,000
+Imagine every couple of hundred feet on a highway.
+
+52
+00:02:36,000 --> 00:02:37,000
+There's a cop.
+
+53
+00:02:37,000 --> 00:02:38,000
+You'd think anybody would speed, right?
+
+54
+00:02:38,000 --> 00:02:40,000
+You're going up a highway and there's a cop sitting there.
+
+55
+00:02:41,000 --> 00:02:45,000
+A whole highway slows down or people goes back to the speed limit because they're going to be held accountable.
+
+56
+00:02:45,000 --> 00:02:47,000
+If you're speeding, you're more likely to get caught.
+
+57
+00:02:47,000 --> 00:02:54,000
+If somebody knows that every action you take, you're going to be held accountable to those actions.
+
+58
+00:02:54,000 --> 00:03:00,000
+You're less likely to take bad actions, illegal actions.
+
+59
+00:03:00,000 --> 00:03:00,000
+Correct.
+
+60
+00:03:00,000 --> 00:03:04,000
+That's why accountability is really important.
+

02 - Lesson 1 IT Security Fundamentals/013 Gap analysis OB 1.2.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:8634f2ffc03b7f69b11617fc6e8a4d7c22bc2f27b07d09af4c4a72bfbc625b2c
+size 54590058

02 - Lesson 1 IT Security Fundamentals/013 Gap analysis OB 1.2_en.srt

@@ -0,0 +1,188 @@
+1
+00:00:00,000 --> 00:00:01,000
+In today's organizations.
+
+2
+00:00:01,000 --> 00:00:08,000
+We all want to go from being good to being great, from making 1 million to 2 million, from being not
+
+3
+00:00:08,000 --> 00:00:10,000
+so secure to being very secure.
+
+4
+00:00:10,000 --> 00:00:17,000
+You see, in order to go from here currently to our desired state or where we want to be, we have to
+
+5
+00:00:17,000 --> 00:00:19,000
+perform what's called a gap analysis.
+
+6
+00:00:19,000 --> 00:00:20,000
+Easy example.
+
+7
+00:00:20,000 --> 00:00:24,000
+Well, I'm £210 today and I want to be £180.
+
+8
+00:00:24,000 --> 00:00:27,000
+Well, we've got a gap of £30.
+
+9
+00:00:27,000 --> 00:00:30,000
+You see we have to do a gap analysis.
+
+10
+00:00:30,000 --> 00:00:35,000
+We have to perform an assessment to see where we are right now and how are we going to get there.
+
+11
+00:00:36,000 --> 00:00:40,000
+So notice terms for your exam a gap analysis.
+
+12
+00:00:40,000 --> 00:00:44,000
+It's an assessment that organizations use to compare the current state.
+
+13
+00:00:44,000 --> 00:00:46,000
+That means where they are currently in terms of security.
+
+14
+00:00:46,000 --> 00:00:53,000
+Remember we are talking security here with a set of standards best practices or regulatory requirements.
+
+15
+00:00:53,000 --> 00:00:58,000
+So in terms of gap analysis, when it comes to IT security right now there may be a new regulation that
+
+16
+00:00:58,000 --> 00:01:01,000
+is out there and your organization is here.
+
+17
+00:01:01,000 --> 00:01:03,000
+So you've got to see what what do we have to do.
+
+18
+00:01:03,000 --> 00:01:08,000
+What are the controls and mechanisms and things we have to change to meet the new requirements.
+
+19
+00:01:08,000 --> 00:01:09,000
+So that's going to be the gap.
+
+20
+00:01:09,000 --> 00:01:14,000
+So in order to do this, one of the first things you have to know is where you are identification of
+
+21
+00:01:14,000 --> 00:01:15,000
+that current state.
+
+22
+00:01:16,000 --> 00:01:19,000
+What is your existing security controls and policies?
+
+23
+00:01:19,000 --> 00:01:21,000
+Then you have to decide, well, where do you want to be?
+
+24
+00:01:21,000 --> 00:01:22,000
+Right.
+
+25
+00:01:22,000 --> 00:01:26,000
+So what exactly is going to be that desired state?
+
+26
+00:01:26,000 --> 00:01:31,000
+Is it a particular policy you're trying to meet a particular standard, a particular um.
+
+27
+00:01:32,000 --> 00:01:38,000
+Regulation that you want to meet so you can understand what is that like standard.
+
+28
+00:01:38,000 --> 00:01:38,000
+Right.
+
+29
+00:01:38,000 --> 00:01:40,000
+What is that target that you want to be.
+
+30
+00:01:40,000 --> 00:01:42,000
+Then comes the analysis of the gap.
+
+31
+00:01:42,000 --> 00:01:44,000
+So how do we get there.
+
+32
+00:01:44,000 --> 00:01:44,000
+Right.
+
+33
+00:01:44,000 --> 00:01:45,000
+How are we going to go from here.
+
+34
+00:01:45,000 --> 00:01:47,000
+How am I going to go from 180?
+
+35
+00:01:47,000 --> 00:01:50,000
+I'm sorry I wish I was 180 from 210 to 180.
+
+36
+00:01:50,000 --> 00:01:51,000
+Right.
+
+37
+00:01:51,000 --> 00:01:52,000
+How am I going to do that?
+
+38
+00:01:52,000 --> 00:01:55,000
+The core of the gap analysis is identifying the difference between the two.
+
+39
+00:01:55,000 --> 00:01:56,000
+And how are we going to get there?
+
+40
+00:01:57,000 --> 00:02:03,000
+So keep in mind, guys, what a gap analysis is, is basically knowing your current state to your desired
+
+41
+00:02:03,000 --> 00:02:07,000
+state and then looking at hey, what is what is the gap?
+
+42
+00:02:07,000 --> 00:02:08,000
+How far are we off?
+
+43
+00:02:08,000 --> 00:02:11,000
+I'm £30 off how far his organization will be.
+
+44
+00:02:11,000 --> 00:02:17,000
+We're off by these many controls and these many policies that has to get implemented to meet the future
+
+45
+00:02:17,000 --> 00:02:17,000
+state.
+
+46
+00:02:17,000 --> 00:02:18,000
+And that is what.
+
+47
+00:02:18,000 --> 00:02:21,000
+And that is what a gap analysis is.
+

02 - Lesson 1 IT Security Fundamentals/014 Quick Quiz.html

@@ -0,0 +1,479 @@
+<!DOCTYPE html>
+<html lang="en">
+    <head>
+        <meta charset="UTF-8" />
+        <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+        <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+        <title>Quiz</title>
+        <style>
+            * {
+                font-family: system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen, Ubuntu, Cantarell,
+                    "Open Sans", "Helvetica Neue", sans-serif;
+                margin: 0;
+                padding: 0;
+                box-sizing: border-box;
+                font-size: 16px;
+            }
+
+            main {
+                padding-top: 48px;
+            }
+
+            :root {
+                --large-device-width: 850px;
+                --primary-color: #0f172a;
+                --secondary-color: #020617;
+                --primary-text-color: #c7d1dd;
+                --secondary-text-color: #061602;
+                --success-background: hsl(159, 82%, 24%);
+                --success-foreground: hsl(164, 86%, 16%);
+                --success: hsl(160, 84%, 39%);
+                --danger: #ef4444;
+                --warning: #f59e0b;
+                --info-background: hsl(218, 81%, 8%);
+                --info-foreground: hsl(217, 91%, 85%);
+                --border-color: #d1d7dc;
+                --check-box-size: 20px;
+                /* control the size */
+                --check-box-color: var(--info-foreground);
+                /* the active color */
+            }
+
+            body {
+                position: relative;
+                background-color: #020617;
+                color: var(--primary-text-color);
+            }
+
+            #score-stats-container {
+                position: fixed;
+                z-index: 10;
+                top: 0;
+                height: 40px;
+                width: 100%;
+                background-color: var(--info-background);
+
+                padding: 0px 16px;
+                color: var(--info-foreground);
+                font-weight: 600;
+                display: flex;
+                align-items: center;
+                justify-content: space-between;
+            }
+
+            #quiz-container {
+                border-radius: 8px;
+                display: flex;
+                gap: 16px;
+                flex-direction: column;
+            }
+
+            input[type="radio"] {
+                height: var(--check-box-size);
+                aspect-ratio: 1;
+                border: calc(var(--check-box-size) / 8) solid #939393;
+                padding: calc(var(--check-box-size) / 8);
+                background: radial-gradient(farthest-side, var(--check-box-color) 94%, #0000) 50%/0 0 no-repeat
+                    content-box;
+                border-radius: 50%;
+                outline-offset: calc(var(--check-box-size) / 10);
+                -webkit-appearance: none;
+                -moz-appearance: none;
+                appearance: none;
+                cursor: pointer;
+                font-size: inherit;
+                transition: 0.3s;
+            }
+
+            input[type="radio"]:checked {
+                border-color: var(--check-box-color);
+                background-size: 100% 100%;
+            }
+
+            input[type="radio"]:disabled {
+                background: linear-gradient(#939393 0 0) 50%/100% 20% no-repeat content-box;
+                opacity: 0.5;
+                cursor: not-allowed;
+            }
+
+            label {
+                display: inline-flex;
+                align-items: center;
+                gap: 10px;
+                cursor: pointer;
+                padding: 4px 6px;
+                border-radius: 4px;
+            }
+
+            @media (max-width: 767px) {
+                input[type="radio"],
+                label {
+                    cursor: default;
+                }
+
+                #quiz-container {
+                    margin-left: 8px;
+                    margin-right: 8px;
+                }
+            }
+
+            /* PC (Desktop devices) */
+            @media (min-width: 768px) {
+                body {
+                    display: flex;
+                    justify-content: center;
+                }
+
+                main {
+                    max-width: var(--large-device-width);
+                }
+
+                #score-stats-container {
+                    max-width: var(--large-device-width);
+                }
+
+                dialog {
+                    max-width: var(--large-device-width);
+                }
+            }
+
+            @media print {
+                input[type="radio"] {
+                    background: none !important;
+                    border-color: #939393 !important;
+                }
+
+                input[type="radio"]:checked {
+                    border-color: #939393 !important;
+                }
+            }
+
+            .question-lable {
+                display: flex;
+                align-items: center;
+                gap: 8px;
+            }
+
+            button {
+                -webkit-tap-highlight-color: transparent;
+                -webkit-touch-callout: none;
+                -webkit-user-select: none;
+                user-select: none;
+                outline: none;
+                position: relative;
+                overflow: hidden;
+                cursor: pointer;
+            }
+
+            .button {
+                background-color: var(--success-background);
+                border: none;
+                color: #f4f5f7;
+                opacity: 0.8;
+                font-size: 18px;
+                flex-grow: 1;
+                padding: 8px 16px;
+                border-radius: 8px;
+            }
+
+            .button:hover {
+                opacity: 1;
+            }
+
+            .explanation-btn {
+                border: none;
+                color: var(--success);
+                background-color: transparent;
+            }
+
+            #submit-button:active::after {
+                background-color: #ef4444;
+            }
+
+            .single-question-container {
+                background-color: var(--primary-color);
+                display: flex;
+                flex-direction: column;
+                gap: 8px;
+                padding: 16px;
+                border-radius: 8px;
+            }
+
+            #modal-content {
+                padding: 16px;
+                line-height: 24px;
+            }
+
+            dialog::backdrop {
+                background: rgba(0, 0, 0, 0.5);
+            }
+
+            dialog {
+                position: fixed;
+                border: 1px solid var(--border-color);
+                background-color: var(--primary-color);
+                color: rgb(240, 241, 248);
+                padding: 16px;
+                border-radius: 8px;
+                width: 80vw;
+                max-height: 80vh;
+                overflow: auto;
+                top: 50%;
+                left: 50%;
+                -webkit-transform: translateX(-50%) translateY(-50%);
+                -moz-transform: translateX(-50%) translateY(-50%);
+                -ms-transform: translateX(-50%) translateY(-50%);
+                transform: translateX(-50%) translateY(-50%);
+            }
+
+            #close-modal-btn {
+                position: absolute;
+                top: 4px;
+                right: 4px;
+                padding: 2px 8px;
+                border-radius: 2px;
+                border: none;
+                background-color: var(--danger);
+            }
+
+            .correct-answer label {
+                border: 2px solid var(--success);
+                width: 100%;
+            }
+
+            .incorrect-answer label {
+                border: 2px solid var(--danger);
+                width: 100%;
+            }
+
+            .options-container {
+                display: flex;
+                flex-direction: column;
+                gap: 4px;
+            }
+
+            #quiz-meta-container {
+                border-radius: 8px;
+                background-color: var(--primary-color);
+                margin-bottom: 12px;
+                padding: 8px;
+            }
+
+            #quiz-title {
+                text-align: center;
+                font-size: 24px;
+                margin-bottom: 8px;
+            }
+
+            #quiz-description {
+                line-height: 1.5;
+                padding: 2px 6px;
+            }
+        </style>
+    </head>
+
+    <body onload="main()">
+        <main>
+            <section id="quiz-meta-container">
+                <h1 id="quiz-title"></h1>
+                <p id="quiz-description"></p>
+            </section>
+            <section id="score-stats-container">
+                <div id="score-card">
+                    Score: <span id="current-score">999</span> of
+                    <span id="pass-percent">999%</span>
+                </div>
+                <div>Correct: <span id="correct-answers">999</span></div>
+                <div>Incorrect: <span id="wrong-answers">999</span></div>
+            </section>
+
+            <section id="quiz-container"></section>
+
+            <dialog id="modal" class="modal-container">
+                <div id="modal-content">
+                    <p id="modal-text"></p>
+                </div>
+            </dialog>
+        </main>
+
+        <script>
+            const quizData = {"quiz_id": 6180068, "quiz_description": null, "quiz_title": "Quick Quiz", "pass_percent": null, "questions": [{"_class": "assessment", "id": 74726732, "assessment_type": "multiple-choice", "prompt": {"question": "<p>A network adopts a security model where it does not automatically trust any entity inside or outside its perimeter until verified. This approach is known as what?</p>", "relatedLectureIds": "", "feedbacks": ["", "The Zero Trust model operates on the principle of \"never trust, always verify,\" not automatically trusting any entity without verification, regardless of their location in relation to the network's perimeter. The Control Plane and Data Plane are components of network architecture, and Policy Administrator is a role in managing security policies.", "", ""], "answers": ["<p>Control Plane</p>", "<p>Zero Trust</p>", "<p>Policy Administrator</p>", "<p>Data Plane</p>"]}, "correct_response": ["b"], "section": "", "question_plain": "A network adopts a security model where it does not automatically trust any entity inside or outside its perimeter until verified. This approach is known as what?", "related_lectures": []}, {"_class": "assessment", "id": 74726736, "assessment_type": "multiple-choice", "prompt": {"question": "<p>A company encrypts its sensitive emails to ensure that only the intended recipient can read them. This practice primarily enhances which aspect of security?</p>", "relatedLectureIds": "", "feedbacks": ["", "", "", "Encrypting emails ensures that they cannot be read by unauthorized individuals, which is a direct measure to protect the confidentiality of the information. Integrity refers to safeguarding data from unauthorized modifications, availability focuses on ensuring data is accessible when needed, and authorization is about granting permissions to users."], "answers": ["<p>Integrity</p>", "<p>Availability</p>", "<p>Authorization</p>", "<p>Confidentiality</p>"]}, "correct_response": ["d"], "section": "", "question_plain": "A company encrypts its sensitive emails to ensure that only the intended recipient can read them. This practice primarily enhances which aspect of security?", "related_lectures": []}, {"_class": "assessment", "id": 74728330, "assessment_type": "multiple-choice", "prompt": {"question": "<p>An organization ensures that only specific individuals can modify financial records and tracks these modifications. This is primarily a practice of:</p>", "relatedLectureIds": "", "feedbacks": ["Integrity ensures that data is accurate and unaltered, and accounting involves keeping logs of who performed what actions. Limiting and tracking modifications to financial records ensures data integrity and involves accounting for those changes. Confidentiality is about keeping data secret, non-repudiation is ensuring actions cannot be denied, and availability ensures data is accessible when needed. Gap Analysis is a method for determining the difference between current and desired states.", "", "", ""], "answers": ["<p>Integrity and Accounting</p>", "<p>Confidentiality and Non-repudiation</p>", "<p>Availability and Authentication</p>", "<p>Gap Analysis</p>"]}, "correct_response": ["a"], "section": "", "question_plain": "An organization ensures that only specific individuals can modify financial records and tracks these modifications. This is primarily a practice of:", "related_lectures": []}, {"_class": "assessment", "id": 74728336, "assessment_type": "multiple-choice", "prompt": {"question": "<p>A cybersecurity team conducts an assessment to identify differences between the current security measures and the desired optimal security posture. This assessment is called:</p>", "relatedLectureIds": "", "feedbacks": ["", "", "", "Gap Analysis in cybersecurity is the process of comparing the current security measures (what is) with the desired, optimal security state (what should be). This helps in identifying gaps in the security posture that need to be addressed. Zero Trust Implementation is about establishing a security model based on strict verification, Non-repudiation Audit would involve ensuring actions or communications cannot be denied by the parties involved, and AAA Review would focus on authentication, authorization, and accounting procedures."], "answers": ["<p>Zero Trust Implementation</p>", "<p>Non-repudiation Audit</p>", "<p>AAA Review</p>", "<p>Gap Analysis</p>"]}, "correct_response": ["d"], "section": "", "question_plain": "A cybersecurity team conducts an assessment to identify differences between the current security measures and the desired optimal security posture. This assessment is called:", "related_lectures": []}, {"_class": "assessment", "id": 74728340, "assessment_type": "multiple-choice", "prompt": {"question": "<p>An organization's network automatically logs all user activities, providing a detailed record of who accessed what resources and when. This practice is an example of:</p>", "relatedLectureIds": "", "feedbacks": ["", "", "Accounting in the context of security refers to the tracking of user activities, including what resources they access and when. This is essential for auditing and monitoring purposes, helping in detecting unauthorized access or abnormal activities. Non-repudiation ensures the actions of a user cannot be denied, authentication is about verifying identity, and authorization is granting access to resources based on authenticated identity.", ""], "answers": ["<p>Non-repudiation</p>", "<p>Authentication</p>", "<p>Accounting</p>", "<p>Authorization</p>"]}, "correct_response": ["c"], "section": "", "question_plain": "An organization's network automatically logs all user activities, providing a detailed record of who accessed what resources and when. This practice is an example of:", "related_lectures": []}]};
+            let correct = new Set();
+            let incorrect = new Set();
+            let totalNumberOfQuestions = 0;
+            const quizTitle = quizData.quiz_title;
+            const quizDescription = quizData.quiz_description;
+            const questionData = quizData.questions;
+            const passPercent = quizData.pass_percent;
+            const modalTextElement = document.getElementById("modal-text");
+            const quizContainerElement = document.getElementById("quiz-container");
+
+            const dialog = document.querySelector("dialog");
+            const showButton = document.getElementById("view-explanatin");
+            const closeButton = document.getElementById("close-modal-btn");
+            const quizTitleElement = document.getElementById("quiz-title");
+            const quizDescriptionElement = document.getElementById("quiz-description");
+
+            function main() {
+                // update quiz meta data
+                document.title = quizTitle;
+                quizTitleElement.innerHTML = quizTitle;
+                quizDescriptionElement.innerHTML = quizDescription;
+
+                const passPercentElement = document.getElementById("pass-percent");
+                passPercentElement.innerHTML = passPercent + "%";
+                totalNumberOfQuestions = questionData.length;
+                // shuffle the questionData to randomize the order of the questions
+                for (let i = questionData.length - 1; i > 0; i--) {
+                    const j = Math.floor(Math.random() * (i + 1));
+                    [questionData[i], questionData[j]] = [questionData[j], questionData[i]];
+                }
+
+                let formattedQuestions = questionData.map(formatSingleQuestionData);
+                updateScore();
+                // display the formattedQuestions
+                formattedQuestions.forEach((question, idx) => {
+                    renderSingleQuestion(question, idx + 1);
+                });
+            }
+
+            /**
+             * Formats the question data from the given QuizData object.
+             *
+             * @param {Object} singleQuizData - The singleQuizData object containing prompt and correct_response.
+             * @return {Object} The formatted question object with the following properties:
+             *   - id: The ID of the question.
+             *   - question: The text of the question.
+             *   - answers: The array of answer options.
+             *   - correctAnswer: The text of the correct answer.
+             *   - explanation: The explanation of the correct answer.
+             */
+            function formatSingleQuestionData(singleQuizData = null) {
+                const { prompt, correct_response, id } = singleQuizData;
+                const questionText = prompt.question;
+                const answers = prompt.answers;
+                const correctAnswer = correct_response[0];
+                const correctAnswerText = answers[correctAnswer.toLowerCase().charCodeAt(0) - 97];
+                const questionObj = {
+                    id: id,
+                    question: questionText,
+                    answers: answers,
+                    correctAnswer: correctAnswerText,
+                    explanation: prompt?.explanation || "",
+                };
+                return questionObj;
+            }
+
+            /**
+             * Renders a single question with its options and submit button.
+             *
+             * @param {Object} singleQuestionData - The data of the question to render.
+             * @param {number} rootIndex - The index of the question in the quiz.
+             * @return {void} return nothing.
+             */
+
+            const renderSingleQuestion = (singleQuestionData = {}, rootIndex = 1) => {
+                const { id, explanation, answers, correctAnswer, question } = singleQuestionData;
+                // shuffle the answers to randomize the order of the answers
+                for (let i = answers.length - 1; i > 0; i--) {
+                    const j = Math.floor(Math.random() * (i + 1));
+                    [answers[i], answers[j]] = [answers[j], answers[i]];
+                }
+                const optionsHTML = answers
+                    .map((option, index) => {
+                        const optionId = `${id}_${index}`;
+
+                        return `
+        <div class="question-lable">
+          <input type="radio" id="${optionId}" name="${"answer"}" value="${option}" />
+          <label for="${optionId}">${option}</label>
+        </div>
+      `;
+                    })
+
+                    .join("");
+
+                const container = document.createElement("div");
+                container.innerHTML = `
+        <form data-correct-answer="${correctAnswer}" data-question-id="${id}" class="single-question-container" onsubmit="submitButtonListener(event)">
+          <div style="display: flex;justify-content: space-between;">
+            <p style="font-weight: 600">Question ${rootIndex}:</p>
+            <button type="button" onclick="renderExplanation(event)" id="${`explanation-${id}`}" data-explanation="${explanation}" class="explanation-btn">View Explanation</button>
+          </div>
+          <p style="margin-bottom: 8px;line-height: 1.5">${question}</p>
+          <div class="options-container">
+            ${optionsHTML}
+          </div>
+          <div style="display: flex; gap: 8px;">
+            <button type="submit" id="submit-button" class="button">Submit</button>
+          </div>
+        </form>
+      `;
+                quizContainerElement.appendChild(container);
+            };
+
+            /**
+             * Updates the score on the page based on the number of correct and incorrect answers.
+             *
+             * @return {void} This function does not return a value.
+             */
+            function updateScore() {
+                const currentParcentageElement = document.getElementById("current-score");
+                const correctAnswerElement = document.getElementById("correct-answers");
+                const wrongAnswerElement = document.getElementById("wrong-answers");
+                correctAnswerElement.innerHTML = correct.size;
+                wrongAnswerElement.innerHTML = incorrect.size;
+                const score = Number((correct.size / totalNumberOfQuestions) * 100).toFixed(2);
+                currentParcentageElement.innerHTML = score;
+            }
+
+            /**
+             * Handles the event when the submit button is clicked.
+             *
+             * @param {Event} e - The event object.
+             * @return {void} This function does not return anything.
+             */
+            const submitButtonListener = (e) => {
+                e.preventDefault();
+                const formData = new FormData(e.target);
+                const form = e.target;
+                const selectedOption = e.target.querySelector('input[type="radio"]:checked');
+                if (!selectedOption) {
+                    alert("Please select an answer!");
+                    return;
+                }
+
+                let isCorrect = false;
+                const { answer: userAnswer } = Object.fromEntries(formData.entries());
+                const correctAnswer = e.target.dataset.correctAnswer;
+                const questionId = e.target.dataset.questionId;
+                if (userAnswer == correctAnswer) {
+                    correct.add(questionId);
+                    incorrect.delete(questionId);
+                    isCorrect = true;
+                } else {
+                    incorrect.add(e.target.dataset.questionId);
+                    correct.delete(questionId);
+                }
+                updateScore();
+
+                const resultClass = isCorrect ? "correct-answer" : "incorrect-answer";
+
+                form.querySelectorAll(".question-lable").forEach((label) => {
+                    label.classList.remove("correct-answer", "incorrect-answer");
+                });
+                selectedOption.closest(".question-lable").classList.add(resultClass);
+            };
+
+            function renderExplanation(ev) {
+                modalTextElement.innerHTML = ev.target.dataset?.explanation || "no explanation found";
+                dialog.showModal();
+                dialog.addEventListener("click", (event) => {
+                    if (event.target === dialog) {
+                        dialog.close();
+                    }
+                });
+            }
+        </script>
+    </body>
+</html>

03 - Security Controls Categories and Types/001 Control Categories OB 1.1.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:cdf2e7a6c48ee07ed1ff6fc5e4153246b54b1beea7a7bcafdf7816bb41197afa
+size 236173595

03 - Security Controls Categories and Types/001 Control Categories OB 1.1_en.srt

@@ -0,0 +1,320 @@
+1
+00:00:00,000 --> 00:00:01,000
+Okay.
+
+2
+00:00:01,000 --> 00:00:07,000
+What does a security policy, a camera and the firewall have in common?
+
+3
+00:00:07,000 --> 00:00:15,000
+Well, all of these things, such as my paper policy, my user access policy that I have that's not
+
+4
+00:00:15,000 --> 00:00:15,000
+filled out here.
+
+5
+00:00:15,000 --> 00:00:17,000
+But just keep in mind this is just a policy.
+
+6
+00:00:17,000 --> 00:00:20,000
+What does all of these things here have in common.
+
+7
+00:00:20,000 --> 00:00:24,000
+And that is all about protecting our network.
+
+8
+00:00:24,000 --> 00:00:32,000
+For example, this firewall will protect our network from having worms, having all kinds of viruses
+
+9
+00:00:32,000 --> 00:00:34,000
+and hackers from breaking into our network.
+
+10
+00:00:34,000 --> 00:00:40,000
+This policy will tell you what you should be doing on my computer and what you shouldn't be doing.
+
+11
+00:00:40,000 --> 00:00:47,000
+And this camera is going to keep an eye on you as you walk around my physical facilities that this GoPro
+
+12
+00:00:47,000 --> 00:00:51,000
+in particular, but more of a CCTV or more of the cameras you see on the walls.
+
+13
+00:00:51,000 --> 00:00:53,000
+But let's just say that's one of them.
+
+14
+00:00:53,000 --> 00:00:58,000
+So in this video I want to talk about different categories of control.
+
+15
+00:00:58,000 --> 00:01:04,000
+And these are three different categories from a technical category from a technical control and administrative
+
+16
+00:01:04,000 --> 00:01:07,000
+or managerial control and a physical control.
+
+17
+00:01:07,000 --> 00:01:08,000
+Let's get into this.
+
+18
+00:01:09,000 --> 00:01:14,000
+So the first category I want to talk about is going to be technical controls.
+
+19
+00:01:14,000 --> 00:01:21,000
+As IT professionals we are more interested and we think more of technical controls.
+
+20
+00:01:21,000 --> 00:01:26,000
+But you've got to keep in mind you can have the best technical controls out there such as firewalls,
+
+21
+00:01:26,000 --> 00:01:28,000
+IDs, systems, encryption, antivirus.
+
+22
+00:01:28,000 --> 00:01:30,000
+You can have the best technical controls.
+
+23
+00:01:30,000 --> 00:01:35,000
+And if somebody can walk into the network and pick up your your data or your server and walk back out,
+
+24
+00:01:35,000 --> 00:01:36,000
+it's not very good.
+
+25
+00:01:36,000 --> 00:01:40,000
+So technical controls are basically the also known as logical controls.
+
+26
+00:01:40,000 --> 00:01:45,000
+And they're mechanisms that we use in hardware, software and firmware to help secure our network.
+
+27
+00:01:45,000 --> 00:01:50,000
+Now this is going to help us to prevent, detect and respond to security threats.
+
+28
+00:01:50,000 --> 00:01:51,000
+Here's what I tell my students.
+
+29
+00:01:51,000 --> 00:01:59,000
+If it's something you configure in a hardware and software like this device, it's considered a technical
+
+30
+00:01:59,000 --> 00:02:01,000
+control or logical control.
+
+31
+00:02:01,000 --> 00:02:01,000
+Same thing.
+
+32
+00:02:02,000 --> 00:02:05,000
+The other one I have is going to fall into this category.
+
+33
+00:02:05,000 --> 00:02:10,000
+This is going to be a managerial control also known as administrative controls.
+
+34
+00:02:10,000 --> 00:02:16,000
+So administrative controls are generally I tell my students are basically going to be anything on paper
+
+35
+00:02:16,000 --> 00:02:23,000
+that's going to be some kind of security policy, risk management processes, recovery plans, um,
+
+36
+00:02:24,000 --> 00:02:27,000
+incident responses and plans and disaster recovery plans.
+
+37
+00:02:27,000 --> 00:02:33,000
+Anything that you're going to find on a piece of paper is going to fall into this category of managerial
+
+38
+00:02:33,000 --> 00:02:36,000
+or also known as administrative control.
+
+39
+00:02:36,000 --> 00:02:40,000
+Another one we have is going to be operational security controls.
+
+40
+00:02:40,000 --> 00:02:48,000
+Now, operational controls are basically the things that we do to on a day to day to ensure that we
+
+41
+00:02:48,000 --> 00:02:51,000
+enforce the organization's policies and procedures.
+
+42
+00:02:51,000 --> 00:02:53,000
+This is going to be done by people.
+
+43
+00:02:54,000 --> 00:02:57,000
+So we're going to be doing this to maintain the security.
+
+44
+00:02:57,000 --> 00:03:01,000
+So what are things that people do within the organization generally?
+
+45
+00:03:01,000 --> 00:03:03,000
+Security awareness training.
+
+46
+00:03:03,000 --> 00:03:05,000
+That's something that you should have people be doing.
+
+47
+00:03:05,000 --> 00:03:10,000
+Training the users how to detect phishing links, training the users not to get scammed or click on
+
+48
+00:03:10,000 --> 00:03:11,000
+bad things.
+
+49
+00:03:11,000 --> 00:03:15,000
+Physical media protection such as protecting a USB stick, for example.
+
+50
+00:03:16,000 --> 00:03:18,000
+And then come the physical control.
+
+51
+00:03:18,000 --> 00:03:24,000
+Now, while I know security guys are pretty good at technical stuff, I know a lot of use.
+
+52
+00:03:24,000 --> 00:03:28,000
+Security guys, especially experienced security guys are really good at this one.
+
+53
+00:03:28,000 --> 00:03:30,000
+This firewall configuration thing.
+
+54
+00:03:31,000 --> 00:03:35,000
+Uh, most of us would be good at that.
+
+55
+00:03:35,000 --> 00:03:40,000
+A good set of us, not most of us, though, will also have a lot of respect and implement a lot of
+
+56
+00:03:40,000 --> 00:03:43,000
+managerial controls or administrative controls, such as policies.
+
+57
+00:03:44,000 --> 00:03:50,000
+And of course, we're all doing the day to day work, but not many of security people nowadays think
+
+58
+00:03:50,000 --> 00:03:51,000
+of physical controls.
+
+59
+00:03:51,000 --> 00:03:55,000
+Physical controls are really important, like I mentioned earlier.
+
+60
+00:03:55,000 --> 00:04:01,000
+You can have the best encryption on on your servers, but if I can just walk into the organization and
+
+61
+00:04:01,000 --> 00:04:06,000
+pick up a workstation, pick up the data and just walk back out, you don't really have good controls,
+
+62
+00:04:06,000 --> 00:04:06,000
+do you?
+
+63
+00:04:07,000 --> 00:04:13,000
+So physical controls are measures taken to protect the actual hardware and facilities that house the
+
+64
+00:04:13,000 --> 00:04:14,000
+system.
+
+65
+00:04:14,000 --> 00:04:17,000
+So these are controls we use to protect the actual physical hardware.
+
+66
+00:04:17,000 --> 00:04:23,000
+Like somebody just can't walk in and pick up my firewall, really expensive device and walk back out
+
+67
+00:04:23,000 --> 00:04:24,000
+with it.
+
+68
+00:04:24,000 --> 00:04:26,000
+So that's going to include things like what.
+
+69
+00:04:26,000 --> 00:04:31,000
+Well, that's going to include things like cameras, security guards, fences, signs, lighting and
+
+70
+00:04:31,000 --> 00:04:34,000
+so on that we can use in the physical vicinity.
+
+71
+00:04:34,000 --> 00:04:38,000
+Now, we do have a whole lesson on physical security coming up later.
+
+72
+00:04:39,000 --> 00:04:39,000
+Okay.
+
+73
+00:04:39,000 --> 00:04:43,000
+So keep in mind that we have four categories.
+
+74
+00:04:43,000 --> 00:04:45,000
+Technical things you can figure.
+
+75
+00:04:46,000 --> 00:04:48,000
+Are manager or administrative.
+
+76
+00:04:48,000 --> 00:04:48,000
+Same thing.
+
+77
+00:04:48,000 --> 00:04:50,000
+Those are going to be things on paper.
+
+78
+00:04:50,000 --> 00:04:56,000
+Operational things you do on a day to day basis and then come physical things you can touch and feel
+
+79
+00:04:56,000 --> 00:04:59,000
+to protect physical assets within the environment.
+
+80
+00:04:59,000 --> 00:05:02,000
+Make sure you know what they are and what they're doing to protect you.
+

03 - Security Controls Categories and Types/002 Control Types OB 1.1.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:cc1f860e5998ef88bd6cfe5ce60130f243d176797aecbc16ec1201221e637d92
+size 230762032

03 - Security Controls Categories and Types/002 Control Types OB 1.1_en.srt

@@ -0,0 +1,400 @@
+1
+00:00:00,000 --> 00:00:05,000
+When protecting your network, you're going to be using a whole lot of controls and a lot of the controls
+
+2
+00:00:05,000 --> 00:00:08,000
+that we have falls into multiple types.
+
+3
+00:00:08,000 --> 00:00:10,000
+So let's see what these types are in this video.
+
+4
+00:00:10,000 --> 00:00:14,000
+So the first thing that we're going to have is we're going to go through one of the most common types
+
+5
+00:00:14,000 --> 00:00:18,000
+that most people think about is going to be preventative types or preventative controls.
+
+6
+00:00:18,000 --> 00:00:21,000
+You see preventative controls will stop.
+
+7
+00:00:21,000 --> 00:00:24,000
+An intrusion will stop a security incident from arising.
+
+8
+00:00:24,000 --> 00:00:27,000
+So they'll stop all kinds of incidents.
+
+9
+00:00:27,000 --> 00:00:31,000
+This is going to include things like firewalls, encryption, access control, and even physical things
+
+10
+00:00:31,000 --> 00:00:33,000
+that could security guard or a fence.
+
+11
+00:00:33,000 --> 00:00:40,000
+Now, before I get it more into this, I want to I want to keep remind you guys that a single control
+
+12
+00:00:40,000 --> 00:00:42,000
+falls into multiple types.
+
+13
+00:00:42,000 --> 00:00:42,000
+All right.
+
+14
+00:00:42,000 --> 00:00:48,000
+Some controls may only be one type, but generally a lot of the controls that we use falls into multiple
+
+15
+00:00:48,000 --> 00:00:48,000
+types.
+
+16
+00:00:48,000 --> 00:00:51,000
+So I want you guys take a look at this firewall that I have here.
+
+17
+00:00:51,000 --> 00:00:52,000
+So this is a sonicwall.
+
+18
+00:00:52,000 --> 00:01:00,000
+And this particular firewall will stop all kinds of malicious traffic from entering my network.
+
+19
+00:01:00,000 --> 00:01:03,000
+So let's say there's a malicious worm spreading around on the internet.
+
+20
+00:01:03,000 --> 00:01:07,000
+Well this this one here has the internet port here.
+
+21
+00:01:07,000 --> 00:01:09,000
+And it has a switch port on this end.
+
+22
+00:01:10,000 --> 00:01:10,000
+All right.
+
+23
+00:01:10,000 --> 00:01:12,000
+Actually, uh, the switchboard connected here.
+
+24
+00:01:12,000 --> 00:01:15,000
+So internet comes in here.
+
+25
+00:01:15,000 --> 00:01:18,000
+The firewall then assesses the traffic and says, hey, you're a worm.
+
+26
+00:01:18,000 --> 00:01:18,000
+Boom.
+
+27
+00:01:18,000 --> 00:01:21,000
+You're not coming in here and stops it from going out to Switchport.
+
+28
+00:01:21,000 --> 00:01:22,000
+So what happens?
+
+29
+00:01:22,000 --> 00:01:24,000
+This device stopped an intrusion.
+
+30
+00:01:24,000 --> 00:01:27,000
+So this is a good preventative device.
+
+31
+00:01:27,000 --> 00:01:31,000
+Another kind of control we're going to have is going to be called a detective control.
+
+32
+00:01:31,000 --> 00:01:35,000
+Detective controls can detect intrusions as they're happening.
+
+33
+00:01:35,000 --> 00:01:39,000
+This is going to be something like an intrusion detection system such as snort.
+
+34
+00:01:39,000 --> 00:01:46,000
+So snort very popular software that you can download right now and try out snort will actually absorb
+
+35
+00:01:46,000 --> 00:01:51,000
+all your network traffic and then analyze the traffic and says, hey, that computer over there, that
+
+36
+00:01:51,000 --> 00:01:52,000
+computer has a worm.
+
+37
+00:01:52,000 --> 00:01:54,000
+That one there is being hacked.
+
+38
+00:01:54,000 --> 00:01:59,000
+So this is detecting intrusions also that can happen here in the world of physical is going to be things
+
+39
+00:01:59,000 --> 00:02:05,000
+like a video surveillance camera watching people, security guards watching them can detect them committing
+
+40
+00:02:05,000 --> 00:02:06,000
+a crime.
+
+41
+00:02:06,000 --> 00:02:07,000
+Corrective control.
+
+42
+00:02:07,000 --> 00:02:12,000
+Well, when there is a security incident and something has gone wrong in your network, you have to
+
+43
+00:02:12,000 --> 00:02:14,000
+remember that we have to go and fix it.
+
+44
+00:02:14,000 --> 00:02:17,000
+We just after it's done, we got to go fix it.
+
+45
+00:02:17,000 --> 00:02:19,000
+Let's say a computer got infected with a virus.
+
+46
+00:02:19,000 --> 00:02:22,000
+The virus deletes the data, corrupts the entire machine.
+
+47
+00:02:22,000 --> 00:02:25,000
+Well, somebody needs to go in here and do this control.
+
+48
+00:02:25,000 --> 00:02:31,000
+Somebody needs to restore those backups and reinstall windows on those particular machines.
+
+49
+00:02:32,000 --> 00:02:35,000
+Another one we have is what's called a deterrent control.
+
+50
+00:02:35,000 --> 00:02:37,000
+Deterrent control will scare people off.
+
+51
+00:02:37,000 --> 00:02:40,000
+Deterrent control will discourage a threat.
+
+52
+00:02:40,000 --> 00:02:47,000
+So, for example, a camera is a kind of a not only is this a detective as this can detect people coming
+
+53
+00:02:47,000 --> 00:02:49,000
+to crime, but this can also scare people off.
+
+54
+00:02:49,000 --> 00:02:52,000
+Now I want you to keep in mind the turn versus preventive.
+
+55
+00:02:52,000 --> 00:02:53,000
+So watch this.
+
+56
+00:02:53,000 --> 00:02:54,000
+Here's a camera.
+
+57
+00:02:54,000 --> 00:02:55,000
+It's watching my desk.
+
+58
+00:02:55,000 --> 00:03:02,000
+So if we position this camera here to watch this desk, and I'm a bad guy and I go to steal my tablet,
+
+59
+00:03:02,000 --> 00:03:05,000
+let's say I want to steal my tablet and run off.
+
+60
+00:03:05,000 --> 00:03:07,000
+Well, this camera doesn't do anything.
+
+61
+00:03:07,000 --> 00:03:08,000
+It just sits here.
+
+62
+00:03:08,000 --> 00:03:11,000
+Its hands don't come out the camera and stop me.
+
+63
+00:03:11,000 --> 00:03:18,000
+This is only here to scare me and detect me, discourage me and detect me from stealing a particular
+
+64
+00:03:18,000 --> 00:03:19,000
+thing or committing a crime.
+
+65
+00:03:19,000 --> 00:03:23,000
+You see, this is detective.
+
+66
+00:03:23,000 --> 00:03:25,000
+This is deterrent.
+
+67
+00:03:25,000 --> 00:03:27,000
+But this is not preventative.
+
+68
+00:03:27,000 --> 00:03:29,000
+This doesn't prevent a security guard, though.
+
+69
+00:03:29,000 --> 00:03:32,000
+Can see they have surveillance.
+
+70
+00:03:32,000 --> 00:03:35,000
+They can deter because they're standing there.
+
+71
+00:03:35,000 --> 00:03:36,000
+Maybe they have a gun.
+
+72
+00:03:36,000 --> 00:03:38,000
+And of course there are.
+
+73
+00:03:38,000 --> 00:03:42,000
+They're going to detect, prevent and deter me.
+
+74
+00:03:42,000 --> 00:03:42,000
+All right.
+
+75
+00:03:42,000 --> 00:03:43,000
+So they can do a lot.
+
+76
+00:03:43,000 --> 00:03:46,000
+Like I said, one control can fall into multiple.
+
+77
+00:03:46,000 --> 00:03:49,000
+Another one we have is the directive control.
+
+78
+00:03:49,000 --> 00:03:52,000
+So a directive control is when we're going to.
+
+79
+00:03:53,000 --> 00:04:01,000
+Have, uh, all kinds of instructions on how to use a system to prevent a response to security incidents,
+
+80
+00:04:01,000 --> 00:04:07,000
+and particularly having different kind of policies would tell people how to use our systems, compensate
+
+81
+00:04:07,000 --> 00:04:09,000
+and control compensating controllers.
+
+82
+00:04:09,000 --> 00:04:14,000
+When you don't have the best control available, you go well with the second best.
+
+83
+00:04:14,000 --> 00:04:18,000
+You can say, well, he's compensating because he can't do that particular task.
+
+84
+00:04:18,000 --> 00:04:19,000
+So.
+
+85
+00:04:19,000 --> 00:04:26,000
+For example, let's say the best control out there is going to be the highest end firewall, next generation
+
+86
+00:04:26,000 --> 00:04:27,000
+firewall.
+
+87
+00:04:27,000 --> 00:04:27,000
+You don't have that one.
+
+88
+00:04:27,000 --> 00:04:31,000
+You don't have the resources or budget for it, so you get the next best one.
+
+89
+00:04:31,000 --> 00:04:35,000
+Remember, this one is when you don't have the primary control, you go with the second best one.
+
+90
+00:04:35,000 --> 00:04:38,000
+That's going to be a compensating control.
+
+91
+00:04:38,000 --> 00:04:38,000
+Okay.
+
+92
+00:04:38,000 --> 00:04:44,000
+So once again guys, I really want to point out that if you're sitting here saying, well, if you can
+
+93
+00:04:44,000 --> 00:04:48,000
+think of a particular control that I haven't mentioned and you're saying, well, hey, that sounds
+
+94
+00:04:48,000 --> 00:04:52,000
+like a complete compensator, that sounds like a detective, that sounds like a preventative.
+
+95
+00:04:52,000 --> 00:04:53,000
+It probably is.
+
+96
+00:04:53,000 --> 00:04:58,000
+Now on your exam, they may give you a particular scenario, and you're going to have to say, well,
+
+97
+00:04:58,000 --> 00:05:01,000
+that's a detective, that's a deterrent.
+
+98
+00:05:01,000 --> 00:05:02,000
+Or they may even give it to you.
+
+99
+00:05:02,000 --> 00:05:04,000
+And you may have to say what category it falls in.
+
+100
+00:05:04,000 --> 00:05:06,000
+Just make sure you know your types and categories for your test.
+

03 - Security Controls Categories and Types/003 Defense in Depth OB 1.1.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:f07f37584be67761f48e45ff75e8985c7917d39aa5d30329262f0a0ab5fae5d9
+size 159103460

03 - Security Controls Categories and Types/003 Defense in Depth OB 1.1_en.srt

@@ -0,0 +1,236 @@
+1
+00:00:00,000 --> 00:00:06,000
+A good security professional doesn't secure a network with a single control, or a single type or category
+
+2
+00:00:06,000 --> 00:00:07,000
+of control.
+
+3
+00:00:07,000 --> 00:00:11,000
+A security professional secures a network using a multi-layered approach.
+
+4
+00:00:11,000 --> 00:00:14,000
+So that brings me to this section layered security.
+
+5
+00:00:14,000 --> 00:00:20,000
+One of the more important concepts you'll ever learn in this entire video series is going to be this
+
+6
+00:00:20,000 --> 00:00:21,000
+concept of defense in depth.
+
+7
+00:00:21,000 --> 00:00:29,000
+Defense in depth is using multiple or layers of controls in order to secure a network.
+
+8
+00:00:29,000 --> 00:00:33,000
+It's not just one layer, it's going to be multiple layers.
+
+9
+00:00:33,000 --> 00:00:37,000
+And for that, I want to draw you guys a particular diagram.
+
+10
+00:00:37,000 --> 00:00:37,000
+Where is that pen.
+
+11
+00:00:38,000 --> 00:00:38,000
+Here we go.
+
+12
+00:00:39,000 --> 00:00:41,000
+So I want to show you guys something.
+
+13
+00:00:41,000 --> 00:00:43,000
+Let's say you have a network.
+
+14
+00:00:43,000 --> 00:00:45,000
+And in the network there's data.
+
+15
+00:00:45,000 --> 00:00:45,000
+All right.
+
+16
+00:00:45,000 --> 00:00:48,000
+So data is what you're trying to protect.
+
+17
+00:00:48,000 --> 00:00:51,000
+Well you're going to secure that data with a firewall.
+
+18
+00:00:51,000 --> 00:00:52,000
+Well that's just one layer.
+
+19
+00:00:52,000 --> 00:00:58,000
+Then around that you're going to use procedures or policies to tell people, hey, don't share this
+
+20
+00:00:58,000 --> 00:00:58,000
+data.
+
+21
+00:00:58,000 --> 00:01:00,000
+Don't give away this data.
+
+22
+00:01:00,000 --> 00:01:06,000
+And then around this also, you're going to be using physical things like a security guard or a fence.
+
+23
+00:01:07,000 --> 00:01:09,000
+You can see why I don't write too much.
+
+24
+00:01:09,000 --> 00:01:10,000
+Not the best handwriting there.
+
+25
+00:01:10,000 --> 00:01:16,000
+Okay, so you notice that when we're secure in our data, we're not just securing the data with just
+
+26
+00:01:16,000 --> 00:01:18,000
+one control.
+
+27
+00:01:18,000 --> 00:01:23,000
+You're using multiple controls across multiple categories.
+
+28
+00:01:23,000 --> 00:01:28,000
+For example, you're just not going to use a firewall, but you're going to use firewall and encryption.
+
+29
+00:01:28,000 --> 00:01:31,000
+That's two technical controls.
+
+30
+00:01:31,000 --> 00:01:36,000
+You're going to use a policy and a procedure to administrative control.
+
+31
+00:01:36,000 --> 00:01:39,000
+You're going to use physical media protection.
+
+32
+00:01:39,000 --> 00:01:44,000
+You're going to use a variety, a whole variety and different kinds of physical controls out there.
+
+33
+00:01:44,000 --> 00:01:49,000
+So when you think of securing a network, you know, I gave this example, I know I'm sound like a broken
+
+34
+00:01:49,000 --> 00:01:54,000
+record, but if I can walk into the network and pick up your data and walk back out, you really don't
+
+35
+00:01:54,000 --> 00:01:56,000
+have much security, right?
+
+36
+00:01:56,000 --> 00:02:01,000
+I don't care what it is because a hacker, bad people, they're just not going to try to break into
+
+37
+00:02:01,000 --> 00:02:03,000
+your organization one way.
+
+38
+00:02:03,000 --> 00:02:05,000
+They're going to use multiple ways.
+
+39
+00:02:05,000 --> 00:02:10,000
+For example, if I can't break through your firewall because this device is updated.
+
+40
+00:02:12,000 --> 00:02:15,000
+I'll just try to call a user and ask them for the data.
+
+41
+00:02:15,000 --> 00:02:18,000
+They already have access to the data, they can email it to me.
+
+42
+00:02:18,000 --> 00:02:23,000
+I defeated all your security users, or people that are known as some of the weakest link in security.
+
+43
+00:02:23,000 --> 00:02:24,000
+That's what we have to train them.
+
+44
+00:02:24,000 --> 00:02:30,000
+Well, if that doesn't, if I can't get to a user, uh, nobody's giving me the data.
+
+45
+00:02:30,000 --> 00:02:32,000
+I can't get through your firewall.
+
+46
+00:02:33,000 --> 00:02:37,000
+I'll just wait till the night everybody goes home or break into your office and steal all your data.
+
+47
+00:02:37,000 --> 00:02:41,000
+That way I'll take up the whole server, just walk back out, you see why you need this multi-layered
+
+48
+00:02:41,000 --> 00:02:42,000
+approach.
+
+49
+00:02:42,000 --> 00:02:44,000
+So this is known as defense in depth.
+
+50
+00:02:45,000 --> 00:02:53,000
+And you want to make sure that all entry points is mitigated or assessed, and make sure that you have
+
+51
+00:02:53,000 --> 00:02:56,000
+the right control to protect your right data.
+
+52
+00:02:57,000 --> 00:03:01,000
+And I want to mention that when it comes to IT security, don't be single minded.
+
+53
+00:03:01,000 --> 00:03:05,000
+Don't be narrow focused way too often in IT security.
+
+54
+00:03:05,000 --> 00:03:10,000
+Are we focused only on one thing which is logical controls, technical controls.
+
+55
+00:03:10,000 --> 00:03:10,000
+Right.
+
+56
+00:03:10,000 --> 00:03:11,000
+Configuring this firewall.
+
+57
+00:03:11,000 --> 00:03:17,000
+Don't forget guys, it's where we don't see that they see in order to steal our information.
+
+58
+00:03:17,000 --> 00:03:22,000
+That's why in this course we're going to learn a variety of different ways to protect our network and
+
+59
+00:03:22,000 --> 00:03:23,000
+keep our data secure.
+

03 - Security Controls Categories and Types/004 Quick Quiz.html

@@ -0,0 +1,479 @@
+<!DOCTYPE html>
+<html lang="en">
+    <head>
+        <meta charset="UTF-8" />
+        <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+        <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+        <title>Quiz</title>
+        <style>
+            * {
+                font-family: system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen, Ubuntu, Cantarell,
+                    "Open Sans", "Helvetica Neue", sans-serif;
+                margin: 0;
+                padding: 0;
+                box-sizing: border-box;
+                font-size: 16px;
+            }
+
+            main {
+                padding-top: 48px;
+            }
+
+            :root {
+                --large-device-width: 850px;
+                --primary-color: #0f172a;
+                --secondary-color: #020617;
+                --primary-text-color: #c7d1dd;
+                --secondary-text-color: #061602;
+                --success-background: hsl(159, 82%, 24%);
+                --success-foreground: hsl(164, 86%, 16%);
+                --success: hsl(160, 84%, 39%);
+                --danger: #ef4444;
+                --warning: #f59e0b;
+                --info-background: hsl(218, 81%, 8%);
+                --info-foreground: hsl(217, 91%, 85%);
+                --border-color: #d1d7dc;
+                --check-box-size: 20px;
+                /* control the size */
+                --check-box-color: var(--info-foreground);
+                /* the active color */
+            }
+
+            body {
+                position: relative;
+                background-color: #020617;
+                color: var(--primary-text-color);
+            }
+
+            #score-stats-container {
+                position: fixed;
+                z-index: 10;
+                top: 0;
+                height: 40px;
+                width: 100%;
+                background-color: var(--info-background);
+
+                padding: 0px 16px;
+                color: var(--info-foreground);
+                font-weight: 600;
+                display: flex;
+                align-items: center;
+                justify-content: space-between;
+            }
+
+            #quiz-container {
+                border-radius: 8px;
+                display: flex;
+                gap: 16px;
+                flex-direction: column;
+            }
+
+            input[type="radio"] {
+                height: var(--check-box-size);
+                aspect-ratio: 1;
+                border: calc(var(--check-box-size) / 8) solid #939393;
+                padding: calc(var(--check-box-size) / 8);
+                background: radial-gradient(farthest-side, var(--check-box-color) 94%, #0000) 50%/0 0 no-repeat
+                    content-box;
+                border-radius: 50%;
+                outline-offset: calc(var(--check-box-size) / 10);
+                -webkit-appearance: none;
+                -moz-appearance: none;
+                appearance: none;
+                cursor: pointer;
+                font-size: inherit;
+                transition: 0.3s;
+            }
+
+            input[type="radio"]:checked {
+                border-color: var(--check-box-color);
+                background-size: 100% 100%;
+            }
+
+            input[type="radio"]:disabled {
+                background: linear-gradient(#939393 0 0) 50%/100% 20% no-repeat content-box;
+                opacity: 0.5;
+                cursor: not-allowed;
+            }
+
+            label {
+                display: inline-flex;
+                align-items: center;
+                gap: 10px;
+                cursor: pointer;
+                padding: 4px 6px;
+                border-radius: 4px;
+            }
+
+            @media (max-width: 767px) {
+                input[type="radio"],
+                label {
+                    cursor: default;
+                }
+
+                #quiz-container {
+                    margin-left: 8px;
+                    margin-right: 8px;
+                }
+            }
+
+            /* PC (Desktop devices) */
+            @media (min-width: 768px) {
+                body {
+                    display: flex;
+                    justify-content: center;
+                }
+
+                main {
+                    max-width: var(--large-device-width);
+                }
+
+                #score-stats-container {
+                    max-width: var(--large-device-width);
+                }
+
+                dialog {
+                    max-width: var(--large-device-width);
+                }
+            }
+
+            @media print {
+                input[type="radio"] {
+                    background: none !important;
+                    border-color: #939393 !important;
+                }
+
+                input[type="radio"]:checked {
+                    border-color: #939393 !important;
+                }
+            }
+
+            .question-lable {
+                display: flex;
+                align-items: center;
+                gap: 8px;
+            }
+
+            button {
+                -webkit-tap-highlight-color: transparent;
+                -webkit-touch-callout: none;
+                -webkit-user-select: none;
+                user-select: none;
+                outline: none;
+                position: relative;
+                overflow: hidden;
+                cursor: pointer;
+            }
+
+            .button {
+                background-color: var(--success-background);
+                border: none;
+                color: #f4f5f7;
+                opacity: 0.8;
+                font-size: 18px;
+                flex-grow: 1;
+                padding: 8px 16px;
+                border-radius: 8px;
+            }
+
+            .button:hover {
+                opacity: 1;
+            }
+
+            .explanation-btn {
+                border: none;
+                color: var(--success);
+                background-color: transparent;
+            }
+
+            #submit-button:active::after {
+                background-color: #ef4444;
+            }
+
+            .single-question-container {
+                background-color: var(--primary-color);
+                display: flex;
+                flex-direction: column;
+                gap: 8px;
+                padding: 16px;
+                border-radius: 8px;
+            }
+
+            #modal-content {
+                padding: 16px;
+                line-height: 24px;
+            }
+
+            dialog::backdrop {
+                background: rgba(0, 0, 0, 0.5);
+            }
+
+            dialog {
+                position: fixed;
+                border: 1px solid var(--border-color);
+                background-color: var(--primary-color);
+                color: rgb(240, 241, 248);
+                padding: 16px;
+                border-radius: 8px;
+                width: 80vw;
+                max-height: 80vh;
+                overflow: auto;
+                top: 50%;
+                left: 50%;
+                -webkit-transform: translateX(-50%) translateY(-50%);
+                -moz-transform: translateX(-50%) translateY(-50%);
+                -ms-transform: translateX(-50%) translateY(-50%);
+                transform: translateX(-50%) translateY(-50%);
+            }
+
+            #close-modal-btn {
+                position: absolute;
+                top: 4px;
+                right: 4px;
+                padding: 2px 8px;
+                border-radius: 2px;
+                border: none;
+                background-color: var(--danger);
+            }
+
+            .correct-answer label {
+                border: 2px solid var(--success);
+                width: 100%;
+            }
+
+            .incorrect-answer label {
+                border: 2px solid var(--danger);
+                width: 100%;
+            }
+
+            .options-container {
+                display: flex;
+                flex-direction: column;
+                gap: 4px;
+            }
+
+            #quiz-meta-container {
+                border-radius: 8px;
+                background-color: var(--primary-color);
+                margin-bottom: 12px;
+                padding: 8px;
+            }
+
+            #quiz-title {
+                text-align: center;
+                font-size: 24px;
+                margin-bottom: 8px;
+            }
+
+            #quiz-description {
+                line-height: 1.5;
+                padding: 2px 6px;
+            }
+        </style>
+    </head>
+
+    <body onload="main()">
+        <main>
+            <section id="quiz-meta-container">
+                <h1 id="quiz-title"></h1>
+                <p id="quiz-description"></p>
+            </section>
+            <section id="score-stats-container">
+                <div id="score-card">
+                    Score: <span id="current-score">999</span> of
+                    <span id="pass-percent">999%</span>
+                </div>
+                <div>Correct: <span id="correct-answers">999</span></div>
+                <div>Incorrect: <span id="wrong-answers">999</span></div>
+            </section>
+
+            <section id="quiz-container"></section>
+
+            <dialog id="modal" class="modal-container">
+                <div id="modal-content">
+                    <p id="modal-text"></p>
+                </div>
+            </dialog>
+        </main>
+
+        <script>
+            const quizData = {"quiz_id": 6180064, "quiz_description": null, "quiz_title": "Quick Quiz", "pass_percent": null, "questions": [{"_class": "assessment", "id": 74726560, "assessment_type": "multiple-choice", "prompt": {"question": "<p>A security manager regularly reviews access logs to identify any unauthorized attempts to access the system. This activity is classified under which type of control?</p>", "relatedLectureIds": "", "feedbacks": ["", "Reviewing access logs falls under detective controls as it involves identifying and reporting unauthorized activities post-occurrence. Preventive controls would stop unauthorized access before it happens, compensating controls are backup strategies, and operational controls relate to daily operational security measures.", "", ""], "answers": ["<p>Preventive</p>", "<p>Detective</p>", "<p>Compensating</p>", "<p>Operational</p>"]}, "correct_response": ["b"], "section": "", "question_plain": "A security manager regularly reviews access logs to identify any unauthorized attempts to access the system. This activity is classified under which type of control?", "related_lectures": []}, {"_class": "assessment", "id": 74726566, "assessment_type": "multiple-choice", "prompt": {"question": "<p>In an organization, the policy requires employees to wear visible ID badges. This policy is an example of which type of security control?</p>", "relatedLectureIds": "", "feedbacks": ["Requiring ID badges is a directive control as it involves a policy directing specific behavior. Physical controls involve tangible measures to protect assets, technical controls are implemented via technology, and deterrent controls aim to discourage security violations.", "", ""], "answers": ["<p>Directive</p>", "<p>Physical</p>", "<p>Technical</p>"]}, "correct_response": ["a"], "section": "", "question_plain": "In an organization, the policy requires employees to wear visible ID badges. This policy is an example of which type of security control?", "related_lectures": []}, {"_class": "assessment", "id": 74726570, "assessment_type": "multiple-choice", "prompt": {"question": "<p>he use of CCTV cameras in a facility primarily serves as what type of security control?</p>", "relatedLectureIds": "", "feedbacks": ["CCTV cameras act as a deterrent control by discouraging unauthorized actions due to the fear of being watched and recorded. Detective controls identify issues after they occur, preventive controls stop security incidents before they happen, and corrective controls rectify security breaches.", "", "", ""], "answers": ["<p>Deterrent</p>", "<p>Detective</p>", "<p>Preventive</p>", "<p>Corrective</p>"]}, "correct_response": ["a"], "section": "", "question_plain": "he use of CCTV cameras in a facility primarily serves as what type of security control?", "related_lectures": []}, {"_class": "assessment", "id": 74726574, "assessment_type": "multiple-choice", "prompt": {"question": "<p>An organization conducts regular training for employees on security policies and procedures. This is an example of which category of security controls?</p>", "relatedLectureIds": "", "feedbacks": ["", "", "Operational controls includes security awareness training. ", ""], "answers": ["<p>Managerial</p>", "<p>Technical</p>", "<p>Operational</p>", "<p>Physical</p>"]}, "correct_response": ["c"], "section": "", "question_plain": "An organization conducts regular training for employees on security policies and procedures. This is an example of which category of security controls?", "related_lectures": []}, {"_class": "assessment", "id": 74726584, "assessment_type": "multiple-choice", "prompt": {"question": "<p>Encrypting data stored on a company server is considered which type of security control?</p>", "relatedLectureIds": "", "feedbacks": ["Encrypting data is a technical control, as it uses technology to protect information. Managerial controls involve strategic guidance, operational controls are daily security tasks, and physical controls are tangible measures for protection.", "", "", ""], "answers": ["<p>Technical</p>", "<p>Managerial</p>", "<p>Operational</p>", "<p>Physical</p>"]}, "correct_response": ["a"], "section": "", "question_plain": "Encrypting data stored on a company server is considered which type of security control?", "related_lectures": []}]};
+            let correct = new Set();
+            let incorrect = new Set();
+            let totalNumberOfQuestions = 0;
+            const quizTitle = quizData.quiz_title;
+            const quizDescription = quizData.quiz_description;
+            const questionData = quizData.questions;
+            const passPercent = quizData.pass_percent;
+            const modalTextElement = document.getElementById("modal-text");
+            const quizContainerElement = document.getElementById("quiz-container");
+
+            const dialog = document.querySelector("dialog");
+            const showButton = document.getElementById("view-explanatin");
+            const closeButton = document.getElementById("close-modal-btn");
+            const quizTitleElement = document.getElementById("quiz-title");
+            const quizDescriptionElement = document.getElementById("quiz-description");
+
+            function main() {
+                // update quiz meta data
+                document.title = quizTitle;
+                quizTitleElement.innerHTML = quizTitle;
+                quizDescriptionElement.innerHTML = quizDescription;
+
+                const passPercentElement = document.getElementById("pass-percent");
+                passPercentElement.innerHTML = passPercent + "%";
+                totalNumberOfQuestions = questionData.length;
+                // shuffle the questionData to randomize the order of the questions
+                for (let i = questionData.length - 1; i > 0; i--) {
+                    const j = Math.floor(Math.random() * (i + 1));
+                    [questionData[i], questionData[j]] = [questionData[j], questionData[i]];
+                }
+
+                let formattedQuestions = questionData.map(formatSingleQuestionData);
+                updateScore();
+                // display the formattedQuestions
+                formattedQuestions.forEach((question, idx) => {
+                    renderSingleQuestion(question, idx + 1);
+                });
+            }
+
+            /**
+             * Formats the question data from the given QuizData object.
+             *
+             * @param {Object} singleQuizData - The singleQuizData object containing prompt and correct_response.
+             * @return {Object} The formatted question object with the following properties:
+             *   - id: The ID of the question.
+             *   - question: The text of the question.
+             *   - answers: The array of answer options.
+             *   - correctAnswer: The text of the correct answer.
+             *   - explanation: The explanation of the correct answer.
+             */
+            function formatSingleQuestionData(singleQuizData = null) {
+                const { prompt, correct_response, id } = singleQuizData;
+                const questionText = prompt.question;
+                const answers = prompt.answers;
+                const correctAnswer = correct_response[0];
+                const correctAnswerText = answers[correctAnswer.toLowerCase().charCodeAt(0) - 97];
+                const questionObj = {
+                    id: id,
+                    question: questionText,
+                    answers: answers,
+                    correctAnswer: correctAnswerText,
+                    explanation: prompt?.explanation || "",
+                };
+                return questionObj;
+            }
+
+            /**
+             * Renders a single question with its options and submit button.
+             *
+             * @param {Object} singleQuestionData - The data of the question to render.
+             * @param {number} rootIndex - The index of the question in the quiz.
+             * @return {void} return nothing.
+             */
+
+            const renderSingleQuestion = (singleQuestionData = {}, rootIndex = 1) => {
+                const { id, explanation, answers, correctAnswer, question } = singleQuestionData;
+                // shuffle the answers to randomize the order of the answers
+                for (let i = answers.length - 1; i > 0; i--) {
+                    const j = Math.floor(Math.random() * (i + 1));
+                    [answers[i], answers[j]] = [answers[j], answers[i]];
+                }
+                const optionsHTML = answers
+                    .map((option, index) => {
+                        const optionId = `${id}_${index}`;
+
+                        return `
+        <div class="question-lable">
+          <input type="radio" id="${optionId}" name="${"answer"}" value="${option}" />
+          <label for="${optionId}">${option}</label>
+        </div>
+      `;
+                    })
+
+                    .join("");
+
+                const container = document.createElement("div");
+                container.innerHTML = `
+        <form data-correct-answer="${correctAnswer}" data-question-id="${id}" class="single-question-container" onsubmit="submitButtonListener(event)">
+          <div style="display: flex;justify-content: space-between;">
+            <p style="font-weight: 600">Question ${rootIndex}:</p>
+            <button type="button" onclick="renderExplanation(event)" id="${`explanation-${id}`}" data-explanation="${explanation}" class="explanation-btn">View Explanation</button>
+          </div>
+          <p style="margin-bottom: 8px;line-height: 1.5">${question}</p>
+          <div class="options-container">
+            ${optionsHTML}
+          </div>
+          <div style="display: flex; gap: 8px;">
+            <button type="submit" id="submit-button" class="button">Submit</button>
+          </div>
+        </form>
+      `;
+                quizContainerElement.appendChild(container);
+            };
+
+            /**
+             * Updates the score on the page based on the number of correct and incorrect answers.
+             *
+             * @return {void} This function does not return a value.
+             */
+            function updateScore() {
+                const currentParcentageElement = document.getElementById("current-score");
+                const correctAnswerElement = document.getElementById("correct-answers");
+                const wrongAnswerElement = document.getElementById("wrong-answers");
+                correctAnswerElement.innerHTML = correct.size;
+                wrongAnswerElement.innerHTML = incorrect.size;
+                const score = Number((correct.size / totalNumberOfQuestions) * 100).toFixed(2);
+                currentParcentageElement.innerHTML = score;
+            }
+
+            /**
+             * Handles the event when the submit button is clicked.
+             *
+             * @param {Event} e - The event object.
+             * @return {void} This function does not return anything.
+             */
+            const submitButtonListener = (e) => {
+                e.preventDefault();
+                const formData = new FormData(e.target);
+                const form = e.target;
+                const selectedOption = e.target.querySelector('input[type="radio"]:checked');
+                if (!selectedOption) {
+                    alert("Please select an answer!");
+                    return;
+                }
+
+                let isCorrect = false;
+                const { answer: userAnswer } = Object.fromEntries(formData.entries());
+                const correctAnswer = e.target.dataset.correctAnswer;
+                const questionId = e.target.dataset.questionId;
+                if (userAnswer == correctAnswer) {
+                    correct.add(questionId);
+                    incorrect.delete(questionId);
+                    isCorrect = true;
+                } else {
+                    incorrect.add(e.target.dataset.questionId);
+                    correct.delete(questionId);
+                }
+                updateScore();
+
+                const resultClass = isCorrect ? "correct-answer" : "incorrect-answer";
+
+                form.querySelectorAll(".question-lable").forEach((label) => {
+                    label.classList.remove("correct-answer", "incorrect-answer");
+                });
+                selectedOption.closest(".question-lable").classList.add(resultClass);
+            };
+
+            function renderExplanation(ev) {
+                modalTextElement.innerHTML = ev.target.dataset?.explanation || "no explanation found";
+                dialog.showModal();
+                dialog.addEventListener("click", (event) => {
+                    if (event.target === dialog) {
+                        dialog.close();
+                    }
+                });
+            }
+        </script>
+    </body>
+</html>

04 - Threats/001 Threats Motivation OB 2.1.mp4

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:9356fb1da896565f0c255d84da13296f4335204cfa11175e0889fcb7f67e1b72
+size 261867505

04 - Threats/001 Threats Motivation OB 2.1_en.srt

@@ -0,0 +1,384 @@
+1
+00:00:00,000 --> 00:00:04,000
+One of the questions you really have to ask yourself is, why are they coming after me?
+
+2
+00:00:04,000 --> 00:00:06,000
+Why are they breaking into my network?
+
+3
+00:00:06,000 --> 00:00:07,000
+My network is small.
+
+4
+00:00:07,000 --> 00:00:09,000
+Do I have something that they want?
+
+5
+00:00:09,000 --> 00:00:15,000
+Many organizations, sometimes even nonprofit organizations, are hit with particular attacks.
+
+6
+00:00:15,000 --> 00:00:17,000
+And they left themselves asking, well, why are they coming after us?
+
+7
+00:00:17,000 --> 00:00:19,000
+We don't have much data.
+
+8
+00:00:19,000 --> 00:00:22,000
+We don't have much money, if any money at all.
+
+9
+00:00:22,000 --> 00:00:23,000
+Why are we being attacked?
+
+10
+00:00:23,000 --> 00:00:26,000
+Maybe because they're being attacked for a political gain.
+
+11
+00:00:26,000 --> 00:00:30,000
+Maybe people just don't like what that nonprofit is doing or what they support.
+
+12
+00:00:31,000 --> 00:00:38,000
+You see, when you most you see when most people think of a motivation for these particular threats,
+
+13
+00:00:38,000 --> 00:00:40,000
+they're thinking generally of.
+
+14
+00:00:40,000 --> 00:00:45,000
+The last thing that I have on my list here in this slide is ten of them, basically is just for financial
+
+15
+00:00:45,000 --> 00:00:46,000
+gains.
+
+16
+00:00:46,000 --> 00:00:49,000
+But there's a lot more than just financial gains.
+
+17
+00:00:49,000 --> 00:00:56,000
+So one of the most common things that people do, one of the most common motivations for attacks against
+
+18
+00:00:56,000 --> 00:01:02,000
+your company, is basically stealing data from the target, taking taking the data right out of the
+
+19
+00:01:02,000 --> 00:01:07,000
+organization, maybe by using some kind of ransomware or backdoor attacks.
+
+20
+00:01:07,000 --> 00:01:11,000
+Another one is going to be espionage, just spying on what you're doing.
+
+21
+00:01:11,000 --> 00:01:13,000
+They're not manipulating or changing the information.
+
+22
+00:01:13,000 --> 00:01:16,000
+They're just basically spying on your information.
+
+23
+00:01:16,000 --> 00:01:21,000
+This is famous for when a nation states do this to each other.
+
+24
+00:01:21,000 --> 00:01:26,000
+So, for example, North Korea may try to break into the United States government to see what kind of
+
+25
+00:01:26,000 --> 00:01:28,000
+weapons we are developing, and vice versa.
+
+26
+00:01:28,000 --> 00:01:31,000
+Other governments will do it to other governments also.
+
+27
+00:01:31,000 --> 00:01:33,000
+You're also going to have service disruptions.
+
+28
+00:01:33,000 --> 00:01:38,000
+So for example, DDoS distributed denial of service attacks.
+
+29
+00:01:38,000 --> 00:01:40,000
+These are going to be attacks that you can.
+
+30
+00:01:41,000 --> 00:01:49,000
+Spin up all kinds of bots on the internet, and then load up these bots on a particular web server.
+
+31
+00:01:49,000 --> 00:01:54,000
+In other words, generates so much traffic to a particular web server that the web server goes offline.
+
+32
+00:01:54,000 --> 00:01:59,000
+This disrupts the service of that website to other particular users.
+
+33
+00:01:59,000 --> 00:02:03,000
+Hacktivists may do this in order to promote a political agenda.
+
+34
+00:02:03,000 --> 00:02:11,000
+For example, if hacktivists believes that what this organization is doing is injust to their beliefs,
+
+35
+00:02:11,000 --> 00:02:15,000
+they may just shut that entire website off by sending it a whole bunch of traffic.
+
+36
+00:02:15,000 --> 00:02:21,000
+Not unheard of as famous hacker group anonymous has done this quite a lot to different government agencies.
+
+37
+00:02:21,000 --> 00:02:22,000
+Blackmail.
+
+38
+00:02:23,000 --> 00:02:25,000
+This is common with ransomware.
+
+39
+00:02:25,000 --> 00:02:29,000
+So what they do here is that they will steal your data.
+
+40
+00:02:29,000 --> 00:02:32,000
+They're going to hold on to it unless you pay that demand.
+
+41
+00:02:33,000 --> 00:02:38,000
+200,000 300,000 for small people may be a couple hundred bucks, couple thousand dollars.
+
+42
+00:02:38,000 --> 00:02:42,000
+Unless you pay that demand, they're going to release your data to the public.
+
+43
+00:02:42,000 --> 00:02:45,000
+So they're holding you ransom.
+
+44
+00:02:45,000 --> 00:02:46,000
+They're holding you blackmail.
+
+45
+00:02:46,000 --> 00:02:48,000
+So this is a form of blackmail.
+
+46
+00:02:49,000 --> 00:02:50,000
+Okay.
+
+47
+00:02:50,000 --> 00:02:52,000
+The others I have here is some kind of political belief.
+
+48
+00:02:54,000 --> 00:02:58,000
+Especially hacktivists, has a political belief, has a political agenda.
+
+49
+00:02:58,000 --> 00:03:01,000
+They don't support what the government is doing here.
+
+50
+00:03:01,000 --> 00:03:07,000
+They may shut down a government website, uh, they may deface the website, corrupt a particular website,
+
+51
+00:03:07,000 --> 00:03:11,000
+all going to be with political beliefs, ethical.
+
+52
+00:03:11,000 --> 00:03:16,000
+Some people believe that what they're doing is ethically correct.
+
+53
+00:03:16,000 --> 00:03:20,000
+They consider themselves a whistleblower or white hat hacker.
+
+54
+00:03:20,000 --> 00:03:24,000
+For example, let's say you work in an organization today.
+
+55
+00:03:25,000 --> 00:03:26,000
+I cannot see you.
+
+56
+00:03:26,000 --> 00:03:32,000
+Let's say somebody works in an organization today, and they feel that what this organization is doing
+
+57
+00:03:32,000 --> 00:03:37,000
+is illegal or bad for the public, even though it might be legal in the country's law.
+
+58
+00:03:37,000 --> 00:03:44,000
+So what you do argue somebody else, what somebody else does is that then they do bad things.
+
+59
+00:03:44,000 --> 00:03:45,000
+They corrupt the data.
+
+60
+00:03:45,000 --> 00:03:48,000
+They release the data, they try to punish the organization.
+
+61
+00:03:48,000 --> 00:03:53,000
+So what they feel is technically, in their mind, ethical revenge.
+
+62
+00:03:53,000 --> 00:03:57,000
+Okay, disgruntled employees will do this.
+
+63
+00:03:57,000 --> 00:03:58,000
+So revenge is this.
+
+64
+00:03:58,000 --> 00:04:03,000
+Let's say you work for an organization and for some reason they treat you bad.
+
+65
+00:04:03,000 --> 00:04:05,000
+They didn't send you that last paycheck.
+
+66
+00:04:05,000 --> 00:04:07,000
+They owe you a bunch of money.
+
+67
+00:04:07,000 --> 00:04:09,000
+They did bad things to you, don't support.
+
+68
+00:04:09,000 --> 00:04:15,000
+So what you do is because you probably still had logins, or even if you were fired and your login still
+
+69
+00:04:15,000 --> 00:04:21,000
+worked, you may go and corrupt their data, expose their information would be revenge, disruption
+
+70
+00:04:21,000 --> 00:04:22,000
+and chaos.
+
+71
+00:04:22,000 --> 00:04:25,000
+Some people are just motivated.
+
+72
+00:04:25,000 --> 00:04:31,000
+They don't have really any agenda other than chaos in a.
+
+73
+00:04:31,000 --> 00:04:34,000
+I'm not sure if you guys ever saw Batman.
+
+74
+00:04:34,000 --> 00:04:38,000
+Uh, the one with the Joker, the Dark Knight.
+
+75
+00:04:38,000 --> 00:04:39,000
+Really good movie.
+
+76
+00:04:39,000 --> 00:04:40,000
+You should watch that.
+
+77
+00:04:40,000 --> 00:04:44,000
+So in The Dark Knight, Alfred, uh, acts as bad.
+
+78
+00:04:44,000 --> 00:04:46,000
+Uh, Batman is asking for.
+
+79
+00:04:46,000 --> 00:04:47,000
+Why is the Joker doing this?
+
+80
+00:04:47,000 --> 00:04:50,000
+You know, why is he killing people and creating chaos?
+
+81
+00:04:50,000 --> 00:04:57,000
+And the gist of it is because there are just some people that prefers to watch the world burn.
+
+82
+00:04:57,000 --> 00:05:05,000
+There are some people out there that their only motivation is the dissatisfaction and unhappiness of
+
+83
+00:05:05,000 --> 00:05:06,000
+others.
+
+84
+00:05:06,000 --> 00:05:07,000
+All right.
+
+85
+00:05:07,000 --> 00:05:08,000
+This is how we secure against.
+
+86
+00:05:08,000 --> 00:05:13,000
+And there's quite a lot of people and a lot of attackers that you're going to encounter like this.
+
+87
+00:05:13,000 --> 00:05:18,000
+In other words, there's no real motive other than destruction in their path.
+
+88
+00:05:18,000 --> 00:05:20,000
+The next one up I have is war.
+
+89
+00:05:20,000 --> 00:05:24,000
+Now, this is going to be mostly driven by nation states, okay?
+
+90
+00:05:24,000 --> 00:05:30,000
+Their motivation is to produce all kinds of warfare between organizations.
+
+91
+00:05:30,000 --> 00:05:31,000
+Okay.
+
+92
+00:05:31,000 --> 00:05:32,000
+So here we go guys.
+
+93
+00:05:32,000 --> 00:05:34,000
+Quite a lot of motivations that are out there.
+
+94
+00:05:34,000 --> 00:05:42,000
+And as you can see there are many, many motivations that these hackers, these bad people will have
+
+95
+00:05:42,000 --> 00:05:43,000
+towards your organization.
+
+96
+00:05:43,000 --> 00:05:47,000
+So just keep these motivations in mind so you can secure against them.
+