Question 1

Overview

Accepted Answer

Examining common beliefs vs realities of cyber-attacks with an introduction to specific responsibilities of cyber security practitioners.

Question 2

Core Principles

Accepted Answer

Focusing on three core principles of cyber security. The Principle of Least Privilege, The CIA Triad, and the principle of Prevent, Detect, Respond.

Question 3

Security Program Management

Accepted Answer

Learn how threats, vulnerabilities, countermeasures, laws, and compliance requirements inform Risk Management Programs.

Question 4

Security Maintenance

Accepted Answer

Covers security hygiene practices that include practicing change control and configuration management; integrating security into SDLC; patch management; active threat hunting; and more.

Question 5

Authentication and Authorization

Accepted Answer

Learn how to strengthen security with passphrases, password managers, and 2FA. This module covers best practices like using spaces in passphrases, setting permissions based on the Principle of Least Privilege, and understanding the Zero Trust Model.

Question 6

Data Protection

Accepted Answer

Covering the effective deployment of encryption methods such as the Advanced Encryption Standard algorithm, Transport Layer Security, Internet Protocol Security, Virtual Private Networks, key management fundamentals, and Zero-Knowledge implementations.

Question 7

Sample Attacks

Accepted Answer

Explore key attacks such as Social Engineering, Spear Phishing, Malware, and Denial of Service. This module also delves into advanced threats like QR Code Attacks, Teams Phishing, and AI-driven tactics, highlighting the crucial role of humans as the final line of defense.

Question 8

Attack Scenario

Accepted Answer

An attack scenario is followed from start to finish, the training focuses on the need for changing our methods of detection and response as attack methods change.

Question 9

Attack Mitigation

Accepted Answer

Discover how to respond when a cyber-attack occurs, including deploying technologies to restore operations and fix underlying issues. This module highlights the use of AI tools to enhance threat detection, malware analysis, incident response, and vulnerability management.

Question 10

Cloud Computing Environments

Accepted Answer

Explore cloud environments, their respective security concerns, and best practices for secure deployments while examining the security advantages to cloud environments.

Question 11

Securing Web Servers

Accepted Answer

Reviews each of the Open Web Application Security Project (OWASP) top vulnerabilities and how security practitioners can prevent and/or mitigate issues in each category.

Question 12

Supply Chain Attacks

Accepted Answer

Examine real-world supply chain attacks to understand their causes and how to prevent or mitigate them. This module emphasizes learning from past incidents to strengthen defenses against future threats.

SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals

Reduce Exposure with IT Administrator Training

Are Your IT Administrators Prepared for Today’s Cyber Threats?

Technical Training from the Leader in Information Security

Reduce Your Organization’s Risk of Exposure with Role-Based Training for IT Administrators

Align Skills with Today’s Cybersecurity Landscape

Stay Ahead of Evolving Threats

Break Down Operational Siloes

A Progressive Learning Path with Real-world Use Cases

Transform Your Security Culture With SANS