Comparing and Contrasting Attacks

•  Compare and Contrast Information Security Roles
•  Explain Threat Actor Types
•  Compare and Contrast Social Engineering Attack Types
•  Determine Malware Types

 Comparing and Contrasting Security Controls

•  Compare and Contrast Security Control and Framework Types
•  Follow Incident Response Procedures

Using Security Assessment Tools

•  Explain Penetration Testing Concepts
•  Use Topology Discovery Software Tools
•  Use Fingerprinting and Sniffing Software Tools
•  Use Vulnerability Scanning Software Tools

Comparing and Contrasting Basic Concepts of Cryptography

• Compare and Contrast Basic Concepts of Cryptography
• Compare and Contrast Cryptographic Attack Types
• Explain Hashing and Symmetric Cryptographic Algorithms
• Explain Asymmetric Cryptographic Algorithms

Implementing Public Key Infrastructure

• Implement Certificates and Certificate Authorities
• Implement PKI Management

Implementing Identity and Access Management Controls

• Compare and Contrast Identity and Authentication Concepts
• Install and Configure Authentication Protocols
• Implement Multifactor Authentication

Managing Access Services and Accounts

• Install and Configure Authorization and Directory Services
• Implement Access Management Controls
• Differentiate Account Management Practices
• Implement Account Auditing and Recertification

Implementing Secure Network Architecture Concepts

• Implement Secure Network Architecture Concepts
• Install and Configure Secure Switching Infrastructure
• Install and Configure Network Access Control
• Install and Configure Secure Routing and NAT Infrastructure

Installing and Configuring Security Appliances

• Install and Configure Firewalls and Proxies
• Install and Configure Load Balancers
• Install and Configure Intrusion Detection/Prevention Systems
• Install and Configure Logging and SIEM Systems

Installing and Configuring Wireless and Physical Access Security

• Install and Configure Wireless Infrastructure
• Install and Configure Wireless Security Settings
• Explain the Importance of Physical Security Controls

Deploying Secure Host, Embedded, and Mobile Systems

• Implement Secure Hardware Systems Design
• Implement Secure Host Systems Design
• Implement Secure Embedded Systems Design
• Implement Secure Mobile Device Systems Design

Implementing Secure Network Access Protocols

• Implement Secure Network Operations Protocols
• Implement Secure Remote Access Protocols
• Implement Secure Remote Administration Protocols

Implementing Secure Network Applications

• Implement Secure Web Services
• Implement Secure Communications Services
• Implement Secure Virtualization Infrastructure
• Implement Secure Cloud Services

Explaining Risk Management and Disaster Recovery Concepts

• Explain Risk Management Processes and Concepts
• Explain Disaster Recovery Planning Concepts
• Explain Resiliency and Continuity of Operations Strategies
• Summarize Basic Concepts of Forensics

Summarizing Secure Application Development Concepts

• Explain the Impact of Vulnerability Types
• Summarize Secure Application Development Concepts

Explaining Organizational Security Concepts

• Explain the Importance of Security Policies
• Implement Data Security and Privacy Practices
• Explain the Importance of Personnel Management