CompTIA 220-1202: Windows Security Tools for Support Technicians
Windows Security Controls for Support Technicians Windows support requires more than knowing where security settings are located. The current CompTIA A+ Core 2…
Read articleEDITORIAL TOPIC / EXAMTOPICS EDITORIAL
Cybersecurity.
Identity, secure architectures, threats, vulnerabilities and defensive operations.
PUBLISHED COVERAGECurated by subject
CompTIA 220-1202: Malware Removal and Endpoint Recovery
Malware Containment and Trusted Endpoint Recovery Malware cleanup is not a single antivirus button. The current CompTIA A+ Core 2 220-1202 objectives expect…
Read articleCisco 350-701: Secure Access Service Edge in Cisco Environments
Secure Access Service Edge is an architectural model for delivering networking and security controls closer to distributed users, branches, devices, and cloud applications.…
Read articleCisco 350-701: Remote Access VPN Design with Cisco Security
Remote access VPN design is not only about choosing an encryption protocol and defining an address pool. A production service has to authenticate…
Read articleCisco 350-701: Network Segmentation for Zero Trust
Network segmentation supports zero-trust architecture by reducing the amount of access that follows automatically from being connected to a network. Traditional perimeter designs…
Read articleCisco 350-701: Email and Web Security in Cisco Architectures
Email and web traffic are two of the most common paths through which users encounter malicious content, credential theft, risky destinations, and data-loss…
Read articleCisco 350-701: Secure Firewall Architecture
Cisco Secure Firewall architecture is easier to understand when it is treated as a system of enforcement, management, inspection, identity, and telemetry rather…
Read articleCisco 350-701: Secure Endpoint and Threat Response
Cisco Secure Endpoint protects hosts by combining preventive controls with endpoint telemetry that supports investigation and response. The connector can block known malicious…
Read articleCisco 350-701: ISE Policy Sets and Authorization
Cisco ISE Policy-Set Evaluation and Authorization Cisco ISE policy is easiest to operate when engineers separate three questions: which traffic belongs to this…
Read articleCisco 350-701: 802.1X, MAB, and Profiling with Cisco ISE
Enterprise access networks rarely contain one uniform endpoint population. Managed laptops can perform strong 802.1X authentication, while phones, printers, cameras, badge readers, and…
Read articleCisco 300-715: Guest Access and BYOD with Cisco ISE
Cisco ISE handles guest access and bring-your-own-device onboarding as two related but distinct identity problems. Guest access is designed to give temporary or…
Read articleCisco 300-715: Troubleshooting RADIUS Authentication in Cisco ISE
RADIUS authentication problems in Cisco ISE are rarely solved by staring at a single “Access-Reject” message. A complete transaction crosses the endpoint, supplicant…
Read articleCisco 300-715: ISE TrustSec and Security Group Tags
Cisco TrustSec changes segmentation from an address-centric problem into an identity and group-policy problem. Cisco ISE can classify users, endpoints, and network devices…
Read articleCisco 300-715: ISE Posture Assessment
Cisco Identity Services Engine posture assessment adds endpoint compliance to network access control. Authentication can prove who a user or device is, but…
Read articleAWS ANS-C01: Network Firewall and Centralized Inspection
AWS Network Firewall can protect one VPC directly or become part of a centralized inspection architecture that filters traffic across many VPCs and…
Read article