MTA Security Fundamentals

Benefits of MTA Security Fundamentals Training.

• Training: get practical technical skills
• Receive a certificate of course attendance
• Small class size: increased instructor interaction
• Expert trainers: imparting real world experience
• Authorised test centre: exam taken at our premises

• Basic knowledge of computer security

Skills gained during the MTA Security Fundamentals Training.

• Understand security layers
• Understand operating system security
• Understand network security
• Understand security software
• Preparation options

This course is likely to add to the employment related skills of the participants. The skills developed are likely to be used in the course of being an employee or working in a business.

Following people can attend MTA Security Fundamentals Training.

• University students
• Helpdesk operators
• Candidates entering IT job market
• First-level network support staff
• Systems administrator
• Individuals seeking MTA security fundamentals certification

• Confidentiality; integrity; availability; how threat and risk impact principles; principle of least privilege; social engineering; attack surface analysis; threat modelling
• Site security; computer security; removable devices and drives; access control; mobile device security; keyloggers
• Advantages and disadvantages of specific security types; keys; service set identifiers (SSIDs); MAC filters
• Multifactor authentication; physical and virtual smart cards; Remote Authentication Dial-In User Service (RADIUS); biometrics; use Run As to perform administrative tasks
• File system permissions; share permissions; registry; Active Directory; enable or disable inheritance; behavior when moving or copying files within the same disk or on another disk; multiple groups with different permissions; basic permissions and advanced permissions; take ownership; delegation; inheritance
• Password complexity; account lockout; password length; password history; time between password changes; enforce by using Group Policies; common attack methods; password reset procedures; protect domain user account passwords
• Types of auditing; what can be audited; enable auditing; what to audit for specific purposes; where to save audit information; how to secure audit information
• Encrypting file system (EFS); how EFS-encrypted folders impact moving/copying files; BitLocker (To Go); TPM; software-based encryption; MAIL encryption and signing and other uses; virtual private network (VPN); public key/private key; encryption algorithms; certificate properties; certificate services; PKI/certificate services infrastructure; token devices; lock down devices to run only trusted applications
• Buffer overflow; viruses, polymorphic viruses; worms; Trojan horses; spyware; ransomware; adware; rootkits; backdoors; zero day attacks
• Types of hardware firewalls and their characteristics; when to use a hardware firewall instead of a software firewall; stateful versus stateless firewall inspection; Security Compliance Manager; security baselines
• Routing; honeypot; perimeter networks; network address translation (NAT); VPN; IPsec; server and domain isolation
• Protocol spoofing; IPsec; tunneling; DNSsec; network sniffing; denial-of-service (DoS) attacks; common attack methods
• Antivirus; protect against unwanted software installations; User Account Control (UAC); keep client operating system and software updated; encrypt offline folders, software restriction policies; principle of least privilege
• Antispam, antivirus, spoofing, phishing, and pharming; client versus server protection; Sender Policy Framework (SPF) records; PTR records
• Separation of services; hardening; keep server updated; secure dynamic Domain Name System (DNS) updates; disable unsecure authentication protocols; Read-Only Domain Controllers (RODC)