https://www.globalknowledge.com/us-en/training/certification-prep/topics/cybersecurity/section/comptia/securityplus/ Slidedeck from Daniel Cummins' webinar on CompTIA’s Security+ certification and how it continues to be a minimum standard for IT cybersecurity professionals around the world in a variety of industries. He will discuss how Security+ can play a role in your on-going career development, the importance of Security+ in the IT industry, the high level objectives of Security+ as well as different roles that can benefit from Security+ and what certifications to pursue after Security+ based on your role. For more information on our Security+ Certification Boot Camp, visit https://www.globalknowledge.com/us-en/course/90612/securityplus-certification-boot-camp/ YouTube > https://youtu.be/2cOEZFa_69M Wistia > https://globalknowledge.wistia.com/medias/ei1f0c881g

1. Security+ and
Your IT Career

2. © Global Knowledge Training LLC. All rights reserved. Page 2
Presenter
Daniel Cummins
Daniel Cummins is a CompTIA Certified
Technical Trainer (CTT+) and has been
CompTIA certified since 2010, having
passed all of the Core and Cybersecurity
exams. Including recertification, Daniel
has taken and passed more than a
dozen CompTIA exams.

3. © Global Knowledge Training LLC. All rights reserved. Page 3
Overview
• The importance of Security+ in the IT industry
• The high level objectives of Security+
• Different roles that use Security+
• Post Security+ certifications

4. © Global Knowledge Training LLC. All rights reserved. Page 4
The importance of Security+ in the IT industry
• Security is for EVERYONE!
• Non-technical roles
• Users: Awareness
• Management: Planning
• Facilities: Physical security
• Technical roles
• Help Desk
• Networking
• Database Management
• System Administration
• Software Development
• DevOps
• And more…
• Trusted by
• US DoD (8570 compliant)
• Aerospace and Defense
• Education
• Non-profit
• Construction/Architecture/Engineering

5. © Global Knowledge Training LLC. All rights reserved. Page 5
The high level objectives of Security+
1.0 Threats, Attacks and Vulnerabilities
• 1.1 Given a scenario, analyze indicators of compromise and determine the type of
malware
• 1.2 Compare and contrast types of attacks
• 1.3 Explain threat actor types and attributes
• 1.4 Explain penetration testing concepts
• 1.5 Explain vulnerability scanning concepts
• 1.6 Explain the impact associated with types of vulnerabilities

6. © Global Knowledge Training LLC. All rights reserved. Page 6
The high level objectives of Security+
2.0 Technologies and Tools
• 2.1 Install and configure network components, both hardware and software-based,
to support organizational security
• 2.2 Given a scenario, use appropriate software tools to assess the security posture
of an organization
• 2.3 Given a scenario, troubleshoot common security issues
• 2.4 Given a scenario, analyze and interpret output from security technologies
• 2.5 Given a scenario, deploy mobile devices securely
• 2.6 Given a scenario, implement secure protocols

7. © Global Knowledge Training LLC. All rights reserved. Page 7
The high level objectives of Security+
3.0 Architecture and Design
• 3.1 Explain use cases and purpose for frameworks, best practices and secure
configuration guides
• 3.2 Given a scenario, implement secure network architectures concepts
• 3.3 Given a scenario, implement secure systems design
• 3.4 Explain the importance of secure staging deployment concepts
• 3.5 Explain the security implications of embedded systems
• 3.6 Summarize secure application development and deployment concepts
• 3.7 Summarize cloud and virtualization concepts
• 3.8 Explain how resiliency and automation strategies reduce risk
• 3.9 Explain the importance of physical security controls

8. © Global Knowledge Training LLC. All rights reserved. Page 8
The high level objectives of Security+
4.0 Identity and Access Management
• 4.1 Compare and contrast identity and access management concepts
• 4.2 Given a scenario, install and configure identity and access services
• 4.3 Given a scenario, implement identity and access management controls
• 4.4 Given a scenario, differentiate common account management practices

9. © Global Knowledge Training LLC. All rights reserved. Page 9
The high level objectives of Security+
5.0 Risk Management
• 5.1 Explain the importance of policies, plans and procedures related to
organizational security
• 5.2 Summarize business impact analysis concepts
• 5.3 Explain risk management processes and concepts
• 5.4 Given a scenario, follow incident response procedures
• 5.5 Summarize basic concepts of forensics
• 5.6 Explain disaster recovery and continuity of operation concepts
• 5.7 Compare and contrast various types of controls
• 5.8 Given a scenario, carry out data security and privacy practices

10. © Global Knowledge Training LLC. All rights reserved. Page 10
The high level objectives of Security+
6.0 Cryptography and PKI
• 6.1 Compare and contrast basic concepts of cryptography
• 6.2 Explain cryptography algorithms and their basic characteristics
• 6.3 Given a scenario, install and configure wireless security settings
• 6.4 Given a scenario, implement public key infrastructure

11. © Global Knowledge Training LLC. All rights reserved. Page 11
Different roles that can use Security+
• Systems Administrator
• Network Administrator
• Security Administrator
• Junior IT Auditor/ Penetration Tester
• Security Specialist
• Security Consultant
• Security Engineer
• Any other IT role??

12. © Global Knowledge Training LLC. All rights reserved. Page 12
Post Security+ certifications
CompTIA Cybersecurity Career Pathway
Specialist CSIS: CompTIA Secure Infrastructure Specialist (A+/Network+/Security+)
Professional CSCP: CompTIA
Secure Cloud
Professional
(Sec+/Cloud+)
CSAP: CompTIA
Security Analyst
Professional
(Sec+/CySA+)
CNVP: CompTIA Network
Vulnerability Assessment
Professional
(Sec+/PenTest+)
CNSP: CompTIA Network
Security Professional
(Sec+/PenTest+/CySA+)
Expert CSAE: CompTIA Security Analytics
Expert (Sec+/CySA+/CASP+)
CSIE: CompTIA Security Infrastructure Expert
(Sec+/CySA+/PenTest+/CASP+)

13. © Global Knowledge Training LLC. All rights reserved. Page 13
Post Security+ certifications
CompTIA Cybersecurity Career Pathway
• Specialist
• CSIS: CompTIA Secure Infrastructure Specialist (A+/Network+/Security+)
• Professional
• CSCP: CompTIA Secure Cloud Professional (Security+/Cloud+)
• CSAP: CompTIA Security Analyst Professional (Security+/CySA+)
• CNVP: CompTIA Network Vulnerability Assessment Professional (Sec+/PenTest+)
• CNSP: CompTIA Network Security Professional (Security+/PenTest+/CySA+)
• Expert
• CSAE: CompTIA Security Analytics Expert (Security+/CySA+/CASP+)
• CSIE: CompTIA Security Infrastructure Expert (Security+/CySA+/PenTest+/CASP+)

14. © Global Knowledge Training LLC. All rights reserved. Page 14
Non-CompTIA certifications
• Security
• EC-Council: CND, CEH
• ISACA: CISM, CISA, CRISC
• ISC2: SSCP, CISSP
• Vendor-specific
• Cisco: CCNA Security, Cisco Cybersecurity Specialist
• Microsoft: MCSE: Core Infrastructure (Server 2016)
• Red Hat: Red Hat Certified Specialist in Server Security and Hardening
• Symantec
• MacAfee
• Juniper
• And more…