Security Administration of IT Infrastructure

Module 01: Introduction to Ethical Hacking 

• Learn the fundamentals and key issues in information security, including the basics of ethical hacking, information security controls, relevant laws, and standard procedures.

Module 02: Footprinting and Reconnaissance

• Learn how to use the latest techniques and tools for footprinting and reconnaissance, a critical pre-attack phase of ethical hacking.

Module 03: Scanning Networks 

• Learn different network scanning techniques and countermeasures.

Module 04: Enumeration 

• Learn various enumeration techniques, including Border Gateway Protocol (BGP) and Network File Sharing (NFS) exploits and associated countermeasures.

Module 05: Vulnerability Analysis 

• Learn how to identify security loopholes in a target organization’s network, communication infrastructure, and end systems. Different types of vulnerability assessments and vulnerability assessment tools are also included.

Module 06: System Hacking 

• Learn about the various system hacking methodologies used to discover system and network vulnerabilities, including steganography, steganalysis attacks, and how to cover tracks.  
  Module 07: Malware Threats

Module 07: Malware Threats 

• Learn about different types of malware (Trojan, viruses, worms, etc.), APT and fileless malware, malware analysis procedures, and malware countermeasures.

Module 08: Sniffing 

• Learn about packet sniffing techniques and their uses for discovering network vulnerabilities, plus countermeasures to defend against sniffing attacks.

Module 09: Social Engineering 

• Learn social engineering concepts and techniques, including how to identify theft attempts, audit human-level vulnerabilities, and suggest social engineering countermeasures.

Module 10: Denial-of-Service

• Learn about different Denial of Service (DoS) and Distributed DoS (DDoS) attack techniques, plus the tools used to audit a target and devise DoS and DDoS countermeasures and protections. Certified Ethical Hacker Powered by AI Learn

Module 11: Session Hijacking 

• Learn the various session-hijacking techniques used to discover network-level session management, authentication, authorization, and cryptographic weaknesses and associated countermeasures.  
  

Module 12: Evading IDS, Firewalls and Honeypots 

• Learn about firewalls, intrusion detection systems (IDS), and honeypot evasion techniques; the tools used to audit a network perimeter for weaknesses; and countermeasures.  
  

Module 13: Hacking Web Servers

• Learn about web server attacks, including a comprehensive attack methodology used to audit vulnerabilities in web server infrastructures and countermeasures.Module

Module 14: Hacking Web Applications 

• Learn about web application attacks, including a comprehensive hacking methodology for auditing vulnerabilities in web applications and countermeasures.

Module 15: SQL Injection 

• Learn about SQL injection attack techniques, evasion techniques, and SQL injection countermeasures.

Module 16: Hacking Wireless Networks 

• Learn about different types of encryption, threats, hacking methodologies, hacking tools, security tools, and countermeasures for wireless networks.

Module 17: Hacking Mobile Platforms 

• Learn mobile platform attack vectors, Android and iOS hacking, mobile device management, mobile security guidelines, and security tools.

Module 18: IoT Hacking 

• Learn different types of Internet of Things (IoT) and operational technology (OT) attacks, hacking methodologies, hacking tools, and countermeasures.

Module 19: Cloud Computing 

• Learn different cloud computing concepts, such as container technologies and serverless computing, various cloud computing threats, attacks, hacking methodologies, and cloud security techniques and tools.

Module 20: Cryptography  

• Learn about encryption algorithms, cryptography tools, Public Key Infrastructure (PKI), email encryption, disk encryption, cryptography attacks, and cryptanalysis tools.
  
  

Module 01: Deployment and system configuration

• Perform initial configuration
• FortiGate factory default settings
• FortiGuard licenses
• FortiGate administrative access
• FortiGate as a DHCP server
• System configuration file backup and restore
• FortiGate firmware upgrades
• Use cases
• Configure log settings and diagnose problems using the logs
• Log workflow
• Log storage options
• Device registration on FortiAnalyzer
• Log message viewing and searching
• Configure FortiGate Clustering Protocol (FGCP) high-availability (HA) cluster
• FortiGate HA
• HA setting modifications
• Session synchronization for seamless failover
• HA management interface
• Typical operation of an HA cluster
• HA cluster firmware upgrade
• Use cases
• Diagnose resource and connectivity problems
• Abnormal behavior monitoring
• Physical and network layer problems
• Connectivity problems—sniffer and debug flow
• Resource problems—high CPU and memory usage
• Memory conserve mode
• Use cases—troubleshoot resource and connectivity problems
• Describe FortiGate Cloud-Native Firewall (CNF) and FortiGate VMs in the public cloud
• Threats and challenges in the public cloud
• Fortinet public cloud solutions
• FortiGate VMs in the cloud
• FortiGate CNF
• Use cases—FortiGate CNF and FortiGate VMs in the cloud
• Explain FortiSASE administration and user onboarding methods
• Challenges with remote work
• Secure access service edge (SASE) architecture
• FortiSASE components
• Security features
• Use cases—FortiSASE

Module 02: Firewall policies and authentication 

• Configure firewall policies
• Firewall policies
• Inspection modes for firewall policies
• Firewall policy traffic logs
• Use cases
• Configure source network address translation (SNAT) and destination network address translation (DNAT) options in firewall policies
• SNAT configuration
• Firewall policy to perform DNAT using virtual IP (VIP) addresses
• Use cases
• DNAT settings using a VIP
• Configure different methods of firewall authentication
• Remote LDAP authentication server on FortiGate
• Remote RADIUS authentication server on FortiGate
• Active and/or passive authentication

Module 03: Content inspection

• Explain and inspect encrypted traffic using certificates
• Full SSL/SSH inspection for outbound traffic
• Private certificate authority (CA) certificates on endpoints
• Certification issues
• Use cases
• Identify FortiGate inspection modes and configure web filtering
• Inspection mode (flow or proxy) based on security needs
• Certificate inspection for web filtering
• Web filter profiles in flow-based and proxy-based inspection modes
• FortiGuard categories
• URL filters
• Web filtering issues
• Use cases
• Configure application control to monitor and control network applications
• Application control in profile mode
• Application control event monitoring
• Traffic matching with application control profile issues
• Use cases—application traffic controlling
• Configure antivirus scanning modes to neutralize malware threats
• Antivirus profiles in flow-based and proxy-based inspection modes
• Protocol options
• Antivirus events—log and monitor
• Common antivirus issues
• Configure an intrusion prevention system (IPS) to protect a network from threats and vulnerabilities
• IPS sensors
• IPS high-CPU usage issues
• Use cases—Blocking known exploits

Module 04: Routing

• Configure and route packets using static routes
• Static routing
• Routing table on FortiGate
• Route redundancy and load balancing
• Use cases
• Configure SD-WAN to load balance traffic between multiple WAN links effectively
• SD-WAN concepts
• Main use cases for SD-WAN
• SD-WAN on FortiGate
• Routing behavior in an SD-WAN context
• SD-WAN behavior, link usage, and quality status
• Use cases

Module 05: VPNs 

• Implement a meshed or partially redundant IPsec VPN
• IPsec VPN concepts
• IPsec VPN using the IPsec wizard
• Redundant VPN between two FortiGate devices
• IPsec VPNs and review logs
• IPsec VPN issues
• Use cases

• Preparing for technical and HR interviews in cybersecurity roles 
  
• Scenario-based firewall and security troubleshooting 
  
• Resume and LinkedIn profile optimization for security jobs 
  
• Communication and presentation skills for security topics 
  
• Workplace professionalism and ethical standards in security roles