Perform the specific duties associated with using an administrator/root account in a given computer system.
Select and implement user account management controls for a given scenario.
Implement secure password and account policies in an operating system.
Perform basic system audits and analyze log files in a given scenario.
Use the command/terminal line to configure security settings.
Perform basic system administration tasks in more than one operating system.
Network Foundations
Differentiate among types of networking cable mediums and standards to determine which type to use in a given situation.
Examples: copper cabling, fiber optic
Compare and contrast notational systems, including binary, hexadecimal, decimal, and ASCII.
Identify and describe common TCP and UDP ports and services.
Examples: DNS, HTTP, SSH, TELNET, TLS, FTP, SMTP, IMAP, POP, DHCP, LDAP, NTP, SNMP, RDP, SCP, RTP
Classify IP addresses according to IPv4 and IPv6, private and public IP ranges, and special IPs.
Use subnetting to determine the number of hosts and/or subnets on a given network.
Differentiate between the OSI and TCP/IP models, layers, encapsulation, and decapsulation.
Use various network tools in computer operating systems environments.
Examples: ipconfig, ifconfig Ping, nslookup, tracert, netstat, iptables; Windows, Linux, Apple
Perform an install of an operating system in a virtual environment.
Security Foundations
Apply the parts of the CIA triad (confidentiality, integrity, and availability) to a given security scenario.
Describe various types of physical security controls and explain their importance.
Analyze attributes of various types of malware and other attacks to determine the key characteristics of each type.
Examples: virus, worm, brute force, backdoor, spyware, remote access tool (RAT)
Describe various types of social engineering.
Describe various types of application attacks and threats.
Examples: cross-site scripting, SQL injection, buffer overflow
Analyze types of network attacks.
Examples: man in the middle, layer 2 attacks, denial of service, DNS poisoning
Identify and analyze wireless network threats.
Examples: evil twin, bluesnarfing, jamming, disassociation
Describe different types of threat actors and threat vectors.
Examples: APT’s; black hat, white hat, and gray hat hackers; supply chain; social media
Predict security concerns and possible vulnerabilities associated with system hardening.
Examples: weak configurations, open ports and services, third-party risks
Describe the techniques used in security assessments.
Examples: threat hunting, vulnerability scans, security information and event management (SIEM)
Explain basic cryptographic concepts.
Examples: historic ciphers, symmetric, asymmetric, hashing, quantum computing uses
Describe the purpose and scope of a cybersecurity disaster recovery plan for a given simulated or actual work environment.
Cybersecurity II
Foundational Standards
Incorporate safety procedures in handling, operating, and maintaining tools and machinery; handling materials; utilizing personal protective equipment; maintaining a safe work area; and handling hazardous materials and forces.
Demonstrate effective workplace and employability skills, including communication, awareness of diversity, positive work ethic, problem-solving, time management, and teamwork.
Explore the range of careers available in the field and investigate their educational requirements, and demonstrate job-seeking skills including resume-writing and interviewing.
Advocate and practice safe, legal, responsible, and ethical use of information and technology tools specific to the industry pathway.
Participate in a Career and Technical Student Organization (CTSO) to increase knowledge and skills and to enhance leadership and teamwork.
