Learn Tech From Zero https://validator.w3.org/feed/docs/rss2.html Learn Tech From Zero CompTIA CySA+ (CS0-003) Metrics and KPIs Lessons learned Root cause analysis Communications Incident response reporting Incident declaration and escalation Stakeholder identificationand communication Stakeholder identificationand communication Metrics and key performanceindicators (KPIs) Inhibitors to remediation Action plans Compliance reports Vulnerability management reporting Post-incident activity Preparation Containment, eradication, and recovery Detection and analysis AWS Certified Advanced Networking – Specialty Implementing secure DNS communications Implementing a certificate management solution by using a certificateauthority (for example, ACM, AWS Private Certificate Authority [ACM PCA]) Implementing encryption solutions to secure data in transit (for example,CloudFront, Application Load Balancers and Network Load Balancers, VPNover Direct Connect, AWS managed databases, Amazon S3, customsolutions on Amazon EC2, Transit Gateway) Implementing network encryption methods to meet application compliancerequirements (for example, IPsec, TLS) Security methods for DNS communications (for example, DNSSEC) Network encryption under the AWS shared responsibility model Encryption methods for data in transit (for example, IPsec) VPN connectivity over Direct Connect Network encryption options that are available on AWS Implementing a network audit strategy across single or multiple AWSnetwork services and accounts (for example, Firewall Manager, securitygroups, network ACLs) Implementing log delivery solutions Correlating and analyzing information across single or multiple AWS logsources Implementing customized metrics by using CloudWatch Implementing automated alarms by using CloudWatch Creating and analyzing network traffic mirroring (for example, using VPCTraffic Mirroring) Creating and analyzing a VPC flow log (including base and extended fields of flow logs) Mechanisms to audit network security configurations (for example, security groups, AWS Firewall Manager, AWS Trusted Advisor) Log delivery mechanisms (for example, Amazon Kinesis, Route 53,CloudWatch) Log creation in different AWS services (for example, VPC flow logs, loadbalancer access logs, CloudFront access logs) Alert mechanisms (for example, CloudWatch alarms) Network monitoring and logging services that are available in AWS (for example, CloudWatch, AWS CloudTrail, VPC Traffic Mirroring, VPC Flow Logs, Transit Gateway Network Manager) Automating security incident reporting and alerting using AWS Testing compliance with the initial requirements (for example, failover test, resiliency) Developing a threat model and identifying appropriate mitigation strategies for a given network architecture Implementing an AWS network architecture to meet security and compliance requirements (for example, untrusted network, perimeter VPC,three-tier architecture) Securing outbound traffic flows from AWS (for example, Network Firewall, proxies, Gateway Load Balancers) Securing inbound traffic flows into AWS (for example, AWS WAF, AWSShield, Network Firewall) AWS network architecture that meets security and compliance requirements Mechanisms to secure different application flows Common security threats