icon
logo
    Loading...

    Foundations of Cybersecurity Program

    Overview

    icon
    course-icon

    Program

    org-logo

    Foundations of Cybersecurity Program

    Discover the fundamentals of cybersecurity. Learn how to develop an incident response action plan, and master the basics of hands-on security skills using key technologies.

    Take your first step towards a career in cybersecurity and prepare for gaining a professional qualification in the subject in the future. 

    Flexible Schedule

    Beginner Level

    Mentor Support

    time-icon

    Estimated Time

    45 Hours
    fee-icon

    Fee

    $410

    Cybersecurity has become a critical requirement for every business, regardless of size. Cyber-attacks are increasing in number exponentially, particularly with the abundance of IoT devices. And whilst traditional firewall and authentication-based protection solutions are a good first line of defense, other approaches such as ‘assume compromise’ must now be included within a protection methodology. This means not only do cybersecurity experts need to master the technologies used to combat attacks, but they also need to understand, anticipate, and mitigate the ever-evolving vulnerabilities appearing day by day.

    In this program you will be introduced to the fundamentals of cybersecurity, and the tools and methodologies used to recognize, defend, and prevent some of the most common forms of threat. You will master the basics of security services using PowerShell, Microsoft Advanced Threat Analytics, Microsoft Enterprise Threat Detection, Azure Active Directory, Windows Server 16, and SQL Server. You will discover how to plan an effective computer security incident response team (CSIRT). And you will develop a clear understanding of best practice protocol.

    For individuals keen to take their first step in the important world of cybersecurity, this program is an ideal place to start.

    This Foundations of Cybersecurity program comprises nine purposely designed courses that take you on a carefully defined learning journey.

    It is a self-paced program, which means it is not run to a fixed schedule with regard to completing modules or submitting assignments. To give you an idea of how long the course takes to complete, it is anticipated that if you work 5-6 hours per week, you will complete the program in 12 weeks. However, as long as the program is completed by the end of your enrollment, you can work at your own pace. And you will be encouraged to stay connected with your learning community and mentors through the course discussion space.

    The materials for modules are accessible from the start of the program and will remain available for the duration of your enrollment. Materials include videos, hands-on labs, exercises, and knowledge checks.

    Enrollment in the program includes all nine courses. You cannot enroll for the courses separately.

    As part of our mentoring service you will have access to valuable guidance and support throughout the program. We provide a dedicated discussion space where you can ask questions, chat with your peers, and resolve issues. Depending on the payment plan you have chosen, you may also have access to live classes and webinars, which are an excellent opportunity to discuss problems with your mentor and ask questions. Mentoring services may vary package wise.

    Once you have successfully completed Foundations of Cybersecurity, you will earn your FutureSkills Prime Certificate of Participation.

    You will:

    • Have an understanding of the fundamentals of enterprise cybersecurity.
    • Have an appreciation of the different types of cybersecurity threat.
    • Have an understanding of threat detection techniques, tools and methodologies.
    • Have an understanding of how to plan for a security incident response and build a computer. security incident response team (CSIRT).
    • Have in depth understanding of red team vs blue team exercises.
    • Be able to deploy and analyze PowerShell best practices.
    • Know how to manage network identities.
    • Know how to secure data in Microsoft Azure and SQL server.
    • Have an understanding of Windows 10 and Microsoft Azure security services.
    • Have an understanding of Windows Server 2016 security features.

    • This program is specifically aimed at individuals who are keen to gain an understanding of cybersecurity methodologies.
    • The skills introduced are valuable across every stage of advancement, from the college graduate looking to land their first career job, to an experienced developer seeking to expand their knowledge to include cybersecurity.

    • A general understanding of the cloud and cloud services is beneficial.

    This course is aligned with industry-approved occupational standards set by SSC NASSCOM. Once you have successfully completed this course, you will receive a cobranded FutureSkills Prime/SkillUp Online Certificate of Participation that confirms you have:

    • Job-ready competencies
    • Practical experience
    • Assessed technical knowledge

    The national occupational standards to which this course is aligned relate to the following job roles:

    • Security Analyst 
    • Application Security Analyst
    • dentity and Access Management Analyst
    • Endpoint Security Analyst
    • Compliance Audit Analyst
    • Security Operations Centre Analyst
    • Penetration Tester
    • Consultant Network Security
    • Forensic specialist
    • Security Infrastructure Specialist
    • Identity and Access Management Architect

    Program Outline

    Course Info
    Grading
    Student Expectations and Requirements
    Labs

    About this course
    Course Syllabus

    Setting up A LAN
    Network Ports and Protocols
    Network Devices
    Ping and Traceroute
    The OSI and TCP/IP Models
    Types of Area Networks
    Network Sharing and Subnetting
    Finding IP and MAC addresses

    Definitions

    Overview
    Technology lag
    Application development security
    Skill Gap
    Availability and sophistication of attack tools
    Asymmetry of attack and defense
    Video - Monetization of malware
    Automation of detection
    Internet of Things
    Transition to the cloud
    Video - Increasing regulation

    Overview
    Video - Compromise examples
    Types of Malware

    Overview
    Breach investigation
    Systems rehabilitation
    Reputational damage
    Destruction of assets
    Compliance costs

    Module 1 Exam

    Overview
    Red Team
    Blue Team
    Exercise structure
    Management Approval
    Internal versus external red teams

    Video - Overview
    Persist presence
    Steal data
    Hackstortion
    Ransomware
    Coin Miners
    Destroy Systems
    Lesson Review

    Video - Overview
    Reconnaissance
    Weaponization
    Delivery
    Exploitation
    Installation
    Command and Control
    Actions on Objective
    Lesson Review

    Overview

    Module 2 Exam

    Blue team role
    Blue team goals

    Overview
    Gather baseline data
    Detect
    Alert
    Investigate
    Video - Plan a response
    Video - Execute

    Overview
    Video - Privileged access workstations
    Just enough administration
    Just in time administration
    Restrictions on administrative accounts

    Overview
    Video - Code Integrity policies
    Network segmentation
    No common accounts or passwords
    Logon script sanitation
    Apply software update and patches

    Overview
    Logging and monitoring
    SIEM systems
    IDS
    Attack detection and machine learning
    Video - Microsoft attack detection products

    Module 3 Exam

    CIA Triad Overview
    Confidentiality
    Integrity
    Video - Availability

    Overview
    Baseline security posture
    Video - Information classification
    Change tracking and auditing
    Monitoring and reporting
    Lesson Review

    Overview
    Processes
    Video - Disclosure responsibility

    Module 4 Exam

    Course 1 Final exam

    About this course
    Course Syllabus

    Overview
    Video - Phases of a cyber
    Targeted attacks
    Cryptocurrency mining
    Ransomware
    Rapid attacks
    Living
    Stealth
    Video - Assume breach
    Videos(3) - Evolving security perimeter

    Basic Access Control Models

    Overview
    Lesson Review

    Overview
    Lesson Review

    Videos(5) - Overview

    Penetration Testing

    Posture Testing

    Ethical Hacking

    Module Exam

    Zero Trust

    Videos(7) - Overview
    Lesson Review

    Overview
    Architecture of ATA
    Planning for deployment of ATA
    Deploying ATA

    Overview
    Architecture of Windows Defender ATP
    Planning for deployment of Windows Defender ATP
    Deploying Windows Defender ATP

    Overview
    Architecture of Microsoft Enterprise Threat Detection
    Deploying Microsoft Enterprise Threat Detection

    Overview

    Overview

    Monitoring Windows environments for signs of compromise
    Audit Policy Recommendations in Windows environment
    What are Security Audits
    Security Audits Policies
    Lesson Review

    Overview
    System Monitor
    Process Explorer
    AutoRuns
    Sigcheck
    ListDLLs
    Investigating suspicious processes by using SysInternal Suite utilities
    Lesson Review

    Module Exam

    Videos(2) - Microsoft and Office 365Overview
    Microsoft Cloud App Security vs Office 365 Cloud App Security
    Videos(3) - Configuring Microsoft Cloud App Security and Office 365 Cloud App Security
    Lesson Review

    Overview
    Implementing Office 365 Advanced Threat Protection
    Using Office 365 Advanced Threat Protection
    Lesson Review

    Overview
    Lesson Review

    Azure Active Directory Identity Protection
    Azure Active Directory Privileged Identity Management
    Microsoft Operations Management Suite
    Azure Security Center
    Advanced Threat Detection Features
    Third party ATD capabilities through Azure Marketplace
    Lesson Review

    Overview
    Types of logs and alerts in Azure
    Log integration with on premises SIEM systems
    Lesson Review

    Overview
    Azure Advanced Threat Protection

    Overview
    Microsoft 365 Enterprise
    Lesson Review

    Module Exam

    Layered machine learning models
    Detonation
    Multilayer machine learning
    Detonation
    Customizing multi
    Lesson Review

    Detecting and investigating threats with Windows Defender ATP and ATA: Forged PAC
    Detecting cross
    Detecting cross process injection
    Detecting cross process injection atom bombing by Dridex
    Delivering contextual information based on Machine Learning models
    Lesson Review

    Detecting reflective DLL loading by using Windows Error Reporting
    Detecting reflective DLL loading by using behavioral analytics

    Planning for compromise
    Videos(11) - Microsoft cybersecurity strategy

    Module Exam

    Course 2 Final Exam

    Reading Lab

    Welcome
    Course Syllabus

    Introduction
    Cyber Threat Modeling
    Stride

    The National Institute for Standards and Technology (NIST) Cybersecurity Framework (CSF)
    Identify
    Protect
    Detect
    Respond
    Video(2) - Incident Response

    Videos(2) - Prepare
    Things to Remember while in an Incident
    Recovery Preparations
    Lesson Review - Hallmarks of a Strong Response Program

    Critical Success Factors

    Module Exam

    Introduction

    Preparation Actions
    Team Duties
    Team Preparations
    Establishing Team Roles
    CSIRT Communications
    Video - Recovering
    Reviewing Response and Updating Policies
    Module Summary

    Module Exam

    The Security Incident Report

    Introduction
    Practice-SIR
    Incident-Overview
    Disaster Recovery Plan

    Course 3 Final Exam

    About this course
    Course Syllabus

    PowerShell Fundamentals
    Runspaces
    PowerShell Commands and modules
    Windows PowerShell providers
    Windows PowerShell workflow

    Windows PowerShell editions introduction
    1.2.1 Windows PowerShell Version 1.0
    1.2.2.Windows PowerShell Version 2.0
    1.2.3.Windows PowerShell Version 3.0
    1.2.4.Windows PowerShell Version 4.0
    1.2.5 Windows PowerShell Version 5.0
    1.2.6 Windows PowerShell Version 5.1
    1.2.7 PowerShell Version 6.0
    1.2.8 Identifying Windows PowerShell version
    1.2.9 Windows PowerShell version management

    1.3.Running Windows PowerShell
    1.3.2 PowerShell.exe parameters

    Video - Windows PowerShell Operational Security
    Managing local script execution with Windows PowerShell Execution Policy
    Windows PowerShell Execution Policies
    Execution Policy Scopes
    Configuring Execution Policy via Group Policy
    Digitally Signing Windows PowerShell Scripts
    Bypassing Windows PowerShell Execution Policy

    Windows PowerShell built-in remoting capabilities
    WMI and CIM-based remoting capabilities
    Fundamentals of Windows PowerShell Remoting

    Constrained endpoints

    Language Mode
    Enforcing Constrained Language Mode with AppLocker
    Enforcing Constrained Language Mode with Windows Defender DeviceGuard

    Video - Anti-Malware Scan Interface (AMSI)

    Video - Introduction
    Windows PowerShell DSC architecture
    DSC configurations
    The LCM configuration
    Video - The DSC push refresh mode
    The DSC pull refresh mode

    Just Enough Administration (JEA)
    JEA architecture
    JEA prerequisites
    JEA role capabilities
    Videos(2) - JEA session configuration
    Using JEA
    Deploying JEA by using Windows PowerShell DSC

    Introduction
    Video - System-wide transcription
    Video - Script block logging
    Video - Protected Event Logging
    Module logging

    Introduction
    A Sample Exploit
    Code Obfuscation
    Loading Scripts Directly Into Memory
    Code Injection
    Reflective DLL Loading
    Cross-Process Injection

    PowerSploit
    Nishang

    Comparative Analysis Between Scripting Shells Languages
    Implementing Defense In Depth Strategy In Scenarios Involving the Use of Windows PowerShell

    Course 4 Final Exam

    Welcome
    Syllabus
    Grading

    A Control Plane – What is that?
    Identity Management
    Videos(3) - Securing Privilege Access (SPA)
    Securing Privilege Access Roadmap: Stage 1
    Securing the Admin account
    Unique Local Admin Passwords for Workstations
    Video - Unique Local Admin Passwords for Servers

    PAW Phases 2 and 3: Address all administrators and additional hardening
    Time-bound privileges (no permanent administrators)
    Multi-factor for time-bound elevation
    Just Enough Admin (JEA)
    Lower attack surface of Domain and DCs
    Video - Attack Detection
    Security Privileged Access Roadmap: Stage 3
    Modernize Roles and Delegation Model
    Smartcard or Windows Hello for Business Authentication for all administrators
    Admin Forest for Active Directory administrators
    Code Integrity Policy for DCs (Server 2016)
    Video - Shielded VMs for virtual DCs
    Conclusion

    Module Exam

    Avenues to Compromise
    Identifying Vulnerabilities
    Protect and Update Software
    Fix Faulty Configurations
    Reducing the Active Directory Attack Surface
    Videos(4) - Monitoring Active Directory
    Windows Server 2016 has enhanced Active Directory security
    Planning for a Compromise
    Video - Maintaining a More Secure Environment
    Conclusion

    Module Exam

    Identity Federation and Access Solutions
    Video - Azure Active Directory Identity Protection

    Single sign-on
    Video - SSO process
    SSO to apps, using AAD Application Proxy (Reverse proxy)
    Azure Multi-Factor Authentication
    Azure Key Vault
    Videos(2) - Azure Role-Based Access Control (RBAC)
    Azure AD Connect
    How Azure AD Connect Works
    Conclusion

    Module Exam

    Active Directory & Kerberos

    Kerberos + Privilege Attribute Certification (PAC)
    Kerberos Components
    Security Support Provider Interface Overview
    Sign on Sequence for Domain Joined Clients
    User logon steps
    Domain Logon
    Smart card logon
    Biometric logon
    Summary

    Module Exam

    Course 5 Final Exam

    Lab 1
    Lab 2
    Lab 3

    Welcome

    Lab Environment

    Video - Module Introduction
    Video - Overview of SQL Server Security
    Video - Firewalls
    Video - Managing Windows Logins
    Video - Managing SQL Server Logins and Policies
    Video - Authorization Across Servers
    Video - Demo Authenticating Logins
    Resources

    Video - Granting Access to Databases
    Video - Managing dbo and guest Access
    Video - Authorizing Logins and User Tokens
    Video - Module Review
    Resources

    Module Exam

    Video - Module Introduction
    Video - Typical Server-scoped Permissions
    Video - Overview of Fixed Server Roles
    Video - Working with User-defined Server Roles
    Resources

    Video - Overview of Fixed Database Roles
    Video - Assigning Users to Roles
    Video - User-Defined Database Roles
    Video - Demo - Creating Roles
    Resources

    Video - GRANT, REVOKE, DENY
    Video - Securing Tables, Views, and Stored Procedures
    Video - Ownership Chains
    Video - Column-level Security
    Video - Configuring Permissions at the Schema Level
    Video - Authorizing Users to Execute Code
    Video - Demo Authorizing Users to Access Resources
    Resources

    Module Exam

    Video - Module Introduction
    Video - Common Criteria Audit Option
    Video - Using DML Triggers for Auditing
    Video - Demo Auditing System Using Triggers
    Resources

    Video - Configuring SQL Server Audit
    Video - Audit Actions and Action Groups
    Video - Creating Audits
    Video - Retrieving Audits
    Video - Azure Security Center
    Video - All-up audit demo
    Video - Module Review
    Resources

    Module Exam

    Video - Module Introduction
    Video - Transparent Data Encryption
    Video - Moving Encrypted Databases
    Video - Always Encrypted
    Video - Dynamic Data Masking
    Video - Encryption with Azure SQL Database
    Video - Module Review
    Resources

    Module Exam

    Securing Data in SQL Server

    Course 6 Final Exam

    Hello
    Course Syllabus
    Course Resources

    Evolution of attacks

    Secure boot process
    Secure boot to Trusted boot
    Videos(2) - Additional hardware security

    Module Exam

    Windows Defender Firewall
    Video - Virtual secure mode
    Videos(4) - Credential Guard
    BitLocker
    Videos(2) - Antivirus
    Video - Windows Information Protection - Video
    Bonus section

    Module Exam

    Software based security - Part 2
    Videos(3) - Device Guard
    AppLocker with Device Guard
    Windows Defender SmartScreen
    Windows 10 level of telemetry

    Module Exam

    Windows 10 Creator Update
    Enterprise Certificate Pinning
    Windows Hello and Windows Hello for Business
    New Group Policy setting Reference for Windows and Windows Server
    Windows Defender Security Center
    Windows Defender Exploit Guard
    Windows Defender Application Guard
    Windows Defender Advance Threat Protection

    Ransomware protection
    Case study: Windows 10 platform resilience against the Petya ransomware attack
    Module Summary

    Module Exam

    Course 7 Final Exam

    About this course
    Course Syllabus

    Video - Server Hardening
    Reducing Attack Surface
    Video - Server Core First
    Video - Reduce Funtionality

    Video - Service Configuration
    Video - Service Account configuration

    Account Configuration
    Built in Administrator account
    Restrict Local Administrators
    Video - Password and Lockout Policies

    Remote Administrative Access

    Application Restriction
    Application Restriction Policies
    Device Guard

    Video - Firewall Configuration

    Software Updates

    Configuration Baselines
    Desired State Configuration
    Group Policy
    Testing and Documentation

    Restricting Administrator Access

    Local Administrator Password Solution
    How LAPS works
    Video - Configuring and managing passwords by using LAPS

    Credential Guard
    Credential Guard requirements
    Configuring Credential Guard

    Video - NTLM blocking

    Video - Protected Users

    Authentication Policy Silos

    Just Enough Administration
    JEA limitations
    Role-capability files
    Session-configuration files
    JEA endpoints
    Video - Connecting to a JEA endpoint

    Enhanced Security Administrative Environment forests

    Just in Time Administration
    Overview of PAM components
    Understanding shadow principals
    Managing and configuring PAM roles
    Video - Combining PAM with JEA

    Introduction to containers

    Container types
    Windows Server Containers
    Hyper-V Containers
    Container images

    Container Dependencies

    Managing Container images
    Video - Obtaining images
    Video - Updating existing images
    Video - Creating new images

    Docker
    Docker EE
    Managing Containers with Docker

    Container Security Benefits

    Containers versus VMs

    Threats to virtualization fabric
    Guarded fabric
    Video - Host guardian service
    Attestation modes
    Video - Key Protection Service
    Virtual TPM
    Shielded VMs
    Video - Encryption-supported VMs

    Course 8 Final Exam

    About this Course
    Course Syllabus
    Course Resources

    Introduction to Azure Security Architecture

    Video - Introduction to Azure Network Security

    Cloud Security

    Azure Networking

    Network Access Control

    Secure Remote Access and Cross Premises Connectivity

    Video - The following video discusses Virtual Network Peering

    Availability

    Name Resolution

    DMZ Architecture

    Videos(2) - Monitoring and threat detection

    Module Summary

    Module Exam

    Azure Security and Operations Management

    Dynamic cloud environments

    Services in the cloud

    Shared Responsibility for Security
    Video - Azure DDoS Protection Service

    Azure Secure Center
    Video - Alert Validation in ASC
    Detecting unprotected resources
    Security policies and recommendations

    Azure Security Center Case Study
    Recommended remediation and mitigation steps

    Azure Backup – Guard against ransomware and human errors
    Videos(2) - Azure Backup

    Azure Log Analytics – an important component in an effective data protection strategy
    Log Analytics architecture
    Types of logs in Azure
    Integrating Azure Security Center alerts with Azure log integration
    Video - Overview of Azure Log Analytics

    Module Exam

    Azure Security Services
    Capabilities of the Azure Application Gateway
    Video - Azure Application Gateway
    Web Application Firewall
    Secure benefits of Azure Web Application Firewall
    Web Application Firewall Modes
    Summary of Application Gateway

    Azure disk encryption and storage encryption
    Azure SQL Encryption
    Video - Demo Transparent Data Encryption - Part 1
    Video - Demo Transparent Data Encryption - Part 2
    CLient Access Always Encrypted

    Azure SQL Vulnerability Assessment (VA)
    Video - Azure SQL Vulnerability Assessment
    Summary

    Module Exam

    Enterprise Mobility & Security Services
    Microsoft Intune
    How Intune Works
    Azure Active Directory integration with MDM
    MDM Design Considerations
    Application Management with Intune
    General Data Protect Regulation

    Device Health Attestation
    Summary MDM & MAM

    Security Aspect of Windows AutoPilot
    Benefits of Windows AutoPilot

    Module Exam

    Course 9 Final Exam

    Final Lab1
    Final Lab2

    Certificate Information

    Earn Your Certificate
    active learners

    Trusted by 500K+ active Learners & Professionals across 15 countries

    Real Learners. Real Outcomes.

    Hear directly from our learners about how our training has transformed their lives.

    Why Learn with SkillUp Online?

    We believe every learner is an individual and every course is an opportunity to build job-ready skills. Through our human-centered approach to learning, we will empower you to fulfil your professional and personal goals and enjoy career success.

    tick

    Reskilling into tech? We’ll support you.

    tick

    Upskilling for promotion? We’ll help you.

    tick

    Cross-skilling for your career? We’ll guide you.

    icon

    Personalized Mentoring & Support

    1-on-1 mentoring, live classes, webinars, weekly feedback, peer discussion, and much more.

    icon

    Practical Experience

    Hands-on labs and projects tackling real-world challenges. Great for your resumé and LinkedIn profile.

    icon

    Best-in-Class Course Content

    Designed by the industry for the industry so you can build job-ready skills.

    icon

    Job-Ready Skills Focus

    Competency building and global certifications employers are actively looking for.

    FAQs

    Absolutely. FutureSkills Prime courses are an excellent introduction to a subject. Check the course overview page to understand if you need any experience in the subject before enrolling, but most FutureSkills Prime courses require no previous knowledge to enroll. You will, however, require basic skills in math. But be assured that all FutureSkills Prime courses are a great way to discover the basics of a subject.

    Yes. The skills required to be a cybersecurity specialist are in high demand. Many countries are currently experiencing a skills shortage in this area, thus choosing to build a career in this field should present you with great employment opportunities.

    The average salaries for different roles are highly competitive and individuals working in cybersecurity are well remunerated. You also dont need to have a degree in the subject to launch your career. Plus, work can often be carried out remotely, thus there are fewer barriers to finding a position in this arena than for those vacancies that require you to work in an office.

    Foundations of Cybersecurity has been designed for students and learners who have no experience in the field of cybersecurity at all; you do not need to have worked in a cybersecurity role or have any previous knowledge. This program, therefore, provides an excellent introduction to the subject. Please be aware, though, that you do need basic math skills to be able to progress through the program.

    This FutureSkills Prime program is a self-paced program, which means it is not run to a fixed schedule with regard to completing modules or submitting assignments. As long as the program is completed by the end of your enrollment, you can work at your own pace. And dont worry, youre not alone. You will be encouraged to stay connected with your learning community and mentors through the program discussion space.

    The materials for each module are accessible from the start of the program and will remain available for the duration of your enrollment. Methods of learning and assessment will include videos, reading material, and knowledge checks.

    Once you have successfully completed the course, you will earn your certificate.

    Yes, once you have successfully completed Foundations of Cybersecurity, you will earn a Certificate of Participation.

    Foundations of Cybersecurity Program
    certificate

    Type of certificate

    FutureSkills Prime Certificate of Participation

    course

    About this program

    09 courses

    22 skills

    includes

    Includes

    Discussion space

    07 Hands-on labs

    193 Videos lectures

    09 Final exams

    25 Module exams

    create

    Create

    Secure SQL Server

    IAM baseline

    Azure Active Directory multi-factor authentication

    Device management with Intune

    Intune policies

    exercises

    Exercises to explore

    SQL Server Management Studio

    Microsoft Intune

    Azure portal

    Newsletters & Updates

    Subscribe to get the latest tech career trends, guidance, and tips in your inbox.