Hi, 
Foundations of Cybersecurity Program
Program
Foundations of Cybersecurity Program
Discover the fundamentals of cybersecurity. Learn how to develop an incident response action plan, and master the basics of hands-on security skills using key technologies.
Take your first step towards a career in cybersecurity and prepare for gaining a professional qualification in the subject in the future.
Flexible Schedule
Beginner Level
Mentor Support
Estimated Time
45 Hours
Cybersecurity has become a critical requirement for every business, regardless of size. Cyber-attacks are increasing in number exponentially, particularly with the abundance of IoT devices. And whilst traditional firewall and authentication-based protection solutions are a good first line of defense, other approaches such as ‘assume compromise’ must now be included within a protection methodology. This means not only do cybersecurity experts need to master the technologies used to combat attacks, but they also need to understand, anticipate, and mitigate the ever-evolving vulnerabilities appearing day by day.
In this program you will be introduced to the fundamentals of cybersecurity, and the tools and methodologies used to recognize, defend, and prevent some of the most common forms of threat. You will master the basics of security services using PowerShell, Microsoft Advanced Threat Analytics, Microsoft Enterprise Threat Detection, Azure Active Directory, Windows Server 16, and SQL Server. You will discover how to plan an effective computer security incident response team (CSIRT). And you will develop a clear understanding of best practice protocol.
For individuals keen to take their first step in the important world of cybersecurity, this program is an ideal place to start.
This Foundations of Cybersecurity program comprises nine purposely designed courses that take you on a carefully defined learning journey.
It is a self-paced program, which means it is not run to a fixed schedule with regard to completing modules or submitting assignments. To give you an idea of how long the course takes to complete, it is anticipated that if you work 5-6 hours per week, you will complete the program in 12 weeks. However, as long as the program is completed by the end of your enrollment, you can work at your own pace. And you will be encouraged to stay connected with your learning community and mentors through the course discussion space.
The materials for modules are accessible from the start of the program and will remain available for the duration of your enrollment. Materials include videos, hands-on labs, exercises, and knowledge checks.
Enrollment in the program includes all nine courses. You cannot enroll for the courses separately.
As part of our mentoring service you will have access to valuable guidance and support throughout the program. We provide a dedicated discussion space where you can ask questions, chat with your peers, and resolve issues. Depending on the payment plan you have chosen, you may also have access to live classes and webinars, which are an excellent opportunity to discuss problems with your mentor and ask questions. Mentoring services may vary package wise.
Once you have successfully completed Foundations of Cybersecurity, you will earn your FutureSkills Prime Certificate of Participation.
You will:
- Have an understanding of the fundamentals of enterprise cybersecurity.
- Have an appreciation of the different types of cybersecurity threat.
- Have an understanding of threat detection techniques, tools and methodologies.
- Have an understanding of how to plan for a security incident response and build a computer. security incident response team (CSIRT).
- Have in depth understanding of red team vs blue team exercises.
- Be able to deploy and analyze PowerShell best practices.
- Know how to manage network identities.
- Know how to secure data in Microsoft Azure and SQL server.
- Have an understanding of Windows 10 and Microsoft Azure security services.
- Have an understanding of Windows Server 2016 security features.
- This program is specifically aimed at individuals who are keen to gain an understanding of cybersecurity methodologies.
- The skills introduced are valuable across every stage of advancement, from the college graduate looking to land their first career job, to an experienced developer seeking to expand their knowledge to include cybersecurity.
- A general understanding of the cloud and cloud services is beneficial.
This course is aligned with industry-approved occupational standards set by SSC NASSCOM. Once you have successfully completed this course, you will receive a cobranded FutureSkills Prime/SkillUp Online Certificate of Participation that confirms you have:
- Job-ready competencies
- Practical experience
- Assessed technical knowledge
The national occupational standards to which this course is aligned relate to the following job roles:
- Security Analyst
- Application Security Analyst
- dentity and Access Management Analyst
- Endpoint Security Analyst
- Compliance Audit Analyst
- Security Operations Centre Analyst
- Penetration Tester
- Consultant Network Security
- Forensic specialist
- Security Infrastructure Specialist
- Identity and Access Management Architect
Program Outline
Course Info
Grading
Student Expectations and Requirements
Labs
About this course
Course Syllabus
Setting up A LAN
Network Ports and Protocols
Network Devices
Ping and Traceroute
The OSI and TCP/IP Models
Types of Area Networks
Network Sharing and Subnetting
Finding IP and MAC addresses
Definitions
Overview
Technology lag
Application development security
Skill Gap
Availability and sophistication of attack tools
Asymmetry of attack and defense
Video - Monetization of malware
Automation of detection
Internet of Things
Transition to the cloud
Video - Increasing regulation
Overview
Video - Compromise examples
Types of Malware
Overview
Breach investigation
Systems rehabilitation
Reputational damage
Destruction of assets
Compliance costs
Module 1 Exam
Overview
Red Team
Blue Team
Exercise structure
Management Approval
Internal versus external red teams
Video - Overview
Persist presence
Steal data
Hackstortion
Ransomware
Coin Miners
Destroy Systems
Lesson Review
Video - Overview
Reconnaissance
Weaponization
Delivery
Exploitation
Installation
Command and Control
Actions on Objective
Lesson Review
Overview
Module 2 Exam
Blue team role
Blue team goals
Overview
Gather baseline data
Detect
Alert
Investigate
Video - Plan a response
Video - Execute
Overview
Video - Privileged access workstations
Just enough administration
Just in time administration
Restrictions on administrative accounts
Overview
Video - Code Integrity policies
Network segmentation
No common accounts or passwords
Logon script sanitation
Apply software update and patches
Overview
Logging and monitoring
SIEM systems
IDS
Attack detection and machine learning
Video - Microsoft attack detection products
Module 3 Exam
CIA Triad Overview
Confidentiality
Integrity
Video - Availability
Overview
Baseline security posture
Video - Information classification
Change tracking and auditing
Monitoring and reporting
Lesson Review
Overview
Processes
Video - Disclosure responsibility
Module 4 Exam
Course 1 Final exam
About this course
Course Syllabus
Overview
Video - Phases of a cyber
Targeted attacks
Cryptocurrency mining
Ransomware
Rapid attacks
Living
Stealth
Video - Assume breach
Videos(3) - Evolving security perimeter
Basic Access Control Models
Overview
Lesson Review
Overview
Lesson Review
Videos(5) - Overview
Penetration Testing
Posture Testing
Ethical Hacking
Module Exam
Zero Trust
Videos(7) - Overview
Lesson Review
Overview
Architecture of ATA
Planning for deployment of ATA
Deploying ATA
Overview
Architecture of Windows Defender ATP
Planning for deployment of Windows Defender ATP
Deploying Windows Defender ATP
Overview
Architecture of Microsoft Enterprise Threat Detection
Deploying Microsoft Enterprise Threat Detection
Overview
Overview
Monitoring Windows environments for signs of compromise
Audit Policy Recommendations in Windows environment
What are Security Audits
Security Audits Policies
Lesson Review
Overview
System Monitor
Process Explorer
AutoRuns
Sigcheck
ListDLLs
Investigating suspicious processes by using SysInternal Suite utilities
Lesson Review
Module Exam
Videos(2) - Microsoft and Office 365Overview
Microsoft Cloud App Security vs Office 365 Cloud App Security
Videos(3) - Configuring Microsoft Cloud App Security and Office 365 Cloud App Security
Lesson Review
Overview
Implementing Office 365 Advanced Threat Protection
Using Office 365 Advanced Threat Protection
Lesson Review
Overview
Lesson Review
Azure Active Directory Identity Protection
Azure Active Directory Privileged Identity Management
Microsoft Operations Management Suite
Azure Security Center
Advanced Threat Detection Features
Third party ATD capabilities through Azure Marketplace
Lesson Review
Overview
Types of logs and alerts in Azure
Log integration with on premises SIEM systems
Lesson Review
Overview
Azure Advanced Threat Protection
Overview
Microsoft 365 Enterprise
Lesson Review
Module Exam
Layered machine learning models
Detonation
Multilayer machine learning
Detonation
Customizing multi
Lesson Review
Detecting and investigating threats with Windows Defender ATP and ATA: Forged PAC
Detecting cross
Detecting cross process injection
Detecting cross process injection atom bombing by Dridex
Delivering contextual information based on Machine Learning models
Lesson Review
Detecting reflective DLL loading by using Windows Error Reporting
Detecting reflective DLL loading by using behavioral analytics
Planning for compromise
Videos(11) - Microsoft cybersecurity strategy
Module Exam
Course 2 Final Exam
Reading Lab
Welcome
Course Syllabus
Introduction
Cyber Threat Modeling
Stride
The National Institute for Standards and Technology (NIST) Cybersecurity Framework (CSF)
Identify
Protect
Detect
Respond
Video(2) - Incident Response
Videos(2) - Prepare
Things to Remember while in an Incident
Recovery Preparations
Lesson Review - Hallmarks of a Strong Response Program
Critical Success Factors
Module Exam
Introduction
Preparation Actions
Team Duties
Team Preparations
Establishing Team Roles
CSIRT Communications
Video - Recovering
Reviewing Response and Updating Policies
Module Summary
Module Exam
The Security Incident Report
Introduction
Practice-SIR
Incident-Overview
Disaster Recovery Plan
Course 3 Final Exam
About this course
Course Syllabus
PowerShell Fundamentals
Runspaces
PowerShell Commands and modules
Windows PowerShell providers
Windows PowerShell workflow
Windows PowerShell editions introduction
1.2.1 Windows PowerShell Version 1.0
1.2.2.Windows PowerShell Version 2.0
1.2.3.Windows PowerShell Version 3.0
1.2.4.Windows PowerShell Version 4.0
1.2.5 Windows PowerShell Version 5.0
1.2.6 Windows PowerShell Version 5.1
1.2.7 PowerShell Version 6.0
1.2.8 Identifying Windows PowerShell version
1.2.9 Windows PowerShell version management
1.3.Running Windows PowerShell
1.3.2 PowerShell.exe parameters
Video - Windows PowerShell Operational Security
Managing local script execution with Windows PowerShell Execution Policy
Windows PowerShell Execution Policies
Execution Policy Scopes
Configuring Execution Policy via Group Policy
Digitally Signing Windows PowerShell Scripts
Bypassing Windows PowerShell Execution Policy
Windows PowerShell built-in remoting capabilities
WMI and CIM-based remoting capabilities
Fundamentals of Windows PowerShell Remoting
Constrained endpoints
Language Mode
Enforcing Constrained Language Mode with AppLocker
Enforcing Constrained Language Mode with Windows Defender DeviceGuard
Video - Anti-Malware Scan Interface (AMSI)
Video - Introduction
Windows PowerShell DSC architecture
DSC configurations
The LCM configuration
Video - The DSC push refresh mode
The DSC pull refresh mode
Just Enough Administration (JEA)
JEA architecture
JEA prerequisites
JEA role capabilities
Videos(2) - JEA session configuration
Using JEA
Deploying JEA by using Windows PowerShell DSC
Introduction
Video - System-wide transcription
Video - Script block logging
Video - Protected Event Logging
Module logging
Introduction
A Sample Exploit
Code Obfuscation
Loading Scripts Directly Into Memory
Code Injection
Reflective DLL Loading
Cross-Process Injection
PowerSploit
Nishang
Comparative Analysis Between Scripting Shells Languages
Implementing Defense In Depth Strategy In Scenarios Involving the Use of Windows PowerShell
Course 4 Final Exam
Welcome
Syllabus
Grading
A Control Plane – What is that?
Identity Management
Videos(3) - Securing Privilege Access (SPA)
Securing Privilege Access Roadmap: Stage 1
Securing the Admin account
Unique Local Admin Passwords for Workstations
Video - Unique Local Admin Passwords for Servers
PAW Phases 2 and 3: Address all administrators and additional hardening
Time-bound privileges (no permanent administrators)
Multi-factor for time-bound elevation
Just Enough Admin (JEA)
Lower attack surface of Domain and DCs
Video - Attack Detection
Security Privileged Access Roadmap: Stage 3
Modernize Roles and Delegation Model
Smartcard or Windows Hello for Business Authentication for all administrators
Admin Forest for Active Directory administrators
Code Integrity Policy for DCs (Server 2016)
Video - Shielded VMs for virtual DCs
Conclusion
Module Exam
Avenues to Compromise
Identifying Vulnerabilities
Protect and Update Software
Fix Faulty Configurations
Reducing the Active Directory Attack Surface
Videos(4) - Monitoring Active Directory
Windows Server 2016 has enhanced Active Directory security
Planning for a Compromise
Video - Maintaining a More Secure Environment
Conclusion
Module Exam
Identity Federation and Access Solutions
Video - Azure Active Directory Identity Protection
Single sign-on
Video - SSO process
SSO to apps, using AAD Application Proxy (Reverse proxy)
Azure Multi-Factor Authentication
Azure Key Vault
Videos(2) - Azure Role-Based Access Control (RBAC)
Azure AD Connect
How Azure AD Connect Works
Conclusion
Module Exam
Active Directory & Kerberos
Kerberos + Privilege Attribute Certification (PAC)
Kerberos Components
Security Support Provider Interface Overview
Sign on Sequence for Domain Joined Clients
User logon steps
Domain Logon
Smart card logon
Biometric logon
Summary
Module Exam
Course 5 Final Exam
Lab 1
Lab 2
Lab 3
Welcome
Lab Environment
Video - Module Introduction
Video - Overview of SQL Server Security
Video - Firewalls
Video - Managing Windows Logins
Video - Managing SQL Server Logins and Policies
Video - Authorization Across Servers
Video - Demo Authenticating Logins
Resources
Video - Granting Access to Databases
Video - Managing dbo and guest Access
Video - Authorizing Logins and User Tokens
Video - Module Review
Resources
Module Exam
Video - Module Introduction
Video - Typical Server-scoped Permissions
Video - Overview of Fixed Server Roles
Video - Working with User-defined Server Roles
Resources
Video - Overview of Fixed Database Roles
Video - Assigning Users to Roles
Video - User-Defined Database Roles
Video - Demo - Creating Roles
Resources
Video - GRANT, REVOKE, DENY
Video - Securing Tables, Views, and Stored Procedures
Video - Ownership Chains
Video - Column-level Security
Video - Configuring Permissions at the Schema Level
Video - Authorizing Users to Execute Code
Video - Demo Authorizing Users to Access Resources
Resources
Module Exam
Video - Module Introduction
Video - Common Criteria Audit Option
Video - Using DML Triggers for Auditing
Video - Demo Auditing System Using Triggers
Resources
Video - Configuring SQL Server Audit
Video - Audit Actions and Action Groups
Video - Creating Audits
Video - Retrieving Audits
Video - Azure Security Center
Video - All-up audit demo
Video - Module Review
Resources
Module Exam
Video - Module Introduction
Video - Transparent Data Encryption
Video - Moving Encrypted Databases
Video - Always Encrypted
Video - Dynamic Data Masking
Video - Encryption with Azure SQL Database
Video - Module Review
Resources
Module Exam
Securing Data in SQL Server
Course 6 Final Exam
Hello
Course Syllabus
Course Resources
Evolution of attacks
Secure boot process
Secure boot to Trusted boot
Videos(2) - Additional hardware security
Module Exam
Windows Defender Firewall
Video - Virtual secure mode
Videos(4) - Credential Guard
BitLocker
Videos(2) - Antivirus
Video - Windows Information Protection - Video
Bonus section
Module Exam
Software based security - Part 2
Videos(3) - Device Guard
AppLocker with Device Guard
Windows Defender SmartScreen
Windows 10 level of telemetry
Module Exam
Windows 10 Creator Update
Enterprise Certificate Pinning
Windows Hello and Windows Hello for Business
New Group Policy setting Reference for Windows and Windows Server
Windows Defender Security Center
Windows Defender Exploit Guard
Windows Defender Application Guard
Windows Defender Advance Threat Protection
Ransomware protection
Case study: Windows 10 platform resilience against the Petya ransomware attack
Module Summary
Module Exam
Course 7 Final Exam
About this course
Course Syllabus
Video - Server Hardening
Reducing Attack Surface
Video - Server Core First
Video - Reduce Funtionality
Video - Service Configuration
Video - Service Account configuration
Account Configuration
Built in Administrator account
Restrict Local Administrators
Video - Password and Lockout Policies
Remote Administrative Access
Application Restriction
Application Restriction Policies
Device Guard
Video - Firewall Configuration
Software Updates
Configuration Baselines
Desired State Configuration
Group Policy
Testing and Documentation
Restricting Administrator Access
Local Administrator Password Solution
How LAPS works
Video - Configuring and managing passwords by using LAPS
Credential Guard
Credential Guard requirements
Configuring Credential Guard
Video - NTLM blocking
Video - Protected Users
Authentication Policy Silos
Just Enough Administration
JEA limitations
Role-capability files
Session-configuration files
JEA endpoints
Video - Connecting to a JEA endpoint
Enhanced Security Administrative Environment forests
Just in Time Administration
Overview of PAM components
Understanding shadow principals
Managing and configuring PAM roles
Video - Combining PAM with JEA
Introduction to containers
Container types
Windows Server Containers
Hyper-V Containers
Container images
Container Dependencies
Managing Container images
Video - Obtaining images
Video - Updating existing images
Video - Creating new images
Docker
Docker EE
Managing Containers with Docker
Container Security Benefits
Containers versus VMs
Threats to virtualization fabric
Guarded fabric
Video - Host guardian service
Attestation modes
Video - Key Protection Service
Virtual TPM
Shielded VMs
Video - Encryption-supported VMs
Course 8 Final Exam
About this Course
Course Syllabus
Course Resources
Introduction to Azure Security Architecture
Video - Introduction to Azure Network Security
Cloud Security
Azure Networking
Network Access Control
Secure Remote Access and Cross Premises Connectivity
Video - The following video discusses Virtual Network Peering
Availability
Name Resolution
DMZ Architecture
Videos(2) - Monitoring and threat detection
Module Summary
Module Exam
Azure Security and Operations Management
Dynamic cloud environments
Services in the cloud
Shared Responsibility for Security
Video - Azure DDoS Protection Service
Azure Secure Center
Video - Alert Validation in ASC
Detecting unprotected resources
Security policies and recommendations
Azure Security Center Case Study
Recommended remediation and mitigation steps
Azure Backup – Guard against ransomware and human errors
Videos(2) - Azure Backup
Azure Log Analytics – an important component in an effective data protection strategy
Log Analytics architecture
Types of logs in Azure
Integrating Azure Security Center alerts with Azure log integration
Video - Overview of Azure Log Analytics
Module Exam
Azure Security Services
Capabilities of the Azure Application Gateway
Video - Azure Application Gateway
Web Application Firewall
Secure benefits of Azure Web Application Firewall
Web Application Firewall Modes
Summary of Application Gateway
Azure disk encryption and storage encryption
Azure SQL Encryption
Video - Demo Transparent Data Encryption - Part 1
Video - Demo Transparent Data Encryption - Part 2
CLient Access Always Encrypted
Azure SQL Vulnerability Assessment (VA)
Video - Azure SQL Vulnerability Assessment
Summary
Module Exam
Enterprise Mobility & Security Services
Microsoft Intune
How Intune Works
Azure Active Directory integration with MDM
MDM Design Considerations
Application Management with Intune
General Data Protect Regulation
Device Health Attestation
Summary MDM & MAM
Security Aspect of Windows AutoPilot
Benefits of Windows AutoPilot
Module Exam
Course 9 Final Exam
Final Lab1
Final Lab2
Certificate Information
Earn Your Certificate
Trusted by 500K+ active Learners & Professionals across 15 countries
Real Learners. Real Outcomes.
Hear directly from our learners about how our training has transformed their lives.
Why Learn with SkillUp Online?
We believe every learner is an individual and every course is an opportunity to build job-ready skills. Through our human-centered approach to learning, we will empower you to fulfil your professional and personal goals and enjoy career success.
Reskilling into tech? We’ll support you.
Upskilling for promotion? We’ll help you.
Cross-skilling for your career? We’ll guide you.
Personalized Mentoring & Support
1-on-1 mentoring, live classes, webinars, weekly feedback, peer discussion, and much more.
Practical Experience
Hands-on labs and projects tackling real-world challenges. Great for your resumé and LinkedIn profile.
Best-in-Class Course Content
Designed by the industry for the industry so you can build job-ready skills.
Job-Ready Skills Focus
Competency building and global certifications employers are actively looking for.
FAQs
Absolutely. FutureSkills Prime courses are an excellent introduction to a subject. Check the course overview page to understand if you need any experience in the subject before enrolling, but most FutureSkills Prime courses require no previous knowledge to enroll. You will, however, require basic skills in math. But be assured that all FutureSkills Prime courses are a great way to discover the basics of a subject.
Yes. The skills required to be a cybersecurity specialist are in high demand. Many countries are currently experiencing a skills shortage in this area, thus choosing to build a career in this field should present you with great employment opportunities.
The average salaries for different roles are highly competitive and individuals working in cybersecurity are well remunerated. You also dont need to have a degree in the subject to launch your career. Plus, work can often be carried out remotely, thus there are fewer barriers to finding a position in this arena than for those vacancies that require you to work in an office.
Foundations of Cybersecurity has been designed for students and learners who have no experience in the field of cybersecurity at all; you do not need to have worked in a cybersecurity role or have any previous knowledge. This program, therefore, provides an excellent introduction to the subject. Please be aware, though, that you do need basic math skills to be able to progress through the program.
This FutureSkills Prime program is a self-paced program, which means it is not run to a fixed schedule with regard to completing modules or submitting assignments. As long as the program is completed by the end of your enrollment, you can work at your own pace. And dont worry, youre not alone. You will be encouraged to stay connected with your learning community and mentors through the program discussion space.
The materials for each module are accessible from the start of the program and will remain available for the duration of your enrollment. Methods of learning and assessment will include videos, reading material, and knowledge checks.
Once you have successfully completed the course, you will earn your certificate.
Yes, once you have successfully completed Foundations of Cybersecurity, you will earn a Certificate of Participation.
Type of certificate
FutureSkills Prime Certificate of Participation
About this program
09 courses
22 skills
Includes
Discussion space
07 Hands-on labs
193 Videos lectures
09 Final exams
25 Module exams
Create
Secure SQL Server
IAM baseline
Azure Active Directory multi-factor authentication
Device management with Intune
Intune policies
Exercises to explore
SQL Server Management Studio
Microsoft Intune
Azure portal
Newsletters & Updates
Subscribe to get the latest tech career trends, guidance, and tips in your inbox.