x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Certified: The CompTIA Security+ Audio Course

Dr. Jason Edwards

Certified - Security+ 701 is your completely free audio companion for mastering the CompTIA Security+ SY0-701 certification exam. Developed by BareMetalCyber.com, this immersive Audio Course transforms every domain of the official exam objectives into clear, practical, and exam-ready lessons you can learn anywhere—whether commuting, exercising, or studying at home. Each episode delivers focused explanations, real-world examples, and proven study strategies designed to build confidence and help you

technology courses

All Episodes

9:33

System and Process Auditing (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Auditing is how security teams verify that controls are working, policies are being followed, and no one is operating outside expected behavior—and in this episode, we explore both system and process auditing in depth. System audits focus on configurations, permissions, and change logs—ensuring that operating systems, devices, and applications remain in a secure, known state. Process audits, on the other hand, examine whether organizational practices—like onboarding, patching, or incident

en

10:32

Vulnerability Identification Methods (Part 2) (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Continuing our exploration of how vulnerabilities are identified, this episode focuses on external and community-driven methods, including penetration testing, bug bounty programs, responsible disclosure, and open-source intelligence (OSINT). Penetration testing simulates real-world attack scenarios—often with limited knowledge—to uncover exploitable weaknesses that automated scanners might miss, making it one of the most effective and insightful forms of testing. Bug bounty programs

en

10:57

Vulnerability Identification Methods (Part 1) (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Finding vulnerabilities before attackers do is a core function of modern cybersecurity, and this episode explores the technical methods used to identify them early and accurately. We begin with vulnerability scanning—automated tools that assess systems for known weaknesses, configuration flaws, and missing patches, often using regularly updated databases and scoring systems like CVSS. We also discuss application-level identification, including static code analysis (which reviews source code

en

9:41

Data Retention and Secure Management Practices...

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Data retention policies define what data must be kept, for how long, and under what security controls—and when they’re done right, they strike a balance between legal obligations, operational needs, and security. In this episode, we explore how organizations develop and enforce data retention practices that comply with regulations like GDPR, HIPAA, or PCI-DSS while also avoiding unnecessary data hoarding that increases risk. Retained data must be secured, categorized, and regularly reviewed

en

10:26

Secure Asset Disposal and Decommissioning (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

When assets reach the end of their lifecycle, they don’t just disappear—they become potential liabilities if not securely decommissioned. In this episode, we explore the processes and tools used for secure asset disposal, including data sanitization, cryptographic wiping, degaussing, and physical destruction. We also discuss how improperly retired systems—like old servers, network devices, or hard drives—can leak sensitive data or provide backdoor access to an otherwise secure network. A

en

9:28

Asset Monitoring and Tracking (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Security begins with visibility, and that means knowing what devices, systems, and software exist within your environment at all times. In this episode, we dive into asset monitoring and tracking, emphasizing the importance of real-time discovery tools, agent-based scanning, and centralized asset inventories that support security monitoring, patch management, and incident response. We also explore challenges like shadow IT—unauthorized systems that operate outside governance—and how to

en

9:22

Assignment, Ownership, and Classification (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

To manage risk effectively, organizations must know what they own, who is responsible for it, and how critical it is—this is the basis of asset assignment, ownership, and classification. In this episode, we discuss the importance of tagging and tracking assets, designating accountable owners, and classifying systems and data based on sensitivity and function. Ownership enforces accountability: every asset—from a cloud resource to a mobile device—should have someone responsible for ensuring

en

9:15

Acquisition and Procurement Security (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Security doesn’t start when a system is installed—it begins during the procurement process. In this episode, we examine how secure acquisition strategies reduce long-term risk by vetting vendors, establishing supply chain transparency, and embedding cybersecurity requirements in contracts and service-level agreements (SLAs). We discuss how organizations should assess the security posture of suppliers, request evidence of internal controls or compliance certifications, and evaluate whether

en

9:16

Isolation and Monitoring Techniques (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Isolation and monitoring form a defensive pairing that not only limits the spread of threats but enables rapid detection and response. In this episode, we discuss isolation technologies like sandboxing, virtualization, and containerization, which allow untrusted or risky code to run without impacting the host system. We then move into monitoring practices at both the host and network levels, emphasizing the value of behavior-based alerts, centralized logging, and real-time anomaly detection

en

9:50

Application Security Essentials (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Applications are often the most exposed layer of an organization’s attack surface, and defending them requires both proactive development practices and reactive protection mechanisms. In this episode, we review essential application security concepts including input validation, secure cookie handling, and session management to prevent injection attacks, cross-site scripting (XSS), and session hijacking. We also examine the importance of static code analysis during development, code signing

en

10:36

Advanced Wireless Security Techniques (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

As wireless threats become more sophisticated, organizations must move beyond basic security measures and implement advanced techniques to protect access points and users. In this episode, we cover the use of WPA3 for stronger encryption and resistance to brute-force attacks, along with 802.1X authentication backed by RADIUS servers for identity-based access control. We explore the use of digital certificates to replace pre-shared keys (PSKs), reducing the risk of credential sharing or

en

10:19

Securing Mobile Connectivity (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Mobile devices connect through a variety of channels—cellular networks, Wi-Fi, and Bluetooth—each with its own risks and requirements for secure operation. In this episode, we examine the vulnerabilities introduced by unsecured public Wi-Fi, rogue access points, and Bluetooth pairing, and how attackers can exploit these to conduct man-in-the-middle (MitM) attacks, spoofing, or data interception. We highlight best practices for securing each connection method, including the use of VPNs,

en

10:20

Securing Mobile Solutions (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Mobile devices have become indispensable for productivity, but they also introduce unique security challenges due to their portability, connectivity, and often personal ownership. In this episode, we explore how mobile device management (MDM) platforms enable organizations to enforce policies on corporate-owned and bring-your-own-device (BYOD) endpoints alike, controlling app installation, encryption, screen lock requirements, and remote wipe capabilities. We differentiate between

en

9:38

Securing Wireless Networks (Part 1) (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Wireless networks offer convenience, but they also expand the attack surface by broadcasting connectivity beyond physical boundaries, making them inherently riskier than wired alternatives. In this episode, we focus on securing wireless environments beginning with proper access point placement, signal strength tuning, and site surveys that help prevent signal bleed and rogue AP exposure. We also cover basic configurations like disabling SSID broadcast (in select cases), using WPA3

en

10:53

Hardening Embedded Systems and IoT Devices (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Embedded systems and IoT devices often operate in environments where security is either underprioritized or extremely difficult to implement, making them prime targets for persistent threats. In this episode, we dive into the unique challenges of hardening these devices, including limited processing power, minimal user interfaces, and inconsistent update mechanisms. Many come with hardcoded credentials, outdated firmware, or open services enabled by default—problems that demand mitigation

en

9:46

Hardening Computing Resources (Part 2) (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Continuing our discussion on hardening, this episode shifts focus to cloud infrastructure, servers, and industrial systems—each of which requires a tailored approach based on operational roles, architecture, and threat exposure. For cloud systems, hardening includes enforcing role-based access control, disabling unused services, encrypting storage, and monitoring resource usage across accounts and regions. On traditional servers, it involves managing local and domain policies, securing SSH

en

9:42

Hardening Computing Resources (Part 1) (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Hardening is the practice of stripping down systems to only what they need to function securely, and this episode focuses on doing just that for mobile devices, workstations, switches, and routers. These devices often serve as entry points for attackers, especially when defaults are left in place, unnecessary services are running, or updates are neglected. We cover basic but essential steps such as disabling unused ports, updating firmware, removing bloatware, enforcing screen locks, and

en

9:22

Secure Baselines and System Management (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Establishing a secure baseline is one of the most fundamental—and often overlooked—steps in managing system security. In this episode, we explain how baselines define the minimum acceptable security configuration for a given system, including settings for password policies, logging, services, ports, user rights, and installed software. These baselines serve as both a reference point for compliance and a launchpad for configuration management, allowing you to detect drift, enforce policy,

en

8:46

Introduction to Domain Four — Security Operations

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

If Domains One through Three are about understanding the principles and design of cybersecurity, then Domain Four is about the actual day-to-day work that keeps systems secure. This is where cybersecurity gets real. Welcome to Security Operations.Domain Four is the largest domain on the Security Plus exam. It makes up 28 percent of the test—that’s nearly one-third of the total questions. That alone tells you how important this material is, both for the exam and for your career. Whether you

en

9:38

Power Resilience and Continuity (Domain 3)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Without reliable power, even the most secure systems are at risk of failure—and in many environments, loss of power is both a security and safety issue. In this episode, we explore how power resilience contributes to business continuity, starting with uninterruptible power supplies (UPS) that bridge short outages and allow graceful shutdowns. We cover the role of backup generators for longer-term outages, battery management systems, and fuel logistics in ensuring extended availability

en

222 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs