x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Certified - CompTIA Cloud+ Audio Course

Get exam-ready with the CompTIA Cloud+ Audio Course — your complete, on-demand companion for mastering every domain of the CompTIA Cloud+ (CV0-003) certification. Each episode takes you deep into the essentials of cloud architecture, deployment, operations, security, and troubleshooting, breaking down complex topics into clear, practical explanations you can put to use right away. Designed for busy professionals and aspiring cloud specialists alike, this course helps you build true technical

technology courses

All Episodes

13:57

Episode 65 — Encryption Practices — OS, App, Storage,...

Certified - CompTIA Cloud+ Audio Course ·

2025/08/24

In this episode, we explore encryption practices across multiple layers of a cloud environment. We explain how to secure operating systems with full disk encryption, protect applications with encrypted communications, safeguard storage through encryption at rest, and secure APIs with TLS or other cryptographic protocols. Filesystem encryption is also discussed for granular data protection within virtual machines or containers.We also cover key management considerations, performance impacts,

en

13:05

Episode 64 — Security Through Configuration...

Certified - CompTIA Cloud+ Audio Course ·

2025/08/24

This episode looks at how configuration management and event monitoring work together to maintain cloud security. Configuration management ensures systems are deployed and maintained according to predefined policies, reducing drift and misconfigurations. Event monitoring collects and analyzes data from system logs, security tools, and applications to detect deviations or suspicious behavior.We also highlight the value of integrating these functions into automated workflows that can respond

en

14:02

Episode 63 — Hardened OS and Application Baselines

Certified - CompTIA Cloud+ Audio Course ·

2025/08/24

In this episode, we explain how hardened baselines create secure, standardized configurations for operating systems and applications. We cover the process of removing unnecessary services, disabling unused accounts, applying security patches, and configuring system-level protections. The goal is to reduce vulnerabilities and ensure all deployed systems meet a consistent security standard.We also discuss how to automate baseline deployment with configuration management tools, and how to

en

14:09

Episode 62 — HIDS and HIPS — Host-Level Detection and...

Certified - CompTIA Cloud+ Audio Course ·

2025/08/24

This episode covers Host-based Intrusion Detection Systems (HIDS) and Host-based Intrusion Prevention Systems (HIPS) as part of a layered cloud security approach. HIDS monitors and analyzes system activity, looking for suspicious behavior or policy violations, while HIPS actively blocks identified threats before they can cause harm. We detail how these systems work at the OS and application level, and how they complement network-based solutions.We also examine deployment strategies,

en

14:38

Episode 61 — User Permissions, Antivirus, and...

Certified - CompTIA Cloud+ Audio Course ·

2025/08/24

In this episode, we look at three critical layers of endpoint and application security in cloud environments. User permissions define the specific resources and actions a user can access, enforcing the principle of least privilege. Antivirus software is covered as a first line of defense against known malware threats, while endpoint detection and response (EDR) tools add advanced capabilities like behavioral analysis, threat hunting, and automated remediation. Together, these elements

en

15:57

Episode 60 — OS and Application Security Policies —...

Certified - CompTIA Cloud+ Audio Course ·

2025/08/24

In this episode, we focus on the security policies that protect operating systems and applications in cloud environments. We cover password complexity and expiration requirements, account lockout thresholds, and application whitelisting to prevent unauthorized software execution. The discussion also touches on enforcing these policies through configuration management tools and group policy objects.We also explore how these policies reduce the risk of credential compromise, unauthorized

en

16:12

Episode 59 — DDoS Protection in the Cloud — Design...

Certified - CompTIA Cloud+ Audio Course ·

2025/08/24

This episode explores how to design cloud environments to withstand Distributed Denial of Service (DDoS) attacks. We discuss layered defense strategies, including upstream filtering by cloud providers, traffic scrubbing services, and auto-scaling to absorb surges. The importance of monitoring and anomaly detection is also covered, as well as incident response playbooks for mitigating active attacks.We also examine the trade-offs between cost, performance, and security in DDoS defense

en

16:24

Episode 58 — Traffic Control — Ingress, Egress,...

Certified - CompTIA Cloud+ Audio Course ·

2025/08/24

In this episode, we explain the methods used to control and secure inbound (ingress) and outbound (egress) traffic in cloud environments. We detail how firewalls, access control lists, and routing policies enforce these controls, and how proxies can provide content filtering, caching, and malware scanning. The episode also covers advanced filtering techniques, including application-aware firewalls and intrusion prevention integrations.We also discuss how properly configured traffic control

en

16:51

Episode 57 — Hardening Network Configurations —...

Certified - CompTIA Cloud+ Audio Course ·

2025/08/24

This episode focuses on reducing attack surfaces by hardening network device configurations. We explain the process of closing unused ports, disabling insecure or unnecessary protocols, and applying firmware updates to address vulnerabilities. We also discuss best practices for change control, configuration backups, and testing updates before production rollout. These measures are essential for ensuring network devices remain secure, stable, and compliant with security standards.We also

en

13:50

Episode 56 — Network Flow Analysis and Anomaly Detection

Certified - CompTIA Cloud+ Audio Course ·

2025/08/24

In this episode, we explore how network flow analysis provides valuable insights into traffic patterns, bandwidth utilization, and potential security threats in cloud environments. We explain the difference between packet-level analysis and flow-based monitoring, with a focus on using NetFlow, sFlow, or IPFIX to gather aggregated traffic data. This approach allows administrators to identify normal baselines and detect anomalies that could indicate attacks, misconfigurations, or policy

en

16:28

Episode 55 — Log and Event Monitoring for Network...

Certified - CompTIA Cloud+ Audio Course ·

2025/08/24

In this episode, we cover the role of log and event monitoring in detecting and responding to security incidents. We explain the types of logs generated by firewalls, IDS/IPS, and network devices, and how to centralize them for analysis. Event correlation is discussed as a method for identifying patterns that may indicate malicious activity or system failure. We also emphasize the importance of retention policies and secure storage for forensic investigations.We also address how automated

en

13:01

Episode 54 — Packet Brokers and DLP Tools in Cloud...

Certified - CompTIA Cloud+ Audio Course ·

2025/08/24

This episode explains how packet brokers and data loss prevention (DLP) tools enhance visibility and control in cloud environments. Packet brokers aggregate and filter traffic from multiple sources, optimizing monitoring tool performance. DLP tools identify, monitor, and protect sensitive information from unauthorized transfer, whether intentional or accidental. We discuss common deployment patterns for both, including integration with existing security and monitoring stacks.We also explore

en

14:22

Episode 53 — IPS, IDS, NAC, and Advanced Network...

Certified - CompTIA Cloud+ Audio Course ·

2025/08/24

In this episode, we look at intrusion prevention systems (IPS), intrusion detection systems (IDS), and network access control (NAC) as part of a broader cloud security architecture. IPS actively blocks malicious traffic in real time, IDS alerts administrators to suspicious activity, and NAC enforces device compliance before granting network access. We explain deployment models, detection methods, and integration with SIEM solutions for centralized monitoring.We also address advanced network

en

12:26

Episode 52 — Cloud Network Services —...

Certified - CompTIA Cloud+ Audio Course ·

2025/08/24

This episode explains how network security appliances and services operate in cloud environments. We begin with stateful firewalls, which track active sessions and allow or block traffic based on the state of connections, and contrast them with stateless firewalls, which evaluate each packet individually without session context. We also cover web application firewalls (WAFs) that protect applications from common exploits like SQL injection, cross-site scripting, and request forgery. The

en

13:08

Episode 51 — Secure Tunneling — SSH, GRE, L2TP, PPTP

Certified - CompTIA Cloud+ Audio Course ·

2025/08/24

In this episode, we cover the tunneling protocols that enable secure or encapsulated communications in cloud and hybrid network architectures. Secure Shell (SSH) is explained as both a remote access protocol and a secure tunneling mechanism for other traffic. Generic Routing Encapsulation (GRE) is introduced for transporting multiple protocols over IP networks, with a focus on its flexibility but lack of inherent encryption. Layer 2 Tunneling Protocol (L2TP) and Point-to-Point Tunneling

en

13:02

Episode 50 — Network Encryption — IPSec, TLS, HTTPS

Certified - CompTIA Cloud+ Audio Course ·

2025/08/24

In this episode, we detail the protocols that protect data in transit across cloud networks. IPSec is covered as a suite for securing IP communications, including its modes, encryption methods, and authentication options. TLS is explained as the protocol securing most application-layer traffic, while HTTPS is presented as the encrypted form of HTTP used for secure web communication. We cover where and why each is deployed in cloud systems.We also discuss configuration best practices, such

en

12:19

Episode 49 — Time Synchronization and NTP Security

Certified - CompTIA Cloud+ Audio Course ·

2025/08/24

This episode discusses the importance of accurate timekeeping for authentication, logging, and system coordination in cloud environments. We explain how the Network Time Protocol (NTP) operates, why time drift can cause authentication failures or log mismatches, and how to configure secure time sources. Topics include Network Time Security (NTS) for protecting NTP communications and redundancy strategies for maintaining reliable synchronization.We also examine security risks such as NTP

en

13:56

Episode 48 — DNS Security — DNSSEC, DoH, DoT

Certified - CompTIA Cloud+ Audio Course ·

2025/08/24

In this episode, we explore how securing the Domain Name System (DNS) protects against spoofing, cache poisoning, and man-in-the-middle attacks. We explain DNSSEC’s role in verifying authenticity through digital signatures, DNS over HTTPS (DoH) for encrypting queries in HTTPS traffic, and DNS over TLS (DoT) for protecting queries at the transport layer. Each method’s operational trade-offs and deployment considerations are addressed.We also connect DNS security to broader cloud architecture

en

12:42

Episode 47 — Network Segmentation — VLAN, VXLAN,...

Certified - CompTIA Cloud+ Audio Course ·

2025/08/24

This episode explains how network segmentation improves performance, security, and manageability in cloud architectures. We break down traditional VLANs for broadcast domain control, VXLAN for extending Layer 2 networks over Layer 3, and GENEVE as a flexible tunneling protocol for encapsulating network traffic. Micro-segmentation is also discussed, detailing how it enforces granular security policies between workloads.We also examine real-world cloud scenarios where segmentation prevents

en

12:06

Episode 46 — Secret and Key Management — Secure...

Certified - CompTIA Cloud+ Audio Course ·

2025/08/24

In this episode, we cover the essential practices for managing sensitive information such as API keys, encryption keys, passwords, and tokens in cloud environments. We explain why storing credentials in plain text or embedding them directly in code creates significant security risks, and how centralized secret management solutions mitigate these risks. Topics include encryption at rest, role-based access to keys, and automated key rotation. The discussion also highlights integration with

en

165 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs