x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Certified: The CompTIA Security+ Audio Course

Dr. Jason Edwards

Certified - Security+ 701 is your completely free audio companion for mastering the CompTIA Security+ SY0-701 certification exam. Developed by BareMetalCyber.com, this immersive Audio Course transforms every domain of the official exam objectives into clear, practical, and exam-ready lessons you can learn anywhere—whether commuting, exercising, or studying at home. Each episode delivers focused explanations, real-world examples, and proven study strategies designed to build confidence and help you

technology courses

All Episodes

8:29

Data Recovery Techniques (Domain 3)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Backups are only half of the story—the other half is how effectively you can recover from them. In this episode, we focus on data recovery techniques that turn dormant backups into operational systems, covering strategies such as replication, journaling, point-in-time recovery, and bare-metal restoration. We define and differentiate between Recovery Time Objective (RTO)—how quickly you need to be back online—and Recovery Point Objective (RPO)—how much data loss is acceptable—explaining how

en

8:58

Backup Strategies and Best Practices (Part 2) (Domain 3)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Continuing our discussion on backups, this episode explores encryption, snapshots, and backup lifecycle management—three critical components of a secure, efficient, and resilient backup system. Encrypting backups is essential to protect sensitive data in the event of theft or unauthorized access to storage media, whether local or cloud-based. We explain how key management, access controls, and encryption standards like AES-256 play a role in maintaining confidentiality while keeping data

en

8:43

Backup Strategies and Best Practices (Part 1) (Domain 3)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Backups form the last line of defense when everything else fails, and a good strategy turns potential disaster into a recoverable event. In this episode, we discuss core backup principles and best practices, including the 3-2-1 rule—keep three copies of your data, on two different media types, with one stored offsite. We cover the strengths and trade-offs between full, differential, and incremental backups, and explain when to use each based on recovery time objectives (RTO) and recovery

en

9:27

Comprehensive Testing for Resilience (Domain 3)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Preparation is only as good as its ability to withstand the unexpected, and resilience testing is how you find out whether your systems, processes, and people are truly ready. In this episode, we explore the value of comprehensive testing methods such as tabletop exercises, simulated failovers, load tests, and real-world attack scenarios. Tabletop exercises walk teams through incident response steps in a controlled environment, helping validate decision-making, communications, and

en

9:23

Continuity of Operations and Capacity Planning...

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Even the most secure systems are useless if they can’t operate under pressure, and this episode explores the intersection of cybersecurity with business resilience through Continuity of Operations Planning (COOP) and capacity planning. COOP ensures that essential functions can continue during emergencies, whether that’s a DDoS attack, natural disaster, or internal failure, by defining alternate workflows, communication strategies, and system priorities. Capacity planning, meanwhile, ensures

en

8:15

Platform Diversity and Multi-cloud Architecture...

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Relying on a single technology stack or vendor can introduce systemic risk, and in this episode, we explore how platform diversity and multi-cloud strategies enhance both security and resilience. Platform diversity means using a range of operating systems, software solutions, or infrastructure types to avoid monocultures that attackers can exploit with a single technique. If every system uses the same OS or hypervisor, a single vulnerability could compromise your entire environment

en

8:51

Disaster Recovery Site Considerations (Domain 3)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Disaster recovery planning ensures that when critical infrastructure goes offline—whether due to cyberattack, natural disaster, or hardware failure—business operations can resume with minimal disruption. In this episode, we focus on the different types of recovery sites: hot, warm, and cold. Hot sites are fully functional environments that mirror production and allow near-instant failover; warm sites offer partial infrastructure requiring some configuration before becoming operational; and

en

6:58

High Availability and System Resilience (Domain 3)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Security isn’t just about keeping attackers out—it’s also about keeping services running when they try to bring you down. In this episode, we examine high availability (HA) and resilience strategies that ensure critical systems continue operating during failures, attacks, or overload scenarios. Techniques like active-active clustering, redundant power supplies, geographic failover, and load-balanced application layers all work together to prevent downtime and maintain service continuity. We

en

7:57

Methods to Secure Data (Part 3) (Domain 3)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

In this final installment on data protection methods, we focus on segmentation and permission restrictions—two strategic approaches that limit both exposure and access. Segmentation involves dividing networks, databases, or storage environments into discrete zones or tiers, isolating sensitive information from general-purpose systems and minimizing lateral movement opportunities for attackers. This could include separating credit card data from employee records, isolating cloud workloads by

en

7:57

Methods to Secure Data (Part 2) (Domain 3)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Beyond encryption, organizations have additional tools to secure data in contexts where usability, compliance, or performance requirements call for alternatives. In this episode, we explore hashing, tokenization, and data masking—each serving a unique purpose in reducing data exposure while supporting operations like analytics or software testing. Hashing protects integrity and is commonly used for password storage and verification, using algorithms like SHA-256 or bcrypt to create one-way

en

8:08

Methods to Secure Data (Part 2) (Domain 3)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Beyond encryption, organizations have additional tools to secure data in contexts where usability, compliance, or performance requirements call for alternatives. In this episode, we explore hashing, tokenization, and data masking—each serving a unique purpose in reducing data exposure while supporting operations like analytics or software testing. Hashing protects integrity and is commonly used for password storage and verification, using algorithms like SHA-256 or bcrypt to create one-way

en

8:44

Methods to Secure Data (Part 1) (Domain 3)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Protecting data effectively starts with strong core methods that control access and visibility, and in this episode, we focus on geographic restrictions and encryption as frontline tools. Geographic restrictions help limit who can view or interact with data based on their physical or network location—often used in regulatory compliance, fraud prevention, or content delivery controls. This can involve IP filtering, geofencing, or conditional access policies that automatically enforce rules

en

7:18

Data Sovereignty and Geolocation (Domain 3)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Where data physically resides has become a legal and operational priority for organizations operating in an increasingly globalized and regulated world. In this episode, we examine data sovereignty—the concept that data is subject to the laws and regulations of the country where it’s stored—and how this impacts storage decisions, cloud architecture, and compliance. Geolocation factors, such as selecting specific data centers or regions in cloud platforms, determine whether data falls under

en

8:01

General Data Considerations – States of Data (Domain 3)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Data security isn’t just about what kind of data you’re protecting—it’s also about when and where that data is at any given time. In this episode, we explore the three states of data: at rest, in transit, and in use. Data at rest resides on storage media—like hard drives, databases, or backup tapes—and is commonly protected by full-disk or file-level encryption. Data in transit moves across networks and is often safeguarded by protocols like TLS or VPN tunnels, which ensure confidentiality

en

7:42

Data Classification Strategies (Part 2) (Domain 3)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Building on the foundation from part one, this episode explores public and private data categories, the importance of policy-driven classification, and how to implement classification effectively across diverse environments. Public data—intended for broad distribution—still requires oversight to prevent tampering, impersonation, or misuse in social engineering. Private data, especially when it includes PII or financial records, demands tight access control, audit logging, and often

en

9:24

Data Classification Strategies (Part 1) (Domain 3)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Data classification provides the foundation for applying security controls based on risk and sensitivity, and in this episode, we examine the first part of a two-part discussion on classification strategy. We start by defining common classification tiers such as “sensitive,” “confidential,” “restricted,” and “critical,” each of which guides access control, encryption requirements, and handling procedures. We explain how these labels are applied based on data content, business impact,

en

7:06

Human vs. Non-human Readable Data (Domain 3)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Not all data is meant for human eyes, and in cybersecurity, understanding the distinction between human-readable and non-human-readable data formats is vital for applying the right protection. This episode explains how human-readable data—like documents, emails, or spreadsheets—poses a higher risk of exposure and misuse when accessed by unauthorized users, and must often be protected with strong access controls, encryption, and data loss prevention (DLP) tools. Non-human-readable data

en

7:59

Data Types and Their Protection (Domain 3)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Data is not monolithic—its classification and context determine how it should be secured. In this episode, we explore different types of data, including regulated data like personal health information (PHI), payment card information (PCI), and personal identifiable information (PII), as well as trade secrets, intellectual property, and public-facing information. Each type has different legal, operational, and reputational implications if exposed or altered, and thus requires tailored

en

7:27

Selecting Effective Security Controls (Domain 3)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Choosing the right security controls is not about applying everything—it’s about applying the right things, in the right places, at the right time. This episode guides you through the process of selecting and tailoring controls based on risk assessments, threat models, compliance requirements, and operational goals. We discuss how frameworks like NIST SP 800-53, ISO 27001, and CIS Controls provide structured ways to evaluate and prioritize security investments, helping organizations avoid

en

7:23

Advanced Secure Access Solutions (Domain 3)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Traditional perimeter security isn’t enough in a world of mobile users, cloud resources, and third-party integrations. In this episode, we explore advanced secure access solutions, starting with Software-Defined Wide Area Networking (SD-WAN), which replaces traditional WAN technologies with application-aware routing and policy-based control across diverse internet paths. SD-WAN not only improves performance but enhances security by segmenting traffic and enforcing encryption between

en

222 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs