x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Certified: The CompTIA Security+ Audio Course

Dr. Jason Edwards

Certified - Security+ 701 is your completely free audio companion for mastering the CompTIA Security+ SY0-701 certification exam. Developed by BareMetalCyber.com, this immersive Audio Course transforms every domain of the official exam objectives into clear, practical, and exam-ready lessons you can learn anywhere—whether commuting, exercising, or studying at home. Each episode delivers focused explanations, real-world examples, and proven study strategies designed to build confidence and help you

technology courses

All Episodes

9:54

Benefits of Security Automation (Part 2) (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Building on the first part of our automation series, this episode explores how security automation improves scalability, incident reaction time, and team productivity. We examine real-world examples where automated alerts trigger isolation of infected systems, revoke compromised credentials, or update firewall rules within seconds—long before a human analyst could intervene. Automation enables systems to scale securely by enforcing templates, access policies, and configuration baselines

en

10:13

Benefits of Security Automation (Part 1) (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Security automation offers more than just saved time—it fundamentally transforms how teams operate by embedding consistency, speed, and scalability into their daily processes. In this episode, we cover the benefits of automation in efficiency and standardization, highlighting how routine tasks like user onboarding, policy enforcement, patch verification, and incident alerting can be executed instantly and without error. We discuss how automation reduces reliance on human memory and tribal

en

10:13

Continuous Integration and API Automation (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Security needs to move at the speed of development, and that’s where continuous integration (CI) and API-driven automation come in. In this episode, we explore how CI pipelines integrate security testing—like static and dynamic analysis—into every code commit, helping developers catch vulnerabilities before deployment. These pipelines rely heavily on APIs to automate everything from dependency scanning to secrets detection, container validation, and environment provisioning. We also examine

en

9:53

Technical Debt in Automation (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

As security teams automate more of their operations, they often accumulate technical debt—shortcuts, fragile code, or undocumented scripts that create long-term risk. In this episode, we explore how automation projects can suffer from the same pitfalls as software development, including lack of version control, insufficient testing, and poor documentation. These issues can lead to unexpected failures, wasted time, or even security gaps if old scripts execute with elevated privileges or make

en

9:44

Automation and Scripting in Security (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

In modern cybersecurity, manual processes can’t keep up with the scale and speed of threats—making automation and scripting essential for operational success. In this episode, we explore how security teams use scripting languages like PowerShell, Python, and Bash to automate repetitive tasks such as log analysis, user provisioning, backup validation, and alert triage. Automation platforms like SOAR (Security Orchestration, Automation, and Response) extend this further, enabling scripted

en

8:59

Privileged Access Management (PAM) (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Privileged accounts are the crown jewels of any IT environment, and their misuse—whether accidental or malicious—can lead to devastating breaches. This episode focuses on Privileged Access Management (PAM), a framework for controlling, auditing, and minimizing access to high-value accounts like system administrators, domain controllers, or cloud root users. We discuss just-in-time access (JIT), which limits privilege elevation to approved, time-bound sessions, and password vaulting, which

en

9:36

Secure Password Management (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Passwords continue to serve as a primary access method for many systems, and in this episode, we examine what secure password management really looks like—from user behavior to backend storage. We begin with best practices for password creation: encouraging long, complex passphrases instead of short, hard-to-remember strings, and enforcing limits on reuse, age, and failed attempts. We then cover the backend—discussing how to store credentials securely using salted hashing algorithms like

en

8:44

MFA Authentication Factors (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Multifactor authentication is only as strong as the diversity and reliability of the factors it uses. In this episode, we explore each authentication factor category in depth: something you know (such as a password or PIN), something you have (like a hardware token or smartphone), something you are (biometric identifiers like a fingerprint or facial recognition), and somewhere you are (geolocation-based controls tied to physical presence or network origin). Each factor adds a layer of

en

9:04

Multifactor Authentication (MFA) Implementations...

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Multifactor Authentication (MFA) is one of the most effective ways to prevent unauthorized access, and in this episode, we break down how to implement it effectively across different environments. We cover common MFA factors—something you know (password), something you have (token or device), and something you are (biometrics)—as well as less common ones like geolocation and user behavior. We examine the strengths and weaknesses of each, and how combining them creates a layered defense that

en

8:40

Advanced Access Controls and Least Privilege (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Access controls must go beyond static roles to enforce the principle of least privilege in real time, and this episode explores how to implement more advanced models that do just that. We cover context-aware access policies based on location, time-of-day, device type, and user behavior—often deployed in zero trust environments to restrict access dynamically. We also explore just-in-time (JIT) access, which grants temporary elevated privileges only when needed, and session-based controls

en

9:40

Access Control Models (Part 2) (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

In this second installment on access control models, we focus on more adaptive and scalable approaches: Role-Based Access Control (RBAC), Rule-Based Access Control, and Attribute-Based Access Control (ABAC). RBAC assigns access based on predefined job roles, simplifying management in structured environments by aligning permissions with functions like HR, finance, or IT. Rule-Based Access Control allows for context-driven policies based on logic—for example, restricting access during certain

en

9:16

Access Control Models (Part 1) (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Access control models define who can access what, under which conditions—and in this episode, we begin our exploration with Mandatory Access Control (MAC) and Discretionary Access Control (DAC). MAC is rigid and centralized, often used in government or military systems where sensitivity labels and clearance levels determine access, and individual users cannot modify permissions. DAC, by contrast, gives data owners or resource creators the power to grant or revoke access to others, offering

en

10:17

Interoperability and Attestation (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

As organizations adopt more diverse platforms, cloud services, and third-party integrations, the ability for systems to work together securely—known as interoperability—becomes mission-critical. In this episode, we explore how interoperability ensures that identity providers, authentication protocols, logging systems, and access controls function consistently across environments. Standards like SAML, OAuth, and SCIM enable seamless identity management, while centralized logging formats and

en

9:47

Single Sign-On (SSO) and Protocols (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Single Sign-On (SSO) allows users to access multiple systems with a single set of credentials, enhancing both convenience and security when implemented with care. In this episode, we explain how SSO functions by relying on a centralized identity provider that issues authentication tokens to various applications, removing the need for users to log in repeatedly. We explore the protocols that power SSO, including Security Assertion Markup Language (SAML), OAuth 2.0, and OpenID Connect, and

en

10:09

Identity Proofing and Federation (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Before you can secure access, you have to know who’s requesting it—and identity proofing ensures that the person behind a login is who they claim to be. In this episode, we explore identity proofing methods used during onboarding and remote authentication, including document verification, biometric validation, third-party attestation, and knowledge-based authentication. These techniques form the foundation of trust in both physical and digital identity systems, especially in regulated

en

9:08

User Account Provisioning and Permission Management...

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Creating, modifying, and revoking user accounts may sound like routine IT work—but it’s a fundamental part of security control. In this episode, we examine account provisioning processes that align access rights with job functions, enforce least privilege, and prevent accumulation of unnecessary entitlements over time. We also discuss automated provisioning tools that integrate with identity providers, streamline onboarding, and maintain access logs for auditing. Equally important is

en

9:52

User Behavior Analytics (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

User Behavior Analytics (UBA) shifts the security paradigm from rules-based alerts to behavioral baselines, allowing defenders to spot anomalies that signal potential insider threats, account compromise, or malicious misuse. In this episode, we discuss how UBA platforms collect data from logs, access patterns, login times, file usage, and application activity to build profiles of “normal” user behavior. We explain how deviations—such as a sudden increase in file downloads, access to

en

8:36

Network Access Control and Endpoint Protection...

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Controlling access at the point of connection is one of the most effective ways to prevent unauthorized entry, and in this episode, we explore the implementation of Network Access Control (NAC) and endpoint protection systems. NAC evaluates devices before they’re allowed onto the network, verifying compliance with security policies—such as having up-to-date antivirus, system patches, or correct configurations—before granting access. We examine agent-based and agentless NAC deployments,

en

9:55

File Integrity Monitoring and Data Loss Prevention...

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

File Integrity Monitoring (FIM) and Data Loss Prevention (DLP) tools are essential for detecting tampering and protecting sensitive data from unauthorized exfiltration. In this episode, we explain how FIM works by taking baseline snapshots of critical system files and configurations, then alerting when unauthorized changes occur—helping detect stealthy malware, insider threats, or administrative errors. DLP tools, on the other hand, inspect content at rest, in motion, and in use, scanning

en

10:46

DNS Filtering and Email Security Enhancements (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

DNS and email are two of the most commonly exploited services in cyberattacks—and securing them requires layered, policy-driven controls. In this episode, we explore DNS filtering, which allows organizations to block access to malicious domains by intercepting or redirecting outbound queries. We discuss how threat feeds, domain reputation systems, and custom blacklists integrate into DNS resolvers to prevent phishing, malware downloads, and data exfiltration. On the email side, we cover

en

222 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs