x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Certified: The CompTIA Security+ Audio Course

Dr. Jason Edwards

Certified - Security+ 701 is your completely free audio companion for mastering the CompTIA Security+ SY0-701 certification exam. Developed by BareMetalCyber.com, this immersive Audio Course transforms every domain of the official exam objectives into clear, practical, and exam-ready lessons you can learn anywhere—whether commuting, exercising, or studying at home. Each episode delivers focused explanations, real-world examples, and proven study strategies designed to build confidence and help you

technology courses

All Episodes

10:36

Secure Protocol Implementation (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Not all protocols are created equal—and using the wrong one can open a serious security hole in your environment. In this episode, we examine the implementation of secure communication protocols like TLS, SSH, and IPSec, which provide confidentiality and integrity for data in transit. We explain how these protocols differ from insecure alternatives like Telnet, HTTP, and FTP, and why default configurations often need to be hardened to ensure true protection. Topics include cipher suite

en

9:34

Operating System Security Enhancements (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

The operating system is the beating heart of any computing device—and securing it properly lays the groundwork for all other defenses. In this episode, we focus on OS-level security enhancements like Group Policy Objects (GPOs) for centralized control in Windows environments, and Security-Enhanced Linux (SELinux) for mandatory access control enforcement in Linux systems. We explore features such as account lockout thresholds, password policies, audit log configurations, and secure boot

en

10:00

Web Filtering and Content Security (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Web filtering and content security are essential for managing user behavior and blocking malicious or inappropriate content before it ever reaches the endpoint. In this episode, we explore how organizations use proxy servers, secure web gateways, DNS filtering, and URL categorization to restrict access to risky websites and enforce browsing policies. We discuss agent-based versus agentless filtering, how reputation scoring and blacklists help prevent access to known threats, and how tools

en

9:52

Enhancing IDS/IPS Effectiveness (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Intrusion Detection and Prevention Systems (IDS/IPS) are powerful tools—but their effectiveness depends entirely on tuning, context, and visibility. In this episode, we cover how signature-based detection identifies known threats, while anomaly-based systems flag unusual activity based on historical baselines or heuristic models. We discuss the importance of updating signatures, tuning thresholds to avoid alert fatigue, and placing sensors at strategic points in the network to maximize

en

10:11

Enhancing Firewall Capabilities (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Firewalls are often the first line of defense—but they’re only as effective as the rules, architecture, and tuning behind them. In this episode, we explore advanced firewall configurations, including layered rule sets, port and protocol filtering, application awareness, and geographic blocking. We discuss the use of stateful inspection, deep packet inspection (DPI), and integration with threat intelligence feeds that enable firewalls to recognize malicious patterns in real time. Firewalls

en

9:45

Vulnerability Scanning Tools and Practices (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Proactive security means finding and fixing weaknesses before attackers do, and vulnerability scanning is the tool that makes that possible at scale. In this episode, we break down how vulnerability scanners work, from discovering assets and services to identifying known weaknesses based on CVE data, vendor advisories, and configuration checks. We compare credentialed vs. non-credentialed scans, internal vs. external scanning, and on-demand vs. scheduled scanning to help teams understand

en

9:34

Network-Based Monitoring Tools (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

The network is where everything intersects—making it one of the most important vantage points for threat detection. In this episode, we examine key tools used for monitoring network activity, including NetFlow analysis, SNMP traps, and traffic mirroring with SPAN ports or network taps. NetFlow provides metadata about who’s talking to whom, when, and how much—useful for spotting unusual behavior like data exfiltration or lateral movement. SNMP traps give real-time alerts on the health and

en

9:11

Endpoint and Data Security Monitoring Tools (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Endpoints—laptops, desktops, mobile devices—are where most cyberattacks begin, making endpoint security monitoring a frontline defense. In this episode, we explore tools that specifically monitor these devices, including traditional antivirus, modern Endpoint Detection and Response (EDR), and Extended Detection and Response (XDR) solutions that correlate data across endpoints, email, and identity platforms. These tools detect malware, unusual behavior, privilege abuse, and post-exploitation

en

10:46

Security Monitoring Tools (Part 2) (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Building on our previous discussion, this episode explores more advanced and specialized monitoring tools—starting with Security Information and Event Management (SIEM) systems. SIEMs aggregate logs, correlate events, and generate alerts based on patterns, thresholds, or anomalies across networks, endpoints, and applications. We then discuss antivirus solutions, which remain essential for detecting known malware signatures and blocking common threats at the endpoint level. Next, we explore

en

10:18

Security Monitoring Tools (Part 1) (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Choosing the right tools shapes how effectively you can detect, understand, and respond to threats. In this episode, we focus on foundational monitoring tools like the Security Content Automation Protocol (SCAP), which standardizes vulnerability reporting and configuration assessment across diverse systems. We explain how benchmarks—such as those from the Center for Internet Security (CIS)—serve as baselines for secure configurations, and how both agent-based and agentless monitoring

en

8:53

Alert Response and Validation (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Alerts are only effective when they result in meaningful, timely responses—and this episode explores how organizations structure alert triage, validation, and remediation workflows. We start with alert tuning: setting appropriate thresholds to reduce false positives while ensuring true threats are caught early. From there, we move into triage processes, where alerts are evaluated by severity, scope, and relevance, often aided by playbooks or automated enrichment tools. Once prioritized,

en

9:18

Key Security Monitoring Activities (Part 2) (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Beyond real-time alerting, monitoring supports long-term visibility, compliance, and forensics through disciplined reporting and archiving practices. In this episode, we discuss how monitoring data is structured into actionable reports for various audiences—technical teams, executives, and auditors—highlighting trends, risk areas, and remediation status over time. We also cover the importance of log retention policies, especially for compliance with regulations like GDPR, HIPAA, and

en

10:42

Key Security Monitoring Activities (Part 1) (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Monitoring is most valuable when it drives action, and in this episode, we explore foundational activities that turn data into defense—starting with log aggregation, alerting, and scanning. Log aggregation involves collecting logs from diverse systems—servers, firewalls, applications, cloud platforms—into a central platform for correlation and analysis. Alerting systems evaluate these logs in real time, flagging deviations from normal behavior based on thresholds, signatures, or heuristics

en

9:55

Monitoring Computing Resources (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Monitoring is the heartbeat of any modern security operation, providing real-time visibility into systems, applications, and infrastructure. In this episode, we explore how organizations monitor computing resources for both performance and security, using tools like agents, collectors, log forwarders, and telemetry APIs. We discuss the difference between host-based and network-based monitoring, and how to build a centralized view through Security Information and Event Management (SIEM)

en

9:12

Effective Vulnerability Reporting (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Clear, actionable reporting is the bridge between technical discovery and organizational response, and in this episode, we explore what makes vulnerability reports useful and credible. We cover how to structure reports with essential components like risk summaries, technical details, affected systems, recommended actions, and business impact assessments. Reports should be tailored to their audience—executives need risk framing and cost implications, while IT teams need steps, timelines, and

en

9:49

Validation of Remediation Efforts (Domain 4)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Fixing a vulnerability doesn’t mean it’s gone—it means it needs to be verified. In this episode, we focus on the importance of validating remediation efforts to ensure that patches, configuration changes, and mitigation controls have actually addressed the issue without introducing new problems. This process includes rescanning affected systems, conducting follow-up audits, performing penetration tests if necessary, and reviewing logs for signs of continued exploitation. Validation helps

en

9:31

Vulnerability Response and Remediation (Part 2)...

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Not all vulnerabilities can be patched right away, and in these cases, compensating controls, segmentation, and exceptions become essential components of a realistic remediation strategy. In this episode, we discuss how organizations can use host firewalls, access control lists, and network isolation to contain vulnerable systems while planning for a longer-term fix. We also explore how to formally document and justify exceptions when remediation is deferred—something often required for

en

9:19

Vulnerability Response and Remediation (Part 1)...

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Finding vulnerabilities is only useful if you have a plan to fix them—and this episode dives into the critical processes of response and remediation. We begin with patching, one of the most effective and often underutilized defenses in cybersecurity. Timely and tested patch application is essential for operating systems, applications, firmware, and even cloud services, yet many organizations struggle to keep pace with updates. We also explore alternative remediation strategies like

en

11:09

Vulnerability Analysis and Prioritization (Part 2)...

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Expanding on the concepts of vulnerability prioritization, this episode introduces industry-standard scoring and classification systems like CVSS (Common Vulnerability Scoring System) and CVE (Common Vulnerabilities and Exposures), which provide a structured way to quantify and compare risks. We explain how CVSS scores are calculated using metrics like attack complexity, required privileges, user interaction, and impact on confidentiality, integrity, and availability. We also explore how to

en

10:07

Vulnerability Analysis and Prioritization (Part 1)...

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Once vulnerabilities are identified, the next challenge is determining which ones require immediate action—and that’s where vulnerability analysis and prioritization come in. In this episode, we explore how to confirm whether a vulnerability is real (not a false positive), determine its potential impact, and assess exploitability in the context of your specific environment. Not every high-severity issue is equally dangerous—factors like asset criticality, exposure to the internet, existing

en

222 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs