Lesson 12: Security Operations and Hardening
Week of Tue, Dec 1 · lesson closes Mon, Dec 7
Take Meerk's quiz for Lesson 12
This lesson's items
Exact due times are in Canvas.
Watch — Professor Messer
Watch — Professor Messer: Security Operations (SY0-701)
Free, independent educational resource. Not affiliated with or endorsed by CompTIA. Watch, then read the notes below.
Know these cold
- Endpoint hardening: disable unused ports/services, patch OS and applications, enable host-based firewall, deploy EDR (Endpoint Detection and Response), enforce full-disk encryption (BitLocker/FileVault).
- Mobile device management (MDM): enforces policies — screen lock, encryption, remote wipe, app allowlisting. MAM (Mobile Application Management) manages apps without full device control.
- Secure protocols: replace Telnet with SSH (22), FTP with SFTP/FTPS, HTTP with HTTPS, SNMPv1/v2 with SNMPv3 (encrypts and authenticates management traffic).
Meerk's quiz — open the Lesson 12 gate
10 questions, no time limit. 85% on your first attempt in a 24-hour window opens the gate. Retakes inside the window are practice — they help you learn, they don't count. Work alone; the point is to know it, not to have seen it.
Dinner Table Question
Ask at home: Why do organizations still get breached even when they have antivirus and firewalls in place?
En español: ¿Por qué las organizaciones siguen siendo vulneradas incluso cuando tienen antivirus y firewalls en su lugar?