From the course: CompTIA Advanced Security Practitioner (CASP+) (CAS-004) Cert Prep

Securing architectures

- In this section of the course, we're going to continue discussing ways to secure our network architectures, but this time, we're going to be focused on different services, segmentation, zero trust, in conjunction with deperimeterization, and software-defined networking. In this section, we're again going to be discussing Domain 1, security architecture, and specifically Objective 1.1. Given a scenario, analyze the security requirements and objectives to ensure appropriate, secure network architecture for a new or existing network. So as we move through this section, we're going to start out by discussing how to conduct traffic mirroring, so that we can add sensors to our networks. Then, we're going to discuss the different types of sensors that we're going to use in conjunction with that traffic mirroring. Then, we're going to move into segmentation of our networks, covering microsegmentation, screen subnets, security zones, and much more. After that, we're going to discuss the concepts of deperimeterization and zero trust before we move into the concepts surrounding the merging of networks from various organizations that we may be conducting business with. Finally, we're going to talk about software-defined networking, or SDN. This includes open SDN, hybrid SDN, and SDN overlays. So, let's get started in this section on securing architectures. (suspenseful music)

Contents