N-595: VoIP Security Analysis and Design

Course Overview:

As VoIP (Voice-over IP) is integrated into the operations of many missions, it is imperative to understand its security ramifications. In the N-595: VoIP Security Analysis and Design class the objectives are designed for those who are chartered with the responsibility of securing networks and application environments that incorporate VoIP. Topics include how VoIP works, its interactions with the network, its vulnerabilities and mitigations. Focus is on leading open source and proprietary technologies utilizing Asterisk and Cisco and the protocols SIP, H.323, RTP, MGCP, and Skinny. Other protocols such as Nortel's UNIStim will be addressed. As for Cisco, security pieces in the VoIP CallManager servers, Catalyst switches, IOS-based routers, and ASA firewalls, amounts to several different platforms, each with its own management interface and lockdown procedures. Various open source tools including those in BackTrack are used for VoIP attacks. A task list of actions for securing enterprise VoIP is carried out in hands-on labs, performed on Cisco phones, routers, switches, and ASA firewalls.

Attendees to N-595: VoIP Security Analysis and Design will receive TechNow approved course materials and expert instruction.

Dates/Locations:

No Events

Duration: 5 Days

Course Objectives:

VoIP Architecture
VoIP Signaling and media protocols
Common VoIP authentication mechanisms
Common VoIP encryption techniques
VoIP protocol analysis with Wireshark
Maintaining QoS while mitigating DoS
VoXML, XML, and application integration security
Converged network security design and implementation
Impact of NAT and firewalls
SIP, H.323, and MGCP vulnerabilities
VPN, IPsec and SRTP to secure VoIP services
Penetration testing with open source tools
Attacks for Eavesdropping, call redirection, and DoS
Design of hacked firmware virtualization layer
Concise lockdown steps for network hardware and VoIP

Prerequisites:

This is an advanced Information Security Course which requires basic Windows & UNIX competency
Certification or 2 years of experience in these operating systems is highly recommended
As well as an understanding of TCP/IP

Comments

Latest comments from students

Liked the class? Then let everyone know!

CL-355: Containers, Kubernetes, and Red Hat OpenShift Administration

Course Overview:

Through an introduction to Docker, Kubernetes, and Red Hat OpenShift Platform, this training course helps you understand one of the key tenets of the DevOps and DevSecOps Platform (DSOP) movement: continuous integration and continuous deployment. The CI/CD pipeline becomes well understood and implemented in an open architecture. Containers have become a key technology for the configuration and deployment of applications and micro services. Kubernetes is a container orchestration platform that provides foundational services in Red Hat OpenShift Container Platform, which allows enterprises to manage container deployments and scale their applications using Kubernetes.

This training course provides an overview of the DoD Enterprise DevSecOps Platform (DSOP) Reference Design, its current state, and ties to DoD Cloud Platform One (P1). Workflows of the DoD Iron Bank container repository are introduced, along with an overview of the DoD Pipeline as represented in Big Bang. Continuous authorization cATO via Party Bus within NIST RMF is presented. You will become aware of the Platform One (P1) integrations and relationship to Docker, Kubernetes, Istio (Red Hat OpenShift Service Mesh) and Red Hat OpenShift Platform.

In addition to gaining an understanding of these tools, you will build core administration skills through the installation, configuration, and management of an OpenShift cluster and containerized applications.

Course Objectives:

Learn about Containers, Docker, Kubernetes, and OpenShift architecture
Overview DoD Enterprise DevSecOps Platform (DSOP) Reference Design and DoD Cloud Platform One (P1)
Tie together awareness of various DoD Cloud offerings and their relationships
Create containerized services
Manage containers and container images
Deploy multi-container applications
Install an OpenShift cluster
Configure and manage masters and nodes
Secure OpenShift
Control access to resources on OpenShift
Monitor and collect metrics on OpenShift
Deploy applications on OpenShift using source-to-image (S2I)
Manage storage on OpenShift

Course Outline:

Getting started with container technology
Creating containerized services
Managing containers
Managing container images
Creating custom container images
Deploying containerized applications on OpenShift
Deploying multi-container applications
Troubleshooting containerized applications
Comprehensive Review of Introduction to Container, Kubernetes, and RedHat OpenShift
Introducing Red Hat OpenShift Container Platform
Installing OpenShift Container Platform
Describing and exploring OpenShift networking concepts
Executing commands
Controlling access to OpenShift resources
Allocating persistent storage
Managing application deployments
Installing and configuring the metrics subsystem
Managing and monitoring OpenShift Container Platform

Dates/Locations:

No Events

Duration: 5 Days

Prerequisites:

Ability to use a Linux® terminal session and issue operating system commands
Good foundation in Linux
Experience with web application architectures and their corresponding technologies

Target Audience:

Developers who wish to containerize software applications
Administrators who are new to container technology and container orchestration
Architects who are considering using container technologies in software architectures
System administrators
System architects
Architects and developers who want to install and configure OpenShift Container Platform
Those working in the field of DevSecOps supporting DoD Platform One (P1) and other implementations

Comments

Latest comments from students

Liked the class? Then let everyone know!

CT-213: Cloud Essentials+

Course Overview:

CompTIA Cloud Essentials+ is for both IT and non-technical professionals who require the essential business acumen needed to make informed cloud service decisions. Cloud Essentials is a vendor-neutral credential designed to validate the candidate has an understanding of basic terms and definitions of cloud computing along with the different processes involved in the successful adoption of cloud computing and its implications for organizations’ use.

TechNow is a CompTIA partner and uses official CompTIA Cloud Essentials+ curriculum.

Attendees to CT-213: Cloud Essentials+ will receive TechNow approved course materials and expert instruction.

Date/Locations:

No Events

Course Duration: 3 days

Course Objectives:

Domain 1 : Cloud Concepts
- Understand cloud principles
- Identify cloud networking concepts & storage techniques
- Understand cloud design aspects
Domain 2: Business Principles of Cloud Environments
- Identify and employ appropriate cloud assessments like feasibility studies, benchmarking, or gap analysis
- Highlight key business aspects of cloud vendor relation adoption, and comprehend cloud migration approaches
Domain 3: Management and Technical Operations
- Explain aspects of operating within the cloud, such as data management or optimization
- Understand the role of DevOps in cloud environments, like API integration or provisioning
Domain 4: Governance, Risk, Compliance and Security for the Cloud
- Understand risk management and response concepts related to cloud services and identify the importance and impacts of compliance in the cloud, such as regulatory concerns or international standards.

Course Prerequisites:

CompTIA recommends that a candidate have at least 6 months of experience in an IT environment, with direct involvement in IT-related tasks responsibilities and/or decision making.

Comments

Latest comments from students

Liked the class? Then let everyone know!

TN-5125: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

Course Overview:

This course gives students the knowledge and skills to configure Active Directory Domain Services in a distributed environment, implement Group Policies, perform backup and restore, and monitor and troubleshoot Active Directory related issues. This course includes material contained in Microsoft’s 6424, 6425, 6426 and is an aid to preparation for the 70-640 exam.

Attendees to TN-5125: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services will receive TechNow approved course materials and expert instruction.

Dates/Locations:

No Events

Duration: 5 Days

Course Objectives:

Installation
Administration
Users
Groups
Computers
Group Policy Infrastructure
Group Policy Settings
Domains and Forests

Prerequisites:

Basic understanding of networking
Intermediate understanding of network operating system
An awareness of security best practices
Basic knowledge of server hardware
A+ or equivalent knowledge
Some experience creating objects in Active Directory
Basic concepts of backup and recovery in a Windows Server Environment

Comments

Latest comments from students

Liked the Class? Then let everyone know!

PM-242: Defining Agile Requirements with User Stories

Course Overview:

This course identifies how business analysts can elicit Agile requirements by writing user stories from use cases and personas of customer profiles. This leads to the processes of confirming the validity and usability for quality of the product development. An Agile Business Analyst has become a new recognized role within the other Agile Framework roles.

Attendees to PM-242:Defining Agile Requirements with User Stories will receive TechNow approved course materials and expert instruction.

Dates/Locations:

No Events

Duration: 2 Days

Course Objectives: At the conclusion of this course, students will be able to:

Understand the Scrum Flow, the core components of the Scrum framework
Understand the scope of the Product Owner role in detail
Understand the scope of the Agile Business Analysis role in coordination with the Product Owner, Scrum Master and Development Team
Understand the scope of the Scrum Master role at a high level
Understand the scope of the Scrum Development Team roles
Document the interactions between the user of a system and the system itself
Dive into understanding the Agile principles for requirements using user stories in a card, conversation, and confirmation format

Target Student:

Designed specifically for Agile project team members, product owners, project leaders and business analysts or anyone wanting to understand the Agile Framework.

Comments

Latest comments from students