Advanced Cybersecurity Concepts and Capstone Project

This course is part of Microsoft Cybersecurity Analyst Professional Certificate

Instructor: Microsoft

What you'll learn

How to manage and reduce the risk of threats to an organization or system.
How to mitigate common cyber threats using various tools and strategies.
How to develop strategies to protect data and applications from unauthorized access.

Details to know

Shareable certificate

Add to your LinkedIn profile

Assessments

20 assignments

Taught in English

See how employees at top companies are mastering in-demand skills

Learn more about Coursera for Business

Build your Security expertise

This course is part of the Microsoft Cybersecurity Analyst Professional Certificate

When you enroll in this course, you'll also be enrolled in this Professional Certificate.

Learn new concepts from industry experts
Gain a foundational understanding of a subject or tool
Develop job-relevant skills with hands-on projects
Earn a shareable career certificate from Microsoft

Earn a career certificate

Add this credential to your LinkedIn profile, resume, or CV

Share it on social media and in your performance review

There are 4 modules in this course

In this course, you’ll learn about threat mitigation by following the three stages of threat modeling. The steps are: decomposing the application, determining and ranking threats, and determining countermeasures and mitigation. You’ll learn about access control, secure development, cryptography, as well as asset management. You’ll also be introduced to the types of attacks that IoT (Internet of Things) devices and services face.

At the end of this course, you’ll also complete a focused security mitigation strategy plan for a given business. This capstone project integrates the knowledge you’ll have gained from the previous courses into a standalone portfolio piece, demonstrating your new cybersecurity skills. The course will take you one step closer to the Microsoft Cybersecurity Analyst Professional Certificate, which requires no degree or prior experience. After completing this course, you’ll be able to: • Explain threat modeling • Discuss security conscious design • Plan threat mitigation strategies This is also a great way to prepare for the Microsoft SC-900 exam. By passing the SC-900 exam, you’ll earn the Microsoft Security, Compliance, and Identity Fundamentals Certification.

This week introduces common threat modeling and mitigation steps, and the processes and procedures used to manage and reduce the risk of threats to an organization or system. It also covers the steps of threat modeling, each of which requires different tools and approaches. Additionally, various threat modeling frameworks will be introduced.

What's included

14 videos24 readings6 assignments1 discussion prompt

14 videosTotal 99 minutes

Introduction to the course3 minutesPreview module
Threat modeling process6 minutes
Decompose the application7 minutes
Determine and rank threats6 minutes
STRIDE threat list6 minutes
Benefits of threat modeling7 minutes
Ensure application security – SANS approach7 minutes
Process for Attack Simulation and Threat Analysis (PASTA)8 minutes
Common Vulnerability Scoring System (CVSS)7 minutes
Visual, Agile, and Simple Threat (VAST)7 minutes
Microsoft threat modeling tool8 minutes
Threat Modeling for Azure Virtual Networks8 minutes
Four Question framework for effective threat modeling5 minutes
Module summary: Threat modeling7 minutes

24 readingsTotal 280 minutes

Course syllabus10 minutes
How to be successful in this course10 minutes
Microsoft Azure Active Directory name change10 minutes
Clean up resources 10 minutes
How to open an image in a new tab10 minutes
Additional resources5 minutes
Determine countermeasures and mitigation10 minutes
Threat modeling10 minutes
Exercise: Create a threat model for a simple web application30 minutes
Exemplar: Create a threat model for a simple web application10 minutes
Clean up resources 10 minutes
Additional resources: Introduction to threat modeling5 minutes
Cyberthreat modeling10 minutes
PASTA in depth10 minutes
CVSS Cheat sheet10 minutes
Enterprise security methodologies10 minutes
Exercise: Evaluating threats30 minutes
Exemplar: Evaluating threats10 minutes
Additional resources: Threat modeling strategies5 minutes
Activity: Building a model10 minutes
Security Development Lifecycle (SDL)10 minutes
Exercise: Web application threat modeling30 minutes
Exemplar: Web application threat modeling10 minutes
Additional resources: Threat modeling5 minutes

6 assignmentsTotal 108 minutes

Self-review : Create a threat model for a simple web application18 minutes
Knowledge check: Introduction to threat modeling15 minutes
Self-review: Evaluating threats15 minutes
Knowledge check: Threat modeling strategies15 minutes
Self -review: Web application threat modeling15 minutes
Module quiz: Threat modeling30 minutes

1 discussion promptTotal 10 minutes

What do you hope to learn?10 minutes

This week covers threat vectors, ransomware, defense in depth security, cloud security, network security, data security, and monitoring security in Azure. It also includes understanding the MITRE ATT&CK Matrix and IoT security. The module aims to provide you with an understanding of common cyberthreats, and how to mitigate them using various tools and strategies. By the end of the module, you will have a comprehensive understanding of the different components of cybersecurity and the measures you can take to protect your infrastructure from cyberthreats.

What's included

14 videos8 readings4 assignments

14 videosTotal 86 minutes

Understanding susceptible infrastructure6 minutesPreview module
MITRE ATT&CK Matrix overview6 minutes
MITRE ATT&CK Matrix key points7 minutes
Attack techniques3 minutes
Types of malicious software 5 minutes
Prevention, detection, and countermeasures4 minutes
What is an IoT device?6 minutes
IoT attacks5 minutes
IoT attack risk4 minutes
IoT attack prevention strategies6 minutes
Azure IoT7 minutes
Defender for IOT6 minutes
Defender for IoT: Deployment and integration6 minutes
Module summary: Advanced threats and mitigation8 minutes

8 readingsTotal 93 minutes

Understanding susceptible infrastructure in depth10 minutes
Activity: Risk assessment13 minutes
Mitigation10 minutes
Additional resources : Susceptible infrastructure5 minutes
A guide to IoT device architecture10 minutes
Exercise: IoT device analysis30 minutes
Exemplar: IoT device analysis10 minutes
Additional resources: IoT (Internet of Things) and common attacks5 minutes

4 assignmentsTotal 70 minutes

Knowledge check : Susceptible infrastructure15 minutes
Self-review: IoT device analysis10 minutes
Knowledge check: IoT (Internet of Things) and common attacks15 minutes
Module quiz: Advanced threats and mitigation30 minutes

This week provides an overview of various cybersecurity concepts and practices. It covers the basics of threat vectors, entry points, and prevention methods in cybersecurity. It also explains defense in depth security, Azure security, network security, data security, and monitoring security. You will gain a deeper understanding of these concepts, learn how to identify and mitigate security threats, and develop strategies to protect data and applications from unauthorized access. By the end of this module, you will have a comprehensive understanding of cybersecurity and be able to create an effective defense in depth security strategy for an organization.

What's included

13 videos9 readings4 assignments

13 videosTotal 89 minutes

Threat landscape and vectors7 minutesPreview module
Access brokers6 minutes
Mitigation approaches8 minutes
Defense in depth (DID)6 minutes
Defending your cloud infrastructure6 minutes
Azure Security: Building a network with DID7 minutes
Modern authentication6 minutes
Identity mitigation strategy5 minutes
Azure Security mitigation strategies7 minutes
Implementing network security on Azure7 minutes
Securing data on Azure6 minutes
Network security4 minutes
Module summary: Security conscious modeling7 minutes

9 readingsTotal 75 minutes

Antivirus and anti-malware10 minutes
Advanced antivirus and antimalware techniques10 minutes
Additional resources : Entry points5 minutes
Defense in depth strategy10 minutes
Identity infrastructure10 minutes
Focused defense10 minutes
Additional resources: Secure network design with defense in depth5 minutes
Monitoring Azure Security10 minutes
Additional resources: Security conscious modeling5 minutes

4 assignmentsTotal 75 minutes

Knowledge check : Entry points15 minutes
Knowledge check : Secure network design with defense in depth15 minutes
Knowledge check: Mitigation strategies15 minutes
Module quiz: Security conscious modeling30 minutes

In this week, you will be assessed on the key skills covered throughout this course and the other courses in the Cybersecruity Analyst Program. This module contains the Final Capstone project of the program which encapsulates the learning into a practical whole. The Final Capstone project consists of several stages and graded self-reviews. This module also includes the final graded quiz.