Advanced Cybersecurity Concepts and Capstone Project

This course is part of Microsoft Cybersecurity Analyst Professional Certificate

Instructor: Microsoft

Access provided by Abu Dhabi National Oil Company

13,694 already enrolled

4 modules

Gain insight into a topic and learn the fundamentals.

95 reviews

Beginner level

Recommended experience

Flexible schedule

2 weeks at 10 hours a week

Learn at your own pace

94%

Most learners liked this course

4 modules

Gain insight into a topic and learn the fundamentals.

95 reviews

Beginner level

Recommended experience

Flexible schedule

2 weeks at 10 hours a week

Learn at your own pace

94%

Most learners liked this course

What you'll learn

How to manage and reduce the risk of threats to an organization or system.
How to mitigate common cyber threats using various tools and strategies.
How to develop strategies to protect data and applications from unauthorized access.

Skills you'll gain

Tools you'll learn

Details to know

Shareable certificate

Add to your LinkedIn profile

Assessments

20 assignments

Taught in English

See how employees at top companies are mastering in-demand skills

Learn more about Coursera for Business

logos of Petrobras, TATA, Danone, Capgemini, P&G and L'Oreal

Build your Security expertise

This course is part of the Microsoft Cybersecurity Analyst Professional Certificate

When you enroll in this course, you'll also be enrolled in this Professional Certificate.

Learn new concepts from industry experts
Gain a foundational understanding of a subject or tool
Develop job-relevant skills with hands-on projects
Earn a shareable career certificate from Microsoft

There are 4 modules in this course

In this course, you’ll learn about threat mitigation by following the three stages of threat modeling. The steps are: decomposing the application, determining and ranking threats, and determining countermeasures and mitigation. You’ll learn about access control, secure development, cryptography, as well as asset management. You’ll also be introduced to the types of attacks that IoT (Internet of Things) devices and services face.

At the end of this course, you’ll also complete a focused security mitigation strategy plan for a given business. This capstone project integrates the knowledge you’ll have gained from the previous courses into a standalone portfolio piece, demonstrating your new cybersecurity skills. The course will take you one step closer to the Microsoft Cybersecurity Analyst Professional Certificate, which requires no degree or prior experience. After completing this course, you’ll be able to: • Explain threat modeling • Discuss security conscious design • Plan threat mitigation strategies This is also a great way to prepare for the Microsoft SC-900 exam. By passing the SC-900 exam, you’ll earn the Microsoft Security, Compliance, and Identity Fundamentals Certification.

This week introduces common threat modeling and mitigation steps, and the processes and procedures used to manage and reduce the risk of threats to an organization or system. It also covers the steps of threat modeling, each of which requires different tools and approaches. Additionally, various threat modeling frameworks will be introduced.

What's included

14 videos24 readings6 assignments1 discussion prompt

14 videos Total 100 minutes

Introduction to the course 4 minutes
Threat modeling process 7 minutes
Decompose the application 7 minutes
Determine and rank threats 7 minutes
STRIDE threat list 7 minutes
Benefits of threat modeling 7 minutes
Ensure application security – SANS approach 7 minutes
Process for Attack Simulation and Threat Analysis (PASTA) 8 minutes
Common Vulnerability Scoring System (CVSS) 8 minutes
Visual, Agile, and Simple Threat (VAST) 8 minutes
Microsoft threat modeling tool 8 minutes
Threat Modeling for Azure Virtual Networks 9 minutes
Four Question framework for effective threat modeling 6 minutes
Module summary: Threat modeling 8 minutes

24 readings Total 280 minutes

Course syllabus 10 minutes
How to be successful in this course 10 minutes
Microsoft Azure Active Directory name change 10 minutes
Clean up resources  10 minutes
How to open an image in a new tab 10 minutes
Additional resources 5 minutes
Determine countermeasures and mitigation 10 minutes
Threat modeling 10 minutes
Exercise: Create a threat model for a simple web application 30 minutes
Exemplar: Create a threat model for a simple web application 10 minutes
Clean up resources  10 minutes
Additional resources: Introduction to threat modeling 5 minutes
Cyberthreat modeling 10 minutes
PASTA in depth 10 minutes
CVSS Cheat sheet 10 minutes
Enterprise security methodologies 10 minutes
Exercise: Evaluating threats 30 minutes
Exemplar: Evaluating threats 10 minutes
Additional resources: Threat modeling strategies 5 minutes
Activity: Building a model 10 minutes
Security Development Lifecycle (SDL) 10 minutes
Exercise: Web application threat modeling 30 minutes
Exemplar: Web application threat modeling 10 minutes
Additional resources: Threat modeling 5 minutes

6 assignments Total 108 minutes

Self-review : Create a threat model for a simple web application 18 minutes
Knowledge check: Introduction to threat modeling 15 minutes
Self-review: Evaluating threats 15 minutes
Knowledge check: Threat modeling strategies 15 minutes
Self -review: Web application threat modeling 15 minutes
Module quiz: Threat modeling 30 minutes

1 discussion prompt Total 10 minutes

What do you hope to learn? 10 minutes

This week covers threat vectors, ransomware, defense in depth security, cloud security, network security, data security, and monitoring security in Azure. It also includes understanding the MITRE ATT&CK Matrix and IoT security. The module aims to provide you with an understanding of common cyberthreats, and how to mitigate them using various tools and strategies. By the end of the module, you will have a comprehensive understanding of the different components of cybersecurity and the measures you can take to protect your infrastructure from cyberthreats.

What's included

14 videos8 readings4 assignments

14 videos Total 86 minutes

Understanding susceptible infrastructure 7 minutes
MITRE ATT&CK Matrix overview 7 minutes
MITRE ATT&CK Matrix key points 7 minutes
Attack techniques 4 minutes
Types of malicious software 6 minutes
Prevention, detection, and countermeasures 4 minutes
What is an IoT device? 7 minutes
IoT attacks 5 minutes
IoT attack risk 5 minutes
IoT attack prevention strategies 7 minutes
Azure IoT 7 minutes
Defender for IOT 7 minutes
Defender for IoT: Deployment and integration 6 minutes
Module summary: Advanced threats and mitigation 8 minutes

8 readings Total 93 minutes

Understanding susceptible infrastructure in depth 10 minutes
Activity: Risk assessment 13 minutes
Mitigation 10 minutes
Additional resources : Susceptible infrastructure 5 minutes
A guide to IoT device architecture 10 minutes
Exercise: IoT device analysis 30 minutes
Exemplar: IoT device analysis 10 minutes
Additional resources: IoT (Internet of Things) and common attacks 5 minutes

4 assignments Total 70 minutes

Knowledge check : Susceptible infrastructure 15 minutes
Self-review: IoT device analysis 10 minutes
Knowledge check: IoT (Internet of Things) and common attacks 15 minutes
Module quiz: Advanced threats and mitigation 30 minutes

This week provides an overview of various cybersecurity concepts and practices. It covers the basics of threat vectors, entry points, and prevention methods in cybersecurity. It also explains defense in depth security, Azure security, network security, data security, and monitoring security. You will gain a deeper understanding of these concepts, learn how to identify and mitigate security threats, and develop strategies to protect data and applications from unauthorized access. By the end of this module, you will have a comprehensive understanding of cybersecurity and be able to create an effective defense in depth security strategy for an organization.

What's included

13 videos9 readings4 assignments

13 videos Total 90 minutes

Threat landscape and vectors 7 minutes
Access brokers 7 minutes
Mitigation approaches 8 minutes
Defense in depth (DID) 7 minutes
Defending your cloud infrastructure 7 minutes
Azure Security: Building a network with DID 7 minutes
Modern authentication 7 minutes
Identity mitigation strategy 5 minutes
Azure Security mitigation strategies 8 minutes
Implementing network security on Azure 7 minutes
Securing data on Azure 7 minutes
Network security 4 minutes
Module summary: Security conscious modeling 8 minutes

9 readings Total 75 minutes

Antivirus and anti-malware 10 minutes
Advanced antivirus and antimalware techniques 10 minutes
Additional resources : Entry points 5 minutes
Defense in depth strategy 10 minutes
Identity infrastructure 10 minutes
Focused defense 10 minutes
Additional resources: Secure network design with defense in depth 5 minutes
Monitoring Azure Security 10 minutes
Additional resources: Security conscious modeling 5 minutes

4 assignments Total 75 minutes

Knowledge check : Entry points 15 minutes
Knowledge check : Secure network design with defense in depth 15 minutes
Knowledge check: Mitigation strategies 15 minutes
Module quiz: Security conscious modeling 30 minutes

In this week, you will be assessed on the key skills covered throughout this course and the other courses in the Cybersecruity Analyst Program. This module contains the Final Capstone project of the program which encapsulates the learning into a practical whole. The Final Capstone project consists of several stages and graded self-reviews. This module also includes the final graded quiz.