Emerging Threats: What Should We Be Teaching?

While AI is an incredibly interesting topic the term only shows up in the acronym list for the SY0-701 Security+ course. The related topic of machine learning now also only appears in the acronym list. Neither topic is part of the exam objectives. There are some topics were I mention the impact AI and ML; specifically around SIEM/SOAR and automated code analysis. I'm not sure that I'd go there for AI developed threats yet.
Thanks, @Brian Ford. That's a good point. I might focus on AI/ML's impact in areas like SIEM/SOAR too, just to give students some context without straying too far from the objectives.

Engaging Students with Cryptography Labs

@Brian Ford, you're spot on! Most folks in cybersecurity aren't big fans of math, and you're absolutely right about not needing complex math for Security+. However, I think understanding the basics of cryptography, even without the heavy math, is crucial to grasping how encryption works under the hood. I love your idea of generating and validating file checksums—simple yet effective in showing the real-world applications of cryptography. In my own labs, I focus on practical exercises with OpenSSL, getting students hands-on with encryption and decryption. That approach really seems to help concepts click without scaring them off with math!

CEU's for other certifications earned

Great conversation. I'll just say that I think both arguments have merit and are not mutually exclusive.
Thanks, some of us on the thread are looking things from different point of views and that's great. I'm sure as technology develops and more and more certifications objectives start to overlap CompTIA will make it easier to add CEU's, in the meantime I'll concentrate on the CASP+/Security X CEU's. I started going back to the practical exams and I'm getting ready to do the OSCE to finish the Off-Sec trifecta of OSCP/OSWE/OSCE and they count as full renewal for CASP+. Then for next year I'll get PNPT to add to my Active Directory pentesting skills.
  • Like
Reactions: MBA

Emerging Threats: What Should We Be Teaching?

With the rise of AI-driven cybersecurity threats, I’m thinking about incorporating some discussion around this topic in my Security+ course. Are any of you doing the same? If so, how do you present it in a way that aligns with the exam but stays relevant to current trends?
I took the SY0-701 exam on April 1. No mention of AI. It could be the foot soldiers are ahead of the generals. o_O.

Engaging Students with Cryptography Labs

I try to avoid or make fun of the fact that most folks in cybersecurity hate math and you don't have to do any complex math on the Security+ exam. That said when it comes to crypto I always try to get my students to generate and validate some file checksums. MD5 checksums are relatively easy. The SHA algorithm name seems to vary on different operating systems (to use SHA you may need to call the SHA256 application). In CertMaster there is a 'Resources' tab that has a couple of files that students can download. I'll ask them to download and locally calculate the checksum of one of those files and verify it with my calculation.

Emerging Threats: What Should We Be Teaching?

While AI is an incredibly interesting topic the term only shows up in the acronym list for the SY0-701 Security+ course. The related topic of machine learning now also only appears in the acronym list. Neither topic is part of the exam objectives. There are some topics were I mention the impact AI and ML; specifically around SIEM/SOAR and automated code analysis. I'm not sure that I'd go there for AI developed threats yet.
  • Like
Reactions: precious

CEU's for other certifications earned

Overall, I thought it was a comprehensive and challenging exam.

As I've said, I have no idea what the scenario was in the simulation because I skipped it. I tend to do the PBQs last, and I wasn't aware that the CASP+ had a simulation question. I answer all the M/C questions first, then went back and answer the PBQs during the review. I was concerned when I realized I couldn't review the simulation question. However, when I completed the survey questions, I saw the notification on the screen that I had passed. Since this exam is pass/fail, I have no idea how well or poorly I did other than knowing I passed.

Many people speculate on the number of points M/C questions, PBQs, and simulations are worth. No one outside the inner circle of CompTIA staff who manage the exam knows.
Thanks for sharing, Gregory! It’s interesting that you skipped the simulation and still passed. I agree that tackling MCQs first helps build momentum. Many focus on PBQs, but mastering the MCQs is key.

I also find the speculation about scoring frustrating—confidence in your knowledge is crucial.

Engaging Students with Cryptography Labs

Teaching cryptography can be a challenge due to the complex math involved. I recently designed a lab where students use OpenSSL to encrypt and decrypt files with different algorithms. It really helped them grasp the concepts. Does anyone have similar exercises or labs they'd recommend?

CEU's for other certifications earned

That's an interesting perspective! It’s true that multiple-choice questions can carry significant weight in the overall score. Many people focus heavily on PBQs, but if you have a solid understanding of the core concepts, you can still succeed by mastering the MCQs. It’s good to see you’re confident in your approach! How did you feel about the exam overall?
Overall, I thought it was a comprehensive and challenging exam.

As I've said, I have no idea what the scenario was in the simulation because I skipped it. I tend to do the PBQs last, and I wasn't aware that the CASP+ had a simulation question. I answer all the M/C questions first, then went back and answer the PBQs during the review. I was concerned when I realized I couldn't review the simulation question. However, when I completed the survey questions, I saw the notification on the screen that I had passed. Since this exam is pass/fail, I have no idea how well or poorly I did other than knowing I passed.

Many people speculate on the number of points M/C questions, PBQs, and simulations are worth. No one outside the inner circle of CompTIA staff who manage the exam knows.
  • Like
Reactions: precious

CEU's for other certifications earned

I took the regular exam. People speculate on the grading of exam questions and make unsupported assumptions. I didn't even read the scenario and I passed the exam. It was not a make-or-break question. The same is true for PBQs on the other exams. If you do well on the multiple-choice questions, you can easily pass every CompTIA exam without answering a single PBQ.
That's an interesting perspective! It’s true that multiple-choice questions can carry significant weight in the overall score. Many people focus heavily on PBQs, but if you have a solid understanding of the core concepts, you can still succeed by mastering the MCQs. It’s good to see you’re confident in your approach! How did you feel about the exam overall?

Neural Networks

In session #5 of the DataX TTT series, 'Neural Networks" were discussed.

Neural Networks are computational models that mimic the complex functions of the human brain.
Yeah! Neural Networks are the backbone of many AI systems today, helping to solve complex tasks like image recognition, language processing, and even autonomous driving! With layers of interconnected nodes, they learn from data and improve over time, making them powerful tools for solving real-world problems.

Data + Results = Algorithms
  • Like
Reactions: Kwabena Fred

Filter