Don't know how to respond to question in 7.4.9 Live Lab: Configure First Hop Redundancy

Regarding this section:
In the terminal, run arp -a and compare the output to the topology diagram.

Which of the IP addresses in the cache are router interfaces?
10.11.2.1
10.11.2.2
10.11.2.5
10.11.2.100
10.11.2.103
10.11.2.255

How do you respond to this question? I've checked the diagram and I can't find the logic... I don't have any clues on how to respond.

Anyone Using "a+ cyber?"

I got access to a course that was released last year "a+ cyber" that looks like a great review of material for refreshing students and supporting Security+, CYSA and PenTest+. It even has a unit devoted to scripting. I like what I see but I'm curious if anyone has any experience with the course and how it worked out for you.

CIN The Pulse: The Undiscovered Country of Operational Technology (OT): A practical overview

What is all this talk about OT? Why should my IT students learn about OT? Information Technology professionals are increasingly asked to understand the relatively foreign world of critical infrastructure and Operational Technology (OT).

Join CompTIA's Chief Technology Evangelist, Dr. James Stanger, to learn more about how our critical infrastructure works. James will avoid abstract discussions of acronyms such as SCADA, PLC, and Modbus. Instead, he'll discuss case studies from critical infrastructure professionals he has met worldwide. Do you ever wish you had a few stories to explain how critical infrastructure works? Looking to get past the typical cliches and FUD (Fear, Uncertainty, and Doubt) about OT cybersecurity?

What: CIN The Pulse Webinar
When: Wednesday February 19, 2025, 11:00 am CDT, one-hour session
Where: ON24
Who: Dr. James Stanger, CompTIA Chief Technology Evangelist
Register Here

06689 CIN ThePulse Banner-SM.png

Stanford Code In Place Volunteer Section Leader Applications are now open!

Stanford Code In Place is once again accepting applications to teach the first half of CS106A as a volunteer Section Leader!

CS106A is one of the most popular courses at Stanford University, taken by almost 1,600 students every year. It has been developed over the last 30 years by an amazing team, including Nick Parlante, Eric Roberts and more. The course teaches the fundamentals of computer programming using the widely-used Python programming language. This course is for everyone from humanists, social scientists, to hardcore engineers.

What makes Code in Place special? We recruit and train one volunteer teacher for every 10 students in order to create a vibrant community of teaching and learning. We believe that the magnitude of people who want to teach computer science is large and may be roughly proportional to the magnitude of people who want to learn. Why? Teaching is joyful and teaching is the best way to learn both content and team leading skills. We do hope this course inspires more human-centered learning for all.

Who Can Teach?
Code in Place Section Leaders come from a wide range of backgrounds. We have had:

Retired teachers
- Programmers in industry
- University students studying computer science
- and even past Code in Place students who have continued their learning

We have learned that folks from all contexts can be exceptional educators. The prerequisite is that you know the first half of CS106A (Python up through lists and dictionaries). If you are accepted we will train you on the art of computer science education. You need to have at least 2 hours each week over the

And yes, you get a badge: https://digitalcredential.stanford....uYUNCb2lOWHZRT0cwbGJSTG5xVjZPUE1vM2NlVEV4eTZX

Sign up here to be a Section Leader: https://codeinplace.stanford.edu/public/applyteach/cip5

Class starts 21st April 2025. Student applications due 10th April 2025. Section Leader applications are due 4th April 2025.

Tech+ Focus Group

I know that this is for the ITF+ but there is no current group or thread for the Tech+ yet. I was one of the instructor SMEs that met in Chicago during the 2023-2024 school year to help develop the new Tech+ course. While teaching the course this year, I noticed that there were several issues with the content. Since there have been a lot of changes within CompTIA recently, I was hoping that someone within the CompTIA organization might be willing to set up a focus group to review the content and suggest changes to the Tech+ course now that we have had a chance to teach the content. If so I would be interested in being part of the focus group

CertMaster Learn Network+ version 9.1

Lab 6.1.8: View Open Ports
When you run Zenmap you get the results that the support computer has port 5900 closed (In red). Means nothing is listening on that port, but that is the computer they want you to remove VNC from, which VNC is installed on that computer. Can anyone give me information as to why this lab is not showing Green with an open port???
  • Love
Reactions: precious

Authorized partner list is gone?

Hiya!

CompTIA used to have a directory on their site, where one could lookup authorized (delivery) partners. I was on that list.

I can't seem to find the list anymore. Some cached pages on Google still have hints that the list used to be there, but I just really, really can't find it anymore.

I've already pinged Luke to ask him what's up, but maybe someone else knows? Where did the list go?!

CIN TTT Series: Cloud+ CV0-004

I am pleased to announce we are ready to launch the Cloud+ CV0-004 TTT series! Join us and special guest Michael Schmitz as he leads the Cloud+ TTT series using the CompTIA CertMaster Learn content. Michael will cover the exam objectives and provide hands-on examples as you strengthen your fundamental cloud technology knowledge and proficiency in managing cloud environments.

Please note that this series is only four sessions! That is because a lot of what is covered should be refresher from Network+ and some of Security+. So please brush up those series so you can stay up with what is happening in the clouds!

What: CIN TTT Series Cloud+ CV0-004 4 sessions
When: Sept 24, 2024, 2:00 - 4:00 PM Central Daylight Time, Tuesday and Thursday
Who: Michael Schmitz
Where: ON24

REGISTER HERE

06689 CIN Webinar Banners-02.pngCloudPlus Logo(1).png

Seeking Network+ instructor for 4x 1 hr classes over 4 months

Hi,
We are a nonprofit that will host an online, virtual Network+ cert course. This will occur over several months and we have the lessons already to go using a popular online platform. We would like an instructor to host a 1 hr. monthly session each month for 4 months to help the students navigate and summarize what they should be focusing on as they progress, or they may have questions about the content as they navigate thru the online course. This is a REMOTE learning format. Zoom/Google Meet links will be provided.
If interested please email: [email protected]
M-

My Journey in Cybersecurity: From Security+ 2003 to Advanced Certifications

My cybersecurity journey has been a fascinating evolution, spanning over two decades of continuous learning and professional growth. Back in 2003, I first obtained my CompTIA Security+ certification, which was a significant milestone in my career. Recently, I revisited this foundational certification by successfully passing the latest Security+ (SY0-701) exam, demonstrating the importance of staying current in our rapidly changing cybersecurity landscape.

I will complete Pen+, CySA+ and CASP this year. I wrote an ARP Poisonging detection tool in Python and was going to share it, but when testing there were a few errors so I will test it further.

Am I overthinking the new Pentest+ 003?

In the past, I've found that the certification exams do a pretty good job of meeting the outcomes stated at the top of the exam guide regardless of the material that is presented for the different learning objectives...ie that there is often a difference of interpretations between what gets trained and how it gets tested.

This particular exam and the course material seems to leave a lot of whitespace within the words used to define the outcomes and objectives, and the scope of the objectives (given the number of sub-topics), that a test developer can fill in ... (outcomes and a couple of objectives noted at the bottom of the post)

For example, in Pentest+ 003 what is the definition of phases, ttp's, and laws referenced in the outcomes?
a) phases that the outcomes refer to (note the domains and objectives don't follow any published pentest methodology and seem to conflate phases with tactics in mitre attack)
b) which list of tactics, techniques and procedures are we aligning the attacks, tools and phases with...(note Mitre attack is the only ttp listed but it is not used consistently in the objectives)
c) what laws and compliance/control frameworks should we be aligning the attacks with (note, I don't really see this level of detail reflected in the course material...the objectives just say security and privacy laws in 1.1 and the frameworks in objective 1.3 don't identify any control frameworks beyond the owasp masvs)

...and given the outcomes, 80+ tools and 100+ "attacks", and just 2 of the objectives (noted below), I'm led to believe that the students will need to:
1. Associate each tool with all of the relevant phases, tactics and techniques...note I don't know what the authoritative list/lists of these are
2. Be able to script the commands and switch options for every tool ... and associate those with specific attacks
3. Know the appropriate mitigations for each attack and probable root causes for each control's failure
4. Be able to identify an attack with the control or law you intend to test

so, am I overthinking what my students will need to be capable of or where the test writers may take the exam?

---------exam outcomes and objectives -----------

The exam guide identifies 4 outcomes for Pentest+ 003:
• Plan, scope, and perform information gathering as part of a penetration test.
Perform attacks that are aligned to and fulfill legal and compliance requirements.
• Perform each phase of a penetration test using and modifying appropriate tools and use the appropriate tactics, techniques, and procedures.
Analyze the results of each phase of a penetration test to develop a written report, effectively communicate findings to stakeholders and provide practical recommendations.

That said, the 26 objectives (including 15 apply and 3 analyze level of learning) list over 80 pentest tools/platforms/technologies and over 100 attacks/tactics/techniques. Including these two doozies
- Given a scenario, use scripting to automate attacks.
- Given a scenario, analyze the findings and recommend the appropriate remediation within a report.

Realistic Presentation Planner for Comptia Network+

I'm having some difficulty on delivering the course for the new Comptia Network + certification in a week. The training materials contains a Course Paging Guide for a 5 day course but the total estimated instructional time there is 5942 minutes which means aproximately 99 hours, too much for a week.

Do you have any materials with recommendations about the recommended timing for the course so I can deliver the knowledge in a week (8 hours per day)? For example, the old course had a document called Presentation Planner for Network+ which you could have used for schedulling the time.

DeepSeek

A Chinese artificial intelligence company called DeepSeek has released an AI app with development costs estimated at only $6 million. OpenAI, Google, and other major US companies are on track to invest roughly $1 trillion over the coming years. The news has caused NVIDIA to lose 15% of its stock value in one day.

The exceptionally low development cost, and the fact that it runs on older processors, have rocked the AI market.

https://www.cbsnews.com/news/what-is-deepseek-ai-china-stock-nvidia-nvda-asml/

CIN TTT Series - PenTest+ PT0-003

YES! It is time for our first TTT series of 2025! Join us for the PenTest+ series beginning Tuesday, January 21st! @Nicholas Pierce will lead this series, which consists of eight sessions covering the PenTest+ exam domains. Nick will teach the key cybersecurity concepts covered on the exam and conduct hands-on activities with key technology tools used by cybersecurity professionals. We will also discuss instructional strategies for presenting the concepts to students and best practices for implementing a PenTest+ course.

What: CIN TTT Series PenTest+ PT0-003 8 sessions
When: Jan 21, 2024, 6:00 - 8:00 PM Central Daylight Time, Tuesday and Thursday
Who: Nicholas Pierce
Where: ON24

REGISTER HERE
CIN Webinar Banners-TTT ON24.pngPenTest  Logo(1).png

  • Question
CertMaster Perform DataX "Master" Solutions for Reference

Good Day Everyone!

Is there a master solution set for the Live Labs for the DataX class? For example, a ZIP file that contains working examples of all of the Jupyter Notebooks?

Any other insights are appreciated!

Thank you,
Ben

Filter