• To ensure you get the most out of your CIN membership and stay connected with the latest updates, we are asking all members to update their community profiles. Please take a few moments to log in and: • Complete all sections of your profile • Review your current information for accuracy • Enter an alternative email address if desired (CIN requires your valid business email address for your training organization). Keeping your profile up to date helps us better serve you, ensures your account is correctly linked with CompTIA’s CRM, streamlines processes, enhances communication, and guarantees you never miss out on valuable CIN opportunities. Thank you for taking this important step! step!

Questions for Fun and Profit - Security Edition

In keeping with @Trevor Chandler 's idea, I think it will be fun to start tossing out questions. Maybe it's something we all can do to keep sharp.

1. Your CEO is concerned about security leaks in the organization. So, she shares three versions of info about a product release, one to the head of marketing, one to the head of finance, and one to the head of business development. Each department head is given specific instructions to not disclose the information to anyone else. Two weeks later, she is told that information about that the story released to the finance director ended up on LinkedIn. She now knows the leak is with her finance lead.

What kind of technique did she employ?

2. You are concerned about rainbow tables, employed against your passwords. So, you require salting to be employed, however, you wish to keep the salt values secret. What is this called?

3. Diffie-Hellman (and Elliptic Curve) was created in the 70's to overcome what cryptographic problem? From what ancient mathematic crypto concept is this derived?

No multiple guesses. You gotta figure 'em out. And of course, Googlers only get 10% credit.

/r
  • Like
Reactions: Brian Ford

  • Question
Please please, where to find a Coupon/Discount for the Official CompTIA Security+ Instructor Guide and all what is included?

Dear CIN,.
Please please,
Do we have here a Coupon/Discount for the Official CompTIA Security+ Instructor Guide and all goodies included in it?
Any even 5% coupon discount would be awesome to have and will be very appreciated.

thanking you all

Kind regards,

Today's Project - Setting up Harvester HCI

Anyone here ever do this?

I'm talking, of course, about Harvester HCI - an open-source packaged, production ready Hyperconverged Infrastructure, designed to leverage simple bare-metal boxes and create clusters. Runs on SUSE Linux.

So, I took a few HP EliteDesk Micros, (Sixth Gen Core i5, 16GB, 340GB SDD) and constructed one. Super simple to get going. The plan is to take about 18 of these and build a functioning HCI that we can then leverage to do actual 'cloud-y' things (VM's, demonstrate scaled computing, etc). We'll see how it goes but I wanted to share this and see how many of you all have used this.

/r

1662086110310.png

AGM University - Part-Time Instructor – Cybersecurity

AGM University
Part-Time Instructor – Cybersecurity
Tampa, Orlando, Miami – Florida US

JOB DESCRIPTION
A part-time instructor member is responsible for virtual teaching in the subject area or areas that correspond to his or her area of specialty (Cybersecurity). As part of the job, it is expected that he or she can plan, organize, and teach in a manner that ensures the achievement of the institution’s learning objectives. A part-time instructor member contributes to the academic process of the institution through the participation in the development of curriculums, assessment, evaluation, research, peer mentoring and coaching, community service and advancement of the institution.

REQUIREMENTS:
  • Associate's or Bachelor’s Degree
  • CompTIA A+ Certification
  • At least three (2) years of professional experience as Instructor
  • Able to submit copy of diploma, academic transcripts, and/or certifications.
  • Proven leadership skills from your previous work experiences
  • Excellent communication skills in English and Spanish
  • Excellent interpersonal and teamwork skills
  • Knowledge and experience in technical applications
  • Available to work weekdays (8:00 am – 12:00 pm), (1:00 pm – 5:00 pm) or (6:00 pm- 10:00 pm)
For more information, contact us!
Myrna Ramirez
Academic Recruitment Coordinator

[email protected]
(407) 563-6501 Ext. 5585

We are an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status, or any additional ground protected by law.

Texas Cyber Summit 2022

Hello All,

Texas Cyber Summit 2022 will be held next month in Austin, TX. If you or any of your students are interested in volunteering, please reach out to me. Volunteers need to work a couple shifts, then they get the rest of the Con for free which makes it a great opportunity for students. I am running the Texas Cyber Rangers (think Defcon Goons) and helping to drum up more volunteers. The Summit runs from September 22-24. I have posted info on this both on LinkedIn and Twitter. I can also be reach at lee (at) texascyber.org if you have interest or questions. Thanks!

Lee

  • Question
Solid XK0-005 book?

Good day everyone!

I'm anxiously looking for a solid, good book to prepare my students for XK0-005.

The previous three years, I taught XK0-004 using my own curriculum and adding to it with Bresnahan and Blum's book from Sybex / Wiley.

We've pre-ordered the 005 version of the same book, but I also bought the ebook version. The print version isn't out yet and I need something to prep my classes with, right?

Well, reading through the B&H 005 book from Sybex, I'm really not impressed. The 004 version was halfway decent, but the 005 version seems like a lazy update.

* The book left in a few topics which were removed from 004 -> 005.
* The book does not go deep enough by far into topics like Docker, Podman, Kubernetes, Terraform et al. Ditto for PKI and so on.

I've already taken and passed the 005 exam and I know how thoroughly some of those topics were covered. The book does not do it justice at all. For example, the only two mentions of "podman" are literally from output of the "docker" command, aliased as "podman".

So. Bottom line: who can recommend me a better book for XK0-005? Preferably one that'll come out soon, so we can cancel this pre-order and switch in time.

Security+ Sample Question

Q. A security professional needs to identify a physical security control that will identify individuals before allowing them to enter a secure area. Additionally, it should only allow a single person to enter at a time. Which of the following is the BEST solution?

A. Tailgating
B. Smart cards
C. Biometrics
D. Mantrap


No Googling!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Linux+ Practice Labs (Lesson 1 - Introducing to Linux) - Review

Hello fellow instructors!

I don't know if anyone of you folks are reviewing the Linux+ Official Material (Instructor Guide / Practice Labs / Videos) and so on, but I'd like to contribute with it.

Well, I started to analyzing the content by executing some practice labs, as well as, reading carefully the Instructor Guide, seeking for typos, broken links, and other related mistakes that might be there and cause some confusing to our students during the classes. I found out some, and I'd like to share with you in order to discuss the subject, and to know whether some of you agree or disagree about such points raised here.

The first one is about "Command Subcommand Option Argument". The practice question addressing this subject brings the use of "Subcommand", of the ip command, and asks to point out what option would be the correct one related to the specified port. The correct answer should be the "Command Argument" one, rather than the "Subcommand".

ip addr show eth0

ip -> the command
addr -> the subcommand (here we could use others like link, route...)
show -> the option (here we could use add, del...)
eth0 -> the argument (you can use another interface as an argument. The argument is the part of the command line that specifies the target that the command should operate on)

In this case the port (interface), should be classified and an argument.

The attachment file named "Practice-Question-Subcommand.png" shows the option "Argument" as a mistake.


The second one is about "displaying contents of a file". Among the options displayed, only two should be used to do that: cat and less. However, the answer is classified as wrong.
One of the those which would be classified as a correct one for this question was the touch command.

The attachment file named "Practice-Question-Display Contents of a File.png" shows the option with the command "cat" as a mistake.

Attachments

  • Practice-Question-Display Contents of a File.png
    Practice-Question-Display Contents of a File.png
    107 KB · Views: 12
  • Practice-Question-Subcommand.png
    Practice-Question-Subcommand.png
    99.7 KB · Views: 11

Passed 220-1101 last night and now chomping (champing?) at the bit for 1102!

Took Core 1 last night at home with an 8:30p exam time. I taught the 1000 series for a non-profit from January until June of this year as a full-time instructor and now I'm with that same non-profit as a part-time IT tutor. I currently hold the Net+ CE and Sec+ CE certs, plus A+ GFL from 1998. (Exam codes 220-002 and 220-003!)

Pretty good exam experience, all things told. Really excited (anxious?) for my next voucher to arrive so I can get that exam out of the way and be A+ certified x2!

A+ and IT fundamentals-Lansing ( Local Trainer needed on site)

A+ and IT fundamentals-Lansing ( Local Trainer needed onsite)

We are looking for an instructor for IT Fundamentals and A+ in January 2023 in the Lansing Michigan area. It might be half-day training, so we might need someone local. Needs familiarity with TestOut curriculum.

Thanks!
Tony Davis
Corporate Workforce Training Manager
866.253.3884
520.869.6422 cell
[email protected]

Linux+ XK0-005 TTT Series

Join the CompTIA Instructor Network and special guest Lee McWhorter as he leads the Linux+ TTT series. Lee will cover the exam objectives and provide hands on examples as you strengthen your Linux skills. We will discuss how to cover the content with students and suggest various labs to let students gain hands-on experience as they prepare for certification.

The CompTIA Linux+ is for the IT pro who will use Linux to manage everything from cars and smartphones to servers and supercomputers, as a vast number of enterprises use Linux in cloud, cybersecurity, mobile and web administration applications.

What: 10-session webinar series
When: Begins Monday, July 11, 2022 (Note: Sessions are on Monday and Tuesday evening CST)
Where: ON24
Who: Lee McWhorter, CTO Covered 6 LLC.
Register Here

2022 CIN Linux+ 005 TTT PROMO Slide.png

  • Question
CertMaster Lab stuck in a "Running" state, what to do?

My CEUs are due tonight by 1:59 AM EST. I have completed 99% of the Certmaster Learn and labs to gain my last needed 25 CEUs. However, one lab is stuck in a "Running" state and will not award my last 30 knowledge points to get the completed certificate needed. Anyone have any advice? Other than, "Well, you had 3 years to complete this..." LOL

Attachments

  • Lab 9 in Running State.pdf
    276.4 KB · Views: 5
  • Haha
Reactions: Tess Sluijter

Looking for CompTIA Instructors near Kankakee, 60901

I am currently the Director of Computer Science training at Kankakee Community College. I am looking to create curriculum that results in college credit and also will hit all objectives for the certs. We all know how important certifications are and by giving students pathways to a degree and also getting them certified at the same will open many doors for these students. Currently our IT programs are seriously lacking but we are looking to change that. Are there any local instructors that may be interested in either FT or adjunct work? We have not posted any jobs yet but I wanted to check here for any interest first.

Thanks,

John

Does the NSA/DHS Designation as a CAE Provide Unwanted Attention for Colleges/Universities?

In the article I raise the possibility that academic institutions obtaining the NSA/DHS designation as a Center of Academic Excellence (CAE) may be drawing the unwanted attention of ransomware gangs, seeking to demonstrate their skills against alleged hardened targets. Thoughts?

*** Risk Management ***

Risk Management Per NIST: The program and supporting processes to manage risk to agency operations (including mission, functions, image, reputation), agency assets, individuals, other organizations, and the Nation, and includes: establishing the context for risk-related activities; assessing risk; responding to risk once determined; and monitoring risk over time.

1660744635639.png

Filter