Clarification Needed on SSL/TLS Certificate Verification Process

Hello everyone,

I hope you’re all doing well! I wanted to share a recent teaching experience related to SSL/TLS certificate verification and seek your insights on a particular point of confusion that came up in class.

During a session on secure communications, I had my students test the SSL/TLS configuration of a web server using OpenSSL. We used the following command to retrieve and display the certificate details:

openssl s_client -connect 192.168.100.30:443 -showcerts

This command successfully connected to the server and displayed the server’s certificate chain. However, one student asked about the process of verifying whether the certificate is valid and trusted, particularly regarding the role of Certificate Authorities (CAs).

To clarify, I explained that the verification process involves checking several factors, including:
  1. Whether the certificate is signed by a trusted CA.
  2. The certificate’s expiration date.
  3. The certificate's revocation status, often checked through OCSP (Online Certificate Status Protocol).

However, I realized I could provide more depth on how to perform these checks effectively. For example, we can check the certificate expiration date using:

openssl x509 -in certificate.crt -noout -dates

I’d love to hear your suggestions on the following:
  1. How can I effectively demonstrate the entire SSL/TLS verification process in class, including checking the certificate’s revocation status?
  2. Are there any additional tools or techniques you recommend for teaching about certificate verification and the role of CAs in ensuring secure communications?

Thank you for your insights!

  • Poll
Cloudflare is driving me crazy

Cloudflar is driving me crazy

  • Yes

    Votes: 7 70.0%
  • No

    Votes: 3 30.0%

Is anyone else being gatekept on CIN, by an overly protective Cloudflare?!

Every single pageload I do, that Cloudflare page pops up to "check the security of your connection.".

Every other "like" I want to click, runs into an "oops we ran into some problems".

It's rendered CIN next-to unusable for me.

EDIT: Ha! Posting this thread, again: "Oops, we ran into some problems."

CompTIA EMEA Partner Conference

I’m thrilled to have been part of this incredible CompTIA EMEA partner conferences as a speaker! The energy was amazing, and I had the chance to meet some truly inspiring people. This experience has left me more motivated than ever. Can’t wait to step back onto that big stage next year!

Great job 👏🏽 @Stephen Schneiter

Attachments

  • IMG_0366.jpeg
    IMG_0366.jpeg
    1.5 MB · Views: 9

The differences between Data+, DataSys+, and DataX (according to ChatGPT)

The three CompTIA certifications you mentioned—Data+, DataSys+, and DataX—cater to different levels of expertise and specializations within the data and IT fields:
  1. CompTIA Data+: This is an entry-level certification aimed at individuals who want to start their careers in data analysis. It covers foundational skills such as data mining, visualization, governance, and statistical analysis. It's ideal for those seeking roles like data analysts or business analysts, as it focuses on using data to generate actionable insights and reports. Data+ is a good starting point for those new to the field, with about 18-24 months of relevant experience being recommended.

  2. CompTIA DataSys+: This is a more advanced certification focused on data systems management. It covers topics such as database architecture, cloud integration, and data security. DataSys+ is geared towards professionals responsible for managing and securing data storage and processing systems. It's suitable for roles like database administrators, data architects, and IT security specialists, as it requires deeper expertise in managing data infrastructures.

  3. CompTIA DataX: This is an expert-level certification for professionals with at least five years of experience in data science or related fields. DataX is part of the Xpert series and covers advanced concepts in mathematics, machine learning, and specialized data science applications. It targets seasoned professionals who want to validate their expertise in high-level data science operations. This certification is designed to demonstrate a comprehensive understanding of critical data science tools and concepts and is ideal for advanced roles such as data scientists.


    In summary, Data+ is for foundational data skills, DataSys+ is for managing data systems, and DataX is for expert-level data science skills.

CE Maintenance Fees

So, I am really confused about maintenance fees. My understanding is we only pay for the most expensive cert and even then... Not sure how this works when you have multiple at the same level. I am also unsure when it starts. Looking at Continuing education, I have a lot of certifications, and I am confused about whether I need to pay anything this year.

I also see that most of my certs this year have not been sent to fulfillment. I think this is the paper certification.

Any way... I'm hoping I have a budget left over at work, and I can pay some of these, but I'm really confused as to what I should pay.

It looks like I partially paid Cloud+, and since it is listed in the professional series, is that the only one I need to care about?

Here is a transcript if you want to help me

Share Your Experience as a High School IT Teacher and Earn a $20 Gift Card!

Howdy!

We’re reaching out to hear from people who have taken the unique path of becoming an IT teacher in a U.S. high school. Whether you’re currently teaching or have taught IT in the past, we would greatly appreciate your input. Subjects in grades nine to twelve include computer hardware, networking, IT support, web development, cybersecurity, robotics, and programming.

Please take less than 20 minutes to complete our survey. As a thank you, participants will receive a $20 Amazon gift card!

Your participation will help us better understand the experiences and support needed for IT teachers, contributing to the future of IT education in U.S. high schools.

--> Complete the Survey Here

Feel free to share this survey with any other IT teachers you know - we value every voice!

Thank you,
Kelli Adam, Network+
Texas A&M University

  • Question
Difference between Certmaster Learn and Perform .

Hello everyone. I"m teaching the Network+ N10-009 course. I want to insure that my students have the most effective tools to use for the training. I've purchased the bundle for other courses in the past,, CompTIA A+, Learn, Practice Labs and Voucher. I hear that Perform is a new tool that has other features that may replace Certmaster Learn.

In your estimation, should I stick with the original bundle of Certmaster Learn, Practice, Labs and Voucher or purchase Perform, Practice and Voucher. Again, this is for Network+ N10-009.

Lastly, I want to confirm that when I purchase either of these bundles, there's an instructor or organization access key and student access key for all products. I need to make this purchase immediately.

With Appreciation,

Bobbie
  • Like
Reactions: precious

Certmaster Network+ N10-009 missing content

I have only recently started going through the material for Certmaster N10-009, and already I am getting the feeling that this course may be lacking content that may be useful to students. Just in the first section where it discusses topologies, it does not cover ring and bus topologies, which even though those topologies are relatively old and unused, I feel like they should still be included in the material. On top of that, one of the practice questions uses a logical topology as one of it's answers, which was not covered at all. Is this a consistent theme throughout the course, or am I just off to a bad start? Let me know what you think of the new Certmaster Network+ N10-009.
  • Like
Reactions: precious

VIdeos for NET+ CM Perform labs

Hi All,
I would have sworn they discussed having example videos for the various labs in Net+ 009 CM Perform. I can't find them for the trees - so to speak.
Can someone point me in the right direction?

Also, are there any explanations or videos for the few PBQs in the CM Perform final?

I trying NOT to reinvent the wheel if they are already somewhere I'm over looking.

Thanks in advance CINners,
Amy

How Load Balancing Works in Cloud Environments

Cloud load balancers distribute traffic across multiple virtual machines (VMs), containers, or servers within the cloud infrastructure. Here are some specific ways cloud load balancing can be deployed:

1. Cloud-Based Load Balancers:

  • Elastic Load Balancer (ELB) in AWS
  • Azure Load Balancer in Microsoft Azure
  • Google Cloud Load Balancing in Google Cloud
  • These services automatically distribute incoming traffic across multiple instances in multiple regions or zones.

2. Global Load Balancing:

  • In cloud environments, load balancers can distribute traffic across multiple data centers or regions. This ensures global availability and low-latency access for users based on their geographic location.

3. Auto-Scaling Integration:

  • Cloud-based load balancers often work hand-in-hand with auto-scaling. As traffic increases, the cloud environment automatically spins up new instances, and the load balancer evenly distributes traffic among these instances.

4. Multi-Cloud and Hybrid Cloud Load Balancing:

  • Some organizations use load balancers that work across multiple cloud environments (multi-cloud) or between on-premises and cloud (hybrid cloud), ensuring seamless traffic distribution across different platforms.

Advantages of Cloud Load Balancers:

  • Scalability: As demand grows, load balancing in the cloud enables you to scale out (add more resources) without manually configuring the infrastructure.
  • Flexibility: Cloud load balancers can handle a variety of traffic types (HTTP, HTTPS, TCP, etc.) and can work at both Layer 4 (transport) and Layer 7 (application) levels.
  • Cost-Efficiency: Instead of investing in expensive physical load balancers, cloud load balancers are billed on a pay-as-you-go basis, making them more cost-effective.
  • Resilience: They offer automatic failover and redundancy across regions or availability zones, enhancing fault tolerance.
  • Security: Cloud providers often integrate security features like SSL offloading, DDoS protection, and traffic filtering at the load balancer level.

Common Cloud Load Balancing Use Cases:

  • Web Applications: Ensure smooth performance by distributing traffic across multiple cloud instances.
  • Microservices: Manage and balance traffic between various containers or services.
  • Global Traffic Management: Serve content from the nearest location to reduce latency for users worldwide.

Cloud Load Balancing Services by Major Providers:

  • AWS Elastic Load Balancing (ELB): Offers Application Load Balancer (Layer 7), Network Load Balancer (Layer 4), and Gateway Load Balancer.
  • Azure Load Balancer: Supports both internal and public load balancing and integrates with Azure's global regions.
  • Google Cloud Load Balancer: Offers regional and global load balancing, with features like SSL offloading and content-based routing.

Conclusion:

Load balancing is essential in cloud environments for achieving high performance, redundancy, and scalability. Cloud providers make it easy to deploy and manage load balancers, allowing businesses to handle varying traffic demands efficiently while ensuring service reliability across regions or zones.
  • Like
Reactions: Fanuel

Instructor Lab Access

Hello,
I am an instructor at a CompTIA Corporate Partner. Is there a way that instructors can get free access to labs. While I can create an own environment when teaching, it takes time to build and also since I don't have access to the student labs, it becomes difficult to support my students when they are stuck. It doesn't make sense for the organization to buy me a lab every time I am delivering a class.

Share Your Experience as a High School IT Teacher

Howdy!

We’re reaching out to hear from people who have taken the unique path of becoming an IT teacher in a U.S. high school. Whether you’re currently teaching or have taught IT in the past, we would greatly appreciate your input.

Please take less than 20 minutes to complete our survey. Your participation will help us better understand the experiences and support needed for IT teachers, contributing to the future of IT education in U.S. high schools.

Feel free to share this survey with any other IT teachers you know - we value every voice!

Thank you,
Kelli Adam, Network+
Texas A&M University

  • Question
Unable to access CertMaster Labs

Hello,

I am wondering if anyone is facing the same issue? CertMaster Labs is not accessible. We have tried to access the lab using different accounts using the office internet, and also from the home internet. The link to the instructor guides is working though.

Screenshot 2024-10-23 181120.png

CompTIA Cloud+ CV0-004 Product Launch Meeting

Join Mike Kilgore, tomorrow for an exclusive webinar on CompTIA Cloud+ to explore how this certification can elevate your students' career potential in cloud computing. Discover the comprehensive knowledge Cloud+ offers, including cloud architecture, security, and operations, and learn about the high demand and competitive salaries for cloud professionals. Don’t miss this opportunity to empower your students with the skills they need to thrive in the dynamic cloud industry!

Thursday, October 10th at 2:30 pm CST

Register Now

1728494742473.png

CEU's for other certifications earned

I don't know if anybody has ever thought of this. When we certify, CompTIA has certain paths and order of certifications that allows you to cover a whole set of certifications if you take an upper level exam. Like for example: you have A+, Network+ and Security+, you pass CySA+and all three certs are renewed. Cool. But not everyone do the certs in order and (please correct me if I'm wrong) CompTIA doesn't give you the chance of earning CEU's for other certs taken.

I have A+, Network+, Security+, Server+, CySA+, Pentest+ and CASP+..... We all know that CASP+ renews all the previous certs. What I find strange is that I took Linux+ and I can't get CEU's to apply to CASP+. The next cert I'm studying for is Cloud+ and it's the same deal. If we look at those 2 certs and how they can enhance my skill set as a CASP+ I can think of:
  • Comprehensive Security Architecture: Both Cloud+ and Linux+ provide practical skills for designing, implementing, and managing secure environments across on-premises, cloud, and hybrid setups, directly supporting CASP+'s focus on enterprise security.
  • Improved Risk Management: The combined knowledge from these certifications equips a CASP+ professional with a holistic view of potential risks in cloud and Linux environments, enabling more effective risk assessment and mitigation strategies.
  • Enhanced Incident Response and Automation: Proficiency in Linux and cloud automation tools enables the creation of efficient incident response mechanisms, aligning with CASP+'s emphasis on response strategies and automation to enhance security operations.
  • Interoperability and Integration: Mastery of cloud and Linux systems supports CASP+ professionals in integrating various security solutions, ensuring interoperability while maintaining a strong security posture.
So, why doesn't CompTIA give us CEU's no matter in what order you take the certifications? In the end every test we take enhances our knowledge base. If you just have CASP+ we all know that CySA+, Linux+, etc will help us to be better prepared. I'm not talking about 50 CEU's here, I think 15-25 CEU's depending on the cert will be more than fair. Like for example, you are a CASP+ and pass Network+ or Security+ you get 15 CEU's each, you are a CASP+ and pass CySA+ or Cloud+ you get 25 CEU's each.

Any thoughts?

  • Question
Looking to order training but can't get a hold of anyone

Has anyone had trouble getting a hold of their account rep to purchase training? I have been trying since the 13th and customer service say I can only put in a ticket and wait. I did that and I still do not have any contact with the business/academic partner team.

Does anyone know a work around?

Thanks!

Filter