-: In this section of the course, we're going to cover 2 2
the hardware assurance best practices 3 3
that are used in today's enterprise networks. 4 4
Now, we're going to be focused on domain one, 5 5
security operations and domain two, 6 6
vulnerability management. 7 7
As we go through this section of the course, 8 8
we'll specifically be looking at objectives 1.4 and 2.4 9 9
during this section. 10 10
Now, objective 1.4 states that given a scenario, 11 11
you must be able to compare and contrast threat intelligence 12 12
and threat hunting concepts. 13 13
Specifically, we'll be looking at issues 14 14
involving the supply chain and threat actors that focus 15 15
on supply chain attacks 16 16
as we go through the videos in this section. 17 17
Objective 2.4 states that given a scenario, 18 18
you must be able to recommend controls 19 19
and mitigate attacks and software vulnerabilities. 20 20
And again, we'll be focused specifically here 21 21
on insecure design, security misconfigurations, 22 22
and end-of-life or outdated components. 23 23
Now, as I said, we're going to spend most of our time 24 24
in this section talking about 25 25
hardware assurance best practices. 26 26
But as far as the exam is concerned, 27 27
supply chain integrity should really be a big focus 28 28
for your organization. 29 29
Now, as we move through this section, 30 30
we're going to be starting out by discussing 31 31
supply chain issues and assessments. 32 32
Then we'll discuss the concepts of a root of trust, 33 33
including TPM, HSM, and anti-tampered devices. 34 34
Next, we're going to cover trusted firmware 35 35
and how it's implemented in today's systems. 36 36
After that, we'll describe the key types 37 37
of secure processing that's being used 38 38
in today's enterprise systems, 39 39
because after all, if we can't trust our own hardware, 40 40
then none of the other remediations and mitigations 41 41
that we're going to perform are going to be effective. 42 42
So this is a critical area of concern for us 43 43
inside of our modern enterprise networks. 44 44
Finally, we're going to take a short quiz to see 45 45
what you learned during this section of the course 46 46
and review each of those quiz questions fully to make sure 47 47
you can explain why the correct answers were correct. 48 48
So let's start exploring the hardware assurance 49 49
best practices in this section of the course.