1 1 00:00:00,000 --> 00:00:02,100 In this section of the course, we're going to cover 2 2 00:00:02,100 --> 00:00:03,990 the hardware assurance best practices 3 3 00:00:03,990 --> 00:00:06,360 that are used in today's enterprise networks. 4 4 00:00:06,360 --> 00:00:08,130 Now, we're going to be focused on domain one, 5 5 00:00:08,130 --> 00:00:10,320 security operations and domain two, 6 6 00:00:10,320 --> 00:00:11,370 vulnerability management. 7 7 00:00:11,370 --> 00:00:13,170 As we go through this section of the course, 8 8 00:00:13,170 --> 00:00:16,800 we'll specifically be looking at objectives 1.4 and 2.4 9 9 00:00:16,800 --> 00:00:18,090 during this section. 10 10 00:00:18,090 --> 00:00:20,910 Now, objective 1.4 states that given a scenario, 11 11 00:00:20,910 --> 00:00:23,310 you must be able to compare and contrast threat intelligence 12 12 00:00:23,310 --> 00:00:24,990 and threat hunting concepts. 13 13 00:00:24,990 --> 00:00:26,760 Specifically, we'll be looking at issues 14 14 00:00:26,760 --> 00:00:29,250 involving the supply chain and threat actors that focus 15 15 00:00:29,250 --> 00:00:30,690 on supply chain attacks 16 16 00:00:30,690 --> 00:00:32,760 as we go through the videos in this section. 17 17 00:00:32,760 --> 00:00:35,550 Objective 2.4 states that given a scenario, 18 18 00:00:35,550 --> 00:00:37,440 you must be able to recommend controls 19 19 00:00:37,440 --> 00:00:39,780 and mitigate attacks and software vulnerabilities. 20 20 00:00:39,780 --> 00:00:41,880 And again, we'll be focused specifically here 21 21 00:00:41,880 --> 00:00:44,760 on insecure design, security misconfigurations, 22 22 00:00:44,760 --> 00:00:47,160 and end-of-life or outdated components. 23 23 00:00:47,160 --> 00:00:49,290 Now, as I said, we're going to spend most of our time 24 24 00:00:49,290 --> 00:00:50,580 in this section talking about 25 25 00:00:50,580 --> 00:00:52,440 hardware assurance best practices. 26 26 00:00:52,440 --> 00:00:54,090 But as far as the exam is concerned, 27 27 00:00:54,090 --> 00:00:56,700 supply chain integrity should really be a big focus 28 28 00:00:56,700 --> 00:00:58,110 for your organization. 29 29 00:00:58,110 --> 00:00:59,640 Now, as we move through this section, 30 30 00:00:59,640 --> 00:01:01,050 we're going to be starting out by discussing 31 31 00:01:01,050 --> 00:01:03,330 supply chain issues and assessments. 32 32 00:01:03,330 --> 00:01:06,030 Then we'll discuss the concepts of a root of trust, 33 33 00:01:06,030 --> 00:01:09,960 including TPM, HSM, and anti-tampered devices. 34 34 00:01:09,960 --> 00:01:12,210 Next, we're going to cover trusted firmware 35 35 00:01:12,210 --> 00:01:14,520 and how it's implemented in today's systems. 36 36 00:01:14,520 --> 00:01:16,410 After that, we'll describe the key types 37 37 00:01:16,410 --> 00:01:18,090 of secure processing that's being used 38 38 00:01:18,090 --> 00:01:19,620 in today's enterprise systems, 39 39 00:01:19,620 --> 00:01:22,470 because after all, if we can't trust our own hardware, 40 40 00:01:22,470 --> 00:01:24,480 then none of the other remediations and mitigations 41 41 00:01:24,480 --> 00:01:26,790 that we're going to perform are going to be effective. 42 42 00:01:26,790 --> 00:01:28,620 So this is a critical area of concern for us 43 43 00:01:28,620 --> 00:01:30,990 inside of our modern enterprise networks. 44 44 00:01:30,990 --> 00:01:32,910 Finally, we're going to take a short quiz to see 45 45 00:01:32,910 --> 00:01:34,710 what you learned during this section of the course 46 46 00:01:34,710 --> 00:01:37,260 and review each of those quiz questions fully to make sure 47 47 00:01:37,260 --> 00:01:39,810 you can explain why the correct answers were correct. 48 48 00:01:39,810 --> 00:01:42,030 So let's start exploring the hardware assurance 49 49 00:01:42,030 --> 00:01:44,283 best practices in this section of the course.