Practical Review

One-on-One Week 2 Recap 

• Let's start by going over any lingering questions or challenges you faced with last week's exercises. We'll address them together and ensure your have a good understanding of topics and activities associated.

New Discussion topics: 

Hardware and Software Fundamentals

• Hardware:
  • Refers to the physical components of a computer system, such as the central processing unit (CPU), memory, storage devices, input devices (e.g., keyboard), and output devices (e.g., monitor).
  • These components are tangible, can be physically seen and touched, and have a limited lifespan requiring upgrades or replacements over time.
• Software:
  • Consists of programs, applications, and data that run on a computer system, providing instructions that tell the hardware what to do.
  • Software is intangible, cannot be physically touched, and can be installed, updated, and uninstalled.
  • It includes system software (e.g., operating systems) and application software (e.g., Microsoft Word, Photoshop).

Databases, Databases, Databases

• Overview:
  • Databases are structured collections of data that are stored in a way that allows for efficient retrieval and manipulation.
  • They are crucial for managing and analyzing large amounts of data.
• Key Concepts:
  • Database design, data modeling, normalization, and denormalization.
  • Types of databases, such as relational databases (e.g., MySQL), NoSQL databases (e.g., MongoDB), and cloud databases.
  • Database management systems (DBMS) and their roles in maintaining data integrity and security.

National Institute of Standards and Technology (NIST) Security Controls

• NIST Framework:
  • The NIST Cybersecurity Framework provides guidelines and best practices for managing and reducing cybersecurity risk.
  • It includes five core functions: Identify, Protect, Detect, Respond, and Recover.
• Security Controls:
  • NIST Special Publication 800-53 outlines a comprehensive set of security controls for federal information systems.
  • These controls cover areas such as access control, incident response, and system and information integrity.




Security Content Automation Protocol (SCAP)

• SCAP Overview:
  • SCAP is a suite of specifications for maintaining the security of enterprise systems.
  • It provides a standardized approach to maintaining the security of systems, including vulnerability management and compliance checking.
• Components:
  • Common Vulnerabilities and Exposures (CVE), Common Configuration Enumeration (CCE), and Open Vulnerability and Assessment Language (OVAL).
  • SCAP helps automate the process of evaluating and reporting on the compliance of systems with security standards.




Cloud-AWS

• Cloud Computing:
  • Cloud computing involves delivering computing services over the internet, including servers, storage, databases, software, analytics, and intelligence.
  • Amazon Web Services (AWS) is a leading cloud platform that offers a wide range of services for computing, storage, databases, analytics, machine learning, and more.
• AWS Services:
  • Includes services like EC2 (virtual servers), S3 (object storage), RDS (relational databases), and Lambda (serverless computing).
  • AWS provides tools for security, compliance, and governance, as well as services for migrating and managing applications in the cloud.




An Exercise of Building A Home Lab

• Purpose:
  • Building a home lab is a practical exercise for hands-on learning and experimentation with various technologies, including hardware, software, and networking.
  • It allows individuals to test and learn about different configurations and scenarios in a controlled environment.
• Components:
  • Typically includes hardware such as servers, switches, routers, and storage devices.
  • Software components may include operating systems, virtualization tools (e.g., VMware, VirtualBox), and network management software.

Q&A

• These topics collectively cover the foundational aspects of computer systems, security standards, and practical knowledge needed for day to day activities as an IT Professional. 

This Week's Practical Goal:

To set up your own virtual lab environment, you can utilize several free or cost-effective options.   These options allow you to create a virtual lab environment without significant financial investment, enabling you to gain hands-on experience with various technologies.