CYBER LIBRARY
Explore the bootcamp
← All learning paths
CONNECT THE ARCHITECTURE

Understand a secure network

Build a mental model from packets to cloud access. Follow the sequence or open any note that catches your interest.

9 connected notes27 min reading
01
MILESTONE 1 OF 3

How data travels

0/3 read
  1. 01
    Connected systems · 3 min

    OSI and TCP/IP models

    Use OSI and TCP/IP layers to explain a browser request and separate physical, addressing, transport, and application problems.

  2. 02
    Connected systems · 3 min

    IP addresses

    Learn what IPv4 and IPv6 addresses identify, how private addressing works, and why an address in a log is not a person's identity.

  3. 03
    Connected systems · 3 min

    Subnetting and CIDR

    Understand CIDR prefixes and IPv4 subnet boundaries through a small /24-to-/26 example, including what subnetting cannot enforce.

02
MILESTONE 2 OF 3

Control the traffic

0/3 read
  1. 04
    Connected systems · 3 min

    TCP and UDP

    Compare streams and datagrams through application requirements, failure handling, and the evidence needed to understand a network exchange.

  2. 05
    Connected systems · 3 min

    Domain Name System

    Follow a DNS lookup through resolvers, authoritative servers, and caches, and learn why a resolved name is not proof that a service is trustworthy.

  3. 06
    Connected systems · 3 min

    Firewalls

    Understand traffic-policy enforcement, stateful inspection, rule ownership, and why permitting a connection does not authorize its application actions.

03
MILESTONE 3 OF 3

Design for trust

0/3 read
  1. 07
    Connected systems · 3 min

    Network segmentation

    Design meaningful security zones, define necessary communication, and verify that enforcement matches the boundaries drawn in the network diagram.

  2. 08
    Connected systems · 3 min

    Zero trust

    Understand resource-focused access decisions, identity and device evidence, and how zero trust works alongside existing controls.

  3. 09
    Connected systems · 3 min

    Cloud shared responsibility

    Assign ownership for each cloud control using the specific service boundary, then verify customer configuration instead of relying solely on provider assurance.

Keep connecting the dots.

Follow another path or take your next question into the library.

Find your next direction
Start with a concept. Follow its connections.
Detection & responseAbuse Elevation Control MechanismElevation-control abuse bypasses or misuses mechanisms governing privileged execution.Making change happenAcceptance criteriaDefine observable conditions for a deliverable to be accepted.Security essentialsAccess controlUnderstand subjects, resources, permissions, and enforcement through a shared-drive example, including how access changes over time.Detection & responseAccess Token ManipulationAccess token manipulation changes or adopts operating-system security contexts.Risk & resilienceAccount Access RemovalAccount access removal disrupts legitimate users by changing, deleting, or restricting their identities.Evidence & investigationAccount DiscoveryAccount discovery enumerates identities available in a system or environment.Detection & responseAccount ManipulationAccount manipulation changes identity settings to preserve or expand access.Adversarial thinkingAcquire InfrastructureInfrastructure acquisition obtains domains, servers, or other resources used to support operations.Adversarial thinkingActive ScanningActive scanning probes target infrastructure to learn reachable services or weaknesses.Security essentialsAdversary in the middleAn intermediary may observe or alter a communication path.Security essentialsAESA symmetric block cipher whose safe use depends on its mode and implementation.Making change happenAgile deliveryUse short feedback cycles to adapt toward a useful outcome.