CENTC study guide
CENTC · Work through your exam, one topic at a time.
The CENTC is a vendor-neutral certification aimed at professionals who secure, operate, and defend enterprise networks. It suits network engineers, security analysts, and administrators moving from general IT or infrastructure work into a dedicated network security role, as well as practitioners who want a structured credential covering both defensive design and day-to-day operations. The CENTC study guide has 6 sections and about 1,444 words.
01Network Security Concepts and Fundamentals
Start with confidentiality, integrity, and availability, then extend to authentication, authorization, accounting (AAA), non-repudiation, and defense in depth. Questions often test which property a control protects: encryption at rest protects confidentiality; hashing protects integrity; redundancy protects availability; digital signatures provide integrity plus non-repudiation.
300 words, about 2 min02Network Security Threats and Vulnerabilities
Organize threats into categories: malware (viruses, worms, trojans, ransomware, rootkits), social engineering (phishing, vishing, pretexting), network attacks (scanning, sniffing, spoofing, MITM, on-path attacks), denial of service (volumetric, protocol, application-layer), and injection/web attacks (SQLi, XSS, CSRF). Know the difference between a worm (self-propagating) and a trojan (disguised payload), and between DoS and DDoS.
249 words, about 1 min03Network Security Architecture and Design
Design around zones: internet/untrusted, DMZ, internal/trusted, and management. Understand segmentation (VLANs, subnets, microsegmentation), the principle of least privilege at the network layer, and why a DMZ isolates internet-facing services.
245 words, about 1 min04Network Security Implementation and Operations
Operational security starts with secure baselines: disable unused services/ports, change defaults, enforce strong authentication, apply least privilege, and log centrally. Know hardening for switches, routers, firewalls, and wireless (WPA2/WPA3, 802.1X).
223 words, about 1 min05Network Security Monitoring and Incident Response
Know the telemetry: firewall and proxy logs, IDS/IPS alerts, NetFlow, DNS logs, endpoint telemetry, and SIEM correlation. Distinguish signature-based from anomaly-based detection and their false-positive/false-negative trade-offs.
199 words, under 1 min06Network Security Governance, Risk, and Compliance
Governance sets direction: policies, standards, procedures, and guidelines. Know the hierarchy - policy (what/why), standard (mandatory specifics), procedure (how), guideline (recommended).
228 words, about 1 min