CENTC study plan
CENTC · Give each week a clear focus.
8 weeks · About 6 hours per week
Network Security Concepts and Fundamentals
Define the CIA triad, AAA, and defense-in-depth, then map each to a concrete network control you could deploy
Compare symmetric vs. asymmetric cryptography and explain where each fits in a VPN or TLS handshake
Diagram the OSI and TCP/IP models side by side and label the security control that operates at each layer
Classify the major routing and switching protocols by the threats each one introduces
Your checkpoint
A one-page layered security reference sheet (model layer, control, common threat) covering all four goals
Network Security Threats and Vulnerabilities
Categorize at least 15 attack types (spoofing, MITM, DDoS, social engineering, insider) by target and mitigation
Trace the mechanics of an on-path attack through ARP and DNS to explain how each step is detected
Differentiate malware families by propagation and persistence behavior
Explain how a vulnerability becomes an exploit and identify the compensating control that breaks the chain
Your checkpoint
An attack-to-control matrix of 15+ threats with the specific mitigation for each
Network Security Concepts and Fundamentals & Network Security Threats and Vulnerabilities
Apply segmentation, zoning, and least privilege to a described flat network and justify each change
Match cryptographic primitives (hashing, PKI, key exchange) to the use cases that require them
Rank a list of identified vulnerabilities by exploitability and impact using a repeatable scoring method
Produce a risk statement for each of the top five threats in a sample scenario
Your checkpoint
A written risk-ranked remediation plan for a supplied flat-network scenario
Network Security Architecture and Design
Design a segmented architecture with DMZ, internal zones, and a defined trust boundary for a given business case
Select and place firewalls, IDS/IPS, and proxies, stating the rationale for each placement
Compare hub-and-spoke, full-mesh, and remote-access VPN topologies by risk and scalability
Justify a resilient design using redundancy and failover concepts
Your checkpoint
A labeled architecture diagram with a one-paragraph design rationale per component
Network Security Implementation and Operations
Configure and explain ACLs, NAT, and firewall rule ordering to enforce a stated policy
Describe 802.1X and NAC enrollment steps and where each control point sits
Explain how IPSec and TLS are configured to protect data in transit and at rest
Sequence the operational tasks for patching, backup, and change control in a defined order
Your checkpoint
A working configuration worksheet: a sample ACL set, NAT rule, and VPN parameter list with explanations
Network Security Implementation and Operations & Network Security Monitoring and Incident Response
Set up log collection from at least three source types and define what each source should capture
Write detection logic for two specific attack scenarios drawn from earlier weeks
Explain the phases of incident response and map each phase to a concrete action in a tabletop
Distinguish signature, anomaly, and behavioral detection and state when each is appropriate
Your checkpoint
A two-scenario detection and response playbook with triggers, log sources, and escalation steps
Network Security Monitoring and Incident Response & Network Security Governance, Risk, and Compliance
Perform a tabletop walkthrough of a breach from detection through containment, eradication, and lessons learned
Map controls to a recognized framework and identify two gaps in a sample control set
Explain how risk assessment, risk treatment, and residual risk feed into policy decisions
Identify the compliance obligations that drive specific technical controls in a given scenario
Your checkpoint
A completed incident after-action report plus a control-to-framework gap list
Network Security Concepts and Fundamentals & Network Security Threats and Vulnerabilities & Network Security Architecture and Design & Network Security Implementation and Operations & Network Security Monitoring and Incident Response & Network Security Governance, Risk, and Compliance
Re-derive the key facts of each domain from memory and correct errors against your own notes
Resolve every missed question from prior weeks by explaining the underlying concept, not the answer
Rehearse the design, detection, and governance deliverables under a time limit
Build a final one-page summary of the highest-frequency concepts across all six domains
Your checkpoint
A scored full-length practice set with a written error log and a final one-page summary sheet
Milestones
Week 2: Can explain any listed attack's mechanism and its primary mitigation without notes
Week 4: Architecture diagram passes a self-review: every component has a stated purpose and trust boundary
Week 6: Detection playbook triggers correctly on a supplied sample log excerpt for both scenarios
Week 8: Practice score meets or exceeds your target, and every missed item has a written correction