DSTC study plan
DSTC · Give each week a clear focus.
8 weeks · About 6 hours per week
Security Fundamentals and Threat Landscape
Define the core security principles (confidentiality, integrity, availability) and classify ten real-world breaches by which principle failed.
Differentiate threat actors (insider, nation-state, hacktivist, script kiddie) and match each to a plausible motivation and capability level.
Map common malware categories (virus, worm, trojan, ransomware, rootkit) to their primary propagation and persistence mechanisms.
Explain social engineering vectors (phishing, pretexting, baiting) and identify the human control that mitigates each.
Your checkpoint
A one-page threat taxonomy table listing 12 threat types with actor, mechanism, and primary mitigation.
Security Fundamentals and Threat Landscape & Network Security and Architecture
Describe the OSI and TCP/IP layer models and locate at least two attacks at each layer.
Compare network attack types (MITM, spoofing, DDoS, ARP poisoning) and state the defensive control for each.
Summarize cryptographic fundamentals: symmetric vs asymmetric, hashing, and where each is used in practice.
Explain how TLS establishes a secure channel at a conceptual level.
Your checkpoint
A layer-by-layer attack-and-control reference sheet covering all seven OSI layers.
Network Security and Architecture
Diagram a segmented network with DMZ, internal zones, and a screened subnet, labeling each boundary control.
Compare firewall types (packet-filtering, stateful, next-gen/proxy) and select the right one for three given scenarios.
Explain IDS vs IPS placement and the tradeoffs of inline versus passive monitoring.
Describe VPN and remote-access architectures and the risks each introduces.
Outline zero-trust principles and contrast them with perimeter-based models.
Your checkpoint
A labeled network architecture diagram with a written justification for each control placement.
Network Security and Architecture & Endpoint and Host Security
Identify hardening baselines for servers and workstations (patch management, least functionality, secure configuration).
Explain endpoint protection layers: antivirus, EDR, application allowlisting, and host firewalls.
Describe how to secure wireless networks and the weaknesses of legacy protocols.
Compare network access control approaches for wired and wireless endpoints.
Your checkpoint
A host-hardening checklist of 15 controls with a pass/fail criterion for each.
Endpoint and Host Security & Identity and Access Management
Differentiate authentication factors and design a multi-factor scheme for a given workforce scenario.
Explain identity lifecycle management: provisioning, role changes, and deprovisioning.
Compare access control models (RBAC, ABAC, MAC, DAC) and choose one for three scenarios.
Describe federation, SSO, and directory services at a conceptual level.
Identify common credential attacks (credential stuffing, password spraying, pass-the-hash) and their mitigations.
Your checkpoint
An IAM design brief for a 200-person company covering MFA, access model, and lifecycle steps.
Identity and Access Management & Incident Detection and Response
Outline the incident response lifecycle and list the key activity in each phase.
Define detection sources (logs, SIEM alerts, endpoint telemetry) and what each is best at catching.
Explain triage and severity classification for a set of sample alerts.
Describe containment, eradication, and recovery actions for a ransomware scenario.
Identify evidence-handling basics and chain-of-custody requirements.
Your checkpoint
A written incident response runbook for one scenario, from detection through post-incident review.
Incident Detection and Response & Security Operations, Governance, and Compliance
Map security controls to a governance framework and explain the purpose of a control catalog.
Distinguish policies, standards, procedures, and guidelines with an example of each.
Explain risk assessment fundamentals: likelihood, impact, and risk treatment options.
Describe the role of audits, metrics, and continuous monitoring in proving compliance.
Summarize major regulatory and privacy obligations at a high level.
Your checkpoint
A risk register with five identified risks, scored, with a chosen treatment for each.
Security Fundamentals and Threat Landscape & Network Security and Architecture & Endpoint and Host Security & Identity and Access Management & Incident Detection and Response & Security Operations, Governance, and Compliance
Synthesize all domains by tracing one attack scenario end-to-end across network, endpoint, identity, and response.
Revisit the two weakest domains based on practice results and close specific gaps.
Complete timed practice sets and review every missed item for the underlying concept.
Build a one-page quick-reference sheet of the facts most easily confused.
Your checkpoint
A full-length timed practice exam with a written error log categorizing every miss by domain.
Milestones
Week 2: Score 80% or higher on a 30-question self-quiz covering Domains 1 and 2, and explain three Layer 3 attacks from memory.
Week 4: Produce the network diagram and hardening checklist and pass a peer or self-review confirming every control is justified.
Week 6: Walk through the incident response runbook verbally without notes, naming each lifecycle phase and its key action.
Week 8: Score 80% or higher on the full-length timed practice exam and have zero uncategorized errors in the error log.