✳ Learning path / 5 lessons
Network architecture, protocol defense, and access models
Five lessons map the OSI and TCP/IP stacks to layer-specific protocol attacks, zero-trust segmentation, firewall and NAC architectures, IPsec and wireless cryptography, Kerberos and biometric identity lifecycles, and DAC, MAC, RBAC, and ABAC access models.
Work through the lessons in order to build a complete engineering mental model, or jump straight to the topic you are designing or reviewing today.
01OSI and TCP/IP layers, encapsulation, and protocol attacks
The 7-layer OSI model and 4-layer TCP/IP stack isolate networking jobs. Each layer has a distinct Protocol Data Unit (PDU), addressing scheme, attack surface (ARP spoofing, VLAN hopping, SYN floods, DNS poisoning), and hardware/software defense.
Network segmentation, firewall generations, SASE, and NAC
Flat networks turn one compromised laptop into an enterprise breach. Compare packet filters, stateful firewalls, NGFWs, WAFs, forward/reverse proxies, microsegmentation, Zero Trust SDP, SASE, and 802.1X Network Access Control.
IPsec VPNs (AH vs ESP), WPA3 wireless, and converged networks
IPsec secures Layer 3 traffic via IKE Phase 1/2, AH (integrity only) vs ESP (confidentiality + integrity), and Transport vs Tunnel mode. Wireless networks progress from broken WEP/TKIP to WPA2-AES (CCMP) and WPA3 (SAE/GCMP) with 802.1X Enterprise auth.
Kerberos, biometric CER math, NIST 800-63 assurance, and PAM lifecycle
Identity assurance spans biometric accuracy (FRR/Type I, FAR/Type II, CER), NIST SP 800-63-4 assurance levels (IAL, AAL, FAL), Kerberos ticket exchange (AS, TGS, KDC), and identity lifecycle provisioning (SCIM, PAM, JIT).
Access control models: DAC, MAC, RBAC, ABAC, and Rule-Based controls
Access control models govern how subjects receive permissions on objects. Compare Discretionary (DAC), Mandatory/Lattice (MAC), Role-Based (RBAC), Attribute-Based (ABAC / XACML), and Rule-Based access control, alongside Preventive/Detective/Corrective categories.
Test your engineering judgment
Every lesson closes with a 4-choice scenario check modeled on real architectural trade-offs. Ready for full hands-on simulations or certification drills?
Open the practice labs ↗ · Launch the CISSP practice simulator ↗