Simulators

26 interactive simulators and labs, in course order from Unit 1 to Unit 5. Each one opens on its own page with a link to its topic.

  1. Unit 1: Introduction to Security3 simulators

    1. Clue hunt1.1 Inspect the email: find the five red flags Tap every red flag in a phishing email, then check your answers.
    2. Clue hunt1.1 Is this text message a social engineering attack? Decide whether a text message is social engineering, clue by clue.
    3. Log hunt1.2 Spot the online password attack Read a sign-in log and spot the online password attack.
  2. Unit 2: Securing Spaces1 simulator

    1. Log hunt2.4 Spot piggybacking or tailgating in a badge reader log Find piggybacking and tailgating in a door badge log.
  3. Unit 3 Primer: Networking Basics2 simulators

    1. SimulatorPrimer Packet flow: follow a frame across switches and routers Follow a frame across switches and a router, hop by hop.
    2. SimulatorPrimer ARP: ask for a MAC address, then poison the cache Watch ARP find a MAC address, then see an adversary poison the cache.
  4. Unit 3: Securing Networks5 simulators

    1. Simulator3.1 MAC flooding: fill the switch table and watch it broadcast Fill a switch table with fake addresses and watch it flood frames.
    2. Simulator3.1 DNS poisoning: plant a fake record Plant a fake DNS record and see where users end up.
    3. Audit3.2 Config audit: which settings break the security policy? Audit a router and wireless configuration against the security policy.
    4. Simulator3.4 Firewall rules: first match wins Order firewall rules and test packets: the first match wins.
    5. Log hunt3.5 Find the indicators of compromise in a network log Find the indicators of compromise in a network log.
  5. Unit 4: Securing Devices5 simulators

    1. Audit4.1 Device audit: which settings leave this laptop open? Audit a laptop and find every setting that leaves it open.
    2. Terminal lab4.2 Hashing and salting in a real terminal Hash and salt passwords in a real terminal and compare the results.
    3. Audit4.2 Configure it: which login settings are too weak? Check login settings against a password policy.
    4. Audit4.3 Host-based firewall: which rules should change? Review a laptop firewall and decide which rules should change.
    5. Log hunt4.4 Auth log hunt: find the password attacks Read a server authentication log and find the password attacks.
  6. Unit 5: Securing Applications and Data10 simulators

    1. Audit5.1 File share audit: which settings put the data at risk? Audit a file share and find the settings that put data at risk.
    2. Drill5.2 Access model drill: which model is in use? Match each organization to the access control model it uses.
    3. Terminal lab5.2 Linux permissions: ls -l and chmod Read ls -l output and change permissions with chmod.
    4. Terminal lab5.3 AES encryption with OpenSSL Encrypt and decrypt a file with AES using OpenSSL.
    5. Terminal lab5.4 Public and private keys on two machines Generate a key pair on two machines and send an encrypted message.
    6. Audit5.5 Input review: which submissions should the sanitizer stop? Decide which form inputs the sanitizer should stop.
    7. Log hunt5.6 File access log: who is after the data? Find who is after the data in a file access log.
    8. Audit5.6 Integrity check: which files were altered? Compare file hashes with a baseline and find what was altered.
    9. Drill5.6 Detection drill: pick the best detective control Pick the best detective control for each situation.
    10. Log hunt5.6 Web server log hunt: spot the application attacks Spot application attacks in a web server log.
  7. Boss levelReady for the exam? Test yourself on all five units.

    Boss level Practice exam All five units like the multiple-choice section, with a score by unit. 60 questions, 80 minutes. Take the practice exam
    Side quest Which topic should get a simulator next, or what would make one of these better? Every request is read. No names, no accounts. Please do not include personal details.

Was this page helpful?

No names are ever shown, and every public comment is checked by us first. Please do not include personal details. To get a reply, email [email protected].

Course map
↑ Top

Enlarged view of the selected figure