Browse the Full Catalog

The **“Configure a Network Security Group in a Virtual Network”** IT Pro Challenge virtual lab will teach you how to work with virtual networks on the Azure platform. You will learn how to use network security groups to filter network traffic and keep your assets safe. After this lab, you will be comfortable enabling network security on Azure.

In this IT Pro Challenges virtual lab, learners are introduced to skills required to secure networks using PKI. Exercises in this lab teach users how to configure HTTPS, DNSSEC, NRPT, and EFS while learning PKI concepts. The topics covered in this lab are critical for learners to be effective in system administrator job roles in cybersecurity.

This IT Pro Challenge helps learners understand how to use the Azure portal to create and deploy an Ubuntu Server Linux virtual machine, leverage the Managed Disks option, and use an inbound Secure Shell (SSH) rule to allow for remote administration. Learners will also use the PuTTY tool to verify SSH connectivity to the virtual machine.

‍

This IT Pro Challenge virtual lab challenges learners to configure network connectivity for Linux on Azure. In this lab, learners will understand the concepts of static public IP addresses, network interface to configure and view Azure private IP addresses. Skills learned in this lab are valuable in a job role such as System administrator.

This Configure IP Routing with Linux on Azure IT Pro Challenge lab helps learners to understand how to configure IP routing for Linux Virtual Machines (VMs) deployed to an Azure cloud. The lab also shows learners the use and purpose of Azure route tables and the importance of creating a secondary IP address.

This Configure Linux Firewall ACL Rules IT Pro Challenge helps learners understand the basic concepts of ufw (uncomplicated firewall) behind using ping to test the firewall and how to manipulate firewall rules to allow and deny network traffic.

Learn how to configure a Virtual Network Service Endpoint with this IT Pro Challenge provided by Learn on Demand Systems tutorial lab. This a beginner level lab that concentrates on many basic and important concepts such as **key vault**, **a subnet, service endpoint**, and then **back-end subnet**.

In this IT Pro Challenge virtual lab, you will get hands-on experience as a Windows administrator, setting up security to harden your Windows domain. You will learn how to implement and enforce IPSEC, configure a PPTP VPN, and set up a client VPN connection. These skills are essential for a security-focused Windows administrator.

Learn to install, configure, troubleshoot, and operate LAN, WAN, and dial access services for medium-sized networks. You'll also learn how to describe the operation of data networks and other security fundamentals.

In this challenge, you will practice configuring a file integrity monitoring solution.

‍

Test your Data Security knowledge and skills to identify strengths, gaps, and weaknesses in areas like Data Classification, Data Masking, Data Loss Prevention, and more. Measure your mastery of Data Security and advance your career with targeted course and virtual lab recommendations.

‍

Test your Application Security knowledge and skills to identify strengths, gaps, and weaknesses in areas like Secure Coding, Static Code Analysis, Dynamic Code Analysis, and more. Measure your mastery of Application Security and advance your career with targeted course and virtual lab recommendations.

‍

Test your Infrastructure and Operations Security knowledge and skills to identify strengths, gaps, and weaknesses in areas like Secure Network Architecture, System Hardening, Virtualization Security, and more. Measure your mastery of Infrastructure and Operations Security and advance your career with targeted course and virtual lab recommendations.

Test your Security Engineering Fundamentals knowledge and skills to identify strengths, gaps, and weaknesses in areas like Cyber Risk, DevSecOps, Zero Trust, and Threat Modeling. Measure your mastery of Security Engineering Fundamentals and advance your career with targeted course and virtual lab recommendations.

In this challenge, you will practice securing data transmissions for an Apache web server.

‍

In this hands-on challenge, you will practice performing dynamic code analysis.

‍

In this challenge, you will practice performing static code analysis.

In this challenge, you will practice hardening a Windows system.

In this hands-on challenge, you will practice configuring firewall rules to meet network security requirements.

‍

In this challenge, you will strut the catwa- I mean, practice threat modeling...

In this hands-on lab, you will learn the basics of Data Loss Prevention (DLP) solutions. You will practice using Windows utilities and a Wazuh SIEM/XDR solution to simulate several of the core features of DLP.

In this hands-on lab, you will learn the basics of data classification. You will practice discovering sensitive data using DataVeil and Data Hound. You will also practice tagging data using DataHub.

This course covers the critical aspects of securing databases, including access control, encryption, and regular security assessments.

In this course, you will learn the basics of data security, including data states, data classifications, data protection strategies, data security tools, and common threats to data security.

In this hands-on lab, you will learn the basics of Dynamic Code Analysis. You will practice running dynamic code analyses, as well as interpreting its results and determining remediation steps for the security issues it identifies.

In this hands-on challenge, you will practice researching log events related to a reported spearphishing attack.

In this hands-on challenge, you will practice researching network observables.

In this hands-on challenge, you will practice analyzing log events related to Windows authentication.

In this hands-on challenge, you practice profiling a suspicious process on a Windows system.

In this hands-on challenge, you will practice using SIEM search expressions to locate suspicious activity related to XRDP traffic.

CVE-2024-23897 is a critical security flaw affecting Jenkins, a Java-based open-source automation server widely used for application building, testing, and deployment. It allows unauthorized access to files through the Jenkins integrated command line interface (CLI), potentially leading to remote code execution (RCE).

In this hands-on challenge, you will practice using SIEM search expressions to locate suspicious activity related to XRDP traffic.

CVE-2023-27524 is a critical vulnerability in Apache Superset, affecting versions up to 2.0.1. It enables attackers to bypass authentication by exploiting weak or default SECRET_KEY values. Attackers can forge session cookies to gain admin access, leading to potential remote code execution and unauthorized data access.

‍

Confluence suffers from a Broken Access Control vulnerability that affects Data Center and Server versions 8.0.0 to 8.3.2, 8.4.0 to 8.4.2, and 8.5.0 to 8.5.1. Threat actors exploit this vulnerability to obtain administrator access to Confluence servers. Put on your Red Team hat to create your own malicious admin account leveraging this CVE!

Royal is a spin-off group of Conti, which first emerged in January of 2022. The group consists of veterans of the ransomware industry and brings more advanced capabilities and TTPs against their victims. Begin this campaign to learn how to detect and protect against this newer APT group!

Magic Hound (APT35) is an Iranian state-sponsored threat group that primarily targets organizations across various industries and geographic regions through cyber espionage. Launch this campaign to start detecting the sophisticated techniques leveraged by this threat group.

Raspberry Robin is a malware family that continues to be manipulated by several different threat groups for their purposes. These threat actors (Clop, LockBit, and Evil Corp) specialize in establishing persistence on a compromised host and creating remote connections to use later. Once established, these C2 connections can be used for multiple purposes, including data exfiltration, espionage, and even further exploitation.

Threat actors will use stolen data exfiltrated from victim systems to extort organizations. Once they gain a foothold, they delete critical system files and threaten to release the data or disrupt operations if the victims do not pay up. Understanding these techniques is vital to defending your organization from such attacks.

Threat actors continue to leverage ransomware to extort victim organizations. What was once a simple scheme to encrypt target data has expanded to include data disclosure and targeting a victim’s clients or suppliers. Understanding the techniques threat actors use in these attacks is vital to having an effective detection and mitigation strategy.