Hey guys and welcome back. Now in the previous nugget we had talked about some of the security
tools that we can use to of course help our security. What we're now going to look at
are some security resources that we have available to us that we must know for the
LPIC 2 examination. So with that said let's talk about it. Now before we actually just
look at these resources some things we have to be aware of are the types of things we
want to be looking for. One thing we want to be aware of software updates. So really
if some type of software has been discovered to have a bug in it i.e. some type of flaw
that could be manipulated that could otherwise compromise the security that software may
be issued with something called a patch. A patch is really just a piece of code that
is going to implement the fix to correct the flaw that is within the original software
and that's going to integrate with the software itself. So when you happen to run your software
updates that have the latest patches then your system will no longer be vulnerable to
that particular bug. So really keeping on top of your software updates very very important
cannot be overstated. Another thing we want to be aware of are security alerts. This is
really you know when some type of vulnerability is discovered within the security community.
You want to be aware of a particular trojan or virus or worm. Maybe some type of ransomware
that is going around. To be secure you have to have an awareness of the threats that are
around. So you really want to keep your ear to the ground and be aware of these types
of alerts. So this type of information you know understanding when particular patches
have been released which patches fix what problems as well as what type of threats are
currently out on the horizon. Then we want to consult some type of security resources.
Now the first service you want to be aware of is something called CERT. Now this is
the computer emergency response team and you can find information relating to CERT's
resources at CERT and that's not CERT it should be CERT.org. So on this website you will find
things such as blogs, podcasts, all of this stuff is going to be security focused. All
of it going to be very very valuable in keeping you up to date with the security landscape.
So if you happen to search for CERT.org you should be redirected to this URL. This is
ultimately ran by Carnegie Mellon University and we can see here the CERT division is a
leader in cybersecurity. Now on this website you're going to find a whole bunch of valuable
information such as security vulnerabilities and like I say we have blogs, we have podcasts,
lots and lots of very valuable information. Now the other resource I want to highlight
to you is one called Bug Track and that is a bug track with a Q actually at the end.
Now all bug track is as opposed to being a website it's more of a mailing list and it
is a mailing list developed by the team over at securityfocus.com. Basically this is going
to allow you to sign up to this mailing list and have some highly curated, inveted security
information that you can trust sent directly to you. So if you do subscribe you can get
information on things such as zero days. These are just newly discovered vulnerabilities
and software you can find information relating to those patches that can be used to fix these
vulnerabilities. Now the crucial thing to note about these resources is that they are reputable
and trustworthy. This is why they happen to be recommended because you can have a high
degree of confidence that what you're being told within these sites happens to be accurate
data vetted by trusted professionals and this is why the LPEC2 likes to highlight these types
of resources because ultimately if we're going to be implementing these practices within our
systems for real we want to be dealing like I say with those reputable resources that are
trustworthy. So really that is what we have to understand for the LPEC2 examination. We want
to know the security tools that we can use to help secure our perimeter as well as how we can
gather information about the general security landscape from those trusted resources. So that
is us for security tasks. The next thing we have to look at is the concept of virtual private
networks. What exactly is a virtual private network? Well that's what we're talking about in
the very next nuggets. I hope this has been informative for you and I'd like to thank you for
viewing.