Nexus at University of
Michigan Engineering Cybersecurity
Professional Bootcamp

Introductory Course (4 Weeks)

During this course, you’ll learn about the industry and will be introduced to networking and network security fundamentals, security on the Linux and Microsoft platforms, offensive security, threats/threat actors, and more. You’ll also get a feel for the remote learning environment and acquire all of the information you need to make an informed and confident decision on signing up for the Cybersecurity Professional Bootcamp. When the Introductory Course is over, the results from your assessment exam will help you determine your ability to excel in a cybersecurity career.

Fundamentals Phase (16 Weeks)

Throughout the Fundamentals Phase, you will dive deeper into the foundations of cybersecurity. This deep dive will include a number of concepts needed in order to secure and defend as a cybersecurity professional: an exploration of networks and their functions, common operating systems, how devices communicate over networks, as well as how data is stored and utilized in the cloud. Complete this phase with a foundational understanding of essential cybersecurity concepts.

Computer Networking Fundamentals

This course offers a comprehensive introduction to computer networking, providing practical experience in configuring and managing network devices for optimal performance and security. Learners will gain an understanding of network architectures, protocols, and security while honing their device configuration and troubleshooting skills. Through hands-on activities, they will apply critical thinking and problem-solving skills to address common networking challenges. Learners Will:

• Learn how different entities connect and interact across digital landscapes
• Gain an understanding of the various types of networks and their impact on our interconnected world
• Harness the power of configuration settings documentation
• Be exposed to the role of audits in ensuring optimal network performance and security
• Find out why system and communications protection plays a pivotal role in safeguarding information
• Learn how to effectively update and adapt policies to keep pace with the ever-evolving landscape

Microsoft Security Systems Administration

This course offers hands-on training focused on securing Microsoft Windows environments, providing learners with the practical knowledge and skills needed to implement security features and tools, including Microsoft Defender, BitLocker, and Windows Firewall. They will also be able to configure and manage networks to ensure security and stability using system admin tools. By the end of the course, participants will understand the basics of Microsoft’s infrastructure and be able to implement and maintain secure Windows environments in various professional roles. Learners Will:

• Gain an understanding of Microsoft's infrastructure and its components
• Learn effective strategies to protect Microsoft's infrastructure from potential threats
• Develop skills to manage various types of accounts based on business function
• Explore ways to maintain a secure and safe network environment
• Discover how automations and scripting can enhance both security and efficiency in cybersecurity roles
• Understand how Active Directory helps manage permissions and control access to network resources
• Learn how to improve system security and operational efficiencies with Powershell

Securing Your Network

In this course, you continue to build on your knowledge of networks to deepen that understanding. As you explore networks, you will familiarize yourself with the different components of wired and wireless networks including their security constraints and vulnerabilities. You will then continue on to developing access controls to ensure that you have considered all pieces of what it means to secure a network from people and data to devices. In addition, you will look at how to safely build and secure networks including discussions around cryptography and privacy constraints. Learners Will:

• Develop an understanding of network security measures, including strategies needed to keep networks safe
• Begin to master network monitoring techniques
• Gain an understanding of how to effectively manage accounts within a system
• See how security attributes can help strengthen network defenses
• Become familiar with a range of common tools and technologies that support network safety
• Acquire the skills to build a secure network architecture
• Learn the basics of MHN networks and how to set them up effectively
• Understand the relationship between Telnet and POP3 machines

Integrating Your Infrastructure Security

This course equips learners with the necessary skills to effectively manage Linux operating systems, utilize basic Python programming, explore cloud computing, and enhance system security against threats and vulnerabilities. Additionally, they will learn how to monitor, scan, and analyze threats and vulnerabilities in these environments, while also becoming familiar with remediation techniques. Finally, learners will begin to understand how DevSecOps impacts the cybersecurity landscape. Learners Will:

• Gain an understanding of how to manage Linux operating systems, as well as how to monitor, scan, and analyze threats and vulnerabilities in Linux and cloud-based environments
• Be introduced to Python programming
• Develop a basic understanding of cloud computing environments and create an instance using Amazon Web Services (AWS)
• Understand how to remediate and share details to protect other systems
• Learn how to create automations to efficiently manage and protect systems
• Explore the design principles of scalable cloud solutions and the integration of different environments
• Become familiar with DevSecOps

Infrastructure Phase (4 Weeks)

The Infrastructure Phase teaches you the necessary knowledge and hands-on experience to create and sustain secure infrastructures and technologies. You will complete this phase with knowledge of critical security measures, endpoint security, and other important concepts that are key to safeguarding organizations.

Designing Your Cybersecurity Infrastructure

This course delves into the essential aspects of safeguarding endpoint devices, implementing data loss prevention techniques, and utilizing advanced tools and strategies to protect an organization's digital assets. By the end of the course, participants will have a comprehensive understanding of endpoint device protection, data loss prevention, and the security considerations for industrial systems and IoT devices. Learners Will:

• Explore endpoint devices to gain an understanding of how to evaluate, identify threats to, and protect them
• Learn to document and track configurations and tool options
• Understand how to establish rules and restrictions that safeguard endpoint devices from potential harm
• Discover how to work with external information systems while maintaining the security of endpoint devices
• Develop the skills to implement of data loss prevention techniques
• Become familiar with the threats and security measures related to Industrial Control Systems (ICS) and Industrial Internet of Things (IIOT)

Advanced Phase (17 Weeks)

Courses of the Advanced Phase further prepare you to respond to attacks, proactively identify vulnerabilities utilizing ethical hacking, and improve system protection. You will move beyond the theories behind cybersecurity technologies to understanding the motivations and social engineering techniques that are deployed by malicious actors. You will learn various attack types, the attack kill chain, attack implementation, response to ongoing attacks, and mitigation strategies. Upon successful completion of this phase, you will receive your Cybersecurity Professional Bootcamp certificate of completion.

Social Engineering and Ethical Hacking

In the Social Engineering and Ethical Hacking course, participants explore the inner workings of hackers' minds and acquire an understanding of game theory principles as they relate to cybersecurity defense and solutions. By the end of the course, learners will have an understanding of social engineering techniques and ethical hacking principles, empowering them to enhance cybersecurity defenses and protect against potential threats. Learners Will:

• Gain insights into the motivations of potential attackers and their actions
• Develop an understanding of how to use a malicious hacker’s "state of mind" to enhance system protection
• Discover how ethical hacking can proactively support applications, systems, and organizational infrastructure
• Explore how reconnaissance, penetration testing, and defense system bypassing can help keep systems safe
• Learn how to identify vulnerabilities in web applications and cloud-based systems
• Build skills to effectively report risks and provide defense recommendations
• Understand how social engineering techniques can be used to deceive individuals

Digital Forensics and Incident Response

The Digital Forensics & Incident Response course equips learners with essential tools to effectively respond to attacks, conduct investigations, gather evidence, and produce comprehensive reports. By the end of the course, participants will be equipped with the necessary knowledge to respond to incidents, run investigations, and report their findings. These skills will help students to recognize, analyze, and ideate about security incidents to prevent future breaches. Learners Will:

• Be immersed in the fundamentals of offensive security
• Gain an understanding of the basics of digital forensics
• Explore file and stolen data recovery strategies
• Learn how to effectively handle various types of attacks targeting organizations
• Get insight into the strategies attackers use to attain access to critical systems and data
• Explore the basics of malware analysis in order to enhance your ability to detect and neutralize potential threats

Threat Hunting and Intelligence

The Threat Hunting and Intelligence course provides learners with the necessary knowledge to identify and mitigate vulnerabilities in an organization's infrastructure. By the end of the course, learners will be equipped with the expertise to identify vulnerabilities, respond to threats, and develop robust plans to safeguard an organization's infrastructure. Learners Will:

• Develop a comprehensive understanding of the threats and vulnerabilities that can arise within an organization's network infrastructure, encompassing hardware devices, software applications, and network services.
• Enhance their ability to proactively identify and respond to threats, fostering a proactive security approach.
• Acquire the knowledge and skills to develop effective plans and procedures to handle security situations efficiently, ensuring a swift and coordinated response.
• Cultivate the ability to evaluate information sources and tools, enabling them to strengthen their defense strategies.

Elective CompTIA® Security+ Certification Exam Prep Course (8 weeks)

The Cybersecurity Professional Certificate Program includes an elective CompTIA® Security+ Exam Prep Course** designed to prepare students to obtain this valuable industry certification and a voucher for the CompTIA® Security+ certification exam. Certificate Highlights:

• Establishes the core knowledge required for any cybersecurity role
• The only foundational cybersecurity certification that emphasizes hands-on practical skills
• A globally recognized certification that establishes the core knowledge required in the field and provides a springboard to intermediate-level cybersecurity jobs