# Core cybersecurity knowlege and skills # Introduction to Linux, SQL, and Python As we discussed previously, organizations use a variety of tools, such as SIEMs, playbooks, and packet sniffers to better manage, monitor, and analyze security threats. But those aren't the only tools in an analyst's toolkit. Analysts also use programming languages and operating systems to accomplish essential tasks. In this video, we'll introduce you to Python and SQL programming, and the Linux operating system. All of which you'll have an opportunity to practice using later in the certificate program. Organizations can use programming to create a specific set of instructions for a computer to execute tasks. Programming allows analysts to complete repetitive tasks and processes with a high degree of accuracy and efficiency. It also helps reduce the risk of human error, and can save hours or days compared to performing the work manually. Now that you're aware of what programming languages are used for, let's discuss a specific and related operating system called Linux, and two programming languages: SQL and Python. Linux is an open-source, or publicly available, operating system. Unlike other operating systems you may be familiar with, for example MacOS or Windows, Linux relies on a command line as the primary user interface. Linux itself is not a programming language, but it does allow for the use of text-based commands between the user and the operating system. You'll learn more about Linux later in the program. A common use of Linux for entry-level security analysts is examining logs to better understand what's occurring in a system. For example, you might find yourself using commands to review an error log when investigating uncommonly high network traffic. Next, let's discuss SQL. SQL stands for Structured Query Language. SQL is a programming language used to create, interact with, and request information from a database. A database is an organized collection of information or data. There may be millions of data points in a database. So an entry-level security analyst would use SQL to filter through the data points to retrieve specific information. The last programming language we'll introduce is Python. Security professionals can use Python to perform tasks that are repetitive and time-consuming and that require a high level of detail and accuracy. As a future analyst, it's important to understand that every organization's toolkit may be somewhat different based on their security needs. The main point is that you're familiar with some industry standard tools because that will show employers that you have the ability to learn how to use their tools to protect the organization and the people it serves. You're doing great! Later in the course, you'll learn more about Linux and programming languages, and you'll practice using these tools in security-related scenarios. # Create a cybersecurity portfolio Throughout this certificate program, you will have multiple opportunities to develop a professional cybersecurity portfolio to showcase your security skills and knowledge. In this reading, you’ll learn what a portfolio is and why it’s important to develop a professional cybersecurity portfolio. You’ll also learn about options for creating an online or self-hosted portfolio that you can share with potential employers when you begin to look for cybersecurity jobs. ## What is a portfolio, and why is it necessary? Cybersecurity professionals use portfolios to demonstrate their security education, skills, and knowledge. Professionals typically use portfolios when they apply for jobs to show potential employers that they are passionate about their work and can do the job they are applying for. Portfolios are more in depth than a resume, which is typically a one-to-two page summary of relevant education, work experience, and accomplishments. You will have the opportunity to develop a resume, and finalize your portfolio, in the last course of this program. ## Options for creating your portfolio There are many ways to present a portfolio, including self-hosted and online options such as: - Documents folder - Google Drive or Dropbox™ - Google Sites - Git repository ### **Option 1: Documents folder** **Description:** A documents folder is a folder created and saved to your computer’s hard drive. You manage the folder, subfolders, documents, and images within it. Document folders allow you to have direct access to your documentation. Ensuring that your professional documents, images, and other information are well organized can save you a lot of time when you’re ready to apply for jobs. For example, you may want to create a main folder titled something like “Professional documents.” Then, within your main folder, you could create subfolders with titles such as: - Resume - Education - Portfolio documents - Cybersecurity tools - Programming **Setup:** Document folders can be created in multiple ways, depending on the type of computer you are using. If you’re unsure about how to create a folder on your device, you can search the internet for instructional videos or documents related to the type of computer you use. ### **Option 2: Google Drive or Dropbox** **Description:** Google Drive and Dropbox offer similar features that allow you to store your professional documentation on a cloud platform. Both options also have file-sharing features, so you can easily share your portfolio documents with potential employers. Any additions or changes you make to a document within that folder will be updated automatically for anyone with access to your portfolio. Similar to a documents folder, keeping your Google Drive or Dropbox-based portfolio well organized will be helpful as you begin or progress through your career. **Setup:** To learn how to upload and share files on these applications, visit the Google Drive and Dropbox websites for more information. ### **Option 3: Google Sites** **Description:** Google Sites and similar website hosting options have a variety of easy-to-use features to help you present your portfolio items, including customizable layouts, responsive webpages, embedded content capabilities, and web publishing. Responsive webpages automatically adjust their content to fit a variety of devices and screen sizes. This is helpful because potential employers can review your content using any device and your media will display just as you intend. When you’re ready, you can publish your website and receive a unique URL. You can add this link to your resume so hiring managers can easily access your work. **Setup:** To learn how to create a website in Google Sites, visit the Google Sites website. ### **Option 4: Git repository** **Description:** A Git repository is a folder within a project. In this instance, the project is your portfolio, and you can use your repository to store the documents, labs, and screenshots you complete during each course of the certificate program. There are several Git repository sites you can use, including: - GitLab - Bitbucket™ - GitHub Each Git repository allows you to showcase your skills and knowledge in a customizable space. To create an online project portfolio on any of the repositories listed, you need to use a version of Markdown. **Setup:** To learn about how to create a GitHub account and use Markdown, follow the steps outlined in the document [Get started with GitHub](https://docs.google.com/document/d/13nqRTU4H14NFytodh_tbafXthjNRD7aWU_4Cjq7pKG8/template/preview). ## Portfolio projects As previously mentioned, you will have multiple opportunities throughout the certificate program to develop items to include in your portfolio. These opportunities include: - Drafting a professional statement - Conducting a security audit - Analyzing network structure and security - Using Linux commands to manage file permissions - Applying filters to SQL queries - Identifying vulnerabilities for a small business - Documenting incidents with an incident handler’s journal - Importing and parsing a text file in a security-related scenario - Creating or revising a resume **Note:** Do not include any private, copyrighted, or proprietary documents in your portfolio. Also, if you use one of the sites described in this reading, keep your site set to “private” until it is finalized. ## Key takeaways Now that you’re aware of some options for creating and hosting a professional portfolio, you can consider these as you develop items for your portfolio throughout the certificate program. The more proactive you are about creating a polished portfolio, the higher your chances of impressing a potential employer and obtaining a new job opportunity in the cybersecurity profession. # Make portfolio To pass this course item, you must complete the activity and receive at least 80%, or 4 out of 5 points, on the questions that follow. Once you have completed the activity and questions, review the feedback provided. You can learn more about graded and practice items in the [program and course overview](https://www.coursera.org/learn/foundations-of-cybersecurity/supplement/QBRd5/program-and-course-overview).
![](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/kYvVLkX-T9uQnRYn7ZpwKg_02d8433a352e4dadadd0787c5d7cd0f1_ejYXKqjxBerEzG8HYoUj1oY3u18LiIGtIXggZuKSUfGYgDdx2KJDWz9c40gC8bXohTB9txDuFrE7_Ym6jgqXIz3h4CieyzpylSPy-Ls-vRcglq5yHV-A6yzuvI_CWUMxngE438I0xcozotRn5sWlPDcZ-IV2f1R0Tmd6liCQoJJrtjfb_HOZ9W86t7nwlkaVow7TZLp8mvoDKCCXCGR9p2fg4kAWIrje20fNxw?expiry=1685923200000&hmac=NljQtjmB-igfCq4obd6G8OnQNfq4GAIQ7nk615ER4wg)
Activity Overview
![](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/prhXif2nS7yvLPgBjzhyMw_b9be6d6dfc2c42ae9e29b5cbd7f6d8e1_jlA6sOwDSQSe7UjwJ1Avlg_edd8467fef774f78be91af2a4cafadf1_pvMMp8zplWKrfvoXlOmy8Mo0HnBQ08NGIdma5Jml0EcLFEn8KwEzK0NDLpA7_DqRy1NJwRQ_CUUFrLTYpdf0lkhm0StFLV3YzLMzziJAUvV4769HH6nmBGBdM0tRTlyu51bq92Q8uaRO17Hx-owAqkWXRhEYK3RKr9OovEf1QjBd17_Gv2z7VjKng7etXlcii3yGwsKqxCTQpmorYexozgmssLEV3Wn5dZXq8A?expiry=1685923200000&hmac=I-udCawhgWHeleRExqYX2RmPOCOndU586AARmgabLIY)
In this activity, you will review the provided template and professional statement outline to create a professional statement that you can include as part of your cybersecurity portfolio documentation. Previously, you learned about options for creating and hosting a cybersecurity portfolio. A professional statement is an introduction to employers that briefly describes who you are and what you care about. It allows you to showcase your interest in cybersecurity, work experience, knowledge, skills, and achievements. As you continue to learn more and refine your understanding of key cybersecurity concepts, you can return to this professional statement and revise it as needed. To review the importance of building a professional portfolio and options for creating your portfolio, read [Create a cybersecurity portfolio](https://www.coursera.org/learn/foundations-of-cybersecurity/supplement/RTDuH/create-a-cybersecurity-portfolio). Be sure to complete this activity and answer the questions that follow before moving on. The next course item will provide you with a completed exemplar to compare to your own work. You will not be able to access the exemplar until you have completed this activity and answered the questions. ## Scenario
![](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/692J4KCfTI-pNfb5pFM3Cg_575fee21158e4e358ac45d9f77e576e1_WLn89eW_SAK7z8YSGwAWKQ_c61a7ef696de4ff29d313f90a1a8a1f1_voqiSaGV5kfSTqHebqlVYv5Vj1ZxyZIxbZmlSvVy4wD9RCelIqhPOp5ioB_R9zmXYBJ1nqYwnrMSsfmd3xnju9RBOxPWP5XrYBw_6PyZ_tfHGKxBEp39b-QcEtwSPmvbz0gH2bC3fA44GIMWtUopovLMf5uF6pomFPxa4zEzHDFqr2Y0_wa2DyGvPa7M57pOLddSmKZqAn6U57gahHCAATlgWrC5u5NYrV6tiQ?expiry=1685923200000&hmac=RXYhmS8JMTjjfXSSuNdsQ8tztg0AAMxfGH-MyXaQ1Cw)
You are excited to enter the field of cybersecurity. As you search for jobs, you find an entry-level position that interests you and aligns to your skills and knowledge. You decide to create a professional statement to introduce yourself to your potential employer and showcase who you are in a way that helps your application stand out. **Note**: Creating a unique and authentic professional statement helps establish people’s perception of who you are and what you care about. ## Step-By-Step Instructions
![](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/GFsLkVh6SSKtLrMZ6ToE1g_329780548b8049739f0c047d81a894e1_aoRJynoGTrOMjzBeKJBUJg_9d5cc5e713734525b52fb5c08252cbf1__tPIaokCeqjVfYG0qC70BmqWqo_aRg5z1CHPTLYt2jssggSljVzOXpy6eXRdTx8nGZ8GundH_dGSm1dBs0yU6Q_CzHuLPSUkjS4H6vxePL4LRZHc2gornQzWk-xih4dvtWS-lK3OpBJzg45AEa9AWjOkFzaVltYpCMKCILUEgIrTIX3LS3ySLgXwUUUyDAcWwCP2laS2NYeKaKUwUhzn7QsPzYSDGF28SkgK_g?expiry=1685923200000&hmac=wXE-Sky6ANd8nbVkykeR4ouo3qFBm28_hDZ4cKwMGIc)
Follow the instructions to complete each step of the activity. Then, answer the five questions at the end of the activity before going to the next course item to compare your work to a completed exemplar. ###
Step 1: Access the template
### To use the template for this course item, click the following link and select *Use Template*. Keep it open as you proceed to the next steps. Link to template: [Professional statement template](https://docs.google.com/document/d/149i6MBJ0zyikvwNFBb0CkBaPCqj8B5sr9JH2_baNFRc/template/preview) OR If you don’t have a Google account, you can download the template directly from the following attachment.
[
Professional statement template
DOCX File
](https://d3c33hcgiwev3.cloudfront.net/0A93fTl3Q22XxtGLKZI0vw_459e3aa6d6ad41b480ef2740a65f9bf1_Professional-statement-template.docx?Expires=1685923200&Signature=hbnR1d-Bo~Zz2JFpstcPAT7cdNp-ZEbfhaLxJJvHceCszwXcD8ZDjrxRdiZarXqQm~Zc9RQ8Izc26Yc-gPMFdCLUud-JSJBZN8Mq~dmigOcl30uwWMfBReIUFwZaJAxEzpk~dZxp1rruWOjaInOeHFCzMnC9ziBO8Z4zWWifuFQ_&Key-Pair-Id=APKAJLTNE6QMUY6HBC5A)
###
Step 2: Access supporting materials
### [](https://docs.google.com/document/d/12fvZXSrCHs2cE9GUNkc0ypfCb77QdKVFnofQ4aBuxFU/template/preview)
###
Step 3: Draft your professional statement
###
###
Step 4: Refine your professional statement
### [](https://docs.google.com/document/d/1uodGPtGAS247wACdtJ7ITe3BcwFL993sQy5P9_pAj48/template/preview)
### **Pro Tip: Save a copy of your work** Finally, be sure to save a copy of your completed activity. You can use it for your professional portfolio to demonstrate your knowledge and/or experience to potential employers. ## What to Include in Your Response
![](https://d3c33hcgiwev3.cloudfront.net/imageAssetProxy.v1/GWubPPW9QU-5mcCspTeQ4Q_498f40070ab7452aa60339150cdd54f1_jN_ziXQPeAiCRoxrM5AR6fzUbC2xeyPTAb6jucq7bFC-gD6ANvmydKfvP3aBbCloerFCOAYRQVl6_HdEgWEyy0g3AFuCIHMC1BY1ikjvaNuT3MrBRam0TtFBs4RhEJFWsyY5pdpnnyyW2mRfZXY6Beu0b_az7XYNM_LmEedUBPo1fzIp2B8wMYqObLCMVftw4JzGS2SheyWV2WddO0zJqW1h3lhuNgxKRFr4zA?expiry=1685923200000&hmac=7egWYi4pa4vkkh093k9woGvFnHIT6jQbOkpgdLEOpv0)
Be sure to address the following elements in your completed activity:
- Be intentional about how you want to be perceived by potential employers. - Include your strengths and values, and be genuine about why you want to enter the cybersecurity profession. - Regularly update your statement to reflect your growing professional skills and knowledge.
### **Step 5: Assess your activity** Following is the self-assessment for your professional statement. You will use these statements to review your own work. The self-assessment process is an important part of the learning experience because it allows you to *objectively* assess your professional statement. There are a total of 5 points possible for this activity and each statement is worth 1 point. The items correspond to each step you completed for the activity. To complete the self-assessment, first open your professional statement. Then respond yes or no to each statement. When you complete and submit your responses, you will receive a percentage score. This score will help you confirm whether you completed the required steps of the activity. The recommended passing grade for this project is at least 80% (or 4/5 points). If you want to increase your score, you can revise your project and then resubmit your responses to reflect any changes you made. Try to achieve at least 4 points before continuing on to the next course item. ### 1.
Question 1
Your professional statement includes strengths.
1 point
Yes
No ### 2.
Question 2
Your professional statement includes values.
1 point
Yes
No ### 3.
Question 3
Your professional statement explains your interest in the cybersecurity profession.
1 point
Yes
No ### 4.
Question 4
Your professional statement explains who you are and how you can add value to an organization.
1 point
Yes
No ### 5.
Question 5
Your professional statement is free from grammar, spelling, and punctuation errors.
1 point
Yes
No
Coursera Honor Code [Learn more](https://learner.coursera.help/hc/articles/209818863)
# Use tools to protect business operations # Previously, you were introduced to programming, operating systems, and tools commonly used by cybersecurity professionals. In this reading, you’ll learn more about programming and operating systems, as well as other tools that entry-level analysts use to help protect organizations and the people they serve. ## Tools and their purposes ### **Programming** **Programming** is a process that can be used to create a specific set of instructions for a computer to execute tasks. Security analysts use programming languages, such as Python, to execute automation. **Automation** is the use of technology to reduce human and manual effort in performing common and repetitive tasks. Automation also helps reduce the risk of human error. Another programming language used by analysts is called Structured Query Language (SQL). **SQL** is used to create, interact with, and request information from a database. A **database** is an organized collection of information or data. There can be millions of data points in a database. A **data point** is a specific piece of information. ### **Operating systems** An **operating system** is the interface between computer hardware and the user. Linux®, macOS®, and Windows are operating systems. They each offer different functionality and user experiences. Previously, you were introduced to **Linux** as an open-source operating system. Open source means that the code is available to the public and allows people to make contributions to improve the software. Linux is not a programming language; however, it does involve the use of a command line within the operating system. A **command** is an instruction telling the computer to do something. A **command-line** interface is a text-based user interface that uses commands to interact with the computer. You will learn more about Linux, including the Linux kernel and GNU, in a later course. ### **Web vulnerability** A **web vulnerability** is malicious code or behavior that's used to take advantage of coding flaws in a web application. Vulnerable web applications can be exploited by threat actors, allowing unauthorized access, data theft, and malware deployment. To stay up-to-date on the most critical risks to web applications, review the [Open Web Application Security Project (OWASP) Top 10](https://owasp.org/www-project-top-ten/). ### **Antivirus software** **Antivirus software** is a software program used to prevent, detect, and eliminate malware and viruses. It is also called anti-malware. Depending on the type of antivirus software, it can scan the memory of a device to find patterns that indicate the presence of malware. ### **Intrusion detection system** An **intrusion detection system** (IDS) is an application that monitors system activity and alerts on possible intrusions. The system scans and analyzes network packets, which carry small amounts of data through a network. The small amount of data makes the detection process easier for an IDS to identify potential threats to sensitive data. Other occurrences an IDS might detect can include theft and unauthorized access. ### **Encryption** **Encryption** is the process of converting data from a readable format to a cryptographically encoded format. **Cryptographic encoding** means converting plaintext into secure ciphertext. **Plaintext** is unencrypted information and **secure ciphertext** is the result of encryption. A cryptographic form of code is used to communicate in secret and prevent unauthorized, unapproved access to data, programs, or devices. **Note:** Encoding and encryption serve different purposes. Encoding uses a public conversion algorithm to enable systems that use different data representations to share information. Encryption makes data unreadable and difficult to decode for an unauthorized user; its main goal is to ensure confidentiality of private data. ### **Penetration testing** **Penetration testing**, also called pen testing, is the act of participating in a simulated attack that helps identify vulnerabilities in systems, networks, websites, applications, and processes. It is a thorough risk assessment that can evaluate and identify external and internal threats as well as weaknesses. ## Key takeaways In this reading, you learned more about programming and operating systems. You were also introduced to several new tools and processes. Every organization selects their own set of tools. Therefore, the more tools you know, the more valuable you are to an organization. Tools help security analysts complete their tasks more efficiently and effectively. # Glossary terms from week 4 # Terms and definitions from the certificate ## **Terms and definitions from Course 1, Week 4** **Antivirus software:** A software program used to prevent, detect, and eliminate malware and viruses **Database:** An organized collection of information or data **Data point:** A specific piece of information **Intrusion detection system (IDS):** An application that monitors system activity and alerts on possible intrusions **Linux:** An open-source operating system **Log:** A record of events that occur within an organization’s systems **Network protocol analyzer (packet sniffer):** A tool designed to capture and analyze data traffic within a network **Order of volatility:** A sequence outlining the order of data that must be preserved from first to last **Programming:** A process that can be used to create a specific set of instructions for a computer to execute tasks **Protecting and preserving evidence:** The process of properly working with fragile and volatile digital evidence **Security information and event management (SIEM)**: An application that collects and analyzes log data to monitor critical activities in an organization **SQL (Structured Query Language):** A programming language used to create, interact with, and request information from a database