Database Administrator

Overview

The Secure Database Administrator Learning Path includes a variety of security courses designed for those responsible for capacity planning, installation, configuration, database design, migration, performance monitoring, security, troubleshooting, as well as back-end data recovery. The curriculum builds fundamental knowledge of secure database development including:

• Common database attacks
• Platform-specific threats
• Database secure coding best practices

Courses

• COD 241 – Creating Secure Oracle DB Applications
• COD 242 – Creating Secure SQL Server & Azure SQL DB Applications
• COD 261 – Threats to Scripts
• COD 262 – Fundamentals of Shell and Interpreted Language Security
• DES 202 – Cryptographic Suite Services: Encoding, Encrypting & Hashing
• DES 203 – Cryptographic Components: Randomness, Algorithms, and Key Management
• DES 204 – Role of Cryptography in Application Development
• DES 205 – Message Integrity Cryptographic Functions
• DES 206 – Meeting Cloud Governance and Compliance Requirements
• DES 212 – Architecture Risk Analysis & Remediation
• DES 232 – Mitigating OWASP 2021 Injection
• DES 233 – Mitigating OWASP 2021 Identification and Authentication Failures
• DES 234 – Mitigating OWASP 2021 Cryptographic Failures
• DES 235 – Mitigating OWASP 2021 Insecure Design
• DES 236 – Mitigating OWASP 2021 Broken Access Control
• DES 237 – Mitigating OWASP 2021 Security Misconfiguration
• DES 238 – Mitigating OWASP 2021 Server-Side Request Forgery (SSRF)
• DES 239 – Mitigating OWASP 2021 Software and Data Integrity Failures
• DES 240 – Mitigating OWASP 2021 Vulnerable and Outdated Components
• DES 241 – Mitigating OWASP 2021 Security Logging and Monitoring Failures
• DSO 212 – Fundamentals of Zero Trust Security
• ENG 205 – Fundamentals of Threat Modeling
• ENG 211 – How to Create Application Security Design Requirements

Overview

The Secure Database Administrator Learning Path includes a variety of security courses designed for those responsible for capacity planning, installation, configuration, database design, migration, performance monitoring, security, troubleshooting, as well as back-end data recovery. The curriculum builds fundamental knowledge of secure database development including:

• Common database attacks
• Platform-specific threats
• Database secure coding best practices

Courses

• COD 352 – Creating Secure JavaScript and jQuery Code
• COD 383 – Protecting Java Backend Services (UPDATED)
• DES 311 – Creating Secure Application Architecture
• ENG 311 – Attack Surface Analysis & Reduction
• ENG 312 – How to Perform a Security Code Review
• SDT 302 – Testing for Identification and Authentication Failures
• SDT 314 – Testing for Unrestricted Upload of File with Dangerous Type
• SDT 315 – Testing for Incorrect Permission Assignment for Critical Resource
• SDT 316 – Testing for Use of Hard-Coded Credentials

Overview