安全要素 Certification
面向所有人的基础防御性安全
Key facts
- Level: Foundation
- Field: Cybersecurity & Information Security
- Estimated study time: about 14 hours
- Credential price: $39
- Exam: 65 questions · 80 minutes · pass mark 70%
About the 安全要素 certification
安全要素是Hootix信息安全的入门课程——一个与厂商无关的纯防御性基础,将网络安全的术语转化为你能够加以运用的工作心智模型。它适合所有人:开发人员、管理员、分析师、管理者,以及任何工作中涉及数据、账户或系统的专业人员。 你将掌握CIA三元组——保密性、完整性与可用性——并学会将每项控制措施映射回这一框架;威胁、漏洞与风险之间的精确区别,以及为何风险最好被理解为可能性与影响的结合。你将从概念层面认识常见的攻击类型——恶意软件、网络钓鱼与社会工程学、勒索软件、拒绝服务攻击、中间人攻击和密码攻击——从而能够预防、检测和遏制它们。你将学习认证与授权的区别,理解多因素认证、通行密钥(Passkeys)和最小权限原则的强大之处,以及访问控制模型(DAC、MAC、RBAC、ABAC)如何规范操作权限。 密码学要素涵盖对称加密与非对称加密、哈希、静态数据与传输中数据、TLS以及PKI与证书基础。你将学习网络安全(防火墙、VPN、网络分段、端口)、端点与设备安全及补丁管理、电子邮件与Web安全、数据分类、隐私与DLP,以及将一切系统化的框架——NIST网络安全框架、CIS关键安全控制,以及纵深防御策略。课程最后介绍安全行为与意识、安全事件上报、物理安全,以及备份与弹性恢复。 一切内容均为概念性与防御性——强调意识与框架,从不涉及攻击工具。安全要素是进阶助理级安全认证前自然的第一步。
What you will learn
The official 安全要素 study course covers:
- Core Principles: the CIA Triad, Threats, and Risk — The three goals every control protects, and the precise difference between a threat, a vulnerability, and risk.
- Common Attacks and How to Recognise Them — Malware, phishing and social engineering, ransomware, denial of service, man-in-the-middle, and password attacks — at a conceptual, defensive level.
- Identity, Access Control, and Authentication — Authentication versus authorization, passwords, MFA and passkeys, least privilege, and the access-control models that decide who can do what.
- Cryptography, PKI, and Secure Networking — Symmetric versus asymmetric encryption, hashing, data at rest and in transit, TLS, PKI and certificates, and network basics: firewalls, VPNs, segment…
- Security Operations: Defending, Detecting, and Responding — Endpoint, email and web security; data classification, privacy and DLP; frameworks and defense in depth; incident reporting, physical security, and b…
Frequently asked questions
- Is the 安全要素 certificate verifiable?
- Yes. Every issued Hootix Academy certificate carries a unique credential code that anyone can verify online.
- How is the 安全要素 exam structured?
- It is a 80-minute proctored multiple-choice exam of 65 questions; you need 70% to pass.
- Do I need to buy the course to take the exam?
- You can purchase the certification exam on its own, or bundle it with the full study course at a reduced price.
- How long does the 安全要素 course take?
- About 14 hours of self-paced study.