Certified: The SSCP Audio Course
- Episodios
- 72
- Formato
- Serie: escúchala desde el principio
- Último episodio
- 11 Mar 2026
Sobre el podcast
The SSCP Audio Course from BareMetalCyber.com delivers a complete, exam-ready learning experience for cybersecurity professionals who prefer to learn on the go. Each episode breaks down complex security concepts into plain English, aligning directly with the official (ISC)² Systems Security Certified Practitioner domains. Listeners gain a clear understanding of the core principles—access controls, risk management, cryptography, network defense, and incident response—through real-world examples that tie theory to practice. Every topic is designed to reinforce what matters most on exam day: how to read questions, recognize control intent, and choose the most defensible answer under pressure. Across seventy tightly structured lessons, the course builds practical, lasting knowledge that goes beyond memorization. You’ll hear how working security analysts, assessors, and auditors apply each concept in live environments, turning standards and policies into daily decisions. With professional narration, balanced pacing, and zero fluff, this series lets you study during commutes, workouts, or downtime—transforming small moments into steady progress toward certification. Produced by BareMetalCyber.com, where cybersecurity education meets real-world clarity, and supported by DailyCyber.News for the latest insights that keep your learning current.
Episodios 72
Welcome to the SSCP Course!
If you are preparing for the Systems Security Certified Practitioner certification, you already know the challenge. There is a lot of material to cover, and most professionals studying for SSCP are balancing …
Notas del episodio
If you are preparing for the Systems Security Certified Practitioner certification, you already know the challenge. There is a lot of material to cover, and most professionals studying for SSCP are balancing that preparation with a full-time job, family responsibilities, and everything else life throws at them.
That is exactly why this course exists.
The SSCP Audio Course is designed specifically for busy professionals who want to build real exam readiness without needing hours of uninterrupted study time. Instead of long reading sessions, this course delivers focused, structured lessons you can listen to while commuting, walking, traveling, or taking a quick break between meetings.
Episode 70 — Triage the Adaptive Exam With Proven Tactics
The SSCP’s adaptive format rewards steady decision-making and penalizes wasted time, so tactics matter as much as knowledge. We explain how adaptive scoring selects items near your current ability estimate, why …
Notas del episodio
The SSCP’s adaptive format rewards steady decision-making and penalizes wasted time, so tactics matter as much as knowledge. We explain how adaptive scoring selects items near your current ability estimate, why early stability helps, and how to pace without clock anxiety. You’ll learn a simple loop for each question: read the objective in the stem, eliminate distractors that fail the objective, compare the remaining two by risk reduction and feasibility, then commit and move on. We emphasize recognizing the control type being tested, selecting the “best next step” rather than an idealized end state, and avoiding traps that prioritize tools over outcomes.
We close with a practical test-day routine and common fixes. Build a first-pass rhythm that answers clear items quickly, mark mental notes for concepts to revisit after a brief reset, and use breathing breaks to prevent tunnel vision. If two answers seem plausible, choose the one that produces verifiable evidence and least-privilege results in the stated context. Guard against spirals after a hard item by restoring cadence on the next question, and keep an eye on time by dividing the exam into checkpoints. Afterward, follow the post-exam steps calmly: provisional results, endorsement planning, and continuing education mapping. These tactics align with exam design and help convert preparation into a confident, passing performance. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 69 — Essential Terms: Plain-Language Glossary for the SSCP
Fast recall of precise meanings accelerates problem solving on exam day, so this episode presents a plain-language mini-glossary woven into context rather than alphabet soup. We clarify frequently tested pairs …
Notas del episodio
Fast recall of precise meanings accelerates problem solving on exam day, so this episode presents a plain-language mini-glossary woven into context rather than alphabet soup. We clarify frequently tested pairs that candidates mix up: authentication versus authorization, vulnerability versus threat versus risk, qualitative versus quantitative analysis, and preventive versus detective versus corrective controls. We define key mechanisms—tokenization, hashing, encryption, digital signatures, federation, single sign-on, microsegmentation—and map each to the control objective it serves. We also anchor network and platform terms—DMZ, bastion, jump host, overlay network, hypervisor, container runtime—so you can place them instantly in an architecture.
We reinforce definitions with short, vivid use cases that double as memory hooks. Hashing proves a file was not altered; encryption keeps its contents private; a digital signature ties that proof to a specific identity. MFA strengthens authentication, while RBAC limits authorization by job function; ABAC adds context like device posture. A compensating control documents how you meet a requirement another way, with evidence and risk analysis. For continuous monitoring, think data feeds plus thresholds producing decisions; for incident response, think roles plus timelines preserving chain of custody. Each term is tied to at least one artifact—log entry, ticket, signature, policy—so knowledge ends in something you can show. With meanings anchored to outcomes and evidence, you will decode stems quickly and eliminate distractors that misuse jargon. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 68 — Consolidate Systems and Application Security Best Practices
This capstone pulls together system and application safeguards into one coherent playbook, mirroring how exam scenarios blend layers. We connect configuration baselines, least privilege, patch management, and …
Notas del episodio
This capstone pulls together system and application safeguards into one coherent playbook, mirroring how exam scenarios blend layers. We connect configuration baselines, least privilege, patch management, and logging with application concerns like input validation, output encoding, authentication flows, and session management. You’ll learn how to convert business requirements into control objectives, then map those to concrete mechanisms across the stack: hardened OS images, minimal packages, locked-down services, secure defaults, parameterized queries, CSRF protections, and standardized error handling that does not leak details. We stress evidence that proves controls operate: configs under version control, code reviews with defect records, and test artifacts tied to deployment tickets.
Operational examples show how to sustain these best practices rather than treat them as one-time events. You’ll see how build pipelines enforce quality gates (linting, SAST, dependency checks), how staging environments mirror production for meaningful tests, and how canary releases and feature flags reduce change risk. We discuss secrets rotation, key custody, and monitoring for auth anomalies; plus backup strategies that protect both data and application state. Troubleshooting guidance addresses configuration drift, “works on my machine” build inconsistencies, and fragile rollbacks. The unifying theme is traceability: who changed what, when, and why—supported by artifacts that auditors and exam writers expect. Mastering this consolidation enables you to choose answers that improve real assurance, not just add tools or slogans to a diagram. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 67 — Mitigate Hypervisor and Container Security Weaknesses
Hypervisors and containers minimize overhead differently, which changes how isolation can fail and how you defend it. We distinguish threats to hypervisors—escape exploits, insecure device emulation …
Notas del episodio
Hypervisors and containers minimize overhead differently, which changes how isolation can fail and how you defend it. We distinguish threats to hypervisors—escape exploits, insecure device emulation, overprivileged management APIs—from container risks such as shared kernels, vulnerable images, and noisy orchestration metadata. You’ll learn why host hardening, minimal attack surface, secure boot, and timely patching matter more as density increases, and how kernel namespaces, cgroups, capabilities, and seccomp profiles reduce container privileges. We also examine image provenance, scanning, and signing to prevent shipping vulnerabilities at build time. The exam frequently tests whether you can choose controls that match each isolation model’s weak points.
We turn theory into practice with patterns you can recognize quickly. For hypervisors, enforce out-of-band management networks, MFA for admins, and strict RBAC with per-action logging; for containers, use read-only filesystems where possible, avoid running as root, and gate deployments behind admission controllers that verify signatures and policy. We discuss secrets management that never bakes keys into images, node-level telemetry that distinguishes host from guest signals, and runtime detection tuned for container behaviors. Troubleshooting topics include privilege creep via “:” mounts, stale base images that reintroduce fixed CVEs, and snapshot restores that roll back patched kernels. Evidence of effectiveness includes vulnerability scan reports tied to image digests, policy evaluation results at admission, and audit logs from orchestrators showing who deployed what, when, and where. With these controls, you will select exam options that preserve isolation, limit blast radius, and keep build-to-run pipelines trustworthy. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 66 — Operate Secure Virtualization Platforms and Services Safely
Virtualization concentrates risk and enables resilience, so the SSCP exam expects you to understand both the power and the pitfalls. This episode clarifies core concepts—hypervisors (type 1 vs. type 2), guests …
Notas del episodio
Virtualization concentrates risk and enables resilience, so the SSCP exam expects you to understand both the power and the pitfalls. This episode clarifies core concepts—hypervisors (type 1 vs. type 2), guests, snapshots, templates, virtual switches, and storage backends—and explains how shared resources change the threat model. We connect identity and access management to platform roles, highlight why management planes must be isolated, and show how network segmentation and secure baselines prevent lateral movement across tenants. You’ll learn where encryption belongs (management channels, VM disk at rest, vMotion equivalents), how to inventory guests reliably, and which logs prove that administrative actions are attributable and reviewable. The emphasis is on aligning controls with the business reasons you virtualize: consolidation, speed, recovery, and cost transparency.
We translate these ideas into daily operation patterns and the kinds of decisions the exam favors. Examples include building gold images with hardened services and current agents, limiting snapshot lifetimes to avoid rollback exposure, and pinning privileged workloads to dedicated hosts to reduce noisy-neighbor risk. We discuss change control for templates, secure backup and restore of VM images, and tagging schemes that bind guests to owners, environments, and data classifications. Troubleshooting guidance covers zombie snapshots consuming storage, misconfigured virtual switches that bypass firewalls, and drift between desired state and live configurations. Evidence that your platform is secure includes role reviews, signed configuration exports, and restore tests from encrypted backups. By pairing clean architecture with verifiable operations, you will recognize exam answers that keep virtualization benefits while constraining its unique risks. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 65 — Manage Cloud Data Protections, SLAs, and Provider Risk
Protecting data in the cloud means aligning technical safeguards with service-level commitments and third-party risk oversight. We detail encryption at rest and in transit, tokenization and field-level …
Notas del episodio
Protecting data in the cloud means aligning technical safeguards with service-level commitments and third-party risk oversight. We detail encryption at rest and in transit, tokenization and field-level controls, data loss prevention in SaaS, and backup and snapshot policies keyed to recovery objectives. Service-level agreements (SLAs) define availability, support windows, and response times; we link these to design choices such as multi-zone deployment, health checks, and failover patterns. The exam often tests whether you can select the control or contract term that actually reduces business risk rather than merely sounding strong.
We turn strategy into evidence-backed practice. Examples include using customer-managed keys with rotation tracked in logs, setting data retention to match legal and business needs, and verifying RPO/RTO through periodic restore tests. We discuss vendor risk reviews—security questionnaires, penetration summaries, and audit reports—and ongoing monitoring for SLA breaches and incident notifications. Troubleshooting covers noisy DLP rules, stale backups, insufficient egress controls, and reliance on single-region architectures that violate resilience goals. By connecting data protection, contractual assurance, and continuous oversight, you will identify exam answers that deliver measurable protection and prove it with artifacts leadership and auditors accept. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 64 — Navigate Cloud Legal Duties and Shared Responsibilities
Legal and contractual duties do not vanish in the cloud; they shift and require careful mapping. This episode explains shared responsibility: providers secure the infrastructure they run, while customers …
Notas del episodio
Legal and contractual duties do not vanish in the cloud; they shift and require careful mapping. This episode explains shared responsibility: providers secure the infrastructure they run, while customers configure and govern what they deploy. We tie this to privacy and regulatory obligations—data residency, cross-border transfer, breach notification timelines, and audit rights—and to artifacts like data processing addenda and service terms. You’ll learn how identity proofs, logging retention, and encryption choices interact with legal expectations, and how to reason on the exam about who must act when incidents affect provider platforms versus tenant configurations.
We ground these ideas in specific practices. Patterns include tagging data by jurisdiction, restricting storage locations, encrypting customer data with customer-managed keys, and validating provider attestations before relying on them. We discuss incident cooperation clauses, eDiscovery readiness, and documenting controls in a cloud responsibility matrix that auditors can follow. Troubleshooting guidance addresses assuming provider certifications cover tenant misconfigurations, failing to align retention with legal holds, and missing third-party subprocessor visibility. By pairing shared-responsibility clarity with contractual evidence—attestation letters, audit reports, logs, and key management records—you will select exam answers that satisfy both governance and operational realities in cloud environments. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 63 — Understand Cloud Deployment and Service Models Clearly
Cloud topics appear across SSCP domains, and clarity on models is essential. We define deployment models—public, private, community, and hybrid—and service models—Infrastructure as a Service, Platform as a …
Notas del episodio
Cloud topics appear across SSCP domains, and clarity on models is essential. We define deployment models—public, private, community, and hybrid—and service models—Infrastructure as a Service, Platform as a Service, and Software as a Service. You’ll learn what the customer manages versus the provider in each, how elasticity and multitenancy affect risk, and why identity, logging, and network design change in virtualized contexts. We connect models to common exam stems: selecting where to place controls such as encryption, key management, security groups, and web application protection, and recognizing when provider features replace on-prem tools.
We then apply the taxonomy to concrete design and validation steps. Examples include mapping shared network controls to cloud security groups and route tables, using platform services for secrets and configuration, and understanding SaaS limitations where only identity, data classification, and DLP are customer-side levers. We discuss evidence for assurance—configuration exports, access logs, resource tags, and architecture diagrams—and pitfalls such as flat address spaces, unmanaged admin APIs, and drift between templates and running stacks. Troubleshooting highlights include misaligned regions and zones, ephemeral assets without inventory, and overlooked control plane paths. With a crisp model of who operates which layer and how evidence is produced, you will choose exam answers that fit the stated cloud context rather than assuming on-prem patterns still apply. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 62 — Provision EDR, BYOD, and Enterprise Mobility Management
Modern fleets mix corporate-owned devices with bring-your-own-device (BYOD), demanding layered controls. We position Endpoint Detection and Response (EDR) as telemetry plus containment for suspicious behavior …
Notas del episodio
Modern fleets mix corporate-owned devices with bring-your-own-device (BYOD), demanding layered controls. We position Endpoint Detection and Response (EDR) as telemetry plus containment for suspicious behavior, Enterprise Mobility Management (EMM) or Mobile Device Management (MDM) as the policy engine that enforces configuration, and Mobile Application Management (MAM) as data control inside managed apps for BYOD. You’ll learn enrollment flows, certificate-based trust, compliance checks for OS version and posture, and separation of personal and corporate data via containers. Exam scenarios often hinge on balancing privacy, usability, and security, so we distinguish corporate-owned, personally enabled versus pure BYOD and map appropriate enforcement to each.
Execution details make these distinctions tangible. Patterns include conditional access that requires compliant posture before granting app tokens, EDR isolation that quarantines a host while preserving forensics, and MAM policies that restrict copy-paste, local storage, and sharing to approved apps. We discuss evidence—device compliance reports, EDR alert timelines, wipe confirmations, and inventory reconciled to identity—and error handling when users unenroll, jailbreak, or root devices. Troubleshooting covers certificate expiration breaking enrollment, duplicate identities across directories, and stale devices that pass policy without reporting. The outcome is a practical approach to mobile and desktop fleets that protects corporate data while respecting user boundaries, aligning with exam expectations around risk-based enforcement and verifiable control operation. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 61 — Encrypt Endpoints, Whitelist Applications, and Enforce Policy
Endpoint protection is strongest when encryption, application control, and policy enforcement work together. This episode clarifies where each control fits: full-disk encryption protects data at rest if a …
Notas del episodio
Endpoint protection is strongest when encryption, application control, and policy enforcement work together. This episode clarifies where each control fits: full-disk encryption protects data at rest if a device is lost, while file-level encryption can protect selected repositories and removable media. Application allowlisting (often called whitelisting) constrains execution to approved binaries, scripts, and libraries, reducing the blast radius of phishing and drive-by downloads. Policy enforcement—screen lock, USB control, firewall state, patch levels—ties configuration to measurable standards. The exam frequently probes whether you can select the “best next step” that targets the stated risk, so we connect confidentiality, integrity, and availability objectives to the precise endpoint safeguard that achieves them without degrading usability.
We translate principles into operational patterns you can recognize quickly. Examples include enabling pre-boot authentication for laptops with escrowed recovery keys, combining allowlists with publisher and hash rules to survive updates, and enforcing removable-media encryption with automatic policy. We discuss validating controls through artifact bundles—BitLocker or FileVault status, allowlist policy exports, host firewall rules, registry or profile baselines—and handling exceptions with time-boxed approvals and post-use attestation. Troubleshooting guidance covers broken bootloaders after encryption rollout, allowlist rule gaps that block updates, and shadow admin tools that bypass policy. By coupling encryption, execution control, and enforceable standards with clear evidence, you’ll select exam answers that materially reduce endpoint risk and stand up to audit scrutiny. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 60 — Harden Hosts Using HIPS, HIDS, and Host Firewalls
Host protections remain a last, critical line of defense, and the SSCP exam expects you to differentiate prevention, detection, and containment on endpoints. We position Host-based Intrusion Prevention Systems …
Notas del episodio
Host protections remain a last, critical line of defense, and the SSCP exam expects you to differentiate prevention, detection, and containment on endpoints. We position Host-based Intrusion Prevention Systems (HIPS) as policy-driven blockers for exploit techniques, Host-based Intrusion Detection Systems (HIDS) as monitors that flag suspicious behavior and integrity changes, and host firewalls as local network control that enforces least-privilege communication. You’ll learn how these tools complement patching, application allowlisting, and privilege management to reduce attack surface and limit blast radius when a compromise begins.
We move from concepts to deployment tactics. Examples include using HIPS rules to block shellcode patterns, enabling HIDS file-integrity monitoring on system and application directories, and writing host firewall policies that separate admin, service, and user traffic. We discuss tuning to minimize false positives, integrating telemetry with SIEM for correlation, and validating effectiveness with controlled tests and change tickets. Troubleshooting covers agent health, kernel conflicts, and policy drift that opens unneeded ports or grants excess privileges. Evidence that the hardening works includes clean baselines, signed policy updates, alert-to-action timelines, and reports showing blocked exploit attempts. With these patterns in mind, you’ll select exam answers that emphasize layered, verifiable host defenses aligned with business-critical availability. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 59 — Counter Social Engineering With Behavior-Aware Defenses
Social engineering exploits attention, trust, and time pressure, so defenses must combine technology, process, and human habits. We define major vectors—phishing, spear phishing, vishing, smishing, business …
Notas del episodio
Social engineering exploits attention, trust, and time pressure, so defenses must combine technology, process, and human habits. We define major vectors—phishing, spear phishing, vishing, smishing, business email compromise, and pretexting—and explain cues that reveal manipulation: urgency, authority claims, mismatched domains, and payment redirection. You’ll learn how layered controls reduce risk: email authentication (SPF, DKIM, DMARC), URL rewriting and sandboxing, adaptive MFA prompts, and out-of-band verification for financial changes. We connect these mechanisms to exam stems that ask you to improve detection without blocking legitimate workflows.
The operational half focuses on shaping behavior at scale. Examples include training that teaches “pause-and-verify” routines, clear escalation channels for suspicious requests, and simulations that mirror current threat campaigns. We discuss measuring and improving report rates, embedding anti-fraud steps in procurement and accounts payable, and protecting executives and high-value targets with additional review gates. Troubleshooting guidance addresses alert fatigue, bypasses via personal devices, and inconsistent manager support that undermines norms. Evidence that defenses work includes increased early reports, faster takedown of malicious domains, and reduced loss incidents. These patterns prepare you to choose exam options that balance user experience and risk reduction through verifiable, behavior-aware safeguards. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 58 — Identify Malicious Code, TTPs, and Host Artifacts
Malware analysis on the SSCP exam focuses on recognizing behaviors and artifacts rather than reverse-engineering internals. We define common classes—viruses, worms, Trojans, ransomware, rootkits, and fileless …
Notas del episodio
Malware analysis on the SSCP exam focuses on recognizing behaviors and artifacts rather than reverse-engineering internals. We define common classes—viruses, worms, Trojans, ransomware, rootkits, and fileless malware—and the techniques adversaries use to persist and evade detection: scheduled tasks, registry run keys, DLL search-order hijacking, living-off-the-land binaries, and in-memory injection. You’ll learn how endpoint telemetry, application logs, and kernel events reveal execution chains, privilege changes, lateral movement initiations, and exfiltration attempts. The objective is to map tactics, techniques, and procedures (TTPs) to observable host signals and then choose evidence-backed responses.
We translate this into concrete investigative moves. Examples include correlating suspicious PowerShell activity with recent user logons, inspecting parent–child process trees for script hosts spawning network tools, and verifying integrity of system files using known-good baselines. We discuss capturing volatile data safely, hashing and quarantining samples, and documenting chain-of-custody so findings are defensible. Troubleshooting advice covers false positives from administrative tools, anti-malware exclusions that hide real infections, and incomplete cleanup that leaves persistence intact. Artifacts that close the loop—hashes, timelines, autorun entries, and validated removal reports—prove eradication. With these patterns, you’ll select exam answers that emphasize behavior recognition, evidence preservation, and methodical remediation over hasty deletion that obscures root cause. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 57 — Recap Network Security Essentials for Quick Reinforcement
Solid network fundamentals enable fast, confident choices under test pressure. This recap organizes key ideas you have used throughout earlier episodes: zoning and trust boundaries, default-deny routing with …
Notas del episodio
Solid network fundamentals enable fast, confident choices under test pressure. This recap organizes key ideas you have used throughout earlier episodes: zoning and trust boundaries, default-deny routing with least-privilege flows, authenticated administration on out-of-band networks, and telemetry that validates control operation. We connect the OSI/TCP-IP mapping to practical placements—firewalls at choke points, WAFs for application-layer inspection, IDS/IPS for signature and behavior detection—and reinforce why segmentation, NAT, and proxy services appear together in many designs. You’ll also refresh encryption in transit (TLS, IPsec), certificate validation, and key renewal as they relate to secure communications and identity.
The practice-focused half concentrates on “best next step” reasoning. We walk through mini-scenarios: blocking lateral movement with ACLs and jump hosts, resolving asymmetric routing that breaks stateful filtering, tightening overly broad egress to reduce exfiltration risk, and choosing DNSSEC or certificate pinning in the right contexts. Troubleshooting patterns include rule shadowing, device time skew that ruins correlation, and inspection blind spots inside encrypted tunnels. Evidence habits—change tickets, documented rule rationales, packet captures showing expected flags and ciphers—anchor answers to artifacts, which exam writers reward. This recap ensures your mental map is concise, layered, and ready for adaptive questioning that favors applied understanding over memorized lists. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 56 — Protect and Monitor Internet of Things Deployments
Internet of Things (IoT) ecosystems expand the attack surface by introducing diverse, often constrained devices that run long-lived firmware and communicate over specialized protocols. This episode clarifies …
Notas del episodio
Internet of Things (IoT) ecosystems expand the attack surface by introducing diverse, often constrained devices that run long-lived firmware and communicate over specialized protocols. This episode clarifies why standard hardening practices must be adapted for IoT realities: limited CPU and memory, intermittent connectivity, vendor-managed updates, and field installations with physical exposure. We outline core concepts—asset discovery across heterogeneous networks, identity for devices rather than users, secure boot and signed firmware, and protocol-aware segmentation that isolates management, data, and update channels. You’ll learn how to align protections with device criticality and data sensitivity, and how to reason through exam scenarios that test whether you can mitigate risk when traditional endpoint agents are not an option.
We extend the model with practical controls and monitoring patterns. Examples include placing sensors to observe MQTT/CoAP traffic, enforcing certificate-based mutual authentication, and using gateway proxies to normalize telemetry before it reaches SIEM pipelines. We discuss update governance—staging firmware, verifying signatures, and rollbacks for failed pushes—and compensating controls when vendors cannot patch quickly. Troubleshooting guidance addresses shadow devices discovered after installation, hard-coded credentials, weak default configurations, and supply-chain risk in component firmware. Evidence that proves effectiveness includes signed inventory of device identities, firmware bill of materials references, and alerting tied to protocol baselines rather than generic ports. By linking architecture, lifecycle, and assurance artifacts, you’ll select exam answers that protect IoT without breaking the business processes those devices support. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 55 — Secure Wi-Fi and Wireless Access From End to End
Wireless networks extend enterprise reach—and risk—and the SSCP exam stresses understanding their protections. This episode describes core wireless security standards: WPA3 with SAE authentication, enterprise …
Notas del episodio
Wireless networks extend enterprise reach—and risk—and the SSCP exam stresses understanding their protections. This episode describes core wireless security standards: WPA3 with SAE authentication, enterprise 802.1X integration, and encryption protocols that protect data in transit. We explain how SSID broadcast control, channel management, and antenna placement affect exposure, plus why rogue access points and evil-twin attacks require continuous monitoring. You’ll learn how wireless controllers centralize policy enforcement and logging to maintain visibility over distributed environments.
Practical examples link technology to operations. We outline configuring RADIUS-based authentication with unique credentials, using digital certificates for device trust, and segmenting guest and corporate WLANs with VLAN tagging. We discuss using wireless intrusion detection to flag rogue devices, implementing geolocation alerts, and conducting regular site surveys to identify coverage or interference issues. Troubleshooting guidance includes expired certificates breaking enterprise connections, mismatched encryption settings, and misconfigured pre-shared keys in mixed environments. By tying physical placement, configuration, and authentication to verifiable evidence like logs and controller reports, you’ll demonstrate complete mastery of wireless defense principles tested in the SSCP. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 54 — Optimize DLP, UTM, NAC, and Quality of Service
Modern enterprises combine multiple protective systems, and the SSCP exam expects you to understand how these integrate without conflict. This episode defines Data Loss Prevention (DLP), Unified Threat …
Notas del episodio
Modern enterprises combine multiple protective systems, and the SSCP exam expects you to understand how these integrate without conflict. This episode defines Data Loss Prevention (DLP), Unified Threat Management (UTM), Network Access Control (NAC), and Quality of Service (QoS) in security contexts. You’ll learn how DLP monitors content for sensitive data, how UTM consolidates firewalls, intrusion prevention, and antivirus, how NAC enforces endpoint compliance before connection, and how QoS maintains service reliability for critical applications even during attacks or congestion. We emphasize aligning configurations to policy and avoiding feature overlap that complicates troubleshooting.
Concrete scenarios tie each concept together. You’ll explore implementing DLP to prevent outbound credit-card leakage, deploying NAC posture checks for updated antivirus and patches, and tuning UTM devices to handle layered inspection efficiently. We discuss maintaining QoS policies that prioritize voice or control traffic without introducing exploitable asymmetry. Troubleshooting examples cover false positives in DLP, NAC agent failures, and UTM throughput bottlenecks from excessive rule complexity. By mastering these integrations and understanding which control best fits each risk, you’ll answer exam questions that test technical reasoning and policy alignment across blended security technologies. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 53 — Configure Firewalls, WAFs, and Core Security Services
Firewalls and related technologies enforce boundaries between zones, a fundamental competency for SSCP professionals. This episode explains packet-filtering, stateful, and next-generation firewalls, emphasizing …
Notas del episodio
Firewalls and related technologies enforce boundaries between zones, a fundamental competency for SSCP professionals. This episode explains packet-filtering, stateful, and next-generation firewalls, emphasizing rule evaluation order, implicit denies, and policy documentation. You’ll learn how Web Application Firewalls (WAFs) protect against injection, cross-site scripting, and other application-layer threats by analyzing HTTP payloads. We also discuss supporting services like Network Address Translation (NAT), proxy servers, and reverse proxies, showing how each contributes to confidentiality, integrity, and availability when configured correctly.
Practical configuration lessons make these controls tangible. We outline building rule sets that start with deny-all, then add explicit allows based on business requirements, followed by periodic reviews. You’ll examine tuning WAF signatures, implementing SSL/TLS inspection where authorized, and monitoring hit counts to detect anomalies. Troubleshooting coverage includes rule shadowing, asymmetric routing, and logging gaps that obscure policy enforcement. By linking firewall and WAF operations to documented business justifications and evidence—change tickets, rule reviews, and alert histories—you’ll demonstrate the analytical mindset the exam demands for selecting, verifying, and maintaining effective network perimeter controls. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 52 — Design Network Segmentation and Secure Device Placement
Segmentation limits blast radius, improves performance, and appears across multiple SSCP domains. This episode explains logical and physical segmentation methods—VLANs, subnets, virtual routing, and isolated …
Notas del episodio
Segmentation limits blast radius, improves performance, and appears across multiple SSCP domains. This episode explains logical and physical segmentation methods—VLANs, subnets, virtual routing, and isolated management networks—and how zoning aligns with trust boundaries and data sensitivity. You’ll learn how to separate user, server, and management traffic; isolate DMZs from internal systems; and design control planes that cannot be reached from untrusted networks. We also discuss secure device placement: locating firewalls at choke points, keeping logging and authentication servers in protected zones, and ensuring redundancy without compromising isolation.
We reinforce design logic through real examples. You’ll see how separating guest Wi-Fi from corporate networks reduces exposure, how placing intrusion detection sensors in mirror or tap ports preserves integrity, and how jump hosts regulate administrative access. We cover documenting network diagrams with data flows, maintaining rule matrices that justify each connection, and validating segmentation effectiveness through testing. Troubleshooting guidance includes addressing overly permissive inter-VLAN rules, inconsistent ACL propagation, and shared management interfaces that erode isolation. With these principles, you’ll recognize in exam scenarios which segmentation choice best contains risk while maintaining necessary functionality. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 51 — Administer 802.1X, RADIUS, and TACACS+ Authentication Services
Network authentication frameworks define who connects and with what privileges, a recurring focus on the SSCP exam. This episode introduces IEEE 802.1X as the standard for port-based network access control …
Notas del episodio
Network authentication frameworks define who connects and with what privileges, a recurring focus on the SSCP exam. This episode introduces IEEE 802.1X as the standard for port-based network access control, showing how it uses an authenticator (such as a switch or wireless controller), a supplicant (the client), and an authentication server that validates credentials. We then compare Remote Authentication Dial-In User Service (RADIUS) and Terminal Access Controller Access-Control System Plus (TACACS+), explaining how both provide centralized authentication, authorization, and accounting but differ in protocol design, encryption scope, and typical use cases. Understanding these mechanisms allows you to select appropriate controls for enterprise and administrative contexts.
We apply the theory with concrete examples. A corporate Wi-Fi deployment may use 802.1X with RADIUS for user and device identity checks, while TACACS+ can secure administrative access to routers and firewalls. We discuss configuring redundancy, enforcing multifactor authentication, and logging every command executed by administrators for accountability. Troubleshooting guidance covers misconfigured shared secrets, certificate trust issues in EAP-TLS, and mismatched attributes between policy servers and network gear. By connecting the authentication flow—request, challenge, response, accept—with tangible artifacts like logs and policy sets, you’ll understand how to verify effective enforcement on networks and respond confidently to exam items about AAA design. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 50 — Counter DDoS, Man-in-the-Middle, and Poisoning Attacks
Network attacks often exploit trust and scale, and the SSCP exam assesses how well you can neutralize them. This episode explains the mechanics of Distributed Denial of Service (DDoS), man-in-the-middle (MITM) …
Notas del episodio
Network attacks often exploit trust and scale, and the SSCP exam assesses how well you can neutralize them. This episode explains the mechanics of Distributed Denial of Service (DDoS), man-in-the-middle (MITM), and poisoning attacks like ARP, DNS, and cache corruption. We describe volumetric versus application-layer DDoS, active interception through rogue gateways or compromised certificates, and data manipulation via falsified records. You’ll learn to align countermeasures—rate limiting, filtering, authentication, encryption, and validation—with each attack type, ensuring defense without crippling legitimate traffic.
Practical defense scenarios reinforce the logic. For DDoS, examples include upstream filtering by ISPs, content delivery networks absorbing load, and local rate limits that protect bandwidth. Against MITM, we discuss enforcing TLS with certificate validation, using secure VPN tunnels, and monitoring for certificate anomalies. For poisoning threats, we outline static ARP entries in critical segments, DNSSEC validation, and cache hygiene routines. Troubleshooting topics include identifying reflection amplifiers, tuning thresholds to avoid self-inflicted denial, and responding to certificate warnings properly. Mastering these countermeasures prepares you for exam items that test both recognition of the attack type and selection of the most effective, least disruptive mitigation step. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 49 — Identify Network Attack Patterns and Adversary Tactics
Recognizing attack patterns lets defenders predict behavior instead of merely reacting, a key skill tested in the SSCP exam. We define reconnaissance, exploitation, privilege escalation, lateral movement, and …
Notas del episodio
Recognizing attack patterns lets defenders predict behavior instead of merely reacting, a key skill tested in the SSCP exam. We define reconnaissance, exploitation, privilege escalation, lateral movement, and exfiltration, then align them with controls that detect or prevent each step. You’ll learn how frameworks like MITRE ATT&CK organize tactics, techniques, and procedures (TTPs) into repeatable logic for analysis. We also describe common network-level attacks—spoofing, sniffing, session hijacking, and man-in-the-middle—and how layered controls counter them through segmentation, encryption, and monitoring.
Concrete cases turn theory into pattern recognition. Examples include spotting ARP poisoning through duplicate MAC addresses, identifying DNS tunneling via abnormal query patterns, and mitigating credential replay with short token lifetimes. We discuss using IDS signatures and anomaly baselines, correlating indicators across logs, and enriching data with threat intelligence feeds. Troubleshooting guidance covers false positives, encrypted traffic inspection, and gaps from unmanaged assets. By understanding the adversary’s sequence, you can quickly map symptoms to root causes, select controls that break the chain, and answer exam questions that demand both technical and analytical thinking. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 48 — Recognize Ports, Protocols, and Software-Defined Networking
Ports and protocols are the vocabulary of connectivity, and SSCP candidates must interpret them quickly. This episode reviews common ports—HTTP 80, HTTPS 443, DNS 53, SMTP 25, SSH 22—and protocol roles in …
Notas del episodio
Ports and protocols are the vocabulary of connectivity, and SSCP candidates must interpret them quickly. This episode reviews common ports—HTTP 80, HTTPS 443, DNS 53, SMTP 25, SSH 22—and protocol roles in securing or exposing data. We discuss TCP versus UDP behavior, handshake flows, and how stateful inspection uses port and session context for filtering. The section on Software-Defined Networking (SDN) introduces centralized control planes, APIs, and microsegmentation, highlighting both agility and new risks such as misconfigured orchestration or API compromise. Recognizing these interactions helps you troubleshoot connectivity issues and answer exam stems about secure network design.
We translate numbers and terms into understanding through examples. You’ll analyze how web proxies manage HTTP and HTTPS, how DNSSEC adds integrity to name resolution, and how SNMP version mismatches create exposure. For SDN, we show how controllers enforce policies dynamically and how to audit flows against expected baselines. Troubleshooting coverage includes ephemeral port conflicts, blocked control channels, and legacy plaintext protocols lingering in hybrid environments. Knowing which port–protocol pair serves which function allows you to select accurate exam answers and verify configurations efficiently in the real world. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 47 — Map OSI and TCP/IP Models to Security Controls
The OSI and TCP/IP models organize communication, and the SSCP exam tests your ability to connect each layer to its security controls. We review the seven OSI layers—physical through application—and the four …
Notas del episodio
The OSI and TCP/IP models organize communication, and the SSCP exam tests your ability to connect each layer to its security controls. We review the seven OSI layers—physical through application—and the four TCP/IP layers, showing how protections align: physical controls for cables and ports, data link protections like MAC filtering, network controls such as firewalls and routers, transport safeguards with TLS or IPSec, and application-layer defenses like input validation and session management. You’ll learn to map threats to layers, identify where countermeasures apply, and spot distractors that misplace controls in exam scenarios.
Practical reasoning solidifies understanding. Examples include mitigating ARP spoofing at layer two, preventing IP address spoofing and route injection at layer three, and securing web traffic at layer seven. We discuss how controls overlap, why redundancy strengthens security, and how evidence—logs, configurations, and traffic captures—proves correct placement. Troubleshooting highlights cover issues like asymmetric routing breaking stateful firewalls, misaligned inspection layers causing blind spots, and encryption hiding needed metadata for detection. By confidently mapping security measures to layers, you’ll answer network questions faster and evaluate architectures with precision in both testing and practice. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 46 — Reinforce Cryptography Essentials With Actionable Scenarios
Reviewing cryptography in context cements knowledge, and this episode uses practical examples to connect theory with exam-ready reasoning. We revisit core terms—encryption, hashing, key exchange, and digital …
Notas del episodio
Reviewing cryptography in context cements knowledge, and this episode uses practical examples to connect theory with exam-ready reasoning. We revisit core terms—encryption, hashing, key exchange, and digital signatures—and link them to everyday decisions such as securing backups, authenticating firmware, or validating file integrity. You’ll learn how confidentiality, integrity, and authenticity interact and how hybrid models use symmetric keys for performance and asymmetric keys for trust. The exam frequently tests how to identify the weakest link in a cryptographic chain, so we explore what evidence demonstrates correct implementation: key rotation logs, algorithm identifiers, and documented trust anchors.
Applied scenarios bring the material to life. We outline encrypting sensitive data at rest with AES-256, transmitting it via TLS with strong cipher suites, and validating file authenticity through hash comparison and signed manifests. We also explain common failure points—reusing IVs, storing keys alongside encrypted data, or neglecting certificate revocation—and how to detect and correct them. Troubleshooting guidance covers expired certificates, mismatched algorithms between endpoints, and accidental plaintext logging. This synthesis helps you recognize how design, configuration, and evidence combine to prove cryptography is working as intended—a skill that separates surface knowledge from exam-ready understanding. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 45 — Administer PKI, Certificates, and Practical Trust Models
Public Key Infrastructure (PKI) enables scalable trust, and exam questions often probe its components and lifecycle. We define certification authorities (CAs), registration authorities (RAs), certificate …
Notas del episodio
Public Key Infrastructure (PKI) enables scalable trust, and exam questions often probe its components and lifecycle. We define certification authorities (CAs), registration authorities (RAs), certificate repositories, and revocation mechanisms like CRLs and OCSP. You’ll learn how certificates bind public keys to identities through verified attributes and signatures, how chains of trust operate, and why governance—policy documents, key escrow, and separation of duties—keeps the system reliable. Understanding PKI roles, issuance workflows, and verification steps equips you to interpret exam stems that describe authentication or encryption failures.
We detail administration tasks that keep PKI healthy. Examples include enrolling devices with short-lived certificates, automating renewals, and monitoring expiration alerts. We discuss managing subordinate CAs, protecting root keys offline, and auditing issuance for policy compliance. Troubleshooting guidance covers misconfigured intermediates, missing revocation responses, and users ignoring certificate warnings. We also explain alternative trust models—web of trust, bridge CA, and enterprise private CA—and how to evaluate their suitability. Evidence of effective PKI includes valid certificate chains, revocation logs, and audit trails of approvals. By mastering these principles, you’ll not only pass related exam domains but also ensure your organization’s encrypted communications remain trustworthy end to end. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 44 — Deploy TLS, IPsec, and S/MIME the Right Way
Secure communication protocols feature prominently in SSCP domain questions, and this episode clarifies where each applies. We outline Transport Layer Security (TLS) for web and application encryption, Internet …
Notas del episodio
Secure communication protocols feature prominently in SSCP domain questions, and this episode clarifies where each applies. We outline Transport Layer Security (TLS) for web and application encryption, Internet Protocol Security (IPsec) for network-layer protection, and Secure/Multipurpose Internet Mail Extensions (S/MIME) for email confidentiality and signing. You’ll learn handshake sequences, key exchange mechanisms, and how certificates authenticate parties. We also emphasize version management—why TLS 1.3 supersedes earlier insecure versions—and how cipher suite selection and certificate validation determine real protection versus a false sense of security.
Practical deployment guidance follows. For TLS, we examine enforcing HTTPS, disabling weak ciphers, and implementing certificate pinning where appropriate. For IPsec, we discuss modes (tunnel versus transport), mutual authentication with pre-shared keys or certificates, and integration with VPN concentrators. For S/MIME, we cover enrolling users in a PKI, distributing public keys, and managing revocation lists. Troubleshooting advice includes expired or mismatched certificates, incomplete trust chains, and negotiation failures due to policy differences. By linking each protocol to its ideal layer and purpose, you’ll easily identify exam answers that reflect proper placement and secure configuration. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 43 — Gauge Algorithm Suitability, Key Strength, and Threats
Selecting an algorithm or key length isn’t guesswork; it’s risk-based decision-making tested heavily on the SSCP exam. This episode explains factors influencing cryptographic strength: algorithm design, key …
Notas del episodio
Selecting an algorithm or key length isn’t guesswork; it’s risk-based decision-making tested heavily on the SSCP exam. This episode explains factors influencing cryptographic strength: algorithm design, key size, implementation, and operational controls. You’ll learn how standards bodies publish approved lists, why algorithm agility matters, and how key management lifecycles determine real-world resilience. We also discuss threats like brute force, side-channel attacks, and poor entropy sources, connecting them to the assurance level required by policy or regulation. Recognizing when a “strong” algorithm becomes weak due to misconfiguration is a recurring exam theme.
We expand into decision and verification examples. A 128-bit symmetric key may suffice for most commercial data, while classified or regulated environments may demand 256-bit keys. Public key infrastructures require timely certificate rotation, secure storage of private keys, and revocation mechanisms. We illustrate pitfalls like using outdated ciphers (RC4, DES) or weak RSA keys, and how to monitor standards updates from NIST and ISO. Troubleshooting guidance covers mismatched cipher suites, unsupported hardware accelerators, and missing validation against FIPS requirements. The ability to justify each parameter choice—algorithm, mode, and key length—shows both on exams and audits that your cryptography design is grounded in measurable assurance rather than habit or hearsay. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 42 — Apply Hashing for Integrity, Authenticity, Nonrepudiation
Hashing provides proof that data has not been altered, making it a cornerstone of exam questions on integrity and authenticity. This episode defines a cryptographic hash as a one-way mathematical function that …
Notas del episodio
Hashing provides proof that data has not been altered, making it a cornerstone of exam questions on integrity and authenticity. This episode defines a cryptographic hash as a one-way mathematical function that produces a fixed-length digest unique to input data. We explain desirable properties—determinism, collision resistance, and avalanche effect—and why algorithms like SHA-256 are preferred over older, weaker ones like MD5. You’ll learn how hashing underpins message integrity checks, digital signatures, and password storage through salted digests. Exam items often test whether you can recognize when hashing alone suffices versus when to pair it with signing or encryption.
We link theory to practical implementations. Examples include verifying file downloads using published checksums, storing passwords with salted hashes to prevent rainbow table attacks, and detecting tampering in logs via chained hash values. We also show how digital signatures wrap hashes with private keys to provide nonrepudiation and authenticity, producing artifacts such as signed PDFs or timestamped code packages. Troubleshooting topics address hash collisions, unsalted hashes, and mismatched algorithms during verification. By focusing on evidence—hash outputs, algorithm identifiers, and validation steps—you’ll learn to demonstrate integrity and authenticity both on the exam and in real investigations where proof of unchanged data is vital. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Aquí están los 60 episodios más recientes de 72. Los anteriores están en el feed del podcast.
Recomendado por Certified: The SSCP Audio Course
Podcasts similares
Más podcasts de Educación
¿Es tu podcast?
Confírmalo con una entrada en tu feed: aquí recibes un código, lo añades como podcast:txt en el canal de tu feed y nosotros lo comprobamos. Después tu podcast aparecerá como «verificado» en SoundNode.