D11 · Identity Security & Zero Trust

Key knowledge areasCopy Anchor Link

• Zero Trust Architecture
• Zero Trust Network Access (ZTNA)
• Conditional Access
• Identity Threat Detection and Response (ITDR)
• Identity Attack Paths
• Credential Theft
• Session Hijacking
• Token Theft and Replay
• Privilege Escalation
• Identity-Based Lateral Movement
• Account Takeover
• Phishing-Resistant Authentication
• Identity Security Monitoring
• Human and NHI Threat Detection
• Excessive Privilege Exposure
• Identity Incident Response

Career alignmentCopy Anchor Link

• TRACK A — Identity Platform & CIAM Engineering: Core domain. View track
• TRACK B — Enterprise IAM / PAM / IGA Engineering: Core domain. View track

Suggested learning outcomesCopy Anchor Link

• Model identity attack paths and trust boundaries.
• Evaluate ITDR signals, conditional access and response.

These prompts are editorial learning aids retained from the earlier textbook. They are not additional requirements in v0.4.

Connected questionsCopy Anchor Link

• What really happens when you sign in to a workstation?
• How should a DevOps engineer reach production?
• When an AI agent acts, whose authority does it use?

Build competency evidenceCopy Anchor Link

Explain a mechanism, analyze an implementation or failure, build a tested lab, and justify an architecture. Keep shared technical explanations in the Knowledge Base and link to them from research.

Domain name, scope, knowledge areas and representative technologies follow the authoritative Framework v0.4. Questions may span multiple domains.