Visão Geral

Este curso apresenta os fundamentos de Multi-Factor Authentication (MFA), seus mecanismos, métodos de autenticação e aplicação em ambientes corporativos. O participante compreenderá como o MFA reduz riscos relacionados ao comprometimento de credenciais e como integrá-lo a estratégias de segurança de identidades.

Objetivo

Após realizar este curso, você será capaz de:

• Compreender os fundamentos de MFA
• Diferenciar métodos de autenticação
• Implementar controles de MFA
• Monitorar eventos de autenticação
• Reduzir riscos de comprometimento de contas

Publico Alvo

• Administradores de sistemas
• Profissionais de Cybersecurity
• Analistas de SOC
• Administradores de identidade

Pre-Requisitos

• Conhecimentos básicos de autenticação
• Familiaridade com Active Directory
• Conhecimentos básicos de redes
• Noções de identidade e acesso
• Familiaridade com políticas de segurança é recomendada

Conteúdo Programatico

Module 1: Multi-Factor Authentication Fundamentals

1. MFA concepts
2. Authentication factors
3. Knowledge factors
4. Possession factors
5. Inherence factors
6. Authentication assurance
7. Identity verification
8. Strong authentication
9. Credential compromise risks
10. MFA security benefits

Module 2: MFA Technologies

1. One-Time Passwords
2. Time-Based One-Time Passwords
3. Push authentication
4. Hardware security keys
5. FIDO2
6. WebAuthn
7. Smart cards
8. Certificate-based authentication
9. Biometric authentication
10. Authentication technology comparison

Module 3: MFA Architecture

1. Identity providers
2. Authentication flows
3. Federation
4. Single Sign-On
5. Conditional access
6. Authentication policies
7. Device identity
8. Risk-based authentication
9. Application integration
10. MFA architecture design

Module 4: MFA Security

1. Phishing-resistant MFA
2. MFA fatigue attacks
3. Push notification abuse
4. Session hijacking
5. Token theft
6. Authentication bypass risks
7. Recovery mechanisms
8. Account recovery security
9. MFA enrollment security
10. MFA attack surface

Module 5: Deployment and Monitoring

1. MFA rollout planning
2. User enrollment
3. Policy enforcement
4. Conditional access
5. Authentication monitoring
6. Failed authentication events
7. Suspicious authentication
8. Security alerts
9. SIEM integration
10. MFA reporting

Module 6: Practical MFA Security

1. MFA architecture assessment
2. Authentication policy design
3. Enrollment workflow
4. Security policy implementation
5. Authentication event analysis
6. Suspicious login investigation
7. Phishing-resistant MFA assessment
8. Recovery process validation
9. Security control review
10. Practical MFA implementation cases