A study of how to secure enterprise networks, hosts, and identity systems using a defense-in-depth approach. Students examine network protocols and architectures, deploy and evaluate protective controls, apply zero-trust and identity principles, and use monitoring and telemetry to detect and respond to intrusions.