Subject-matter expert
Bob Salmans
Bob got his start in IT after enlisting in the United States Navy and being assigned to a network engineer role. He brings seven years of IT training experience to CBT Nuggets along with over 20 years of IT experience. Bob was a security team lead for a managed services provider before joining CBTN. In his spare time, he enjoys spending time with his family, cooking, and metal and woodworking.
Credentials
Certifications Bob Salmans holds
Vendor-issued credentials Bob holds — the hands-on IT background behind the courses your team will train on.
- Microsoft MCSE
- Cisco CCNP
- Cisco CCDP
- Cisco CCNA Security
- CISSP
- CCSP
- GPEN
- CISA
- CISM
- CompTIA Security+
- CompTIA CySA+
- CompTIA Pentest+
- AWS-CCP
- AZ-900
- VMWare VPC-DC
- VMWare VPC-NV
- F5-CA
Training coverage
Courses that carry Bob Salmans's expertise into your team plan
Use these courses as proof of coverage for the roles and technologies your team needs to support.
Courses Bob Salmans teaches
37 courses
Azure
AZ-500
This intermediate Microsoft Azure Security Engineer Associate training follows the AZ-500 objectives, which Microsoft retired on 31 August 2026, and builds the skills needed to secure Azure-based networks by implementing security controls.
Azure
Microsoft Entra ID
This Microsoft Entra ID training will help you build a secure, scalable identity infrastructure from the ground up. This course provides a comprehensive deep dive into Microsoft Entra ID (formerly named Azure Active Directory), giving you the practical expertise to manage identities, enforce Zero Trust security, and streamline access across hybrid environments. You'll move from foundational setup to deploying advanced governance and automated identity protection.
Check Point
CCSA & CCSE
This training covers both the Check Point Certified Security Administrator (CCSA) and Check Point Certified Security Expert (CCSE) certifications. Learn to install, configure, and manage Check Point R81, including gateways, security policies, threat prevention, and advanced network protection. Build hands-on skills with firewalls, VPNs, and intrusion prevention systems. Ideal for security admins preparing for certification or teams needing a practical Check Point reference.
Cisco
CCNA Cybersecurity
This CCNA Cybersecurity training prepares you for the Understanding Cisco Cybersecurity Operations Fundamentals (200-201 CCNACBR) v1.2 exam (formerly called Cisco CyberOps). With virtual labs and unlimited practice exams included, you’ll gain experience with SIEM, NetFlow, tcpdump, malware analysis, access control models, and incident response workflows based on NIST.SP800‑61. You'll also learn how to detect network, application, and endpoint threats, investigate attacks like DDoS or man‑in‑the‑middle, and apply defense‑in‑depth. This course is deal for entry‑level security analysts or engineers ready to earn their CCNA Cybersecurity certification and launch an SOC career.
Cisco
CCNP Security
This CCNP Security training is designed to help you get comfortable with the 300-710 SNCF exam objectives, and earn your CCNP Security certification. Taught by networking expert Keith Barker and cybersecurity professional Bob Salmans, this course focuses on securing networks with Cisco Firewalls, including Firepower Threat Defense and Management Center. This training is ideal for Network Security Engineers and System Administrators seeking rigorous 300-710 SNCF exam prep, as well as IT managers looking for a streamlined onboarding tool or a high-level Cisco training resource for their technical teams.
Cisco
CCST Networking
Become a Cisco Certified Support Technician (CCST) with hands‑on, entry‑level Cisco CCST Networking (100-150) training that simplifies the complex. Learn with expert-led lessons, and fortify your skills with virtual labs. You’ll master foundational building blocks from TCP/IP, OSI models, and protocols like HTTP, DNS, DHCP. You'll also dive in to IPv4/IPv6 addressing, subnetting, and connectivity on Windows, Linux, macOS, Android, and iOS. Learn to troubleshoot using Wireshark, Cisco commands, and real‑world methodologies. Get practical, get certified, and get working.
Cisco
Cisco CCNP ISE (300-715 SISE)
Network access control is one of the riskiest changes an IT team can make. A misconfigured 802.1X rollout can lock every user off the network, while unmanaged endpoints, guests, and BYOD devices widen the attack surface. This course gives network and security teams a methodical way to deploy Cisco Identity Services Engine (ISE) and enforce identity-based access across wired, wireless, and VPN connections without causing outages or help desk spikes. It is built for Network Engineers and Security Engineers on the CCNP Security track. Learners plan ISE node personas and redundancy, integrate ISE with Active Directory and LDAP, and stage 802.1X in phases on IOS switches and Cisco WLCs. They also cover MAB, IBNS 2.0, and Local and Central WebAuth for devices that can't run 802.1X. Later skills cover TACACS+ device administration, TrustSec micro-segmentation with staged approver workflows, and posture policies so only compliant endpoints get access. For IT Directors and Team Leads, the 94 skills break into focused 45 to 90 minute segments, so you can assign MAB, guest portals, TrustSec, or posture to match current projects. Virtual labs mirror the course topology, and team reporting tracks progress and completion as your team works toward the 300-715 SISE exam. The result is a team that can design, deploy, and support ISE in-house.
Cisco
Cisco CCNP Security Core 350-701 SCOR
Security teams often inherit fragmented controls across firewalls, VPNs, endpoints, cloud services, and identity systems. That fragmentation slows incident response and raises change risk. This intermediate, 32.3-hour course gives IT Directors one structured path that maps those controls to the Cisco CCNP Security Core (350-701 SCOR) v2.0 exam. It is built for network administrators, security engineers, and IT practitioners who already know networking fundamentals. They work through threat concepts, cryptography, IPSec and remote access VPNs, Layer 2 hardening, Cisco FTD, cloud shared responsibility, Splunk basics, endpoint and email threat defense, Cisco ISE, exfiltration, visibility, and zero trust. Many lessons include configuration and verification. Learners build an FTD lab, apply decryption, IPS, malware, and URL filtering policies, and use ISE policy sets with 802.1X, MAB, and CoA to move authenticated users into the right VLAN. Your team can rehearse changes in a lab before they reach production. Training Managers can assign the course through CBT Nuggets Playlists and track progress with Team Reporting. That supports a consistent certification push or a security operations handoff.
CompTIA
A+ Core 2
Prepare for the CompTIA A+ Core 2 (220-1202) V15 exam with expert-led training, unlimited practice exams, and virtual labs. Build real-world IT support skills across Windows 11, macOS, Linux, Android, and iOS, with expanded focus on OS management, cloud productivity tools, file systems (ReFS, XFS), UEFI/TPM, hybrid deployments, and command-line utilities like whoami and sfc. This course dives into Zero Trust security, passwordless authentication, MDM, DLP, EPP/EDR, and protection against email-based threats and fileless malware. You'll also cover software troubleshooting, ticketing systems, and operational best practices. Prepare to sit the 220-1202 exam with confidence and level up your IT career.
CompTIA
CompTIA CySA+ (CS0-004)
Security operations break down when every analyst investigates, prioritizes, and escalates differently. This CompTIA Cybersecurity Analyst CySA+ (CS0-004) course gives IT Directors and Security Team Leads a shared analyst playbook for detection, vulnerability management, and incident response, aligned to the CySA+ certification. It is built for SOC analysts, vulnerability management staff, incident responders, and infrastructure practitioners moving into security operations. Learners work through logging architecture, OS hardening, and enterprise access controls, then move into malicious activity indicators, malware and script analysis, regex, threat intelligence and hunting, vulnerability scoring and reporting, structured incident response, and after-action review. A dedicated module covers AI in security operations, including prompt injection, data and model poisoning, and AI usage policies. At roughly 20 hours of video across 23 skills, the course can be assigned over several weeks without pulling analysts off shift for full days. Training Managers can use CBT Nuggets playlists to sequence modules by role and team reporting to track progress across the security team.
CompTIA
PenTest+
In this PenTest+ course, cybersecurity expert Bob Salmas guides you through simulating real-world cyberattacks, uncovering network vulnerabilities, and sharpening your ethical hacking skills. Once you complete this course, you’ll be prepared to pass the PenTest+ PT0-003 exam with confidence. This PenTest+ training is ideal for junior cybersecurity pros ready to advance or seasoned pentesters looking to validate their skills. You’ll practice modern penetration testing techniques in realistic virtual labs, document your findings in industry-standard reports, and prepare for exam day with unlimited PenTest+ practice tests.
CompTIA
Project+
This CompTIA Project+ certification training prepares you to become a certified project manager. You’ll learn to think like a project manager by grasping essential project frameworks and best practices. You'll complete hands-on exercises for breaking down complex projects into manageable, measurable tasks. You’ll also develop the ability to communicate clearly, managing stakeholders and timelines with ease. With unlimited practice exams included, this course prepares you for the PK0‑005 exam while reinforcing real-world application. Earn your Project+ certification and advance your project management career across any industry.
Showing 12 of 37 — show allShowing all 37 — show fewer
F5
F5 301a Exam
This F5 301a exam training covers how to efficiently configure, secure and optimize F5 devices with a focus on robust application delivery and traffic management. This course covers the skills and knowledge necessary to configure, manage and secure F5's local traffic manager (LTM). For experienced network security professionals, expanding your skills with this BIG-IP LTM Specialist: Architect, Set up, Deploy (Exam 301a) exam prep is a strong investment in your future.
F5
F5 BIG-IP
This intermediate BIG-IP LTM Specialist: Maintain and Troubleshoot (exam 301B) training prepares network security admins to maintain and troubleshoot a flexible and high-performance application delivery system powered by F5's BIG-IP Local Traffic Manager. This course prepares you for one of two exams needed to earn F5's BIG-IP LTM Certified Technical Specialist certification.
F5
F5CAB1
Learn how to install, configure, secure, and upgrade BIG-IP systems with this expert-led F5CAB1 training. This F5 exam is one of five exams you need to earn the F5 Certified Administrator credential. You’ll walk through real-world admin tasks like managing software images, setting up licensing, and locking down access, all while preparing for the BIG-IP Administration Install, Initial Configuration, and Upgrade exam. Perfect for network admins and system engineers working with F5 who want to build confidence and prove their skills.
F5
F5CAB2
This F5CAB2 exam validates your knowledge of BIG-IP data plane concepts like interfaces, traffic behavior, virtual servers, and high availability. After passing, you’ll confidently manage and troubleshoot traffic flow, understand key ADC components, and support BIG-IP environments in production networks. This F5 course is one of five exams you need to take in order to earn your F5 Certified Administrator credential.
F5
F5CAB3
Master the practical skills needed to configure BIG-IP virtual servers and manage pools with this F5CAB3 training. You’ll learn to apply procedural concepts that support real-world data plane traffic management in BIG-IP environments. After completing this F5 training, you’ll be able to confidently deploy, modify, and maintain core BIG-IP traffic objects in production networks.
F5
F5CAB4
This training covers everything you need to learn in order to pass the BIG-IP Administration Control Plane (F5CAB4) exam. Gain skills to manage high availability, backups, device upgrades, and authentication methods. Earning your F5 Certified Administrator credential proves your ability to support and administer BIG-IP control plane features in real-world environments. After taking this skills-focused training, you'll be able to troubleshoot, sync configurations, and manage system states with confidence.
F5
F5CAB5
Learn valuable F5 networking skills with expert-led training. The BIG-IP Administration Support and Troubleshooting (F5CAB5) exam validates your ability to identify and resolve common BIG-IP issues in real-world environments. After taking this F5 training, you'll know how to evaluate system performance, diagnose virtual server and pool behavior, and interpret traffic flow to maintain uptime — all the skills you need to pass the F5CAB5 exam and work towards your F5 Certified Administrator credential.
ISACA
CISA
This CISA online training prepares you for the Certified Information Systems Auditor certification. The course follows ISACA’s exam blueprint: you’ll learn audit standards and risk‑based planning, manage IT governance and strategy, guide systems through acquisition, development and implementation, oversee operations and business resilience, and protect information assets. Build hands‑on skills in evidence collection, analytics and reporting through engaging videos, practice exams, and real‑world scenarios, all while preparing for the CISA exam.
ISACA
CISM
This CISM training prepares IT professionals to manage enterprise-level security governance, risk, and incident response. This online, self-paced course aligns with ISACA's latest Certified Information Security Manager exam and is ideal for roles like Information Security Manager, GRC Lead, or Risk Officer. You'll build leadership skills in threat modeling, risk treatment, and post-incident review, making it perfect for both CISM certification prep and recertification.
ISACA
CRISC
This ISACA CRISC training is designed to help you earn your Certified in Risk and Information Systems Control credential. This course helps you learn to identify IT risks, build threat models, and align technology with business goals. Once you've completed this course, you'll know how to design effective control frameworks, manage vendor risk, and handle data lifecycles from start to finish. You'll also gain the skills to analyze risk appetite, report metrics through heatmaps and dashboards, and lead disaster recovery efforts.
ISC2
CCSP
This CCSP training prepares you to master the six domains of the ISC2 exam outline, focusing on the design, management, and protection of cloud data and infrastructure. You will gain a technical understanding of cloud architecture, security operations, and the implementation of robust security controls. This course covers critical areas including risk management, legal compliance, and the security of cloud platform components, providing the expert-level knowledge required to secure enterprise environments and earn your certified cloud security professional certification.
ISC2
CISSP
Get ready to earn your ISC2 CISSP certification. This course covers all eight CISSP domains in clear, easy-to-follow lessons. Learn governance frameworks, secure design principles, and incident response while sharpening risk analysis, policy writing, and business continuity planning. Along the way, you’ll access unlimited CISSP practice exams and our downloadable CISSP study guide PDF to stay organized and on track. Whether you prefer a structured CISSP bootcamp-style, or flexible self-paced learning, this training helps you prepare smarter, stay focused, and get certified with confidence.
ISC2
ISC2 Certified in Cybersecurity
This ISC2 CC - Certified in Cybersecurity course is designed to lay the foundation for a professional cybersecurity career, and help you study for your ISC2 CC certification. You'll learn to understand the ethical and risk-based frameworks that define the industry, then dive into business continuity and incident response to learn how organizations survive and recover from disruption. From there, you'll explore cybersecurity topics such as access control and network security, and understand the mechanics of protecting digital borders and managing identities. Finally, you'll explore security operations for real-world system defense. To make sure you're ready for exam day, the course includes unlimited ISC2 Certified in Cybersecurity practice exams to build your confidence and reinforce skills.
ISC2
SSCP
This (ISC)² Systems Security Certified Practitioner (SSCP) training is designed for cybersecurity professionals seeking hands-on expertise in securing IT systems. This course covers application security, network defense, access control mechanisms, cryptographic solutions, and incident response techniques. It also covers cutting-edge topics like the MITRE ATT&CK framework, quantum cryptography, organizational compliance, and advanced network security appliances. A premier credential for systems administrators, the SSCP certifies your ability to implement, monitor, and manage secure infrastructure environments following globally recognized (ISC)² standards. The course includes interactive virtual labs and realistic practice exams, ensuring you’re ready to pass the SSCP exam and succeed in real cybersecurity roles.
IT Fundamentals & Support
IT Power Solutions
Learn to manage and maintain PDUs and UPSs with our online IT Power Solutions training. Perfect for network admins, this course covers power distribution, UPS setup, and troubleshooting to ensure reliable power for data centers and tech hubs. Gain the skills to select, configure, and maintain critical power systems for uninterrupted operations.
Microsoft 365
Microsoft SC-200
Advance your cybersecurity analyst career. This Microsoft SC-200 training prepares you for the Security Operations Analyst Associate certification exam. Validate your ability to detect, investigate, and remediate real threats across cloud and on-prem environments. Using SC-200 practice exams, you’ll prepare for real-world incident response, threat hunting, and risk reduction using Microsoft Defender XDR, Microsoft Sentinel, and Security Copilot. You’ll learn to write KQL queries, configure detections, manage playbooks, and automate investigations so you can move from alert triage to confident remediation.
Microsoft 365
Microsoft SC-900
Cloud adoption spreads security, identity, and compliance work across help desk staff, sysadmins, and compliance stakeholders who often lack a shared vocabulary. When terms like Zero Trust, least privilege, and the shared responsibility model mean different things to different people, risk discussions stall and audit conversations take longer than they should. This entry-level SC-900 course gives IT Directors and Training Managers a single baseline to assign across the team. Learners cover Microsoft Entra ID (Azure AD) identity concepts, authentication and self-service password reset, Microsoft Defender threat protection, Intune endpoint security, and Microsoft Purview capabilities such as sensitivity labels, DLP, eDiscovery, audit, data lifecycle management, and insider risk. The course stays conceptual, with walkthroughs in Azure, Microsoft 365, Intune, and Purview, so new hires, help desk technicians, and non-technical risk stakeholders can all take part. After completion, your team can explain Microsoft security terminology to technical and non-technical audiences, identify which Microsoft tool fits a given identity, threat, or compliance use case, and route questions to the right platform capability or specialist team. The course also provides a structured review of the fundamentals covered by the SC-900 certification exam. At about 21.7 hours across 25 skills, the course fits an onboarding cohort or a team certification push. Team Leads can bundle it into Playlists, and Training Managers can track per-learner progress and completion with Team Reporting before moving the team on to role-based Microsoft security training.
Microsoft 365
SC-100
This Microsoft Certified: Cybersecurity Architect Expert (SC-100) training covers how to design a large network's protective security architecture, grounded in the Zero Trust strategy. You'll master the Microsoft Cybersecurity Reference Architecture (MCRA) and Zero Trust principles to design resilient security strategies for SaaS, PaaS, and IaaS environments. As you learn to translate complex requirements into technical safeguards (from Entra Global Secure Access to advanced identity and data protection) you'll gain the high-level skills necessary to secure enterprise infrastructures and pass the SC-100 exam.
Microsoft 365
SC-300
This Microsoft Identity and Access Administrator (SC-300) training prepares you to become a Microsoft identity and access admin. Expert-led training will teach you to implement and manage secure identity solutions using Microsoft Entra ID (Azure AD) and hybrid identities. You’ll set up and manage users, groups, devices, and custom roles. You’ll learn to configure passwordless and multifactor sign-in, apply conditional access policies, and use tools like PIM to support a zero-trust strategy. You’ll also manage app access with registrations, service principals, and entitlement controls. Bring on-prem and cloud together using Azure AD Connect and Active Directory Federation Services, and monitor and protect identities using Defender for Cloud Apps, Sentinel, Identity Protection and Identity Secure Score. With practice exams and real‑world scenarios, this course maps to the SC‑300 exam blueprint, giving you the skills and confidence to get certified and secure access to your organization’s cloud resources.
Microsoft 365
SC-400
Microsoft 365 tenants hold the data auditors and regulators ask about first: customer records, financial files, and employee information moving through email, Teams, SharePoint, and endpoints. This SC-400 training gives IT Directors and Training Managers a consistent way to build the administrator skills needed to turn information protection and compliance requirements into working Microsoft Purview controls. The course is built for Microsoft 365 administrators and information security staff with roughly two years of security experience. Across 13 skills, practitioners work through sensitive information types, trainable classifiers, Exact Data Match, sensitivity labels, email encryption, DLP policies, Endpoint DLP, and DLP event management. Coverage continues into retention labels, records management, communication compliance, insider risk management, information barriers, and Microsoft Priva, so the team understands how each control fits into a broader compliance program. Microsoft retired the SC-400 exam behind the Information Protection and Compliance Administrator Associate certification on 31 May 2025, so the course is assigned today for the Microsoft Purview administration skills themselves. Plan for about 12 hours per learner. Because these controls affect how users classify, share, and retain data, pair the course with internal policy review and change-management planning before making production changes. Team Leads can assign the course by role and use team reporting to track per-learner progress and export completion records as audit evidence.
Networking
Radio Frequency (RF) Technologies
This Radio Frequency (RF) Technologies training covers how to think with and apply electromagnetic theory to understand the physics that go into radio waves enabling advanced technologies. With this course, you'll understand how radio waves pass through the air, what different frequencies are, how radio waves are modulated to carry information, what circuits can do to change that behavior, and why all of that is incredibly important to IT networking.
Security
CMMC
Manage CMMC 2.0 compliance for your organization with this CMMC readiness training. DoD contractors need professionals who can turn compliance requirements into action, and this CMMC training breaks the framework into plain language that explains what compliance really means. InfoSec expert Bob Salmans walks you through a complete CMMC 2.0 compliance checklist, helping you master the CMMC levels, explore all 14 domains, practice documentation standards, and spot common audit pitfalls. When you've taken this CMMC training, you’ll know how to lead a self-assessment and build a compliance roadmap that keeps contracts secure and your organization eligible.
Security
Enterprise GRC
This Governance, Risk and Compliance training covers how to manage your organization's compliance-related requirements and balance them with operational risks to provide cost-efficient and in-compliance results. For systems administrators and security professionals, compliance is much more than ensuring that the right people are getting the right data — this training shows you how to prove your work, verify data integrity, and more.
Splunk
Splunk Core Certified Power User
When only one or two analysts understand the saved searches, dashboards, fields, and event mappings a SOC depends on, every shift change and staff departure becomes a risk. This course helps IT Directors and Team Leads move Splunk users from personal searches to shared knowledge objects and repeatable workflows the whole team can rely on. Built for SOC analysts, SIEM administrators, and IT practitioners who already work with Splunk, the training covers charts, filtering and formatting, event correlation, fields, tags, event types, macros, workflow actions, data models, and the Common Information Model (CIM) add-on. Throughout, the instructor frames Splunk objects around SOPs, corporate policy, and team handoffs, so the skills apply directly to how your SOC operates. At 6.6 hours across eight skills, Training Managers can assign the course in short blocks alongside daily operations. CBT Nuggets Virtual Labs provide a Splunk VM with a preconfigured data set for hands-on practice, and the course aligns with the Splunk Core Certified Power User certification, a practical next step for teams standardizing Splunk skills.
Splunk
Splunk Core Certified User
Many security and operations teams collect large volumes of machine data but lack a shared, repeatable way to search it and act on what they find. This course gives IT Directors and Training Managers a consistent Splunk baseline for SOC analysts, security analysts, SIEM users, and IT operations staff. Across 11 skills and about 9.3 hours, learners move from Splunk navigation and basic management into searching with indexes, hosts, and fields. They write foundational SPL, summarize data with the top, rare, and stats commands, and build reports, dashboards, lookups, scheduled reports, and alerts. All practice runs in an isolated lab loaded with realistic data from many system types, so no one touches production while they learn. The course aligns with the Splunk Core Certified User certification and fits teams adopting Splunk or moving past basic navigation into repeatable reporting. Assign it through Playlists, and use Team Reporting to track progress across your SOC and operations staff. The Splunk Core Certified Power User course is the natural next step.
Buyer proof
How Howard County's IT Department Upskilled 80 People, Protected a 600-Server Migration, and Kept Its Training Budget Intact
Local Government · Howard County, MD · 80 employees across 8 disciplines
CBT Nuggets gave Howard County's Department of Technology something bootcamps never could: the flexibility to train on their own time, in their own environments, with hands-on labs and practice exams that actually prepared staff for their everyday job.
- Physical servers migrated to HyperV virtual environments
- ~600
- Distinct technical disciplines under one department
- 8
- License engagement reported to leadership
- 100%
“I include our leadership, so they know that we're engaging with the training. When the budget comes and they see CBT Nuggets, they say: ‘Oh yeah. We keep that.’”
Elizabeth Nwadiuko
Technical Services Manager