-- Seed additional lesson content and questions for tasks 3-5

-- Task 3: Career Paths in Cybersecurity
INSERT INTO lesson_content (task_id, content, content_type, reading_time_minutes)
VALUES (3, '# Career Paths in Cybersecurity

The cybersecurity field offers diverse and rewarding career opportunities. As cyber threats continue to evolve, the demand for skilled professionals has never been higher.

## Popular Career Paths

### 1. Security Analyst (SOC Analyst)
SOC analysts are the first line of defense, monitoring security alerts and responding to incidents in real-time.

**Key Responsibilities:**
- Monitor security alerts and logs
- Investigate suspicious activities
- Respond to security incidents
- Create incident reports

**Skills Required:**
- Network traffic analysis
- SIEM tools (Splunk, QRadar)
- Incident response
- Understanding of attack patterns

**Average Salary:** $60,000 - $90,000/year

### 2. Penetration Tester (Ethical Hacker)
Pentesters simulate cyber attacks to find vulnerabilities before malicious actors do.

**Key Responsibilities:**
- Conduct vulnerability assessments
- Perform penetration testing
- Document findings and recommendations
- Work with development teams to fix issues

**Skills Required:**
- Knowledge of exploitation techniques
- Programming (Python, PowerShell, Bash)
- Tools like Metasploit, Burp Suite, Nmap
- Creative thinking

**Average Salary:** $80,000 - $120,000/year

### 3. Security Engineer
Security engineers design and implement security solutions to protect organizations.

**Key Responsibilities:**
- Design security architecture
- Implement security controls
- Configure firewalls and IDS/IPS
- Automate security processes

**Skills Required:**
- Network and system administration
- Cloud security (AWS, Azure, GCP)
- Scripting and automation
- Security frameworks

**Average Salary:** $90,000 - $140,000/year

### 4. Incident Response Specialist
These professionals handle security breaches and lead recovery efforts.

**Key Responsibilities:**
- Lead incident response efforts
- Conduct forensic analysis
- Contain and remediate threats
- Develop response procedures

**Skills Required:**
- Digital forensics
- Malware analysis
- Crisis management
- Communication skills

**Average Salary:** $85,000 - $130,000/year

### 5. Security Architect
Senior role focusing on overall security strategy and design.

**Key Responsibilities:**
- Design enterprise security architecture
- Develop security policies
- Evaluate new security technologies
- Mentor junior team members

**Skills Required:**
- Deep technical expertise
- Risk assessment
- Compliance frameworks
- Leadership skills

**Average Salary:** $120,000 - $180,000/year

## Career Progression Path

```
Entry Level (0-2 years)
→ Junior SOC Analyst
→ IT Support with Security Focus

Mid Level (2-5 years)
→ SOC Analyst
→ Security Engineer
→ Penetration Tester

Senior Level (5-10 years)
→ Senior Security Engineer
→ Incident Response Manager
→ Security Architect

Leadership (10+ years)
→ CISO (Chief Information Security Officer)
→ Director of Security
→ Security Consultant
```

## Essential Certifications

- **Entry Level:** CompTIA Security+, CEH (Certified Ethical Hacker)
- **Mid Level:** CISSP, OSCP, GIAC certifications
- **Advanced:** CISM, CISA, specialized vendor certs

## Getting Started

1. **Build foundational IT knowledge** - Understand networking, operating systems, and programming
2. **Get certified** - Start with CompTIA Security+ or similar
3. **Gain hands-on experience** - Use platforms like TryHackMe, HackTheBox
4. **Specialize** - Choose a path that aligns with your interests
5. **Network** - Join cybersecurity communities and attend conferences

The cybersecurity field rewards continuous learning and practical skills. Choose a path that excites you and start building your expertise today!', 'markdown', 12);

-- Questions for Task 3
INSERT INTO lesson_questions (task_id, question_text, correct_answer, question_order, hint, case_sensitive)
VALUES
(3, 'What is the primary responsibility of a SOC Analyst?', 'Monitor security alerts and respond to incidents', 1, 'Think about the first line of defense', false),
(3, 'Which certification is recommended for entry-level cybersecurity professionals?', 'CompTIA Security+', 2, 'Mentioned in the Essential Certifications section', false),
(3, 'What is the average salary range for a Penetration Tester?', '$80,000 - $120,000/year', 3, 'Look at the Penetration Tester section', false),
(3, 'What does CISO stand for?', 'Chief Information Security Officer', 4, 'This is a leadership position', false);

-- Task 4: Quiz: Cybersecurity Basics (This is a quiz, so we make it a comprehensive assessment)
INSERT INTO lesson_content (task_id, content, content_type, reading_time_minutes)
VALUES (4, '# Cybersecurity Basics Quiz

Congratulations on making it this far! This quiz will test your understanding of the fundamental cybersecurity concepts you''ve learned.

## Quiz Instructions

- Answer all questions to the best of your ability
- Each question tests your understanding of key concepts from previous lessons
- You need **70%** to pass this quiz
- Take your time and think carefully about each answer
- Hints are provided to help guide you

## Topics Covered

This quiz covers:
- Basic cybersecurity terminology
- Common threats and vulnerabilities
- Network security concepts
- Career paths in cybersecurity

Good luck! 🎯', 'markdown', 5);

-- Questions for Task 4 (Quiz)
INSERT INTO lesson_questions (task_id, question_text, correct_answer, question_order, hint, case_sensitive)
VALUES
(4, 'What is the practice of protecting systems, networks, and programs from digital attacks called?', 'Cybersecurity', 1, 'This is the most fundamental term', false),
(4, 'What type of attack floods a network with traffic to make it unavailable?', 'DDoS', 2, 'Stands for Distributed Denial of Service', false),
(4, 'Which protocol is used for secure web browsing?', 'HTTPS', 3, 'It uses port 443', false),
(4, 'What does the "C" in CIA triad stand for?', 'Confidentiality', 4, 'The three pillars of information security', false),
(4, 'What is software designed to harm or exploit computer systems called?', 'Malware', 5, 'Malicious software', false),
(4, 'What security tool monitors network traffic for suspicious activity?', 'IDS', 6, 'Intrusion Detection System', false);

-- Task 5: Setting Up Your Lab Environment
INSERT INTO lesson_content (task_id, content, content_type, reading_time_minutes)
VALUES (5, '# Setting Up Your Lab Environment

A hands-on cybersecurity lab is essential for practicing your skills safely. This lesson will guide you through setting up your own virtual security lab.

## Why You Need a Lab

- **Safe Practice:** Test tools and techniques without risks
- **Hands-on Learning:** Apply theoretical knowledge
- **Build Portfolio:** Document your projects
- **Stay Updated:** Test new exploits and defenses

## Lab Components

### 1. Virtualization Platform

Choose one of these free options:

**VirtualBox** (Recommended for beginners)
- Free and open-source
- Cross-platform (Windows, Mac, Linux)
- Easy to use
- Great community support

**VMware Workstation Player**
- Free for personal use
- Excellent performance
- Professional features

**Hyper-V** (Windows Pro/Enterprise only)
- Built into Windows
- Good performance
- Microsoft support

### 2. Operating Systems for Your Lab

**Kali Linux** - Essential for security testing
- Pre-loaded with 600+ security tools
- Based on Debian
- Regular updates
- Download from: kali.org

**Ubuntu Server** - For practicing Linux administration
- Widely used in enterprises
- Great documentation
- Stable and reliable

**Windows 10/11** - For understanding Windows security
- Test Windows-specific attacks
- Practice Active Directory
- Use evaluation versions

**Metasploitable 2/3** - Intentionally vulnerable systems
- Perfect for practicing exploitation
- Learn common vulnerabilities
- Safe testing environment

### 3. Essential Tools to Install

**Network Analysis:**
- Wireshark - Packet capture and analysis
- tcpdump - Command-line packet analyzer
- Nmap - Network scanner

**Web Application Testing:**
- Burp Suite - Web vulnerability scanner
- OWASP ZAP - Web app security scanner
- Nikto - Web server scanner

**Password Cracking:**
- John the Ripper - Password cracker
- Hashcat - Advanced password recovery
- Hydra - Network login cracker

**Exploitation:**
- Metasploit Framework - Penetration testing platform
- SQLmap - SQL injection tool
- BeEF - Browser exploitation

### 4. Network Configuration

**Create Isolated Network:**
1. Use Host-Only or NAT networks
2. Never expose vulnerable VMs to the internet
3. Use separate virtual switches for isolation

**Recommended Setup:**
```
[Kali Linux] ← → [Virtual Switch] ← → [Vulnerable Target]
      ↓
[Host-Only Network]
```

## Step-by-Step Setup Guide

### Step 1: Install VirtualBox
1. Download from virtualbox.org
2. Install with default settings
3. Install Extension Pack for extra features

### Step 2: Download Kali Linux
1. Get the VirtualBox image from kali.org
2. Import the .ova file into VirtualBox
3. Allocate at least 2GB RAM and 20GB storage

### Step 3: Configure Network
1. Set adapter 1 to NAT (internet access)
2. Add adapter 2 as Host-Only (isolated lab network)
3. Test connectivity

### Step 4: Update and Snapshot
```bash
sudo apt update && sudo apt upgrade -y
```
Take a snapshot before making changes!

### Step 5: Add Vulnerable Targets
1. Download Metasploitable 2
2. Import into VirtualBox
3. Connect to Host-Only network
4. Never connect to internet!

## Best Practices

✅ **DO:**
- Always use isolated networks
- Take regular snapshots
- Document your findings
- Keep your attacking machine updated
- Practice legally and ethically

❌ **DON''T:**
- Attack systems without permission
- Expose vulnerable VMs to the internet
- Use production networks for testing
- Skip documentation
- Forget to update your tools

## Resources for Practice

- **TryHackMe** - Guided learning paths
- **HackTheBox** - Advanced challenges
- **VulnHub** - Vulnerable VMs to download
- **PentesterLab** - Web security exercises

## Next Steps

1. Set up VirtualBox
2. Install Kali Linux
3. Add a vulnerable target VM
4. Start with basic Nmap scans
5. Progress to more advanced techniques

Remember: A well-configured lab is your playground for learning. Take time to set it up properly, and you''ll have a valuable resource for your entire cybersecurity career!', 'markdown', 15);

-- Questions for Task 5
INSERT INTO lesson_questions (task_id, question_text, correct_answer, question_order, hint, case_sensitive)
VALUES
(5, 'Which virtualization platform is recommended for beginners?', 'VirtualBox', 1, 'Free, cross-platform, and easy to use', false),
(5, 'What is the name of the Linux distribution pre-loaded with security tools?', 'Kali Linux', 2, 'Based on Debian with 600+ tools', false),
(5, 'What is Metasploitable?', 'Intentionally vulnerable system', 3, 'Used for practicing exploitation safely', false),
(5, 'Which network mode should you use to isolate vulnerable VMs?', 'Host-Only', 4, 'Creates an isolated network', false),
(5, 'What tool is used for packet capture and analysis?', 'Wireshark', 5, 'Essential for network analysis', false);
