Mike Meyers CompTIA Security+ Certification Passport, Fourth Edition (Exam SY0-401)

Name: Mike Meyers CompTIA Security+ Certification Passport, Fourth Edition (Exam SY0-401)
Brand: McGraw-Hill Education
Price: 83.29 EUR
Availability: OnlineOnly

T. J. Samuelle Dawn Dunkerley(Autor*in)

McGraw-Hill Education (Verlag)

1. Auflage

Erschienen am 13. Mai 2014

496 Seiten

E-Book

ePUB mit Adobe-DRM

Systemvoraussetzungen

978-0-07-183217-5 (ISBN)

83,29 €inkl. 7% MwSt.

Systemvoraussetzungen

für ePUB mit Adobe-DRM

E-Book Einzellizenz

Als Download verfügbar

Beschreibung

Weitere Details

Weitere Ausgaben

Inhalt

Cover
Title Page
Copyright Page
Contents
Acknowledgments
Check-In
Part I: Organizational Security
Chapter 1: Organizational Security and Compliance
Objective 1.01 Explain Risk-Related Concepts
Risk Control Types
Risk Assessment
Risk Management Options
False Positives and Negatives
Use Organizational Policies to Reduce Risk
Objective 1.02 Implement Appropriate Risk Mitigation Strategies
Change Management Policy
Incident Management and Response Policy
Perform Routine Audits
User Rights and Permissions Reviews
Data Loss Prevention and Regulatory Compliance
Objective 1.03 Integrate with Third Parties
Interoperability Agreements
Privacy Considerations
Risk Awareness
Unauthorized Data Sharing
Data Ownerships
Data Backup
Verification of Adherence
Chapter 2: Security Training and Incident Response
Objective 2.01 Explain the Importance of Security-Related Awareness and Training
Accessing Policy Documentation
Data and Documentation Policies
Best Practices for User Habits
Objective 2.02 Analyze and Differentiate Among Types of Social Engineering Attacks
Phishing
Whaling
Shoulder Surfing
Tailgating
Pharming
Spim
Vishing
Spam
Hoaxes
Objective 2.03 Execute Appropriate Incident Response Procedures
Preparation
Incident Identification
First Responders
Incident Isolation
Damage and Loss Control
Escalation Policy
Reporting and Notification
Mitigation and Recovery Steps
Lessons Learned
Objective 2.04 Implement Basic Forensic Procedures
Collection and Preservation of Evidence
Chapter 3: Business Continuity and Disaster Recovery
Objective 3.01 Compare and Contrast Aspects of Business Continuity
Recovery Plans
Objective 3.02 Execute Disaster Recovery Plans and Procedures
High Availability and Redundancy Planning
Fault Tolerance
Objective 3.03 Select the Appropriate Control to Meet the Goals of Security
Objective 3.04 Explain the Impact and Proper Use of Environmental Controls
Facility Construction Issues
Environmental Issues
Cable Shielding
Fire Suppression
Part II: Cryptography
Chapter 4: Cryptography and Encryption Basics
Objective 4.01 Utilize the Concepts of Cryptography
Information Assurance
Algorithms
Steganography
Digital Signatures
Basic Hashing Concepts
Message Digest Hashing
Secure Hash Algorithm (SHA)
RIPEMD
HMAC
Objective 4.02 Use and Apply Appropriate Cryptographic Tools and Products
Symmetric Encryption Algorithms
Asymmetric Encryption Algorithms
One-Time Pad
Quantum Cryptography
Implementing Encryption Protocols
Wireless Encryption
Chapter 5: Public Key Infrastructure
Objective 5.01 Explain the Core Concepts of Public Key Infrastructure
Digital Certificates
Certificate Authorities
Trust Models
Key Management and Storage
Objective 5.02 Implement PKI, Certificate Management, and Associated Components
Certificate Lifecycle
Certificate Renewal
Part III: Access Control and Identity Management
Chapter 6: Access Control
Objective 6.01 Explain the Fundamental Concepts and Best Practices Related to Authentication, Authorization, and Access Control
Users and Resources
Access Control Best Practices
Access Control Models
Objective 6.02 Implement Appropriate Security Controls When Performing Account Management
User Account Policies
User Access Reviews
Credential Management
Security Roles and Privileges
File and Print Security Controls
Objective 6.03 Analyze and Differentiate Among Types of Mitigation and Deterrent Techniques
Physical Barriers
Lighting
Video Surveillance
Locks
Man-Trap
Security Guards
Access Logs
Personal Identification Verification Card
Smart Card
Common Access Card
Chapter 7: Authentication and Identity Management
Objective 7.01 Explain the Fundamental Concepts and Best Practices Related to Authentication, Authorization, and Access Control
Authentication Models
Authentication Methods
Objective 7.02 Explain the Function and Purpose of Authentication Services
PAP
CHAP
LANMAN
NTLM and NTLMv2
Extensible Authentication Protocol
RADIUS
LDAP
SAML
TACACS
Kerberos
802.1X
Certificates (Mutual Authentication)
HOTP/TOTP
Biometrics
Part IV: Network Security
Chapter 8: Securing Networks
Objective 8.01 Implement Security Functionality on Network Devices and Other Technologies
Firewalls
Routers
Switches
Load Balancers
Proxy Servers
All-in-One Security Appliances
Web Security Gateway
Intrusion Detection and Prevention
Application-Aware Devices
Protocol Analyzers
Objective 8.02 Explain Network Design Elements and Compounds
Security Zones
Network Security Techniques
Remote Access
Virtualization
Cloud Computing
Chapter 9: Secure Network Administration
Objective 9.01 Understand the OSI Model
Objective 9.02 Implement and Use Common Protocols
TCP/IP
ICMP
HTTP and HTTPS
Telnet
SSH
DNS
SNMP
IPSec
NetBIOS
iSCSI
Fibre Channel
Objective 9.03 Identify Commonly Used Default Network Ports
TCP/IP Network Ports
Objective 9.04 Analyze and Differentiate Among Types of Network Attacks
Denial of Service
Back Door
NULL Sessions
Spoofing
Smurf Attack
TCP/IP Hijacking
Man-in-the-Middle
Replay
Xmas Attack
DNS Poisoning
ARP Poisoning
Domain Kiting
Typosquatting
Client-side Attacks
Watering Hole Attack
Malicious Insider Threats
Objective 9.05 Apply and Implement Secure Network Administration Principles
Networking Device Configuration
Network Separation
Unified Threat Management
Network Device Threats and Risks
Network Device Hardening
Chapter 10: Securing Wireless Networks
Objective 10.01 Implement Wireless Networks in a Secure Manner
Wireless LAN Technologies
Wireless Access
Wireless Protocols
Securing Wireless Networks
Access Point Security
Service Set Identifier
MAC Address Filtering
Security
WPA and WPA2 Security
Wi-Fi Protected Setup
Wireless Authentication Protocols
VPN Wireless Access
Personal Firewall
Captive Portals
Objective 10.02 Analyze and Differentiate Among Types of Wireless Attacks
Data Emanation
Bluetooth Vulnerabilities
Near-Field Communication
War Driving
Access Points (Evil Twin)
War Chalking
Packet Sniffing and Eavesdropping
Replay Attacks
WPS Attacks
WEP/WPA Attacks
Part V: Application, Data, and Host Security
Chapter 11: Securing Host Systems
Objective 11.01 Analyze and Differentiate Among Types of Malware
Viruses
Trojan Horses
Worms
Adware and Spyware
Ransomware
Rootkits
Botnets
Objective 11.02 Carry Out Appropriate Procedures to Establish Host Security
Physical Hardware Security
Operating System Hardening
Host Security Applications
Virtualization
Objective 11.03 Understand Mobile Security Concepts and Technologies
Mobile Device Security
Protection from Theft
Protection from Users
BYOD Concerns
Chapter 12: Securing Applications and Data
Objective 12.01 Analyze and Differentiate Among Types of Application Attacks
Web Application Vulnerabilities
Internet Server Vulnerabilities
Objective 12.02 Explain the Importance of Application Security
Secure Coding Concepts
NoSQL vs. SQL Databases
Application Hardening
Objective 12.03 Explain the Importance of Data Security
Data Loss Prevention
Data Encryption
Cloud Storage
Storage Area Networks
Handling Big Data
Part VI: Threats and Vulnerabilities
Chapter 13: Monitoring for Security Threats
Objective 13.01 Analyze and Differentiate Among Types of Mitigation and Deterrent Techniques
Security Posture
Detecting Security-Related Anomalies
Monitoring Logs
System Auditing
Hardening the System
Network Security
Mitigating Threats in Alternative Environments
Chapter 14: Vulnerability Assessments
Objective 14.01 Implement Assessment Tools and Techniques to Discover Security Threats and Vulnerabilities
Vulnerability Assessment Tools
Objective 14.02 Within the Realm of Vulnerability Assessments, Explain the Proper Use of Penetration Testing Versus Vulnerability Scanning
White, Black, and Gray Box Testing
Appendix A: A About the Download
System Requirements
Installing and Running Total Tester
About Total Tester
Technical Support
Appendix B: Career Flight Path
CompTIA Security+ Exam Format
CompTIA Security+ and Beyond
Getting the Latest Information on the CompTIA Security+ Exam
Index

Systemvoraussetzungen

Als PDF speichern Als Link merken