Security+ Training Guide
Published on 7. April 2003
Book
Mixed media product
736 pages
978-0-7897-2836-4 (ISBN)
Description
The Security+ certification is CompTIA's response to membership requests to develop a foundation-level certification for security workers. The IT industry is in agreement that there is a need to better train, staff, and empower those tasked with designing and implementing information security, and Security+ is an effort to meet this demand. The exam is under consideration by Microsoft as the baseline security certification for Microsoft's new security certification initiative.
The Security+ Training Guide is a comprehensive resource for those preparing to take this exam, covering everything in a format that maps to the exam objectives. The book has been subjected to a rigorous technical review, ensuring content is superior in both coverage and technical accuracy.
The accompanying CD features PrepLogic (TM) Practice Tests, Preview Edition. This product includes one complete PrepLogic Practice Test with approximately the same number of questions found on the actual vendor exam. Each question contains full, detailed explanations of the correct and incorrect answers. The engine offers two study modes, Practice Test and Flash Review, full exam customization, and a detailed score report.
The Security+ Training Guide is a comprehensive resource for those preparing to take this exam, covering everything in a format that maps to the exam objectives. The book has been subjected to a rigorous technical review, ensuring content is superior in both coverage and technical accuracy.
The accompanying CD features PrepLogic (TM) Practice Tests, Preview Edition. This product includes one complete PrepLogic Practice Test with approximately the same number of questions found on the actual vendor exam. Each question contains full, detailed explanations of the correct and incorrect answers. The engine offers two study modes, Practice Test and Flash Review, full exam customization, and a detailed score report.
More details
Language
English
Place of publication
Upper Saddle River
United States
Publishing group
Pearson Education (US)
Target group
Professional and scholarly
Dimensions
Height: 205 mm
Width: 235 mm
Thickness: 43 mm
Weight
1370 gr
ISBN-13
978-0-7897-2836-4 (9780789728364)
Copyright in bibliographic data and cover images is held by Nielsen Book Services Limited or by the publishers or by their respective licensors: all rights reserved.
Schweitzer Classification
Persons
Todd King currently serves as Chief Executive Officer for SYS Consulting and Training, Inc., a Denver-based computer-consulting firm. He has specialized in several areas of networking, including network design, analysis, and security. Prior to starting SYS, Inc., Todd was in the United States Air Force as a survival instructor. He currently holds a B.S. in marketing from Florida State University and an A.A. Instructor of Technology and an A.A. in Survival and Rescue Operations from the Community College of the Air Force. His professional certifications include MCSE on Windows 2000, MCSE +Internet on NT 4, MCSA, MCT, CCNP, CCDP, CNX, A+, Net+, iNet+, CTT, and Security+.
Content
Introduction.
How This Book Helps You. What the Security+ Exam Covers. Hardware and Software Youll Need. Advice on Taking the Exam. Que Certification.
Study and Exam Prep Tips.
Learning Styles. Study Tips. Exam Prep Tips. Final Considerations.
I: EXAM PREPARATION.
1. General Security Concepts.
Introduction. A Brief History of Networks and Security. Basic Terminology. Access Control Techniques. Authentication Methods. Identifying Nonessential Services and Protocols. Attacks. Malicious Code. Social Engineering. Auditing.
2. Communication Security.
Introduction. Recognizing and Administering Remote and Wireless Access. Recognizing and Administering Security ControlsEmail Communications. Recognizing and Administering Security ControlsWeb Presence. Recognizing and Administering Security ControlsDirectory. Recognizing and Administering Security ControlsFile Transfer. Recognizing and Administering Security ControlsWireless. Recognizing Vulnerabilities and Taking ActionInstant Messaging.
3. Devices, Media, and Topology Security.
Introduction. Understanding the Basic Security Concepts of Network and System Devices. Understanding the Basic Security Concepts of Media. Understanding the Concepts of Security Topologies.
4. Intrusion Detection, Baselines, and Hardening.
Introduction. Network-Based Intrusion Detection. Host-Based Intrusion Detection. Honeypots. Incident Response. Understanding Security Baselines.
5. Cryptography Algorithms.
Introduction. Encryption Algorithms. Concepts of Using Encryption.
6. PKI and Key Management.
Introduction. Digital Certificates. Revocation. Trust Models. Identifying and Differentiating Standards and Protocols. Understanding and Explaining Key Management/Certificate Lifecycle.
7. Physical Security, Disaster Recovery, and Business Continuity.
Introduction. Physical Security. Disaster Recovery and Disaster Recovery Plans. Business Continuity.
8. Security Policy and Procedures.
Introduction. Security Policy.
9. Security Management.
Introduction. Privilege Management. Forensics. Risk Identification. Change Management. Awareness. Documentation.
II: FINAL REVIEW.
Fast Facts.
Introductory Note: Learn Key Terms! General Security Concepts. Communications Security. Infrastructure Security. Basics of Cryptography. Operational/Organizational Security.
Practice Exam.
Exam Questions. Answers to Exam Questions.
III: APPENDIXES.
Appendix A. Security Resources.
Appendix B. Glossary.
Appendix C. General Security Resources and Bibliography.
1. General Security Concepts. 2. Communication Security. 3. Devices, Media, and Topology Security. 4. Intrusion Detection, Baselines, and Hardening. 5. Cryptography Algorithms. 6. PKI and Key Management. 7. Physical Security, Disaster Recovery, and Business Continuity. 8. Security Policy and Procedures. 9. Security Management.
Appendix D. Overview of the Certification Process.
Description of the Path to Certification. About the Security+ Certification Program.
Appendix E. Whats on the CD-ROM.
PrepLogic Practice Tests, Preview Edition.
Appendix F. Using the PrepLogic Practice Tests, Preview Edition Software.
Exam Simulation. Question Quality. Interface Design. Effective Learning Environment. Software Requirements. Installing PrepLogic Practice Tests, Preview Edition. Removing PrepLogic Practice Tests, Preview Edition from Your Computer. Using PrepLogic Practice Tests, Preview Edition. Customer Service. Product Suggestions and Comments. License Agreement.
Index.
How This Book Helps You. What the Security+ Exam Covers. Hardware and Software Youll Need. Advice on Taking the Exam. Que Certification.
Study and Exam Prep Tips.
Learning Styles. Study Tips. Exam Prep Tips. Final Considerations.
I: EXAM PREPARATION.
1. General Security Concepts.
Introduction. A Brief History of Networks and Security. Basic Terminology. Access Control Techniques. Authentication Methods. Identifying Nonessential Services and Protocols. Attacks. Malicious Code. Social Engineering. Auditing.
2. Communication Security.
Introduction. Recognizing and Administering Remote and Wireless Access. Recognizing and Administering Security ControlsEmail Communications. Recognizing and Administering Security ControlsWeb Presence. Recognizing and Administering Security ControlsDirectory. Recognizing and Administering Security ControlsFile Transfer. Recognizing and Administering Security ControlsWireless. Recognizing Vulnerabilities and Taking ActionInstant Messaging.
3. Devices, Media, and Topology Security.
Introduction. Understanding the Basic Security Concepts of Network and System Devices. Understanding the Basic Security Concepts of Media. Understanding the Concepts of Security Topologies.
4. Intrusion Detection, Baselines, and Hardening.
Introduction. Network-Based Intrusion Detection. Host-Based Intrusion Detection. Honeypots. Incident Response. Understanding Security Baselines.
5. Cryptography Algorithms.
Introduction. Encryption Algorithms. Concepts of Using Encryption.
6. PKI and Key Management.
Introduction. Digital Certificates. Revocation. Trust Models. Identifying and Differentiating Standards and Protocols. Understanding and Explaining Key Management/Certificate Lifecycle.
7. Physical Security, Disaster Recovery, and Business Continuity.
Introduction. Physical Security. Disaster Recovery and Disaster Recovery Plans. Business Continuity.
8. Security Policy and Procedures.
Introduction. Security Policy.
9. Security Management.
Introduction. Privilege Management. Forensics. Risk Identification. Change Management. Awareness. Documentation.
II: FINAL REVIEW.
Fast Facts.
Introductory Note: Learn Key Terms! General Security Concepts. Communications Security. Infrastructure Security. Basics of Cryptography. Operational/Organizational Security.
Practice Exam.
Exam Questions. Answers to Exam Questions.
III: APPENDIXES.
Appendix A. Security Resources.
Appendix B. Glossary.
Appendix C. General Security Resources and Bibliography.
1. General Security Concepts. 2. Communication Security. 3. Devices, Media, and Topology Security. 4. Intrusion Detection, Baselines, and Hardening. 5. Cryptography Algorithms. 6. PKI and Key Management. 7. Physical Security, Disaster Recovery, and Business Continuity. 8. Security Policy and Procedures. 9. Security Management.
Appendix D. Overview of the Certification Process.
Description of the Path to Certification. About the Security+ Certification Program.
Appendix E. Whats on the CD-ROM.
PrepLogic Practice Tests, Preview Edition.
Appendix F. Using the PrepLogic Practice Tests, Preview Edition Software.
Exam Simulation. Question Quality. Interface Design. Effective Learning Environment. Software Requirements. Installing PrepLogic Practice Tests, Preview Edition. Removing PrepLogic Practice Tests, Preview Edition from Your Computer. Using PrepLogic Practice Tests, Preview Edition. Customer Service. Product Suggestions and Comments. License Agreement.
Index.