
CompTIA CySA+ Study Guide
Description
Alles über E-Books | Antworten auf Fragen rund um E-Books, Kopierschutz und Dateiformate finden Sie in unserem Info- & Hilfebereich.
Where can you find 100% coverage of the revised CompTIA Cybersecurity Analyst+ (CySA+) exam objectives? It's all in the CompTIA CySA+ Study Guide Exam CS0-002, Second Edition! This guide provides clear and concise information on crucial security topics. You'll be able to gain insight from practical, real-world examples, plus chapter reviews and exam highlights. Turn to this comprehensive resource to gain authoritative coverage of a range of security subject areas.
* Review threat and vulnerability management topics
* Expand your knowledge of software and systems security
* Gain greater understanding of security operations and monitoring
* Study incident response information
* Get guidance on compliance and assessment
The CompTIA CySA+ Study Guide, Second Edition connects you to useful study tools that help you prepare for the exam. Gain confidence by using its interactive online test bank with hundreds of bonus practice questions, electronic flashcards, and a searchable glossary of key cybersecurity terms. You also get access to hands-on labs and have the opportunity to create a cybersecurity toolkit.
Leading security experts, Mike Chapple and David Seidl, wrote this valuable guide to help you prepare to be CompTIA Security+ certified. If you're an IT professional who has earned your CompTIA Security+ certification, success on the CySA+ (Cybersecurity Analyst) exam stands as an impressive addition to your professional credentials. Preparing and taking the CS0-002exam can also help you plan for advanced certifications, such as the CompTIA Advanced Security Practitioner (CASP+).
More details
Other editions
New editions

Additional editions

Persons
DAVID SEIDL, CySA+, CISSP, PenTest+, is Vice President for Information Technology and CIO at Miami University. David co-led Notre Dame's move to the cloud, and has written multiple cybersecurity certification books.
Content
- Cover
- Title Page
- Copyright Page
- Acknowledgments
- About the Authors
- About the Technical Editor
- Contents at a Glance
- Contents
- Introduction
- Assessment Test
- Chapter 1 Today's Cybersecurity Analyst
- Cybersecurity Objectives
- Privacy vs. Security
- Evaluating Security Risks
- Identify Threats
- Identify Vulnerabilities
- Determine Likelihood, Impact, and Risk
- Reviewing Controls
- Building a Secure Network
- Network Access Control
- Firewalls and Network Perimeter Security
- Network Segmentation
- Defense Through Deception
- Secure Endpoint Management
- Hardening System Configurations
- Patch Management
- Group Policies
- Endpoint Security Software
- Penetration Testing
- Planning a Penetration Test
- Conducting Discovery
- Executing a Penetration Test
- Communicating Penetration Test Results
- Training and Exercises
- Reverse Engineering
- Isolation and Sandboxing
- Reverse-Engineering Software
- Reverse-Engineering Hardware
- The Future of Cybersecurity Analytics
- Summary
- Exam Essentials
- Lab Exercises
- Activity 1.1: Create an Inbound Firewall Rule
- Activity 1.2: Create a Group Policy Object
- Activity 1.3: Write a Penetration Testing Plan
- Activity 1.4: Recognize Security Tools
- Review Questions
- Chapter 2 Using Threat Intelligence
- Threat Data and Intelligence
- Open Source Intelligence
- Proprietary and Closed Source Intelligence
- Assessing Threat Intelligence
- Threat Indicator Management and Exchange
- The Intelligence Cycle
- The Threat Intelligence Community
- Threat Classification
- Threat Actors
- Threat Classification
- Threat Research and Modeling
- Attack Frameworks
- MITRE's ATT&CK Framework
- The Diamond Model of Intrusion Analysis
- Lockheed Martin's Cyber Kill Chain
- The Unified Kill Chain
- Common Vulnerability Scoring System (CVSS)
- Applying Threat Intelligence Organizationwide
- Proactive Threat Hunting
- Summary
- Exam Essentials
- Lab Exercises
- Activity 2.1: Explore the ATT&CK Framework
- Activity 2.2: Set Up a STIX/TAXII Feed
- Activity 2.3: Intelligence Gathering Techniques
- Review Questions
- Chapter 3 Reconnaissance and Intelligence Gathering
- Mapping and Enumeration
- Active Reconnaissance
- Mapping Networks and Discovering Topology
- Pinging Hosts
- Port Scanning and Service Discovery Techniques and Tools
- Passive Footprinting
- Log and Configuration Analysis
- Harvesting Data from DNS and Whois
- Responder
- Information Aggregation and Analysis Tools
- Information Gathering Using Packet Capture
- Gathering Organizational Intelligence
- Organizational Data
- Electronic Document Harvesting
- Detecting, Preventing, and Responding to Reconnaissance
- Capturing and Analyzing Data to Detect Reconnaissance
- Preventing Reconnaissance
- Summary
- Exam Essentials
- Lab Exercises
- Activity 3.1: Port Scanning
- Activity 3.2: Write an Intelligence Gathering Plan
- Activity 3.3: Intelligence Gathering Techniques
- Review Questions
- Chapter 4 Designing a Vulnerability Management Program
- Identifying Vulnerability Management Requirements
- Regulatory Environment
- Corporate Policy
- Identifying Scan Targets
- Determining Scan Frequency
- Active vs. Passive Scanning
- Configuring and Executing Vulnerability Scans
- Scoping Vulnerability Scans
- Configuring Vulnerability Scans
- Scanner Maintenance
- Developing a Remediation Workflow
- Reporting and Communication
- Prioritizing Remediation
- Testing and Implementing Fixes
- Delayed Remediation Options
- Overcoming Risks of Vulnerability Scanning
- Vulnerability Scanning Tools
- Infrastructure Vulnerability Scanning
- Web Application Scanning
- Interception Proxies
- Wireless Assessment Tools
- Summary
- Exam Essentials
- Lab Exercises
- Activity 4.1: Install a Vulnerability Scanner
- Activity 4.2: Run a Vulnerability Scan
- Review Questions
- Chapter 5 Analyzing Vulnerability Scans
- Reviewing and Interpreting Scan Reports
- Understanding CVSS
- Validating Scan Results
- False Positives
- Documented Exceptions
- Understanding Informational Results
- Reconciling Scan Results with Other Data Sources
- Trend Analysis
- Common Vulnerabilities
- Server and Endpoint Vulnerabilities
- Network Vulnerabilities
- Virtualization Vulnerabilities
- Internet of Things (IoT)
- Web Application Vulnerabilities
- Authentication Vulnerabilities
- Summary
- Exam Essentials
- Lab Exercises
- Activity 5.1: Interpret a Vulnerability Scan
- Activity 5.2: Analyze a CVSS Vector
- Activity 5.3: Remediate a Vulnerability
- Review Questions
- Chapter 6 Cloud Security
- Understanding Cloud Environments
- The Case for Cloud Computing
- Cloud Service Models
- Cloud Deployment Models
- Operating in the Cloud
- DevOps Strategies
- Infrastructure as Code (IaC)
- Application Programming Interfaces
- Cloud Monitoring
- Cloud Infrastructure Security
- Cloud Infrastructure Security Tools
- Cloud Access Security Brokers (CASB)
- Summary
- Exam Essentials
- Lab Exercises
- Activity 6.1: Run a ScoutSuite Assessment
- Activity 6.2: Explore the Exploits Available with Pacu
- Activity 6.3: Scan an AWS Account with Prowler
- Review Questions
- Chapter 7 Infrastructure Security and Controls
- Understanding Defense-in-Depth
- Layered Security
- Zero Trust
- Segmentation
- Network Architecture
- Physical Network Architectures
- Software-Defined Networks
- Virtualization
- Asset and Change Management
- Logging, Monitoring, and Validation
- Encryption
- Active Defense
- Infrastructure Security and the Cloud
- Improving Security by Improving Controls
- Layered Host Security
- Permissions
- Whitelisting and Blacklisting
- Technical Controls
- Policy, Process, and Standards
- Analyzing Security Architecture
- Analyzing Security Requirements
- Reviewing Architecture
- Common Issues
- Reviewing a Security Architecture
- Maintaining a Security Design
- Summary
- Exam Essentials
- Lab Exercises
- Activity 7.1: Review an Application Using the OWASP Attack Surface Analysis Cheat Sheet
- Activity 7.2: Review a NIST Security Architecture
- Activity 7.3: Security Architecture Terminology
- Review Questions
- Chapter 8 Identity and Access Management Security
- Understanding Identity
- Identity Systems and Security Design
- Threats to Identity and Access
- Understanding Security Issues with Identities
- Attacking AAA Systems and Protocols
- Targeting Account Creation, Provisioning, and Deprovisioning
- Preventing Common Exploits of Identity and Authorization
- Acquiring Credentials
- Identity as a Security Layer
- Identity and Defense-in-Depth
- Securing Authentication and Authorization
- Detecting Attacks and Security Operations
- Federation and Single Sign-On
- Federated Identity Security Considerations
- Federated Identity Design Choices
- Federated Identity Technologies
- Federation Incident Response
- Summary
- Exam Essentials
- Lab Exercises
- Activity 8.1: Federated Security Scenario
- Activity 8.2: On-site Identity Issues Scenario
- Activity 8.3: Identity and Access Management Terminology
- Review Questions
- Chapter 9 Software and Hardware Development Security
- Software Assurance Best Practices
- The Software Development Life Cycle
- Software Development Phases
- Software Development Models
- DevSecOps and DevOps
- Designing and Coding for Security
- Common Software Development Security Issues
- Security Implications of Target Platforms
- Secure Coding Best Practices
- API Security
- Service-Oriented Architectures
- Application Testing
- Information Security and the SDLC
- Code Review Models
- Software Security Testing
- Software Assessment: Testing and Analyzing Code
- Web Application Vulnerability Scanning
- Hardware Assurance Best Practices
- Cryptographic Hardware
- Firmware Security
- Hardware Security
- Summary
- Exam Essentials
- Lab Exercises
- Activity 9.1: Review an Application Using the OWASP Application Security Architecture Cheat Sheet
- Activity 9.2: Learn About Web Application Exploits from WebGoat
- Activity 9.3: SDLC Terminology
- Review Questions
- Chapter 10 Security Operations and Monitoring
- Security Monitoring
- Analyzing Security Data
- Logs
- Endpoint Data Analysis
- Network Data Analysis
- Protecting and Analyzing Email
- Scripting, Searching, and Text Manipulation
- Summary
- Exam Essentials
- Lab Exercises
- Activity 10.1: Analyze a Network Capture File
- Activity 10.2: Analyze a Phishing Email
- Activity 10.3: Security Architecture Terminology
- Review Questions
- Chapter 11 Building an Incident Response Program
- Security Incidents
- Phases of Incident Response
- Preparation
- Detection and Analysis
- Containment, Eradication, and Recovery
- Postincident Activity
- Building the Foundation for Incident Response
- Policy
- Procedures and Playbooks
- Documenting the Incident Response Plan
- Creating an Incident Response Team
- Incident Response Providers
- CSIRT Scope of Control
- Coordination and Information Sharing
- Internal Communications
- External Communications
- Classifying Incidents
- Threat Classification
- Severity Classification
- Summary
- Exam Essentials
- Lab Exercises
- Activity 11.1: Incident Severity Classification
- Activity 11.2: Incident Response Phases
- Activity 11.3: Develop an Incident Communications Plan
- Review Questions
- Chapter 12 Analyzing Indicators of Compromise
- Analyzing Network Events
- Capturing Network-Related Events
- Network Monitoring Tools
- Detecting Common Network Issues
- Detecting Scans and Probes
- Detecting Denial-of-Service and Distributed Denial-of-Service Attacks
- Detecting Other Network Attacks
- Detecting and Finding Rogue Devices
- Investigating Host-Related Issues
- System Resources
- Malware, Malicious Processes, and Unauthorized Software
- Unauthorized Access, Changes, and Privileges
- Investigating Service and Application-Related Issues
- Application and Service Monitoring
- Application and Service Issue Response and Restoration
- Detecting Attacks on Applications
- Summary
- Exam Essentials
- Lab Exercises
- Activity 12.1: Identify a Network Scan
- Activity 12.2: Write a Service Issue Response Plan
- Activity 12.3: Security Tools
- Review Questions
- Chapter 13 Performing Forensic Analysis and Techniques
- Building a Forensics Capability
- Building a Forensic Toolkit
- Understanding Forensic Software
- Capabilities and Application
- Conducting Endpoint Forensics
- Operating System, Process, and Memory Dump Analysis
- Network Forensics
- Cloud, Virtual, and Container Forensics
- Conducting a Forensic Investigation
- Forensic Procedures
- Target Locations
- Acquiring and Validating Drive Images
- Imaging Live Systems
- Acquiring Other Data
- Forensic Investigation: An Example
- Importing a Forensic Image
- Analyzing the Image
- Reporting
- Summary
- Exam Essentials
- Lab Exercises
- Activity 13.1: Create a Disk Image
- Activity 13.2: Conduct the NIST Rhino Hunt
- Activity 13.3: Security Tools
- Review Questions
- Chapter 14 Containment, Eradication, and Recovery
- Containing the Damage
- Segmentation
- Isolation
- Removal
- Evidence Gathering and Handling
- Identifying Attackers
- Incident Eradication and Recovery
- Reconstruction and Reimaging
- Patching Systems and Applications
- Sanitization and Secure Disposal
- Validating the Recovery Effort
- Wrapping Up the Response
- Managing Change Control Processes
- Conducting a Lessons Learned Session
- Developing a Final Report
- Evidence Retention
- Summary
- Exam Essentials
- Lab Exercises
- Activity 14.1: Incident Containment Options
- Activity 14.2: Incident Response Activities
- Activity 14.3: Sanitization and Disposal Techniques
- Review Questions
- Chapter 15 Risk Management
- Analyzing Risk
- Risk Identification
- Risk Calculation
- Business Impact Analysis
- Managing Risk
- Risk Mitigation
- Risk Avoidance
- Risk Transference
- Risk Acceptance
- Security Controls
- Nontechnical Controls
- Technical Controls
- Summary
- Exam Essentials
- Lab Exercises
- Activity 15.1: Risk Management Strategies
- Activity 15.2: Risk Identification and Assessment
- Activity 15.3: Risk Management
- Review Questions
- Chapter 16 Policy and Compliance
- Understanding Policy Documents
- Policies
- Standards
- Procedures
- Guidelines
- Exceptions and Compensating Controls
- Complying with Laws and Regulations
- Adopting a Standard Framework
- NIST Cybersecurity Framework
- ISO 27001
- Control Objectives for Information and Related Technologies (COBIT)
- Information Technology Infrastructure Library (ITIL)
- Implementing Policy-Based Controls
- Security Control Categories
- Security Control Types
- Security Control Verification and Quality Control
- Summary
- Exam Essentials
- Lab Exercises
- Activity 16.1: Policy Documents
- Activity 16.2: Using a Cybersecurity Framework
- Activity 16.3: Compliance Auditing Tools
- Review Questions
- Appendix A Practice Exam
- Exam Questions
- Appendix B Answers to Review Questions and Practice Exam
- Chapter 1: Today's CybersecurityAnalyst
- Chapter 2: Using Threat Intelligence
- Chapter 3: Reconnaissanceand Intelligence Gathering
- Chapter 4: Designing a VulnerabilityManagement Program
- Chapter 5: Analyzing Vulnerability Scans
- Chapter 6: Cloud Security
- Chapter 7: Infrastructure Securityand Controls
- Chapter 8: Identity and AccessManagement Security
- Chapter 9: Software and HardwareDevelopment Security
- Chapter 10: Security Operationsand Monitoring
- Chapter 11: Building an IncidentResponse Program
- Chapter 12: Analyzing Indicatorsof Compromise
- Chapter 13: Performing ForensicAnalysis and Techniques
- Chapter 14: Containment, Eradication,and Recovery
- Chapter 15: Risk Management
- Chapter 16: Policy and Compliance
- Practice Exam Answers
- Appendix C Answers to Lab Exercises
- Chapter 1: Today's Cybersecurity Analyst
- Solution to Activity 1.4: Recognize Security Tools
- Chapter 2: Using Threat Intelligence
- Solution to Activity 2.3: Intelligence Gathering Techniques
- Chapter 3: Reconnaissance and Intelligence Gathering
- Solution to Activity 3.3: Intelligence Gathering Tools
- Chapter 5: Analyzing Vulnerability Scans
- Solution to Activity 5.2: Analyze a CVSS Vector
- Chapter 7: Infrastructure Security and Controls
- Solution to Activity 7.3: Security Architecture Terminology
- Chapter 8: Identity and Access Management Security
- Solution to Activity 8.1: Federated Security Scenario
- Solution to Activity 8.2: On-site Identity Issues Scenario
- Solution to Activity 8.3: Identity and Access Management Terminology
- Chapter 9: Software and Hardware Development Security
- Solution to Activity 9.3: Security Tools
- Chapter 10: Security Operations and Monitoring
- Solution to Activity 10.3: Security Architecture Terminology
- Chapter 11: Building an Incident Response Program
- Solution to Activity 11.1: Incident Severity Classification
- Solution to Activity 11.2: Incident Response Phases
- Chapter 12: Analyzing Indicators of Compromise
- Solution to Activity 12.3: Security Tools
- Chapter 13: Performing Forensic Analysis and Techniques
- Solution to Activity 13.2: Conduct the NIST Rhino Hunt
- Solution to Activity 13.3: Security Tools
- Chapter 14: Containment, Eradication, and Recovery
- Solution to Activity 14.1: Incident Containment Options
- Solution to Activity 14.2: Incident Response Activities
- Solution to Activity 14.3: Sanitization and Disposal Techniques
- Chapter 15: Risk Management
- Solution to Activity 15.1: Risk Management Strategies
- Chapter 16: Policy and Compliance
- Solution to Activity 16.1: Policy Documents
- Solution to Activity 16.3: Compliance Auditing Tools
- Index
- Get Certified!
- EULA
Introduction
CompTIA Cybersecurity Analyst (CySA+) Study Guide, Second Edition, provides accessible explanations and real-world knowledge about the exam objectives that make up the Cybersecurity Analyst+ certification. This book will help you to assess your knowledge before taking the exam, as well as provide a stepping-stone to further learning in areas where you may want to expand your skillset or expertise.
Before you tackle the CySA+, you should already be a security practitioner. CompTIA suggests that test takers have about four years of existing hands-on information security experience. You should also be familiar with at least some of the tools and techniques described in this book. You don't need to know every tool, but understanding how to approach a new scenario, tool, or technology that you may not know using existing experience is critical to passing the CySA+ exam.
For up-to-the-minute updates covering additions or modifications to the CompTIA certification exams, as well as additional study tools, videos, practice questions, and bonus material, be sure to visit the Sybex website and forum at www.sybex.com.
CompTIA
CompTIA is a nonprofit trade organization that offers certification in a variety of IT areas, ranging from the skills that a PC support technician needs, which are covered in the A+ exam, to advanced certifications like the CompTIA Advanced Security Practitioner (CASP) certification.
CompTIA recommends that practitioners follow a cybersecurity career path as shown here:
The Cybersecurity Analyst+ exam is a more advanced exam, intended for professionals with hands-on experience and who possess the knowledge covered by the prior exams.
CompTIA certifications are ISO and ANSI accredited, and they are used throughout multiple industries as a measure of technical skill and knowledge. In addition, CompTIA certifications, including the CySA+, the Security+, and the CASP certifications, have been approved by the U.S. government as Information Assurance baseline certifications and are included in the State Department's Skills Incentive Program.
The Cybersecurity Analyst+ Exam
The Cybersecurity Analyst+ exam, which CompTIA refers to as CySA+, is designed to be a vendor-neutral certification for cybersecurity, threat, and vulnerability analysts. The CySA+ certification is designed for security analysts and engineers as well as security operations center (SOC) staff, vulnerability analysts, and threat intelligence analysts. It focuses on security analytics and practical use of security tools in real-world scenarios. It covers five major domains: Threat and Vulnerability Management, Software and Systems Security, Security Operations and Monitoring, Incident Response, and Compliance and Assessment. These five areas include a range of topics, from reconnaissance to incident response and forensics, while focusing heavily on scenario-based learning.
The CySA+ exam fits between the entry-level Security+ exam and the CompTIA Advanced Security Practitioner (CASP) certification, providing a mid-career certification for those who are seeking the next step in their certification and career path.
The CySA+ exam is conducted in a format that CompTIA calls "performance-based assessment." This means that the exam uses hands-on simulations using actual security tools and scenarios to perform tasks that match those found in the daily work of a security practitioner. Exam questions may include multiple types of questions such as multiple-choice, fill-in-the-blank, multiple-response, drag-and-drop, and image-based problems.
CompTIA recommends that test takers have four years of information security-related experience before taking this exam. The exam costs $359 in the United States, with roughly equivalent prices in other locations around the globe. More details about the CySA+ exam and how to take it can be found at certification.comptia.org/certifications/cybersecurity-analyst.
Study and Exam Preparation Tips
A test preparation book like this cannot teach you every possible security software package, scenario, or specific technology that may appear on the exam. Instead, you should focus on whether you are familiar with the type or category of technology, tool, process, or scenario as you read the book. If you identify a gap, you may want to find additional tools to help you learn more about those topics.
CompTIA recommends the use of NetWars-style simulations, penetration testing and defensive cybersecurity simulations, and incident response training to prepare for the CySA+.
Additional resources for hands-on exercises include the following:
Exploit-Exercises.comprovides virtual machines, documentation, and challenges covering a wide range of security issues atexploit-exercises.lains.space.- Hacking-Lab provides capture the flag (CTF) exercises in a variety of fields at
www.hacking-lab.com/index.html. - PentesterLab provides a subscription-based access to penetration testing exercises at
www.pentesterlab.com/exercises/. - The InfoSec Institute provides online CTF activities with bounties for written explanations of successful hacks at
ctf.infosecinstitute.com.
Since the exam uses scenario-based learning, expect the questions to involve analysis and thought, rather than relying on simple memorization. As you might expect, it is impossible to replicate that experience in a book, so the questions here are intended to help you be confident that you know the topic well enough to think through hands-on exercises.
Taking the Exam
Once you are fully prepared to take the exam, you can visit the CompTIA website to purchase your exam voucher:
www.comptiastore.com/Articles.asp?ID=265&category=vouchers
CompTIA partners with Pearson VUE's testing centers, so your next step will be to locate a testing center near you. In the United States, you can do this based on your address or your ZIP code, while non-U.S. test takers may find it easier to enter their city and country. You can search for a test center near you at the Pearson Vue website, where you will need to navigate to "Find a test center."
Now that you know where you'd like to take the exam, simply set up a Pearson VUE testing account and schedule an exam:
https://www.comptia.org/testing/testing-options/take-in-person-exam
On the day of the test, take two forms of identification, and make sure to show up with plenty of time before the exam starts. Remember that you will not be able to take your notes, electronic devices (including smartphones and watches), or other materials in with you.
After the Cybersecurity Analyst+ Exam
Once you have taken the exam, you will be notified of your score immediately, so you'll know if you passed the test right away. You should keep track of your score report with your exam registration records and the email address you used to register for the exam.
Maintaining Your Certification
CompTIA certifications must be renewed on a periodic basis. To renew your certification, you can either pass the most current version of the exam, earn a qualifying higher-level CompTIA or industry certification, or complete sufficient continuing education activities to earn enough continuing education units (CEUs) to renew it.
CompTIA provides information on renewals via their website at
www.comptia.org/continuing-education
When you sign up to renew your certification, you will be asked to agree to the CE program's Code of Ethics, pay a renewal fee, and submit the materials required for your chosen renewal method.
A full list of the industry certifications you can use to acquire CEUs toward renewing the CySA+ can be found at
What Does This Book Cover?
This book is designed to cover the five domains included in the CySA+.
- Chapter 1: Today's Cybersecurity Analyst The book starts by teaching you how to assess cybersecurity threats, as well as how to evaluate and select controls to keep your networks and systems secure.
- Chapter 2: Using Threat Intelligence Security professionals need to fully understand threats in order to prevent them or to limit their impact. In this chapter, you will learn about the many types of threat intelligence, including sources and means of assessing the relevance and accuracy of a given threat intelligence source. You'll also discover how to use threat intelligence in your organization.
- Chapter 3: Reconnaissance and Intelligence Gathering Gathering information about an organization and its systems is one of the things that both attackers and defenders do. In this chapter, you will learn how to acquire intelligence about an organization using popular tools and techniques. You will also learn how to limit the impact of intelligence gathering performed against your own organization.
- Chapter 4: Designing a Vulnerability Management Program Managing vulnerabilities helps to keep your systems secure. In this chapter, you will learn how to identify, prioritize,...
System requirements
File format: ePUB
Copy protection: Adobe-DRM (Digital Rights Management)
System requirements:
- Computer (Windows; MacOS X; Linux): Install the free reader Adobe Digital Editions prior to download (see eBook Help).
- Tablet/smartphone (Android; iOS): Install the free app Adobe Digital Editions or the app PocketBook before downloading (see eBook Help).
- E-reader: Bookeen, Kobo, Pocketbook, Sony, Tolino and many more (not Kindle).
The file format ePub works well for novels and non-fiction books – i.e., „flowing” text without complex layout. On an e-reader or smartphone, line and page breaks automatically adjust to fit the small displays.
This eBook uses Adobe-DRM, a „hard” copy protection. If the necessary requirements are not met, unfortunately you will not be able to open the eBook. You will therefore need to prepare your reading hardware before downloading.
Please note: We strongly recommend that you authorise using your personal Adobe ID after installation of any reading software.
For more information, see our ebook Help page.