CompTIA Cybersecurity Analyst (CySA+) CS0-002 Cert Guide (2nd Edition) (Certification Guide)

About This eBook
Title Page
Copyright Page
Contents at a Glance
Table of Contents
About the Author
Dedication
Acknowledgments
About the Technical Reviewer
We Want to Hear from You!
Reader Services
Introduction
	Goals and Methods
	Who Should Read This Book?
	Strategies for Exam Preparation
	How the Book Is Organized
	Book Features
	What’s New?
	The Companion Website for Online Content Review
	How to Access the Pearson Test Prep Practice Test Software
	Customizing Your Exams
Credits
Chapter 1 The Importance of Threat Data and Intelligence
	“Do I Know This Already?” Quiz
	Foundation Topics
	Intelligence Sources
	Indicator Management
	Threat Classification
	Threat Actors
	Intelligence Cycle
	Commodity Malware
	Information Sharing and Analysis Communities
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Review Questions
Chapter 2 Utilizing Threat Intelligence to Support Organizational Security
	“Do I Know This Already?” Quiz
	Foundation Topics
	Attack Frameworks
	Threat Research
	Threat Modeling Methodologies
	Threat Intelligence Sharing with Supported Functions
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Review Questions
Chapter 3 Vulnerability Management Activities
	“Do I Know This Already?” Quiz
	Foundation Topics
	Vulnerability Identification
	Validation
	Remediation/Mitigation
	Scanning Parameters and Criteria
	Inhibitors to Remediation
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Review Questions
Chapter 4 Analyzing Assessment Output
	“Do I Know This Already?” Quiz
	Foundation Topics
	Web Application Scanner
	Infrastructure Vulnerability Scanner
	Software Assessment Tools and Techniques
	Enumeration
	Wireless Assessment Tools
	Cloud Infrastructure Assessment Tools
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Review Questions
Chapter 5 Threats and Vulnerabilities Associated with Specialized Technology
	“Do I Know This Already?” Quiz
	Foundation Topics
	Mobile
	Internet of Things (IoT)
	Embedded Systems
	Real-Time Operating System (RTOS)
	System-on-Chip (SoC)
	Field Programmable Gate Array (FPGA)
	Physical Access Control
	Building Automation Systems
	Vehicles and Drones
	Workflow and Process Automation Systems
	Incident Command System (ICS)
	Supervisory Control and Data Acquisition (SCADA)
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Review Questions
Chapter 6 Threats and Vulnerabilities Associated with Operating in the Cloud
	“Do I Know This Already?” Quiz
	Foundation Topics
	Cloud Deployment Models
	Cloud Service Models
	Function as a Service (FaaS)/Serverless Architecture
	Infrastructure as Code (IaC)
	Insecure Application Programming Interface (API)
	Improper Key Management
	Unprotected Storage
	Logging and Monitoring
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Review Questions
Chapter 7 Implementing Controls to Mitigate Attacks and Software Vulnerabilities
	“Do I Know This Already?” Quiz
	Foundation Topics
	Attack Types
	Vulnerabilities
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Review Questions
Chapter 8 Security Solutions for Infrastructure Management
	“Do I Know This Already?” Quiz
	Foundation Topics
	Cloud vs. On-premises
	Asset Management
	Segmentation
	Network Architecture
	Change Management
	Virtualization
	Containerization
	Identity and Access Management
	Cloud Access Security Broker (CASB)
	Honeypot
	Monitoring and Logging
	Encryption
	Certificate Management
	Active Defense
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Review Questions
Chapter 9 Software Assurance Best Practices
	“Do I Know This Already?” Quiz
	Foundation Topics
	Platforms
	Software Development Life Cycle (SDLC) Integration
	DevSecOps
	Software Assessment Methods
	Secure Coding Best Practices
	Static Analysis Tools
	Dynamic Analysis Tools
	Formal Methods for Verification of Critical Software
	Service-Oriented Architecture
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Review Questions
Chapter 10 Hardware Assurance Best Practices
	“Do I Know This Already?” Quiz
	Foundation Topics
	Hardware Root of Trust
	eFuse
	Unified Extensible Firmware Interface (UEFI)
	Trusted Foundry
	Secure Processing
	Anti-Tamper
	Self-Encrypting Drives
	Trusted Firmware Updates
	Measured Boot and Attestation
	Bus Encryption
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Review Questions
Chapter 11 Analyzing Data as Part of Security Monitoring Activities
	“Do I Know This Already?” Quiz
	Foundation Topics
	Heuristics
	Trend Analysis
	Endpoint
	Network
	Log Review
	Impact Analysis
	Security Information and Event Management (SIEM) Review
	Query Writing
	E-mail Analysis
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Review Questions
Chapter 12 Implementing Configuration Changes to Existing Controls to Improve Security
	“Do I Know This Already?” Quiz
	Foundation Topics
	Permissions
	Whitelisting and Blacklisting
	Firewall
	Intrusion Prevention System (IPS) Rules
	Data Loss Prevention (DLP)
	Endpoint Detection and Response (EDR)
	Network Access Control (NAC)
	Sinkholing
	Malware Signatures
	Sandboxing
	Port Security
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Review Questions
Chapter 13 The Importance of Proactive Threat Hunting
	“Do I Know This Already?” Quiz
	Foundation Topics
	Establishing a Hypothesis
	Profiling Threat Actors and Activities
	Threat Hunting Tactics
	Reducing the Attack Surface Area
	Bundling Critical Assets
	Attack Vectors
	Integrated Intelligence
	Improving Detection Capabilities
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Review Questions
Chapter 14 Automation Concepts and Technologies
	“Do I Know This Already?” Quiz
	Foundation Topics
	Workflow Orchestration
	Scripting
	Application Programming Interface (API) Integration
	Automated Malware Signature Creation
	Data Enrichment
	Threat Feed Combination
	Machine Learning
	Use of Automation Protocols and Standards
	Continuous Integration
	Continuous Deployment/Delivery
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Review Questions
Chapter 15 The Incident Response Process
	“Do I Know This Already?” Quiz
	Foundation Topics
	Communication Plan
	Response Coordination with Relevant Entities
	Factors Contributing to Data Criticality
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Review Questions
Chapter 16 Applying the Appropriate Incident Response Procedure
	“Do I Know This Already?” Quiz
	Foundation Topics
	Preparation
	Detection and Analysis
	Containment
	Eradication and Recovery
	Post-Incident Activities
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Review Questions
Chapter 17 Analyzing Potential Indicators of Compromise
	“Do I Know This Already?” Quiz
	Foundation Topics
	Network-Related Indicators of Compromise
	Host-Related Indicators of Compromise
	Application-Related Indicators of Compromise
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Review Questions
Chapter 18 Utilizing Basic Digital Forensics Techniques
	“Do I Know This Already?” Quiz
	Foundation Topics
	Network
	Endpoint
	Mobile
	Cloud
	Virtualization
	Legal Hold
	Procedures
	Hashing
	Carving
	Data Acquisition
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Review Questions
Chapter 19 The Importance of Data Privacy and Protection
	“Do I Know This Already?” Quiz
	Foundation Topics
	Privacy vs. Security
	Non-technical Controls
	Technical Controls
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Review Questions
Chapter 20 Applying Security Concepts in Support of Organizational Risk Mitigation
	“Do I Know This Already?” Quiz
	Foundation Topics
	Business Impact Analysis
	Risk Identification Process
	Risk Calculation
	Communication of Risk Factors
	Risk Prioritization
	Systems Assessment
	Documented Compensating Controls
	Training and Exercises
	Supply Chain Assessment
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Review Questions
Chapter 21 The Importance of Frameworks, Policies, Procedures, and Controls
	“Do I Know This Already?” Quiz
	Foundation Topics
	Frameworks
	Policies and Procedures
	Category
	Control Type
	Audits and Assessments
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Review Questions
Chapter 22 Final Preparation
	Exam Information
	Getting Ready
	Tools for Final Preparation
	Suggested Plan for Final Review/Study
	Summary
Appendix A Answers to the “Do I Know This Already?” Quizzes and Review Questions
Appendix B CompTIA Cybersecurity Analyst (CySA+) CS0-002 Cert Guide Exam Updates
	Always Get the Latest at the Book’s Product Page
	Technical Content
Glossary of Key Terms
Index
Appendix C Memory Tables
Appendix D Memory Tables Answer Key
Appendix E Study Planner
Where are the companion content files? - Register
Inside Front Cover
Inside Back Cover
Code Snippets