Comptia Security+ Study Guide: Exam SY0-501

CompTIA® Security+® Study Guide
Acknowledgments
About the Authors
Contents at a Glance
Contents
Table of Exercises
Introduction
Assessment Test
Answers to Assessment Test
Chapter 1 Managing Risk
	Risk Terminology
	Threat Assessment
	Risk Assessment
		Computing Risk Assessment
		Assessing Privacy
		Acting on Your Risk Assessment
		Risks Associated with Cloud Computing
		Risks Associated with Virtualization
	Developing Policies, Standards, and Guidelines
		Implementing Policies
		Understanding Control Types and False Positives/Negatives
		Risk Management Best Practices
		Change Management
	Summary
	Exam Essentials
	Review Questions
Chapter 2 Monitoring and Diagnosing Networks
	Monitoring and Diagnosing Networks Terminology
	Frameworks, Best Practices, and Configuration Guides
		Industry-Standard Frameworks and Reference Architectures
		National Institute of Standards and Technology (NIST)
		Benchmarks/Secure Configuration Guides
	Secure Network Architecture Concepts
		Zones
		Tunneling/VPN
		Placing Security Devices
		SDN
		IDS vs. IPS
	Secure Systems Design
		Hardware and Firmware Security
		Operating Systems
		Peripherals
		Secure Staging Deployment Concepts
	Summary
	Exam Essentials
	Review Questions
Chapter 3 Understanding Devices and Infrastructure
	Infrastructure Terminology
	Designing with Security in Mind
		Firewalls
		VPNs and VPN Concentrators
		Intrusion Detection Systems
		Router
		Switch
		Proxy
		Load Balancer
		Access Point
		SIEM
		DLP
		Network Access Control (NAC)
		Mail Gateway
		Bridge
		SSL/TLS Accelerators
		SSL Decryptors
		Media Gateway
		Hardware Security Module
	Summary
	Exam Essentials
	Review Questions
Chapter 4 Identity and Access Management
	Using Tools to Assess Your Network
		Protocol Analyzer
		Network Scanners
		Password Cracker
		Vulnerability Scanners
		Command-Line Tools
		Additional Tools
	Troubleshooting Common Security Issues
		Access Issues
		Configuration Issues
	Security Technologies
		Intrusion Detection Systems
		Antimalware
		Firewalls and Related Devices
		Other Systems
	Identity and Access Management Concepts
		Identification vs. Authentication
		Authentication (Single Factor) and Authorization
		Multifactor Authentication
		Biometrics
		Federations
		Potential Authentication and Access Problems
		LDAP
		PAP, SPAP, and CHAP
		Kerberos
		Working with RADIUS
		TACACS, TACACS+, XTACACS
		OATH
		One-Time Passwords
		SAML
	Install and Configure Identity and Access Services
		Mandatory Access Control
		Discretionary Access Control
		Role-Based Access Control
		Rule-Based Access Control
		ABAC
		Smartcards
		Tokens
	File and Database Security
	Summary
	Exam Essentials
	Review Questions
Chapter 5 Wireless Network Threats
	Wireless Threat Terminology
	Wireless Vulnerabilities to Know
		Replay
		Rogue APs and Evil Twins
		Jamming
		WPS
		Bluejacking
		Bluesnarfing
		NFC and RFID
		Disassociation
	Wireless Commonsense
	Wireless Attack Analogy
	Summary
	Exam Essentials
	Review Questions
Chapter 6 Securing the Cloud
	Cloud-Related Terminology
	Working with Cloud Computing
		Software as a Service (SaaS)
		Platform as a Service (PaaS)
		Infrastructure as a Service (IaaS)
		Private Cloud
		Public Cloud
		Community Cloud
		Hybrid Cloud
	Working with Virtualization
		Understanding Hypervisors
		Understanding Containers and Application Cells
		VDI/VDE
		On-Premise vs. Hosted vs. Cloud
		VM Escape Protection
		VM Sprawl Avoidance
	Security and the Cloud
		Cloud Access Security Brokers
		Cloud Storage
		Security as a Service
	Summary
	Exam Essentials
	Review Questions
Chapter 7 Host, Data, and Application Security
	Threat Actors and Attributes
		Script Kiddies
		Hacktivist
		Organized Crime
		Nation-States/APT
		Insiders
		Competitors
	Use of Open Source Intelligence
	Types of Vulnerabilities
		Configuration Issues
		User Issues
		Zero-Day Exploits
		Other Issues
	Embedded Systems Security
	Application Vulnerabilities
		Input Vulnerabilities
		Memory Vulnerabilities
	Secure Programming
		Programming Models
		Software Testing
		Specific Types of Testing
		Secure Coding Standards
		Application Configuration Baselining
		Operating System Patch Management
		Application Patch Management
	Other Application Security Issues
		Databases and Technologies
		Database Security
		Secure Configurations
	Code Issues
	Summary
	Exam Essentials
	Review Questions
Chapter 8 Cryptography
	An Overview of Cryptography
		Historical Cryptography
	Modern Cryptography
		Working with Symmetric Algorithms
		Working with Asymmetric Algorithms
		Cryptography Concepts
		Hashing Algorithms
		Rainbow Tables and Salt
		Key Stretching
		Cryptanalysis Methods
		Wi-Fi Encryption
	Using Cryptographic Systems
		Confidentiality and Strength
		Integrity
		When to Encrypt
		Digital Signatures
		Authentication
		Nonrepudiation
		Key Features
	Understanding Cryptography Standards and Protocols
		The Origins of Encryption Standards
		Public Key Infrastructure X.509/Public Key Cryptography Standards
		X.509
	Public Key Infrastructure
		Pretty Good Privacy
		SSL and TLS
	Using Public Key Infrastructure
		Hardware-Based Encryption Devices
		Data Encryption
	Authentication
	Summary
	Exam Essentials
	Review Questions
Chapter 9 Threats, Attacks, and Vulnerabilities
	Threat and Attack Terminology
	Living in a World of Viruses
		Symptoms of a Virus Infection
		How Viruses Work
		Types of Viruses
		Managing Spam to Avoid Viruses
		Antivirus Software
	Malware and Crypto-Malware
	Understanding Various Types of Application/Service Attacks
		Identifying Denial-of-Service and Distributed Denial-of-Service Attacks
		Man-in-the-Middle Attacks
		Buffer Overflow
		Injection
		Cross-Site Scripting and Request Forgery
		Privilege Escalation
		ARP Poisoning
		Amplification
		DNS Poisoning
		Domain Hijacking
		Man-in-the-Browser
		Zero-Day Exploits
		Replay Attacks
		Pass the Hash
		Hijacking and Related Attacks
		Driver Manipulation
		MAC and IP Spoofing Attacks
	Summary
	Exam Essentials
	Review Questions
Chapter 10 Social Engineering and Other Foes
	Social Engineering and Physical Security Terminology
	Understanding Social Engineering
		Types of Social Engineering Attacks
		What Motivates an Attack?
		The Principles Behind Social Engineering
		Social Engineering Attack Examples
	Understanding Physical Security
		Lighting
		Signs
		Fencing, Gates, and Cages
		Security Guards
		Alarms
		Safe
		Secure Cabinets and Enclosures
		Protected Distribution
		Protected Cabling
		Airgap
		Mantrap
		Faraday Cage
		Lock Types
		Biometrics
		Barricades/Bollards
		Tokens/Cards
		Environmental Controls
		Cable Locks
		Screen Filters
		Cameras
		Motion Detection
		Logs
		Infrared Detection
		Key Management
	Various Control Types
		An Analogy of Control Types
	Data Security and Privacy Practices
		Data Destruction and Media Sanitation
		Data Sensitivity Labeling and Handling
		Data Roles
		Data Retention
		Legal and Compliance
	Summary
	Exam Essentials
	Review Questions
Chapter 11 Security Administration
	Connection Types
		Cellular
		Bluetooth
		Wi-Fi
		Infrared
		SATCOM
	Mobile Devices
		BYOD Issues
		Enforcement
	Account Management Concepts
		Account Types
		General Concepts
	Summary
	Exam Essentials
	Review Questions
Chapter 12 Disaster Recovery and Incident Response
	Disaster and Incident Related Terminology
	Penetration Testing
		What Should You Test?
		Vulnerability Scanning
	Issues Associated with Business Continuity
		Types of Storage Mechanisms
		Crafting a Disaster-Recovery Plan
		Incident Response Procedures
		Understanding Incident Response
		Tabletop Exercises
	Summary
	Exam Essentials
	Review Questions
Appendix Answers to Review Questions
	Chapter 1: Managing Risk
	Chapter 2: Monitoring and Diagnosing Networks
	Chapter 3: Understanding Devices and Infrastructure
	Chapter 4: Identity and Access Management
	Chapter 5: Wireless Network Threats
	Chapter 6: Securing the Cloud
	Chapter 7: Host, Data, and Application Security
	Chapter 8: Cryptography
	Chapter 9: Threats, Attacks, and Vulnerabilities
	Chapter 10: Social Engineering and Other Foes
	Chapter 11: Security Administration
	Chapter 12: Disaster Recovery and Incident Response
Index
Advert
EULA