Mike Meyers’ CompTIA Security+ Certification Guide, 3rd Edition (Exam SY0-601)

Cover
About the Authors
Title Page
Copyright Page
Dedication
Contents at a Glance
Contents
Acknowledgments
Introduction
Chapter 1 Risk Management
    Module 1-1: Defining Risk
        Asset
        Likelihood
        Threat Actor
        Vulnerability and Threat
        Circling Back to the Risk Definition
        Vectors
        Threat Intelligence
    Module 1-2: Risk Management Concepts
        Infrastructure
        Security Controls
        Risk Management Frameworks
    Module 1-3: Security Controls
        Control Categories
        Control Types
    Module 1-4: Risk Assessment
        Risk Assessment Processes and Concepts
        Quantitative Risk Assessment
        Qualitative Risk Assessment
        Putting It All Together: Risk Analysis
        Risk Response
    Module 1-5: Business Impact Analysis
        BIA Basics
        Types of Impact
        Locating Critical Resources
        Calculating Impact
        Calculating Downtime
    Module 1-6: Data Security and Data Protection
        Organizing Data
        Legal and Compliance
        Data Destruction
        Privacy Breaches
    Module 1-7: Personnel Risk and Policies
        Hiring
        Onboarding
        Personnel Management Policies
        Training
        Policies
        User Habits
        Offboarding
    Module 1-8: Third-Party Risk and Policies
        Third-Party Risk Management
        Agreement Types
    Questions
    Answers
Chapter 2 Cryptography
    Module 2-1: Cryptography Basics
        Essential Building Blocks
        Early Cryptography
        Cryptography Components
    Module 2-2: Cryptographic Methods
        Symmetric Cryptography
        Asymmetric Cryptography
        Hashing
        Limitations in Symmetric vs. Asymmetric Cryptography
        Hybrid Cryptography
        The Perfect Cryptosystem
    Module 2-3: Symmetric Cryptosystems
        DES
        3DES
        AES
        Blowfish
        Twofish
        RC4
        Summary of Symmetric Algorithm Characteristics
    Module 2-4: Asymmetric Cryptosystems
        RSA
        Diffie-Hellman
        PGP/GPG
        ECC
        ElGamal
    Module 2-5: Hashing Algorithms
        Hashing Process
        MD5
        SHA
        RIPEMD
        HMAC
    Module 2-6: Digital Signatures and Certificates
        Digital Signatures
        Digital Certificates
    Module 2-7: Public Key Infrastructure
        Keys, Algorithms, and Standards
        PKI Services
        Digital Certificates and PKI Structure
        Key Safety
        Trust Models
    Module 2-8: Cryptographic Attacks
        Attack Strategies
        Attackable Data
        Attack Scenarios
        Defending Password Storage
        Other Attack Options
    Module 2-9: Other Cryptosystems
        Homomorphic Encryption
        Blockchain
        Quantum Cryptography
    Questions
    Answers
Chapter 3 Identity and Account Management
    Module 3-1: Understanding Authentication
        Identification and AAA
        Identification and Authentication
        Authorization
        Accounting
        Trust
    Module 3-2: Authentication Methods and Access Controls
        Authentication Methods
        Biometrics
        Authorization and Access Control Schemes/Models
    Module 3-3: Account Management
        User Accounts
        Account Policies
        Account Administration
    Module 3-4: Point-to-Point Authentication
        PAP
        CHAP/MS-CHAP
        Remote Access Connection and Authentication Services
    Module 3-5: Network Authentication
        The Challenge of LAN Access Management
        Microsoft Networking
        LDAP and Secure LDAP
    Module 3-6: Identity Management Systems
        Trust
        Shared Authentication Schemes
    Questions
    Answers
Chapter 4 Tools of the Trade
    Module 4-1: Operating System Utilities
        Network Reconnaissance and Discovery
        File Manipulation
        Shell and Script Environments
    Module 4-2: Network Scanners
        Scanning Methods
        Scanning Targets
        Scanner Types
    Module 4-3: Protocol Analyzers
        Why Protocol Analyze?
        Wireshark
        tcpdump
    Module 4-4: Monitoring Networks
        Exploring Log Files
        Centralizing Log Files
        Security Information and Event Management
        Log File Management
    Questions
    Answers
Chapter 5 Securing Individual Systems
    Module 5-1: Types of System Attacks
        Attacking Applications
        Driver Manipulation
        Malicious Code or Script Execution
    Module 5-2: Malware
        Virus
        Cryptomalware/Ransomware
        Worm
        Trojan Horse
        Potentially Unwanted Programs
        Bots/Botnets
        Logic Bomb
        Keylogger
        RAT
        Rootkit
        Backdoor
    Module 5-3: Cybersecurity Resilience
        Non-persistence
        Redundancy
        Diversity
    Module 5-4: Securing Hardware
        Physical Attacks
        Securing the Systems
        Securing Boot Integrity
    Module 5-5: Securing Endpoints
        Hardening Operating Systems
        Anti-malware
        Data Execution Prevention
        File Integrity Monitors
        Data Loss Prevention
    Module 5-6: System Recycling
        Clear
        Purge
        Destroy
    Questions
    Answers
Chapter 6 The Basic LAN
    Module 6-1: Layer 2 LAN Attacks
        ARP Poisoning
        Man-in-the-Middle Attacks
        MAC Flooding
        MAC Cloning
    Module 6-2: Organizing LANs
        Configuration Management
        Network Segmentation
        Load Balancing
    Module 6-3: Implementing Secure Network Designs
        Securing the LAN
        Internet Connection Firewalls
        Securing Servers
    Module 6-4: Virtual Private Networks
        How VPNs Work
        Early VPNs
        IPsec VPNs
        TLS VPNs
    Module 6-5: Network-Based Intrusion Detection/Prevention
        Detection vs. Prevention
        Detecting Attacks
        Configuring Network-Based IDS/IPS
        Monitoring NIDS/NIPS
        Endpoint Detection and Response
    Questions
    Answers
Chapter 7 Securing Wireless LANs
    Module 7-1: Networking with 802.11
        Wireless Cryptographic Protocols
        Wireless Authentication Protocols
    Module 7-2: Attacking 802.11
        Wireless Survey/Stumbler
        Packet Capture
        Attack Tools
        Rogue Access Point
        Jamming
        Packet Sniffing
        Deauthentication Attack
        Near-Field Communication
        Replay Attacks
        WEP/WPA Attacks
        WPS Attacks
        Wireless Peripherals
    Module 7-3: Securing 802.11
        Installation Considerations
        Wireless Configuration
        Security Posture Assessment
    Questions
    Answers
Chapter 8 Securing Public Servers
    Module 8-1: Attacking and Defending Public Servers
        Distributed Denial-of-Service
        Route Security
        Quality of Service
        Monitoring Services
    Module 8-2: Virtualization Security
        Virtualization Architecture
        Containers
        Virtualization Risks
        Using Virtualization for Security
    Module 8-3: Cloud Deployment
        Let’s Talk Amazon
        Cloud Deployment Models
        Cloud Architecture Models
        Cloud Growing Pains
    Module 8-4: Securing the Cloud
        Cloud Security Controls
        Unique Cloud Security Solutions
    Questions
    Answers
Chapter 9 Securing Dedicated Systems
    Module 9-1: Embedded, Specialized, and Mobile Systems
        Embedded Systems
        SCADA/ICS
        Internet of Things
        Specialized Systems
        Mobile Systems
    Module 9-2: Connecting to Dedicated Systems
        Common Communication Technologies
        IoT-Specific Communication Technologies
    Module 9-3: Security Constraints for Dedicated Systems
        Hardware
        Programming
        Connectivity
    Module 9-4: Implementing Secure Mobile Solutions
        Mobile Device Management
        Deployment Models
        Inventory Control and Asset Tracking
        Application Management and Security
        Encryption and Authentication
        Enforcement and Monitoring for Device Security
    Questions
    Answers
Chapter 10 Physical Security
    Module 10-1: Physical Security Controls
        Passive Defensive Systems and Perimeter Controls
        Active Alert Systems
        Manned Defensive Systems
    Module 10-2: Environmental Controls
        EMI and RFI Shielding
        Fire Suppression
        HVAC
        Temperature and Humidity Controls
        Hot and Cold Aisles
        Environmental Monitoring
    Questions
    Answers
Chapter 11 Secure Protocols and Applications
    Module 11-1: Secure Internet Protocols
        DNS Security
        SNMP
        SSH
        FTP
        SRTP
    Module 11-2: Secure Web and E-mail
        HTTP
        HTTPS
        E-mail
    Module 11-3: Web Application Attacks
        Injection Attacks
        Hijacking and Related Attacks
        Other Web Application Attacks
    Module 11-4: Application Security
        Development
        Code Quality and Testing
        Staging
        Production
        Quality Assurance
        Getting Organized
    Module 11-5: Certificates in Security
        Certificate Concepts and Components
        PKI Concepts
        Online vs. Offline CA
        PKI TLS Scenario
        Types of Certificates
        Certificate Formats
        Key Escrow
    Questions
    Answers
Chapter 12 Testing Infrastructure
    Module 12-1: Vulnerability Impact
        Device/Hardware Vulnerabilities
        Configuration Vulnerabilities
        Management/Design Vulnerabilities
    Module 12-2: Social Engineering
        Social Engineering Goals
        Principles
        Types of Attacks
    Module 12-3: Artificial Intelligence
        Understanding Artificial Intelligence
        Machine Learning Essentials
        OSINT
        Adversarial Artificial Intelligence
    Module 12-4: Security Assessment
        Threat Hunting
        Vulnerability Scans
        Penetration Testing
    Module 12-5: Assessment Tools
        Protocol Analyzer
        Network Scanner
        Vulnerability Scanner
        Configuration Compliance Scanner
        Penetration Testing with Metasploit
        Specific Tools Mentioned by CompTIA
        Interpreting Security Assessment Tool Results
    Questions
    Answers
Chapter 13 Dealing with Incidents
    Module 13-1: Incident Response
        Incident Response Concepts
        Incident Response Procedures
        Scenarios: Mitigation During and After an Incident
    Module 13-2: Digital Forensics
        Digital Forensics Concepts
        Data Volatility
        Critical Forensics Practices
        Data Acquisition
        Analyzing Evidence
    Module 13-3: Continuity of Operations and Disaster Recovery
        Risk Management Best Practices
        Contingency Planning and Resilience
        Functional Recovery Plans
        Backup and Restore Plans and Policies
    Questions
    Answers
Appendix A Exam Objective Map
    Exam SY0-601
Appendix B About the Online Content
    System Requirements
    Your Total Seminars Training Hub Account
        Privacy Notice
    Single User License Terms and Conditions
    TotalTester Online
    Other Book Resources
        Video Training from Mike Meyers
        TotalSim Simulations
        Mike’s Cool Tools
    Technical Support
Glossary
Index