Meer over Troy McMillan

Troy McMillan

CompTIA Cybersecurity Analyst (CySA+) CS0-002 Cert Guide

Name: CompTIA Cybersecurity Analyst (CySA+) CS0-002 Cert Guide
Author: Troy McMillan

E-book Engels 2021 9780136747048

Verwachte levertijd ongeveer 9 werkdagen

56,19

In winkelwagen

Samenvatting

Learn, prepare, and practice for CompTIA Cybersecurity Analyst (CySA+) CS0-002 exam success with this Cert Guide from Pearson IT certification, a leader in IT certification learning.

This study guide helps you master the CompTIA Cybersecurity Analyst (CySA+) CS0-002 exam topics: Assess your knowledge with chapter-ending quizzes Review key concepts with exam preparation tasks Practice with realistic exam questions Get practical guidance for next steps and more advanced certifications CompTIA Cybersecurity Analyst (CySA+) CS0-002 Cert Guide is a best-of-breed exam study guide. Leading IT certification instructor Troy McMillan shares preparation hints and test-taking tips, helping you identify areas of weakness and improve both your conceptual knowledge and hands-on skills. Material is presented in a concise manner, focusing on increasing your understanding and retention of exam topics.

The book presents you with an organised test preparation routine through the use of proven series elements and techniques. Exam topic lists make referencing easy. Chapter-ending Exam Preparation Tasks help you drill on key concepts you must know thoroughly. Review questions help you assess your knowledge, and a final preparation chapter guides you through tools and resources to help you craft your final study plan.

Well regarded for its level of detail, assessment features, and challenging review questions and exercises, this study guide helps you master the concepts and techniques that will allow you to succeed on the exam the first time.

This study guide helps you master all the topics on the CompTIA Cybersecurity Analyst (CySA+) CS0-002 exam, including Vulnerability management activities Implementing controls to mitigate attacks and software vulnerabilities Security solutions for infrastructure management Software and hardware assurance best practices Understanding and applying the appropriate incident response Applying security concepts in support of organisational risk mitigation

The full text downloaded to your computer

With eBooks you can: search for key concepts, words and phrases make highlights and notes as you study share your notes with friends

eBooks are downloaded to your computer and accessible either offline through the Bookshelf (available as a free download), available online and also via the iPad and Android apps.

Upon purchase, you will receive via email the code and instructions on how to access this product.

Time limit

The eBooks products do not have an expiry date. You will continue to access your digital ebook products whilst you have your Bookshelf installed.

Specificaties

ISBN13:9780136747048

Taal:Engels

Bindwijze:e-book

Uitgever:Pearson Education

Lezersrecensies

Wees de eerste die een lezersrecensie schrijft!

Schrijf een recensie

Uw cijfer

?

Log in om te stemmen

Inhoudsopgave

Introduction xxxvii Chapter 1 The Importance of Threat Data and Intelligence 3 “Do I Know This Already?” Quiz 3 Foundation Topics 6 Intelligence Sources 6     Open-Source Intelligence 6     Proprietary/Closed-Source Intelligence 6     Timeliness 7     Relevancy 7     Confidence Levels 7     Accuracy 7 Indicator Management 7     Structured Threat Information eXpression (STIX) 8     Trusted Automated eXchange of Indicator Information (TAXII) 8     OpenIOC 9 Threat Classification 9     Known Threat vs. Unknown Threat 10     Zero-day 10     Advanced Persistent Threat 11 Threat Actors 12     Nation-state 12     Organized Crime 12     Terrorist Groups 12     Hacktivist 12     Insider Threat 12 Intelligence Cycle 13 Commodity Malware 14 Information Sharing and Analysis Communities 15 Exam Preparation Tasks 16 Chapter 2 Utilizing Threat Intelligence to Support Organizational Security 19 “Do I Know This Already?” Quiz 19 Foundation Topics 21 Attack Frameworks 21     MITRE ATT&CK 21     The Diamond Model of Intrusion Analysis 22     Kill Chain 23 Threat Research 23     Reputational 24     Behavioral 24     Indicator of Compromise (IoC) 25     Common Vulnerability Scoring System (CVSS) 25 Threat Modeling Methodologies 29     Adversary Capability 29     Total Attack Surface 31     Attack Vector 31     Impact 32     Probability 32 Threat Intelligence Sharing with Supported Functions 33     Incident Response 33     Vulnerability Management 33     Risk Management 33     Security Engineering 33     Detection and Monitoring 34 Exam Preparation Tasks 34 Chapter 3 Vulnerability Management Activities 39 “Do I Know This Already?” Quiz 39 Foundation Topics 41 Vulnerability Identification 41     Asset Criticality 42     Active vs. Passive Scanning 43     Mapping/Enumeration 44 Validation 44 Remediation/Mitigation 45     Configuration Baseline 45     Patching 46     Hardening 46     Compensating Controls 47     Risk Acceptance 47     Verification of Mitigation 47 Scanning Parameters and Criteria 49     Risks Associated with Scanning Activities 49     Vulnerability Feed 49     Scope 49     Credentialed vs. Non-credentialed 51     Server-based vs. Agent-based 52     Internal vs. External 53     Special Considerations 53 Inhibitors to Remediation 62 Exam Preparation Tasks 63 Chapter 4 Analyzing Assessment Output 67 “Do I Know This Already?” Quiz 67 Foundation Topics 69 Web Application Scanner 69     Burp Suite 69     OWASP Zed Attack Proxy (ZAP) 69     Nikto 70     Arachni 70 Infrastructure Vulnerability Scanner 71     Nessus 71     OpenVAS 71 Software Assessment Tools and Techniques 72     Static Analysis 73     Dynamic Analysis 74     Reverse Engineering 75     Fuzzing 75 Enumeration 76     Nmap 76     Host Scanning 79     hping 80     Active vs. Passive 82     Responder 82 Wireless Assessment Tools 82     Aircrack-ng 83     Reaver 84     oclHashcat 86 Cloud Infrastructure Assessment Tools 86     ScoutSuite 87     Prowler 87     Pacu 87 Exam Preparation Tasks 88 Chapter 5 Threats and Vulnerabilities Associated with Specialized Technology 93 “Do I Know This Already?” Quiz 93 Foundation Topics 97 Mobile 97     Unsigned Apps/System Apps 98     Security Implications/Privacy Concerns 99     Device Loss/Theft 100     Rooting/Jailbreaking 100     Push Notification Services 100     Geotagging 100     OEM/Carrier Android Fragmentation 101     Mobile Payment 101     USB 102     Malware 102     Unauthorized Domain Bridging 103     SMS/MMS/Messaging 103 Internet of Things (IoT) 103     IoT Examples 104     Methods of Securing IoT Devices 104 Embedded Systems 105 Real-Time Operating System (RTOS) 105 System-on-Chip (SoC) 105 Field Programmable Gate Array (FPGA) 105 Physical Access Control 106     Systems 106     Devices 107     Facilities 107 Building Automation Systems 109     IP Video 109     HVAC Controllers 111     Sensors 111 Vehicles and Drones 111     CAN Bus 112     Drones 113 Workflow and Process Automation Systems 113 Incident Command System (ICS) 114 Supervisory Control and Data Acquisition (SCADA) 114     Modbus 118 Exam Preparation Tasks 118 Chapter 6 Threats and Vulnerabilities Associated with Operating in the Cloud 123 “Do I Know This Already?” Quiz 123 Foundation Topics 126 Cloud Deployment Models 126 Cloud Service Models 127 Function as a Service (FaaS)/Serverless Architecture 128 Infrastructure as Code (IaC) 130 Insecure Application Programming Interface (API) 131 Improper Key Management 132     Key Escrow 133     Key Stretching 134 Unprotected Storage 134     Transfer/Back Up Data to Uncontrolled Storage 134     Big Data 135 Logging and Monitoring 136     Insufficient Logging and Monitoring 136     Inability to Access 136 Exam Preparation Tasks 137 Chapter 7 Implementing Controls to Mitigate Attacks and Software Vulnerabilities 141 “Do I Know This Already?” Quiz 141 Foundation Topics 143 Attack Types 143     Extensible Markup Language (XML) Attack 143     Structured Query Language (SQL) Injection 145     Overflow Attacks 147     Remote Code Execution 150     Directory Traversal 151     Privilege Escalation 152     Password Spraying 152     Credential Stuffing 152     Impersonation 154     Man-in-the-Middle Attack 154     Session Hijacking 158     Rootkit 159     Cross-Site Scripting 160 Vulnerabilities 163     Improper Error Handling 163     Dereferencing 163     Insecure Object Reference 163     Race Condition 164     Broken Authentication 164     Sensitive Data Exposure 165     Insecure Components 165     Insufficient Logging and Monitoring 166     Weak or Default Configurations 167     Use of Insecure Functions 168 Exam Preparation Tasks 169 Chapter 8 Security Solutions for Infrastructure Management 173 “Do I Know This Already?” Quiz 173 Foundation Topics 177 Cloud vs. On-premises 177     Cloud Mitigations 177 Asset Management 178     Asset Tagging 178     Device-Tracking Technologies 178     Object-Tracking and Object-Containment Technologies 179 Segmentation 180     Physical 180     Virtual 182     Jumpbox 183     System Isolation 184 Network Architecture 185     Physical 186     Software-Defined Networking 193     Virtual Private Cloud (VPC) 195     Virtual Private Network (VPN) 195     Serverless 200 Change Management 201 Virtualization 201     Security Advantages and Disadvantages of Virtualization 201     Type 1 vs. Type 2 Hypervisors 203     Virtualization Attacks and Vulnerabilities 203     Virtual Networks 205     Management Interface 205     Vulnerabilities Associated with a Single Physical Server Hosting Multiple Companies' Virtual Machines 206     Vulnerabilities Associated with a Single Platform Hosting Multiple Companies' Virtual Machines 207     Virtual Desktop Infrastructure (VDI) 207     Terminal Services/Application Delivery Services 208 Containerization 208 Identity and Access Management 209     Identify Resources 210     Identify Users 210     Identify Relationships Between Resources and Users 210     Privilege Management 211     Multifactor Authentication (MFA) 211     Single Sign-On (SSO) 214     Active Directory 217     SESAME 219     Federation 219     Role-Based Access Control 224     Attribute-Based Access Control 225     Mandatory Access Control 228     Manual Review 229 Cloud Access Security Broker (CASB) 229 Honeypot 230 Monitoring and Logging 230     Log Management 230     Audit Reduction Tools 231     NIST SP 800-137 232 Encryption 232     Cryptographic Types 233     Hashing Functions 238     Message Digest Algorithm 239     Transport Encryption 240 Certificate Management 242     Certificate Authority and Registration Authority 243     Certificates 243     Certificate Revocation List 244     OCSP 244     PKI Steps 245     Cross-Certification 245     Digital Signatures 245 Active Defense 246     Hunt Teaming 247 Exam Preparation Tasks 247 Chapter 9 Software Assurance Best Practices 253 “Do I Know This Already?” Quiz 253 Foundation Topics 256 Platforms 256     Mobile 256     Web Application 260     Client/Server 263     Embedded 263     System-on-Chip (SoC) 265     Firmware 266 Software Development Life Cycle (SDLC) Integration 267     Step 1: Plan/Initiate Project 267     Step 2: Gather Requirements 268     Step 3: Design 268     Step 4: Develop 269     Step 5: Test/Validate 269     Step 6: Release/Maintain 269     Step 7: Certify/Accredit 270     Step 8: Change Management and Configuration Management/Replacement 270 DevSecOps 270     DevOps 270 Software Assessment Methods 272     User Acceptance Testing 272     Stress Test Application 272     Security Regression Testing 273     Code Review 273     Security Testing 274     Code Review Process 275 Secure Coding Best Practices 275     Input Validation 275     Output Encoding 276     Session Management 276     Authentication 277     Data Protection 285     Parameterized Queries 285 Static Analysis Tools 286 Dynamic Analysis Tools 286 Formal Methods for Verification of Critical Software 286 Service-Oriented Architecture 287     Security Assertions Markup Language (SAML) 287     Simple Object Access Protocol (SOAP) 287     Representational State Transfer (REST) 288     Microservices 288 Exam Preparation Tasks 289 Chapter 10 Hardware Assurance Best Practices 295 “Do I Know This Already?” Quiz 295 Foundation Topics 298 Hardware Root of Trust 298     Trusted Platform Module(TPM) 299     Virtual TPM 300     Hardware Security Module (HSM) 302     MicroSD HSM 302 eFuse 303 Unified Extensible Firmware Interface (UEFI) 303 Trusted Foundry 304 Secure Processing 305     Trusted Execution 305     Secure Enclave 307     Processor Security Extensions 307     Atomic Execution 307 Anti-Tamper 308 Self-Encrypting Drives 308 Trusted Firmware Updates 308 Measured Boot and Attestation 310     Measured Launch 311     Integrity Measurement Architecture 311 Bus Encryption 311 Exam Preparation Tasks 312 Chapter 11 Analyzing Data as Part of Security Monitoring Activities 317 “Do I Know This Already?” Quiz 317 Foundation Topics 320 Heuristics 320 Trend Analysis 320 Endpoint 321     Malware 323     Memory 329     System and Application Behavior 333     File System 339     User and Entity Behavior Analytics (UEBA) 341 Network 342     Uniform Resource Locator (URL) and Domain Name System (DNS) Analysis 342     DNS Analysis 342     Domain Generation Algorithm 343     Flow Analysis 345     NetFlow Analysis 346     Packet and Protocol Analysis 348     Malware 348 Log Review 348     Event Logs 349     Syslog 350     Kiwi Syslog Server 352     Firewall Logs 353     Web Application Firewall (WAF) 355     Proxy 356     Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) 357 Impact Analysis 361     Organization Impact vs. Localized Impact 361     Immediate Impact vs. Total Impact 361 Security Information and Event Management (SIEM) Review 361     Rule Writing 362     Known-Bad Internet Protocol (IP) 363     Dashboard 363 Query Writing 366     String Search 366     Script 366     Piping 367 E-mail Analysis 367     E-mail Spoofing 368     Malicious Payload 368     Domain Keys Identified Mail (DKIM) 368     Sender Policy Framework (SPF) 369     Domain-based Message Authentication, Reporting, and Conformance (DMARC) 369     Phishing 369 <span style="mso-fareast-font-family:

Managementboek Top 100

Bekijk de volledige Managementboek Top 100

Uw winkelwagen

CompTIA Cybersecurity Analyst (CySA+) CS0-002 Cert Guide

Samenvatting

Specificaties

Lezersrecensies

Inhoudsopgave

Managementboek Top 100

Rubrieken

Populaire producten

Personen

Trefwoorden