|
|
|
|
|
|
|
|
|
|
|
|
|
Introduction |
|
The CompTIA Certification Program |
|
Taking a Certification Exam |
|
Tracking Certification Status |
|
About This Book |
|
Self-Assessment |
|
CompTIA Certification in the Real World |
|
How to Prepare for an Exam |
|
Dealing with Test Anxiety |
|
Day of the Exam |
|
Part I: System Security |
|
Chapter 1. System Threats and Risks |
|
Systems Security Threats |
|
Security Threats to System Hardware and Peripherals |
|
Exam Prep Questions |
|
Answers to Exam Prep Questions |
|
Suggested Reading and Resources |
|
References |
|
Chapter 2. Online Vulnerabilities |
|
Web Vulnerabilities |
|
Protocol Vulnerabilities |
|
File Transfer Protocol Vulnerabilities |
|
Wireless Network Vulnerabilities |
|
Network Device and Transmission Media Vulnerabilities |
|
Exam Prep Questions |
|
Answers to Exam Prep Questions |
|
Additional Reading and Resources |
|
Part II: Infrastructure Security |
|
Chapter 3. Infrastructure Basics |
|
Port and Protocol Threats and Mitigation Techniques |
|
Network Design Elements and Components |
|
Network Security Tools |
|
Exam Prep Questions |
|
Answers to Exam Prep Questions |
|
Additional Reading and Resources
|
|
Chapter 4. Infrastructure Security and Controls |
|
Implementing Security Applications |
|
Virtualization Technology |
|
Applying Network Tools to Facilitate Security |
|
Logical Access Control Methods |
|
Risk and Return on Investment |
|
Exam Prep Questions |
|
Answers to Exam Prep Questions |
|
Additional Reading and Resources |
|
Part III: Access Control |
|
Chapter 5. Access Control and Authentication Basics |
|
Access Control |
|
Authentication |
|
Operating System Hardening |
|
Physical Access Security Methods |
|
Exam Prep Questions |
|
Answers to Exam Prep Questions |
|
Additional Reading and Resources |
|
Chapter 6. Securing Communications |
|
Remote Access |
|
Electronic Mail |
|
Instant Messaging |
|
Web Connectivity |
|
Exam Prep Questions |
|
Answers to Exam Prep Questions |
|
Suggested Reading and Resources
|
|
Part IV: Assessments and Audits |
|
Chapter 7. Intrusion Detection and Security Baselines |
|
Intrusion Detection |
|
Security Baselines |
|
Exam Prep Questions |
|
Answers to Exam Prep Questions |
|
Additional Reading and Resources |
|
Chapter 8. Auditing |
|
Using Monitoring Tools to Detect Security-Related Anomalies |
|
Monitoring Methodologies |
|
Logging Procedures and Evaluation |
|
Periodic Audits of System Security Settings |
|
Exam Prep Questions |
|
Answers to Exam Prep Questions |
|
Additional Reading and Resources |
|
Part V: Cryptography |
|
Chapter 9. Cryptography Basics |
|
Encryption Algorithms |
|
Steganography |
|
CIA Triad |
|
Nonrepudiation and Digital Signatures |
|
Whole Disk Encryption |
|
Hashing Concepts |
|
Symmetric Encryption Algorithms |
|
Asymmetric Encryption Algorithms |
|
Wireless |
|
Exam Prep Questions |
|
Answers to Exam Prep Questions |
|
Suggested Readings and Resources
|
|
Chapter 10. Cryptography Deployment |
|
PKI Standards |
|
PKI Components |
|
Key Management and the Certificate Life Cycle |
|
Protocols and Applications |
|
Exam Prep Questions |
|
Answers to Exam Prep Questions |
|
Suggested Readings and Resources |
|
Part VI: Organizational Security |
|
Chapter 11. Organizational Security |
|
Disaster Recovery and Redundancy Planning |
|
Backup Techniques and Practices |
|
System Restoration |
|
Exam Prep Questions |
|
Answers to Exam Prep Questions |
|
Suggested Readings and Resources |
|
Chapter 12. Organizational Controls |
|
Incident Response Procedures |
|
Forensics |
|
Applicable Legislation and Organizational Policies |
|
The Importance of Environmental Controls |
|
The Risks of Social Engineering |
|
Exam Prep Questions |
|
Answers to Exam Prep Questions |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
