Mike Meyers CompTIA Security+ Certification Passport, Exam SY0-601, 6th Edition (2021)

Preview (31 of 780 Pages)

100%

Purchase to unlock

Loading page image...

®7MikeMeyers’comgriaSJiow(ExamSY0-601)AcceleratedreviewforquickexampreparationCompletecoverageofallcurrentexamobjectivesIncludesanofferfora10%discountonyourexamvoucherDr.DAWNDUNKERLEYCISSP-ISSAP®,CISSP-ISSEP®,CISSP-ISSMP®,CSSLP®,CRISC™,CompTIASecurity+McGrawHillFROMTHE#1NAMEINPROFESSIONALCERTIFICATION

Loading page image...

DownloadedfromStudyXY.com=—®+StudyXYSdYe.o>\|iF’prE\3SStudyAnythingThisContentHasbeenPostedOnStudyXY.comassupplementarylearningmaterial.StudyXYdoesnotendroseanyuniversity,collegeorpublisher.Allmaterialspostedareundertheliabilityofthecontributors.wv8)www.studyxy.com

Loading page image...

41MikeMeyers’comgnia(ExamSY0-601)+AcceleratedreviewforquickreparatiSIXTH.Cl5currentonaobjectivesEDITION+Includesanofferfora10%discountonyourexamvoucherDr.DAWNDUNKERLEYCISSP-ISSAP®,CISSP-ISSEP?,CISSP-ISSMP®,CSSLP®,CRISC™,CompTIASecurity+FROMTHE#1NAMEINPROFESSIONALCERTIFICATION

Loading page image...

AbouttheAuthorDawnDunkerleyreceivedaPhDinInformationSystemsfromNovaSoutheasternUniversityin2011withadoctoralfocusonmeasuringinformationsecuritysuccesswithinorganizations.Herresearchinterestsincludecyberwarfare,cybersecurity,andthesuccessandmeasurementoforganizationalcybersecurityinitiatives.Dr.Dunkerleyholdsnumerousprofessionalcertifications,includingtheCertifiedInformationSystemsSecurityProfessional(CISSP),InformationSystemsSecurityArchitectureProfessional(ISSAP),InformationSystemsSecurityEngineeringProfessional(ISSEP),InformationSystemsSecurityManagementProfessional(ISSMP),CertifiedSecureSoftwareLifecycleProfessional(CSSLP),CertifiedinRiskandInformationSystemControl(CRISC),andCompTIASecurity+.SheisanAreaEditorfortheCyberDefenseReviewpublishedbytheUnitedStatesArmyCyberInstituteatWestPointandaFellowoftheAmericasInstituteofCybersecurityLeadership.AbouttheTechnicalEditorBobbyE.RogersisaninformationsecurityengineerworkingasacontractorforU.S.DepartmentofDefenseagencies,helpingtosecure,certify,andaccredittheirinformationsystems.Hisdutiesincludeinformationsystemsecurityengineering,riskmanagement,andcertificationandaccreditationefforts.Heretiredafter21yearsintheU.S.AirForce,servingasanetworksecurityengineerandinstructor,andhassecurednetworksallovertheworld.Bobbyhasamaster’sdegreeininformationassurance(IA)andispursuingadoctoraldegreeincybersecurityfromCapitolTechnologyUniversity

Loading page image...

inMaryland.HismanycertificationsincludeCISSP-ISSEP,CEH,andMCSE:Security,aswellastheCompTIAA+,Network+,Security+,andMobility+certifications.

Loading page image...

B’MikeMeyers’CompTIASI(ExamSY0-601)=Dr.DawnDunkerleyMcGrawHillNewYorkChicagoSanFrancisco=AthensLondonMadridMexicoCityMilanNewDelhiSingaporeSydneyToronto‘McGrawHillisanindependententityfromCompTIA"andisnotafillatedwithCompTIAinanymanner,ThispublicationandaccompanyingmediamaybeusedinassistingstudentstopreparefortheCompTIASecurityexam,NeitherCompTIAnorMcGrayHillwarrantythatuseofthispublicationandaccompanying‘mediawillensurepassinganyexam.CompTIAandCompTIASecurity+aretrademarksorregisteredtradetnarksofCompTIAintheUnitedStatesand/orother‘countries,Allothertrademarksaretrademarksoftheirrespectiveowners.TheCompTIAMarksaretheproprietarytrademarksand/orservicemarksofCompTIAanditsaffiliatesusedunderlicensefromCompTIA.

Loading page image...

Copyright©2021byMcGrawHill.Allrightsreserved.ExceptaspermittedundertheUnitedStatesCopyrightActof1976,nopartofthispublicationmaybereproducedordistributedinanyformorbyanymeans,orstoredinadatabaseorretrievalsystem,withoutthepriorwrittenpermissionofthepublisher,withtheexceptionthattheprogramlistingsmaybeentered,stored,andexecutedinacomputersystem,buttheymaynotbereproducedforpublication.ISBN:978-1-26-046796-3MHID: 1-26-046796-1ThematerialinthiseBookalsoappearsintheprintversionofthistitle:ISBN:978-1-26-046795-6,MHID:1-26-046795-3.eBookconversionbycodeMantraVersion1.0Alltrademarksaretrademarksoftheirrespectiveowners.Ratherthanputatrademarksymbolaftereveryoccurrenceofatrademarkedname,weusenamesinaneditorialfashiononly,andtothebenefitofthetrademarkowner,withnointentionofinfringementofthetrademark.Wheresuchdesignationsappearinthisbook,theyhavebeenprintedwithinitialcaps.McGraw-HillEducationeBooksareavailableatspecialquantitydiscountstouseaspremiumsandsalespromotionsorforuseincorporatetrainingprograms.Tocontactarepresentative,pleasevisittheContactUspageatwww.mhprofessional.com.InformationhasbeenobtainedbyMcGraw-HillEducationfromsourcesbelievedtobereliable.However,becauseofthepossibilityofhumanormechanicalerrorbyoursources,McGraw-HillEducation,orothers,McGraw-HillEducationdoesnotguaranteetheaccuracy,adequacy,orcompletenessofanyinformationandisnotresponsibleforanyerrorsoromissionsortheresultsobtainedfromtheuseofsuchinformation.

Loading page image...

TERMSOFUSEThisisacopyrightedworkandMcGraw-HillEducationanditslicensorsreserveallrightsinandtothework.Useofthisworkissubjecttotheseterms.ExceptaspermittedundertheCopyrightActof1976andtherighttostoreandretrieveonecopyofthework,youmaynotdecompile,disassemble,reverseengineer,reproduce,modify,createderivativeworksbasedupon,transmit,distribute,disseminate,sell,publishorsublicensetheworkoranypartofitwithoutMcGraw-HillEducation'spriorconsent.Youmayusetheworkforyourownnoncommercialandpersonaluse;anyotheruseoftheworkisstrictlyprohibited.Yourrighttousetheworkmaybeterminatedifyoufailtocomplywiththeseterms.THEWORKISPROVIDED“ASIS.”McGRAW-HILLEDUCATIONANDITSLICENSORSMAKENOGUARANTEESORWARRANTIESASTOTHEACCURACY,ADEQUACYORCOMPLETENESSOFORRESULTSTOBEOBTAINEDFROMUSINGTHEWORK,INCLUDINGANYINFORMATIONTHATCANBEACCESSEDTHROUGHTHEWORKVIAHYPERLINKOROTHERWISE,ANDEXPRESSLYDISCLAIMANYWARRANTY,EXPRESSORIMPLIED,INCLUDINGBUTNOTLIMITEDTOIMPLIEDWARRANTIESOFMERCHANTABILITYORFITNESSFORAPARTICULARPURPOSE.McGraw-HillEducationanditslicensorsdonotwarrantorguaranteethatthefunctionscontainedintheworkwillmeetyourrequirementsorthatitsoperationwillbeuninterruptedorerrorfree.NeitherMcGraw-HillEducationnoritslicensorsshallbeliabletoyouoranyoneelseforanyinaccuracy,errororomission,regardlessofcause,intheworkorforanydamagesresultingtherefrom.McGraw-HillEducationhasnoresponsibilityforthecontentofanyinformationaccessedthroughthework.UndernocircumstancesshallMcGraw-HillEducationand/oritslicensorsbeliableforanyindirect,incidental,special,punitive,consequentialorsimilardamagesthatresultfromtheuseoforinabilitytousethework,evenifanyofthemhasbeenadvisedofthepossibilityofsuchdamages.Thislimitationofliabilityshallapplyto

Loading page image...

anyclaimorcausewhatsoeverwhethersuchclaimorcausearisesincontract,tortorotherwise.

Loading page image...

|dedicatethisbooktomyamazingfamily.Thomas,Lauren,andMax,youarethelightsofmylife.|couldn’tbehappierorproudertobeyourwifeandmom.|loveyou.—DawnDunkerley

Loading page image...

ContentsataGlanceThreats,Attacks,andVulnerabilitiesGovernance,Risk,andComplianceArchitectureandDesignImplementationOperationsandIncidentResponseAbouttheOnlineContentIndex

Loading page image...

ContentsAcknowledgmentsIntroductionThreats,Attacks,andVulnerabilitiesCompareandbcontrastdifferenttypesofsocialengineeringtechniquesUnderstandingSocialEngineeringSocialEngineeringTechniquesPhishingWhalingShoulderSurfingTailgatingPharmingSpamSPIMVishingHoaxesDumpsterDivingInfluenceCampaignsREVIEW1.1QUESTIONS

Loading page image...

1.1ANSWERSGivenascenario,analyzepotentialindicatorstodeterminethetypeofattackAnalyzeandDifferentiateAmongTypesofMalwareVirusesKeyloggersTrojansBackdoorLogicBombsWormsAdwareandSpywareRansomwareRootkitsBotnetsMaliciousCodeorScriptExecutionAnalyzeandDifferentiateAmongTypesofPasswordAttacksAnalyzeandDifferentiateAmongNonstandardandEmergingAttacksSupply-ChainAttacksPhysicalAttacksAdversarialArtificialIntelligenceCloud-Basedvs.On-PremisesAttacksREVIEW1.2QUESTIONS1.2ANSWERSGivenascenario,analyzepotentialindicatorsassociatedwithapplicationattacksApplicationAttacksBufferOverflowsResourceExhaustionPrivilegeEscalation

Loading page image...

HijackingHTMLAttachmentsMaliciousAdd-OnsCross-SiteScriptingRequestForgeriesApplicationProgrammingInterfaceAttacksDriverManipulationHeaderManipulationInjectionsDirectoryTraversalArbitraryCodeExecutionZero-DayAttacksRaceConditionsReplayREVIEW1.3QUESTIONS1.3ANSWERSGivenascenario,analyzepotentialindicatorsassociatedwithnetworkattacksWirelessAttacksDataEmanationJammingBluetoothVulnerabilitiesNear-FieldCommunicationWarDrivingAccessPoints(EvilTwin)DisassociationPacketSniffingandEavesdroppingWPSAttacksWEP/WPAAttacksNetworkAttacksDenial-of-Service

Loading page image...

Layer2AttacksSmurfAttackTCP/IPHijackingOn-PathXmasAttackDNSPoisoningDomainKitingDomainReputationTyposquattingClient-sideAttacksWateringHoleAttackREVIEW1.4QUESTIONS1.4ANSWERSExplaindifferentthreatactors,vectors,andintelligencesourcesUnderstandingandAnalyzingThreatsActors,Attributes,andVectorsThreatIntelligenceSourcesResearchSourcesREVIEW1.5QUESTIONS1.5ANSWERSExplainthesecurityconcernsassociatedwithvarioustypesofvulnerabilitiesVulnerabilitiesVulnerabilityTypesREVIEW1.6QUESTIONS1.6ANSWERSSummarizethetechniquesusedinsecurityassessments

Loading page image...

ImplementAssessmentTechniquestoDiscoverSecurityThreatsandVulnerabilitiesVulnerabilityAssessmentToolsandTechniquesREVIEW1.7QUESTIONS1.7ANSWERSExplainthetechniquesusedinpenetrationtestingPenetrationTestingTechniquesKnown,Unknown,andPartiallyKnownEnvironmentTestingExerciseTypesREVIEW1.8QUESTIONS1.8ANSWERSGovernance,Risk,andComplianceCompareandcontrastvarioustypesofcontrolsControlCategoriesManagerialControlsTechnicalControlsOperationalControlsControlTypesREVIEW5.1QUESTIONS5.1ANSWERSExplaintheimportanceofapplicableregulations,standards,orframeworksthatimpactorganizationalsecuritypostureUnderstandingGuidanceDocumentsRegulations,Legislation,andStandardsKeyFrameworks

Loading page image...

BenchmarksandSecureConfigurationGuidesREVIEW5.2QUESTIONS5.2ANSWERSExplaintheimportanceofpoliciestoorganizationalsecurityPoliciesSupportingOrganizationalSecurityUsingOrganizationalPoliciestoReduceRiskSecurityTrainingandAwarenessPoliciesDataandDocumentationPoliciesUserBehaviorPoliciesChangeManagementPoliciesIncidentResponsePolicyThird-PartyRiskManagementREVIEW5.3QUESTIONS5.3ANSWERSSummarizeriskmanagementprocessesandconceptsUnderstandingandManagingRiskRiskAssessmentRiskRegisterTypesofDisastersFunctionalRecoveryPlansHighAvailabilityandRedundancyPlanningREVIEW5.4QUESTIONS5.4ANSWERSExplainprivacyandsensitivedataconceptsinrelationtosecurityPrivacyandSensitiveData

Loading page image...

OrganizationalConsequencesofPrivacyandDataBreachesNotificationofBreachesDataTypesPrivacyEnhancingTechnologiesDataOwnershipRolesandResponsibilitiesTermsofAgreementandPrivacyNoticesREVIEW5.5QUESTIONS5.5ANSWERSArchitectureandDesignExplaintheimportanceofsecurityconceptsinanenterpriseenvironmentEnterpriseSecurityChangeandConfigurationManagementDataProtectionDataEncryptionCloudStorageStorageAreaNetworksHandlingBigDataDataSovereigntyResponseandRecoveryDeceptionandDisruptionREVIEW2.1QUESTIONS2.1ANSWERSSummarizevirtualizationandcloudcomputingconceptsCloudComputingAnythingasaServiceCloudDeployment

Loading page image...

VirtualizationREVIEW2.2QUESTIONS2.2ANSWERSSummarizesecureapplicationdevelopment,deployment,andautomationconceptsSecureApplicationDevelopment,Deployment,andAutomationDevelopmentLife-CycleModelsSecureCodingConceptsREVIEW2.3QUESTIONS2.3ANSWERSSummarizeauthenticationandauthorizationdesignconceptsAuthenticationConceptsMultifactorAuthenticationAuthenticationMethodsBiometricsCloudvs.On-PremisesRequirementsREVIEW2.4QUESTIONS2.4ANSWERSGivenascenario,implementcybersecurityresilienceResiliencyConceptsServiceLevelsRedundancyBackupsNonpersistenceREVIEW2.5QUESTIONS

Loading page image...

2.5ANSWERSExplainthesecurityimplicationsofembeddedandspecializedsystemsEmbeddedandSpecializedSystemsEmbeddedSystemsIndustrialControlSystemsandSupervisoryControlandDataAcquisitionSystemsInternetofThingsSpecializedSystemsVoiceoverIPHeating,Ventilation,andAirConditioningSystemsDrones/UAVsMultifunctionPrintersSurveillanceSystemsREVIEW2.6QUESTIONS2.6ANSWERSExplaintheimportanceofphysicalsecuritycontrolsPhysicalSecurityPhysicalBarriersBadgesLightingAlarmsSignageSurveillanceLocksAccessControlVestibulePersonnelFaradayCagesVisitorLogs

Loading page image...

USBDataBlockerSecureAreasFireSuppressionEnvironmentalIssuesREVIEW2.7QUESTIONS2.7ANSWERSSummarizethebasicsofcryptographicconceptsCryptographyCommonUseCasesAlgorithmsQuantumCryptographyHomomorphicEncryptionSteganographyBlockchainHashingDigitalSignaturesRIPEMDHMACREVIEW2.8QUESTIONS2.8ANSWERSImplementationGivenascenario,implementsecureprotocolsProtocolsandUseCasesTCP/IPDNSSECSSHS/MIMESRTP

Loading page image...

LDAPSFileTransferProtocolsSNMPv3HTTPSIPSecE-mailProtocolsNTPDHCPUseCasesREVIEW3.1QUESTIONS3.1ANSWERSGivenascenario,implementhostorapplicationsecuritysolutionsHostandApplicationSecurityEndpointProtectionBootIntegrityDatabasesApplicationSecurityHardeningREVIEW3.2QUESTIONS3.2ANSWERSGivenascenario,implementsecurenetworkdesignsSecureNetworkDesignLoadBalancingNetworkSegmentationVirtualPrivateNetworkDNSNetworkAccessControlOut-of-BandManagement

Loading page image...

PortSecurityNetworkAppliancesHardwareSecurityModulesSensorsCollectorsAggregatorsFirewallsAccessControlListsRouteSecurityQualityofServiceImplicationsofIPv6PortSpanning/MonitoringMonitoringServicesFileIntegrityMonitorsREVIEW3.3QUESTIONS3.3ANSWERSGivenascenario,installandconfigurewirelesssecuritysettingsWirelessSecurityCryptographicProtocolsAuthenticationProtocolsMethodsInstallationConsiderationsREVIEW3.4QUESTIONS3.4ANSWERSGivenascenario,implementsecuremobilesolutionsMobileSecuritySolutionsConnectionMethodsandReceiversMobileDeviceManagement

Loading page image...

MobileDevicesEnforcementandMonitoringDeploymentModelsREVIEW3.5QUESTIONS3.5ANSWERSGivenascenario,applycybersecuritysolutionstothecloudCloudSecurityCloudSecurityControlsSolutionsCloudNativeControlsvs.Third-PartySolutionsREVIEW3.6QUESTIONS3.6ANSWERSGivenascenario,implementidentityandaccountmanagementcontrolsIdentityandAccountManagementIdentityAccountTypesAccountPoliciesREVIEW3.7QUESTIONS3.7ANSWERSGivenascenario,implementauthenticationandauthorizationsolutionsAuthenticationandAuthorizationAuthenticationManagementAuthenticationAccessControlSchemesREVIEW3.8QUESTIONS

Loading page image...

3.8ANSWERSGivenascenario,implementpublickeyinfrastructurePublicKeyInfrastructurePKIFundamentalsTypesofCertificatesCertificateFormatsOtherImportantConceptsREVIEW3.9QUESTIONS3.9ANSWERSOperationsandIncidentResponseGivenascenario,usetheappropriatetooltoassessorganizationalsecurityAssessingOrganizationalSecurityNetworkReconnaissanceandDiscoveryFileManipulationShellandScriptEnvironmentsPacketCaptureandReplayForensicsExploitationFrameworksPasswordCrackersDataSanitizationREVIEW4.1QUESTIONS4.1ANSWERSSummarizetheimportanceofpolicies,processes,andproceduresforincidentresponseIncidentResponseIncidentResponsePlansIncidentResponseProcess

Loading page image...

ExercisesAttackFrameworksCommunicationPlanBusinessContinuityPlanDisasterRecoveryPlanContinuityofOperationsPlanningIncidentResponseTeamStakeholderManagementRetentionPoliciesREVIEW4.2QUESTIONS4.2ANSWERSGivenanincident,utilizeappropriatedatasourcestosupportaninvestigationDataSourcesVulnerabilityScanOutputSIEMDashboardsLogFilessyslog/rsyslog/syslog-ngjournalctlNXLogBandwidthMonitorsMetadataNetFlow/sFlowProtocolAnalyzerOutputREVIEW4.3QUESTIONS4.3ANSWERSGivenanincident,applymitigationtechniquesorcontrolstosecureanenvironmentIncidentMitigationReconfigureEndpointSecuritySolutions

Loading page image...

ConfigurationChangesIsolationContainmentSegmentationSecurityOrchestration,Automation,andResponseREVIEW4.4QUESTIONS4.4ANSWERSExplainthekeyaspectsofdigitalforensicsDigitalForensicsDocumentationandEvidenceAcquisitionandPreservationOn-Premisesvs.CloudIntegrityDataRecoveryREVIEW4.5QUESTIONS4.5ANSWERSAbouttheOnlineContentSystemRequirementsYourTotalSeminarsTrainingHubAccountPrivacyNoticeSingleUserLicenseTermsandConditionsTotalTesterOnlineTechnicalSupportIndex

Loading page image...

AcknowledgmentsSomanythanksgotoMcGrawHillProfessional,especiallyTimGreen,EmilyWalters,andJanetWalden.You'vebeenexceptionallyhelpfulandpatientthroughthisprocess.Finally,|couldn'thavecompletedthisprojectwithoutmytechnicaleditor,BobbyRogers.Hecontinuestobethebestpartnerand,moreimportantly,thebestfriend|couldhopetoworkalongside.Thankyou.—DawnDunkerley

Loading page image...

IntroductionThisbookisyourguidetoCompTIA'sSecurity+certification,thevendor-neutral,industry-standardcertificationdevelopedforfoundation-levelcybersecurityprofessionals.Basedonaworldwidejobtaskanalysis,theexamstructurefocusesoncybersecuritycorecompetencies,understandinggovernance,risk,andcompliance;attacks,threats,andvulnerabilities;architectureanddesign;operationsandincidentresponse;andimplementation.WhethertheCompTIASecurity+certificationisyourfirststeptowardacareerfocusinsecurityoranadditionalskillcredential,thisbookisyourguidetosuccessontheCompTIASecurity+certificationexam.ThisbookisorganizedsimilarlytotheofficialCompTIASecurity+examobjectives,consistingoffivedomains,eachofwhichisdividedintoobjectivesthatalignwiththeCompTIASecurity+examobjectives.|stickcloselytotheexamcontentthat'sofficiallystatedbyCompTIA,andwhen|don't,|provideyoumyexperttakeonthebestwaytoapproachthetopics.Forexample,I'vechosentopresentDomain5,withitscoverageofrisk,afterDomain1anditsdiscussionofthreatandvulnerability.Eachdomaincontainssomeusefulitemstocalloutpointsofinterest:EXAMTIPIndicatescriticaltopicsyou'relikelytoseeontheactualexam.

Loading page image...

NOTEPointsoutancillarybutpertinentinformation,aswellasareasforfurtherstudy.KEYTERMDescribesspecialterms,indetail,andinawayyoucaneasilyunderstand.xCAUTIONWarnsyouofcommonpitfalls,misconceptions,andpotentiallyharmfulorriskysituationsinworkingwiththetechnologyintherealworld.Cross-ReferenceDirectsyoutootherplacesinthebookwhereconceptsarecovered,foryourreference.[J10]ADDITIONALRESOURCESWhereyoucanfindbooks,websites,andothermediaforfurtherassistance.Theendofeachobjectivegivesyoutwohandytools.TheReviewcoverseachobjectivewithasynopsis—agreatwaytoquicklyreviewthecriticalinformation.ThentheQuestionsandAnswersenableyoutotestyournewlyacquiredskills.Forfurtherstudy,thisbookincludesaccesstoonlinepracticeexamsthatwillhelptoprepare

Loading page image...

youfortakingtheexamitself.Alltheinformationyouneedforaccessingtheexamquestionsisprovidedintheappendix.|recommendthatyoutakethepracticeexamstoidentifywhereyouhaveknowledgegapsandthengobackandreviewasneeded.TheITindustrychangesandgrowscontinuously,andsoshouldyou.Finishingonecertificationisjustastepinanongoingprocessofgainingmoreknowledgetomatchyourconstantlychanginganddevelopingskills.Remember,inthecybersecuritybusiness,ifyou'renotmovingforward,you'rewaybehind!

Preview Mode

This document has 780 pages. Sign in to access the full document!

Report

Study Now!

Document Details

Related Documents

CompTIA CySA+ Study Guide, 3rd Edition (2023)

CompTIA CySA+ Cybersecurity Analyst Certification All-in-One Exam Guide (Exam CS0-003) (2024)

CompTIA DataX Study Guide: Exam DY0-001 (2024)

CompTIA CySA+ Practice Tests: Exam CS0-003 (2023)

CompTIA Tech+ CertMike Exam FC0-U71 (2024)

CompTIA Security+ Practice Tests: Exam SY0-701 (2024)

CompTIA Network+ Study Guide: Exam N10-009 (2024)

CompTIA Network+ Practice Tests: Exam N10-009 (2024)

CompTIA DataSys+ Study Guide : Exam DS0-001 (2023)

CompTIA Security+ Study Guide with over 500 Practice Test Questions : Exam SY0-701 (2023)

Company

Explore

Study Tools