Produktbild: Casp+ Comptia Advanced Security Practitioner Study Guide

Casp+ Comptia Advanced Security Practitioner Study Guide Exam Cas-004

Aus der Reihe Sybex Study Guide

59,99 €

inkl. gesetzl. MwSt., Versandkostenfrei


Beschreibung

Produktdetails

Einband

Taschenbuch

Erscheinungsdatum

11.10.2022

Verlag

John Wiley & Sons Inc

Seitenzahl

592

Maße (L/B/H)

23,2/18,4/3 cm

Gewicht

816 g

Auflage

4th edition

Sprache

Englisch

ISBN

978-1-119-80316-4

Beschreibung

Produktdetails

Einband

Taschenbuch

Erscheinungsdatum

11.10.2022

Verlag

John Wiley & Sons Inc

Seitenzahl

592

Maße (L/B/H)

23,2/18,4/3 cm

Gewicht

816 g

Auflage

4th edition

Sprache

Englisch

ISBN

978-1-119-80316-4

Herstelleradresse

Libri GmbH
Europaallee 1
36244 Bad Hersfeld
DE

Email: GPSR Kontakt

Noch keine Bewertungen vorhanden

Verfassen Sie die erste Bewertung zu diesem Artikel

Helfen Sie anderen Kundinnen und Kunden durch Ihre Meinung.

Kundinnen und Kunden meinen

Bewertungen (0)

Die Leseprobe wird geladen.
  • Produktbild: Casp+ Comptia Advanced Security Practitioner Study Guide
  • Introduction xxv
     
    Assessment Test xxxv
     
    Chapter 1 Risk Management 1
     
    Risk Terminology 4
     
    The Risk Assessment Process 6
     
    Asset Identification 6
     
    Information Classification 8
     
    Risk Assessment 9
     
    Risk Assessment Options 14
     
    Implementing Controls 16
     
    Policies Used to Manage Employees 17
     
    Pre-Employment Policies 18
     
    Employment Policies 18
     
    End of Employment and Termination Procedures 20
     
    Cost-Benefit Analysis 21
     
    Continuous Monitoring 22
     
    Enterprise Security Architecture Frameworks and Governance 23
     
    Training and Awareness for Users 24
     
    Best Practices for Risk Assessments 25
     
    Business Continuity Planning and Disaster Recovery 27
     
    Reviewing the Effectiveness of Existing Security Controls 28
     
    Conducting Lessons Learned and After-Action Reviews 30
     
    Creation, Collection, and Analysis of Metrics 31
     
    Metrics 31
     
    Trend Data 32
     
    Analyzing Security Solutions to Ensure They Meet Business Needs 32
     
    Testing Plans 33
     
    Internal and External Audits 34
     
    Using Judgment to Solve Difficult Problems 35
     
    Summary 35
     
    Exam Essentials 36
     
    Review Questions 38
     
    Chapter 2 Configure and Implement Endpoint Security Controls 43
     
    Hardening Techniques 45
     
    Address Space Layout Randomization Use 47
     
    Hardware Security Module and Trusted Platform Module 48
     
    Trusted Operating Systems 52
     
    Compensating Controls 55
     
    Summary 57
     
    Exam Essentials 58
     
    Review Questions 59
     
    Chapter 3 Security Operations Scenarios 63
     
    Threat Management 66
     
    Types of Intelligence 66
     
    Threat Hunting 67
     
    Threat Emulation 67
     
    Actor Types 67
     
    Intelligence Collection Methods 71
     
    Open-Source
     
    Intelligence 71
     
    Human Intelligence and Social Engineering 73
     
    Frameworks 74
     
    MITRE Adversarial Tactics, Techniques and Common Knowledge 74
     
    ATT&CK for Industrial Control Systems 75
     
    Cyber Kill Chain 76
     
    Diamond Model of Intrusion Analysis 76
     
    Indicators of Compromise 77
     
    Reading the Logs 77
     
    Intrusion Detection and Prevention 78
     
    Notifications and Responses to IoCs 79
     
    Response 80
     
    Summary 85
     
    Exam Essentials 85
     
    Review Questions 86
     
    Chapter 4 Security Ops: Vulnerability Assessments and Operational Risk 91
     
    Terminology 97
     
    Vulnerability Management 98
     
    Security Content Automation Protocol 103
     
    Self-Assessment vs. Third-Party Vendor Assessment 105
     
    Patch Management 108
     
    Information Sources 110
     
    Tools 112
     
    Assessments 124
     
    Penetration Testing 129
     
    Assessment Types 131
     
    Vulnerabilities 134
     
    Buffer Overflow 134
     
    Integer Overflow 135
     
    Memory Leaks 136
     
    Race Conditions (TOC/TOU) 136
     
    Resource Exhaustion 137
     
    Data Remnants 138
     
    Use of Third-Party Libraries 138
     
    Code Reuse 138
     
    Cryptographic Vulnerabilities 138
     
    Broken Authentication 139
     
    Security Misconfiguration 140
     
    Inherently Vulnerable System/Application 140
     
    Client-Side Processing vs. Server-Side Processing 141
     
    Attacks 145
     
    Proactive Detection 153
     
    Incident Response 153
     
    Countermeasures 153
     
    Deceptive Technology 154
     
    USB Key Drops 155
     
    Simulation