You're reading from CompTIA Security+ SY0-701 Certification Guide - Third Edition

Product type Book

Published in Jan 2024

Publisher Packt

ISBN-13 9781835461532

Pages 622 pages

Edition 3rd Edition

Languages

Concepts

Cybersecurity

Author (1):

Ian Neil

Table of Contents (38) Chapters

Preface

1. Domain 1: General Security Concepts

2. Chapter 1: Compare and contrast various types of security controls

3. Chapter 2: Summarize fundamental security concepts

4. Chapter 3: Explain the importance of change management processes and the impact to security

5. Chapter 4: Explain the importance of using appropriate cryptographic solutions

6. Domain 2: Threats, Vulnerabilities, and Mitigations

7. Chapter 5: Compare and contrast common threat actors and motivations

8. Chapter 6: Explain common threat vectors and attack surfaces

9. Chapter 7: Explain various types of vulnerabilities

10. Chapter 8: Given a scenario, analyze indicators of malicious activity

11. Chapter 9: Explain the purpose of mitigation techniques used to secure the enterprise

12. Domain 3: Security Architecture

13. Chapter 10: Compare and contrast security implications of different architecture models

14. Chapter 11: Given a scenario, apply security principles to secure enterprise infrastructure

15. Chapter 12: Compare and contrast concepts and strategies to protect data

16. Chapter 13: Explain the importance of resilience and recovery in security architecture

17. Domain 4: Security Operations

18. Chapter 14: Given a scenario, apply common security techniques to computing resources

19. Chapter 15: Explain the security implications of proper hardware, software, and data asset management

20. Chapter 16: Explain various activities associated with vulnerability management

21. Chapter 17: Explain security alerting and monitoring concepts and tools

22. Chapter 18: Given a scenario, modify enterprise capabilities to enhance security

23. Chapter 19: Given a scenario, implement and maintain identity and access management

24. Chapter 20: Explain the importance of automation and orchestration related to secure operations

25. Chapter 21: Explain appropriate incident response activities

26. Chapter 22: Given a scenario, use data sources to support an investigation

27. Domain 5: Security Program Management and Oversight

28. Chapter 23: Summarize elements of effective security governance

29. Chapter 24: Explain elements of the risk management process

30. Chapter 25: Explain the processes associated with third-party risk assessment and management

31. Chapter 26: Summarize elements of effective security compliance

32. Chapter 27: Explain types and purposes of audits and assessments

33. Chapter 28: Given a scenario, implement security awareness practices

34. Chapter 29: Accessing the online practice resources

35. Solutions

36. Other Books You May Enjoy

Share Your Thoughts

37. Coupon Code for CompTIA Security+ Exam Vouchers

Documentation

Thorough documentation of changes ensures transparency, accountability, and a clear understanding of the changes being made. Properly documented changes help track modifications, making it easier to identify who made a change and why. This enhances security by reducing the risk of unauthorized or unaccounted-for alterations. Maintaining proper documentation is important and should involve the following best practices:

Updating diagrams: Keeping diagrams up to date (such as network topology or system architecture diagrams) supports a better understanding of the current environment. Accurate diagrams contribute to effective security management by avoiding any discrepancies that could lead to misunderstandings, misconfigurations, or even security gaps.
Updating policies/procedures: Regularly updating policies and procedures to reflect changes is pivotal for maintaining a secure environment. Outdated documentation can result in employees following incorrect guidelines...