You're reading from CompTIA Security+ SY0-701 Certification Guide - Third Edition

Product type Book

Published in Jan 2024

Publisher Packt

ISBN-13 9781835461532

Pages 622 pages

Edition 3rd Edition

Languages

Concepts

Cybersecurity

Author (1):

Ian Neil

Table of Contents (38) Chapters

Preface

1. Domain 1: General Security Concepts

2. Chapter 1: Compare and contrast various types of security controls

3. Chapter 2: Summarize fundamental security concepts

4. Chapter 3: Explain the importance of change management processes and the impact to security

5. Chapter 4: Explain the importance of using appropriate cryptographic solutions

6. Domain 2: Threats, Vulnerabilities, and Mitigations

7. Chapter 5: Compare and contrast common threat actors and motivations

8. Chapter 6: Explain common threat vectors and attack surfaces

9. Chapter 7: Explain various types of vulnerabilities

10. Chapter 8: Given a scenario, analyze indicators of malicious activity

11. Chapter 9: Explain the purpose of mitigation techniques used to secure the enterprise

12. Domain 3: Security Architecture

13. Chapter 10: Compare and contrast security implications of different architecture models

14. Chapter 11: Given a scenario, apply security principles to secure enterprise infrastructure

15. Chapter 12: Compare and contrast concepts and strategies to protect data

16. Chapter 13: Explain the importance of resilience and recovery in security architecture

17. Domain 4: Security Operations

18. Chapter 14: Given a scenario, apply common security techniques to computing resources

19. Chapter 15: Explain the security implications of proper hardware, software, and data asset management

20. Chapter 16: Explain various activities associated with vulnerability management

21. Chapter 17: Explain security alerting and monitoring concepts and tools

22. Chapter 18: Given a scenario, modify enterprise capabilities to enhance security

23. Chapter 19: Given a scenario, implement and maintain identity and access management

24. Chapter 20: Explain the importance of automation and orchestration related to secure operations

25. Chapter 21: Explain appropriate incident response activities

26. Chapter 22: Given a scenario, use data sources to support an investigation

27. Domain 5: Security Program Management and Oversight

28. Chapter 23: Summarize elements of effective security governance

29. Chapter 24: Explain elements of the risk management process

30. Chapter 25: Explain the processes associated with third-party risk assessment and management

31. Chapter 26: Summarize elements of effective security compliance

32. Chapter 27: Explain types and purposes of audits and assessments

33. Chapter 28: Given a scenario, implement security awareness practices

34. Chapter 29: Accessing the online practice resources

35. Solutions

36. Other Books You May Enjoy

Share Your Thoughts

37. Coupon Code for CompTIA Security+ Exam Vouchers

Exam Objectives 2.5

Explain the purpose of mitigation techniques used to secure the enterprise.

Segmentation: Dividing networks into smaller segments
Access control: Regulatomg user access to sensitive resources:
- Access control list (ACL): Digital gatekeeper with a guest list, filtering authorized access
- Permissions: Digital keys, granting entry or locking users from resources
Application allow list: Allow trusted software, blocks untrusted applications
Isolation: Separates and protects critical assets
Patching: Regular updates to fix software vulnerabilities
Encryption: Secures data by making it unreadable to unauthorized parties
Monitoring: Dynamically identifies and addresses security threats
Least privilege: Users and processes get only essential permissions
Configuration enforcement: Maintains systems per security standards
Decommissioning: Identifies and retires unneeded assets
Hardening techniques: Strengthen host security against...