Account management ranged from account creation on start up to its disablement when someone leaves the company. Fully understanding these concepts is crucial to obtaining the Security+ certification.
- Title Page
- Copyright and Credits
- Packt Upsell
- Contributor
- Preface
- Understanding Security Fundamentals
- CIA triad concept
- Identifying security controls
- Hashing and data integrity
- Defense in depth model
- Review questions
- Answers and explanations
- Conducting Risk Analysis
- Risk management
- Importance of policy, plans, and procedures
- Role—based awareness training
- Business impact analysis concepts
- Privacy threshold assessment/privacy impact assessment
- Supply chain risk assessment
- Business impact analysis concepts
- Risk procedures and concepts
- Risk register
- Qualitative/quantitative risk analysis
- Review questions
- Answers and explanations
- Implementing Security Policies and Procedures
- Delving into Identity and Access Management
- Understanding Network Components
- OSI – reference model
- Installing and configuring network components
- Security information and event management
- Secure network architecture concepts
- Implementing secure protocols
- Use case
- File transfer – use case
- Remote access – use case
- Email – use case
- Name resolution – use case
- Web – use case
- Voice and video – use case
- Network address allocation – use case
- Subscription services – use case
- Routing – use case
- Time synchronization – use case
- Directory services – use case
- Switching – use case
- Simple network management protocol – use case
- Use case
- Implementing wireless security
- Wireless bandwidth/band selection
- Wireless channels
- Wireless antenna types and signal strength
- Wireless coverage
- Wireless encryption
- Review questions
- Answers and explanations
- Understanding Cloud Models and Virtualization
- Cloud computing
- Implementing different cloud deployment models
- Cloud service models
- Disk resiliency and redundancy
- Storage area network
- Understanding cloud storage concepts
- Exploring virtual networks
- Heating, ventilation, and air-conditioning
- Network environments
- Practical exercise – is the cloud cost-effective?
- Review questions
- Answer and explanations
- Managing Hosts and Applications Deployment
- Deploying mobile devices securely
- Mobile device management concepts
- Device management
- Device protection
- Device data
- Mobile device enforcement and monitoring
- Industrial control system
- Mobile devices – security implications of embedded systems
- Special-purpose devices
- Secure application development and deployment concepts
- Development life cycle models – waterfall vs agile
- DevOps
- Server-side versus client-side execution and validation
- Review questions
- Answers and explanations
- Protecting Against Attacks and Vulnerabilities
- Virus and malware attacks
- Social engineering attacks
- Common attacks
- Programming attacks
- Hijacking related attacks
- Driver manipulation
- Cryptographic attacks
- Password attacks
- Wireless attacks
- Penetration testing
- Vulnerability scanning concepts
- Credentialed versus non-credentialed scans
- Penetration testing versus vulnerability scanning
- Practical exercise—running a vulnerability scanner
- Review questions
- Answers and explanations
- Implementing Public Key Infrastructure
- Public key infrastructure concepts
- Asymmetric and symmetric encryption
- Symmetric algorithms
- Asymmetric algorithms
- Symmetric versus asymmetric analogy
- Key stretching algorithms
- Cipher modes
- Hashing and data integrity
- Comparing and contrasting basic concepts of cryptography
- Basic cryptographic terminology
- Common use cases for cryptography
- Practical exercises
- Review questions
- Answers and explanations
- Responding to Security Incidents
- Managing Business Continuity
- Mock Exam 1
- Mock Exam 2
- Preparing for the CompTIA Security+ 501 Exam
- Tips on taking the exam
- Exam preparation
- Practical 1—drag and drop—attacks
- Practical 2—drag and drop—certificates
- Practical 3—drag and drop—ports/protocol
- Practical 4—drag and drop—authentication factors
- Practical 5—drag and drop—general
- Drag and drop—answers
- Linux information
- Acronyms
- Assessment
- Other Books You May Enjoy
Common account management practices
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.