CASP+ Practice Tests

383 Pages·2020·6.153 MB·English

by  Nadean H. Tanner

CompTIA® CASP+
Practice Tests
EXAM CAS-003
CompTIA® CASP+
Practice Tests
EXAM CAS-003
Nadean H. Tanner
Copyright © 2020 by John Wiley & Sons, Inc., Indianapolis, Indiana
Published simultaneously in Canada
ISBN: 978-1-119-68372-8
ISBN: 978-1-119-68374-2 (ebk.)
ISBN: 978-1-119-68373-5 (ebk.)
No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any
means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted under Sections
107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or
authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, 222 Rosewood
Drive, Danvers, MA 01923, [phone], fax [phone]. Requests to the Publisher for permission should
be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030, (201)
748-6011, fax [phone], or online at www.wiley.com/go/permissions.
Limit of Liability/Disclaimer of Warranty: The publisher and the author make no representations or warranties
with respect to the accuracy or completeness of the contents of this work and specifically disclaim all warranties,
including without limitation warranties of fitness for a particular purpose. No warranty may be created or extended
by sales or promotional materials. The advice and strategies contained herein may not be suitable for every situation.
This work is sold with the understanding that the publisher is not engaged in rendering legal, accounting, or other
professional services. If professional assistance is required, the services of a competent professional person should
be sought. Neither the publisher nor the author shall be liable for damages arising herefrom. The fact that an
organization or Web site is referred to in this work as a citation and/or a potential source of further information
does not mean that the author or the publisher endorses the information the organization or Web site may provide
or recommendations it may make. Further, readers should be aware that Internet Web sites listed in this work may
have changed or disappeared between when this work was written and when it is read.
For general information on our other products and services or to obtain technical support, please contact our
Customer Care Department within the U.S. at [phone], outside the U.S. at [phone] or fax (317) 572-
4002.
Wiley publishes in a variety of print and electronic formats and by print-on-demand. Some material included with
standard print versions of this book may not be included in e-books or in print-on-demand. If this book refers to
media such as a CD or DVD that is not included in the version you purchased, you may download this material at
http://booksupport.wiley.com. For more information about Wiley products, visit www.wiley.com.
Library of Congress Control Number: 2020938995
TRADEMARKS: Wiley, the Wiley logo, and the Sybex logo are trademarks or registered trademarks of John Wiley
& Sons, Inc. and/or its affiliates, in the United States and other countries, and may not be used without written
permission. All other trademarks are the property of their respective owners. John Wiley & Sons, Inc. is not
associated with any product or vendor mentioned in this book.
6b 65 6e 6e 65 74 68 2c 20 69 20 6c 6f 76 65 20 79 6f 75 21
Acknowledgments
To Kenneth, thank you for all the love and question suggestions and for cooking dinner
when I had a deadline.
To Shelby and Gavin, thank you for your patience and encouragement and for eating the
dinners Daddy cooked.
To Kenyon Brown for making the ask, to Jan Lynn for keeping me on task, and to my
dearest friend, Ryan Hendricks, for making sure I was right. I couldn’t have done this
without such talent and dedication.
And, to those of you taking the CASP+ exam, whether you volunteered or were
voluntold—this book is for you. Best of luck, you got this!
About the Author
Nadean Hutto Tanner is the senior manager of Technical Edu-
cation Strategy for Puppet software. Prior to Puppet, she was the
lead instructor at Rapid7 teaching Nexpose, incident detection and
response, and Metasploit. For more than 20 years, she has worked
in academia as the IT director at a private school and a technology
instructor at the university level. Tanner holds many industry certi-
fications including the following:
ISC2: CISSP
CompTIA: A+, Network+, Security+, Server+, CTT+, CIOS, CNIP, CSIS, CASP+
ITIL: ITILv3
Microsoft: MCTS, MCITP, MCSA, MCT, MCP, MOS
Rapid7: IICS, IVMCA, MPCS, NACA, NCP
Tanner has trained and consulted for Fortune 50 companies in cybersecurity and secu-
rity awareness, and has received hands-on experience working for the Department of
Defense.
She is the author of the Cybersecurity Blue Team Toolkit, published by Wiley in 2019.
About the Technical Editor
Ryan Hendricks (CISSP, CEH, CASP+, Security+) has more than 15 years of cybersecurity
and intelligence experience. His first venture was working on intelligence operations for
the U.S. Navy; he continued in the government and private sectors as an educator, facili-
tator, consultant, and advisor for a multitude of information technology and cybersecurity
p rincipals.
Hendricks holds many certifications covering hardware, networking, operating systems,
and cybersecurity. He worked as a trainer for the U.S. Department of Defense, educating
hundreds of students on everything from military communication systems to the CompTIA
CASP+ and (ISC)2 CISSP certifications.
Hendricks currently supports all technical product training operations at VMware
Carbon Black, including creating content, developing labs, updating materials, piloting and
expanding the certification programs, mentoring and managing the training team, and edu-
cating anyone who is willing to learn. When not working, he tries to balance spending his
time learning new security tools and attack techniques to feed his need for knowledge and
playing video games with his kids.
Contents at a Glance
Introduction xvii
Chapter 1 Risk Management 1
Chapter 2 Enterprise Security Architecture 37
Chapter 3 Enterprise Security Operations 89
Chapter 4 Technical Integration of Enterprise Security 127
Chapter 5 Research, Development, and Collaboration 173
Chapter 6 Practice Test 1 199
Chapter 7 Practice Test 2 217
Appendix Answers to Review Questions 235
Index 353
Contents
Introduction xvii
Chapter 1 Risk Management 1
Chapter 2 Enterprise Security Architecture 37
Chapter 3 Enterprise Security Operations 89
Chapter 4 Technical Integration of Enterprise Security 127
Chapter 5 Research, Development, and Collaboration 173
Chapter 6 Practice Test 1 199
Chapter 7 Practice Test 2 217
Appendix Answers to Review Questions 235
Chapter 1: Risk Management 236
Chapter 2: Enterprise Security Architecture 255
Chapter 3: Enterprise Security Operations 278
Chapter 4: Technical Integration of Enterprise Security 298
Chapter 5: Research, Development, and Collaboration 320
Chapter 6: Practice Test 1 333
Chapter 7: Practice Test 2 342
Index 353