CompTIA Security+: Get Certified Get Ahead PDF
Preview CompTIA Security+: Get Certified Get Ahead
Copyright © 2011 Darril Gibson All rights reserved. ISBN: 1463762364 ISBN-13: 9781463762360 eBook ISBN: 978-1-61915-813-9 Library of Congress Control Number: 2011913176 CreateSpace, North Charleston, SC Dedication To my wife, who even after nineteen years of marriage continues to remind me how wonderful life can be if you’re in a loving relationship. Thanks for sharing your life with me. Acknowledgments Books of this size and depth can’t be done by a single person, and I’m grateful for the many people who helped me put this book together. First, thanks to my wife. She has provided me immeasurable support throughout this project. The two technical editors, Duane Gibson and Bill Talbott, provided outstanding feedback and superb technical insight. Bill is an old friend from my Navy days, and he’s currently doing great things as a consultant working for Microsoft. Duane (my brother) is an old friend from my childhood days, and he’s widely recognized as a Cisco expert. They both have taught many Security+ classes and provided me with some great perspectives. I’m grateful they were involved in this project. I certainly appreciate all the feedback they gave me, but I want to stress that any technical errors that may have snuck into this book are entirely my fault and no reflection on them. The entire team at CreateSpace was easy to work with and provided excellent services from the first contact through the entire editing and layout process. I’m thankful for all the work and support they provided. About the Author Darril Gibson is an accomplished author and professional trainer. He has authored or coauthored more than a dozen books and contributed as a technical editor for many more books. He holds many current IT certifications, including: CompTIA A+, Network+, Security+, CASP, (ISC)2 SSCP, CISSP, Microsoft’s MCDST (XP), MCSA, MCSA Messaging (2000, 2003), MCSE (NT 4.0, 2000, 2003), MCDBA (SQL 7.0, 2000), MCITP (Vista, Server 2008, SQL 2005, SQL 2008), MCTS (Server 2008, SQL Server 2008), MCSD (6.0, .NET), and ITIL Foundations v 3.0. He is the CEO of Security Consulting and Training, LLC, and actively teaches, writes, and consults on a wide variety of IT topics, including CompTIA Security+. He also teaches as an adjunct professor at ECPI University. Darril lives in Virginia Beach with his wife and two dogs. Whenever possible, they escape to a small cabin in the country on over twenty acres of land that continue to provide peace, tranquility, and balance. You can send him an email at [email protected]. About the Technical Editors Duane Gibson’s certs are A+, Network+, Security+, MCSE, CCNA, CEH, and FCC-GROL. He has over 10 years’ experience as a technical trainer. Bill Talbott is the founder and CEO of Talbott Consulting and Training, Inc. and has been in the IT industry for over 23 years. He has been a technical trainer for the past 11 years specializing in the delivery of Microsoft, CompTIA and tailored curriculum for Universities, Fortune 500 and local companies. Table of Contents Introduction Who This Book is For About This Book How to Use This Book Remember This Vendor Neutral Web Resources Assumptions Set a Goal About the Exam Number of Questions and Duration Passing Score Beta Questions Question Types Exam Format Exam Prerequisites Exam Test Providers Exam Domains Objective to Chapter Map Recertification Requirements CompTIA Security+ Assessment Exam Assessment Exam Answers Chapter 1 Mastering the Basics of Security Exploring Core Security Principles Confidentiality Integrity Availability Balancing CIA Non-repudiation Defense in Depth Implicit Deny Introducing Basic Risk Concepts Exploring Authentication Concepts Comparing Identification, Authentication, and Authorization Identity Proofing Identity Proofing for Verification Self-service Password Reset Systems Three Factors of Authentication Something You Know Something You Have Something You Are Multifactor Authentication Exploring Authentication Services Kerberos LDAP Mutual Authentication Single Sign-on IEEE 802.1X Remote Access Authentication PAP CHAP MS-CHAP and MS-CHAPv2 RADIUS TACACS/XTACACS TACACS+ AAA Protocols Chapter 1 Exam Topic Review Chapter 1 Practice Questions Chapter 1 Practice Question Answers Chapter 2 Exploring Control Types and Methods Understanding Basic Control Types Technical Controls Management Controls Operational Controls Controls Based on Functions Preventative Controls Detective Controls Corrective Controls Exploring Access Control Models Role- and Rule-Based Access Control Using Roles Based on Jobs and Functions Establishing Access with Groups as Roles Using User Templates to Enforce Least Privilege Discretionary Access Control SIDs and DACLs The Owner Establishes Access Beware of Trojans Mandatory Access Control Labels and Lattice Establishing Access Understanding Physical Security Controls Access Controls Door Access Systems Physical Access Control—ID Badges Physical Access Lists and Logs Tailgating Mantraps Security Guards Video Surveillance (CCTV) Physical Tokens Hardware Locks Understanding Logical Access Controls Least Privilege Access Control Lists Group Policy Using a Password Policy Domain Password Policy Device Policy Account Management Centralized and Decentralized Account Management Disabling and Deleting Accounts Time-of-day Restrictions Account Expiration Account Access Review Chapter 2 Exam Topic Review Chapter 2 Practice Questions Chapter 2 Practice Question Answers Chapter 3 Understanding Basic Network Security Reviewing Basic Networking Concepts Protocols Common TCP/IP Protocols IPv4 vs IPv6 Subnetting Subnetting and Availability Calculating Subnet IP Addresses with a Calculator Understanding and Identifying Ports Well-Known Ports Combining the IP Address and the Port IP Address Used to Locate Hosts Server Ports Client Ports Putting It All Together The Importance of Ports in Security Port Scanners Understanding Basic Network Devices Hub Switch
The list of books you might like
