Security+ study guide

866 Pages·2002·11.131 MB·English

by  Michael Cross, Norris L Jr Johnson, Tony Piltzecker, Robert J Shimonski, Debra Littlejohn Shinder

236_Splus_FM.qxd 11/19/02 6:14 PM Page i
Syngress knows what passing the exam means to
you and to your career. And we know that you
are often financing your own training and certifi-
cation; therefore, you need a system that is com-
prehensive, affordable, and effective.
Boasting a one-of-a-kind integration of text, DVD-
quality instructor-led training, and Web-based exam simulation
and remediation, Syngress Study Guide & DVD Training Systems give you 100%
coverage of exam objectives plus test preparation software.
What you will find between the covers of this book (and in your free access to
our Web site!), is $2,000 worth of training wrapped in a $60 book/DVD/Web-
enhanced training system, including:
(cid:2) Study Guide with 100% coverage of exam objectives By reading
this study guide and following the corresponding objective list, you
can be sure that you have studied 100% of CompTIA’s Security+
exam objectives.
(cid:2) Instructor-led DVD This DVD provides almost two hours of virtual
classroom instruction.
(cid:2) Web-based practice exams Just visit us at www.syngress.com/
certification to access a complete exam simulation.
The book you’re now holding is your key to this amazing site. Just go to
www.syngress.com/certification, and keep this book handy when you register to
verify your purchase.
Thank you for giving us the opportunity to serve your certification needs. And
be sure to let us know if there’s anything else we can do to help you get the
maximum value from your investment. We’re listening.
www.syngress.com/certification
236_Splus_FM.qxd 11/19/02 6:14 PM Page ii
236_Splus_FM.qxd 11/19/02 6:14 PM Page iii
Michael Cross
Norris L. Johnson, Jr.
Tony Piltzecker
Robert J. Shimonski
Technical Editor
Debra Littlejohn Shinder
Technical Editor
236_Splus_FM.qxd 11/19/02 6:14 PM Page iv
Syngress Publishing,Inc.,the author(s),and any person or firm involved in the writing,editing,or
production (collectively “Makers”) of this book (“the Work”) do not guarantee or warrant the results
to be obtained from the Work.
There is no guarantee of any kind,expressed or implied,regarding the Work or its contents.The Work
is sold AS IS and WITHOUT WARRANTY.You may have other legal rights,which vary from state
to state.
In no event will Makers be liable to you for damages,including any loss of profits,lost savings,or
other incidental or consequential damages arising out from the Work or its contents.Because some
states do not allow the exclusion or limitation of liability for consequential or incidental damages,the
above limitation may not apply to you.
You should always use reasonable care,including backup and other appropriate precautions,when
working with computers,networks,data,and files.
Syngress Media®,Syngress®,“Career Advancement Through Skill Enhancement®,”and “Ask the
Author UPDATE®,”are registered trademarks of Syngress Publishing,Inc.“Mission Critical™,”“Hack
Proofing®,”and “The Only Way to Stop a Hacker is to Think Like One™”are trademarks of Syngress
Publishing,Inc.Brands and product names mentioned in this book are trademarks or service marks of
their respective companies.
KEY SERIAL NUMBER
001 JE5RFB8YHQ
002 ZQ9PLG45FC
003 6YPMN43ED2
004 VT56YHB23S
005 3U3S8M5PTR
006 ESB7NX6C46
007 G2A8DQ4EPK
008 9UKMBRD7J6
009 SHWP7V64KF
010 Z5VF7BM39U
PUBLISHED BY
Syngress Publishing,Inc.
800 Hingham Street
Rockland,MA 02370
Security+ Study Guide and DVD Training System
Copyright © 2002 by Syngress Publishing,Inc.All rights reserved.Printed in the United States of
America.Except as permitted under the Copyright Act of 1976,no part of this publication may be
reproduced or distributed in any form or by any means,or stored in a database or retrieval system,
without the prior written permission of the publisher,with the exception that the program listings
may be entered,stored,and executed in a computer system,but they may not be reproduced for
publication.
Printed in the United States of America
1 2 3 4 5 6 7 8 9 0
ISBN: 1-931836-72-8
Technical Editors:Robert J.Shimonski and Cover Designer:Michael Kavish
Debra Littlejohn Shinder Page Layout and Art by:Shannon Tozier
Technical Reviewer:Diana Huggins Copy Editor:Judy Eby
Acquisitions Editor:Catherine B.Nolan Indexer:Nara Wood
DVD Production:Michael Donovan
Distributed by Publishers Group West in the United States and Jaguar Book Group in Canada.
236_Splus_FM.qxd 11/19/02 6:14 PM Page v
Acknowledgments
We would like to acknowledge the following people for their kindness and support
in making this book possible.
Karen Cross,Lance Tilford,Meaghan Cunningham,Kim Wylie,Harry Kirchner,
Kevin Votel,Kent Anderson,Frida Yara,Jon Mayes,John Mesjak,Peg O’Donnell,
Sandra Patterson,Betty Redmond,Roy Remer,Ron Shapiro,Patricia Kelly,Andrea
Tetrick,Jennifer Pascal,Doug Reil,David Dahl,Janis Carpenter,and Susan Fryer of
Publishers Group West for sharing their incredible marketing experience and
expertise.
Duncan Enright,AnnHelen Lindeholm,David Burton,Febea Marinetti,and Rosie
Moss of Elsevier Science for making certain that our vision remains worldwide in
scope.
David Buckland,Wendi Wong,Daniel Loh,Marie Chieng,Lucy Chong,Leslie Lim,
Audrey Gan,and Joseph Chan of Transquest Publishers for the enthusiasm with
which they receive our books.
Kwon Sung June at Acorn Publishing for his support.
Jackie Gross,Gayle Voycey,Alexia Penny,Anik Robitaille,Craig Siddall,Darlene
Morrow,Iolanda Miller,Jane Mackay,and Marie Skelly at Jackie Gross & Associates
for all their help and enthusiasm representing our product in Canada.
Lois Fraser,Connie McMenemy,Shannon Russell,and the rest of the great folks at
Jaguar Book Group for their help with distribution of Syngress books in Canada.
David Scott,Annette Scott,Geoff Ebbs,Hedley Partis,Bec Lowe,and Tricia Herbert
of Woodslane for distributing our books throughout Australia,New Zealand,Papua
New Guinea,Fiji Tonga,Solomon Islands,and the Cook Islands.
Winston Lim of Global Publishing for his help and support with distribution of
Syngress books in the Philippines.
vv
236_Splus_FM.qxd 11/19/02 6:14 PM Page vi
236_Splus_FM.qxd 11/19/02 6:14 PM Page vii
Contributors
Norris L. Johnson, Jr. (MCSA,MCSE,MCT,CTT+,A+,Network+,
CCNA) is a technology trainer and owner of a consulting company in
the Seattle-Tacoma area.His consultancies have included deployments and
security planning for local firms and public agencies,as well as providing
services to other local computer firms in need of problem solving and
solutions for their clients.He specializes in Windows NT 4.0,Windows
2000,and Windows XP issues,providing planning,implementation,and
integration services.In addition to consulting work,Norris provides
technical training for clients and teaches for area community and tech-
nical colleges in the classroom.He has co-authored Configuring and
Troubleshooting Windows XP Professional (Syngress Publishing,ISBN:
1-928994-80-6) and Hack Proofing Your Network,Second Edition (Syngress,
ISBN:1-928994-70-9),and performed technical edits and reviews on
Hack Proofing Windows 2000 Server (Syngress,ISBN:1-931836-49-3)
and Windows 2000 Active Directory,Second Edition (Syngress,ISBN:
1-928994-60-1). Norris holds a bachelor’s degree from Washington State
University.He is deeply appreciative of the support of his wife,Cindy,and
three sons in helping to maintain his focus and efforts toward computer
training and education.
F.William Lynch (SCSA,CCNA,LPI-I,MCSE,MCP,Linux+,A+) is
co-author for Hack Proofing Sun Solaris 8 (Syngress Publishing,ISBN:
1-928994-44-X),Hack Proofing XML (Syngress,ISBN:1-931836-50-7),
and Hack Proofing Your Network,Second Edition (Syngress,ISBN:
1-928994-70-9).He is an independent security and systems administra-
tion consultant and specializes in firewalls,virtual private networks,secu-
rity auditing,documentation,and systems performance analysis.William
has served as a consultant to multinational corporations and the Federal
government including the Centers for Disease Control and Prevention
headquarters in Atlanta,GA as well as various airbases of the United
States Air Force.He is also the founder and director of the MRTG-PME
project,which uses the MRTG engine to track systems performance of
vii
236_Splus_FM.qxd 11/19/02 6:14 PM Page viii
various UNIX-like operating systems.William holds a bachelor’s degree
in Chemical Engineering from the University of Dayton in Dayton,OH
and a master’s of Business Administration from Regis University in
Denver,CO.
Jeremy Faircloth (CCNA,MCSE,MCP+I,A+) is a Senior IT Engineer
for Gateway,Inc.,where he develops and maintains enterprise-wide
client/server and Web-based technologies.He also acts as a technical
resource for other IT professionals,using his expertise to help others
expand their knowledge.As an analyst with over 10 years of real world IT
experience,he has become an expert in many areas including Web devel-
opment,database administration,enterprise security,network design,and
project management.Jeremy currently resides in Dakota City,NE and
wishes to thank Christina Williams and Austin Faircloth for their support
in his various technical endeavors.
Tony Piltzecker (CISSP,MCSE,CCNA,Check Point CCSA,Citrix
CCA),author of the CCSA Exam Cram,is a Network Architect with
Planning Systems Inc.,providing network design and support for federal
and state agencies.Tony’s specialties include network security design,
implementation,and testing.Tony’s background includes positions as a
Senior Networking Consultant with Integrated Information Systems and
a Senior Engineer with Private Networks,Inc.Tony holds a bachelor’s
degree in Business Administration,and is a member of ISSA.Tony cur-
rently resides in Leominster,MA with his wife,Melanie,and his daughter,
Kaitlyn.
Tony Bautts is an independent security consultant currently providing
security advice and architecture for clients in the San Francisco Bay Area.
His specialties include wireless security and deployment,intrusion detec-
tion systems,post-intrusion forensics and firewall and secure infrastructure
design.His security experience has led him to work with Fortune 500
companies in the United States and Japan.He is also co-author of Hack
Proofing Your Wireless Network (Syngress Publishing,ISBN:1-928994-59-8)
and Nokia Network Security Solutions Handbook (Syngress,ISBN:1-931836-
viii
236_Splus_FM.qxd 11/19/02 6:14 PM Page ix
70-1),and the technical reviewer of Configuring IPv6 for Cisco IOS
(Syngress,ISBN:1-928994-84-9).
Michael Cross (MCSE,MCP+I,CNA,Network+) is an Internet
Specialist and Programmer with the Niagara Regional Police Service,and
has also served as their Network Administrator.He performs computer
forensic examinations on computers involved in criminal investigations,
and has consulted and assisted in cases dealing with computer-related/
Internet crimes.He is responsible for designing and maintaining their
Web site at www.nrps.com,as well as their Intranet.He programs applica-
tions used by various units of the Police Service,has been responsible for
network security and administration,and continues to assist in this regard.
Michael is part of an Information Technology team that provides support
to a user base of over 800 civilian and uniform users.His theory is that
when the users carry guns,you tend to be more motivated in solving
their problems.
Michael also owns KnightWare,a company that provides Web page
design and various other services.In addition to this company,he has
been a freelance writer for several years,and published over three dozen
times in numerous books and anthologies.He is a contributing author to
Scene of the Cybercrime:Computer Forensics Handbook (Syngress Publishing,
ISBN:1-931836-65-5).He currently resides in St.Catharines,Ontario,
Canada with his lovely wife,Jennifer,and his darling daughter,Sara.
Will Schmied (BSET,MCSE,CWNA,MCSA,Network+,A+),consul-
tant and author,is the Principal Partner of Area 51 Partners.Will holds a
bachelor’s degree in Mechanical Engineering Technology from Old
Dominion University.Will is the technical reviewer of Configuring and
Troubleshooting Windows XP Professional (Syngress Publishing,ISBN:
1-928994-80-6) and the author of the forthcoming MCSE Implementing
& Administering Security in a Windows 2000 Network (Syngress,ISBN:
1-931836-84-1).Will currently resides in Newport News,VA with his
wife,Allison,and their children,Christopher,Austin,Andrea,and Hannah.
When he is not busy designing,configuring,training,or writing on wire-
less and wired networking technologies,you can usually find him in the
back yard with his dogs or in the forest with his Cub Scout pack.
ix