<div> <b> <i>CompTIA Cybersecurity Analyst (CySA+) CS0-002 Cert Guide</i> </b> is a best-of-breed exam study guide. Expert technology instructor and certification author Troy McMillan shares preparation hints and test-taking tips, helping you identify areas of weakness and improve both your conceptu
CompTIA Cybersecurity Analyst (CySA+) CS0-002 Cert Guide (2nd Edition) (Certification Guide)
β Scribed by Troy McMillan
- Publisher
- Pearson IT Certification
- Year
- 2020
- Tongue
- English
- Leaves
- 1244
- Edition
- 2
- Category
- Library
No coin nor oath required. For personal study only.
β¦ Synopsis
β¦ Table of Contents
About This eBook
Title Page
Copyright Page
Contents at a Glance
Table of Contents
About the Author
Dedication
Acknowledgments
About the Technical Reviewer
We Want to Hear from You!
Reader Services
Introduction
Goals and Methods
Who Should Read This Book?
Strategies for Exam Preparation
How the Book Is Organized
Book Features
Whatβs New?
The Companion Website for Online Content Review
How to Access the Pearson Test Prep Practice Test Software
Customizing Your Exams
Credits
Chapter 1 The Importance of Threat Data and Intelligence
βDo I Know This Already?β Quiz
Foundation Topics
Intelligence Sources
Indicator Management
Threat Classification
Threat Actors
Intelligence Cycle
Commodity Malware
Information Sharing and Analysis Communities
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
Review Questions
Chapter 2 Utilizing Threat Intelligence to Support Organizational Security
βDo I Know This Already?β Quiz
Foundation Topics
Attack Frameworks
Threat Research
Threat Modeling Methodologies
Threat Intelligence Sharing with Supported Functions
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
Review Questions
Chapter 3 Vulnerability Management Activities
βDo I Know This Already?β Quiz
Foundation Topics
Vulnerability Identification
Validation
Remediation/Mitigation
Scanning Parameters and Criteria
Inhibitors to Remediation
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
Review Questions
Chapter 4 Analyzing Assessment Output
βDo I Know This Already?β Quiz
Foundation Topics
Web Application Scanner
Infrastructure Vulnerability Scanner
Software Assessment Tools and Techniques
Enumeration
Wireless Assessment Tools
Cloud Infrastructure Assessment Tools
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
Review Questions
Chapter 5 Threats and Vulnerabilities Associated with Specialized Technology
βDo I Know This Already?β Quiz
Foundation Topics
Mobile
Internet of Things (IoT)
Embedded Systems
Real-Time Operating System (RTOS)
System-on-Chip (SoC)
Field Programmable Gate Array (FPGA)
Physical Access Control
Building Automation Systems
Vehicles and Drones
Workflow and Process Automation Systems
Incident Command System (ICS)
Supervisory Control and Data Acquisition (SCADA)
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
Review Questions
Chapter 6 Threats and Vulnerabilities Associated with Operating in the Cloud
βDo I Know This Already?β Quiz
Foundation Topics
Cloud Deployment Models
Cloud Service Models
Function as a Service (FaaS)/Serverless Architecture
Infrastructure as Code (IaC)
Insecure Application Programming Interface (API)
Improper Key Management
Unprotected Storage
Logging and Monitoring
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
Review Questions
Chapter 7 Implementing Controls to Mitigate Attacks and Software Vulnerabilities
βDo I Know This Already?β Quiz
Foundation Topics
Attack Types
Vulnerabilities
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
Review Questions
Chapter 8 Security Solutions for Infrastructure Management
βDo I Know This Already?β Quiz
Foundation Topics
Cloud vs. On-premises
Asset Management
Segmentation
Network Architecture
Change Management
Virtualization
Containerization
Identity and Access Management
Cloud Access Security Broker (CASB)
Honeypot
Monitoring and Logging
Encryption
Certificate Management
Active Defense
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
Review Questions
Chapter 9 Software Assurance Best Practices
βDo I Know This Already?β Quiz
Foundation Topics
Platforms
Software Development Life Cycle (SDLC) Integration
DevSecOps
Software Assessment Methods
Secure Coding Best Practices
Static Analysis Tools
Dynamic Analysis Tools
Formal Methods for Verification of Critical Software
Service-Oriented Architecture
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
Review Questions
Chapter 10 Hardware Assurance Best Practices
βDo I Know This Already?β Quiz
Foundation Topics
Hardware Root of Trust
eFuse
Unified Extensible Firmware Interface (UEFI)
Trusted Foundry
Secure Processing
Anti-Tamper
Self-Encrypting Drives
Trusted Firmware Updates
Measured Boot and Attestation
Bus Encryption
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
Review Questions
Chapter 11 Analyzing Data as Part of Security Monitoring Activities
βDo I Know This Already?β Quiz
Foundation Topics
Heuristics
Trend Analysis
Endpoint
Network
Log Review
Impact Analysis
Security Information and Event Management (SIEM) Review
Query Writing
E-mail Analysis
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
Review Questions
Chapter 12 Implementing Configuration Changes to Existing Controls to Improve Security
βDo I Know This Already?β Quiz
Foundation Topics
Permissions
Whitelisting and Blacklisting
Firewall
Intrusion Prevention System (IPS) Rules
Data Loss Prevention (DLP)
Endpoint Detection and Response (EDR)
Network Access Control (NAC)
Sinkholing
Malware Signatures
Sandboxing
Port Security
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
Review Questions
Chapter 13 The Importance of Proactive Threat Hunting
βDo I Know This Already?β Quiz
Foundation Topics
Establishing a Hypothesis
Profiling Threat Actors and Activities
Threat Hunting Tactics
Reducing the Attack Surface Area
Bundling Critical Assets
Attack Vectors
Integrated Intelligence
Improving Detection Capabilities
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
Review Questions
Chapter 14 Automation Concepts and Technologies
βDo I Know This Already?β Quiz
Foundation Topics
Workflow Orchestration
Scripting
Application Programming Interface (API) Integration
Automated Malware Signature Creation
Data Enrichment
Threat Feed Combination
Machine Learning
Use of Automation Protocols and Standards
Continuous Integration
Continuous Deployment/Delivery
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
Review Questions
Chapter 15 The Incident Response Process
βDo I Know This Already?β Quiz
Foundation Topics
Communication Plan
Response Coordination with Relevant Entities
Factors Contributing to Data Criticality
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
Review Questions
Chapter 16 Applying the Appropriate Incident Response Procedure
βDo I Know This Already?β Quiz
Foundation Topics
Preparation
Detection and Analysis
Containment
Eradication and Recovery
Post-Incident Activities
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
Review Questions
Chapter 17 Analyzing Potential Indicators of Compromise
βDo I Know This Already?β Quiz
Foundation Topics
Network-Related Indicators of Compromise
Host-Related Indicators of Compromise
Application-Related Indicators of Compromise
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
Review Questions
Chapter 18 Utilizing Basic Digital Forensics Techniques
βDo I Know This Already?β Quiz
Foundation Topics
Network
Endpoint
Mobile
Cloud
Virtualization
Legal Hold
Procedures
Hashing
Carving
Data Acquisition
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
Review Questions
Chapter 19 The Importance of Data Privacy and Protection
βDo I Know This Already?β Quiz
Foundation Topics
Privacy vs. Security
Non-technical Controls
Technical Controls
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
Review Questions
Chapter 20 Applying Security Concepts in Support of Organizational Risk Mitigation
βDo I Know This Already?β Quiz
Foundation Topics
Business Impact Analysis
Risk Identification Process
Risk Calculation
Communication of Risk Factors
Risk Prioritization
Systems Assessment
Documented Compensating Controls
Training and Exercises
Supply Chain Assessment
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
Review Questions
Chapter 21 The Importance of Frameworks, Policies, Procedures, and Controls
βDo I Know This Already?β Quiz
Foundation Topics
Frameworks
Policies and Procedures
Category
Control Type
Audits and Assessments
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
Review Questions
Chapter 22 Final Preparation
Exam Information
Getting Ready
Tools for Final Preparation
Suggested Plan for Final Review/Study
Summary
Appendix A Answers to the βDo I Know This Already?β Quizzes and Review Questions
Appendix B CompTIA Cybersecurity Analyst (CySA+) CS0-002 Cert Guide Exam Updates
Always Get the Latest at the Bookβs Product Page
Technical Content
Glossary of Key Terms
Index
Appendix C Memory Tables
Appendix D Memory Tables Answer Key
Appendix E Study Planner
Where are the companion content files? - Register
Inside Front Cover
Inside Back Cover
Code Snippets
π SIMILAR VOLUMES
<p><b>Prepare for the CompTIA CySA+ certification exam using this fully updated self-study resource</b></p> <p>Take the current version of the challenging CompTIA CySA+β’ certification exam with confidence using the detailed information contained in this up-to-date integrated study system. Based on p
<b>This comprehensive self-study guide offers complete coverage of the new CompTIA Cybersecurity Analyst+ certification exam</b><br /><br /><b>Note: This guide has been updated to reflect CompTIA's exam acronym C</b><b>ySA+.</b><br /><br />This highly effective self-study system provides complete co