CompTIA CySA+ Study Guide: Exam CS0-001

✍ Scribed by Mike Chapple; David Seidl

• Publisher: John Wiley & Sons
• Year: 2017
• Tongue: English
• Leaves: 758
• Category: Library

✦ Synopsis

NOTE: The name of the exam has changed from CSA+ to CySA+. However, the CS0-001 exam objectives are exactly the same. After the book was printed with CSA+ in the title, CompTIA changed the name to CySA+. We have corrected the title to CySA+ in subsequent book printings, but earlier printings that were sold may still show CSA+ in the title. Please rest assured that the book content is 100% the same. Prepare yourself for the newest CompTIA certification The CompTIA Cybersecurity Analyst+ (CySA+) Study Guide provides 100% coverage of all exam objectives for the new CySA+ certification. The CySA+ certification validates a candidate's skills to configure and use threat detection tools, perform data analysis, identify vulnerabilities with a goal of securing and protecting organizations systems. Focus your review for the CySA+ with Sybex and benefit from real-world examples drawn from experts, hands-on labs, insight on how to create your own cybersecurity toolkit, and end-of-chapter review questions help you gauge your understanding each step of the way. You also gain access to the Sybex interactive learning environment that includes electronic flashcards, a searchable glossary, and hundreds of bonus practice questions. This study guide provides the guidance and knowledge you need to demonstrate your skill set in cybersecurity. Key exam topics include: Threat management Vulnerability management Cyber incident response Security architecture and toolsets

✦ Table of Contents

Acknowledgments
About the Authors
Introduction
What Does This Book Cover?
Objectives Map for CompTIA Cybersecurity Analyst (CSA+) Exam CS0-001
Objectives Map
Assessment Test
Answer to the Assessment Test
Chapter 1 Defending Against Cybersecurity Threats
Cybersecurity Objectives
Evaluating Security Risks
Building a Secure Network
Secure Endpoint Management
Penetration Testing
Reverse Engineering
Summary
Exam Essentials
Lab Exercises
Review Questions
Chapter 2 Reconnaissance and Intelligence Gathering
Footprinting
Passive Footprinting
Gathering Organizational Intelligence
Detecting, Preventing, and Responding to Reconnaissance
Summary
Exam Essentials
Lab Exercises
Review Questions
Chapter 3 Designing a Vulnerability Management Program
Identifying Vulnerability Management Requirements
Configuring and Executing Vulnerability Scans
Developing a Remediation Workflow
Overcoming Barriers to Vulnerability Scanning
Summary
Exam Essentials
Lab Exercises
Review Questions
Chapter 4 Analyzing Vulnerability Scans
Reviewing and Interpreting Scan Reports
Validating Scan Results
Common Vulnerabilities
Summary
Exam Essentials
Lab Exercises
Review Questions
Chapter 5 Building an Incident Response Program
Security Incidents
Phases of Incident Response
Building the Foundation for Incident Response
Creating an Incident Response Team
Coordination and Information Sharing
Classifying Incidents
Summary
Exam Essentials
Lab Exercises
Review Questions
Chapter 6 Analyzing Symptoms for Incident Response
Analyzing Network Events
Handling Network Probes and Attacks
Investigating Host Issues
Investigating Service and Application Issues
Summary
Exam Essentials
Lab Exercises
Review Questions
Chapter 7 Performing Forensic Analysis
Building a Forensics Capability
Understanding Forensic Software
Conducting a Forensic Investigation
Forensic Investigation: An Example
Summary
Exam Essentials
Lab Exercises
Review Questions
Chapter 8 Recovery and Post-Incident Response
Containing the Damage
Incident Eradication and Recovery
Wrapping Up the Response
Summary
Exam Essentials
Lab Exercises
Review Questions
Chapter 9 Policy and Compliance
Understanding Policy Documents
Complying with Laws and Regulations
Adopting a Standard Framework
Implementing Policy-Based Controls
Security Control Verification and Quality Control
Summary
Exam Essentials
Lab Exercises
Review Questions
Chapter 10 Defense-in-Depth Security Architectures
Understanding Defense in Depth
Implementing Defense in Depth
Analyzing Security Architecture
Summary
Exam Essentials
Lab Exercises
Review Questions
Chapter 11 Identity and Access Management Security
Understanding Identity
Threats to Identity and Access
Identity as a Security Layer
Understanding Federated Identity and Single Sign-On
Review Questions
Chapter 12 Software Development Security
Understanding the Software Development Life Cycle
Designing and Coding for Security
Software Security Testing
Summary
Exam Essentials
Lab Exercises
Review Questions
Chapter 13 Cybersecurity Toolkit
Host Security Tools
Monitoring and Analysis Tools
Scanning and Testing Tools
Network Security Tools
Web Application Security Tools
Forensics Tools
Summary
Appendix A Answers to the Review Questions
Chapter 1: Defending Against Cybersecurity Threats
Chapter 2: Reconnaissance and Intelligence Gathering
Chapter 3: Designing a Vulnerability Management Program
Chapter 4: Analyzing Vulnerability Scans
Chapter 5: Building an Incident Response Program
Chapter 6: Analyzing Symptoms for Incident Response
Chapter 7: Performing Forensic Analysis
Chapter 8: Recovery and Post-Incident Response
Chapter 9: Policy and Compliance
Chapter 10: Defense-in-Depth Security Architectures
Chapter 11: Identity and Access Management Security
Chapter 12: Software Development Security
Appendix B Answers to the Lab Exercises
Chapter 1: Defending Against Cybersecurity Threats
Chapter 2: Reconnaissance and Intelligence Gathering
Chapter 4: Analyzing Vulnerability Scans
Chapter 5: Building an Incident Response Program
Chapter 6: Analyzing Symptoms for Incident Response
Chapter 7: Performing Forensic Analysis
Chapter 8: Recovery and Post-Incident Response
Chapter 9: Policy and Compliance
Chapter 10: Defense-in-Depth Security Architectures
Chapter 11: Identity and Access Management Security
Chapter 12: Software Development Security
Index
Advert
EULA