CompTIA Security+® All-in-One Exam Guide, Fifth Edition (Exam SY0-501)

CONTENTS

Acknowledgments

Objective Map: Exam SY0-501

Part I Threats, Attacks, and Vulnerabilities

Chapter 1 Malware and Indicators of Compromise

Polymorphic Malware

Indicators of Compromise

Chapter 2 Attacks

Social Engineering Methods

Dumpster Diving

Shoulder Surfing

Watering Hole Attack

Social Engineering Principles

Application/Service Attacks

Man-in-the-Middle

Buffer Overflow

Cross-Site Scripting

Cross-Site Request Forgery

Privilege Escalation

Domain Hijacking

Man-in-the-Browser

Hijacking and Related Attacks

Driver Manipulation

IP Address Spoofing

Wireless Attacks

Cryptographic Attacks

Known Plaintext/Ciphertext

Password Attacks

Weak Implementations

Chapter 3 Threat Actors

Types of Actors

Organized Crime

Nation States/APT

Attributes of Actors

Internal/External

Level of Sophistication

Resources/Funding

Intent/Motivation

Use of Open Source Intelligence

Chapter 4 Vulnerability Scanning and Penetration Testing

Penetration Testing Concepts

Active Reconnaissance

Passive Reconnaissance

Initial Exploitation

Escalation of Privilege

Pen Testing vs. Vulnerability Scanning

Vulnerability Scanning Concepts

Passively Test Security Controls

Identify Vulnerability

Identify Lack of Security Controls

Identify Common Misconfigurations

Intrusive vs. Non-intrusive

Credentialed vs. Non-credentialed

Chapter 5 Vulnerabilities and Impacts

Race Conditions

System Vulnerabilities

End-of-Life Systems

Embedded Systems

Lack of Vendor Support

Improper Input Handling

Improper Error Handling

Misconfiguration/Weak Configuration

Default Configuration

Resource Exhaustion

Untrained Users

Improperly Configured Accounts

Vulnerable Business Processes

Weak Cipher Suites and Implementations

Memory/Buffer Vulnerability

Integer Overflow

Buffer Overflow

Pointer Dereference

System Sprawl/Undocumented Assets

Architecture/Design Weaknesses

New Threats/Zero Day

Improper Certificate and Key Management

Part II Technologies and Tools

Chapter 6 Network Components

How Do Firewalls Work?

Application-Based vs. Network-Based

Stateful vs. Stateless

Secure Network Administration Principles

Rule-Based Management

VPN Concentrator

Remote Access vs. Site-to-Site

Split Tunnel vs. Full Tunnel

Signature-Based

Heuristic/Behavioral

Inline vs. Passive

In-Band vs. Out-of-Band

Layer 2 vs. Layer 3

Loop Prevention

Forward and Reverse Proxy

Application/Multipurpose

Signal Strength

Band Selection/Width

Antenna Types and Placement

Controller-Based vs. Standalone

Automated Alerting and Triggers

Time Synchronization

Event Deduplication

Dissolvable vs. Permanent

Host Health Checks

Agent vs. Agentless

SSL/TLS Accelerators

Hardware Security Module

Chapter 7 Security Tools and Technologies

Protocol Analyzer

Switched Port Analyzer

Network Scanners

Rogue System Detection

Network Mapping

Wireless Scanners/Cracker

Password Cracker

Vulnerability Scanner

Configuration Compliance Scanner

Exploitation Frameworks

Data Sanitization Tools

Steganography Tools

Backup Utilities

Banner Grabbing

Passive vs. Active

Command-Line Tools

ipconfig/ip/ifconfig

Security Technologies

File Integrity Check

Host-Based Firewall

Application Whitelisting

Removable Media Control

Advanced Malware Tools

Patch Management Tools

Data Execution Prevention

Web Application Firewall

Chapter 8 Troubleshooting Common Security Issues

Unencrypted Credentials/Clear Text

Logs and Events Anomalies

Permission Issues

Access Violations

Certificate Issues

Data Exfiltration

Misconfigured Devices

Weak Security Configurations

Personnel Issues

Policy Violation

Social Engineering

Personal E-mail

Unauthorized Software

Baseline Deviation

License Compliance Violation (Availability/Integrity)

Asset Management

Authentication Issues

Chapter 9 Mobile Devices

Connection Methods

Mobile Device Management Concepts

Application Management

Content Management

Push Notification Services

Passwords and Pins

Context-Aware Authentication

Containerization

Storage Segmentation

Full Device Encryption

Enforcement and Monitoring

Third-Party App Stores

Rooting/Jailbreaking

Custom Firmware

Carrier Unlocking

Firmware OTA Updates

Recording Microphone

Wi-Fi Direct/Ad Hoc

Payment Methods

Deployment Models

Corporate-Owned

Chapter 10 Implementing Secure Protocols

Secure Protocols

Secure POP/IMAP

Voice and Video

Time Synchronization

Directory Services

Domain Name Resolution

Routing and Switching

Network Address Allocation

Subscription Services

Part III Architecture and Design

Chapter 11 Architecture Frameworks and Secure Network Architectures

Industry-Standard Frameworks and Reference Architectures

National vs. International

Industry-Specific Frameworks

Benchmarks/Secure Configuration Guides

Platform/Vendor-Specific Guides

General Purpose Guides

Defense-in-Depth/Layered Security

Vendor Diversity

Control Diversity

Zones/Topologies

Segregation/Segmentation/Isolation

Security Device/Technology Placement

Correlation Engines

VPN Concentrators

SSL Accelerators

Aggregation Switches

Taps and Port Mirror

Chapter 12 Secure Systems Design and Deployment

Hardware/Firmware Security

Secure Boot and Attestation

Hardware Root of Trust

Operating Systems

Patch Management

Disabling Unnecessary Ports and Services

Least Functionality

Secure Configurations

Trusted Operating System

Application Whitelisting/Blacklisting

Disable Default Accounts/Passwords

Wireless Keyboards

Wi-Fi-Enabled MicroSD Cards

External Storage Devices

Digital Cameras

Secure Baseline

Integrity Measurement

Chapter 13 Embedded Systems

Smart Devices/IoT

Wearable Technology

Home Automation

Special Purpose

Medical Devices

Chapter 14 Application Development and Deployment

Development Lifecycle Models

Waterfall vs. Agile

Security Automation

Continuous Integration

Immutable Systems

Infrastructure as Code

Version Control and Change Management

Provisioning and Deprovisioning

Secure Coding Techniques

Proper Error Handling

Proper Input Validation

Stored Procedures

Obfuscation/Camouflage

Code Reuse/Dead Code

Server-Side vs. Client-Side Execution and Validation

Memory Management

Use of Third-Party Libraries and SDKs

Code Quality and Testing

Static Code Analyzers

Dynamic Analysis (e.g., Fuzzing)

Model Verification

Compiled vs. Runtime Code

Chapter 15 Cloud and Virtualization

Application Cells/Containers

VM Sprawl Avoidance

VM Escape Protection

Cloud Deployment Models

On-Premise vs. Hosted vs. Cloud

Cloud Access Security Broker

Security as a Service

Chapter 16 Resiliency and Automation Strategies

Automation/Scripting

Automated Courses of Action

Continuous Monitoring

Configuration Validation

Non-persistence

Revert to Known State

Rollback to Known Configuration

Live Boot Media

Distributive Allocation

Fault Tolerance

High Availability

Chapter 17 Physical Security Controls

Fencing/Gate/Cage

Security Guards

Secure Cabinets/Enclosures

Protected Distribution/Protected Cabling

Barricades/Bollards

Environmental Controls

Hot and Cold Aisles

Fire Suppression

Motion Detection

Infrared Detection

Part IV Identity and Access Management

Chapter 18 Identity, Access, and Accounts

Identification, Authentication, Authorization, and Accounting (AAA)

Multifactor Authentication

Something You Are

Something You Have

Something You Know

Something You Do

Somewhere You Are

Transitive Trust

Shared and Generic Accounts/Credentials

Service Accounts

Privileged Accounts

General Concepts

Least Privilege

Onboarding/Offboarding

Permission Auditing and Review

Usage Auditing and Review

Time-of-Day Restrictions

Recertification

Standard Naming Convention

Account Maintenance

Group-Based Access Control

Location-Based Policies

Account Policy Enforcement

Credential Management

Password Complexity

Password History

Password Length

Chapter 19 Identity and Access Services

TACACS+ Authentication

TACACS+ Authorization

TACACS+ Accounting

Chapter 20 Identity and Access Management Controls

Access Control Models

Role-Based Access Control

Rule-Based Access Control

Physical Access Control

Proximity Cards

Biometric Factors

Fingerprint Scanner

Retinal Scanner

Voice Recognition

Facial Recognition

False Positives and False Negatives

False Acceptance Rate

False Rejection Rate

Crossover Error Rate

Biometrics Calculation Example

Certificate-Based Authentication

PIV/CAC/Smart Card

File System Security

Database Security

Part V Risk Management

Chapter 21 Policies, Plans, and Procedures

Standard Operating Procedure

Agreement Types

Personnel Management

Mandatory Vacations

Separation of Duties

Background Checks

Exit Interviews

Role-Based Awareness Training

Continuing Education

Acceptable Use Policy/Rules of Behavior

Adverse Actions

General Security Policies

Social Media Networks/Applications

Personal E-mail

Chapter 22 Risk Management and Business Impact Analysis

Business Impact Analysis Concepts

Mission-Essential Functions

Identification of Critical Systems

Single Point of Failure

Privacy Impact Assessment

Privacy Threshold Assessment

Risk Management Concepts

Threat Assessment

Risk Assessment

Change Management

Security Controls

Chapter 23 Incident Response, Disaster Recovery, and Continuity of Operations

Incident Response Plan

Documented Incident Types/Category Definitions

Roles and Responsibilities

Reporting Requirements/Escalation

Cyber-Incident Response Teams

Incident Response Process

Lessons Learned

Disaster Recovery

Order of Restoration

Backup Concepts

Geographic Considerations

Off-Site Backups

Location Selection

Legal Implications

Data Sovereignty

Continuity of Operation Planning

Exercises/Tabletop

After-Action Reports

Alternate Processing Sites

Alternate Business Practices

Chapter 24 Digital Forensics

Order of Volatility

Chain of Custody

Data Acquisition

Standards for Evidence

Types of Evidence

Three Rules Regarding Evidence

Capture System Image

Network Traffic and Logs

Record Time Offset

Witness Interviews

Strategic Intelligence/Counterintelligence Gathering

Track Man-Hours

Chapter 25 Data Security and Privacy Practices

Data Destruction and Media Sanitization

Data Sensitivity Labeling and Handling

Steward/Custodian

Privacy Officer

Legal and Compliance

Part VI Cryptography and Public Key Infrastructure

Chapter 26 Cryptographic Concepts

General Cryptographic Concepts

Fundamental Methods

Symmetric Algorithms

Modes of Operation

Asymmetric Algorithms

Symmetric vs. Asymmetric

Salt, IV, Nonce

Weak/Deprecated Algorithms

Cryptographic Objectives

Digital Signatures

Stream vs. Block

Secret Algorithm

Data-in-Transit

Random/Pseudo-Random Number Generation

Implementation vs. Algorithm Selection

Perfect Forward Secrecy

Security Through Obscurity

Common Use Cases

Chapter 27 Cryptographic Algorithms

Symmetric Algorithms

Blowfish/Twofish

Stream vs. Block

Asymmetric Algorithms

Hashing Algorithms

Key Stretching Algorithms

Substitution Ciphers

Chapter 28 Wireless Security

Cryptographic Protocols

Authentication Protocols

RADIUS Federation

PSK vs. Enterprise vs. Open

Setting Up WPA2

Captive Portals

Chapter 29 Public Key Infrastructure

Certificate Authority

Intermediate CA

Object Identifiers

Online vs. Offline CA

Certificate Chaining

Types of Certificates

Machine/Computer

Domain Validation

Extended Validation

Certificate Formats

Part VII Appendixes and Glossary

Appendix A OSI Model and Internet Protocols

Networking Frameworks and Protocols

Application Layer

Presentation Layer

Transport Layer

Data Link Layer

Internet Protocols

Message Encapsulation

Appendix B About the Download

System Requirements

Installing and Running Total Tester

About Total Tester

Technical Support