COMPTIA SECURITY+ CERTIFICATION STUDY GUIDE
CONTENTS CHAPTER ACCOUNTABILITY AND ACCESS CONTROL ACCESS CONTROL OVERVIEW TYPES OF ACCESS CONTROL ACCESS CONTROL IN A LAYERED ENVIRONMENT THE PROCESS OF ACCOUNTABILITY IDENTIFICATION AND AUTHENTICATION TECHNIQUES PASSWORDS BIOMETRICS TOKENS TICKETS ACCESS CONTROL TECHNIQUES ACCESS CONTROL METHODOLOGIES AND IMPLEMENTATION CENTRALIZED AND DECENTRALIZED ACCESS CONTROL RADIUS AND TACACS ACCESS CONTROL ADMINISTRATION ACCOUNT ADMINISTRATION ACCOUNT, LOG, AND JOURNAL MONITORING ACCESS RIGHTS AND PERMISSIONS SUMMARY EXAM ESSENTIALS REVIEW QUESTIONS ANSWERS TO REVIEW QUESTIONS CHAPTER ATTACKS AND MONITORING MONITORING INTRUSION DETECTION HOST-BASED AND NETWORK-BASED IDSS KNOWLEDGE-BASED AND BEHAVIOR-BASED DETECTION IDS-RELATED TOOLS PENETRATION TESTING METHODS OF ATTACKS BRUTE FORCE AND DICTIONARY ATTACKS DENIAL OF SERVICE SPOOFING ATTACKS MAN-IN-THE-MIDDLE ATTACKS SNIFFER ATTACKS SPAMMING ATTACKS CRACKERS ACCESS CONTROL COMPENSATIONS ISO MODEL, NETWORK SECURITY, AND PROTOCOLS OSI MODEL HISTORY OF THE OSI MODEL OSI FUNCTIONALITY ENCAPSULATION/DEENCAPSULATION OSI LAYERS TCP/IP MODEL COMMUNICATIONS AND NETWORK SECURITY NETWORK CABLING LAN TECHNOLOGIES NETWORK TOPOLOGIES TCP/IP OVERVIEW INTERNET/INTRANET/EXTRANET COMPONENTS FIREWALLS OTHER NETWORK DEVICES REMOTE ACCESS SECURITY MANAGEMENT NETWORK AND PROTOCOL SECURITY MECHANISMS VPN PROTOCOLS SECURE COMMUNICATIONS PROTOCOLS E-MAIL SECURITY SOLUTIONS DIAL-UP PROTOCOLS AUTHENTICATION PROTOCOLS CENTRALIZED REMOTE AUTHENTICATION SERVICES NETWORK AND PROTOCOL SERVICES FRAME RELAY OTHER WAN TECHNOLOGIES AVOIDING SINGLE POINTS OF FAILURE REDUNDANT SERVERS FAILOVER SOLUTIONS RAID COMMUNICATIONS SECURITY AND COUNTERMEASURES VIRTUAL PRIVATE NETWORK (VPN) TUNNELING HOW VPNS WORK IMPLEMENTING VPNS NETWORK ADDRESS TRANSLATION PRIVATE IP ADDRESSES STATEFUL NAT SWITCHING TECHNOLOGIES CIRCUIT SWITCHING PACKET SWITCHING VIRTUAL CIRCUITS WAN TECHNOLOGIES WAN CONNECTION TECHNOLOGIES ENCAPSULATION PROTOCOLS MISCELLANEOUS SECURITY CONTROL CHARACTERISTICS TRANSPARENCY VERIFYING INTEGRITY TRANSMISSION MECHANISMS MANAGING E-MAIL SECURITY E-MAIL SECURITY GOALS UNDERSTANDING E-MAIL SECURITY ISSUES SECURING VOICE COMMUNICATIONS SOCIAL ENGINEERING FRAUD AND ABUSE PHREAKING SECURITY BOUNDARIES NETWORK ATTACKS AND COUNTERMEASURES EAVESDROPPING SECOND-TIER ATTACKS ADDRESS RESOLUTION PROTOCOL (ARP) SECURITY MANAGEMENT CONCEPTS AND PRINCIPLES CONFIDENTIALITY INTEGRITY AVAILABILITY OTHER SECURITY CONCEPTS PROTECTION MECHANISMS LAYERING ABSTRACTION DATA HIDING ENCRYPTION CHANGE CONTROL/MANAGEMENT DATA CLASSIFICATION ASSET VALUE, POLICIES, AND ROLES EMPLOYMENT POLICIES AND PRACTICES SECURITY MANAGEMENT FOR EMPLOYEES SECURITY ROLES POLICIES, STANDARDS, BASELINES, GUIDELINES, AND PROCEDURES SECURITY POLICIES SECURITY STANDARDS, BASELINES, AND GUIDELINES SECURITY PROCEDURES RISK MANAGEMENT RISK TERMINOLOGY RISK ASSESSMENT METHODOLOGIES QUANTITATIVE RISK ANALYSIS QUALITATIVE RISK ANALYSIS HANDLING RISK SECURITY AWARENESS TRAINING SECURITY MANAGEMENT PLANNING DATA AND APPLICATION SECURITY ISSUES APPLICATION ISSUES LOCAL/NONDISTRIBUTED ENVIRONMENT DISTRIBUTED ENVIRONMENT DATABASES AND DATA WAREHOUSING DATABASE MANAGEMENT SYSTEM (DBMS) ARCHITECTURE DATABASE TRANSACTIONS MULTILEVEL SECURITY AGGREGATION INFERENCE POLYINSTANTIATION DATA MINING DATA/INFORMATION STORAGE TYPES OF STORAGE STORAGE THREATS KNOWLEDGE-BASED SYSTEMS EXPERT SYSTEMS NEURAL NETWORKS SECURITY APPLICATIONS SYSTEMS DEVELOPMENT CONTROLS SOFTWARE DEVELOPMENT SYSTEMS DEVELOPMENT LIFE CYCLE LIFE CYCLE MODELS CHANGE CONTROL AND CONFIGURATION MANAGEMENT SECURITY CONTROL ARCHITECTURE SERVICE LEVEL AGREEMENTS WRITTEN LAB ANSWERS TO WRITTEN LAB MALICIOUS CODE AND APPLICATION ATTACKS MALICIOUS CODE SOURCES VIRUSES LOGIC BOMBS TROJAN HORSES WORMS ACTIVE CONTENT COUNTERMEASURES PASSWORD ATTACKS PASSWORD GUESSING DICTIONARY ATTACKS DENIAL OF SERVICE ATTACKS SYN FLOOD DISTRIBUTED DOS TOOLKITS SMURF TEARDROP LAND DNS POISONING PING OF DEATH APPLICATION ATTACKS BUFFER OVERFLOWS TIME-OF-CHECK-TO-TIME-OF-USE TRAP DOORS ROOTKITS RECONNAISSANCE ATTACKS IP PROBES PORT SCANS VULNERABILITY SCANS DUMPSTER DIVING MASQUERADING ATTACKS IP SPOOFING SESSION HIJACKING DECOY TECHNIQUES HONEY POTS PSEUDO-FLAWS CRYPTOGRAPHY AND PRIVATE KEY ALGORITHMS HISTORY CAESAR CIPHER AMERICAN CIVIL WAR ULTRA VS ENIGMA CRYPTOGRAPHIC BASICS GOALS OF CRYPTOGRAPHY CONCEPTS CRYPTOGRAPHIC MATHEMATICS CIPHERS MODERN CRYPTOGRAPHY CRYPTOGRAPHIC KEYS SYMMETRIC KEY ALGORITHMS ASYMMETRIC KEY ALGORITHMS HASHING ALGORITHMS SYMMETRIC CRYPTOGRAPHY DATA ENCRYPTION STANDARD (DES) TRIPLE DES (3DES) INTERNATIONAL DATA ENCRYPTION ALGORITHM (IDEA) BLOWFISH SKIPJACK ADVANCED ENCRYPTION STANDARD (AES) KEY DISTRIBUTION KEY ESCROW PKI AND CRYPTOGRAPHIC APPLICATIONS ASYMMETRIC CRYPTOGRAPHY PUBLIC AND PRIVATE KEYS RSA EL GAMAL ELLIPTIC CURVE HASH FUNCTIONS SHA DIGITAL SIGNATURES HMAC DIGITAL SIGNATURE STANDARD PUBLIC KEY INFRASTRUCTURE CERTIFICATES CERTIFICATE AUTHORITIES CERTIFICATE GENERATION AND DESTRUCTION KEY MANAGEMENT APPLIED CRYPTOGRAPHY ELECTRONIC MAIL WEB E-COMMERCE NETWORKING CRYPTOGRAPHIC ATTACKS PRINCIPLES OF COMPUTER DESIGN COMPUTER ARCHITECTURE HARDWARE INPUT/OUTPUT STRUCTURES FIRMWARE SECURITY PROTECTION MECHANISMS TECHNICAL MECHANISMS SECURITY POLICY AND COMPUTER ARCHITECTURE POLICY MECHANISMS DISTRIBUTED ARCHITECTURE SECURITY MODELS STATE MACHINE MODEL BELL-LAPADULA MODEL BIBA CLARK-WILSON INFORMATION FLOW MODEL NONINTERFERENCE MODEL TAKE-GRANT MODEL ACCESS CONTROL MATRIX BREWER AND NASH MODEL (A K A CHINESE WALL) CLASSIFYING AND COMPARING MODELS PRINCIPLES OF SECURITY MODELS COMMON SECURITY MODELS, ARCHITECTURES, AND EVALUATION CRITERIA TRUSTED COMPUTING BASE (TCB) OBJECTS AND SUBJECTS CLOSED AND OPEN SYSTEMS TECHNIQUES FOR ENSURING CONFIDENTIALITY, INTEGRITY, AND AVAILABILITY CONTROLS IP SECURITY (IPSEC) UNDERSTANDING SYSTEM SECURITY EVALUATION RAINBOW SERIES ITSEC CLASSES AND REQUIRED ASSURANCE AND FUNCTIONALITY COMMON CRITERIA CERTIFICATION AND ACCREDITATION COMMON FLAWS AND SECURITY ISSUES COVERT CHANNELS ATTACKS BASED ON DESIGN OR CODING FLAWS AND SECURITY ISSUES PROGRAMMING TIMING, STATE CHANGES, AND COMMUNICATION DISCONNECTS ELECTROMAGNETIC RADIATION ADMINISTRATIVE MANAGEMENT ANTIVIRUS MANAGEMENT OPERATIONS SECURITY CONCEPTS OPERATIONAL ASSURANCE AND LIFE CYCLE ASSURANCE BACKUP MAINTENANCE CHANGES IN WORKSTATION/LOCATION NEED-TO-KNOW AND THE PRINCIPLE OF LEAST PRIVILEGE PRIVILEGED OPERATIONS FUNCTIONS TRUSTED RECOVERY CONFIGURATION AND CHANGE MANAGEMENT CONTROL STANDARDS OF DUE CARE AND DUE DILIGENCE PRIVACY AND PROTECTION LEGAL REQUIREMENTS ILLEGAL ACTIVITIES RECORD RETENTION SENSITIVE INFORMATION AND MEDIA SECURITY CONTROL TYPES OPERATIONS CONTROLS PERSONNEL CONTROLS AUDITING AND MONITORING AUDITING AUDITING BASICS AUDIT TRAILS REPORTING CONCEPTS SAMPLING EXTERNAL AUDITORS MONITORING TOOLS AND TECHNIQUES PENETRATION TESTING TECHNIQUES WAR DIALING SNIFFING AND EAVESDROPPING RADIATION MONITORING PROBLEM MANAGEMENT INAPPROPRIATE ACTIVITIES INDISTINCT THREATS AND COUNTERMEASURES ERRORS AND OMISSIONS FRAUD AND THEFT COLLUSION SABOTAGE LOSS OF PHYSICAL AND INFRASTRUCTURE SUPPORT MALICIOUS HACKERS OR CRACKERS ESPIONAGE TRAFFIC AND TREND ANALYSIS INITIAL PROGRAM LOAD VULNERABILITIES BUSINESS CONTINUITY PLANNING PROJECT SCOPE AND PLANNING BUSINESS ORGANIZATION ANALYSIS BCP TEAM SELECTION RESOURCE REQUIREMENTS LEGAL AND REGULATORY REQUIREMENTS BUSINESS IMPACT ASSESSMENT IDENTIFY PRIORITIES RISK IDENTIFICATION LIKELIHOOD ASSESSMENT IMPACT ASSESSMENT RESOURCE PRIORITIZATION CONTINUITY STRATEGY STRATEGY DEVELOPMENT PROVISIONS AND PROCESSES PLAN APPROVAL PLAN IMPLEMENTATION TRAINING AND EDUCATION BCP DOCUMENTATION CONTINUITY PLANNING GOALS STATEMENT OF IMPORTANCE STATEMENT OF PRIORITIES STATEMENT OF ORGANIZATIONAL RESPONSIBILITY STATEMENT OF URGENCY AND TIMING RISK ASSESSMENT RISK ACCEPTANCE/MITIGATION VITAL RECORDS PROGRAM EMERGENCY RESPONSE GUIDELINES MAINTENANCE TESTING DISASTER RECOVERY PLANNING NATURAL DISASTERS MAN-MADE DISASTERS RECOVERY STRATEGY BUSINESS UNIT PRIORITIES CRISIS MANAGEMENT EMERGENCY COMMUNICATIONS WORK GROUP RECOVERY ALTERNATE PROCESSING SITES MUTUAL ASSISTANCE AGREEMENTS DATABASE RECOVERY RECOVERY PLAN DEVELOPMENT EMERGENCY RESPONSE PERSONNEL NOTIFICATION BACKUPS AND OFFSITE STORAGE SOFTWARE ESCROW ARRANGEMENTS EXTERNAL COMMUNICATIONS UTILITIES LOGISTICS AND SUPPLIES RECOVERY VS RESTORATION TRAINING AND DOCUMENTATION TESTING AND MAINTENANCE CHECKLIST TEST STRUCTURED WALK-THROUGH SIMULATION TEST PARALLEL TEST FULL-INTERRUPTION TEST LAW AND INVESTIGATIONS CATEGORIES OF LAWS CRIMINAL LAW CIVIL LAW ADMINISTRATIVE LAW LAWS COMPUTER CRIME INTELLECTUAL PROPERTY LICENSING IMPORT/EXPORT PRIVACY INVESTIGATIONS EVIDENCE INVESTIGATION PROCESS INCIDENTS AND ETHICS MAJOR CATEGORIES OF COMPUTER CRIME MILITARY AND INTELLIGENCE ATTACKS BUSINESS ATTACKS FINANCIAL ATTACKS TERRORIST ATTACKS GRUDGE ATTACKS “FUN” ATTACKS INCIDENT HANDLING COMMON TYPES OF INCIDENTS RESPONSE TEAMS ABNORMAL AND SUSPICIOUS ACTIVITY CONFISCATING EQUIPMENT, SOFTWARE, AND DATA INCIDENT DATA INTEGRITY AND RETENTION REPORTING INCIDENTS ETHICS (ISC)2 CODE OF ETHICS ETHICS AND THE INTERNET PHYSICAL SECURITY REQUIREMENTS FACILITY REQUIREMENTS SECURE FACILITY PLAN PHYSICAL SECURITY CONTROLS SITE SELECTION VISIBILITY ACCESSIBILITY FACILITY DESIGN WORK AREAS SERVER ROOMS VISITORS FORMS OF PHYSICAL ACCESS CONTROLS FENCES, GATES, TURNSTILES, AND MANTRAPS LIGHTING SECURITY GUARDS AND DOGS KEYS AND COMBINATION LOCKS BADGES MOTION DETECTORS INTRUSION ALARMS SECONDARY VERIFICATION MECHANISMS TECHNICAL CONTROLS SMART CARDS PROXIMITY READERS ACCESS ABUSES INTRUSION DETECTION SYSTEMS EMANATION SECURITY ENVIRONMENT AND LIFE SAFETY PERSONNEL SAFETY POWER AND ELECTRICITY NOISE TEMPERATURE, HUMIDITY, AND STATIC WATER FIRE DETECTION AND SUPPRESSION EQUIPMENT FAILURE