Vor Ort
Merkzettel Warenkorb
  • Produktbild: Security+
  • Produktbild: Security+

Security+ Exam SY0-201 Study Guide

26,99 €

inkl. gesetzl. MwSt., Versandkostenfrei

Beschreibung

Produktdetails

Einband

Taschenbuch

Erscheinungsdatum

01.10.2009

Herausgeber

Michael Cross

Verlag

Elsevier Inc

Seitenzahl

230

Maße (L/B/H)

23,5/19,1/1,2 cm

Gewicht

404 g

Sprache

Englisch

ISBN

978-1-59749-427-4

Beschreibung

Produktdetails

Einband

Taschenbuch

Erscheinungsdatum

01.10.2009

Herausgeber

Michael Cross

Verlag

Elsevier Inc

Seitenzahl

230

Maße (L/B/H)

23,5/19,1/1,2 cm

Gewicht

404 g

Sprache

Englisch

ISBN

978-1-59749-427-4

Herstelleradresse

Libri GmbH
Europaallee 1
36244 Bad Hersfeld
DE

Email: gpsr@libri.de

Ein neues Kapitel für Ihre Bücher

Ein neues Kapitel für Ihre Bücher

Schenken Sie Ihren alten Schätzen ein zweites Leben und erhalten dafür eine Thalia Geschenkkarte.

Jetzt verkaufen
Jetzt verkaufen

Noch keine Bewertungen vorhanden

Verfassen Sie die erste Bewertung zu diesem Artikel

Helfen Sie anderen Kundinnen und Kunden durch Ihre Meinung.

Kundinnen und Kunden meinen

Bewertungen (0)
Die Leseprobe wird geladen.
  • Produktbild: Security+
  • Produktbild: Security+


  • About the Authors

    Chapter 1 Systems Security

    Systems security threats

    Privilege escalation

    Viruses and worms

    Trojan

    Spyware and adware

    Rootkits and botnets

    Logic bombs

    Host intrusion detection system

    Behavior-based vs. signature-based IDS characteristics

    Anti-SPAM

    Pop-up blockers

    Hardware and peripheral security risks

    BIOS

    USB devices

    Cell phones

    Removable storage devices

    Network attached storage

    Summary of exam objectives

    Top five toughest questions

    Answers

    Chapter 2 OS Hardening

    General OS hardening

    Services

    File system

    Removing unnecessary programs

    Hotfixes/patches

    Service packs/maintenance updates

    Patch management

    Windows group policies

    Security templates

    Configuration baselines

    Server OS hardening

    Enabling and disabling services and protocols

    FTP servers

    DNS servers

    NNTP servers

    File and print servers

    DHCP servers

    Data repositories

    Workstation OS

    User rights and groups

    Summary of exam objectives

    Top five toughest questions

    Answers

    Chapter 3 Application Security

    Threats are moving "up the stack?

    Rationale

    Threat modeling

    Application security threats

    Browser

    Buffer overflows

    Packet sniffers and instant messaging

    Instant messaging

    Peer-to-peer

    SMTP open relays

    Summary of exam objectives

    Top five toughest questions

    Answers

    Chapter 4 Virtualization Technologies

    The purpose of virtualization

    Benefits of virtualization

    Types of virtualization

    Designing a virtual environment

    System virtualization

    Management of virtual servers

    Application virtualization

    Application streaming

    Summary of exam objectives

    Top five toughest questions

    Answers

    Chapter 5 Network Security

    General network security

    Network services and risks associated with them

    Network design elements

    Network security tools

    Network ports, services, and threats

    Network ports and protocols

    Network threats

    Network design elements and components

    Firewalls

    What is a DMZ?

    VLANs

    Network address translation

    Network access control/network access protection

    Telephony

    Network security tools

    Intrusion detection and preventions systems

    Honeypots

    Content filters

    Protocol analyzers

    Summary of exam objectives

    Top five toughest questions

    Answers

    Chapter 6 Wireless Networks

    Wireless network design

    Wireless communications

    Spread spectrum technology

    Wireless network architecture

    CSMA/CD and CSMA/CA

    Service set ID broadcast

    Wireless security standards

    The failure of WEP

    WPA and WPA2

    WAP

    WTLS

    Authentication

    Rogue access points

    Data emanation

    Bluetooth

    Summary of exam objectives

    Top five toughest questions

    Answers

    References

    Chapter 7 Network Access

    General network access

    Access control

    Access control models

    Authentication models and components

    Identity

    Access control methods and models

    Separation of duties

    Least privilege

    Job rotation

    Mandatory access control

    Discretionary access control

    Role- and rule-based access control

    Access control organization

    Security groups

    Security controls

    Logical access control methods

    Access control lists

    Group policies

    Domain policies

    Time of day restrictions

    Account expiration

    Logical tokens

    Physical access security methods

    Access lists and logs

    Hardware locks

    ID badges

    Door access systems

    Man-trap

    Video surveillance

    Summary of exam objectives

    Top five toughest questions

    Answers

    Chapter 8 Network Authentication

    Authentication methods

    Access control

    Authentication

    Auditing

    Authentication methods

    One-factor

    Two-factor

    Three-factor

    Single sign-on

    Authentication systems

    Remote access policies and authentication

    Biometrics

    Summary of exam objectives

    Top five toughest questions

    Answers

    Chapter 9 Risk Assessment and Risk Mitigation

    Conduct risk assessments and implement risk mitigation

    Vulnerability assessment tools

    Password crackers

    Network mapping tools

    Use monitoring tools on systems and networks

    Workstations

    Intrusion detection systems

    Logging and auditing

    Auditing systems

    System Logs

    Performance Logs

    Access Logs

    Audits

    Summary of exam objectives

    Top five toughest questions

    Answers

    Chapter 10 General Cryptographic Concepts

    General cryptography

    Symmetric key cryptography

    Asymmetric key cryptography

    Hashes and applications

    Digital signatures

    Certificates

    CIA-For all your security needs

    Non-repudiation

    Key management

    Encryption algorithms

    DES

    3DES

    RSA

    AES

    Elliptic curve cryptography

    One-time pads

    Transmission encryption

    WEP

    TKIP

    Protocols

    SSL/TLS

    HTTP vs. HTTPS vs. SHTTP

    Other protocols with TLS

    S/MIME

    SSH

    IPSec

    PPTP

    L2TP

    Cryptography in operating systems

    File and folder encryption

    E-mail

    Whole disk encryption

    Trusted platform module

    Summary of exam objectives

    Top five toughest questions

    Answers

    Chapter 11 Public Key Infrastructure

    PKI overview

    PKI encryption

    PKI Standards

    PKI solutions

    Components of PKI

    Digital certificates

    Certification authority

    Certificate revocation list

    Recovery agents

    Certificate authority

    Certificate revocation list

    Key escrow

    Registration

    Recovery agents

    Implementation

    Certificate management

    Summary of exam objectives

    Top five toughest questions

    Answers

    Chapter 12 Redundancy Planning

    Alternate sites

    Hot site

    Warm site

    Cold site

    Redundant systems

    Servers

    Connections

    ISP

    RAID

    Spare parts

    Backup generator

    UPS

    Summary of exam objectives

    Top five toughest questions

    Answers

    Chapter 13 Controls and Procedures

    Environmental controls

    Fire suppression

    HVAC

    Shielding

    Implementing disaster recovery and incident response procedures

    Disaster recovery

    Incident response

    Defending against social engineering

    Summary of exam objectives

    Top five toughest questions

    Answers

    Chapter 14 Legislation and Organizational Policies

    Secure disposal of systems

    Retention/storage

    Destruction

    Acceptable use policies

    Password complexity

    Strong passwords

    Password changes and restrictions

    Administrator accounts

    Change management

    Information classification

    Vacations

    Separation of duties

    Personally identifiable information

    Privacy

    Due care

    Due process

    Due diligence

    SLAs

    User education and awareness training

    Communication

    User awareness

    Education

    Online resources

    Security-related HR policies

    Code of Ethics

    Summary of exam objectives

    Top five toughest questions

    Answers

    Index