Produktbild: Comptia Pentest+ Study Guide

Comptia Pentest+ Study Guide Exam Pt0-002

Aus der Reihe Sybex Study Guide

58,99 €

inkl. gesetzl. MwSt., Versandkostenfrei


Beschreibung

Produktdetails

Einband

Taschenbuch

Erscheinungsdatum

02.11.2021

Verlag

John Wiley & Sons

Seitenzahl

576

Maße (L/B/H)

23,8/19/3,2 cm

Gewicht

955 g

Auflage

2nd edition

Sprache

Englisch

ISBN

978-1-119-82381-0

Beschreibung

Produktdetails

Einband

Taschenbuch

Erscheinungsdatum

02.11.2021

Verlag

John Wiley & Sons

Seitenzahl

576

Maße (L/B/H)

23,8/19/3,2 cm

Gewicht

955 g

Auflage

2nd edition

Sprache

Englisch

ISBN

978-1-119-82381-0

Herstelleradresse

Libri GmbH
Europaallee 1
36244 Bad Hersfeld
DE

Email: gpsr@libri.de

Ein neues Kapitel für Ihre Bücher

Ein neues Kapitel für Ihre Bücher

Schenken Sie Ihren alten Schätzen ein zweites Leben und erhalten dafür eine Thalia Geschenkkarte.

Jetzt verkaufen
Jetzt verkaufen

Noch keine Bewertungen vorhanden

Verfassen Sie die erste Bewertung zu diesem Artikel

Helfen Sie anderen Kundinnen und Kunden durch Ihre Meinung.

Kundinnen und Kunden meinen

Bewertungen (0)

Die Leseprobe wird geladen.
  • Produktbild: Comptia Pentest+ Study Guide
  • Introduction xxv
     
    Assessment Test xxxix
     
    Chapter 1 Penetration Testing 1
     
    What Is Penetration Testing? 2
     
    Cybersecurity Goals 2
     
    Adopting the Hacker Mindset 4
     
    Ethical Hacking 5
     
    Reasons for Penetration Testing 5
     
    Benefits of Penetration Testing 6
     
    Regulatory Requirements for Penetration Testing 7
     
    Who Performs Penetration Tests? 8
     
    Internal Penetration Testing Teams 8
     
    External Penetration Testing Teams 9
     
    Selecting Penetration Testing Teams 10
     
    The CompTIA Penetration Testing Process 10
     
    Planning and Scoping 11
     
    Information Gathering and Vulnerability Scanning 11
     
    Attacks and Exploits 12
     
    Reporting and Communication 13
     
    Tools and Code Analysis 13
     
    The Cyber Kill Chain 14
     
    Reconnaissance 15
     
    Weaponization 16
     
    Delivery 16
     
    Exploitation 16
     
    Installation 16
     
    Command and Control 16
     
    Actions on Objectives 17
     
    Tools of the Trade 17
     
    Reconnaissance 20
     
    Vulnerability Scanners 21
     
    Social Engineering 21
     
    Credential Testing Tools 22
     
    Debuggers and Software Testing Tools 22
     
    Network Testing 23
     
    Remote Access 23
     
    Exploitation 24
     
    Steganography 24
     
    Cloud Tools 25
     
    Summary 25
     
    Exam Essentials 25
     
    Lab Exercises 26
     
    Activity 1.1: Adopting the Hacker Mindset 26
     
    Activity 1.2: Using the Cyber Kill Chain 26
     
    Review Questions 27
     
    Chapter 2 Planning and Scoping Penetration Tests 31
     
    Scoping and Planning Engagements 34
     
    Assessment Types 35
     
    Known Environments and Unknown Environments 35
     
    The Rules of Engagement 37
     
    Scoping Considerations--A Deeper Dive 39
     
    Support Resources for Penetration Tests 42
     
    Penetration Testing Standards and Methodologies 44
     
    Key Legal Concepts for Penetration Tests 46
     
    Contracts 46
     
    Data Ownership and Retention 47
     
    Permission to Attack (Authorization) 47
     
    Environmental Differences and Location Restrictions 48
     
    Regulatory Compliance Considerations 49
     
    Summary 51
     
    Exam Essentials 52
     
    Lab Exercises 53
     
    Review Questions 54
     
    Chapter 3 Information Gathering 59
     
    Footprinting and Enumeration 63
     
    OSINT 64
     
    Location and Organizational Data 65
     
    Infrastructure and Networks 68
     
    Security Search Engines 74
     
    Google Dorks and Search Engine Techniques 77
     
    Password Dumps and Other Breach Data 77
     
    Source Code Repositories 78
     
    Passive Enumeration and Cloud Services 78
     
    Active Reconnaissance and Enumeration 78
     
    Hosts 79
     
    Services 79
     
    Networks, Topologies, and Network Traffic 85
     
    Packet Crafting and Inspection 88
     
    Enumeration 90
     
    Information Gathering and Code 97
     
    Avoiding Detection 99
     
    Information Gathering and Defenses 99
     
    Defenses Against Active Reconnaissance 100
     
    Preventing Passive Information Gathering 100
     
    Summary 100
     
    Exam Essentials 101
     
    Lab Exercises 102
     
    Activity 3.1: Manual OSINT Gathering 102
     
    Activity 3.2: Exploring Shodan 102
     
    Activity 3.3: Running an Nmap Scan 103
     
    Review Questions 104
     
    Chapter 4 Vulnerability Scanning 109
     
    Identifying Vulnerability Management Requirements 112
     
    Regulatory Environment 112
     
    Corporate Policy 1