Book Image

CompTIA Security+ Certification Guide

By : Ian Neil
Book Image

CompTIA Security+ Certification Guide

By: Ian Neil

Overview of this book

CompTIA Security+ is a worldwide certification that establishes the fundamental knowledge required to perform core security functions and pursue an IT security career. CompTIA Security+ Certification Guide is a best-in-class exam study guide that covers all of CompTIA Security+ 501 exam objectives. It is authored by Ian Neil, who is a world-class trainer of CompTIA Security+ 501. Packed with self-assessment scenarios and realistic exam questions, this guide will help you master the core concepts to succeed in the exam the first time you take it. Using relevant examples, you will learn all the important security fundamentals from Certificates and Encryption to Identity and Access Management concepts. You will then dive into the important domains of the exam; namely, threats, attacks and vulnerabilities, technologies and tools, architecture and design, risk management, and cryptography and Public Key Infrastructure (PKI). This book comes with over 600 practice questions with detailed explanation that is at the exam level and also includes two mock exams to help you with your study plan. This guide will ensure that encryption and certificates are made easy for you.
Table of Contents (18 chapters)
12
Mock Exam 1
13
Mock Exam 2
15
Acronyms

Review Questions

  1. What are the three components of the CIA triad?
  2. Why might a CCTV camera be sited outside a building without any film inside?
  3. What does confidentiality mean?
  4. How can we protect a data center from people entering it?
  5. What is the purpose of an air gap?
  6. Name three administrative controls.
  7. Name three physical controls.
  8. Following an incident, what type of control will be used when researching how the incident happened?
  9. How do I know if the integrity of my data is intact?
  1. What is a corrective control?
  2. What is the purpose of hashing?
  3. If I hash the same data with different SHA1 applications, what will the output be?
  4. What two things does HMAC provide?
  5. What type of control is it when I change the firewall rules?
  6. What is used to log in to a system that works in conjunction with a PIN?
  7. What is the name of the person who looks after classified data and who is the person that gives people access to the classified data?
  8. When you use a DAC model for access, who determines who gains access to the data?
  9. What is least privilege?
  10. What access control method does SELinux utilize?
  11. What is the Linux permission of 777? What access does it give you?
  12. What does the Linux permission execute allow me to do?
  13. The sales team are allowed to log in to the company between 9 a.m. and 10 p.m. What type of access control is being used?
  14. Two people from the finance team are only allowed to authorize the payment of checks; what type of access control are they using?
  15. What is the purpose of the defense in depth model?
  16. When someone leaves the company what is the first thing we should do with their user account?