- A CA has a root certificate, which it uses to sign keys.
- I would use a private CA for internal use only; these certificates will not be accepted outside of your organization.
- I would use a public CA for B2B activities.
- If you were a military, security, or banking organization, you would keep the CA offline when it is not being used to prevent it from being compromised.
- An architect would build the CA or intermediary authorities.
- The CA would sign the X509 certificates.
- Certificate pinning can be used to prevent a CA from being compromised and fraudulent certificates being issued.
- If two separate PKI entities want to set up a cross certification, the root CAs would set up a trust model between themselves, known as a bridge trust model.
- PGP uses a trust model known as a web of trust.
- A Certificate Revocation List (CRL) is used to determine whether a certificate...
-
Book Overview & Buying
-
Table Of Contents
-
Feedback & Rating
CompTIA Security+ Certification Guide
By :
CompTIA Security+ Certification Guide
By:
Overview of this book
CompTIA Security+ is a worldwide certification that establishes the fundamental knowledge required to perform core security functions and pursue an IT security career. CompTIA Security+ Certification Guide is a best-in-class exam study guide that covers all of CompTIA Security+ 501 exam objectives. It is authored by Ian Neil, who is a world-class trainer of CompTIA Security+ 501. Packed with self-assessment scenarios and realistic exam questions, this guide will help you master the core concepts to succeed in the exam the first time you take it.
Using relevant examples, you will learn all the important security fundamentals from Certificates and Encryption to Identity and Access Management concepts. You will then dive into the important domains of the exam; namely, threats, attacks and vulnerabilities, technologies and tools, architecture and design, risk management, and cryptography and Public Key Infrastructure (PKI).
This book comes with over 600 practice questions with detailed explanation that is at the exam level and also includes two mock exams to help you with your study plan. This guide will ensure that encryption and certificates are made easy for you.
Table of Contents (18 chapters)
Preface
Free Chapter
Understanding Security Fundamentals
Conducting Risk Analysis
Implementing Security Policies and Procedures
Delving into Identity and Access Management
Understanding Network Components
Understanding Cloud Models and Virtualization
Managing Hosts and Application Deployment
Protecting Against Attacks and Vulnerabilities
Implementing the Public Key Infrastructure
Responding to Security Incidents
Managing Business Continuity
Mock Exam 1
Mock Exam 2
Preparing for the CompTIA Security+ 501 Exam
Acronyms
Assessment
Other Books You May Enjoy
Customer Reviews
