Book Image

CompTIA CySA+ Study Guide: Exam CS0-002

By : Mike Chapple, David Seidl
Book Image

CompTIA CySA+ Study Guide: Exam CS0-002

By: Mike Chapple, David Seidl

Overview of this book

The Cybersecurity Analyst (CySA+) certification applies behavioral analytics to improve the overall state of IT security. CompTIA CySA+ meets the ISO 17024 standard and is approved by the U.S. Department of Defense to fulfill Directive 8570.01-M requirements. It is compliant with government regulations under the Federal Information Security Management Act (FISMA). More than just test prep, this book helps you to learn skills to demonstrate your command of all domains and topics covered by the CySA+ exam. The CompTIA CySA+ Study Guide provides complete coverage of all exam objectives for the new CySA+ certification. The CySA+ certification validates a candidate's skills to configure and use threat detection tools, perform data analysis, and identify vulnerabilities with a goal of securing and protecting systems of organizations. You'll study concepts with real-world examples drawn from experts, and hands-on labs. You'll gain insight on how to create your own cybersecurity toolkit. The end-of-chapter review questions will help you reinforce your knowledge. By the end of the book, you’ll have the skills and confidence you need to think and respond like a seasoned professional.
Table of Contents (23 chapters)
Free Chapter
About the Authors
Assessment Test
Answer to the Assessment Test

Understanding Defense in Depth

The foundation of most security designs relies on the concept of defense in depth. In other words, a single defensive measure should not be the only control preventing an attacker (or a mistake!) from creating a problem. Since there are many potential ways for a security breach to occur, a wide range of defenses must be layered together to ensure that a failure in one does not endanger sensitive data, systems, or networks.

Layered Security

One of the most important concepts for defense in depth is the idea of layered security. This means that each layer of security adds additional protections that help prevent a hole or flaw in another layer from allowing an attacker in. Figure 10.1

“Diagram shows security network design in five layered format where inner layer is data security, next is application security, endpoint system security, network security, and perimeter security.”

Figure 10.1 Layered security network design

As you can see, a layered approach can combine technologies that are specifically appropriate to the layer where they reside with technologies that are a fit for multiple layers. Configurations may differ based on the specific...