Book Image

CompTIA CySA+ Study Guide: Exam CS0-002

By : Mike Chapple, David Seidl
Book Image

CompTIA CySA+ Study Guide: Exam CS0-002

By: Mike Chapple, David Seidl

Overview of this book

The Cybersecurity Analyst (CySA+) certification applies behavioral analytics to improve the overall state of IT security. CompTIA CySA+ meets the ISO 17024 standard and is approved by the U.S. Department of Defense to fulfill Directive 8570.01-M requirements. It is compliant with government regulations under the Federal Information Security Management Act (FISMA). More than just test prep, this book helps you to learn skills to demonstrate your command of all domains and topics covered by the CySA+ exam. The CompTIA CySA+ Study Guide provides complete coverage of all exam objectives for the new CySA+ certification. The CySA+ certification validates a candidate's skills to configure and use threat detection tools, perform data analysis, and identify vulnerabilities with a goal of securing and protecting systems of organizations. You'll study concepts with real-world examples drawn from experts, and hands-on labs. You'll gain insight on how to create your own cybersecurity toolkit. The end-of-chapter review questions will help you reinforce your knowledge. By the end of the book, you’ll have the skills and confidence you need to think and respond like a seasoned professional.
Table of Contents (23 chapters)
Free Chapter
1
Acknowledgments
2
About the Authors
4
Assessment Test
5
Answer to the Assessment Test
19
Index
20
Advert
21
EULA

Lab Exercises

Activity 4.1: Interpreting a Vulnerability Scan

In Activity 3.2, you ran a vulnerability scan of a network under your control. In this lab, you will interpret the results of that vulnerability scan.

Review the scan results carefully and develop a remediation plan for your network. This plan should carefully consider the severity of each vulnerability, the potential that each may be a false positive result, and the time required to complete the remediation.

Activity 4.2: Analyzing a CVSS Vector

In this lab, you will interpret the CVSS vectors found in a vulnerability scan report to assess the severity and impact of two vulnerabilities.

Review the vulnerability reports in Figures 4.20 and 4.21.

“Window showing medium for first vulnerability report having description, solution, see also website links, output where as plugin details, risk and reference information on right.”

Figure 4.20 First vulnerability report

“Window showing medium for second vulnerability report with description, solution, see also website links, output in program code and plugin details, risk information, et cetera.”

Figure 4.21 Second vulnerability report

Explain the components of the CVSS vector for each of these vulnerabilities. Which vulnerability is more serious? Why?

Activity 4.3: Remediating a Vulnerability

In this lab, you will...