Book Image

CompTIA Security+ (SY0-501): Complete Course and Practice Exam [Video]

By : Jason Dion
Book Image

CompTIA Security+ (SY0-501): Complete Course and Practice Exam [Video]

By: Jason Dion

Overview of this book

This course is designed to help prepare you for the CompTIA Security+ (SY0-501) certification exam and covers the six domains for the Security+ (SY0-501) certification exam: • Threats, Attacks, and Vulnerabilities • Technologies and Tools • Architecture and Design • Identity and Access Management • Risk Management • Cryptography and PKI You will learn the fundamentals of cybersecurity and gain experience in the configuration, management, and troubleshooting of common wired and wireless networks. All the code files are placed at https://github.com/PacktPublishing/CompTIA-Security-SY0-501-Complete-Course-and-Practice-Exam

Related Content you might be interested in

Current Title:

Small book image
CompTIA Security+ (SY0-501): Complete Course and Practice Exam [Video]
Jason Dion
Mar, 2019 | 15 hours 10 minutes
No titles found
Table of Contents (27 chapters)
Free Chapter
1
Overview of Security
Welcome
Overview of Security
CIA Triad
AAA of Security
Security Threats
Mitigating Threats
Hackers
Threat Actors
2
Malware
Malware
Viruses
Worms
Trojans
Demo: Viruses and Trojans
Ransomware
Spyware
Rootkits
Spam
Summary of Malware
3
Malware Infections
Malware Infections
Common Delivery Methods
Demo: Phishing
Botnets and Zombies
Active Interception and Privilege Escalation
Demo: Privilege Escalation
Backdoors and Logic Bombs
Symptoms of Infection
Removing Malware
Preventing Malware
4
Security Applications and Devices
Security Applications and Devices
Software Firewalls
Demo: Software Firewalls
IDS
Pop-up Blockers
Data Loss Prevention (DLP)
Securing the BIOS
Securing Storage Devices
Disk Encryption
5
Mobile Device Security
Mobile Device Security
Securing Wireless Devices
Mobile Malware
SIM Cloning & ID Theft
Bluetooth Attacks
Mobile Device Theft
Security of Apps
BYOD
Hardening Mobile Devices
6
Hardening
Hardening
Unnecessary Applications
Restricting Applications
Demo: Unnecessary Services
Trusted Operating System
Updates and Patches
Patch Management
Group Policies
Demo: Group Policies
File Systems and Hard Drives
7
Virtualization
Virtualization
Hypervisors
Demo: How to create a VM
Threats to VMs
Securing VMs
Demo: Securing VMs
8
Application Security
Application Security
Web Browser Security
Web Browser Concerns
Demo: Web Browser Configuration
Securing Applications
9
Secure Software Development
Software Development
SDLC Principles
Testing Methods
Software Vulnerabilities and Exploits
Buffer Overflows
Demo: Buffer Overflow Attack
XSS and XSRF
SQL Injection
Demo: SQL Injection
10
Network Design
Network Security
The OSI Model
Switches
Routers
Network Zones
Network Access Control
VLANs
Subnetting
Network Address Translation
Telephony
11
Perimeter Security
Perimeter Security
Firewalls
Demo: SOHO Firewall
Proxy Servers
Honeypots and Honeynets
Data Loss Prevention
NIDS and NIPS
Unified Threat Management
12
Cloud Security
Cloud Computing
Cloud Types
As a Service
Cloud Security
Defending Servers
13
Network Attacks
Network Attacks
Ports and Protocols
Memorization of Ports
Unnecessary Ports
Denial of Service
DDoS
Stopping a DDoS
Spoofing
Hijacking
Replay Attack
Demo: Null Sessions
Transitive Attacks
DNS Attacks
ARP Poisoning
14
Securing Networks
Securing Networks
Securing Network Devices
Securing Network Media
Securing WiFi Devices
Wireless Encryption
Wireless Access Points
Wireless Attacks
Demo: Wireless Attack
Other Wireless Technologies
15
Physical Security
Physical Security
Surveillance
Door Locks
Demo: Lock Picking
Biometric Readers
16
Facilities Security
Facilities Security
Fire Suppression
HVAC
Shielding
Vehicles
17
Authentication
Authentication
Authentication Models
802.1x
LDAP and Kerberos
Remote Desktop Services
Remote Access Service
VPN
RADIUS vs TACACS+
Authentication Summary
18
Access Control
Access Control
Access Control Models
Best Practices
Users and Groups
Permissions
Usernames and Passwords
Demo: Policies
User Account Control
19
Risk Assessments
Risk Assessments
Qualitative Risk
Quantitative Risk
Methodologies
Security Controls
Vulnerability Management
Penetration Testing
OVAL
Vulnerability Assessments
Demo: Nmap Scanning
Demo: Vulnerability Scanning
Password Analysis
Demo: Password Cracking
20
Monitoring and Auditing
Monitoring Types
Performance Baselining
Protocol Analyzers
SNMP
Demo: Analytical Tools
Auditing
Demo: Auditing Files
Logging
Log Files
SIEM
21
Cryptography
Cryptography
Symmetric vs Asymmetric
Symmetric Algorithms
Public Key Cryptography
Asymmetric Algorithms
Pretty Good Privacy
Key Management
One-Time Pad
Demo: Steganography
Hashing
Demo: Hashing
Hashing Attacks
Increasing Hash Security
22
Public Key Infrastructure
Public Key Infrastructure
Digital Certificates
Demo: Certificates
Certificate Authorities
Web of Trust
23
Security Protocols
Security Protocols
S/MIME
SSL and TLS
SSH
VPN Protocols
Demo: Setting up a VPN
24
Planning for the Worst
Planning for the Worst
Redundant Power
Backup Power
Data Redundancy
Demo: RAIDs
Network Redundancy
Server Redundancy
Redundant Sites
Data Backup
Tape Rotation
Disaster Recovery Plan
25
Social Engineering
Social Engineering
Demo: Pretexting
Insider Threat
Phishing
More Social Engineering
User Education
26
Policies and Procedures
Policies and Procedures
Data Classifications
PII and PHI
Security Policies
User Education
Vendor Relationships
Disposal Policies
Incident Response Procedures
Data Collection Procedures
Demo: Disk Imaging
IT Security Frameworks
27
Conclusion
Conclusion
Exam Tricks
Chapter 7
Virtualization
Content Locked
Section 6
Demo: Securing VMs
This demonstration will show you how to encrypt the virtual machine's files on the host system and to isolate a virtual machine from the network and host computer.
Previous Section
End of Chapter 7
Next Chapter