CASP+ CompTIA Advanced Security Practitioner Study Guide

ABOUT THE AUTHORS NADEAN H. TANNER has been in the technology industry for over 20 years in a variety of positions from marketing to training to web development to hardware. She has worked in academia as an IT director and a postgraduate technology instructor. She has also been a trainer and consultant in advanced cybersecurity for Fortune 500 companies as well as the U.S. Department of Defense. Nadean is the author of CASP+ Practices Tests: Exam CAS-004 and Cybersecurity Blue Team Toolkit. JEFF T. PARKER, CISSP, CompTIA Project+, CySA+, is a certified technical trainer and consultant specializing in governance, risk management and compliance. Jeff’s infosec roots began as a security engineer, a member of a HP consulting group in Boston, USA. Prior to becoming an author, Jeff was a Global IT Risk Manager residing for several years in Prague, Czech Republic, where he rolled out a new risk management strategy for a multinational logistics firm.

• Introduction xxvAssessment Test xxxvChapter 1 Risk Management 1Risk Terminology 4The Risk Assessment Process 6Policies Used to Manage Employees 17Cost-Benefit Analysis 21Continuous Monitoring 22Enterprise Security Architecture Frameworks and Governance 23Training and Awareness for Users 24Best Practices for Risk Assessments 25Business Continuity Planning and Disaster Recovery 27Reviewing the Effectiveness of Existing Security Controls 28Conducting Lessons Learned and After-Action Reviews 30Creation, Collection, and Analysis of Metrics 31Analyzing Security Solutions to Ensure They Meet Business Needs 32Testing Plans 33Internal and External Audits 34Using Judgment to Solve Difficult Problems 35Summary 35Exam Essentials 36Review Questions 38Chapter 2 Configure and Implement Endpoint Security Controls 43Hardening Techniques 45Trusted Operating Systems 52Compensating Controls 55Summary 57Exam Essentials 58Review Questions 59Chapter 3 Security Operations Scenarios 63Threat Management 66Actor Types 67Intelligence Collection Methods 71Frameworks 74Indicators of Compromise 77Response 80Summary 85Exam Essentials 85Review Questions 86Chapter 4 Security Ops: Vulnerability Assessments and Operational Risk 91Terminology 97Vulnerability Management 98Vulnerabilities 134Inherently Vulnerable System/Application 140Proactive Detection 153Summary 159Exam Essentials 160Review Questions 161Chapter 5 Compliance and Vendor Risk 165Shared Responsibility in Cloud Computing 168Security Concerns of Integrating Diverse Industries 185Regulations, Accreditations, and Standards 187Contract and Agreement Types 198Third-Party Attestation of Compliance 202Legal Considerations 203Summary 204Exam Essentials 205Review Questions 206Chapter 6 Cryptography and PKI 211The History of Cryptography 216Cryptographic Goals and Requirements 217Supporting Security Requirements 218Risks with Data 221Hashing 223Symmetric Algorithms 227Asymmetric Encryption 233Public Key Infrastructure Hierarchy 239Digital Certificates 241Implementation of Cryptographic Solutions 247Recognizing Cryptographic Attacks 254Troubleshooting Cryptographic Implementations 256Summary 259Exam Essentials 259Review Questions 261Chapter 7 Incident Response and Forensics 265The Incident Response Framework 268Forensic Concepts 277Forensic Analysis Tools 283Summary 294Exam Essentials 294Review Questions 295Chapter 8 Security Architecture 301Security Requirements and Objectives for a Secure Network Architecture 310Organizational Requirements for Infrastructure Security Design 358Integrating Applications Securely into an Enterprise Architecture 362Data Security Techniques for Securing Enterprise Architecture 384Security Requirements and Objectives for Authentication and Authorization Controls 394Summary 406Exam Essentials 407Review Questions 410Chapter 9 Secure Cloud and Virtualization 415Implement Secure Cloud and Virtualization Solutions 418How Cloud Technology Adoption Impacts Organization Security 445Summary 461Exam Essentials 462Review Questions 463Chapter 10 Mobility and Emerging Technologies 467Emerging Technologies and Their Impact on Enterprise Security and Privacy 471Secure Enterprise Mobility Configurations 478Security Considerations for Technologies, Protocols, and Sectors 495Summary 500Exam Essentials 500Review Questions 501Appendix Answers to Review Questions 505Chapter 1: Risk Management 506Chapter 2: Configure and Implement Endpoint Security Controls 507Chapter 3: Security Operations Scenarios 509Chapter 4: Security Ops: Vulnerability Assessments and Operational Risk 511Chapter 5: Compliance and Vendor Risk 513Chapter 6: Cryptography and PKI 514Chapter 7: Incident Response and Forensics 516Chapter 8: Security Architecture 519Chapter 9: Secure Cloud and Virtualization 522Chapter 10: Mobility and Emerging Technologies 524Index 529