CompTIA Advanced Security Practitioner (CASP+) CAS-004 Cert Guide, 3rd Edition

https://www.anonpr.net/c4qe8y8 Cover Page About This eBook Title Page Copyright Page Pearson’s Commitment to Diversity, Equity, and Inclusion Contents at a Glance Table of Contents About the Author Dedication Acknowledgments About the Technical Reviewer We Want to Hear from You! Reader Services Introduction Who Should Read This Book? Strategies for Exam Preparation How This Book Is Organized Companion Website Pearson Test Prep Practice Test Software Accessing the Pearson Test Prep Software Online Accessing the Pearson Test Prep Software Offline Customizing Your Exams Updating Your Exams Premium Edition eBook and Practice Tests Credits Part I: Security Architecture Chapter 1 Ensuring a Secure Network Architecture Services Segmentation De-perimeterization/Zero Trust Merging of Networks from Various Organizations Software-Defined Networking (SDN) Exam Preparation Tasks Review All Key Topics Define Key Terms Complete Tables and Lists from Memory Review Questions Chapter 2 Determining the Proper Infrastructure Security Design Scalability Resiliency Automation Performance Containerization Virtualization Content Delivery Network Caching Exam Preparation Tasks Review All Key Topics Define Key Terms Complete Tables and Lists from Memory Review Questions Chapter 3 Securely Integrating Software Applications Baseline and Templates Software Assurance Considerations of Integrating Enterprise Applications Integrating Security into Development Life Cycle Exam Preparation Tasks Review All Key Topics Define Key Terms Complete Tables and Lists from Memory Review Questions Chapter 4 Securing the Enterprise Architecture by Implementing Data Security Techniques Data Loss Prevention Data Loss Detection Data Classification, Labeling, and Tagging Obfuscation Anonymization Encrypted vs. Unencrypted Data Life Cycle Data Inventory and Mapping Data Integrity Management Data Storage, Backup, and Recovery Exam Preparation Tasks Review All Key Topics Define Key Terms Complete Tables and Lists from Memory Review Questions Chapter 5 Providing the Appropriate Authentication and Authorization Controls Credential Management Password Policies Federation Access Control Protocols Multifactor Authentication (MFA) One-Time Password (OTP) Hardware Root of Trust Single Sign-On (SSO) JavaScript Object Notation (JSON) Web Token (JWT) Attestation and Identity Proofing Exam Preparation Tasks Review All Key Topics Define Key Terms Review Questions Chapter 6 Implementing Secure Cloud and Virtualization Solutions Virtualization Strategies Provisioning and Deprovisioning Middleware Metadata and Tags Deployment Models and Considerations Hosting Models Service Models Cloud Provider Limitations Extending Appropriate On-premises Controls Storage Models Exam Preparation Tasks Review All Key Topics Define Key Terms Complete Tables and Lists from Memory Review Questions Chapter 7 Supporting Security Objectives and Requirements with Cryptography and Public Key Infrastructure (PKI) Privacy and Confidentiality Requirements Integrity Requirements Non-repudiation Compliance and Policy Requirements Common Cryptography Use Cases Common PKI Use Cases Exam Preparation Tasks Review All Key Topics Define Key Terms Complete Tables and Lists from Memory Review Questions Chapter 8 Managing the Impact of Emerging Technologies on Enterprise Security and Privacy Artificial Intelligence Machine Learning Quantum Computing Blockchain Homomorphic Encryption Secure Multiparty Computation Distributed Consensus Big Data Virtual/Augmented Reality 3-D Printing Passwordless Authentication Nano Technology Deep Learning Biometric Impersonation Exam Preparation Tasks Review All Key Topics Define Key Terms Complete Tables and Lists from Memory Review Questions Part II: Security Operations Chapter 9 Performing Threat Management Activities Intelligence Types Actor Types Threat Actor Properties Intelligence Collection Methods Frameworks Exam Preparation Tasks Review All Key Topics Define Key Terms Complete Tables and Lists from Memory Review Questions Chapter 10 Analyzing Indicators of Compromise and Formulating an Appropriate Response Indicators of Compromise Response Exam Preparation Tasks Review All Key Topics Define Key Terms Complete Tables and Lists from Memory Review Questions Chapter 11 Performing Vulnerability Management Activities Vulnerability Scans Security Content Automation Protocol (SCAP) Self-assessment vs. Third-Party Vendor Assessment Patch Management Information Sources Exam Preparation Tasks Review All Key Topics Define Key Terms Complete Tables and Lists from Memory Review Questions Chapter 12 Using the Appropriate Vulnerability Assessment and Penetration Testing Methods and Tools Methods Tools Dependency Management Requirements Exam Preparation Tasks Review All Key Topics Define Key Terms Complete Tables and Lists from Memory Review Questions Chapter 13 Analyzing Vulnerabilities and Recommending Risk Mitigations Vulnerabilities Inherently Vulnerable System/Application Attacks Exam Preparation Tasks Review All Key Topics Define Key Terms Complete Tables and Lists from Memory Review Questions Chapter 14 Using Processes to Reduce Risk Proactive and Detection Security Data Analytics Preventive Application Control Security Automation Physical Security Exam Preparation Tasks Review All Key Topics Define Key Terms Complete Tables and Lists from Memory Review Questions Chapter 15 Implementing the Appropriate Incident Response Event Classifications Triage Event Preescalation Tasks Incident Response Process Specific Response Playbooks/Processes Communication Plan Stakeholder Management Exam Preparation Tasks Review All Key Topics Define Key Terms Review Questions Chapter 16 Forensic Concepts Legal vs. Internal Corporate Purposes Forensic Process Integrity Preservation Cryptanalysis Steganalysis Exam Preparation Tasks Review All Key Topics Define Key Terms Complete Tables and Lists from Memory Review Questions Chapter 17 Forensic Analysis Tools File Carving Tools Binary Analysis Tools Analysis Tools Imaging Tools Hashing Utilities Live Collection vs. Post-mortem Tools Exam Preparation Tasks Review All Key Topics Define Key Terms Complete Tables and Lists from Memory Review Questions Part III: Security Engineering and Cryptography Chapter 18 Applying Secure Configurations to Enterprise Mobility Managed Configurations Deployment Scenarios Exam Preparation Tasks Review All Key Topics Define Key Terms Complete Tables and Lists from Memory Review Questions Chapter 19 Configuring and Implementing Endpoint Security Controls Hardening Techniques Processes Mandatory Access Control Trustworthy Computing Compensating Controls Exam Preparation Tasks Review All Key Topics Define Key Terms Complete Tables and Lists from Memory Review Questions Chapter 20 Security Considerations Impacting Specific Sectors and Operational Technologies Embedded ICS/Supervisory Control and Data Acquisition (SCADA) Protocols Sectors Exam Preparation Tasks Review All Key Topics Define Key Terms Complete Tables and Lists from Memory Review Questions Chapter 21 Cloud Technology’s Impact on Organizational Security Automation and Orchestration Encryption Configuration Logs Monitoring Configurations Key Ownership and Location Key Life-Cycle Management Backup and Recovery Methods Infrastructure vs. Serverless Computing Application Virtualization Software-Defined Networking Misconfigurations Collaboration Tools Storage Configurations Cloud Access Security Broker (CASB) Exam Preparation Tasks Review All Key Topics Define Key Terms Review Questions Chapter 22 Implementing the Appropriate PKI Solution PKI Hierarchy Certificate Types Certificate Usages/Profiles/Templates Extensions Trusted Providers Trust Model Cross-certification Configure Profiles Life-Cycle Management Public and Private Keys Digital Signature Certificate Pinning Certificate Stapling Certificate Signing Requests (CSRs) Online Certificate Status Protocol (OCSP) vs. Certificate Revocation List (CRL) HTTP Strict Transport Security (HSTS) Exam Preparation Tasks Review All Key Topics Define Key Terms Review Questions Chapter 23 Implementing the Appropriate Cryptographic Protocols and Algorithms Hashing Symmetric Algorithms Asymmetric Algorithms Protocols Elliptic-Curve Cryptography Forward Secrecy Authenticated Encryption with Associated Data Key Stretching Exam Preparation Tasks Review All Key Topics Define Key Terms Complete Tables and Lists from Memory Chapter 24 Troubleshooting Issues with Cryptographic Implementations Implementation and Configuration Issues Keys Exam Preparation Tasks Review All Key Topics Define Key Terms Complete Tables and Lists from Memory Review Questions Part IV: Governance, Risk, and Compliance Chapter 25 Applying Appropriate Risk Strategies Risk Assessment Risk Handling Techniques Risk Types Risk Management Life Cycle Risk Tracking Risk Appetite vs. Risk Tolerance Policies and Security Practices Exam Preparation Tasks Review All Key Topics Define Key Terms Complete Tables and Lists from Memory Review Questions Chapter 26 Managing and Mitigating Vendor Risk Shared Responsibility Model (Roles/Responsibilities) Vendor Lock-in and Vendor Lock-out Vendor Viability Meeting Client Requirements Support Availability Geographical Consideration Supply Chain Visibility Incident Reporting Requirements Source Code Escrows Ongoing Vendor Assessment Tools Third-Party Dependencies Technical Considerations Exam Preparation Tasks Review All Key Topics Define Key Terms Complete Tables and Lists from Memory Review Questions Chapter 27 The Organizational Impact of Compliance Frameworks and Legal Considerations Security Concerns of Integrating Diverse Industries Data Considerations Geographic Considerations Third-Party Attestation of Compliance Regulations, Accreditations, and Standards Legal Considerations Contract and Agreement Types Exam Preparation Tasks Review All Key Topics Define Key Terms Complete Tables and Lists from Memory Chapter 28 Business Continuity and Disaster Recovery Concepts Business Impact Analysis Privacy Impact Assessment Disaster Recovery Plan (DRP)/Business Continuity Plan (BCP) Incident Response Plan Testing Plans Exam Preparation Tasks Review All Key Topics Define Key Terms Complete Tables and Lists from Memory Chapter 29 Final Preparation Tools for Final Preparation Suggested Plan for Final Review/Study Summary Appendix A Answers to the Review Questions Glossary Index Appendix B Memory Tables Appendix C Memory Tables Answer Key Where are the companion content files? - Register Inside Front Cover Inside Back Cover Code Snippets