CompTIA Cybersecurity Analyst (CySA+)

Introduction

• Goals and Methods
• Who Should Read This Book?
• Strategies for Exam Preparation

Applying Environmental Reconnaissance Techniques

• Procedures/Common Tasks
• Variables
• Tools
• Review All Key Topics

Analyzing the Results of Network Reconnaissance

• Point-in-Time Data Analysis
• Data Correlation and Analytics
• Data Output
• Tools
• Review All Key Topics

Recommending and Implementing the Appropriate Response and Countermeasure

• Network Segmentation
• Honeypot
• Endpoint Security
• Group Policies
• ACLs
• Hardening
• Network Access Control
• Review All Key Topics

Practices Used to Secure a Corporate Environment

• Penetration Testing
• Reverse Engineering
• Training and Exercises
• Risk Evaluation
• Review All Key Topics

Implementing an Information Security Vulnerability Management Process

• Identification of Requirements
• Establish Scanning Frequency
• Configure Tools to Perform Scans According to Specification
• Execute Scanning
• Generate Reports
• Remediation
• Ongoing Scanning and Continuous Monitoring
• Review All Key Topics

Analyzing Scan Output and Identifying Common Vulnerabilities

• Analyzing Output Resulting from a Vulnerability Scan
• Common Vulnerabilities Found in Targets Within an Organization
• Review All Key Topics

Identifying Incident Impact and Assembling a Forensic Toolkit

• Threat Classification
• Factors Contributing to Incident Severity and Prioritization
• Forensics Kit
• Forensic Investigation Suite
• Review All Key Topics

The Incident Response Process

• Stakeholders
• Purpose of Communication Processes
• Role-Based Responsibilities
• Using Common Symptoms to Select the Best Course of Action to Support Incident Response
• Review All Key Topics

Incident Recovery and Post-Incident Response

• Containment Techniques
• Eradication Techniques
• Validation
• Corrective Actions
• Incident Summary Report
• Review All Key Topics

Frameworks, Policies, Controls, and Procedures

• Regulatory Compliance
• Frameworks
• Policies
• Controls
• Procedures
• Verifications and Quality Control
• Review All Key Topics

Remediating Security Issues Related to Identity and Access Management

• Security Issues Associated with Context-Based Authentication
• Security Issues Associated with Identities
• Security Issues Associated with Identity Repositories
• Security Issues Associated with Federation and Single Sign-on
• Exploits
• Review All Key Topics

Security Architecture and Implementing Compensating Controls

• Security Data Analytics
• Manual Review
• Defense in Depth
• Review All Key Topics

Application Security Best Practices

• Best Practices During Software Development
• Secure Coding Best Practices
• Review All Key Topics

Using Cybersecurity Tools and Technologies

• Preventative Tools
• Collective Tools
• Analytical Tools
• Exploit Tools
• Forensics Tools
• Review All Key Topics

Appendix: Conclusion