CompTIA Security+ Exam Cram

by Barrett, Diane; Hausman, Kirk; Weiss, Martin

• ISBN13: 9780789738042
• ISBN10: 078973804X
• Edition: 2nd
• Format: Paperback
• Copyright: 2008-12-22
• Publisher: Pearson IT Certification

Summary

The smartest, fastest, most effective preparation for CompTIA's brand-new Security+ Exam.  Fully reflects major changes in the new 2008 Security+ exam - including more how-to help, and more coverage of risk management.  Designed to help candidates rapidly assess where they stand - and quickly master what they need to learn.  Includes test-taking strategies, time-saving tips, Exam Notes, and two sample exams delivered by the state-of-the-art MeasureUp test engine. CompTIA's Security+ is the #1 international vendor-neutral baseline security certification. In October 2008, CompTIA is releasing a thoroughly revised certification exam. CompTIA Security+ Exam Cram, Second Edition has been thoroughly updated to prepare candidates for the new exam, using the proven Exam Cram method of study. As with all Exam Cram books, it includes: -Chapters that map directly to the exam objectives -Comprehensive foundational learning on all topics covered on the exam -An extensive collection of practice questions -A state-of-the-art CD-ROM test engine that provides real-time practice and feedback -The Cram Sheet tear-out card including tips, acronyms, and memory joggers not available anywhere else - perfect for last-minute study Topics covered in this book range from identifying vulnerabilities to implementing communications and infrastructure security; cryptography concepts and deployment techniques to security management; forensics to internal security education and documentation. This book brings together all the knowledge professionals need to walk into the exam room with confidence - and pass their Security+ exams with flying colors.

Author Biography

Diane Barrett is a professor in the Network Security and Computer Forensics programs at the University of Advancing Technology. She has authored several security and forensic books. Diane belongs to the local chapters of several security user groups, including HTCIA and InfraGard. She was also a volunteer for ISSA’s (Information Systems Audit and Control Association) Generally Accepted Information Security Principles (GAISP) in the Ethical Practices Working Group. She holds about 15 industry certifications, including CISSP, ISSMP, and Security+. Diane received her master’s of science degree in computer technology, with a specialization in information security, from Capella University.

 

Kalani K. Hausman, CISSP, CISA, CISM, GHSC, is an author, teacher, and information technology implementer with more than 20 years’ experience specializing in IT governance, enterprise architecture, regulatory compliance, and enterprise security management. His experience includes medium to large-scale globally deployed networks in governmental, higher-education, health-care, and corporate settings. He is active within the FBI InfraGard, Information Systems Audit and Control Association (ISACA) and ISSA and is currently employed as the Assistant Commandant for IT at Texas A&M University.

 

Martin Weiss is a manager of information security gurus at RSA, The Security Division of EMC, helping organizations accelerate their business by solving their most complex and sensitive security challenges. He is also on the board of directors for the Connecticut chapter of ISSA and has authored several other books. He holds several certifications, including Security+, CISSP, MCSE: Security, and RSA CSE. Marty received his MBA from the Isenberg School of Management at the University of Massachusetts and currently lives in New England with his wife and three sons. Marty can be reached at [e-mail].

Table of Contents

Introduction	p. 1
The CompTIA Certification Program	p. 2
Taking a Certification Exam	p. 3
Tracking Certification Status	p. 4
About This Book	p. 5
Chapter Format and Conventions	p. 5
Exam Topics	p. 7
Self-Assessment	p. 11
CompTIA Certification in the Real World	p. 11
The Ideal CompTIA Certification Candidate	p. 12
Put Yourself to the Test	p. 14
How to Prepare for an Exam	p. 19
Studying for the Exam	p. 19
Testing Your Exam Readiness	p. 21
Dealing with Test Anxiety	p. 22
Day of the Exam	p. 23
System Security
System Threats and Risks	p. 27
Systems Security Threats	p. 28
Privilege Escalation	p. 28
Viruses	p. 30
Worms	p. 31
Trojans	p. 32
Table of Contents provided by Publisher. All Rights Reserved.

Excerpts

Introduction IntroductionWelcome to CompTIA Security+ Exam Cram , Second Edition. Whether this book is your first or your fifteenth Exam Cram series book, you'll find information here that will help ensure your success as you pursue knowledge, experience, and certification. This book aims to help you get ready to take and pass the CompTIA Security+ exam, number SY0-201.This introduction explains CompTIA's certification programs in general and talks about how the Exam Cram series can help you prepare for CompTIA's latest certification exams. Chapters 1 through 12 are designed to remind you of everything you need to know to pass the SY0-201 certification exam. The two practice exams at the end of this book should give you a reasonably accurate assessment of your knowledge; and, yes, we've provided the answers and their explanations for these practice exams. Read this book, understand the material, and you'll stand a very good chance of passing the real test.Exam Cram books help you understand and appreciate the subjects and materials you need to know to pass CompTIA certification exams. Exam Cram books are aimed strictly at test preparation and review. They do not teach you everything you need to know about a subject. Instead, the authors streamline and highlight the pertinent information by presenting and dissecting the questions and problems they've discovered that you're likely to encounter on a CompTIA test.Nevertheless, to completely prepare yourself for any CompTIA test, we recommend that you begin by taking the "Self-Assessment" that immediately follows this introduction. The self-assessment tool will help you evaluate your knowledge base against the requirements for the CompTIA Security+ exam under both ideal and real circumstances. This can also be the first step in earning more advanced security certifications.Based on what you learn from the self-assessment, you might decide to begin your studies with classroom training or some background reading. On the other hand, you might decide to pick up and read one of the many study guides available from Que or a third-party vendor.We also strongly recommend that you spend some time installing, configuring, and working with both Windows and UNIX or Linux operating systems to patch and maintain them for the best and most current security possible because the Security+ exam focuses on such activities and the knowledge and skills they can provide for you. Nothing beats hands-on experience and familiarity when it comes to understanding the questions you're likely to encounter on a certification test. Book learning is essential, but without doubt, hands-on experience is the best teacher of all! The CompTIA Certification ProgramThe Computing Technology Industry Association ( http://www.comptia.org ) offers numerous IT certifications, primarily aimed at entry- and intermediate-level IT professionals. Here is a list of some other relevant CompTIA certifications, briefly annotated to document their possible relevance to Security+: A+ : An exam that tests basic PC hardware and software installation, configuration, diagnosing, preventive maintenance, and basic networking. This two-part exam also covers security, safety, environmental issues, communication,