An Introduction to CompTIA Security+ - SY0-601.pdf

© 1998-2021 NetCom Learning www.netcomlearning.com info@netcomlearning.com 1-888-563-8266
|
|
|
|
An Introduction to CompTIA
Security+ - SY0 601
NetCom Learning
Sheik Raashid Javid
© Interested in training? Contact us! | www.netcomlearning.com | (888) 563-8266 | comptia@netcomlearning.com
1998-2022 NetCom Learning

|
|
| |
To watch the recorded webinar video for live demos, please access the link:
https://bit.ly/3N4DeT1
RECORDED WEBINAR VIDEO

|
|
|
|
© 1998-2022 NetCom Learning
AGENDA
Interested in training? Contact us! | www.netcomlearning.com | (888) 563-8266 | comptia@netcomlearning.com
Lesson 1: Comparing Security Roles and Security Controls
Lesson 2: Explaining Threat Actors and Threat Intelligence
Lesson 3: Performing Security Assessments
Lesson 4: Identifying Social Engineering and Malware
Lesson 5: Summarizing Basic Cryptographic Concepts
Lesson 6: Implementing Public Key Infrastructure
Lesson 7: Implementing Authentication Controls
Lesson 8: Implementing Identity and Account Management Controls
Lesson 9: Implementing Secure Network Designs
Lesson 10: Implementing Network Security Appliances

|
|
|
|
AGENDA
Lesson 11: Implementing Secure Network Protocols
Lesson 12: Implementing Host Security Solutions
Lesson 13: Implementing Secure Mobile Solutions
Lesson 14: Summarizing Secure Application Concepts
Lesson 15: Implementing Secure Cloud Solutions
Lesson 16: Explaining Data Privacy and Protection Concepts
Lesson 17: Performing Incident Response
Lesson 18: Explaining Digital Forensics
Lesson 19: Summarizing Risk Management Concepts
Lesson 20: Implementing Cybersecurity Resilience
Lesson 21: Explaining Physical Security

|
|
|
|
COMPARING SECURITY ROLES AND SECURITY CONTROLS
▪ Compare and Contrast Information
Security Roles
▪ Information Security- CIA
▪ Cybersecurity Framework- NIST
▪ Information Security Roles and
Responsibilities
▪ SOC
▪ Incident Response
 Compare and Contrast Security
Control and Framework Types
 Security control categories- Technical,
Managerial, Operational.
 Security Control Functional Types-
Preventive, Detective, Corrective,
Physical, Compensating, Deterrent
 ISO and Cloud Frameworks- 27K, 31K,
Cloud Security Alliance
 Regulations, standards- GDPR, PCI-DSS

|
|
|
|
EXPLAINING THREAT ACTORS AND THREAT INTELLIGENCE
▪ Explain Threat Actor Types and
Attack Vectors
▪ Vulnerability, Threat, Risk
▪ Attributes of Threat Actors-
Internal/External, Motivation, Funding
▪ Hackers, Script Kiddies, Hactivists, State
actor, APT, Competitors, Insider.
▪ Attack Surface, Actor vector
 Explain Threat Intelligence Sources
 Threat research sources- dark web
 Threat intelligence providers- IBM X-
Force, FireEye, Recorded Future, ISAC,
OSINT
 TTPs and IOC.
 Threat Data Feeds- STIX, TAXII etc.
 AI and ML

|
|
|
|
PERFORMING SECURITY ASSESSMENTS
▪ Assess organizational security with network
reconnaissance tools.
▪ Ipconfig, Ping, ARP, Route, Traceroute
▪ IP Scanners and Nmap- Service Discovery
▪ Netstat and Nslookup, Wireshark, tcpdump,
Metasploit etc.
▪ Explain security concerns with general
vulnerability types.
▪ Software vulnerabilities and patch management
▪ Zero-day, legacy, weak host configurations, weak
network configurations
▪ Impact from vulnerabilities, 3rd party risk, vendor
management
 Summarize vulnerability scanning techniques.
 Security assessment, vulnerability scan types
 CVE, CVSS, NVD
 False positive and false negatives
 Threat Hunting
 Explain penetration testing concepts.
 Penetration Testing
 ROE
 Black Box, White Box, Gray Box
 Red/Blue Team
 Active/passive Reconnaissance

|
|
|
|
IDENTIFYING SOCIAL ENGINEERING AND MALWARE
▪ Compare and contrast social
engineering techniques.
▪ Social Engineering- principles
▪ Impersonation, dumpster diving,
tailgating, identity fraud
▪ Phishing, whaling, vishing, spam,
pharming.
 Analyze indicators of malware-
based attacks.
 Malware Classification
 Virus, Worm, spyware, keylogger,
 Backdoor, RAT, Rootkit
 Ransomware, Logic Bomb
 Malware Indicators
 Process Analysis- Process Explorer

|
|
|
|
SUMMARIZING BASIC CRYPTOGRAPHIC CONCEPTS
▪ Compare and contrast cryptographic
ciphers.
▪ Cryptographic Concepts
▪ Hashing
▪ Symmetric and Asymmetric Encryption
▪ Summarize cryptographic modes of
operation.
▪ Digital Signatures
▪ Digital Certificates
▪ Digital Envelopes etc.
 Summarize cryptographic use cases
and weaknesses.
 Cryptography supporting CIA
 Limitations and Attacks
 Key stretching and salting
 Summarize other cryptographic
technologies.
 Quantum computing
 Blockchain
 Steganography etc.

|
|
|
|
IMPLEMENTING PUBLIC KEY INFRASTRUCTURE
▪ Implement certificates and certificate
authorities.
▪ Public and private keys
▪ Certificate Authority
▪ Trust Models- Registration Authority-
CSR
▪ Digital Certificate- Types, Attributes
 Implement PKI management.
 Key management
 Key Recovery-Escrow
 Certificate Expiration
 CRL
 Online Certificate Status Protocol
Responders etc.

|
|
|
|
IMPLEMENTING AUTHENTICATION CONTROLS
▪ Summarize authentication design concepts.
▪ Identity and Access Management
▪ Authentication Factors
▪ MFA etc.
▪ Implement knowledge-based authentication.
▪ Local, Remote Authentication
▪ Kerberos
▪ Password Attacks , crackers.
▪ Authentication Management etc.
 Implement authentication technologies.
 Smart card authentication
 Key management devices
 RADIUS and TACACS
 OTPs
 Summarize biometrics authentication
concepts.
 Biometric Authentication- FRR, FAR, CER
 Fingerprints Recognition
 Facial Recognition etc.

|
|
|
|
IMPLEMENTING IDENTITY AND ACCOUNT
MANAGEMENT CONTROLS
▪ Implement identity and account types.
▪ Identity Management Controls- certificates,
smart cards, tokens Identity Providers.
▪ Background Check- onboarding Policies
▪ Personnel Policies- Separation of duties, Job
rotation, mandatory vacation etc.
▪ Root Accounts etc.
▪ Implement account policies.
▪ Account attributes and access policies
▪ Password policy
▪ Account restrictions, permissions, auditing
and lockout
 Implement authorization solutions.
 DAC, RBAC, MAC
 Directory service
 Federation etc.
 Explain the importance of personnel
policies.
 Conduct policies
 User and Role based training
 Types of Training

|
|
|
|
IMPLEMEMNTING SECURE NETWORK DESIGNS
▪ Implement secure network designs.
▪ Secure Network Designs
▪ Network Appliances
▪ Routing and Switching Protocols
▪ Segmentation, Topology, Zones, DMZ
▪ Implement secure routing and
switching.
▪ MITM & Layer 2 Attacks
▪ ARP Poisoning, MAC Flooding.
▪ Loop prevention, MAC Filtering etc.
 Implement secure wireless
infrastructure.
 Wireless Network Installation
Considerations
 AP Security
 WEP, WPA2, WPA3, WPS
 Disassociation, Replay Attack,
Jamming
 Implement load balancers.
 DDoS & Mitigation
 Load Balancing
 Clustering, QoS

|
|
|
|
IMPLEMEMNTING NETWORK SECURITY APPLIANCES
▪ Implement firewalls and proxy servers.
▪ Packet Filtering Firewalls
▪ Stateful Inspection Firewalls
▪ Iptables, Proxies, Gateways, NAT etc.
▪ Implement network security monitoring.
▪ NIDS & NIPS
▪ Signature based and Behavior based
detection
▪ Next Generation Firewalls
▪ HIDS, WAF
 Summarize the use of SIEM
 Monitoring Services
 SIEM
 Analysis & Report Review
 File Manipulation Commands

|
|
|
|
IMPLEMEMNTING SECURE NETWORK PROTOCOL
▪ Implement secure network
operations protocols.
▪ NAT
▪ DNS
▪ DNS Poisoning- Security
▪ Secure Directory Services
▪ SNMP Security
 Implement secure application
protocols.
 HTTP and Web Services
 TLS
 FTP- Security
 Email- POP- IMAP- S/MIME-Security
 VOIP-SIP
 Implement secure remote access
protocols.
 VPN
 IPsec, L2TP.
 RDP-SSH

|
|
|
|
IMPLEMEMNTING HOST SECURITY SOLUTIONS
▪ Implement secure firmware.
▪ Secure Boot
▪ Disk Encryption
▪ USB/Flash Drive Security
▪ EOL Systems
▪ Organizational Security Agreements
 Implement endpoint security.
 Hardening
 Base Configuration, Registry settings
 Patch Management
 End-point protection- Next Generation
 Antivirus
 Explain embedded system security
implications.
 Embedded Systems
 Logic Controllers- Communication
 Industrial Control Systems
 IoT
 Specialized Systems- Multifunction Printers, etc.
 Security for embedded Systems etc.

|
|
|
|
IMPLEMEMNTING SECURE MOBILE SOLUTIONS
▪ Implement mobile device
management.
▪ Deployment Models
▪ Enterprise Mobility Management
▪ Mobile Access Control Systems
▪ Remote Wipe- Full Device Encryption
▪ Location services
▪ Application Management -Content
Management
▪ Rooting/ Jailbreaking
 Implement secure mobile device
connections.
 Cellular & GPS
 Wi-Fi and Tethering
 Bluetooth
 Infrared-NFC – USB etc.

|
|
|
|
SUMMARIZING SECURE APPLICATION CONCEPTS
▪ Analyze indicators of application attacks.
Application Attacks
Overflow Vulnerabilities
Race Conditions- Memory Leak- Resource
Exhaustion
Driver Manipulation, pass the hash
▪ Analyze indicators of web application
attacks.
▪ URL Analysis
▪ API Attacks
▪ Replay- Session Hijack- CSRF
▪ SQL Injection-Directory Traversal
▪ Summarize secure coding practices.
▪ Secure coding techniques, Web app security
▪ Data exposure-Memory Management
▪ Secure code usage
▪ Static/Dynamic Code analysis
▪ Implement secure script environments.
▪ Scripting, Python, PowerShell
▪ Malicious code indicators etc.
▪ Summarize deployment and automation
concepts.
▪ Application Development, Deployment, Automation
▪ Secure Application Development Environment
▪ Provisioning, Deprovisioning, Version Control etc.

|
|
|
|
IMPLEMENTING SECURE CLOUD SOLUTIONS
▪ Summarize secure cloud and
virtualization services.
▪ Cloud Deployment Models
▪ Cloud Service Models
▪ Anything as a service
▪ Security as a service
▪ Virtualization- Hypervisor
▪ Virtual Desktop
▪ VM Escape Protection- Sprawl
Avoidance
 Apply cloud security solutions.
 Cloud security Integration and Auditing
 Security Controls- compute security
 Storage Security- High Availability
 Network Security- Firewalls etc.
 Summarize infrastructure as code
concepts.
 Microservices
 API
 Serverless Architecture
 SDN etc.

|
|
|
|
EXPLAINING DATA PRIVACY AND PROTECTION CONCEPTS
▪ Explain privacy and data sensitivity
concepts.
▪ Privacy and sensitive data concepts
▪ Data Roles and responsibilities
▪ Data Classifications
▪ Data Retention- Geographical
Considerations
▪ Breaches
▪ Data Sharing
 Explain privacy and data protection
controls.
 Data Protection
 Data Exfiltration
 DLP
 Privacy enhancing- deidentification
etc.

|
|
|
|
PERFORMING INCIDENT RESPONSE
▪ Summarize incident response
procedures.
▪ Incident Response Process
▪ Preparation
▪ Identification
▪ Containment
▪ Eradication
▪ Recovery
▪ Lessons Learned
▪ Team, Communication, Plan, Exercise
▪ Attack Frameworks- Cyber Kill Chain
 Utilize appropriate data sources for
incident response.
 Incident Identification
 SIEM- Dashboards
 Trend Analysis
 Logging- Data Sources
 Apply mitigation controls.
 Incident Containment
 Eradication and recovery
 Firewall, content filter, end point
configuration changes, SOAR etc.

|
|
|
|
EXPLAINING DIGITAL FORENSICS
▪ Explain key aspects of digital
forensics documentation.
▪ Key aspects of digital forensics
▪ Report- E-Discovery- witness interview-
Timeline- Logs- Intelligence
 Explain key aspects of digital
forensics evidence acquisition.
 Data acquisition and order of volatility
 Forensic software
 Image and other data acquisition
 Integrity
 Data forensics in Cloud

|
|
|
|
SUMMARIZING RISK MANAGEMENT CONCEPTS
▪ Explain risk management processes
and concepts.
▪ Risk management Process
▪ Risk Types
▪ Assessment- Quantitative, Qualitative
▪ Risk Management Strategies
▪ Avoid, Transfer, Accept
▪ Risk Awareness
 Explain business impact analysis
concepts.
 Business Impact Analysis
 Mission Essential Functions
 Critical systems- single point of failure
 Disaster Recovery Plans etc.

|
|
|
|
IMPLEMENTING CYBERSECURITY RESILIENCE
▪ Implement redundancy strategies.
▪ High availability
▪ Power redundancy
▪ Network Redundancy
▪ Disk Redundancy
▪ Geographical Redundancy- Replication
 Implement backup strategies.
 Backup & Retention Policies
 Backup types
 Snapshots and Images
 Backup storage Issues
 Restoration Order etc.
 Implement cybersecurity resiliency
strategies.
 Configuration Management
 Assets Management
 Change Management
 Site Resiliency- Defense in Depth
 Disruption Strategies etc

|
|
|
|
© 1998-2022 NetCom Learning Interested in training? Contact us! | www.netcomlearning.com | (888) 563-8266 | comptia@netcomlearning.com
EXAM DETAILS
Exam Code SY0-601
Launch Date
November 12, 2020
Exam Description
The CompTIA Security+ certification
exam will verify the successful
candidate has the knowledge and skills
required to assess the security posture
of an enterprise environment and
recommend and implement appropriate
security solutions; monitor and secure
hybrid environments, including cloud,
mobile, and IoT; operate with an
awareness of applicable laws and
policies, including principles of
governance, risk, and compliance;
identify, analyze, and respond to
security events and incidents
Number of Questions Maximum of 90 questions
Type of Questions
Multiple choice and performance-based
Length of Test
90 minutes
Passing Score 750 (on a scale of 100-900)
Recommended Experience
CompTIA Network+ and two years of
experience in IT administration with a
security focus
Languages
English, Japanese, Vietnamese, Thai,
Portuguese
Retirement Usually, three years after launch
Testing Provider
•Pearson VUE
Testing Centers
•Online Testing

|
|
|
|
COMPTIA LABS FOR SECURITY+ (SY0 601)
▪ Assisted Lab: Exploring the Lab Environment
▪ Assisted Lab: Scanning and Identifying
Network Nodes
▪ Assisted Lab: Intercepting and Interpreting
Network Traffic with Packet Sniffing Tools
▪ Assisted Lab: Analyzing the Results of a
Credentialed Vulnerability Scan
▪ Assisted Lab: Installing, Using, and Blocking a
Malware-based Backdoor
▪ APPLIED LAB: Performing Network
Reconnaissance and Vulnerability Scanning
▪ Assisted Lab: Managing the Lifecycle of a
Certificate
▪ Assisted Lab: Managing Certificates with
OpenSSL
▪ Assisted Lab: Auditing Passwords with a
Password Cracking Utility
▪ Assisted Lab: Managing Centralized
Authentication
▪ Assisted Lab: Managing Access Controls in
Windows Server
▪ Assisted Lab: Configuring a System for
Auditing Policies
▪ Assisted Lab: Managing Access Controls in
Linux
▪ APPLIED LAB: Configuring Identity and Access
Management Controls
▪ Assisted Lab: Implementing a Secure
Network Design
▪ Assisted Lab: Configuring a Firewall
▪ Assisted Lab: Configuring an Intrusion
Detection System
▪ Assisted Lab: Implementing Secure Network
Addressing Services
▪ Assisted Lab: Implementing a Virtual Private
Network
▪ Assisted Lab: Implementing a Secure SSH
Server
▪ Assisted Lab: Implementing Endpoint
Protection
▪ APPLIED LAB: Securing the Network
Infrastructure
▪ Assisted Lab: Identifying Application Attack
Indicators
▪ Assisted Lab: Identifying a Browser Attack
▪ Assisted Lab: Implementing PowerShell
Security
▪ Assisted Lab: Identifying Malicious Code
▪ APPLIED LAB: Identifying Application Attack
▪ Assisted Lab: Managing Data Sources for
Incident Response
▪ Assisted Lab: Configuring Mitigation
Controls
▪ Assisted Lab: Acquiring Digital Forensics
Evidence
▪ Assisted Lab: Backing Up and Restoring
Data in Windows and Linux
▪ APPLIED LAB: Managing Incident Response,
Mitigation and Recovery

|
|
ABOUT NETCOM LEARNING
NetCom Learningis an award-winning
global leader in managedlearning
services, training and talentdevelopment.
Founded : 1998
Headquarters : NewYorkCity
Delivery Capability : Worldwide
CEO : RussellSarder
100K+
Professionals
trained
| |
14K+
C
orporate
clients
3500
IT,Business&
Soft Skillscourses
96%
Of customers
recommend usto others
8.6/9
Instructor
evaluations
20+
Leadingvendors
recognitions
Microsoft’s
Worldwidetraining
partner of the year
80%
Trainedofthe
Fortune100
T
op20
ITTraining
Company
|
|

|
|
RECOMMENDED COURSES AND MARKETING ASSETS
NetCom Learning offers a comprehensive portfolio for Security
» COMPTIA SECURITY+ CERTIFICATION PREP (EXAM SY0-601) - Class Scheduled on Jun 20
» COMPTIA ADVANCED SECURITY PRACTITIONER (CASP+) - Class Scheduled on Jul 18
» COMPTIA PENTEST+ CERTIFICATION PREP (EXAM PT0-002) - Class Scheduled on Jul 11
» COMPTIA NETWORK+ CERTIFICATION PREP (EXAM N10-008) - Class Scheduled on Jun 27
| |
You can also access the below Marketing Assets
» Free 1hr Training - An Introduction to CompTIA A+ (220 – 1101)
» Free On-Demand Training - What is new with CompTIA PenTest+ - PT0 002
» Blog - CompTIA Cybersecurity certification pathway and job prospects

|
|
UPCOMING WEBINARS
▪ Master Class: Understand the Fundamentals of Architecting on AWS
▪ Simplify Complex Projects with SCRUM
▪ What’s New in Power Apps and Power Automate?
▪ Cisco Enterprise Networks: Learn How to Implement and Configure OSPF
▪ Getting Started with Well-Architected Framework on AWS
▪ Master Class : Designing and Implementing DevOps Processes and Practices
▪ 10 Essential PMI skills for Leader
▪ AWS Discovery Day - Machine Learning Basics
▪ Learn Incident Handling & Response in Under 40 Minutes
▪ Master Class: Getting started with AWS DevOps
▪ An Introduction to CompTIA A+ (220 – 1101)
▪ AWS Discovery Day - Strategies and tools to perform large-scale migrations
▪ Learn to Defend Against Multi-Stage Network Breaches in 40 Minutes
& More
| |
|
|

|
|
PROMOTIONS
Stay Digital Safe - Assess and Upskill your team against cyber threats now !
NetCom Learning's end-user Cybersecurity Awareness Training & Phishing Simulation Solution offers phishing
simulations on email, voice, and text to organizations, and is bundled with 90+ interactive security awareness
video courses for the end-users. Request a Demo
| |
|
|

|
|
PROMOTIONS
Free Cybersecurity Training!
NetCom Learning brings an immersive two-hour, instructor-led Free Training on Cybersecurity that is designed to
help businesses understand the importance of Cybersecurity in today’s digital world and gain expert insights into
how security breaches can affect a business.. Learn More
| |
|
|

|
|
| |
|
|
PROMOTIONS
Explore The World Of Unlimited Training Subscription!
NetCom+ is a limitless 12-month subscription program. Attend over 500+ courses as from a range of authorized
training courses. Get access to bundled offerings of Virtual Instructor-Led courses, e-Learning, Discovery Days, and
On-Demand training via NetCom+ training subscription.. Save Now

|
|
PROMOTIONS
E- Learning To Skill Up !
Align and upskill your team via e-Learning to drive results! Our robust library includes EC-Council, Microsoft, Cisco,
Citrix, CompTIA, Autodesk, and more. Our e-Learning solutions allow perfect balance among work and upskilling,
without interrupting workflow. It’s all about saving time, quality learning, knowledge check, 24/7 availability.
Learn More
| |
|
|

|
|
PROMOTIONS
Access Your Passport To A Year Full Of Learning!
The NetCom Learning Passport is a flexible pre-pay training package allowing you to plan and manage your
teams’ annual training needs. With our Learning Passport, organizations get special pricing and extended
program options to simplify management. Equipped with this Passport, you make the most of your budget. It has
been specifically designed to specialize for the number of learners you plan to train.. Unlock Now
| |

|
|
PROMOTIONS
Worry-Free Training with Price Match Guarantee!
Our Price Match Guarantee ensures that we'll match the offers of any other authorized training provider if you
succeed at finding anyone offering the same publicly scheduled class within 30 days of our schedule at a lower
regular price.. Learn More
| |
|
|

|
|
BUILDING AN INNOVATIVE LEARNING ORG.
A BOOK FROM RUSSELL SARDER,
CEO AT NETCOM LEARNING
A framework to build a smarter
workforce, adapt to change and
drive growth.
DOWNLOADe-book
| |
|
|

An Introduction to CompTIA Security+ - SY0-601.pdf

Recommended

Recommended

More Related Content

Similar to An Introduction to CompTIA Security+ - SY0-601.pdf

Similar to An Introduction to CompTIA Security+ - SY0-601.pdf (20)

More from Tuan Yang

More from Tuan Yang (16)

Recently uploaded

Recently uploaded (20)

An Introduction to CompTIA Security+ - SY0-601.pdf