what s new in security sy0 401
play

WHATS NEW IN SECURITY+ SY0 -401? PRESENTED BY NETCOM LEARNING - PowerPoint PPT Presentation

Mar 07, 2024 •249 likes •496 views

WHATS NEW IN SECURITY+ SY0 -401? PRESENTED BY NETCOM LEARNING PRESENTER BRAD PARKER, MCT www.NetComLearning.com WHY SHOULD I TAKE SYO-401? CompTIA has increased the coverage of the Security+ exam Demonstrates a better understanding of

  1. WHAT’S NEW IN SECURITY+ SY0 -401? PRESENTED BY NETCOM LEARNING PRESENTER BRAD PARKER, MCT www.NetComLearning.com

  2. WHY SHOULD I TAKE SYO-401? • CompTIA has increased the coverage of the Security+ exam • Demonstrates a better understanding of mobile and cloud computing • D.O.D. recognizes the changes and requires many positions to hold this certification • Updates all CE requirements for Security+ and below certifications • SY0-301 is available until Jan. 1, 2015 but SY0-401 carries more weight. www.NetComLearning.com

  3. DEMAND FOR SECURITY IS UP! • Mobile computing has increased dramatically • BYOD is part of the network now • Increased integration with third parties • Data is escaping the enterprise more often • Data breaches are occurring as often as ever and are publicized better www.NetComLearning.com

  4. HOW TO PREPARE FOR THE SYO-401 • The CompTIA Security+ Certification is aimed at an IT security professional who has: • A minimum of 2 years experience in IT administration with a focus on security • Day to day technical information security experience • Broad knowledge of security concerns and implementation including the topics in the domain list below • Preferably already Network+ certified • Sit the NetCom Learning Security+ Boot Camp • Know the book information • Memorize acronyms and glossary of terms • Practice exam software www.NetComLearning.com

  5. C OMP TIA SECURITY+ EXAM SY0-401 Number of questions Maximum of 100 questions Multiple choice and Type of questions performance-based Length of test 90 minutes Passing score 750 (on a scale of 100-900) www.NetComLearning.com

  6. QUESTION FORMATS • The majority of questions will be multiple choice answers • 4-10 questions will be performance based • Depending on the nature of the exam and the exam question, the simulated environments may include different aspects of IT infrastructure, such as command prompts, Windows or networking environments • We’ll take a look at some examples later in this webinar www.NetComLearning.com

  7. OBJECTIVES/TOPICS COVERED Domain % of Examination 1.0 Network Security 20% 2.0 Compliance and Operational Security 18% 3.0 Threats and Vulnerabilities 20% 4.0 Application, Data and Host Security 15% 5.0 Access Control and Identity Management 15% 6.0 Cryptography 12% Total 100% www.NetComLearning.com

  8. 20% of exam 1.0 NETWORK SECURITY • 1.1 Implement security configuration parameters on network devices and other technologies. • 1.2 Given a scenario, use secure network administration principles. • 1.3 Explain network design elements and components. • 1.4 Given a scenario, implement common protocols and services. • 1.5 Given a scenario, troubleshoot security issues related to wireless networking. www.NetComLearning.com

  9. 18% of exam 2.0 COMPLIANCE AND OPERATIONAL SECURITY • 2.1 Explain the importance of risk related concepts. • 2.2 Summarize the security implications of integrating systems and data with third parties. • 2.3 Given a scenario, implement appropriate risk mitigation strategies. • 2.4 Given a scenario, implement basic forensic procedures. • 2.5 Summarize common incident response procedures. • 2.6 Explain the importance of security related awareness and training. • 2.7 Compare and contrast physical security and environmental controls. • 2.8 Summarize risk management best practices. • 2.9 Given a scenario, select the appropriate control to meet the goals of security. www.NetComLearning.com

  10. 20% of exam 3.0 THREATS AND VULNERABILITIES • 3.1 Explain types of malware. • 3.2 Summarize various types of attacks. • 3.3 Summarize social engineering attacks and the associated effectiveness with each attack. • 3.4 Explain types of wireless attacks. • 3.5 Explain types of application attacks. • 3.6 Analyze a scenario and select the appropriate type of mitigation and deterrent techniques. • 3.7 Given a scenario, use appropriate tools and techniques to discover security threats and vulnerabilities. • 3.8 Explain the proper use of penetration testing versus vulnerability scanning. www.NetComLearning.com

  11. 15% of exam 4.0 APPLICATION, DATA AND HOST SECURITY • 4.1 Explain the importance of application security controls and techniques. • 4.2 Summarize mobile security concepts and technologies. • 4.3 Given a scenario, select the appropriate solution to establish host security. • 4.4 Implement the appropriate controls to ensure data security. • 4.5 Compare and contrast alternative methods to mitigate security risks in static environments. www.NetComLearning.com

  12. 15% of exam 5.0 ACCESS CONTROL AND IDENTITY MANAGEMENT • 5.1 Compare and contrast the function and purpose of authentication services. • 5.2 Given a scenario, select the appropriate authentication, authorization or access control. • 5.3 Install and configure security controls when performing account management, based on best practices. www.NetComLearning.com

  13. 12% of exam 6.0 CRYPTOGRAPHY • 6.1 Given a scenario, utilize general cryptography concepts. • 6.2 Given a scenario, use appropriate cryptographic methods. • 6.3 Given a scenario, use appropriate PKI, certificate management and associated components. www.NetComLearning.com

  14. EXAMPLES OF QUESTION FORMATS Typical Multiple Choice • Majority will be multiple choice What port is used by the DNS protocol? O 21 • A few will be interactive O 53 O 389 • Don’t be intimidated by the interactive O 22 Typical Interactive Click and drag to place the sequence of data lost based on time factor. www.NetComLearning.com

  15. TYPES OF INTERACTIVE QUESTIONS - 1 www.NetComLearning.com

  16. TYPES OF INTERACTIVE QUESTIONS - 2 Ports to Memorize

  17. TYPES OF INTERACTIVE QUESTIONS - 3 Click and Drag Security Techniques Devices Laptop Desktop Secure Entry Key Storage Hardware Encryption Smart Phone Tablet

  18. TYPES OF INTERACTIVE QUESTIONS - 4 Order of volatility of digital evidence 1. CPU, cache and register content, routing table, ARP cache, process table, kernel statistics 2. RAM – Main Memory 3. Paging File, temporary file system / swap space 4. HDD - Data on hard disk 5. Remotely logged data – remote systems 6. Data contained on archival media – Backups on remote or offsite locations Order of Volatility 1. 2. 3. 4. 5. 6. www.NetComLearning.com

  19. HOW TO BEST USE RESOURCES FOUND ONLINE TO PREPARE • eBooks • Brain Dumps • Illicit exam prep material • Google/Wikipedia • Download software referenced in official training materials www.NetComLearning.com

  20. SOFTWARE TO PRACTICE WITH - FREE • Wireshark • Microsoft Network Monitor • Cain & Abel • Snort • NMAP • Superscan • Microsoft Server 2008 R2 with Active Directory • Many others www.NetComLearning.com

  21. RECOMMENDATIONS WHILE TESTING • Write down lists or items you’ve memorized • If a question takes longer than 15 seconds to answer – Mark if for Review • Gets the clock off your mind • Read the question slowly and carefully • Don’t read anything into the question • When you decide on the correct answer, tell yourself why the others are wrong • Look for Key Words – First, Last, Least administrative effort, least cost, etc. • Look for “SELECT TWO” • If you have no idea – use process of elimination • Don’t second guess yourself • Never leave an answer blank www.NetComLearning.com

  22. WHAT DOES NETCOM LEARNING OFFER? • Selective certified and experienced trainers • Standard Security+ Course • Security+ Boot Camp Course – brace yourself • Exam vouchers included! • Excellent hands on and reference materials • Live environment for practice • Courses that qualify for CEUs (Continuing Educations Units) www.NetComLearning.com

  23. WHAT’S NEW IN SECURITY+ SY0 -401? PRESENTED BY NETCOM LEARNING PRESENTER BRAD PARKER, MCT www.NetComLearning.com

Recommend

What is network security? Friends and enemies: Alice, Bob, Trudy What is network security?

What is network security? Friends and enemies: Alice, Bob, Trudy What is network security?

Network security Network security Foundations: what is security? cryptography Network Security Network Security authentication message integrity key distribution and certification Security in practice: Srinidhi Varadarajan

332 views • 6 slides
Security Security as term, Possible Security violations Authentication Criteria for

Security Security as term, Possible Security violations Authentication Criteria for

BS1 WS19/20 topic-based slides Security Security as term, Possible Security violations Authentication Criteria for Trust in Computer Systems Three hearts of Windows Security DACLs A Look at Security System is secure if

988 views • 20 slides
CPSC410/611: Security Security Security Attacks Security Threats Crypto

CPSC410/611: Security Security Security Attacks Security Threats Crypto

CPSC 410 / 611 : Operating Systems CPSC410/611: Security Security Security Attacks Security Threats Crypto Authentication Examples SSL Security Threats Breach of confidentiality unauthorized access to

458 views • 18 slides
Biometrics and Security Biometrics and Security Biometrics and Security Biometrics and Security

Biometrics and Security Biometrics and Security Biometrics and Security Biometrics and Security

Biometrics and Security Biometrics and Security Biometrics and Security Biometrics and Security WS 06/07 Seminar Prof. Dr.-Ing. Jana Dittmann & Dr.-Ing. Claus Vielhauer with support from Tobias Scheidat

419 views • 16 slides
1 X.800 Security Services X.800 Security Services X.800 Security Services Data integrity

1 X.800 Security Services X.800 Security Services X.800 Security Services Data integrity

Course Overview Course Requirements EECS 498-7/8 Cryptography and Network Security: www.citi.umich.edu/u/honey/security Principles and Practice (Third Edition) Computer Security Monday & Friday, 9:00 10:30 William Stallings

670 views • 19 slides
A (re)introduction to Spring Security Agenda Before Spring Security: Acegi security

A (re)introduction to Spring Security Agenda Before Spring Security: Acegi security

A (re)introduction to Spring Security Agenda Before Spring Security: Acegi security Introducing Spring Security View layer security Whats coming in Spring Security 3 E-mail: craig@habuma.com Blog: http://www.springloaded.info

452 views • 19 slides
Network Security Network Security Srinidhi Varadarajan Network security Network security

Network Security Network Security Srinidhi Varadarajan Network security Network security

Network Security Network Security Srinidhi Varadarajan Network security Network security Foundations: what is security? cryptography authentication message integrity key distribution and certification Security in practice:

634 views • 36 slides
Security Overview Security Goals The Attack Space Security Mechanisms

Security Overview Security Goals The Attack Space Security Mechanisms

CSCE Intro to Computer Systems Security Security Overview Security Goals The Attack Space Security Mechanisms Introduction to Cryptography Authentication Authorization Confidentiality Case Studies Security

472 views • 20 slides
SECURITY TESTING Towards a safer web world AGENDA 1. 3 WS OF SECURITY TESTING 2. SECURITY

SECURITY TESTING Towards a safer web world AGENDA 1. 3 WS OF SECURITY TESTING 2. SECURITY

SECURITY TESTING Towards a safer web world AGENDA 1. 3 WS OF SECURITY TESTING 2. SECURITY TESTING CONCEPTS 3. SECURITY TESTING TYPES 4. TOP 10 SECURITY RISKS Few Security Breaches Date: 2013-14 September 2016, while in negotiations to

404 views • 18 slides
Security Security with Distributed Systems Why Security? The need for security mechanisms in

Security Security with Distributed Systems Why Security? The need for security mechanisms in

Security Security with Distributed Systems Why Security? The need for security mechanisms in distributed systems arises from the desire to share resources Resources must be protected against unauthorized access, as enemies (attackers)

1.16k views • 67 slides
Security Overview Security Goals The Attack Space Security Mechanisms

Security Overview Security Goals The Attack Space Security Mechanisms

CPSC 410/611 Operating Systems Security Security Overview Security Goals The Attack Space Security Mechanisms Introduction to Cryptography Authentication Authorization Confidentiality Case Studies

419 views • 19 slides
International and Global Security 1 Peer Discussion What is security? 2 International

International and Global Security 1 Peer Discussion What is security? 2 International

International and Global Security 1 Peer Discussion What is security? 2 International Security What is security? Freedom from threats to core values? Contestation over referent object: Individual? State? System? How is security achieved?

715 views • 11 slides
Security 101 Definition of Information Security Information security is the protection of

Security 101 Definition of Information Security Information security is the protection of

Computing Services Information Security Office Security 101 Definition of Information Security Information security is the protection of information and systems from unauthorized access, disclosure, modification, destruction or disruption. The

469 views • 22 slides
Security Update Security Plans Our Security plans are For Official Use Only, Safety

Security Update Security Plans Our Security plans are For Official Use Only, Safety

Security Update Security Plans Our Security plans are For Official Use Only, Safety Sensitive Information Not for public or media release F.S. 119.071. Required by law, rule and regulation: Homeland Security Directive 5 and 8.

393 views • 11 slides
Com puter Security Part One Security as a subject Security is an old problem in the

Com puter Security Part One Security as a subject Security is an old problem in the

Com puter Security Part One Security as a subject Security is an old problem in the computing world, and are parallel to even older problems outside computing Required level of security is always related to what you protect

237 views • 23 slides
Introduction to Security Comm. Security Strategy Summary ITS335: IT Security Sirindhorn

Introduction to Security Comm. Security Strategy Summary ITS335: IT Security Sirindhorn

ITS335 Intro. to Security Concepts Threats, Attacks, Assets Introduction to Security Comm. Security Strategy Summary ITS335: IT Security Sirindhorn International Institute of Technology Thammasat University Prepared by Steven Gordon on 2

965 views • 34 slides
Effective Security for the Post-compliance Era Security Awareness and Training for Security

Effective Security for the Post-compliance Era Security Awareness and Training for Security

Effective Security for the Post-compliance Era Security Awareness and Training for Security Specialists M. ANGELA SASSE, RUHR UNIVERSITY BOCHUM & UCL The problem MENSCHLICH WELTOFFEN LEISTUNGSSTARK 2 ENISA Report December 2018

362 views • 33 slides
Security as a Architectural Concern Reid Holmes [TAILOR ET AL.] NFP: Security Security:

Security as a Architectural Concern Reid Holmes [TAILOR ET AL.] NFP: Security Security:

Material and some slide content from: - Software Architecture: Foundations, Theory, and Practice - Krzysztof Czarnecki Security as a Architectural Concern Reid Holmes [TAILOR ET AL.] NFP: Security Security: The protection a ff orded a

160 views • 4 slides
Security of Encryption Security of Encryption Perfect secrecy (IND-Onetime security) is too

Security of Encryption Security of Encryption Perfect secrecy (IND-Onetime security) is too

Defining Encryption (ctd.) Lecture 3 CPA/CCA security Computational Indistinguishability Pseudo-randomness, One-Way Functions Security of Encryption Security of Encryption Perfect secrecy (IND-Onetime security) is too strong (though too

1.36k views • 113 slides
Outline Security Principles and Policies Security terms and concepts CS 239 Security

Outline Security Principles and Policies Security terms and concepts CS 239 Security

Outline Security Principles and Policies Security terms and concepts CS 239 Security policies Computer Security Basic concepts Peter Reiher Security policies for real systems January 13, 2005 Lecture 2 Lecture 2 Page 1

347 views • 9 slides
Chapter 9 Cloud Security Contents Security in an interconnected world, cloud security

Chapter 9 Cloud Security Contents Security in an interconnected world, cloud security

Chapter 9 Cloud Security Contents Security in an interconnected world, cloud security risks. Attacks in a cloud environment, top threats. Security, a major concern for cloud users. Privacy. Trust. Operating systems

661 views • 38 slides
Election Security and Integrity What is election security? What is election integrity? Election

Election Security and Integrity What is election security? What is election integrity? Election

Election Security and Integrity What is election security? What is election integrity? Election Security = Physical Security + Cybersecurity Physical Security Security plans Secure storage of voting machines and electronic pollbooks

341 views • 13 slides
Computer Security environment, without compromising functionality or security? Three parts

Computer Security environment, without compromising functionality or security? Three parts

9/7/2013 Some topics Im working on Computing on encrypted data Information flow: Dynamic IFC in Haskell, web Sandboxing Untrusted JavaScript Third party web tracking and other web security stories Practical web security

572 views • 21 slides
Network Security Where we are in the Course Security crosses all layers Applicatjon

Network Security Where we are in the Course Security crosses all layers Applicatjon

Network Security Where we are in the Course Security crosses all layers Applicatjon Transport Network Link Physical CSE 461 University of Washington 2 Security Threats Security is like performance Means many things

1.12k views • 92 slides

More recommend