CompTIA CySA+ Study Guide (eBook)

ABOUT THE AUTHORS MIKE CHAPPLE, PhD, Security+, CySA+, CISSP, is Teaching Professor of Information Technology, Analytics, and Operations at Notre Dame's Mendoza College of Business. He is a bestselling author of over 25 books and serves as the Academic Director of the University's Master of Science in Business Analytics program. He holds multiple additional certifications, including the CISSP (Certified Information Systems Security Professional), CySA+ (CompTIA Cybersecurity Analyst), CIPP/US(Certified Information Privacy Professional), CompTIA PenTest+, and CompTIA Security+. Mike provides cybersecurity certification resources at his website, CertMike.com. DAVID SEIDL, CySA+, CISSP, PenTest+, is Vice President for Information Technology and CIO at Miami University. David co-led Notre Dame's move to the cloud, and has written multiple cybersecurity certification books.

Introduction xxi

Assessment Test xxxv

Domain I Security Operations 1

Chapter 1 Today's Cybersecurity Analyst 3

Chapter 2 System and Network Architecture 37

Chapter 3 Malicious Activity 77

Chapter 4 Threat Intelligence 135

Chapter 5 Reconnaissance and Intelligence Gathering 159

Domain II Vulnerability Management 201

Chapter 6 Designing a Vulnerability Management Program 203

Chapter 7 Analyzing Vulnerability Scans 245

Chapter 8 Responding to Vulnerabilities 293

Domain III Incident Response and Management 341

Chapter 9 Building an Incident Response Program 343

Chapter 10 Incident Detection and Analysis 377

Chapter 11 Containment, Eradication, and Recovery 397

Domain IV Reporting and Communication 421

Chapter 12 Reporting and Communication 423

Chapter 13 Performing Forensic Analysis and Techniques for Incident Response 447

Appendix Answers to Review Questions 489

Index 513