Table Of ContentCompTIA Cybersecurity Analyst
(CSA+) Cert Guide
Troy McMillan
Pearson
800 East 96th Street
Indianapolis, Indiana 46240 USA
CompTIA Cybersecurity Analyst (CSA+) Cert Guide
Copyright © 2017 by Pearson Education, Inc.
All rights reserved. No part of this book shall be reproduced, stored in a
retrieval system, or transmitted by any means, electronic, mechanical,
photocopying, recording, or otherwise, without written permission from the
publisher. No patent liability is assumed with respect to the use of the
information contained herein. Although every precaution has been taken in
the preparation of this book, the publisher and author assume no
responsibility for errors or omissions. Nor is any liability assumed for
damages resulting from the use of the information contained herein.
ISBN-13: 978-0-7897-5695-4
ISBN-10: 0-7897-5695-1
Library of Congress Control Number: 2017938509
Printed in the United States of America
First Printing: June 2017
Trademarks
All terms mentioned in this book that are known to be trademarks or service
marks have been appropriately capitalized. Pearson IT Certification cannot
attest to the accuracy of this information. Use of a term in this book should
not be regarded as affecting the validity of any trademark or service mark.
Warning and Disclaimer
Every effort has been made to make this book as complete and as accurate as
possible, but no warranty or fitness is implied. The information provided is
on an “as is” basis. The author and the publisher shall have neither liability
nor responsibility to any person or entity with respect to any loss or damages
arising from the information contained in this book.
Special Sales
For information about buying this title in bulk quantities, or for special sales
opportunities (which may include electronic versions; custom cover designs;
and content particular to your business, training goals, marketing focus, or
branding interests), please contact our corporate sales department at
Senior Project Editor
Tonya Simpson
Copy Editor
Kitty Wilson
Indexer
Publishing Works, Inc.
Proofreader
Technical Editors
Chris Crayton
Robin Abernathy
Publishing Coordinator
Vanessa Evans
Cover Designer
Chuti Prasertsith
Compositor
Contents at a Glance
About the Author
Dedication
Acknowledgments
About the Technical Reviewers
We Want to Hear from You!
Reader Services
Introduction
1 Applying Environmental Reconnaissance Techniques
2 Analyzing the Results of Network Reconnaissance
3 Recommending and Implementing the Appropriate Response and
Countermeasure
4 Practices Used to Secure a Corporate Environment
5 Implementing an Information Security Vulnerability Management Process
6 Analyzing Scan Output and Identifying Common Vulnerabilities
7 Identifying Incident Impact and Assembling a Forensic Toolkit
8 The Incident Response Process
9 Incident Recovery and Post-Incident Response
10 Frameworks, Policies, Controls, and Procedures
11 Remediating Security Issues Related to Identity and Access Management
12 Security Architecture and Implementing Compensating Controls
13 Application Security Best Practices
14 Using Cybersecurity Tools and Technologies
15 Final Preparation
Appendix A Answers to the “Do I Know This Already?” Quizzes and
Review Questions
Glossary
Table of Contents
About the Author
Dedication
Acknowledgments
About the Technical Reviewers
We Want to Hear from You!
Reader Services
Introduction
Goals and Methods
Who Should Read This Book?
Strategies for Exam Preparation
Book Features and Exam Preparation Methods
Companion Website
Accessing the Pearson Test Prep Software and Questions
Accessing the Pearson Test Prep Software Online
Accessing the Pearson Test Prep Software Offline
Assessing Exam Readiness
Premium Edition
Chapter 1. Applying Environmental Reconnaissance Techniques
“Do I Know This Already?” Quiz
Foundation Topics
Exam Preparation Tasks
Chapter 2. Analyzing the Results of Network Reconnaissance
“Do I Know This Already?” Quiz
Foundation Topics
Exam Preparation Tasks
Chapter 3. Recommending and Implementing the Appropriate Response and
Countermeasure
“Do I Know This Already?” Quiz
Foundation Topics
Exam Preparation Tasks
Chapter 4. Practices Used to Secure a Corporate Environment
“Do I Know This Already?” Quiz
Foundation Topics
Exam Preparation Tasks
Chapter 5. Implementing an Information Security Vulnerability Management
Process
“Do I Know This Already?” Quiz
Foundation Topics
Exam Preparation Tasks
Chapter 6. Analyzing Scan Output and Identifying Common Vulnerabilities
“Do I Know This Already?” Quiz
Foundation Topics
Exam Preparation Tasks
Chapter 7. Identifying Incident Impact and Assembling a Forensic Toolkit
“Do I Know This Already?” Quiz
Foundation Topics
Exam Preparation Tasks
Chapter 8. The Incident Response Process
“Do I Know This Already?” Quiz
Foundation Topics
Exam Preparation Tasks
Chapter 9. Incident Recovery and Post-Incident Response
“Do I Know This Already?” Quiz
Foundation Topics
Exam Preparation Tasks
Chapter 10. Frameworks, Policies, Controls, and Procedures
“Do I Know This Already?” Quiz
Foundation Topics
Exam Preparation Tasks
Chapter 11. Remediating Security Issues Related to Identity and Access
Management
“Do I Know This Already?” Quiz
Foundation Topics
Exam Preparation Tasks
Chapter 12. Security Architecture and Implementing Compensating Controls
“Do I Know This Already?” Quiz
Foundation Topics
Exam Preparation Tasks
Chapter 13. Application Security Best Practices
“Do I Know This Already?” Quiz
Foundation Topics
Exam Preparation Tasks
Chapter 14. Using Cybersecurity Tools and Technologies
“Do I Know This Already?” Quiz
Foundation Topics
Exam Preparation Tasks
Chapter 15. Final Preparation
Tools for Final Preparation
Suggested Plan for Final Review/Study
Summary
