Security__Notes.pdf - Intellectual Point – Security + Notes...

Intellectual Point – Security + Notes
Security + sy0 601
• 90 minutes
• Combination of PBQ and MCQ
o PBQ – Performance based questions (Simulations)
o MCQ – Multiple Choice Questions
• Simulations weighted heavily (about 350 Points)
• Total of 85 questions (approx.). 5 simulations, 80 multiple choices.
• Total time -> 90 Min
• About 1 min per question
• Have good time management.
• SOC – Security Operations Center
• Soc Analyst
• Passing Score – 750/900
• Cert valid for 3 years. Every 3 years you need 50 Continuing Education (CE) credits.
• CompTIA Security+ is vendor neutral.
3/12/2022
Day 1, Morning Training
• Confidentiality - making sure any unauthorized person should not be able to access or view the
data.
• PII – Personally Identifiable Information
• MFA – multi factor authentication
• Encryption, Strong Access Control, MFA, Strong Passwords, physical security, shredding.
• There is a lack of basic cyber hygiene.
• Integrity of the data = means any unauthorized person should not be able to change/alter the
data.
• Hashing allows you to maintain integrity.
o The dog is brown.
▪ MD5 Hash - e3c5b52e58182dfff6e7e2364e84c44c
o The dog is yellow.
▪ MD5 Hash -
6391db89007a17e75e6a55ab3e784b24

Hashes are different, meaning the original password/phrase has changed and the
data integrity is compromised.
• Hash is a unique representation of a value, message, file, or data.
• Passwords in your system are always hashed.
• Evidence is stored in the form of logs.
o Logs don’t lie.
• CIA Triad
o Confidentiality, Integrity, Availability.
• SIEM tool – Security Information and Event Management – collects the logs, indexes them,
correlates and allows you to search on those logs and get alerts. SPLUNK
• Non – repudiation – proof of origin. Cannot deny having done something.
• Understanding Core Security Goals
o Confidentiality
▪ Encryption
▪ Access controls
▪ Steganography – Data hidden in pictures (Osama bin Laden used this).
o Integrity
o Availability
▪ Redundancy
▪ Fault Tolerance
▪ Updating/Patching
• Confidentiality controls
o Least privilege
▪ Give users only the permission they need to preform there duties.
o Need to know
o Separation of duties
• Integrity Controls
o Hashing
o Digital signatures
o Backups
o Version controls
• Availability controls
o Redundance
▪ Multiple or backup systems designed for immediate or quick recovery
o Fault tolerance
▪ Systems that continue to function after components fail.
o Patch management
▪ Application of software updates with minimal service disruption.
• Air Gap – not physically connected to any network.
• Research Log4J – vulnerability out this year (Level 10 of scale 1-10).
• Information Security Roles and Responsibility
o Overall responsibility
▪ Chief Security Officer (CSO)

▪ Chief Information Security Officer (CISO) – Top role in Cybersecurity.
o Managerial
o Technical
▪ Information Systems Security Officer (ISSO)
o Non-technical
o Due care/liability
• Information Security Business Units
• How do you ingest and bring in threat intelligence data to look for indicators of compromise
(IOC) to be able to prevent various of threats – use TAXII
o TAXII, Trusted automated exchange of indicator information
o STIX, Structured threat information exchange
• Hypervisor, software that allows you to create and mange virtual machines.