Table of Contents

• Copyright and Disclaimer
• Introduction and “Guide to the Guide”
  • About the Authors
  • About the Book
  • Dedication
  • Acknowledgments
  • How To Read This Book
  • Icon Alerts
  • Security+ 2002 Exam Specifics
  • Introduction
  • Other Resources
• Chapter 0:  Read.Me
  • 0.0  Introduction to Security
  • 0.1  You’re saved….If
  • 0.2  Hacker vs. Cracker
  • 0.3  Security Tao
  • 0.4  Security Checklist
  • 0.5  Security Through Obscurity
  • 0.6  Resources
  • 0.7  SpyWare
  • 0.8  Summary
• Chapter 1:  General Security Concepts (Domain 1.0; 30%)
  • Getting Ready for Chapter 1 - Questions
  • Getting Ready for Chapter 1 - Answers
  • 1.0  General Security Concepts
  • 1.1  Access Control
    • 1.1.1  Mandatory Access Control (MAC)
    • 1.1.2  Discretionary Access Control (DAC)
    • 1.1.3  Role-Based Access Control (RBAC)
  • 1.2  Authentication
    • 1.2.1  Kerberos
    • 1.2.2  Challenge Handshake Authentication Protocol (CHAP)
    • 1.2.3  Certificates
    • 1.2.4  Username/Password
    • 1.2.5  Tokens
    • 1.2.6  Multi-Factor
    • 1.2.7  Mutual Authentication
    • 1.2.8  Biometrics
  • 1.3  Non-Essential Services and Protocols
  • Pop Quiz 1.1
  • 1.4  Attacks
    • 1.4.1  Denial of Service (DoS) / Distributed Denial of Service (DDoS)
      • Impact of DDos Attacks
      • An Early DDoS Attack
      • SYN Floods
      • What Can I Do to Prevent DDoS Attacks?
    • 1.4.2  Backdoors
      • What’s a Rootkit?
      • How Do Backdoors Get Onto a System?
      • How Do We Stop Back Doors?
    • 1.4.3  Spoofing
      • How TCP/IP Permits Spoofing
      • Problem #1: Spoofing Can Worsen a DoS Attack
      • Problem #2: An Attacker Can Pretend to Be From A Trusted Host
      • Types of Spoofing
      • How Can We Protect Our Network From Spoofing?
    • 1.4.4  Man in the Middle
    • 1.4.5  Replay
    • 1.4.6  TCP/IP Hijacking
    • 1.4.7  Weak Keys
    • 1.4.8  Mathematical
    • 1.4.9  Social Engineering
    • 1.4.10  Birthday
    • 1.4.11  Password Guessing
      • 1.4.11.1  Brute Force
      • 1.4.11.2  Dictionary
    • 1.4.12  Software Exploitation
      • Buffer Overflows
      • Naïve Web Applications
  • 1.5  Malicious Code
    • 1.5.1  Viruses
    • 1.5.2  Trojan Horses
    • 1.5.3  Logic Bombs
    • 1.5.4  Worms
  • 1.6  Social Engineering
  • Pop Quiz 1.2
  • 1.7  Auditing
    • Configuration and Log Analysis
    • System/Network Scanning
    • More on Scanning Tools
  • 1.8  Summary
  • 1.9  Success Questions
  • 1.10  Success Answers
• Chapter 2:  Communication Security (Domain 2.0; 20%)
  • Getting Ready for Chapter 2 - Questions
  • Getting Ready for Chapter 2 - Answers
  • 2.0  Communication Security
  • 2.1  Remote Access
    • 2.1.1  802.1X
    • 2.1.2  VPN
    • 2.1.3  RADIUS
    • 2.1.4  TACACS/XTACACS/TACACS+
    • 2.1.5  L2TP/PPTP
    • 2.1.6  SSH
    • 2.1.7  IPSEC
      • IPSec Packet Types
      • IPSec Transport and Tunnel Modes
      • IPSec and Encryption
      • IPSec versus DoS Attacks
      • IPSec Interoperability
    • 2.1.8  Vulnerabilities
  • 2.2  Email
    • 2.2.1  S/MIME
    • 2.2.2  PGP
    • 2.2.3  Vulnerabilities
      • Message Privacy
      • Header Privacy
      • Message Forgery
      • Password Security
      • Client-Side Issues
      • Implementation Flaws
      • 2.2.3.1  Spam
      • 2.2.3.2  Hoaxes
  • Pop Quiz 2.1
  • 2.3  The Web
    • 2.3.1  SSL/TLS (Secure Sockets Layer / Transport Layer Security)
      • Secure Sockets Layer (SSL)
      • Transport Layer Security (TLS)
    • 2.3.2  HTTP/S
    • 2.3.3  Instant Messaging
      • 2.3.3.1  Vulnerabilities
        • IM Message Privacy
        • Malicious Code
        • Unauthorized Use of Internet IM
        • Lack of User Authentication
        • Lack of Logging and Audit Trails
        • IM Software Flaws
      • 2.3.3.2  8.3 Naming Conventions
      • 2.3.3.3  Packet Sniffing
      • 2.3.3.4  Privacy
    • 2.3.4  Vulnerabilities
      • Logging and Privacy
      • Dependence on “Security Through Obscurity”
      • Web Pages that Show Up Everywhere
      • Web Software Flaws
      • 2.3.4.1  Java Script
    • 2.3.4.2  ActiveX
      • 2.3.4.3  Buffer Overflows
      • 2.3.4.4  Cookies
      • 2.3.4.5  Signed Applets
      • 2.3.4.6  CGI
      • 2.3.4.7  SMTP Relay
  • 2.4  Directory
    • 2.4.1  SSL/TLS
    • 2.4.2  LDAP
  • 2.5  File Transfer
    • 2.5.1  S/FTP
    • 2.5.2  Blind FTP/Anonymous
    • 2.5.3  File Sharing
    • 2.5.4  Vulnerabilities
      • 2.5.4.1  Packet Sniffing
  • 2.6  Wireless
    • 2.6.1  WTLS
    • 2.6.2  802.11x
    • 2.6.3  WEP/WAP
    • 2.6.4  Vulnerabilities
      • Interception and Antenna Placement
      • Shielding issues
      • Unauthorized Access
      • More 802.11b Lockdown Tips
      • 802.11a
      • 2.6.4.1  Site Surveys
  • 2.7  Summary
  • 2.8  Success Questions
  • 2.9  Success Answers
• Chapter 3:  Infrastructure Security (Domain 3.0; 20%)
  • Getting Ready for Chapter 3 - Questions
  • Getting Ready for Chapter 3 - Answers
  • 3.0  Infrastructure Security
  • 3.1  Devices
    • 3.1.1  Firewalls
      • Application-Level Firewalls
      • Network-Level Firewalls
      • Personal Firewalls
      • If We Buy It, Will It Protect Us?
    • 3.1.2  Routers
    • 3.1.3  Switches
    • 3.1.4  Wireless
    • 3.1.5  Modems
    • 3.1.6  RAS (Remote Access Server)
    • 3.1.7  Telecom / PBX (Private Branch Exchange)
    • 3.1.8 VPN (Virtual Private Network)
    • 3.1.9  IDS (Intrusion Detection System)
      • Where on the Network Should the IDS Go?
      • How Does an IDS Work?
      • Which One Should I Get?
      • Security Issues with IDS
    • 3.1.10  Network Monitoring / Diagnostics
      • Security Issues with Network Monitoring Tools
      • SNMP (Simple Network Management Protocol)
    • 3.1.11  Workstations
    • 3.1.12  Servers
    • 3.1.13  Mobile Devices
  • 3.2  Media
    • 3.2.1  Coax (Coaxial Cable)
    • 3.2.2  UTP (Unshielded Twisted Pair) / STP (Shielded Twisted Pair)
    • 3.2.3  Fiber
    • 3.2.4  Removable Media
      • 3.2.4.1  Tape
      • 3.2.4.2  CD-R (Compact Disc Recordable)
      • 3.2.4.3  Hard Drives
      • 3.2.4.4  Diskettes
      • 3.2.4.5  Flashcards
      • 3.2.4.6  Smartcards
  • 3.3  Security Topologies
    • 3.3.1  Security Zones
      • 3.3.1.1  DMZ (Demilitarized Zone)
      • 3.3.1.2  Intranet
      • 3.3.1.3  Extranet
    • 3.3.2  VLANs (Virtual LANs)
    • 3.3.3  NAT (Network Address Translation)
      • Types of NAT
      • Why Use NAT?
    • 3.3.4  Tunneling
  • Pop Quiz 3.1
  • 3.4  Intrusion Detection
    • 3.4.1  Network Based
      • 3.4.1.1  Active Detection
      • 3.4.1.2  Passive Detection
    • 3.4.2  Host Based
      • 3.4.2.1  Active Detection
      • 3.4.2.2  Passive Detection
    • 3.4.3  Honey Pots
    • 3.4.4  Incident Response
      • Role of IDS in Incident Response
      • Six-Step Incident Response Process
      • Reporting Incidents to Third Parties
  • 3.5  Security Baselines
    • 3.5.1  OS/NOS Hardening
      • Some Areas to Look At When Hardening an OS
      • 3.5.1.1  File System
      • 3.5.1.2  Updates
    • 3.5.2  Network Hardening
      • 3.5.2.1  Updates (Firmware)
      • 3.5.2.2  Configuration
        • 3.5.2.2.1  Enabling and Disabling Services and Protocols
        • 3.5.2.2.2  Access Control Lists
    • 3.5.3  Application Hardening
      • 3.5.3.1  Updates
      • 3.5.3.2  Web Servers
      • 3.5.3.3  Email Servers
      • 3.5.3.4  FTP Servers
      • 3.5.3.5  DNS Servers
      • 3.5.3.6  NNTP Servers
      • 3.5.3.7  File/Print Servers
      • 3.5.3.8  DHCP Servers
      • 3.5.3.9  Data Repositories
        • 3.5.3.9.1  Directory Services
        • 3.5.3.9.2  Databases
  • 3.6  Summary
  • 3.7  Success Questions
  • 3.8  Success Answers
• Chapter 4:  Basics of Cryptography (Domain 4.0; 15%)
  • Getting Ready for Chapter 4 - Questions
  • Getting Ready for Chapter 4 - Answers
  • 4.0  Basics of Cryptography
  • 4.1  Algorithms
    • 4.1.1  Hashing
      • Message Digest as a Message Fingerprint
      • Ensuring Even Distribution of Hash Values
    • 4.1.2  Symmetric
      • Types of Symmetric Algorithms
      • Security Issues with Symmetric Cryptography
    • 4.1.3  Asymmetric
      • Asymmetric Cryptography Algorithms
      • How is Asymmetric Cryptography Used?
  • 4.2  Concepts in Using Cryptography
    • 4.2.1  Confidentiality
    • 4.2.2  Integrity
      • 4.2.2.1  Digital Signatures
    • 4.2.3  Authentication
    • 4.2.4  Non-Repudiation
      • 4.2.4.1  Digital Signatures
    • 4.2.5  Access Control
  • 4.3  PKI (Public Key Infrastructure)
    • 4.3.1  Certificates
      • Certificate Authorities (CAs)
      • 4.3.1.1  Certificate Policies
      • 4.3.1.2  Certificate Practice Statements
    • 4.3.2  Revocation
    • 4.3.3  Trust Models
  • Pop Quiz 4.1
  • 4.4  Standards and Protocols
    • IEEE
    • ANSI
    • IETF
    • RSA
    • FIPS
  • 4.5  Key Management and Certificate Lifecycles
    • 4.5.1  Centralized vs. Decentralized
    • 4.5.2  Storage
      • 4.5.2.1  Hardware vs. Software
      • 4.5.2.2  Private Key Protection
    • 4.5.3  Escrow
    • 4.5.4  Expiration
    • 4.5.5  Revocation
      • Certificate Revocation Techniques
      • 4.5.5.1  Status Checking
    • 4.5.6 Suspension
      • 4.5.6.1  Status Checking
    • 4.5.7  Recovery
      • Who Can Perform Key Recovery?
      • 4.5.7.1  M of N Control
    • 4.5.8  Renewal
    • 4.5.9  Destruction
    • 4.5.10  Key Usage
      • 4.5.10.1  Multiple Key Pairs (Single, Dual)
  • 4.6  Summary
  • 4.7  Success Questions
  • 4.8  Success Answers
• Chapter 5:  Operational/Organizational Security (Domain 5.0; 15%)
  • Getting Ready for Chapter 5 - Questions
  • Getting Ready for Chapter 5 - Answers
  • 5.0  Operational/Organizational Security
  • 5.1  Physical Security
    • 5.1.1  Access Control
      • 5.1.1.1  Physical Barriers
      • 5.1.1.2  Biometrics
    • 5.1.2  Social Engineering
    • 5.1.3  Environment
      • 5.1.3.1  Wireless Cells
      • 5.1.3.2  Location
      • 5.1.3.3  Shielding
      • 5.1.3.4  Fire Suppression
  • 5.2  Disaster Recovery
    • 5.2.1  Backups
      • Methods to the Madness
      • Archive Bit
      • Types of Backups
      • Tape Rotation
      • 5.2.1.1  Off-Site Storage
    • 5.2.2  Secure Recovery
      • 5.2.2.1  Alternate Sites
    • 5.2.3  Disaster Recovery Plan
  • 5.3  Business Continuity
    • 5.3.1  Utilities
    • 5.3.2  High Availability / Fault Tolerance
    • 5.3.3  Backups
  • 5.4  Policy and Procedures
    • 5.4.1  Security Policy
      • 5.4.1.1  Acceptable Use
      • 5.4.1.2  Due Care
      • 5.4.1.3  Privacy
      • 5.4.1.4  Separation of Duties
      • 5.4.1.5  Need to Know
      • 5.4.1.6  Password Management
      • 5.4.1.7  SLAs (Service Level Agreements)
      • 5.4.1.8  Disposal / Destruction
      • 5.4.1.9  HR (Human Resources) Policy
        • 5.4.1.9.1  Termination
        • 5.4.1.9.2  Hiring
        • 5.4.1.9.3  Code of Ethics
    • 5.4.2  Incident Response Policy
  • Pop Quiz 5.1
  • 5.5  Privilege Management
    • 5.5.1  User / Group / Role Management
    • 5.5.2  Single Sign-on
    • 5.5.3  Centralized vs. Decentralized
    • 5.5.4  Auditing
    • 5.5.5  MAC/DAC/RBAC
  • 5.6  Computer Forensics
    • 5.6.1  Chain of Custody
    • 5.6.2  Preservation of Evidence
    • 5.6.3  Collection of evidence
  • 5.7  Risk Identification
    • 5.7.1  Asset Identification
    • 5.7.2  Risk Assessment
    • 5.7.3  Threat Identification
    • 5.7.4  Vulnerabilities
  • 5.8  Education
    • 5.8.1  Communication
    • 5.8.2  User Awareness
    • 5.8.3  Education
    • 5.8.4 Online Resources
  • 5.9  Documentation
    • 5.9.1  Standards and Guidelines
    • 5.9.2  Systems Architecture
    • 5.9.3  Change Documentation
    • 5.9.4  Logs and Inventories
    • 5.9.5  Classification
      • 5.9.5.1  Notification
    • 5.9.6  Retention/Storage
    • 5.9.7  Destruction
  • 5.10  Summary
  • 5.11  Success Questions
  • 5.12  Success Answers
• Chapter 6:  Practice Exam
  • Questions 1-5
  • Questions 6-10
  • Questions 11-15
  • Questions 16-20
  • Questions 21-25
  • Questions 26-30
  • Questions 31-35
  • Questions 36-40
  • Questions 41-45
  • Questions 46-50
  • Questions 51-55
  • Questions 56-60
  • Questions 61-65
  • Questions 66-70
  • Questions 71-75
  • Questions 76-80
  • Questions 81-85
  • Questions 86-90
  • Questions 91-95
  • Questions 96-100
• Chapter 7:  Practice Exam Answers
  • Answers to Questions 1-5
  • Answers to Questions 6-10
  • Answers to Questions 11-15
  • Answers to Questions 16-20
  • Answers to Questions 21-25
  • Answers to Questions 26-30
  • Answers to Questions 31-35
  • Answers to Questions 36-40
  • Answers to Questions 41-45
  • Answers to Questions 46-50
  • Answers to Questions 51-55
  • Answers to Questions 56-60
  • Answers to Questions 61-65
  • Answers to Questions 66-70
  • Answers to Questions 71-75
  • Answers to Questions 76-80
  • Answers to Questions 81-85
  • Answers to Questions 86-90
  • Answers to Questions 91-95
  • Answers to Questions 96-100
• Glossary
  • A
  • B
  • C
  • D
  • E
  • F-G
  • H
  • I
  • J-K-L
  • M
  • N-O
  • P-Q
  • R
  • S
  • T
  • U-V
  • W
  • X-Y-Z