The CASP+ CompTIA Advanced Security Practitioner Study Guide: Exam CAS-003, Third Edition, offers invaluable preparation for exam CAS-003. Covering 100 percent of the exam objectives, this book provides expert walk-through of essential security concepts and processes to help you tackle this challenging exam with full confidence. Practical examples and real-world insights illustrate critical topics and show what essential practices look like on the ground, while detailed explanations of technical and business concepts give you the background you need to apply identify and implement appropriate security solutions. End-of-chapter reviews help solidify your understanding of each objective, and cutting-edge exam prep software features electronic flashcards, hands-on lab exercises, and hundreds of practice questions to help you test your knowledge in advance of the exam.

The next few years will bring a 45-fold increase in digital data, and at least one third of that data will pass through the cloud. The level of risk to data everywhere is growing in parallel, and organizations are in need of qualified data security professionals; the CASP+ certification validates this in-demand skill set, and this book is your ideal resource for passing the exam.

Master cryptography, controls, vulnerability analysis, and network security
Identify risks and execute mitigation planning, strategies, and controls
Analyze security trends and their impact on your organization
Integrate business and technical components to achieve a secure enterprise architecture

CASP+ meets the ISO 17024 standard, and is approved by U.S. Department of Defense to fulfill Directive 8570.01-M requirements. It is also compliant with government regulations under the Federal Information Security Management Act (FISMA). As such, this career-building credential makes you in demand in the marketplace and shows that you are qualified to address enterprise-level security concerns. The CASP+ CompTIA Advanced Security Practitioner Study Guide: Exam CAS-003, Third Edition, is the preparation resource you need to take the next big step for your career and pass with flying colors.

Autorentext

JEFF T. PARKER, CISSP, CompTIA Project+, CySA+, is a certified technical trainer and consultant specializing in governance, risk management and compliance. Jeff's infosec roots began as a security engineer, a member of a HP consulting group in Boston, USA. Prior to becoming an author, Jeff was a Global IT Risk Manager residing for several years in Prague, Czech Republic, where he rolled out a new risk management strategy for a multinational logistics firm. MICHAEL GREGG, CISSP, CISA, A+, Network+, is the COO of Superior Solutions, a Houston- based IT security consulting firm. His organization performs security assessments and penetration testing for Fortune 1000 firms. He has more than 20 years'

Klappentext
The Updated CAS-003 Edition of the Best-Selling Study Guide For CompTIA's CASP+ Certification The CASP+ CompTIA Advanced Security Practitioner Study Guide, 3rd Edition, covers all CASP+ exam objectives with clear, concise, thorough information on crucial security topics. Updated for the 2018 CAS-003 test update, this Sybex Study Guide is full of practical examples and insights drawn from real-world experience to help you succeed. You'll prepare for the exam smarter and faster with Sybex, thanks to superior content, including practice tests, a CASP+ Lab manual, and exam essentials. Reinforce what you have learned with the exclusive Sybex online learning environment and test bank, assessable across multiple devices. Get prepared for the CASP+ exam with Sybex. Coverage of 100% of all exam objectives in this Study Guide means you'll be ready for:

Cryptographic Solutions and Attacks
Advanced Network Design
Securing Complex Virtual Environments
Incident Response Practices
Security Policies and Procedures
Analysis of Security Gaps
Supporting Enterprise Communication
Recent and Upcoming Research Trends ABOUT THE CASP+ PROGRAM The vendor-neutral CompTIA CASP+ certification is the ideal credential for advanced level IT security professionals with the technical knowledge and skills required to conceptualize, design, and engineer secure solutions across complex enterprise environments. For more information visit www.comptia.org.

Inhalt
Introduction xxvii

Assessment Test lxi

Chapter 1 Cryptographic Tools and Techniques 1

Chapter 2 Comprehensive Security Solutions 47

Chapter 3 Securing Virtualized, Distributed, and Shared Computing 97

Chapter 4 Host Security 143

Chapter 5 Application Security and Penetration Testing 195

Chapter 6 Risk Management 265

Chapter 7 Policies, Procedures, and Incident Response 313

Chapter 8 Security Research and Analysis 357

Chapter 9 Enterprise Security Integration 413

Chapter 10 Security Controls for Communication and Collaboration 459