上海甫崎信息安全技術(shù)專(zhuān)家Security+認(rèn)證培訓(xùn)課程

考試相關(guān)

CompTIA Security+ 已獲得 ISO 17024 國(guó)際標(biāo)準(zhǔn)認(rèn)證（人員認(rèn)證認(rèn)可），并因此相應(yīng)地定期審查和更新考試大綱。下表所列的是本版考試的范圍，這是根據(jù)專(zhuān)家主題研討的結(jié)論以及對(duì)擁有兩年工作經(jīng)驗(yàn)的具備相關(guān)信息安全專(zhuān)業(yè)知識(shí)和技能的企業(yè)人員的調(diào)查而修訂的。

本考試大綱包含各領(lǐng)域所占的百分比、測(cè)試目標(biāo)和示例內(nèi)容。這里給出了主題和概念作為示例用以明確考試目標(biāo)，但其不應(yīng)該被誤讀為是考試全部?jī)?nèi)容的完整列表。

注意事項(xiàng)

以下并未列出每個(gè)考綱的所有項(xiàng)目。雖然它們沒(méi)有包含在此文檔中，考試中也可能包含與每個(gè)目標(biāo)相關(guān)的技術(shù)、過(guò)程或任務(wù)的其他示例

Security+考試語(yǔ)言

目前為英文 

考試形式

Pearson VUE 考試中心機(jī)考

課程大綱

內(nèi)容

1.0 Network Security             網(wǎng)絡(luò)安全

Implement security configuration parameters on network devices and other technologies. 網(wǎng)絡(luò)設(shè)備和其他設(shè)備上實(shí)施安全配置參數(shù)

given a scenario,use secure network a dministration principles. 給定一個(gè)場(chǎng)景，應(yīng)用安全網(wǎng)絡(luò)管理原則

Explaain network design elements and components.  解釋網(wǎng)絡(luò)設(shè)計(jì)的元素和組件。

Given a scenario, implement common protocols and services. 給定一個(gè)場(chǎng)景，實(shí)施通用的和服務(wù)

Given a scenario,troubleshoot security issues related to wireless networking.  給定一個(gè)場(chǎng)景，對(duì)無(wú)線組網(wǎng)中的安全問(wèn)題進(jìn)行故障排

2.0 Compliance and      Operational Security                       合規(guī)與運(yùn)維安全

Explain the importance of risk related concepts.解釋風(fēng)險(xiǎn)相關(guān)概念的重要性

Summarize the security implications of integrating systems and data with third parties.總結(jié)與第三方集成系統(tǒng)與數(shù)據(jù)的安全含義

Given a scenario,implement appropriate risk mitigation strategies.     給定一個(gè)場(chǎng)景，實(shí)施正確的風(fēng)險(xiǎn)降低策略

Given a scenario,implement basic forensic procedures.給定一個(gè)場(chǎng)景，實(shí)施基本的取證程序

Summarize common incident response procedures. 總結(jié)通用的事件響應(yīng)程序

Explain the importance of security related awareness and training.      解釋安全相關(guān)意識(shí)和培訓(xùn)的重要性

Compare and contrast physical secuity and environmental controls.     比較和對(duì)比物理安全環(huán)境控制

Summarize risk management best practices.  總結(jié)風(fēng)險(xiǎn)管理的實(shí)踐

Given a scenario,select the appropriate control to meet the goals of security.  給定一個(gè)場(chǎng)景，選擇合適的控制來(lái)滿(mǎn)足安全目標(biāo)

3.0 Threats and          Vulnerabilities                 威脅與漏洞

Explain types of malware.解釋各種惡意軟件

Summarize various types of attacks.總結(jié)不同類(lèi)型的攻擊

Summarize social engineering attacks and the associated effectiveness with each attack.   總結(jié)社會(huì)工程攻擊和相關(guān)每個(gè)攻擊的有效性

Explain types of wireless attacks. 解釋無(wú)線攻擊的類(lèi)型

Explain types of application attacks.解釋?xiě)?yīng)用攻擊的類(lèi)型

Analyze a scenario and select the appropriate type of mitigation and deterrent techniques.

Given a scenario,use appropriate tools and techniques to discover security threats and vulnerabilities.

Explain the proper use of penetration testing versus vulnerability scanning.   解釋如何正確使用滲透測(cè)試與漏洞掃描

4.0 Application,Data and      Host Security                  應(yīng)用、數(shù)據(jù)和主機(jī)安全

Explain the importance of application security controls and techniques.解釋?xiě)?yīng)用安全控制盒技術(shù)的重要性

Summarize mobile security concepts and technologies.總結(jié)移動(dòng)安全的概念與技術(shù)

Given a scenario,select the appropriate solution to establish host security.給定一個(gè)場(chǎng)景，選擇合適的方案來(lái)建立主機(jī)安全

Implement the appropriate controls to ensure data security.實(shí)施合適的控制來(lái)保障數(shù)據(jù)安全

Compare and contrast alternative methods to mitigate secuity risks in static environments.

5.0 Access Control and           Identity Management            訪問(wèn)控制與身份管理

Compare and contrast the function and purpose of authentication services.比較和對(duì)比認(rèn)證服務(wù)的功能和目標(biāo)

Given a scenario,select the appropriate authentication,authorization or access control.

Install and configure security controls when pertorming account management,based on best practices.

6.0 Cryptgraphy                 密碼學(xué)

Given a scenario,utilize general cryptography concepts. 給定一個(gè)場(chǎng)景，使用通用密碼學(xué)概念

Given a scenario,use appropriate cryptographic methods.給定一個(gè)場(chǎng)景，使用合適的密碼學(xué)方法

Given a scenario,use appropriate PKI,certificate management and associated components.