CASP+ CompTIA Advanced Security Practitioner Study Guide

Comprehensive coverage of the new CASP+ exam, with hands-on practice and interactive study tools

TheCASP+ CompTIA Advanced Security Practitioner Study Guide: Exam CAS-003, Third Edition,offers invaluable preparation for exam CAS-003. Covering 100 percent of the exam objectives, this book provides expert walk-through of essential security concepts and processes to help you tackle this challenging exam with full confidence. Practical examples and real-world insights illustrate critical topics and show what essential practices look like on the ground, while detailed explanations of technical and business concepts give you the background you need to apply identify and implement appropriate security solutions. End-of-chapter reviews help solidify your understanding of each objective, and cutting-edge exam prep software features electronic flashcards, hands-on lab exercises, and hundreds of practice questions to help you test your knowledge in advance of the exam.

The next few years will bring a 45-fold increase in digital data, and at least one third of that data will pass through the cloud. The level of risk to data everywhere is growing in parallel, and organizations are in need of qualified data security professionals; the CASP+ certification validates this in-demand skill set, and this book is your ideal resource for passing the exam.

• Master cryptography, controls, vulnerability analysis, and network security
• Identify risks and execute mitigation planning, strategies, and controls
• Analyze security trends and their impact on your organization
• Integrate business and technical components to achieve a secure enterprise architecture

CASP+ meets the ISO 17024 standard, and is approved by U.S. Department of Defense to fulfill Directive 8570.01-M requirements. It is also compliant with government regulations under the Federal Information Security Management Act (FISMA). As such, this career-building credential makes you in demand in the marketplace and shows that you are qualified to address enterprise-level security concerns. TheCASP+ CompTIA Advanced Security Practitioner Study Guide: Exam CAS-003, Third Edition,is the preparation resource you need to take the next big step for your career and pass with flying colors.

JEFF T. PARKER, CISSP, CompTIA Project+, CySA+, is a certified technical trainer and consultant specializing in governance, risk management and compliance. Jeff's infosec roots began as a security engineer, a member of a HP consulting group in Boston, USA. Prior to becoming an author, Jeff was a Global IT Risk Manager residing for several years in Prague, Czech Republic, where he rolled out a new risk management strategy for a multinational logistics firm.

MICHAEL GREGG, CISSP, CISA, A+, Network+, is the COO of Superior Solutions, a Houston- based IT security consulting firm. His organization performs security assessments and penetration testing for Fortune 1000 firms. He has more than 20 years'

Introduction xxvii

Assessment Test lxi

Chapter 1 Cryptographic Tools and Techniques 1

Chapter 2 Comprehensive Security Solutions 47

Chapter 3 Securing Virtualized, Distributed, and Shared Computing 97

Chapter 4 Host Security 143

Chapter 5 Application Security and Penetration Testing 195

Chapter 6 Risk Management 265

Chapter 7 Policies, Procedures, and Incident Response 313

Chapter 8 Security Research and Analysis 357

Chapter 9 Enterprise Security Integration 413

Chapter 10 Security Controls for Communication and Collaboration 459

Appendix A Answers to Review Questions 519

Appendix B CASP+ Lab Manual 533

Index 591