CC Certified in Cybersecurity Cert Guide

Mari Galloway, a best-selling author of Securing Our Future and cyber professional, is the CEO and a founding board member for the Women’s Society of Cyberjutsu (WSC), one of the fastest growing 501(c)3 nonprofit cybersecurity communities dedicated to bringing more women and girls to cyber. WSC provides its members with the resources and support required to enter and advance as cybersecurity professionals.Mari began her career with Accenture, where she excelled as a network engineer. Mari is also a 2023 Presidential Lifetime Award winner and the inaugural ISC2 Diversity Award winner for 2019. With over 15 years in IT and cybersecurity, her experience spans network design, security architecture, risk assessments, vulnerability management, incident response, and policy development across government and commercial industries.Mari holds a variety of technical and management certifications (CISSP, GIAC, CCNA, etc.) as well as a Bachelor of Business Administration in Computer Information Systems from Columbus State University and a Master of Science in Information Systems from Strayer University.Mari is currently a resident of Las Vegas and is the CEO of a cybersecurity consulting company. She regularly contributes content to security blogs and training companies across the country as well as an adjunct professor for the University of Maryland Global Campus (UMGC). She also lends her time to various organizations as an award judge, mentor, and advisor. Outside of being a geek, Mari enjoys arts, puzzles, and Lego!Amena Jamali is a person with multiple facets. With her rational mind, she is a cybersecurity auditor and an aspiring scholar in the field of disinformation research and cyber psychology. With her creative mind, she is an epic fantasy author with four books published so far in the The Lord of Freedom series and many more coming. Her pursuit of truth has been shaped by an eclectic mixture of education: a Bachelor of Arts in Politics and a Master of Science in Cybersecurity from the University of Dallas, which is located in her home state of Texas. In various forums, she speaks and writes about political philosophy, information ethics, governance, risk, compliance, and data privacy, and she is equally passionate about diversity, equity, and inclusion and about the representation of powerful women in literature. A firm believer in the supportive power of community, Amena is an active member of and leader in the Women’s Society of Cyberjutsu and has in 2023 won that organization’s Cyber Rising Star Award. When she is not working, writing, or theorizing, she reads, learns languages, watches superhero movies, embroiders, and bakes delicious pies.

• Introduction xviiiChapter 1 Cybersecurity Principles 3“Do I Know This Already?” Quiz 3Foundation Topics 6Information Assurance 6The CIA Triad 7Confidentiality 7Integrity 8Availability 8Privacy 9ISC2 Code of Ethics 9Exam Preparation Tasks 10Review All Key Topics 10Define Key Terms 11Q&A 11References 11Chapter 2 Risk Management 13“Do I Know This Already” Quiz 13Foundation Topics 18Risk Management 18Risks, Threats, and Vulnerabilities 18The Scope of Risk Management 21The Risk Management Process 22Risk Identification 23Risk Assessment 24Risk Treatment 26Security Controls and Governance 28Exam Preparation Tasks 30Review All Key Topics 30Define Key Terms 31Q&A 31References 31Chapter 3 Threats to Security 33“Do I Know This Already?” Quiz 33Foundation Topics 38Threats to Security 38Common Threat Categories 39Malware 39Viruses 39Worms 40Trojans 41Ransomware 41Advanced Persistent Threats 43Network Attacks 43Distributed Denial-of-Service Attack 43Man-in-the-Middle Attack 44Side-Channel Attack 44Detection and Mitigation Techniques 44Detection Tools 45Scanning and Penetration Testing 48Exam Preparation Tasks 48Review All Key Topics 48Define Key Terms 49Q&A 49References 50Chapter 4 Physical Access Controls 53“Do I Know This Already?” Quiz 53Foundation Topics 56Physical Security Controls 56Badge Systems 56Gates for Physical Protection 59Types of Gate Entry Systems 59Access Control 62Environmental Design 62Monitoring for Physical Security 63Security Guards 63Closed-Circuit Television 64Alarm Systems 65Logs and Documentation 65Authorized Versus Unauthorized Personnel 66Exam Preparation Tasks 66Review All Key Topics 66Define Key Terms 67Q&A 67References 67Chapter 5 Logical Access Controls 71“Do I Know This Already?” Quiz 71Foundation Topics 74Need to Know and Least Privilege 74Segregation of Duties 75Security Models 76Discretionary Access Control 76Mandatory Access Control 77Role-Based Access Control 79IAM and Automation 81Exam Preparation Tasks 81Review All Key Topics 81Define Key Terms 82Q&A 82References 82Chapter 6 Computer Networking Fundamentals 85“Do I Know This Already” Quiz 85Foundation Topics 89Understanding Computer Networking 89Ports and Protocols 93OSI Model 94Application Layer (Layer 7) 95Presentation Layer (Layer 6) 96Session Layer (Layer 5) 96Transport Layer (Layer 4) 97Network Layer (Layer 3) 98Internet Protocol 98Data Link Layer (Layer 2) 102Protocols 103Wireless 104Physical Layer (Layer 1) 106TCP/IP Model 106Exam Preparation Tasks 107Review All Key Topics 107Define Key Terms 108Q&A 108References 109Chapter 7 Network Security Infrastructure 111“Do I Know This Already” Quiz 111Foundation Topics 115On-Premises Network Security Infrastructure 115Environmental Controls 115Fire Suppression Systems 116Redundancy and High Availability 117Memorandum of Understanding and Memorandum of Agreement 117Designing Secure Networks 118Demilitarized Zones 121Virtual Local Area Networks 121Virtual Private Networks 122Network Access Control 123Embedded Systems 124Cloud Network Security Infrastructure 125Cloud Deployment Models 125Public 125Private 126Community 127Hybrid 128Cloud Service Models 129Infrastructure as a Service 130Platform as a Service 130Software as a Service 131Service-Level Agreement 132Managed Service Provider 133Cloud Challenges 134Exam Preparation Tasks 135Review All Key Topics 135Define Key Terms 135Q&A 136References 136Chapter 8 Data and the System 139“Do I Know This Already?” Quiz 139Foundation Topics 143Data Security 143Encryption 143Hashing 144Non-Repudiation 145Authentication 146One-Time Passwords 147Password Policy 147Data Handling 149Data Classification 149Data Labeling 150Data Retention 151Data Destruction 152Data Handling Policy 153Exam Preparation Tasks 153Review All Key Topics 153Define Key Terms 154Q&A 154References 154Chapter 9 Security in the Life 157“Do I Know This Already?” Quiz 158Foundation Topics 162System Hardening 162Baselines 162Patch Management 164Vulnerability Management 165System Updates and Upgrades 165Logging and Monitoring 166Security Policies 167Acceptable Use Policy 167Bring Your Own Device Policy 167Change Management Policy 168Privacy Policy 169Security Awareness Training 170Social Engineering 170Password Protection 171Exam Preparation Tasks 172Review All Key Topics 172Define Key Terms 172Q&A 172Reference 173Chapter 10 Security in Emergencies 175“Do I Know This Already?” Quiz 176Foundation Topics 180Incident Response 180Detection 181Classification 181Containment 182Response 183Recovery 183Reflection 183Testing 183Business Continuity 184Business Impact Analysis 184Testing 185Backup and Recovery 185Disaster Recovery 188Recovery Time Objective 189Recovery Point Objective 189Maximum Tolerable Downtime 190Replication, Hot Sites, Warm Sites, and Cold Sites 190Failover Testing 191Governance Processes 191Policies 193Standards 193Procedures 193Guidelines 194Regulations and Laws 194Exam Preparation Tasks 195Review All Key Topics 195Define Key Terms 196Q&A 196References 197Chapter 11 Tying It All Together 199Security as a Whole 199Defense-in-Depth 199The Castle Analogy 200The Whole of Information Assurance 202Summary 202Chapter 12 After the Certification 205Take a Breather and Reflect 205Update Your Professional Profiles 205Showcase Your Passion and Knowledge 205Seek Mentorship and Sponsorship 206Stay Informed About Emerging Threats and Technologies 206Contribute to the Community Through Thought Leadership 206Explore Further Education Opportunities 207Evaluate Career Progress and Set New Goals 207Summary 207Chapter 13 Final Preparation 209Suggested Plan for Final Review and Study 209Summary 210Appendix A Answers to the “Do I Know This Already?” Quizzes and Q&A 211Appendix B CC Certified in Cybersecurity Cert Guide Exam Updates 223Glossary of Key Terms 225Online Elements:Glossary of Key TermsAppendix A Answers to the “Do I Know This Already?” Quizzes and Q&AAppendix B CC Certified in Cybersecurity Cert Guide Exam UpdatesAppendix C Study Planner 9780138200381 TOC 5/21/2024