Cisco Certified Support Technician (CCST) Cybersecurity 100-160 Official Cert Guide

Shane Sexton has spent years learning and teaching all things IT. He holds CCNP Security, CND, CySA+, CCNA CyberOps, and numerous other certifications and has prepared thousands of students to take these exams. Shane earned bachelor’s degrees in technology management and liberal studies (and wishes he’d taken fewer philosophy classes). He currently works as a network and system administrator at an MSP, where every day brings new learning opportunities. When he’s not tackling IT emergencies, Shane practices piano, reads anything nonfiction, and expertly avoids family members with printer issues. He currently resides in Phoenix, Arizona, with three cats who have no respect for his property or the rule of law.Raymond Lacoste has dedicated his career to developing the skills of those interested in IT. In 2001, he began to mentor hundreds of IT professionals pursuing their Cisco certification dreams. This role led to teaching Cisco courses full time. Raymond is currently a master instructor for Cisco Enterprise Routing and Switching, AWS, ITIL, and Cybersecurity at Stormwind Studios. Raymond treats all technologies as an escape room, working to uncover every mystery in the protocols he works with. Along this journey, Raymond has passed more than 120 exams, and his office wall includes certificates from Microsoft, Cisco, ISC2, ITIL, AWS, and CompTIA. If you were visualizing Raymond’s office, you’d probably expect the usual network equipment, certifications, and awards. Those certainly take up space, but they aren’t his pride and joy. Most impressive, at least to Raymond, is his gemstone and mineral collection; once he starts talking about it, he just can’t stop. Who doesn’t get excited by a wondrous barite specimen in a pyrite matrix? Raymond presently resides with his wife and two children in eastern Canada, where they experience many adventures together.

• Introduction xxvPart I Introduction to CybersecurityChapter 1 Security Principles 2“Do I Know This Already?” Quiz 2Foundation Topics 4The CIA Triad 4Common Security Terms 5Types of Attackers and Their Reasons for Attacks 7Code of Ethics 9Summary 10Exam Preparation Tasks 11Review All Key Topics 12Define Key Terms 12Complete Tables and Lists from Memory 12Review Questions 12Chapter 2 Common Threats, Attacks, and Vulnerabilities 14“Do I Know This Already?” Quiz 15Foundation Topics 16Malware Variants 16IoT Vulnerabilities 19Distributed Denial of Service 19On-Path Attacks 21Insider Threats 23Social Engineering Tactics 25Phishing 26Spear Phishing 26Whaling 26Vishing 26Smishing 27Piggybacking/Tailgating 27Malvertising 27Physical Attacks 27Advanced Persistent Threats (APTs) 28Summary 29Exam Preparation Tasks 31Review All Key Topics 31Define Key Terms 31Complete Tables and Lists from Memory 32Review Questions 32Chapter 3 Access Management 34“Do I Know This Already?” Quiz 34Foundation Topics 36Introduction to AAA 36Authentication 36Multifactor Authentication (MFA) 37Passwords and Password Policies 39Authorization 41Accounting 41RADIUS 42Summary 44Exam Preparation Tasks 45Review All Key Topics 45Define Key Terms 45Complete Tables and Lists from Memory 46Review Questions 46Chapter 4 Cryptography 48“Do I Know This Already?” Quiz 49Foundation Topics 51Cryptography Overview 51Encryption and Decryption 51States of Data 52Symmetric Cryptography 52Asymmetric Cryptography 53Confidentiality with Asymmetric Cryptography 53Authentication with Asymmetric Cryptography 54Combining Confidentiality and Authentication with Asymmetric Cryptography 54Using Symmetric and Asymmetric Cryptography 55Types of Ciphers 56Symmetric Ciphers 56Types of Asymmetric Algorithms 57Certificates and PKI 58SCEP 62Digital Certificates 62Lifetime of a Digital Certificate 63PKI Infrastructure 65Hashing 66Shared Secret Keys and Salting with Hashing 68Cryptography in the Real World 69Web Browsing 69VPNs 70Remote Management 70Cisco Next-Generation Cryptography 70Summary 71Exam Preparation Tasks 72Review All Key Topics 72Complete Tables and Lists from Memory 73Define Key Terms 73Review Questions 73Part II Network SecurityChapter 5 Introduction to Networking, Addressing, and TCP/IP Protocols 76“Do I Know This Already?” Quiz 76Foundation Topics 78The TCP/IP Stack 78Common TCP/IP Protocols and Their Vulnerabilities 81Transmission Control Protocol (TCP) 81User Datagram Protocol (UDP) 81Internet Protocol Version 4 (IPv4) 82Internet Protocol Version 6 (IPv6) 83Media Access Control (MAC) 83Address Resolution Protocol (ARP) 84Hypertext Transfer Protocol (HTTP) 84Internet Control Message Protocol (ICMP) 85Dynamic Host Configuration Protocol (DHCP) 85Domain Name System (DNS) 86File Transfer Protocol (FTP) 86Telnet 87Secure Shell (SSH) 87Network Addressing and Its Impact on Security 88IPv4 and IPv6 88CIDR Notation 89Network Segmentation 89Public Versus Private Networks 90NAT 92MAC Addressing 94Summary 94Exam Preparation Tasks 97Review All Key Topics 97Complete Tables and Lists from Memory 98Define Key Terms 98Review Questions 98Chapter 6 Network Infrastructure 100“Do I Know This Already?” Quiz 101Foundation Topics 102The Network Security Architecture 102Screened Subnets, Virtualization, and the Cloud 103Screened Subnet (DMZ) 103Virtualization 105Cloud 106Proxy Servers 107Forward Proxy 108Reverse Proxy 109Cisco WSA 111Honeypots 112Intrusion Detection/Prevention Systems 113Intrusion Detection Systems (IDSs) 113Intrusion Prevention Systems (IPSs) 113Network-Based and Host-Based IDSs/IPSs 113Signature-Based and Behavioral-Based Detection 113Summary 114Exam Preparation Tasks 115Review All Key Topics 115Complete Tables and Lists from Memory 116Define Key Terms 116Review Questions 116Chapter 7 Controlling Network Access 118“Do I Know This Already?” Quiz 118Foundation Topics 120Virtual Private Networks 120Site-to-Site 121Remote-Access 122IPsec 124Firewalls 125NGFW 127Cisco Firepower Next-Generation Firewall (NGFW) 128Access Control Lists 129Key Aspects and Uses of Access Control Lists 129ACL Entries 130Standard and Extended ACLs 132Standard ACL 132Extended ACL 133ACL Evaluation 133Network Access Control 134Summary 137Exam Preparation Tasks 138Review All Key Topics 138Complete Tables and Lists from Memory 139Define Key Terms 139Review Questions 139Chapter 8 Wireless SOHO Security 142“Do I Know This Already?” Quiz 143Foundation Topics 144Hardening Wireless Routers and Access Points 144Administrative Interface 144Updates 145Wireless Encryption Standards 146WEP 146WPA 146WPA2 146WPA3 147Wireless Authentication 148Personal Mode 148Enterprise Mode 149WPA3 Enhanced Open 150Wi-Fi Protected Setup, SSIDs, and MAC Address Filtering 150Wi-Fi Protected Setup 151SSID 151MAC Address Filtering 152Common Wireless Network Threats and Attacks 152Rogue Access Points and Evil Twins 152War Driving 154Wireless Password Cracking 154Protecting Yourself from Wireless Attacks 155Summary 155Exam Preparation Tasks 157Review All Key Topics 157Complete Tables and Lists from Memory 158Define Key Terms 158Review Questions 158Part III Endpoint SecurityChapter 9 Operating Systems and Tools 160“Do I Know This Already?” Quiz 160Foundation Topics 163Host Security Features 163Windows 164Microsoft Defender 165Virus & Threat Protection 165Firewall & Network Protection 166App & Browser Control 167CMD and PowerShell 169NTFS Permissions 170BitLocker 172Windows Updates 173Event Viewer and Audit Logs 173Linux 175firewalld and UFW 175Bash 176Linux Permissions 178SELinux and AppArmor 179SELinux 179AppArmor 180dm-crypt and LUKS 180Updates: yum, dnf, and apt 180Linux Logs 181macOS 183Firewall 183Zsh 184APFS Permissions 184FileVault 185Updates 185macOS Logs: Console 186Tools 186netstat and ss 186nslookup and dig 187nslookup 187dig 188tcpdump and Wireshark 188tcpdump 188Wireshark 189syslog 190Summary 191Exam Preparation Tasks 192Review All Key Topics 192Complete Tables and Lists from Memory 192Define Key Terms 193Review Questions 193Chapter 10 Endpoint Policies and Standards 196“Do I Know This Already?” Quiz 196Foundation Topics 198Asset Management 198Program Deployment 199Backups 199Local and Remote Backups 200Full, Differential, and Incremental Backups 200Bring Your Own Device (BYOD) 201Pros and Cons of BYOD 202Device and Configuration Management 202Data Encryption 204App Distribution 205Regulatory Compliance 205PCI-DSS 205HIPAA 206GDPR 206Summary 207Exam Preparation Tasks 207Review All Key Topics 207Complete Tables and Lists from Memory 208Define Key Terms 208Review Questions 208Chapter 11 Network and Endpoint Malware Detection and Remediation 210“Do I Know This Already?” Quiz 210Foundation Topics 211Monitoring and Detection 211Signature Types 212Scanning Systems 214Cisco AMP 215Reviewing Logs 216Malware Remediation Best Practices 218Summary 218Exam Preparation Tasks 220Review All Key Topics 220Complete Tables and Lists from Memory 220Define Key Terms 220Review Questions 221Chapter 12 Risk and Vulnerability Management 222“Do I Know This Already?” Quiz 222Foundation Topics 223The Vocabulary of Risk 223Vulnerabilities 224The Vulnerability Management Lifecycle 225Active and Passive Scanning 228Port Scanning 229Risk 229Risk Prioritization 230Risk Ranks and Levels 230Data Types and Classification 231Security Assessments 233Risk Management 234Risk Management Strategies 234Summary 237Exam Preparation Tasks 238Review All Key Topics 238Complete Tables and Lists from Memory 238Define Key Terms 238Review Questions 238Chapter 13 Threat Intelligence 240“Do I Know This Already?” Quiz 240Foundation Topics 242Threat Intelligence 242Vulnerabilities Databases and Feeds 242Pros and Cons of Vulnerability Databases 243CVE and CVSS 244Vulnerability Scanning and Assessment Tools 245Additional Sources of Threat Intelligence 245Reports and News 245Reports 246News 247Collective, Ad Hoc, and Automated Intelligence 247STIX and TAXII 248STIX 248TAXII 250How and Why to Proactively Share Threat Intelligence 250Summary 251Exam Preparation Tasks 252Review All Key Topics 252Complete Tables and Lists from Memory 252Define Key Terms 252Review Questions 253Chapter 14 Disaster Recovery and Business Continuity 254“Do I Know This Already?” Quiz 254Foundation Topics 256Disaster Recovery Plans 256Disasters 256Disaster Recovery Controls 258Backups 259Business Impact Analyses (BIAs) 261Recovery Time Objectives 262Recovery Point Objectives 262Business Continuity Plans 262Disaster Recovery Versus Business Continuity 263Summary 264Exam Preparation Tasks 265Review All Key Topics 265Complete Tables and Lists from Memory 266Define Key Terms 266Review Questions 266Chapter 15 Incident Handling 268“Do I Know This Already?” Quiz 268Foundation Topics 270Events and Incidents 270Incident Response 270Preparation 270Team 271Tools 271Training and SOPs 272Reporting and Notification Requirements 272Detection and Analysis 273Containment, Eradication, and Recovery 274Post-Incident Activities 274Digital Forensics and Incident Response 275Attack Frameworks and Concepts 275Lockheed Martin Cyber Kill Chain 275MITRE ATT&CK 276Diamond Model of Intrusion Analysis 276Tactics, Techniques, and Procedures 277Evidence and Artifacts 278Sources and Volatility 278Preservation and Chain of Custody 279Compliance Frameworks 280GDPR 280HIPAA 280PCI-DSS 280FERPA 280FISMA 281Comparing Regulatory Frameworks 281Summary 281Exam Preparation Tasks 282Review All Key Topics 282Complete Tables and Lists from Memory 283Define Key Terms 283Review Questions 283Part IV CCST Cybersecurity PreparationChapter 16 Final Preparation 286Tools and Resources 286Study Tips 287Summary 287Chapter 17 Cisco Certified Support Technician (CCST) Cybersecurity 100-160 Official Cert Guide Exam Updates 288The Purpose of This Chapter 288About Possible Exam Updates 289Impact on You and Your Study Plan 289News About the Next Exam Release 290Updated Technical Content 290Appendix A Answers to the “Do I Know This Already?” Quizzes and Review Questions 292Glossary 307 Online ElementsAppendix B Memory TablesAppendix C Memory Tables Answer KeyAppendix D Study PlannerGlossary 9780138203924 TOC 1/19/2024