CompTIA CASP+ CAS-004 Certification Guide: Develop CASP+ skills and learn all the key topics needed to prepare for the certification exam
暫譯: CompTIA CASP+ CAS-004 認證指南：發展 CASP+ 技能並學習所有準備認證考試所需的關鍵主題

Birch, Mark

CompTIA CASP+ CAS-004 Certification Guide: Develop CASP+ skills and learn all the key topics needed to prepare for the certification exam
  • 出版商: Packt Publishing
  • 出版日期: 2022-03-03
  • 售價: $2,030
  • 貴賓價: 9.5 折 $1,929
  • 語言: 英文
  • 頁數: 654
  • 裝訂: Quality Paper - also called trade paper
  • ISBN: 1801816778
  • ISBN-13: 9781801816779
  • 相關分類: CompTIA

    • 海外代購書籍(需單獨結帳)

相關主題

商品描述

Key Features

  • Learn how to apply industry best practices and earn the CASP+ certification
  • Explore over 400 CASP+ questions to test your understanding of key concepts and help you prepare for the exam
  • Discover over 300 illustrations and diagrams that will assist you in understanding advanced CASP+ concepts

Book Description

CompTIA Advanced Security Practitioner (CASP+) ensures that security practitioners stay on top of the ever-changing security landscape. The CompTIA CASP+ CAS-004 Certification Guide offers complete, up-to-date coverage of the CompTIA CAS-004 exam so you can take it with confidence, fully equipped to pass on the first attempt.

Written in a clear, succinct way with self-assessment questions, exam tips, and mock exams with detailed explanations, this book covers security architecture, security operations, security engineering, cryptography, governance, risk, and compliance. You'll begin by developing the skills to architect, engineer, integrate, and implement secure solutions across complex environments to support a resilient enterprise. Moving on, you'll discover how to monitor and detect security incidents, implement incident response, and use automation to proactively support ongoing security operations. The book also shows you how to apply security practices in the cloud, on-premises, to endpoints, and to mobile infrastructure. Finally, you'll understand the impact of governance, risk, and compliance requirements throughout the enterprise.

By the end of this CASP study guide, you'll have covered everything you need to pass the CompTIA CASP+ CAS-004 certification exam and have a handy reference guide.

What you will learn

  • Understand Cloud Security Alliance (CSA) and the FedRAMP programs
  • Respond to Advanced Persistent Threats (APT) by deploying hunt teams
  • Understand the Cyber Kill Chain framework as well as MITRE ATT&CK and Diamond Models
  • Deploy advanced cryptographic solutions using the latest FIPS standards
  • Understand compliance requirements for GDPR, PCI, DSS, and COPPA
  • Secure Internet of Things (IoT), Industrial control systems (ICS), and SCADA
  • Plan for incident response and digital forensics using advanced tools

Who this book is for

This CompTIA book is for CASP+ CAS-004 exam candidates who want to achieve CASP+ certification to advance their career. Security architects, senior security engineers, SOC managers, security analysts, IT cybersecurity specialists/INFOSEC specialists, and cyber risk analysts will benefit from this book. Experience in an IT technical role or CompTIA Security+ certification or equivalent is assumed.

商品描述(中文翻譯)

**主要特點**

- 學習如何應用業界最佳實踐並獲得 CASP+ 認證
- 探索超過 400 道 CASP+ 問題，以測試您對關鍵概念的理解並幫助您準備考試
- 發現超過 300 幅插圖和圖表，幫助您理解進階的 CASP+ 概念

**書籍描述**

CompTIA 進階安全從業人員 (CASP+) 確保安全從業人員能夠掌握不斷變化的安全環境。CompTIA CASP+ CAS-004 認證指南提供了 CompTIA CAS-004 考試的完整、最新的內容，讓您能夠自信地參加考試，充分準備以便第一次就通過。

本書以清晰、簡潔的方式撰寫，包含自我評估問題、考試提示和詳細解釋的模擬考試，涵蓋安全架構、安全運營、安全工程、密碼學、治理、風險和合規性。您將首先發展在複雜環境中架構、工程、整合和實施安全解決方案的技能，以支持韌性企業。接下來，您將學習如何監控和檢測安全事件、實施事件響應，並使用自動化來主動支持持續的安全運營。本書還展示了如何在雲端、本地、端點和移動基礎設施中應用安全實踐。最後，您將了解治理、風險和合規性要求在整個企業中的影響。

在本 CASP 學習指南結束時，您將涵蓋通過 CompTIA CASP+ CAS-004 認證考試所需的所有內容，並擁有一本方便的參考指南。

**您將學到的內容**

- 了解雲安全聯盟 (CSA) 和 FedRAMP 計劃
- 通過部署獵捕小組來應對進階持續威脅 (APT)
- 了解網路攻擊鏈框架以及 MITRE ATT&CK 和 Diamond 模型
- 使用最新的 FIPS 標準部署進階密碼解決方案
- 了解 GDPR、PCI、DSS 和 COPPA 的合規要求
- 確保物聯網 (IoT)、工業控制系統 (ICS) 和 SCADA 的安全
- 使用先進工具規劃事件響應和數位取證

**本書適合誰**

這本 CompTIA 書籍適合希望獲得 CASP+ 認證以推進職業生涯的 CASP+ CAS-004 考試候選人。安全架構師、高級安全工程師、SOC 經理、安全分析師、IT 網路安全專家/資訊安全專家以及網路風險分析師將從本書中受益。假設您具備 IT 技術角色的經驗或 CompTIA Security+ 認證或同等資格。

作者簡介

Mark Birch is an experienced courseware developer and teacher in both information systems and cyber-security. Mark has been developing content and teaching CompTIA CASP since its inception in 2011 and understands the subject area in depth. Mark began his career working within the aerospace industry (for a major defense contractor) and has over 30 years’ experience consulting, engineering and deploying secure information systems. He has spent over 20 years working with the United States Military and United Kingdom Armed Forces, helping many students attain their learning goals. Mark has ensured that Soldiers, Officers and civilians have had the best opportunities to gain cyber-security accreditation.

作者簡介(中文翻譯)

馬克·伯奇（Mark Birch）是一位經驗豐富的課程開發者和教師，專注於資訊系統和網路安全。自2011年CompTIA CASP成立以來，馬克一直在開發內容並教授該課程，對該領域有深入的了解。馬克的職業生涯始於航空航天產業（為一家主要的國防承包商工作），擁有超過30年的安全資訊系統諮詢、工程和部署經驗。他在美國軍方和英國武裝部隊工作了超過20年，幫助許多學生達成他們的學習目標。馬克確保士兵、軍官和平民都有最佳的機會獲得網路安全認證。

目錄大綱

(N.B. Please use the Look Inside option to see further chapters)

  1. Designing a Secure Network Architecture
  2. Integrating Software Applications into the Enterprise
  3. Enterprise Data Security, Including Secure Cloud and Virtualization Solutions
  4. Deploying Enterprise Authentication and Authorization Controls
  5. Threat and Vulnerability Management
  6. Vulnerability Assessment and Penetration Testing Methods and Tools
  7. Risk Mitigation Controls
  8. Implementing Incident Response and Forensics Procedures
  9. Enterprise Mobility and Endpoint Security Controls
  10. Security Considerations Impacting Specific Sectors and Operational Technologies
  11. Implementing Cryptographic Protocols and Algorithms
  12. Implementing Appropriate PKI Solutions, Cryptographic Protocols, and Algorithms for Business Needs
  13. Applying Appropriate Risk Strategies

目錄大綱(中文翻譯)

(N.B. Please use the Look Inside option to see further chapters)


  1. Designing a Secure Network Architecture

  2. Integrating Software Applications into the Enterprise

  3. Enterprise Data Security, Including Secure Cloud and Virtualization Solutions

  4. Deploying Enterprise Authentication and Authorization Controls

  5. Threat and Vulnerability Management

  6. Vulnerability Assessment and Penetration Testing Methods and Tools

  7. Risk Mitigation Controls

  8. Implementing Incident Response and Forensics Procedures

  9. Enterprise Mobility and Endpoint Security Controls

  10. Security Considerations Impacting Specific Sectors and Operational Technologies

  11. Implementing Cryptographic Protocols and Algorithms

  12. Implementing Appropriate PKI Solutions, Cryptographic Protocols, and Algorithms for Business Needs

  13. Applying Appropriate Risk Strategies

類似商品