CompTIA Security+ (SY0-701) Cert Prep: 2 Threats, Vulnerabilities, and Mitigations

Introduction

• Threats, vulnerabilities, and mitigations

1. Understanding Vulnerability Types

• Vulnerability impact
• Supply chain vulnerabilities
• Configuration vulnerabilities
• Architectural vulnerabilities

2. Malware

• Comparing viruses, worms, and trojans
• Malware payloads
• Understanding backdoors and logic bombs
• Looking at advanced malware
• Understanding botnets
• Malicious script execution

3. Understanding Attackers

• Cybersecurity adversaries
• Attacker motivations
• Preventing insider threats
• Attack vectors
• Zero-day attacks

4. Social Engineering Attacks

• Social engineering
• Impersonation attacks
• Identity fraud and pretexting
• Watering hole attacks
• Physical social engineering
• Business email compromise
• Misinformation and disinformation

5. Password Attacks

• Password attacks
• Password spraying and credential stuffing

6. Application Attacks

• Preventing SQL injection
• Understanding cross-site scripting
• Request forgery
• Overflow attacks
• Explaining cookies and attachments
• Session hijacking
• Code execution attacks
• Privilege escalation
• OWASP Top Ten
• Application security
• Defending against directory traversal
• Race condition vulnerabilities

7. Cryptanalytic Attacks

• Brute force attacks
• Knowledge-based attacks
• Limitations of encryption algorithms

8. Network Attacks

• Denial-of-service attacks
• Eavesdropping attacks
• DNS attacks
• Wireless attacks
• Propagation attacks
• Preventing rogues and evil twins
• Disassociation attacks
• Understanding Bluetooth attacks
• RFID security

9. Attack Indicators

• Attack indicators

Conclusion

• Continuing your studies