CompTIA CySA+ Cybersecurity Analyst Certification Practice Exams (Exam CS0-002), 2nd Edition

     CHAPTER 12

Implement Configuration Changes to Existing Controls to Improve Security

This chapter includes questions on the following topics:

•  Application and data protection

•  Network access control

•  Malware and intrusion detection

Default Permit. This dumb idea crops up in a lot of different forms; it’s incredibly persistent and difficult to eradicate. Why? Because it’s so attractive. Systems based on “Default Permit” are the computer security equivalent of empty calories: tasty, yet fattening.

The opposite of “Default Permit” is “Default Deny,” and it is a really good idea. It takes dedication, thought, and understanding to implement a “Default Deny” policy, which is why it is so seldom done. It’s not that much harder to do than ...