Chapter 2Domain 2.0: Software and Systems Security

EXAM OBJECTIVES COVERED IN THIS CHAPTER:

  • 2.1 Given a scenario, apply security solutions for infrastructure management.
    • Cloud vs. on-premises
    • Asset management
    • Segmentation
    • Network architecture
    • Change management
    • Virtualization
    • Containerization
    • Identity and access management
    • Cloud access security broker (CASB)
    • Honeypot
    • Monitoring and logging
    • Encryption
    • Certificate management
    • Active defense
  • 2.2 Explain software assurance best practices.
    • Platforms
    • Software development lifecycle (SDLC) integration
    • DevSecOps
    • Software assessment methods
    • Secure coding best practices
    • Static analysis tools
    • Dynamic analysis tools
    • Formal methods for verification of critical software
    • Service-oriented architecture ...

Get CompTIA CySA+ Practice Tests, 2nd Edition now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.