CompTIA Network+ N10-008 Cert Guide

Chapter 16

Common Security Concepts

This chapter covers the following topics related to Objective 4.1 (Explain common security concepts) of the CompTIA Network+ N10-008 certification exam:

• Confidentiality, integrity, availability (CIA)

• Threats

  • Internal

  • External

• Vulnerabilities

  • Common vulnerabilities and exposures (CVE)

  • Zero-day

• Exploits

• Least privilege

• Role-based access

• Zero Trust

• Defense in depth

  • Network segmentation enforcement

  • Screened subnet [previously known as demilitarized zone (DMZ)]

  • Separation of duties

  • Network access control

  • Honeypot

• Authentication methods

  • Multifactor

  • Terminal Access Controller Access Control System Plus (TACACS+)

  • Single sign-on (SSO)

  • Remote Authentication Dial-In User Service (RADIUS)

  • LDAP

  • Kerberos

  • Local authentication ...