CompTIA Security+ Review Guide, 4th Edition

Chapter 3Architecture and Design

COMPTIA SECURITY+ EXAM OBJECTIVES COVERED IN THIS CHAPTER INCLUDE THE FOLLOWING:

•  3.1 Explain use cases and purpose for frameworks, best practices and secure configuration guides.
  • Industry-standard frameworks and reference architectures
    • Regulatory
    • Non-regulatory
    • National vs. international
    • Industry-specific frameworks
  • Benchmarks/secure configuration guides
    • Platform/vendor-specific guides
      • Web server
      • Operating system
      • Application server
      • Network infrastructure devices
    • General purpose guides
  • Defense-in-depth/layered security
    • Vendor diversity
    • Control diversity
      • Administrative
      • Technical
    • User training
•  3.2 Given ...