CompTIA Security+ Study Guide, 8th Edition

Chapter 14Incident Response

THE COMPTIA SECURITY+ EXAM OBJECTIVES COVERED IN THIS CHAPTER INCLUDE:

• Domain 1.0: Attacks, Threats, and Vulnerabilities
  • 1.7. Summarize the techniques used in security assessments
• Domain 4.0: Operations and Incident Response
  • 4.2. Summarize the importance of policies, processes, and procedures for incident response
  • 4.3. Given an incident, utilize appropriate data sources to support an investigation
  • 4.4. Given an incident, apply mitigation techniques or controls to secure an environment

When things go wrong, organizations need a way to respond to incidents to ensure that their impact is limited and that normal operations can resume as quickly as possible. That means you need to know how to identify ...