CompTIA Security+ SY0-701 Cert Guide

Chapter 9

Understanding the Purpose of Mitigation Techniques Used to Secure the Enterprise

This chapter covers the following topics related to Objective 2.5 (Explain the purpose of mitigation techniques used to secure the enterprise) of the CompTIA Security+ SY0-701 certification exam:

• Segmentation

• Access control

• Application allow list

• Isolation

• Patching

• Encryption

• Monitoring

• Least privilege

• Configuration enforcement

• Decommissioning

• Hardening techniques

This chapter explores various mitigation techniques for securing the enterprise. It focuses on the implementation and understanding of practices like segmentation, access control (including ACLs and permissions), application allow listing, isolation, patching, encryption, monitoring, least ...