CompTIA Security+™: Review Guide

Chapter 1. Systems Security

CompTIA Security+ exam objectives covered in this chapter include the following:

• 1.1 Differentiate among various systems security threats.

  • Privilege escalation

  • Virus

  • Worm

  • Trojan

  • Spyware

  • Spam

  • Adware

  • Rootkits

  • Botnets

  • Logic bomb

• 1.2 Explain the security risks pertaining to system hardware and peripherals.

  • BIOS

  • USB devices

  • Cell phones

  • Removable storage

  • Network attached storage

• 1.3 Implement OS hardening practices and procedures to achieve workstation and server security.

  • Hotfixes

  • Service packs

  • Patches

  • Patch management

  • Group policies

  • Security templates

  • Configuration baselines

• 1.4 Carry out the appropriate procedures to establish application security.

  • ActiveX

  • Java

  • Scripting

  • Browser

  • Buffer overflows

  • Cookies

  • SMTP open relays

  • Instant messaging

  • P2P

  • Input validation ...