(ISC)2 SSCP Systems Security Certified Practitioner Official Practice Tests, 2nd Edition

Chapter 7Systems and Application Security (Domain 7)

THE SSCP EXAM TOPICS COVERED IN THIS CHAPTER INCLUDE:

• Domain 7.0: Systems and Application Security
  • 7.1 Identify and analyze malicious code and activity
    • Malware (e.g., rootkits, spyware, scareware, ransomware, trojans, virus, worms, trapdoors, backdoors, fileless)
    • Malware countermeasures (e.g., scanners, anti-malware, code signing)
    • Malicious activity (e.g., insider threat, data theft, distributed denial of service (DDoS), botnet, zero-day exploits, web-based attacks, advanced persistent threat (APT))
    • Malicious activity countermeasures (e.g., user awareness, system hardening, patching, isolation, data loss prevention (DLP))
    • Social engineering (e.g., phishing, impersonation)
    • Behavior analytics ...