You're reading from CompTIA Security+: SY0-601 Certification Guide Complete coverage of the new CompTIA Security+ (SY0-601) exam to help you pass on the first attempt

Product type Paperback

Published in Dec 2020

Publisher Packt

ISBN-13 9781800564244

Length 550 pages

Edition 2nd Edition

Languages

Python

Tools

Kali Linux

Concepts

Cybersecurity

Author (1):

Ian Neil

View More author details

Table of Contents (24) Chapters

Preface

1. Objectives for the CompTIA Security+ 601 exam

Exam Objectives (Domains)

2. Section 1: Security Aims and Objectives FREE CHAPTER

3. Chapter 1: Understanding Security Fundamentals

4. Chapter 2: Implementing Public Key Infrastructure

5. Chapter 3: Investigating Identity and Access Management

6. Chapter 4: Exploring Virtualization and Cloud Concepts

7. Section 2: Monitoring the Security Infrastructure

8. Chapter 5: Monitoring, Scanning, and Penetration Testing

9. Chapter 6: Understanding Secure and Insecure Protocols

10. Chapter 7: Delving into Network and Security Concepts

11. Chapter 8: Securing Wireless and Mobile Solutions

12. Section 3: Protecting the Security Environment

13. Chapter 9: Identifying Threats, Attacks, and Vulnerabilities

14. Chapter 10: Governance, Risk, and Compliance

15. Chapter 11: Managing Application Security

16. Chapter 12: Dealing with Incident Response Procedures

17. Section 4: Mock Tests

18. Chapter 13: Mock Exam 1

19. Mock Exam 1 Solutions

20. Chapter 14: Mock Exam 2

21. Mock Exam 2 Solutions

22. Chapter Review Solutions

23. Other Books You May Enjoy

PKI Concepts

The PKI provides asymmetric techniques using two keys: a public key and a private key. There is a certificate hierarchy, which is called the Certificate Authority, that manages, signs, issues, validates, and revokes certificates. Let's first look at the components of the certificate hierarchy. A certificate is known as an X509 certificate.

Certificate Hierarchy

The Certificate Authority (CA) is the ultimate authority as it holds the master key, also known as the root key, for signing all of the certificates that it gives to the Intermediary who issues the certificate to the requester.

Figure 2.1 – CA Hierarchy

Let's look at the CA hierarchy shown in the preceding diagram in more depth:

Online CA: An internal online CA is always up and running so that people in the company can request a certificate at any time of the day or night. This would not be the case in a government or top-security environment.
Offline...