You're reading from CompTIA Security+: SY0-601 Certification Guide - Second Edition

Product type Book

Published in Dec 2020

Publisher Packt

ISBN-13 9781800564244

Pages 550 pages

Edition 2nd Edition

Languages

Concepts

Author (1):

Ian Neil

Preface

1. Objectives for the CompTIA Security+ 601 exam

2. Section 1: Security Aims and Objectives

3. Chapter 1: Understanding Security Fundamentals

4. Chapter 2: Implementing Public Key Infrastructure

5. Chapter 3: Investigating Identity and Access Management

6. Chapter 4: Exploring Virtualization and Cloud Concepts

7. Section 2: Monitoring the Security Infrastructure

8. Chapter 5: Monitoring, Scanning, and Penetration Testing

9. Chapter 6: Understanding Secure and Insecure Protocols

10. Chapter 7: Delving into Network and Security Concepts

11. Chapter 8: Securing Wireless and Mobile Solutions

12. Section 3: Protecting the Security Environment

13. Chapter 9: Identifying Threats, Attacks, and Vulnerabilities

14. Chapter 10: Governance, Risk, and Compliance

15. Chapter 11: Managing Application Security

16. Chapter 12: Dealing with Incident Response Procedures

17. Section 4: Mock Tests

18. Chapter 13: Mock Exam 1

19. Mock Exam 1 Solutions

20. Chapter 14: Mock Exam 2

21. Mock Exam 2 Solutions

22. Chapter Review Solutions

23. Other Books You May Enjoy

Chapter 7 – Delving into Network and Security Concepts

The web application firewall is normally installed on or before a web server as its job is to protect web applications from attack.
Implicit Deny is used by both the firewall and the router. If there is no allow rule, they get the last rule, which is deny all. This is known as Implicit Deny.
Unified Threat Management (UTM) is a firewall that provides value for money as it can provide URL filtering, content filtering, and malware inspection, as well as firewall functionality.
A router connects different networks and works at Layer 3 of the OSI reference model.
A switch connects users on an internal network, normally in a star topology. It works at the data link layer.
A Network Address Translator (NAT) hides the internal network from those on the external network.
An inline NIPS screens incoming traffic as it flows through it.
A Host-Based IPS (HIPS) is installed inside the guest...