Systems Security Certified Practitioner Study Guide

Introduction

Information Security: The Systems Security Certified Practitioner Certification

• About the (ISC)2 Organization
• Exams, Testing, and Certification
• The SSCP Exam
• Summary
• Exam Essentials

Security Basics: A Foundation

• The Development of Security Techniques
• Understanding Security Terms and Concepts
• Security Foundation Concepts
• Participating in Security Awareness Education
• Summary
• Exam Essentials
• Written Lab Study Guide

Domain 1: Access Controls

• What Are Controls?
• Types of Access Controls
• Identification
• Authentication
• System-Level Access Controls
• Discretionary Access Control (DAC)
• Nondiscretionary Access Control
• Mandatory Access Control
• Summary
• Exam Essentials
• Written Lab Study Guide

Domain 2: Security Operations and Administration

• Security Administration Concepts and Principles
• Data Management Policies
• Endpoint Device Security
• Security Education and Awareness Training
• Business Continuity Planning
• Summary
• Exam Essentials
• Written Lab Study Guide

Domain 3: Risk Identification, Monitoring, and Analysis

• Understanding the Risk Management Process
• Risk Management Frameworks and Guidance for Managing Risks
• Risk Analysis and Risk Assessment
• Managing Risks
• Risk Visibility and Reporting
• Analyzing Monitoring Results
• Summary
• Exam Essentials
• Written Lab Study Guide

Domain 4: Incident Response and Recovery

• Event and Incident Handling Policy
• Creating and Maintaining an Incident Response Plan
• Understanding and Supporting Forensic Investigations
• Understanding and Supporting the Business Continuity Plan and the Disaster Recovery Plan
• Summary
• Exam Essentials
• Written Lab Study Guide

Domain 5: Cryptography

• Concepts and Requirements of Cryptography
• Key Management
• Secure Protocols
• Summary
• Exam Essentials
• Written Lab Study Guide

Domain 6: Networks and Communications

• Network Models
• Network Design Topographies
• Ports and Protocols
• Converged Network Communications
• Network Monitoring and Control
• Access Control Protocols and Standards
• Remote User Authentication Services
• Local User Authentication Services
• Network Segmentation
• Securing Devices
• Security Posture
• Firewall and Proxy Implementation
• Network Routers and Switches
• Intrusion Detection and Prevention Devices
• Telecommunications Remote Access
• Wireless & Cellular Technologies
• Wireless Networks
• Traffic Shaping Techniques and Devices
• Quality of Service
• Summary
• Exam Essentials
• Written Lab Study Guide

Domain 7: Systems and Application Security

• Understand Malicious Code and Apply Countermeasures
• Malicious Add-Ons
• User Threats and Endpoint Device Security
• Understand and Apply Cloud Security
• Secure Data Warehouse and Big Data Environments
• Secure Software-Defined Networks and Virtual Environments
• Summary
• Exam Essentials
• Written Lab Study Guide

Appendix A: Diagnostic Tools

• Microsoft Baseline Security Analyzer
• Microsoft Password Checker
• Internet Explorer Phishing and Malicious Software Filter
• Manage Internet Cookies
• Observing Logs with Event Viewer
• Viewing a Digital Certificate
• Monitoring PC Activities with Windows Performance Monitor
• Analyzing Error Messages in Event Viewer
• Calculate Hash Values