Chapter 1. General Security Concepts

THE FOLLOWING COMPTIA SECURITY+ EXAM OBJECTIVES ARE COVERED IN THIS CHAPTER:

• 1.1 Recognize and be able to differentiate and explain the following access control models

  • MAC (Mandatory Access Control)

  • DAC (Discretionary Access Control)

  • RBAC (Role Based Access Control)

• 1.2 Recognize and be able to differentiate and explain the following methods of authentication

  • Kerberos

  • CHAP (Challenge Handshake Authentication Protocol)

  • Certificates

  • Username/Password

  • Tokens

  • Multi-Factor

  • Mutual

  • Biometrics

• 1.3 Identify non-essential services and protocols and know what actions to take to reduce the risks of those services and protocols

• 3.3 Understand the concepts behind the following kinds of security topologies

  • Security Zones

  • DMZ (Demilitarized Zone)

    • Intranet

    • Extranet

  • VLANs (Virtual Local Area Network)

  • NAT (Network Address Translation)

  • Tunneling

• 5.7 Understand and be able to explain the following concepts of risk identification

  • Asset Identification

  • Risk Assessment

  • Threat Identification

  • Vulnerabilities