|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/comptia-practice-tests/
课程评论：没有评论
Coursera 课程《Updated CompTIA Security+ Cert. (SY0-701) Practice Exams》旨在帮助学员为 CompTIA Security+ SY0-701 认证考试做好准备。该课程全面覆盖了考试的五个核心领域（Domains）： 1. **通用安全概念 (General Security Concepts)** (占考试 12%)：重点探讨不同类型的安全控制（包括比较和对比），总结基础安全概念，解释变更管理对其安全性的重要性及影响，并说明使用适当的加密解决方案的必要性。 2. **威胁、漏洞和缓解措施 (Threats, Vulnerabilities, and Mitigations)** (占考试 22%)：分析常见威胁行为者及其动机，解释常见的威胁载体和攻击面，对各种类型的漏洞进行说明，根据情景分析恶意活动迹象，并阐述用于保护企业的缓解技术。 3. **安全架构 (Security Architecture)** (占考试 18%)：比较和对比不同架构模型的安全影响，根据情景将安全原则应用于企业基础设施，对保护数据的概念和策略进行对比，并解释弹性与恢复在安全架构中的重要性。 4. **安全运营 (Security Operations)** (占考试 28%)：根据情景应用常见的安全技术于计算资源，解释充分的硬件、软件和数据资产管理的安全性影响，说明漏洞管理相关的各项活动，解释安全警报和监控的概念与工具，根据情景修改企业能力以增强安全性，根据情景实施和维护身份与访问管理，阐述自动化和编排在安全运营中的重要性，并解释适当的事件响应活动。 5. **安全计划管理与监督 (Security Program Management and Oversight)** (占考试 20%)：总结有效的安全治理要素，解释风险管理流程的要素，说明与第三方风险评估和管理相关的流程，总结有效的安全合规性要素，解释审计和评估的类型及目的，并根据情景实施安全意识实践。 该课程主要通过模拟考试的形式，帮助学员掌握考试的知识点和应试技巧。
EXAM OBJECTIVES (DOMAINS) and topics covered in each domain are: 1.0 General Security Concepts (12% of the exam)Compare and contrast various types of security controls.Summarize fundamental security concepts.Explain the importance of change management processes and the impact to security.Explain the importance of using appropriate cryptographic solutions.2.0 Threats, Vulnerabilities, and Mitigations (22% of the exam)Compare and contrast common threat actors and motivations.Explain common threat vectors and attack surfaces.Explain various types of vulnerabilities.Given a scenario, analyze indicators of malicious activity.Explain the purpose of mitigation techniques used to secure the enterprise.3.0 Security Architecture (18% of the exam)Compare and contrast security implications of different architecture models.Given a scenario, apply security principles to secure enterprise infrastructure.Compare and contrast concepts and strategies to protect data.Explain the importance of resilience and recovery in security architecture.4.0 Security Operations (28% of the exam)Given a scenario, apply common security techniques to computing resources.Explain the security implications of proper hardware, software, and data asset management.Explain various activities associated with vulnerability management.Explain security alerting and monitoring concepts and tools.Given a scenario, modify enterprise capabilities to enhance security.Given a scenario, implement and maintain identity and access management.Explain the importance of automation and orchestration related to secure operations.Explain appropriate incident response activities.Given a scenario, use data sources to support an investigation.5.0 Security Program Management and Oversight (20% of the exam)Summarize elements of effective security governance.Explain elements of the risk management process.Explain the processes associated with third-party risk assessment and management.Summarize elements of effective security compliance.Explain types and purposes of audits and assessments.Given a scenario, implement security awareness practices.
