Intro
Table of Contents
Acknowledgments
About the Authors
About the Technical Editor
Introduction
What Does This Book Cover?
Objectives Map for CompTIA Cybersecurity Analyst (CySA+) Exam CS0-002
Setting Up a Kali and Metasploitable Learning Environment
Assessment Test
Answers to the Assessment Test
Chapter 1: Today's Cybersecurity Analyst
Cybersecurity Objectives
Privacy vs. Security
Evaluating Security Risks
Building a Secure Network
Secure Endpoint Management
Penetration Testing
Reverse Engineering

The Future of Cybersecurity Analytics
Summary
Exam Essentials
Lab Exercises
Review Questions
Chapter 2: Using Threat Intelligence
Threat Data and Intelligence
Threat Classification
Attack Frameworks
Applying Threat Intelligence Organizationwide
Summary
Exam Essentials
Lab Exercises
Review Questions
Chapter 3: Reconnaissance and Intelligence Gathering
Mapping and Enumeration
Passive Footprinting
Gathering Organizational Intelligence
Detecting, Preventing, and Responding to Reconnaissance
Summary
Exam Essentials
Lab Exercises

Review Questions
Chapter 4: Designing a Vulnerability Management Program
Identifying Vulnerability Management Requirements
Configuring and Executing Vulnerability Scans
Developing a Remediation Workflow
Overcoming Risks of Vulnerability Scanning
Vulnerability Scanning Tools
Summary
Exam Essentials
Lab Exercises
Review Questions
Chapter 5: Analyzing Vulnerability Scans
Reviewing and Interpreting Scan Reports
Validating Scan Results
Common Vulnerabilities
Summary
Exam Essentials
Lab Exercises
Review Questions
Chapter 6: Cloud Security

Understanding Cloud Environments
Operating in the Cloud
Cloud Infrastructure Security
Summary
Exam Essentials
Lab Exercises
Review Questions
Chapter 7: Infrastructure Security and Controls
Understanding Defense-in-Depth
Improving Security by Improving Controls
Analyzing Security Architecture
Summary
Exam Essentials
Lab Exercises
Review Questions
Chapter 8: Identity and Access Management Security
Understanding Identity
Threats to Identity and Access
Identity as a Security Layer
Federation and Single Sign-On
Summary
Exam Essentials

Lab Exercises
Review Questions
Chapter 9: Software and Hardware Development Security
Software Assurance Best Practices
Designing and Coding for Security
Software Security Testing
Hardware Assurance Best Practices
Summary
Exam Essentials
Lab Exercises
Review Questions
Chapter 10: Security Operations and Monitoring
Security Monitoring
Summary
Exam Essentials
Lab Exercises
Review Questions
Chapter 11: Building an Incident Response Program
Security Incidents
Phases of Incident Response
Building the Foundation for Incident Response