Systems Security Certified Practitioner (SSCP)

(SSCP.AE1) / आईएसबीएन : 978-1-64459-184-0
Lessons
Lab
TestPrep
48 समीक्षा
निःशुल्क परीक्षण प्राप्त करें

कौशल जो आपको प्राप्त होंगे

(ISC)² SSCP प्रमाणन परीक्षा एक प्रवेश-स्तरीय सुरक्षा परीक्षा है जिसे अंतर्राष्ट्रीय सूचना प्रणाली सुरक्षा प्रमाणन संघ, इंक. या (ISC)² द्वारा प्रायोजित किया जाता है। (ISC)² SSCP परीक्षा उद्देश्यों में एक्सेस नियंत्रण, सुरक्षा संचालन और प्रशासन, जोखिम पहचान, निगरानी और विश्लेषण, घटना प्रतिक्रिया और पुनर्प्राप्ति, क्रिप्टोग्राफी, नेटवर्क और संचार सुरक्षा, और सिस्टम और एप्लिकेशन सुरक्षा शामिल हैं।

1

Introduction

  • About This Course
  • What Is an SSCP?
  • Using This Course
  • Objective Map
  • Earning Your Certification
2

The Business Case for Decision Assurance and Information Security

  • Information: The Lifeblood of Business
  • Policy, Procedure, and Process: How Business Gets Business Done
  • Who Runs the Business?
  • Summary
3

Information Security Fundamentals

  • The Common Needs for Privacy, Confidentiality, Integrity, and Availability
  • Training and Educating Everybody
  • SSCPs and Professional Ethics
  • Summary
  • Exam Essentials
4

Integrated Risk Management and Mitigation

  • It’s a Dangerous World
  • The Four Faces of Risk
  • Getting Integrated and Proactive with Information Defense
  • Risk Management: Concepts and Frameworks
  • Risk Assessment
  • Four Choices for Limiting or Containing Damage
  • Summary
  • Exam Essentials
5

Operationalizing Risk Mitigation

  • From Tactical Planning to Information Security Operations
  • Operationalizing Risk Mitigation: Step by Step
  • The Ongoing Job of Keeping Your Baseline Secure
  • Ongoing, Continuous Monitoring
  • Reporting to and Engaging with Management
  • Summary
  • Exam Essentials
6

Communications and Network Security

  • Trusting Our Communications in a Converged World
  • Internet Systems Concepts
  • Two Protocol Stacks, One Internet
  • IP Addresses, DHCP, and Subnets
  • IPv4 vs. IPv6: Key Differences and Options
  • CIANA Layer by Layer
  • Securing Networks as Systems
  • Summary
  • Exam Essentials
7

Identity and Access Control

  • Identity and Access: Two Sides of the Same CIANA Coin
  • Identity Management Concepts
  • Access Control Concepts
  • Network Access Control
  • Implementing and Scaling IAM
  • Zero Trust Architectures
  • Summary
  • Exam Essentials
8

Cryptography

  • Cryptography: What and Why
  • Building Blocks of Digital Cryptographic Systems
  • Keys and Key Management
  • Modern Cryptography: Beyond the “Secret Decoder Ring”
  • “Why Isn’t All of This Stuff Secret?”
  • Cryptography and CIANA
  • Public Key Infrastructures
  • Other Protocols: Applying Cryptography to Meet Different Needs
  • Measures of Merit for Cryptographic Solutions
  • Attacks and Countermeasures
  • On the Near Horizon
  • Summary
  • Exam Essentials
9

Hardware and Systems Security

  • Infrastructure Security Is Baseline Management
  • Infrastructures 101 and Threat Modeling
  • Malware: Exploiting the Infrastructure’s Vulnerabilities
  • Privacy and Secure Browsing
  • “The Sin of Aggregation”
  • Updating the Threat Model
  • Managing Your Systems’ Security
  • Summary
  • Exam Essentials
10

Applications, Data, and Cloud Security

  • It’s a Data-Driven World…At the Endpoint
  • Software as Appliances
  • Applications Lifecycles and Security
  • CIANA and Applications Software Requirements
  • Application Vulnerabilities
  • “Shadow IT:” The Dilemma of the User as Builder
  • Information Quality and Information Assurance
  • Protecting Data in Motion, in Use, and at Rest
  • Into the Clouds: Endpoint App and Data Security Considerations
  • Legal and Regulatory Issues
  • Countermeasures: Keeping Your Apps and Data Safe and Secure
  • Summary
  • Exam Essentials
11

Incident Response and Recovery

  • Defeating the Kill Chain One Skirmish at a Time
  • Incident Response Framework
  • Preparation
  • Detection and Analysis
  • Containment and Eradication
  • Recovery: Getting Back to Business
  • Post-Incident Activities
  • Summary
  • Exam Essentials
12

Business Continuity via Information Security and People Power

  • A Spectrum of Disruption
  • Surviving to Operate: Plan for It!
  • Cloud-Based “Do-Over” Buttons for Continuity, Security, and Resilience
  • CIANA at Layer 8 and Above
  • Summary
  • Exam Essentials
13

Risks, Issues, and Opportunities, Starting Tomorrow

  • On Our Way to the Future
  • CIA, CIANA, or CIANAPS?
  • Enduring Lessons
  • Your Next Steps
  • At the Close

1

Information Security Fundamentals

  • Encrypting Files with EFS
2

Integrated Risk Management and Mitigation

  • Conducting Vulnerability Scanning Using Nessus
  • Installing Antivirus Software
  • Using Social Engineering Techniques to Plan an Attack
  • Configuring a VPN
3

Communications and Network Security

  • Performing ARP Spoofing
  • Obtaining Hardware Information of a Network Adapter
  • Obtaining the ARP Cache
  • Obtaining Information about Different IP versions
  • Obtaining the IP Version of a Network Adapter
  • Getting the TCP Settings
  • Getting Information about the Current Connection Statistics of TCP
  • Getting the UDP Settings
  • Getting Information about the Current Connection Statistics of UDP
  • Getting Information about DNS
  • Finding the Host Name of a Machine
  • Finding the Physical Address of a LAN Adapter
  • Finding the Logical Address of a LAN Adapter
  • Tracing Route Using Tracert
  • Intercepting Packets
  • राउटर को कॉन्फ़िगर करना
  • Configuring SSH in a Router
  • Configuring Static Routing
  • डिफ़ॉल्ट रूटिंग को कॉन्फ़िगर करना
  • वीएलएएन को कॉन्फ़िगर करना
  • नेटवर्क एड्रेस ट्रांसलेशन को कॉन्फ़िगर करना
  • Assigning Different Classes of IP Addresses
  • Adding an IPv6 Address
  • Spoofing MAC Address
  • Performing Session Hijacking Using Burp Suite
  • Attacking a Website Using XSS Injection
  • Exploiting a Website Using SQL Injection
  • Performing a Man-in-the-Middle Attack
  • Using nmap for Scanning
  • Performing a DoS Attack with the SYN Flood
4

Identity and Access Control

  • राउटर में एसीएल बनाना
5

Cryptography

  • Observing an MD5-Generated Hash Value
  • Observe an SHA-Generated Hash Value
  • Applying Symmetric Key Encryption
  • Using OpenSSL to Create a Public/Private Key Pair
6

Hardware and Systems Security

  • Creating a Virtual Machine

कोई प्रश्न? FAQ देखें

क्या आपके पास अभी भी अनुत्तरित प्रश्न हैं और आपको संपर्क करने की आवश्यकता है?

हमसे अभी संपर्क करें

इस साइबर सुरक्षा प्रमाणन के लिए अर्हता प्राप्त करने के लिए, आपको परीक्षा उत्तीर्ण करनी होगी और (ISC)² SSCP कॉमन बॉडी ऑफ नॉलेज (CBK) के सात डोमेन में से एक या अधिक में कम से कम एक वर्ष का संचयी, भुगतान वाला कार्य अनुभव होना चाहिए।

249 अमेरिकी डॉलर

बहु विकल्पीय प्रश्न

परीक्षा में 125 प्रश्न होंगे।

180 मिनट

700

पुनः परीक्षा की नीतियाँ इस प्रकार हैं:

  • यदि आप पहली बार परीक्षा में उत्तीर्ण नहीं होते हैं, तो आप 30 दिन बाद पुनः परीक्षा दे सकते हैं।
  • यदि आप दूसरी बार भी उत्तीर्ण नहीं होते हैं, तो आप अतिरिक्त 90 दिनों के बाद पुनः परीक्षा दे सकते हैं।
  • यदि आप तीसरी बार भी उत्तीर्ण नहीं होते हैं, तो आप अपनी सबसे हालिया परीक्षा के 180 दिन बाद पुनः परीक्षा दे सकते हैं।

तीन साल

Systems Security Certified Practitioner (SSCP)

$279.99

अभी खरीदें
scroll to top