3-operational-procedures-comptia-a-plus-220-902-m3-slides

The Pluralsight Learning Path for CompTIA A+... Meanwhile, in the Real World…customer technician We’re being audited!.  Proprietary, closed-source- Vendor owns the code  Vendor defines

Addressing Prohibited Content and Activity

Tim Warner

@TechTrainerTim timothy-warner@pluralsight.com

The Pluralsight Learning Path for CompTIA A+

Operational Procedures for CompTIA A+ (220-902)

Meanwhile, in the Real World…

customer technician

We’re being audited! How can I isolate

PII?

CompTIA A+ 220-902

Summarize the process of addressing prohibited content/activity, and explain privacy, licensing, and policy concepts

5.3

Incident Response

Intentional or unintentional

attack

Inappropriate

resource use

Data theftSecurity breach

What is an 'Incident'?

 Identify the problem

- Network monitoring (consent to

Fully document security policyMake documentation availableTrack changes (wikis are good)Maintaining Documentation

MediaWiki

Licensing/DRM/EULA

 Proprietary, closed-source

- Vendor owns the code

 Vendor defines license terms

 Generally a profit motive

 Activation/DRM are big issues for vendor

 Generally altruistic motive

 Weakness: support

Open Source

Open Source vs Commercial Licenses

 Individual, end-user license

 You don't purchase the

software, you purchase the

right to install and use it

 License may not be

 End-user license agreement

 Also called "software license

agreement"; used in

proprietary software

 Software normally won't install

unless the user agrees to the

EULA

EULA

Demo 1: Investigating DRM

AD RMS

Standards, Practices, & Theory

for CompTIA Network+

PII and End-User Policies

 End-user policies

- AUP

 Security best practicesPolicies and Best Practices

Demo 2: Identifying PII

Use PowerShell

Standards, Practices, & Theory

for CompTIA Network+

Meanwhile, in the Real World…

customer technician

We’re being audited! How can I isolate

PII?

Back in the Real World

customer technician

Use regular expressions and administrative scripting

 Download the trial version of a PDF DRM engine

 Research available exploits to

give you experience “on both

sides of the fence”

Homework

 Pluralsight: Network Security for CompTIA Network+ ( Tim Warner )

- See the module "Summarizing Basic Forensic Concepts"

 Pluralsight: Ethical Hacking - Understanding Ethical Hacking ( Dale Meredith )

- See the module "Information Security Controls"

For Further Learning

Licensing is a big deal both for ISVs and enterprise businesses (audit!)

You need AUP documentation to protect your company legally

professionalism

Summary