CompTIA Exam Prep - ITF+, A+, Network+, Security+, CySA+

 Here are CompTIA A+ Questions, more to be added daily Loading…

 Video 1.  Intro to IPv4 Subnetting Video 2.   Converting Dotted Decimal to Binary Video 3. Subnetting Rules Video 4. Basic Subnetting Part 1 Video 5. Basic Subnetting Part 2.

  Organization Security Exercise Types In the context of cybersecurity, red, blue, white, purple, and yellow teams represent different roles focused on enhancing security. Red teams simulate attacks, blue teams defend against them, and purple teams bridge the gap between the two. Yellow teams focus on building secure systems, while white teams oversee the process and ensure compliance.  Here's a more detailed breakdown: Red Team:  This team acts as the "attacker," simulating real-world cyberattacks to identify vulnerabilities and weaknesses in an organization's systems and defenses. They use techniques like penetration testing and social engineering to assess the effectiveness of security measures.  Blue Team:  This team focuses on defense, protecting the organization's systems and networks from cyberattacks. Their responsibilities include implementing security measures, monitoring for threats, and responding to security incidents.  Purple Team:  This ...

 DNS RECORD TYPES Make sure you know the following DNA record types for this exam and how they are used: A: host (IPv4). Maps the name to an IPv4 address. AAAA: host (IPv6)  Maps the name to an IPv6 address. CNAME: (Canonical Name): Alias. Example: Sites that use www as the hostname of a web server might internally call it something else, such as Dallwebserver1. MX : Mail Exchanger. This is used for an email server. NS: Name Server. Provides a list of the authoritative DNS servers responsible for the domain you are trying to query. PTR: Pointer. This is a reverse record; it resolves IPv4 or IPv6 addresses to domain names. SOA: Start of Authority. Keeps track of all of the DNS changes to help with replication. TXT: Text. Stores descriptive information about the domain in a text format.  SPF stands for  Sender Policy Framework. It helps prevent spammers from sending emails from your domain using the email addresses of your email servers. 

WIRELESS AUTHENTICATION METHODS These authenticate the device only. These devices do not use TLS, which is only used with certificates. Do not use a username; only use a password (PSK).   WEP (Wired Equivalent Privacy) ·        Built on RC4 – uses a 24-bit IV – PSK (Pre-Shared Key) ·        Prone to IV (Initialization Vector) attack   WPA (Wi-Fi Protected Access) ·        Built on RC4 – uses TKIP (Temporal Key Integrity Protocol) ·        Personal Mode (PSK) or Enterprise Mode (with RADIUS) ·        The PSK is prone to brute force attacks   WPA2 (Wi-Fi Protected Access 2) ·        Built on AES – uses CCMP ·        Personal Mode (PSK) or Enterprise Mode (with RADIUS) ·        The PSK is prone to brute force attacks ...

  CompTIA Exam Certification Study Group I have started a Facebook group to help individuals pass the CompTIA exams: A+, Network+, Security+, and the soon-to-come CySA+. The group will include explanations of different concepts. It will also be a place for questions that individuals need clarification on whether the answers are correct and explanations.  Below is the link to join the group.    https://www.facebook.com/groups/2411609635806164/?epa=SEARCH_BOX

CRITICAL SYSTEMS AND FUNCTIONS MTD (Maximum Tolerable Downtime)  is the longest period of a business outage without causing permanent business failure. Each organization will have its own MTD.  RTO (Recovery Time Objective): This is the expected time to get a system back online and functional. If the RTO exceeds the MTD, plan to move to an alternate site. RPO (Recovery Point Objective):   This measures how much data the company will lose in a given time. If the RPO is 4 hours, the backup must run every 4 hours; if the RPO is 12 hours, a backup must run every 12 hours. KPI (Key Performance Indicators): This measures the reliability of an asset such as a server. 1. MTTF (Mean Time to Failure): This is normally an estimate of a product's expected lifetime, estimated in thousands of hours. 2. MTBF (Mean Time Between Failures): This is the rating of a component/device that predicts the time between failures. It can be listed in tens of thousands or...

HARD DISKS If the goal is for the media never to be reused, there are three methods (for mechanical drives, not solid-state) 1. One method is shredding . You must disassemble the drive, take the platters, and run them through a shredder. 2. The other method is to use powerful magnets. This is typically done with specialized machinery that can be quite costly. If you have had several dives, the degaussing method is the fastest of the two options. 3. Another method is to use pulverizing, in which  a machine crushes the drive to destroy all components, making the data unrecoverable.  If the plan is to repurpose the drives, the best method is to employ a disk wiping/overwriting program. It is better to use a program that writes random patterns of ones and zeroes. Even if all you use is the zero-filling approach, specialized tools can still recover data. Wiping is also known as purging.  Formatting will not help with wiping data. All it does is remove the reference to th...

IDENTITY The first part of a login process is providing some form of identification, such as a username or email address .  AUTHENTICATION FACTORS Proves that the user is who they claim to be. Authentication credentials should be kept secret. This helps prevent unauthorized users from gaining access to confidential information. There are five authentication factors. 1. Something you know: Password, PIN, passphrase, security question answer, CAPTCHA, a PIN that was mailed to you. 2.  Something you have: CAC (Common Access Card), PIV (Personal Identity Verification), Smart Card, Digital Certificate (CAC, PIV, & Smart Card are all digital certificates), PIN or code sent to your cell phone, key fob or token (pic to the right) 3. Something you are: Fingerprint, iris scan, retina scan, facial scan, voice pattern, palm geometry. 4. Somewhere you are:  IP address, MAC address, GPS location computer name. 5. Something you do: Signature ana...

Types of Certificates Self-signed: This type of certificate is owned by the server that signed it. They will be untrusted inside an organization until the certificate is imported into the machine attempting to access the server, Root: Identifies the CA (Certificate Authority). There is no other authority higher than the root, therefore its certificate must be self-signed. User: There are certificate templates for standard users, administrators, recovery agents, smart card logon, etc. Email: These are used for digital signature and the encryption/decryption of emails. Emails can be referred to as messages or electronic messages. Code-signing certificates: These are used with software/applications to validate the end-user the integrity of the product. Domain Validation (DV): This proves the ownership for a domain. Not the most secure method as it is vulnerable to compromise. Extended Validation (EV): A thorough check is required to validate the ownership ...

SSL/TLS Accelerator An SSL/TLS Accelerator is normally a plug-in card on the web server, can also be included in a load balancing appliance. The web server is busy heading out the proper web page to be displayed. In the mean-time, the accelerator handles the decryption and encryption for the TLS session.  The accelerator does not inspect the traffic.  SSL Decryptor An SSL decryptor is sometimes called an inspector or interceptor. It is employed as some type of proxy to inspect encrypted traffic as it enters or leaves the network.  This protects against someone trying to use encryption to exfiltrate data. The device is placed at the edge of the network.  The decryptor can perform the following functions" 1. Block connections using a weak cipher suite.  2. Prevent inspection of authorized traffic that is subject to privacy. 3. Prevent sessions that cannot be inspected.

HASHING Hashing is used to verify integrity, making sure the media has not been altered, changed, or modified by accidental or intentional means. Hashing can also be called a checksum or message digest.  A hash is a one-way function that produces a fixed-length output. This output cannot be reversed to produce the original input. Hashing only alerts you to the fact that something has changed, in other words, it has lost its integrity. Hashing is used for many reasons: 1. The most common and widely used methods are with passwords. When an individual login to the PC their password is hashed and matched against the hashes that are stored if it matches the user is authenticated. 2. Sometimes hashing is used to make sure financial records have not been changed. This process can be performed daily, weekly, or monthly. This is referred to as "file integrity monitoring." 3. File integrity monitoring can be used to check the hash value of image files. If the "hash valu...