CompTIA · Security+ SY0-801
Mitigating controls, part 2
Security+ SY0-801 · Lesson 19 of 32 · 2:51:12
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the Security+ SY0-801 exam (CompTIA Security+ V8). In this lesson: intrusion detection and prevention, firewalls (rules, web application firewalls, UTM, Layer 4 and Layer 7 filtering, and rate limiting), content filtering, data loss prevention, and secrets scanning, application security (input validation, secure cookies, and code analysis), and email security with SPF, DKIM, DMARC, and BIMI. Includes three original practice questions.
Preview the topics
- Attackers send login requests to the web store with SQL commands hidden in the user name field. Ashgrove wants a control that inspects each HTTP request, and blocks this attack before it reaches the application. What should it deploy?
- Ashgrove’s connected ovens download firmware updates, and they must refuse any update that Ashgrove did not publish, or that someone changed on the way. Which control makes this possible?
- Ashgrove wants receiving mail servers to reject messages that claim to come from its domain but fail authentication, and to send it reports about them. Which mechanism does this?