Domain 4

Security Operations

Monitoring, SIEM/SOAR, incident response, digital forensics, identity and access management, and automation.

Objectives Covered

• 4.1 — Apply common security techniques to computing resources
• 4.2 — Explain the security implications of proper hardware, software, and data asset management
• 4.3 — Explain various activities associated with vulnerability management
• 4.4 — Explain security alerting and monitoring concepts and tools
• 4.5 — Modify enterprise capabilities to enhance security
• 4.6 — Implement and maintain identity and access management
• 4.7 — Explain the importance of automation and orchestration related to secure operations
• 4.8 — Explain appropriate incident response activities
• 4.9 — Use data sources to support an investigation