You know companies are looking for IT security administrators. Maybe you're already working in IT, and have some security responsibilities. How do you systematize your knowledge, get credentialed, and make a career of this? A great place to start is Security Administrator Street Smarts.
Yes, this is a CompTIA Security+ test prep guide, but it's much more than that. The authors organize the experience of the working security administrator into ten phases: upfront "gruntwork," hardening systems, protecting against malware, securing storage, managing user accounts, protecting the network, securing Internet activity, testing security, investigating incidents, and troubleshooting security problems.
They cover each phase in detail, giving you a clear, practical understanding of what security admins really do. Every task is defined with a real-world scenario, scoped to clarify what's involved, walked through with a practical procedure, and checked with criteria for completion. Along the way, you'll find plenty of step-by-step instructions, with screen shots. (For example: how to determine which Windows services can be safely turned off; how to configure XP Professional for Encrypting File System and restrict access to encrypted files.) Checklists, too: for instance, defining security action items; assessing servers' physical security.)
In this relentlessly realistic context, David Miller and Michael Gregg address every learning objective in CompTIA's Security+ exam. Speaking of this book's authors, they're both working security consultants; one runs an IT security consulting firm that performs assessments and penetration tests for Fortune-class enterprises. They both hold multiple security certifications, too: from the entry-level Security+ to the more challenging CISSP. They know both the "real-world" and the "certification" sides of security inside and out -- and it shows. Bill Camarda, from the April 2007 Read Only