1. CompTIA Security+ Study Guide (SY0-401)
Chapter 2:
Monitoring and Diagnosing Networks

2. Chapter 2: Monitoring and Diagnosing Networks
Analyze a scenario and select the appropriate type of mitigation and deterrent techniques.

3. Network Monitors
Network monitors, otherwise called sniffers, were originally introduced to help troubleshoot network problems.
Today, a network-monitoring system usually consists of a PC with a NIC (running in promiscuous mode) and monitoring software.

4. Hardening Platform Hardening
process of making a workstation or a server more secure
OS Hardening
process of hardening the operating system
OS hardening is part of platform hardening, but it deals only with the operating system.)

5. Securing the Network MAC Limiting and Filtering 802.1X
Disable Unused Ports
Rogue Machine Detection

6. Security Posture Continuous Security Monitoring Security Audits
Setting a Remediation Policy

7. Reporting Security Issues
Alarms
Ongoing current problem
Alerts
Issues to which you need to pay attention
Trends
Current threat patterns

8. Detection and Prevention
Enticement
is the process of luring someone into your plan or trap.
Entrapment
is the process in which a law enforcement officer or a government agent encourages or induces a person to commit a crime when the potential criminal expresses a desire not to go ahead. Entrapment is a valid legal defense in a criminal prosecution.