Exam Essentials

---

Know how to predict the threats to a given network. Given the makeup of a network, you must be able to predict the threats that could affect its security.

Make sure that you recognize when a network should be segmented. Take into account the different techniques for segmenting a network to prevent your perimeter network from being exploited, causing your internal network to be compromised.

Know how to design an incident response procedure to minimize downtime and maximize evidence preservation. Make sure you know what techniques you will use to review an attack, including the system event log, security audit log, and so on. Also know how you will be able to recover from the incident.

Know how to recover the services of your network after an incident has been rectified. You should also know how to design your organization's services, so that they can proceed uninterrupted even when an incident occurs.

---