CompTIA Security+ (SY0-701) Cert Prep (2024)
17h 33mIntermediate2024-07-26
Authors
Mike Chapple
Teaching Professor at the University of Notre Dame
Course details
CompTIA Security+ is an entry-level certification that requires a thorough understanding of network and device security, risk mitigation strategies, compliance, and more. This course provides CompTIA Security+ candidates with essential information they need to prepare for the qualifying exam. Cybersecurity expert Mike Chapple first goes over some of the basics of the exam, then covers the six domains for the latest version of the exam, SY0-701. He shares study tips that can help you feel prepared to take and pass the test on your first try. Plus, learn where to find practice tests to get hands-on experience and how to keep your certification current by continuing your studies.
Skills covered
Software Quality AssuranceVulnerability ManagementGovernance, Risk, and ComplianceNetwork SecurityCert PrepCybersecuritySoftware Development
Concepts
Introduction
- About the Security+ exam
- What's new in SY0-701
The Security+ Exam
- The Security+ exam
- Careers in information security
- The value of certification
- Stackable certifications
- Study resources
Inside the Security+ Exam
- In-person exam environment
- At-home testing
- Security+ question types
- Passing the Security+ exam
Preparing for the Exam
- Exam tips
- Practice tests
- Continuing education requirements
Domain 1 - General Security Concepts
- General security concepts
Fundamental Security Concepts
- The goals of information security
- Authentication, authorization, and accounting (AAA)
- Categorizing security controls
- Conducting a gap analysis
- Zero Trust
- Physical access control
- Physical security personnel
- Deception technologies
- Change management
Cryptography
- Understanding encryption
- Symmetric and asymmetric cryptography
- Goals of cryptography
- Choosing encryption algorithms
- The cryptographic lifecycle
- Data de-identification
- Data obfuscation
Symmetric Cryptography
- Data Encryption Standard (DES)
- 3DES
- AES, Blowfish, and Twofish
- Steganography
Asymmetric Cryptography
- Rivest, Shamir, Adleman (RSA)
- PGP and GnuPG
- Elliptic-curve and quantum cryptography
- Tor and perfect forward secrecy
Key Management
- Key exchange
- Diffie-Hellman
- Key escrow
- Key stretching
- Hardware security modules
Public Key Infrastructure
- Trust models
- PKI and digital certificates
- Hash functions
- Digital signatures
- Digital signature standard
- Create a digital certificate
- Revoke a digital certificate
- Certificate stapling
- Certificate authorities
- Certificate subjects
- Certificate types
- Certificate formats
Cryptographic Applications
- TLS and SSL
- Blockchain
Domain 2 - Threats, Vulnerabilities, and Mitigations
- Threats, vulnerabilities, and mitigations
Understanding Vulnerability Types
- Vulnerability impact
- Supply chain vulnerabilities
- Configuration vulnerabilities
- Architectural vulnerabilities
Malware
- Comparing viruses, worms, and trojans
- Malware payloads
- Understanding backdoors and logic bombs
- Looking at advanced malware
- Understanding botnets
- Malicious script execution
Understanding Attackers
- Cybersecurity adversaries
- Attacker motivations
- Preventing insider threats
- Attack vectors
- Zero-day attacks
Social Engineering Attacks
- Social engineering
- Impersonation attacks
- Identity fraud and pretexting
- Watering hole attacks
- Physical social engineering
- Business email compromise
- Misinformation and disinformation
Password Attacks
- Password attacks
- Password spraying and credential stuffing
Application Attacks
- Preventing SQL injection
- Understanding cross-site scripting
- Request forgery
- Overflow attacks
- Explaining cookies and attachments
- Session hijacking
- Code execution attacks
- Privilege escalation
- OWASP Top Ten
- Application security
- Defending against directory traversal
- Race condition vulnerabilities
Cryptanalytic Attacks
- Brute force attacks
- Knowledge-based attacks
- Limitations of encryption algorithms
Network Attacks
- Denial-of-service attacks
- Eavesdropping attacks
- DNS attacks
- Wireless attacks
- Propagation attacks
- Preventing rogues and evil twins
- Disassociation attacks
- Understanding Bluetooth attacks
- RFID security
Attack Indicators
- Attack indicators
Domain 3 - Security Architecture
- Security architecture
Cloud Computing
- What is the cloud
- Cloud computing roles
- Drivers for cloud computing
- Multitenant computing
- Cloud considerations
- Security service providers
Virtualization
- Virtualization
- Desktop and application virtualization
Cloud Building Blocks
- Cloud compute resources
- Cloud storage
- Cloud networking
- Cloud databases
- Cloud orchestration
- Containers
- SOA and microservices
Cloud Activities
- Cloud activities and the cloud reference architecture
- Cloud deployment models
- Cloud service categories
- Security and privacy concerns in the cloud
- Data sovereignty
- Operational concerns in the cloud
Cloud Security Controls
- Cloud firewall considerations
- Cloud application security
- Cloud provider security controls
TCP IP Networking
- Introducing TCP IP
- IP addresses and DHCP
- Domain Name System (DNS)
- Network ports
- ICMP
Secure Network Design
- Security zones
- VLANs and network segmentation
- Security device placement
- Software-defined networking (SDN)
Network Security Devices
- Routers, switches, and bridges
- Firewalls
- Web application firewalls
- Proxy servers
- Load balancers
- VPNs and VPN concentrators
- Network intrusion detection and prevention
- Protocol analyzers
- Unified threat management
- Failure modes
Network Security Techniques
- Restricting network access
- Network access control
- Router configuration security
- Switch configuration security
- Maintaining network availability
- Network monitoring
- SNMP
- Isolating sensitive systems
- Zero trust networking
- Secure access service edge (SASE)
Embedded Systems Security
- Industrial control systems
- Internet of Things
- Securing smart devices
- Secure networking for smart devices
- Embedded systems
Data Protection
- Understanding data security
- Data types
- Data anonymization
- Data obfuscation
- Information classification
Resilience and Recovery
- Business continuity planning
- Business continuity controls
- High availability and fault tolerance
- Disaster recovery
- Backups
- Restoring backups
- Disaster recovery sites
- Testing BC DR plans
- Capacity planning
Domain 4 - Security Operations
- Security operations
Data Security Controls
- Developing security baselines
- Leveraging industry standards
- Customizing security standards
Host Security
- Operating system security
- Malware prevention
- Application management
- Host-based network security controls
- File integrity monitoring
- Data loss prevention
- Data encryption
- Hardware and firmware security
- Linux file permissions
- Web content filtering
Configuration Enforcement
- Change management
- Configuration management
- Physical asset management
- Disposal and decommissioning
Mobile Device Security
- Mobile connection methods
- Mobile device security
- Mobile device management
- Mobile device tracking
- Mobile application security
- Mobile security enforcement
- Bring your own device (BYOD)
- Mobile deployment models
Wireless Networking
- Understanding wireless networking
- Wireless encryption
- Wireless authentication
- RADIUS
- Wireless signal propagation
- Wireless networking equipment
Code Security
- Code review
- Software testing
- Code security tests
- Fuzz testing
- Acquired software
- Package monitoring
Threat Intelligence
- Threat intelligence
- Intelligence sharing
- Threat hunting
Vulnerability Management
- What is vulnerability management
- Identify scan targets
- Scan configuration
- Scan perspective
- Security Content Automation Protocol (SCAP)
- Common Vulnerability Scoring System (CVSS )
- Analyzing scan reports
- Correlating scan results
- Vulnerability response and remediation
Penetration Testing and Exercises
- Penetration testing
- Responsible disclosure
- Bug bounty
Security Alerting, Monitoring, and Automation
- Logging security information
- Security information and event management
- Monitoring activities
- Endpoint monitoring
- Automation and orchestration
Secure Protocols
- TLS and SSL
- IPSec
- Securing common protocols
- DKIM, DMARC, and SPF
- Email gateways
Identification
- Identification, authentication, authorization, and accounting
- Usernames and access cards
- Biometrics
- Registration and identity proofing
Authentication
- Authentication factors
- Multifactor authentication
- Something you have
- Password policy
- Password managers
- Passwordless authentication
- Single sign-on and federation
- Kerberos and LDAP
- SAML
- OAUTH and OpenID Connect
- Certificate-based authentication
Authorization
- Understanding authorization
- Mandatory access controls
- Discretionary access controls
- Access control lists
- Advanced authorization concepts
Account Management
- Understanding account and privilege management
- Privileged access management
- Provisioning and deprovisioning
Incident Response
- Build an incident response program
- Incident identification
- Escalation and notification
- Mitigation
- Containment techniques
- Incident eradication and recovery
- Post-incident activities
- Incident response training and testing
Digital Forensics
- Introduction to forensics
- System and file forensics
- Chain of custody
- E-discovery and evidence production
- Investigation data sources
Domain 5 - Security Program Management and Oversight
- Security program management and oversight
Security Policies
- Security policy framework
- Security policies
- Security standards
- Security procedures
- Policy monitoring and revision
- Policy considerations
Security Governance
- Security governance structures
- Data security roles
Risk Analysis
- Risk assessment
- Quantitative risk assessment
- Business impact analysis
- Risk treatment options
- Risk visibility and reporting
- Ongoing risk assessment
- Security metrics
Supply Chain Risk
- Managing vendor relationships
- Vendor agreements
- Vendor information management
Privacy and Compliance
- Legal and compliance risks
- Compliance monitoring and reporting
Auditing
- Audits and assessments
Conclusion
- Continuing Your Studies