CompTIA Security+ (SY0-701) Cert Prep: 1 General Security Concepts

Course details

The CompTIA Security+ exam is an excellent entry point for a career in information security. The latest version, SY0-701, expands coverage on cloud security, security automation and orchestration, cryptography, threat modeling, and security assessment and testing. Instructor Mike Chapple, an IT leader with 20 years of experience, provides you with the detailed information you need to prepare for the SY0-701 Security+ exam. This first course of a multi-part series covers the first domain of the exam: General Security Concepts. Join Mike to learn about fundamental security concerns, the importance of change management, and the use of appropriate cryptographic solutions.

Concepts

Introduction

Security concepts

Fundamental Security Concepts

The goals of information security
Authentication, authorization, and accounting (AAA)
Categorizing security controls
Conducting a gap analysis
Zero Trust
Physical access control
Physical security personnel
Deception technologies
Change management

Cryptography

Understanding encryption
Symmetric and asymmetric cryptography
Goals of cryptography
Choosing encryption algorithms
The cryptographic lifecycle
Data de-identification
Data obfuscation

Symmetric Cryptography

Data Encryption Standard (DES)
3DES
AES, Blowfish, and Twofish
Steganography

Asymmetric Cryptography

Rivest, Shamir, Adleman (RSA)
PGP and GnuPG
Elliptic-curve and quantum cryptography
Tor and perfect forward secrecy

Key Management

Key exchange
Diffie-Hellman
Key escrow
Key stretching
Hardware security modules

Public Key Infrastructure

Trust models
PKI and digital certificates
Hash functions
Digital signatures
Digital signature standard
Create a digital certificate
Revoke a digital certificate
Certificate stapling
Certificate authorities
Certificate subjects
Certificate types
Certificate formats

Cryptographic Applications

TLS and SSL
Blockchain

Conclusion

Continuing your studies