CompTIA Security+ SY0-701 with Cloud and Networking

Explore hands-on lab activities for the CompTIA Security+ SY0-701 certification, emphasizing cloud and networking concepts through practical security exercises.

Provide hands-on lab guides covering Cisco switch routers, next generation firewalls and IPS VPN configurations, F5 app load balancers and wafs, AWS balancers and IAM, and Linux penetration testing tools.

Gain an overview of security basics within the CompTIA Security+ SY0-701 framework, focusing on cloud and networking concepts essential for foundational cybersecurity.

Minimize security incidents by implementing preventive controls such as hardening, training and awareness, change management, security platforms like IPS, firewalls, next-generation firewalls, and WAF, and account disablement and suspension policies.

Detective controls monitor and detect security incidents after they occur, using log monitoring, CM, security audits, video surveillance, motion detection, and threat detection solutions such as IDS and NDR.

Corrective and recovery controls fix incidents and restore normal operations, while backups, disaster recovery, and incident handling support business continuity against disruptions.

Explain compensating controls as alternative, backup methods that replace primary controls when standard access methods falter, enabling temporary access. Use time-based OTP and IAM policies to grant elevated rights briefly.

Response controls, including physical and system response controls, prepare for and respond to security incidents, from malware on servers to natural disasters and ransomware.

Explore network fundamentals overview within the CompTIA Security+ SY0-701 framework, highlighting core networking concepts, cloud considerations, and essential security practices.

Examine point-to-point network connectivity and the physical layer, including wires, ports, and the NIC, then explore MAC and IP addresses and Ethernet data-link protocols.

The ethernet switch, a layer two device, learns mac addresses via the cam table and floods unknown destinations until PCB's MAC is learned, then forwards to the correct port.

Explore how a local area network (intranet) uses private IP addresses and a single broadcast domain, and connects to the internet via a layer three router to access popular apps.

Explore the OSI model, a seven-layer framework by ISO for secure, structured network communication; cover lower layers, frames, MAC addresses, VLAN tagging, and routing basics.

Explore IP addressing by examining a 32-bit, four-octet address, its network and host parts, the slash 24 prefix, and usable and broadcast addresses in 192.168.1.0/24.

To accommodate 400 IP addresses, borrow one host bit to convert slash 24 to slash 23, yielding 510 usable addresses with clear network and broadcast boundaries.

Explore the tcp/ip model, its four layers—network access, internet, transport, and application—and compare it with osi, covering routing tables, layer-3 devices, and icmp with ttl.

Configure point-to-point networks by connecting two routers with a /30 subnet on 192.168.1.0, yielding only two usable IPs (.1 and .2) while network and broadcast addresses remain.

Convert IP prefixes to netmask values by analyzing network and host bits, using examples like /24, /23, and /30 to derive 255.255.255.0, 255.255.254.0, and 255.255.255.252.

Explore configuring IP addresses on layer two and layer three devices, including switch ports, routers, and out-of-band management interfaces, with practical Windows, Linux, and VLAN considerations.

Compare IPv4 private and public address classes and explain IPv6's 128-bit space, representation rules, and security implications for firewalls and transitions.

Udp is a core, connectionless transport protocol offering a simple, unreliable datagram service without sessions or sequencing, ideal for fast apps like voice over IP, with spoofing and encryption risks.

Explore tcp as a connection oriented protocol with error checking, reliability, sequencing, three way handshake, and sliding window flow control, and note tcp security risks like syn flood and hijacking.

Explore how VLANs segment broadcast domains into multiple logical networks using a single switch, configuring VLAN 10 and VLAN 20 with uplinks to enable inter-switch communication.

Learn how 802.1Q trunks carry multiple VLANs across switches, such as VLAN 10 and 20, with endpoints on access ports.

Set up two vlans on layer-two switches, then introduce a layer-three device as the default gateway to enable inter-vlan routing between 192.168.10.0/24 and 192.168.20.0/24 using a routing table.

Explains inter vlan communication using a layer three switch with a trunk link, creating svi for vlan ten and vlan 20, with default gateways 192.168.10.254 and 192.168.20.254.

Explore how network architecture underpins security and how network segmentation uses VLANs, subnets, and strict routing to isolate segments, reduce attack surface, and protect resources.

Examine a three-router setup linking 192.168.10.0 and 192.168.20.0 networks across branch A and data center A, focusing on interfaces and routing tables to connect PCA with servers C and D.

Configure static routes using the ip route command on Cisco devices and route add on linux to reach 192.168.13.0/30 and 192.168.32.0/30 via next-hop addresses, updating routing tables for bidirectional reachability.

Learn how network address translation enables private IPs to reach the internet by translating to public IPs. Explore port address translation, static NAT mappings, and default routes.

Compare enterprise versus data center network architectures and explain how zero trust applies across them, emphasizing no implicit trust, micro-segmentation, continuous authentication, least privilege, MFA, endpoint security, and encryption.

Explore network and application use cases to reveal security implications in cloud and networking, addressing CompTIA Security+ SY0-701 objectives.

Explore tcp-based applications such as http/https, telnet, ssh, sftp, ftp, smtp, imap, pop3, ldap, and udp-based services like dns, dhcp, tftp, snmp, syslog, ntp, plus rtp, srtp, sip.

explains active ftp by showing the client connecting to the server on port 21 for commands, while data transfers use a separate port on 20 initiated from the server.

Explore email protocols—smtp and its TLS-secured variant smtp s on port 25 and 465—and learn how TLS encrypts outgoing mail. Compare pop3 and imap4 retrieval: pop3 downloads and may remove messages on port 110 or 995 with pop3s; imap4 manages mail on the server with imaps on port 993.

Explore how http runs over tcp port 80 in a client-server model, with dns resolving urls to ip, contrast https on port 443 and static dynamic interactive pages.

Learn how http uses tcp as a connectionless protocol: complete the handshake to form a session, send http requests, and receive responses after reconnecting with images, text, or pdf.

Explore the client–server model with the TCP three-way handshake and HTTP requests, and learn the lamp stack—linux, apache, mysql, php—and common web servers.

Telnet is an insecure network protocol that enables text-based remote access over TCP/IP, default port 23, often requires only a password, exposing credentials to sniffing and man-in-the-middle attacks.

Learn how SSH replaces telnet to securely access remote systems, using port 22, and supporting password or key-based authentication, plus secure file transfer with SFTP and SCP.

Synchronize clocks across networks with the network time protocol (NTP) to ensure accurate timestamps for servers, devices, TLS certificates, and authentication processes.

Explain the DHCP four‑way exchange (discover, offer, request, acknowledge) over UDP ports 67/68, with broadcast and unicast, delivering IP, subnet mask, default gateway, and DNS.

Gain an overview of network and security solutions aligned with CompTIA Security+ SY0-701, with key cloud and networking considerations to strengthen cybersecurity.

Explore how ethernet switches operate at layer two, forward data using mac addresses, learn mac address tables and VLANs, and implement security like DHCP snooping, mac filtering, and 802.1X.

Configure port security on a 48-port switch to allow traffic only from defined MAC addresses, and automatically shut down the interface when a rogue host violates the policy.

Routers operate at layer three to connect networks, direct data traffic using routing tables and destination IPs, and provide NAT, ACL firewall features, VPN, DDoS protection, and logging.

Learn how router access control lists (ACLs) implement permit and deny rules using source and destination IPs, protocol, and layer seven ports, including implicit deny and interface application.

Firewalls act as a network security barrier, filtering traffic by rules to protect internal networks and regulate data across security zones. Learn stateless, stateful, and application layer filtering.

Explain stateless firewall basics using a client–router–server topology and ACLs to permit http traffic on port 80, illustrating the syn and syn-ack steps in the tcp handshake.

Compare stateless and stateful firewalls. Implement a stateful firewall with a security policy for a web server on port 80, highlighting inbound and return traffic via deep packet inspection.

Explore how intrusion prevention systems sit inline at the network edge to detect and block or monitor malicious traffic before it reaches the internal network, using signature-based and behavioral-based methods.

Learn how intrusion detection systems monitor and analyze traffic using port taps and span mirrors in inline and non-inline designs, detecting threats with signature and behavioral methods without blocking.

Explore Cisco firepower next generation firewall architecture, including firewall, IPS, malware protection, content filtering, and the FMC management center, and learn how policies and zone-based inbound/outbound rules control traffic.

Understand forwarding proxies, also called proxy servers and HTTP proxies, for outbound web traffic, how they hide user devices, enable authentication, filter sites, and provide caching and acceleration.

Learn how a reverse proxy acts as a load balancer, distributing inbound HTTP requests across multiple servers with caching and filtering. Contrast reverse proxies with forwarding proxies for outbound security.

Understand forwarding proxies providing anonymity, content filtering, and caching to improve performance, while reverse proxies and load balancers distribute traffic for reliability, with application load balancers featuring WAF.

Discover how F5 Big-IP acts as a layer seven application delivery controller and load balancer, routing traffic across pool members via virtual servers and modules such as LTM and DNS.

Explore how web application firewalls shield web apps from evolving attacks and API threats, using signature-based and behavioral rules, traffic inspection, and monitoring, with deny and captcha responses.

Explore how F5 BIG-IP ASM and advanced WAF defend web apps by applying security policies and blocking mode, using signatures and behavioral analysis against OWASP top ten and PCI DSS.

SD-WAN extends software defined networking to the wide area network, centralizing control and dynamically routing traffic with edge devices, a central controller, and multiple transport options.

Explore a network security overview within cloud and networking contexts, aligned with CompTIA Security+ SY0-701.

Compare intrusion detection systems and intrusion prevention systems, detailing out-of-band versus inline deployment, signature, anomaly, and behavioral detection, and how these enable threat analysis, logging, blocking, and zero-day protection.

Learn sensor placement for ids and ips on internet and internal sides, interpret true/false positives and alarms, explore deception techniques like honeypots and decoy accounts, with tuning and signature updates.

Explore next generation ids and ips in a next generation firewall, covering real-time blocking, automated threat intelligence, and application awareness with inline deployment and failover considerations.

Explore how spanning tree protocol prevents loops in ethernet networks by electing a root bridge, exchanging bpdus, and managing designated ports and port states.

Explore how the spanning tree protocol prevents loops and broadcast storms by electing the root bridge, designating blocking ports, and using BPDU filter or BPDU guard against rogue switches.

Learn how virtual private networks secure data on public networks, enabling site-to-site and remote access VPNs with IPsec, AH, ESP, and TLS, and understand tunnel versus transport modes.

Explore split tunneling versus full tunneling in ipsec remote access vpn. Define networks like 192.168.1.0 and 192.168.10.0 as accessible via the vpn, while other traffic uses the headquarter network.

Compare split tunnel and full tunnel VPNs, TLS and HTML5 remote access, and various tunneling technologies such as GRC, L2tpv3, Dmvpn, VDI, and flex VPN.

Learn how IEEE 802.1X provides network access control by authenticating supplicants through an authenticator and authentication server, with wired and wireless deployment using username, password, or MAC address.

Demonstrates configuring an authentication server using Radius for client authentication, integrating with Active Directory, and building authorization policies that map groups to VLANs and internet-only access.

Network access control enforces policies by authenticating devices and users via 802.1x, EAP over LAN, and Radius, then authorizes VLAN 100 or internet access based on user group.

Configure health checks and posture assessment within network access control to verify antivirus, patch level, and host firewall on a supplicant via an agent, enabling 802.1x authentication and compliance-based authorization.

Explore AAA-enabled NAC that authenticates, authorizes, and accounts for network access using supplicant, authenticator, and authentication server roles, with Radius or Tacacs+ protocols.

Explore remote VPN authentication using triple A, centralize access with Radius and Tacacs+, and compare PAP versus CHAP while noting jump servers and Kerberos with Active Directory.

Examine wireless security fundamentals within the CompTIA Security+ SY0-701 framework, covering threat landscapes, authentication methods, and best practices for protecting wireless networks in cloud and networking environments.

Explore wireless networks as a LAN using ethernet at layer two, covering Wi‑Fi and IEEE 802.11 standards, access points, Bluetooth, 5G/LTE, and the enterprise role of wireless LAN controllers.

Explore wireless SSIDs, including standard, hidden, and multiple types, and how VLAN association, AAA, Radius, WPA2 or WPA3, and QoS shape secure, segmented wireless access.

Explores wireless solutions and deployments, detailing autonomous and lightweight access points, centralized wireless controllers, and outdoor mesh networks, with 802.1X, WPA2 enterprise, AES, rogue access point detection, and RBAC.

Plan, deploy, and optimize wireless infrastructure by evaluating physical and radio frequency environments for WiFi 802.11 networks, using WiFi analyzers, heat maps, and spectrum analyzers.

Discover how wireless cryptography protects wireless networks broadcast over air by moving from weak WEP and WPA protocols to WPA3, using AES with CMP, and enabling 802.1x and radius authentication.

Explore wireless authentication and authorization mechanisms, from open and PSK networks to 802.1x with radius, and review EAP variants and captive portals used in enterprise wireless.

Captive portal redirects unauthenticated guests to a page to accept terms or enter credentials, serving as an authentication method and alternative to 802.1x for internet access.

Explore common wireless attacks, including rogue access points, evil twin, authentication disruption, and wireless eavesdropping, and learn detection and mitigation techniques to protect networks.

Explore brute force attacks on Wi-Fi Protected Setup with eight-digit pins and how WPA3 mitigates these weaknesses, along with wardriving, jamming, and IV-based attack concepts.

Secure mobile devices as wireless endpoints with MDM, enforce MFA, enable encryption, and support deployments such as corporate owned or BYOD.

Explain how mobile device management enforces security policies, application management, and storage segmentation across smartphones, tablets, and wearables, while unified endpoint management expands to laptops and desktops.

Apply mdm enforcement and monitoring to corporate and BYOD devices, blocking devices and unauthorized apps. Restrict hardware and connection features, manage messaging risks, and note rcs as a secure alternative.

Compare Android and iOS security models, highlighting app distribution, sandboxing, and update practices; conclude that iOS offers tighter control and faster updates, while Android provides flexibility with stronger device variety.

Explore network and security command-line tools, and gain an overview of how they support cloud and networking environments.

Discover Linux, a unix-like open source kernel by Linus Torvalds in 1991, and explore its freedom-driven, community-led development powering servers, cloud, IoT, embedded devices, and security testing tools.

Master essential Linux commands for file and directory operations and core system tasks, including pwd, ls, cd, mkdir, rm, cp, mv, cat, echo, grep, ps, top, and df.

Compare ifconfig and ipconfig for interface configuration and status; explore ping, hping, pathping, traceroute, netstat, and route for testing and diagnosing Linux networks.

Learn how Linux services run as background daemons on servers, providing web hosting, network access, and file sharing, with sshd, apache2, nginx, named, postfix, ntpd, samba, and MySQL or PostgreSQL.

Learn to apply reconnaissance and discovery in ethical hacking and security assessment, using nmap, recon-ng, dnsrecon, and shodan command line interface for asset identification, monitoring, and security design.

Explore lamp, the Linux web development stack (Linux, Apache, MySQL, and PHP), and compare it with Mean and Django stacks for building web applications.

Explore the Linux file system and its hierarchical structure, detailing directories such as /home, /etc, /var, /bin, /sbin, /mount, /tmp, and /root, and key configuration files like /etc/netplan and /etc/resolv.conf.

Centralized logging aggregates logs from devices and networks into one repository for easier management, faster analysis, and improved security readiness using syslog protocols, syslog-ng, annex logging, and Windows event logs.

Explore endpoint security fundamentals and defenses in cloud and networking environments, aligning with the CompTIA Security+ SY0-701 objectives.

Explore server virtualization, decoupling software from hardware to run multiple virtual machines with type 1 and type 2 hypervisors like VMware ESXi, Hyper-V, Red Hat KVM, and VDI.

Learn how type 1 hypervisors like VMware ESXi function as management interfaces on servers, enabling VM provisioning with templates and VLAN-based port groups, plus basic VDI and zero client concepts.

Explore virtualization security with hypervisor escape risks, patch management, and detecting VM attacks. Learn about VM sprawl, lifecycle policies, and the role of snapshots and replication for safe backups.

Explore containers as a lightweight, portable alternative to virtual machines, and learn how a container engine builds, isolates, and manages containers on a Linux host.

Contrast containerization with host-based virtualization, showing how containers use a Linux kernel and a Docker container engine to run lightweight applications without a full guest OS.

Explore configuration management that enforces secure, consistent baselines across hosts using imaging and centralized tools like VMware vCenter, with automation via Ansible and robust patch and change management.

Implement application control to whitelist approved software and blacklist unapproved apps, centralized via software inventory management, enabling patch and vulnerability management, while sandboxing isolates new software to reduce attack surfaces.

Discover how APIs enable cross-system communication and fast, scalable microservices, while applying OAuth 2.0, API keys, HTTPS, and input validation.

Discover hardware-based security on endpoints, including full disk encryption, self-encrypting drives, TPM, HSM, and UEFI secure boot, and how they protect data at rest and verify boot integrity.

Protect host data at rest and in transit with encryption, access controls, and audits; use data loss prevention to detect unauthorized transfers, mitigate data exfiltration, and curb removable media risk.

Compare antivirus, anti-malware, HIDS/HIPS, EDR, and XDR to understand their scope, features, and how they complement each other across endpoints, with centralized data and cross-layer detection.

Explore operational technology security, defining OT, its legacy systems and safety focus, and learn OT-specific risks, attacks, and defense strategies like network segmentation and anomaly detection, and tailored wireless options.

Explore the internet of things, a network of devices collecting and exchanging data across healthcare, transportation, agriculture, and manufacturing, and secure it with encryption, authentication, access controls, and updates.

Explore programmable embedded systems like microcontrollers, FPGAs, PLCs, and embedded Linux, and learn to secure them with firmware encryption, secure boot, and access controls.

Secure ICS and SCADA by implementing network segmentation, asset discovery, and access controls, while monitoring OT-aware threats, coordinating patch management, and planning incident response.