CompTIA Security+ (SY0-701) Complete Course & Practice Exam

Explore the four major security control categories—technical, managerial, operational, and physical—and compare preventative, detective, corrective, compensating, deterrent, and directive controls to uphold a defense-in-depth security posture.

Explore fundamental security concepts for the Security+ (SY0-701) course, including the CIA triad, triple A, and zero trust architecture, with emphasis on confidentiality, integrity, and availability.

explore authentication, authorization, and accounting (AAA) with the factors something you know, have, and are, and examine LDAP and Active Directory for access control.

Explore zero trust architecture as a policy-driven, framework-based approach that assumes breach, never trusts automatically, enforces least privilege, and continuously verifies identities, devices, and networks.

Explore physical security concepts in domain 1.2.4 and apply deterrent, detective, and preventative controls like bollards, mantraps, badges, alarms, CCTV, signage, lighting, fencing, and air gaps to protect assets.

Explore deception technologies in domain 1.2.5, including honeynets, honeypots, honey files, and honey tokens, to mislead attackers and enhance threat detection and threat intelligence.

Explore how policy decisions create technical security implications, including allow list and deny list, downtime, service restarts, and legacy applications, while emphasizing documentation and version control in change management.

Delve into domain 1.3 change management and its impact on security, covering approval processes, risk and impact analysis, ownership, stakeholders, and documentation with version control.

Explore encryption fundamentals, comparing symmetric and asymmetric algorithms, key exchange, and digital signatures, with examples like AES, RSA, Diffie-Hellman, and TLS cipher suites.

Explore encryption levels from full disk to file and volume encryption, review in transit protections with SSL/TLS, IPsec, and VPNs, and how AES, RSA, ECC key lengths affect strength.

Explore how public key infrastructure powers TLS/SSL and HTTPS through certificate authorities, CSR workflows, and the chain of trust. Understand root, intermediate, and issuing CAs, plus CRL and Ocsp.

Explore PKI components, including hashing for integrity, digests, and digital signatures for authenticity and non-repudiation, using asymmetric keys and salting, plus blockchain and public ledgers.

Explore cryptographic tools like TPMs and HSMs, and key management systems, plus techniques such as obfuscation, steganography, tokenization, and data masking to secure keys, data, and devices.

Explore domain 2.1 to compare threat actors and their motivations, from nation-state advanced persistent threats to insider threats, script kiddies, hacktivists, and organized crime.

Explore common threat vectors in cybersecurity, including email, SMS, and instant messaging, image and file threats, voice calls, removable media, and vulnerable software, with emphasis on social engineering.

Examine unsecured networks and open ports across wireless and wired systems, with defenses like WPA3, 802.1X, NAC, and port security. Assess supply chain vulnerabilities from MSPs and vendors.

Learn how human vectors drive social engineering attacks like phishing, vishing, and smishing, and apply mitigations such as education, two-factor authentication, email filters, domain verification, and typosquatting awareness.

Explore common vulnerabilities in applications, operating systems, and web-based environments, including memory injection, buffer overflows, race conditions, malicious updates, SQL injection, and cross-site scripting.

Explore hardware vulnerabilities, end-of-life hardware, legacy systems, and firmware security; examine virtualization risks like VM escape; and assess cloud and supply chain vulnerabilities with IAM and secure boot practices.

Explore cryptographic vulnerabilities, misconfiguration risks, and mobile device threats, including weak encryption, improper key management, default credentials, unsecured databases, sideloading, and zero-day exploits.

Explore malware and physical attack indicators, detailing ransomware, trojans, worms, spyware, viruses, keyloggers, logic bombs, rootkits, and defenses like backups, antivirus, and multi-factor authentication, and physical security controls.

Explore DDoS, botnets, amplification and reflected attacks, DNS spoofing, tunneling, hijacking, and on-path threats like man-in-the-middle and SSL stripping, with MFA and encryption.

Explore common application attacks such as SQL/LDAP and command injections, buffer overflows, and directory traversal, plus defense strategies like input validation, memory-safe languages, and least privilege.

Learn to identify attack indicators in domain 2.4.4, including account lockout, concurrent sessions, blocked content, impossible travel, resource use, missing logs, and out of cycle logging with anomaly detection.

Explore enterprise defense strategies with network segmentation (physical and VLAN-based), robust access control and least privilege, ACLs, and application allow lists, plus patching and continuous monitoring.

Learn to enforce configuration baselines across devices, harden systems, securely decommission hardware and data, and implement defense in depth with EDR, XDR, DLP, and host-based protections.

Explore cloud architecture models and infrastructure concepts, including the shared responsibility matrix across IaaS, PaaS, SaaS, and FaaS. Understand hybrid deployments, infrastructure as code, serverless, microservices, and software defined networking.

Compare on-premises infrastructure and cloud, balancing capital and operational expenses, control, and scalability. Explain virtualization and containerization, IoT, ICS/SCADA, RTOS, and high availability.

Explore cybersecurity resilience from load balancing and data replication to backups and cloud region redundancy, incorporating cost, risk appetite, scalability, and recovery planning.

Explore domain 3.2: secure enterprise infrastructure, focusing on infrastructure considerations, security zones, and device placement for defense in depth. Examine attack surface, connectivity, and inline versus monitor security approaches.

Explore network appliances for secure enterprise infrastructure, including jump servers, proxy types, IPS/IDS, load balancers, sensors, port security, 802.1x and EAP, firewalls, web application firewalls, UTM, and VPN concepts.

Explore secure communications with VPNs and tunneling to encrypt data in transit. Compare site-to-site and remote access VPNs, split and full tunnels, IPsec and TLS security.

Examine data types and classifications, including regulated data and trade secrets, and apply encryption, access controls, and data loss prevention to protect intellectual property and financial information.

Examine data life cycle security across at rest, in transit, and in use; apply full disk encryption, memory protections, tokenization, masking, obfuscation, and segmentation with GDPR and PCI DSS awareness.

Explore resilience and recovery in security architecture, focusing on high availability, site considerations, multi-cloud and platform diversity, continuity of operations, and capacity planning.

Apply resilience testing with tabletop exercises, failover simulations, and backups strategies to validate disaster recovery, including on-site/off-site backups, snapshots, replication, and journaling.

Define and deploy secure baselines to harden all infrastructure—mobile devices, workstations, switches, routers, cloud, servers, ICS/SCADA, and embedded IoT—using automation, change management, and continuous monitoring.

Explains wireless device installation, site surveys, heat maps, and wpa2/wpa3 security to optimize access point placement, and outlines mobile device management with enrollment, policy enforcement, and byod deployment models.

Explores wireless security settings including WPA3 and network segmentation, and secures applications with input validation, code analysis, patching, sandboxing, and comprehensive monitoring.

Assess security implications of hardware, software, and data asset management. Explore acquisition, assignment, monitoring, disposal, data sanitation, destruction certification, retention, and asset classification.

Explore vulnerability identification methods, including scanning, static and dynamic application security testing, threat feeds, OSINT, and audits, to validate remediation and strengthen security posture.

Analyze potential incidents by confirming alerts and distinguishing true positives, false positives, and false negatives, then prioritize vulnerabilities using asset value, threat context, and cvss metrics.

implement a timely patch management process to reduce the attack surface, segment networks, apply compensating controls and audits, and verify remediation through rescans and clear reporting.

Explore monitoring computing resources and alerting with centralized log aggregation using Azure Sentinel or Splunk for real-time compliance, forensics, and incident response.

Explore scap for automated hardening and DoD compliance using stig viewer and stig libraries. Compare benchmarks and deploy siem, antivirus, dlp, snmp, netflow, and vulnerability scanners for proactive monitoring.

Explore enterprise security fundamentals with firewalls, ids/ips, and web filtering, including next-gen features like tls inspection, content filtering, and url reputation to harden networks.

Apply Windows group policy and Linux with SELinux to strengthen enterprise OS security. Secure protocols, DNS filtering, and email protection use DMARC, DKIM, SPF, and gateways.

Learn how file integrity monitoring, network access control, EDR/XDR, user behavior analytics, and data loss prevention guard enterprise applications against unauthorized changes, threats, and data exfiltration.

Explore identity and access management (IAM) covering provisioning and deprovisioning lifecycles, least privilege, privilege creep, permission assignments, federation, SSO, MFA, password management, PAM, identity proofing, and attestation.

Explore access control models—mandatory, discretionary, role-based, rule-based, attribute-based—plus least privilege and multi-factor authentication (something you know, something you are, something you have).

Automate user provisioning and resource deployment to enforce guardrails and consistent security policies. Streamline ticketing, escalation, and CI/CD testing to reduce human error and enable proactive threat hunting.

Leverage automation and scripting to save time, enforce baselines with infrastructure as code, and deploy secure, scalable configurations while improving incident response and workforce efficiency.

Explore domain 4.8 incident response by outlining the six steps: preparation, detection, analysis, containment, eradication and recovery, and lessons learned, plus root cause analysis, digital forensics, and evidence preservation.

Apply root cause analysis with five whys and fishbone diagrams to identify incident causes and document historical context. Hunt threats and apply digital forensics to preserve evidence for incident response.

Leverage log data and data sources to support investigations in incident response through log aggregation and continuous monitoring. Analyze firewall, application, endpoint, and OS logs with dashboards for swift insight.

Explore how guidelines, policies, and standards drive security governance, detailing compliance frameworks like HIPAA, PCI DSS, and NIST, plus roles, incident response, and business continuity.

Examine domain 5.1.2 procedures and external considerations, detailing formal change management, onboarding and offboarding with least privilege, non-disclosure agreements, playbooks, and global regulatory compliance.

Examine governance structures, boards, and committees guiding security policy, with PCI DSS and GDE updates, and clarify data owner, controller, processor, and custodian roles for continuous improvement and compliance.

Identify, assess, and analyze organizational risks using risk registers and continuous monitoring, employing qualitative and quantitative methods with concepts like single loss expectancy, exposure factor, and annual loss expectancy.

Explore how a dynamic risk register centralizes identified risks, supports stakeholders, and aligns risk appetite, tolerance, and thresholds with owners and indicators and strategies like transfer, acceptance, avoidance, and mitigation.

Explain risk reporting to stakeholders and perform a business impact analysis to prioritize disruptions, set RTO and RPO targets, and guide recovery decisions.

Explore vendor assessment and selection, risk identification, data protection, audits, and supply chain analysis to strengthen third-party risk management and regulatory compliance.

Explore common agreement types in cybersecurity vendor relationships, including SLA, MOU/MOA, MSA, SOW, NDA, and BPA, and learn how they define scope, responsibilities, and risk management.

Explore internal and external compliance reporting, including internal audits, disclosures, and third-party audits, and examine the consequences of non-compliance, including fines, sanctions, reputational damage, and license loss.

Explore due diligence and due care as proactive compliance practices, emphasizing audits, policy updates, attestations, and data ownership with privacy rights like the right to be forgotten.

Explain attestation, internal and external audits, and related assessments, including SOC reports, audit committees, self assessments, and external regulatory examinations, with a focus on compliance and risk management.

Explore physical, offensive, defensive, and integrated penetration testing, and compare known, partially known, and unknown environments, with reconnaissance types guiding secure, collaborative security assessments.

Learn to recognize phishing campaigns and anomalous behavior, respond to suspicious messages, verify sender domains, and report incidents to security teams to empower ongoing training and awareness.

Delivers domain 5.6.2 guidance on training and development, policy handbooks, awareness, insider threats, digital vigilance, access controls, password management, and security awareness programs for hybrid and remote work.

Explore performance based questions for the CompTIA Security+ exam with Certmaster labs, comparing security control types (technical, operational, and physical), and their detective, preventive, and directive functions.

Cover social engineering techniques in CompTIA Security+ performance based questions, comparing whaling, phishing, and vishing via real scenarios, and discuss email and phone-based attack vectors and basic mitigations.

Learn how digital signatures provide authenticity, integrity, and non-repudiation using private key signing and public key verification, with hashing and RSA examples for Security+ PBQ practice.

Explore PKI concepts and certificate authorities in a CompTIA Security+ PBQ, implementing certificates and managing trust, root and intermediate CAs, and resolving domain name versus IP address certificate issues.

Implement role-based access control with the principle of least privilege, assigning read/write roles to admins, developers, and producers, and use certificate-based authentication for service roles.

Implement secure remote access with a VPN, high-volume capable, using certificate-based authentication and multi-factor verification, reinforced by device validation, contextual monitoring, automated alerts, and encryption in transit and at rest.

Analyze how serverless and microservices affect security for a midsize retailer moving from a monolithic e-commerce app to the cloud, focusing on attack surface, data protection, and vendor lock-in.

Evaluate redundancy strategies for data center and cloud infrastructures, weighing benefits such as multi-vendor support, power redundancy, and resilient backups; recommend cloud infrastructure to meet growth and cost needs.

Identify vulnerabilities by restoring security controls, re-enabling the firewall and intrusion detection system, enforcing https, tightening access controls, auditing configurations, and documenting changes to prevent future incidents.

Implement a secure wireless infrastructure with WPA3-enterprise and EAP-TLS PKI, isolate the wireless network from the core network, and deploy 802.11ax with PMF and 5/6 GHz channels.

Implement mobile device management to isolate enterprise apps, enforce data loss prevention, enable location tracking and geofencing, enable hotspotting, require vpn, and support remote wipe with encryption via hsm cards.

Analyze a security audit to modify enterprise capabilities, enforce https with tls 1.3 and aes-256, enable MFA and geo-ip blocking, and ensure GLBA compliance for a US financial institution.

Analyze incident response pbq scenarios by mapping to the six CompTIA steps—preparation, detection, analysis, containment, eradication, lessons learned—and identify current and next steps across government, bank, and retailer incidents.