CompTIA Security+ SY0-601 Lab Course with Simulations/PBQ

Learn the IAAA framework—identification, authentication, authorization, auditing, and accountability—and how log files and non-repudiation deter intrusions and hold users accountable.

Identify basic security controls, including user training, endpoint protection, encryption, access controls, and physical safeguards, to defend against phishing, malware, and unauthorized access.

Explore ransomware and crypto malware, how they encrypt data and demand ransom, and how to prevent infections via backups, email links, and antivirus.

Explore keyloggers, including software and hardware variants, and how they capture keystrokes, passwords, and screen activity. Learn defenses such as updated antivirus, firewalls, and physical inspection to protect data.

Learn to identify cross-site scripting and injection attacks, their impact on web apps, and how input validation and sanitization defend against them.

Explore bluesnarfing and bluejacking, bluetooth attacks that grant unauthorized access to calendars, contacts, emails, messages, photos, and videos; learn to mitigate by turning off discovery mode and updating devices.

Watch a live demonstration of cracking WEP with Kali Linux, using a single command and an IV attack to expose why WEP should never be used for wireless security.

Explore wireless disassociation and deauthentication attacks and jammers, showing how Kali Linux can disconnect devices while highlighting legal and ethical considerations for wireless security testing.

Explain how switches use mac addresses and cam tables to forward traffic, and how mac flooding can turn a switch into a hub, use mac cloning to spoof a NIC.

Learn about malicious code and script execution across Windows and Linux, including PowerShell, Python, Bash, and VBA macros, and how anti-malware and regular updates stop these threats.

Explore threat intelligence sources—from open source intelligence and OS frameworks to vulnerability databases and indicators of compromise—for ethical hacking and pen testing.

Explore the organizational impacts of hacking and compromised vulnerabilities, including data loss and breaches, ransomware, financial loss, and damaged reputation, with emphasis on backups, regulatory risk, and legal jeopardy.

Explore how SIEM systems centralize log collection, analyze security events, and generate alerts, then see how SOAR automates threat response to strengthen security operations.