Security+ (SY0-701) - Ultimate Guide - 1900+ MCQs & 140 PBQs

Explore the main types of security controls—technical, managerial, operational, and physical—and learn how preventive, detective, corrective, compensation, deterrent, and directive measures form a layered security approach.

Explore the CIA triad—confidentiality, integrity, availability—along with non-repudiation, authentication, authorization, and accounting, and examine zero trust and honeypot-based defenses for layered security.

Implement formal change management to review and approve modifications, identify security risks, and minimize disruptions. Define ownership, involve stakeholders, perform impact analysis, and follow procedures to safeguard systems during changes.

Explore why choosing appropriate cryptographic tools matters, covering PKI, public and private keys, encryption types, key management, digital signatures, and trusted certificate infrastructures to protect data.

Explore nation state actors, hacktivists, insider threats, and organized crime, detailing their goals—from theft and financial gain to political influence and espionage.

Identify threat vectors and attack surfaces across emails, texts, calls, apps, and removable media in this module. Learn to recognize phishing, smishing, vishing, impersonation, and social engineering.

Identify common vulnerabilities across apps, systems, and hardware. Learn memory injection, buffer overflow, race conditions, malicious updates, web flaws like SQL injection and XSS, and mitigation strategies.

Spot indicators of malicious activity by analyzing malware types, from ransomware and trojans to worms and spyware, and learn defenses against brute force, DDoS, and DNS attacks.

Explore how mitigation techniques—segmentation, access control, access control lists, permissions, application allow lists, isolation, patching, encryption, and monitoring—strengthen enterprise security and enforce least privilege across assets.

Compare the security implications of architecture models across cloud, on-prem, and hybrid setups, including IAC, serverless, microservices, and virtualization.

Apply security principles to secure enterprise infrastructure by strategically placing devices and creating security zones, while using jump servers, firewalls, IPS/IDS, and proxies to reduce attack surface.

Compare data types and protection strategies across regulated data protected by HIPAA and GDPR, trade secrets, and intellectual property. Apply encryption, access controls, and data classification to safeguard sensitive information.

Discover how resilience and recovery sustain high availability in security architecture through load balancing, clustering, platform diversity, multi-cloud integration, hot/warm/cold sites, and backups.

Apply common security techniques to computing resources by establishing secure baselines, deploying configurations, monitoring for compliance, and hardening mobile devices, network devices, cloud infrastructure, and IoT.

Learn how to securely manage hardware, software, and data assets through ownership, cataloging, monitoring, data classification, and disposal policies to reduce risks and ensure compliance.

Identify, analyze, and fix vulnerabilities through penetration testing, vulnerability scanning, and threat intelligence to strengthen security; prioritize risks using CVSS, CVE, patching, and segmentation for a proactive defense.

Master essential security monitoring concepts: vigilant asset tracking, log aggregation, real-time alerting with anomaly detection, vulnerability scanning, reporting and archiving, incident response, scap, and siem-driven compliance.

Strengthen enterprise security by hardening firewalls and ACLs, managing ports and protocols, deploying IDS/IPS, web filters, DNS filtering, email protections, and NAC for device visibility.

Master identity and access management by provisioning and deprovisioning accounts, enforcing least privilege, and using MFA, SSO, federation, and RBAC/ABAC controls.

Automation and orchestration streamline onboarding, resource provisioning, and incident response in secure operations, enforcing guardrails and security baselines while enabling scalable, compliant IT infrastructure.

Plan, prepare, detect, analyze, contain, eradicate, and recover from security incidents, then apply lessons learned to improve future readiness and safeguard systems and data.

Use diverse data sources, especially logs from firewalls, endpoints, and applications, to analyze incidents. Incorporate vulnerability scans, dashboards, and packet captures to visualize trends and build a complete incident timeline.

Strengthen organizational resilience by implementing comprehensive security governance with a clear vision, defined roles, risk management, and security controls, while ensuring regulatory compliance and proactive incident preparedness.

Identify and assess risks and analyze their impact using qualitative and quantitative methods, then apply business impact analysis and recovery objectives to sustain operations and resilience.

Evaluate and manage third-party risks by assessing vendors, monitoring performance, and applying contracts and audits, including service level agreements (sla) and non-disclosure agreements (nda), for secure partnerships.

Explore effective security compliance through internal and external reporting and privacy regulations. Understand data ownership, data subjects' rights, controller and processor roles, and retention and breach notifications.

Explore types of audits and assessments, from internal compliance audits and attestation to external audits, examinations, and regulatory assurance, with penetration testing and reconnaissance to strengthen security and compliance.

Spot phishing scams, verify requests through trusted channels, and implement a comprehensive security awareness program with training, policies, incident reporting, and continuous monitoring.