CompTIA Security+ (SY0-701) Training

CompTIA Security+ (SY0-701) Course

• Domain 01: General Security Concepts

  • 1.01 Introduction to Security Concepts

  • 1.02 CIA

  • 1.03 Non-Repudiation

  • 1.04 AAA (Authentication, Authorization, and Accounting)

  • 1.05 Gap Analysis

  • 1.06 Zero Trust Architecture and Defense in Depth

  • 1.07 Physical Security

  • 1.08 Deceptive Technology

  • 1.09 Types of Security Controls

  • 1.10 Importance of Change Management Processes and the Impact to Security

  • 1.11 Introduction to Cryptography

  • 1.12 Cryptography around Us

  • 1.13 Steganography

  • 1.14 Masking, Obfuscation and Tokenization

  • 1.15 Symmetric and Asymmetric Cryptography

  • 1.16 Hashing Process

  • 1.17 Digital Signature Process

  • 1.18 Public Key Infrastructure

  • 1.19 Key Management

  • 1.20 Block Chain and Open Ledger

• Domain 02: Threats, Vulnerabilities, and Mitigations

  • 2.01 Threat Actors

  • 2.02 Attributes of Actors

  • 2.03 Intent or Motivation

  • 2.04 Attack Vectors

  • 2.05 Common Threat Vectors and Attack Surfaces

  • 2.06 Assisted Practice: Enhancing Server Security

  • 2.07 Indicators, Indicators of Compromise and Indicators of Attack

  • 2.08 Assisted Practice: Investigating DoS and MITM Attacks Using Wireshark

  • 2.09 Malware Attack

  • 2.10 Assisted Practice: Analyzing Malware Reports Using Virus Total

  • 2.11 Physical Attack

  • 2.12 Network Attack

  • 2.13 Cryptographic Attacks

  • 2.14 Password Attacks

  • 2.15 Application Attacks

  • 2.16 Mitigation Techniques to Secure the Enterprise

  • 2.17 Assisted Practice: Implementing Public Key Infrastructure

  • 2.18 Assisted Practice: Generating a Web Server Certificate

• Domain 03: Security Architecture

  • 3.01 Security Implications of Different Architecture Models

  • 3.02 Security Principles to Secure Enterprise Infrastructure

  • 3.03 Unified Threat Management (UTM)

  • 3.04 Unified Threat Management (UTM)

  • 3.05 Next-Generation Firewall (NGF)

  • 3.06 Web Application Firewall

  • 3.07 Proxy Server

  • 3.08 Intrusion Detection and Prevention System

  • 3.09 Virtual Private Network

  • 3.10 Network Access Control

  • 3.11 Concepts and Strategies to Protect Data

  • 3.12 Privacy Regulations

  • 3.13 Data Protection Controls

  • 3.14 Data Classification

  • 3.15 Business Continuity Planning

  • 3.16 High Availability

  • 3.17 Site Consideration

  • 3.18 Backups

  • 3.19 Power

  • 3.20 Cloud Data Replications

  • 3.21 Testing

  • 3.22 Platform Diversity

  • 3.23 Multicloud

  • 3.24 Capacity Management

• Domain 04: Security Operations

  • 4.01 Establishing Baselines

  • 4.02 Hardening of Devices

  • 4.03 Wireless Technologies

  • 4.04 Mobile Management and Security

  • 4.05 Application Security

  • 4.06 Sandboxing

  • 4.07 Monitoring

  • 4.08 Security Implications of Proper Hardware, Software, and Data Asset Management

  • 4.09 Vulnerability Assessment

  • 4.10 System and Process Audit

  • 4.11 Assisted Practice: Scanning Local VM Using Nessus

  • 4.12 Assisted Practice: Scanning Local VM Using Nessus Security Alerting and Monitoring Concepts and Tools

  • 4.13 Modifying Enterprise capabilities to Enhance Security

  • 4.14 Modifying Enterprise capabilities to Enhance Security

  • 4.15 Web Application Firewall

  • 4.16 Intrusion Detection and Prevention System

  • 4.17 OSI, TCP/IP and Protocols

  • 4.18 Web Filtering Technologies

  • 4.19 Operating System Security

  • 4.20 Email Security

  • 4.21 Antivirus, Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR)

  • 4.22 Secure Protocols

  • 4.23 Assisted Practice: Configuring Proton VPN

  • 4.24 Assisted Practice: Implementing Network Segmentation and VLANs

  • 4.25 Implementing and Maintaining Identity and Access Management

  • 4.26 Multi-Factor Authentication (MFA)

  • 4.27 Assisted Practice: Implementing Multi-Factor Authentication (MFA)

  • 4.28 Type 1 Authentication: Password

  • 4.29 Type 2 Authentication: Tokens

  • 4.30 Type 3 Authentication: Biometric

  • 4.31 Passwordless Authentication

  • 4.32 Authorization and Accounting

  • 4.33 Federation Identity Management

  • 4.34 Federation Identity Management Standards

  • 4.35 Single Sign On

  • 4.36 Privilege Access Management

  • 4.37 Implementing and Managing Authorization Mechanisms

  • 4.38 Manage the Identity and Access Provisioning Lifecycle

  • 4.39 Assisted Practice: Installing Active Directory and Creating a User

  • 4.40 Assisted Practice: Configuring Logon Hours in Active Directory

  • 4.41 Importance of Automation and Orchestration Related to Secure Operations

  • 4.42 Incident Response Activities

  • 4.43 Digital Forensics

  • 4.44 Use of Data Sources to Support Investigations

  • 4.45 Assisted Practice: Using Event Viewer to Implement Logging and Forensic Analysis

  • 4.46 Assisted Practice: Implementing encryption solutions for data at rest using AESCrypt

  • 4.47 Assisted Practice: Using ROHOS Disk Encryption

• Domain 05: Security Program Management and Oversight

  • 5.01 Security Policy, Standards, Procedures, and Guidelines

  • 5.02 Different types of Policies

  • 5.03 Standards

  • 5.04 Procedures

  • 5.05 Guidelines

  • 5.06 External Factors

  • 5.07 Monitoring and Revision

  • 5.08 Roles and Responsibilities for Systems and Data

  • 5.09 Governance

  • 5.10 Elements of the Risk Management Process

  • 5.11 Third-Party Risk Assessment and Management

  • 5.12 Vendor Assessment

  • 5.13 Vendor Selection

  • 5.14 Vendor Monitoring, Questionnaires and Rules of Engagement

  • 5.15 Summarize Elements of Effective Security Compliance.

  • 5.16 Consequences of Noncompliance

  • 5.17 Consequences of Noncompliance

  • 5.18 Compliance Monitoring

  • 5.19 Privacy

  • 5.20 Types and Purposes of Audits and Assessments

  • 5.21 Phishing

  • 5.22 Anomalous Behavior Recognition

  • 5.23 User Guidance and Training

  • 5.24 Reporting and Monitoring