Achieve CompTIA Security+ SY0-701 Exam Success

Table of Contents

Chapter 0: Introduction
Passing the CompTIA Security+ Exam
How to Use This Guide
Establishing a Productive Study Routine
Effective Study Techniques and Resources
Time Management and Sustained Focus
Exam Preparation Tips
Understanding the Exam Format and Pitfalls to Avoid
Test-Taking Strategies for Multiple-Choice Questions
Strategies for Performance-Based Questions
General Test-Taking Tips
Moving Forward: Final Steps Before the Exam
Conclusion

Chapter 1: Domain 1: General Security Concepts
1.1 Various Types of Security Controls
Categories
Control Types
1.2 Summarize Fundamental Security Concepts
Confidentiality, Integrity, and Availability
Non-repudiation
Authentication, Authorization, and Accounting (AAA)
Gap Analysis
Zero Trust
Physical Security
Deception and Disruption Technology
1.3 The Importance of Change Management Processes and Impact to Security
Business Processes Impacting Security Operations
Technical Implications
Documentation
Version Control
1.4 The Importance of Using Appropriate Cryptographic Solutions
Public Key Infrastructure
Encryption
Tools
Obfuscation
Hashing
Salting
Digital Signatures
Key Stretching
Blockchain
Open Public Ledger
Certificates

Conclusion
Domain 1 Questions

Chapter 2: Domain 2: Threats, Vulnerabilities, and Mitigations
2.1 Common Threat Actors and Motivations
Threat Actors
Attributes of Threat Actors
Motivations of Threat Actors
2.2 Common Threat Vectors and Attack Surfaces
Message-Based
Image-Based
File-Based
Voice Call
Removable Devices
Vulnerable Software
Unsupported Systems and Applications
Unsecure Networks
Open Service Ports
Default Credentials
Supply Chain
Human Vectors and Social Engineering
2.3 Various Types of Vulnerabilities
Applications
Operating System (OS)-Based
Web-Based
Hardware
Virtualization
Cloud-Specific
Supply Chain
Cryptographic
Misconfiguration
Mobile Devices
Zero-Day
2.4 Indicators of Malicious Activity
Malware Attacks
Physical Attacks
Network Attacks
Application Attacks
Cryptographic Attacks
Password Attacks
Indicators
2.5 Mitigation Techniques Used to Secure the Enterprise
Segmentation
Access Control
Application Allow List
Isolation
Patching
Encryption
Monitoring
Least Privilege
Configuration Enforcement
Decommissioning
Hardening Techniques

Conclusion
Domain 2 Questions

Chapter 3: Domain 3: Security Architecture
3.1 Security Implications of Different Architecture Models
Architecture and Infrastructure Concepts
Infrastructure as Code
Serverless
Microservices
Network Infrastructure
Architecture Security Considerations
3.2 Applying Security Principles to Secure Enterprise Infrastructure
Infrastructure Considerations
Secure Communication and Access
Selection of Effective Controls
3.3 Concepts and Strategies to Protect Data
Data Types
Data Classifications
General Data Considerations
Methods to Secure Data
3.4 Resilience and Recovery in Security Architecture
High Availability
Site Considerations
Platform Diversity
Multi-Cloud Systems
Continuity of Operations and Capacity Planning
Testing
Backups
Power

Conclusion
Domain 3 Questions

Chapter 4: Domain 4: Security Operations
4.1 Applying Common Security Techniques to Computing Resources
Secure Baselines
Hardening Targets
Wireless Devices
Mobile Solutions
Wireless Security Settings
Application Security
Sandboxing
Monitoring
4.2 The Security Implications of Proper Hardware, Software, and Data Asset Management
Acquisition/Procurement Process
Assignment/Accounting
Monitoring/Asset Tracking
Disposal/Decommissioning
4.3 Vulnerability Management
Identification Methods
Analysis
Vulnerability Response and Remediation
Validation of Remediation
Reporting
4.4 Security Alerting and Monitoring Concepts and Tools
Monitoring Computing Resources
Security Alerting and Monitoring Activities
Tools for Alerting and Monitoring
4.5 Modify Enterprise Capabilities to Enhance Security
Firewalls
IDS and IPS
Web Filter
Operating System Security
Implementation of Secure Protocols
DNS Filtering
Email Security
File Integrity Monitoring
DLP
Network Access Control (NAC)
Endpoint Detection and Response (EDR)/Extended Detection and Response (XDR) and User Behavior Analytics (UBA)
4.6 Implement and Maintain Identity and Access Management
Provisioning/Deprovisioning User Accounts
Permissions Assignments and Implications
Identity Proofing
Federation
Interoperability
Attestation
Access Controls
Multifactor Authentication
Password Concepts
Privileged Access Management Tools
4.7 Automation and Orchestration Related to Secure Operations
Use Cases of Automation and Scripting
Benefits of Automation and Orchestration in Secure Operations
Other Considerations for Automation and Orchestration in Secure Operations
4.8 Incident Response Activities
The Incident Response Process
Incident Response Training
Incident Response Testing
Root Cause Analysis
Threat Hunting
Digital Forensics
4.9 Use Data Sources to Support an Investigation
Log Data
Data Sources

Conclusion
Domain 4 Questions

Chapter 5: Domain 5: Security Program Management and Oversight
5.1 Elements of Effective Security Governance
Guidelines and Policies
Standards
Procedures
External Considerations
Monitoring and Revision
Types of Governance Structures
Systems and Data Roles and Responsibilities
5.2 Elements of the Risk Management Process
Risk Identification
Risk Assessment
Risk Analysis
Risk Register
Risk Tolerance
Risk Appetite
Risk Management Strategies
Risk Reporting
Business Impact Analysis
5.3 Third-Party Risk Assessment and Management
Vendor Assessment
Vendor Selection
Vendor Agreement Types
Vendor Monitoring, Questionnaires, and Rules of Engagement
5.4 Elements of Effective Security Compliance
Compliance Reporting
Consequences of Noncompliance
Compliance Monitoring
Privacy
5.5 Types and Purposes of Audits and Assessments
Attestation
Internal Attestation
External Attestation
Penetration Testing
5.6 Implement Security Awareness Practices
Phishing
Anomalous Behavior Recognition
User Guidance and Training
Reporting and Monitoring
Development and Execution

Conclusion
Domain 5 Questions

Appendix A: 12-Week Study Plan for the Exam
Appendix B: Answers to End-of-Chapter Questions
Appendix C: Exam Study Guide

Index